Software-defined osu slice secure space optical interconnection network

Abstract

The application relates to a software-defined OSU slice security space-based optical interconnection network, and belongs to the technical field of optical communication and optical networks; the software-defined OSU slice security space-based optical interconnection network comprises a ground central control station, a high-orbit satellite, a medium-orbit satellite and a low-orbit satellite; the low-orbit satellite is divided into domains, each domain and each low-orbit satellite in the domain has a corresponding ID identification number, low-orbit satellite nodes and medium-orbit satellite nodes are used as variable bandwidth nodes, and the POTN technical system based on the OSU hard slice is adopted; wherein, a transmitter DSP module and a receiver DSP module provide selectable OSU hard channel modes / configurations, the application changes the programmable OSU hard slice bandwidth change adjustment by adopting a modulation format and forward error correction coding, and proposes a security protection method based on the OSU slice through an attack detection, attack processing and recovery mechanism between source satellite nodes and destination satellite nodes.

Description

Technical Field

[0001] This invention belongs to the fields of optical communication technology and optical network technology, and specifically relates to a software-defined OSU slice-based secure space-based optical interconnection network architecture. Background Technology

[0002] Currently, the demand for satellite networks is increasing in applications such as remote sensing, military reconnaissance, and radio astronomy, leading to a growing need for satellite network capacity. Free-space optical communication (FSO), based on wireless laser communication, offers advantages over traditional radio frequency communication, including higher bandwidth and lower power consumption, ensuring stable operation of space-based optical interconnect networks and representing a promising communication technology. Furthermore, space-based optical interconnect networks are primarily based on wireless laser systems, Synchronous Data Host (SDH), and Optical Transport Network (OTN) systems. However, since different services may require different bandwidths, and the bandwidth of a single service request cannot fully utilize the inter-satellite link (ISL) capacity, it is necessary to introduce the latest terrestrial optical transport network system—Packet Enhanced Optical Transport Network (POTN)—into the space-based optical internet to meet future flexible service granularity requirements. However, to date, there has been no research on the architecture and bandwidth adjustment methods of Packet Enhanced Optical Transport Network based on Optical Service Units (OSUs) in space-based optical interconnect networks.

[0003] On the other hand, with the development of space-based optical interconnection technology, due to the instability, openness, and exposure of inter-satellite links, like other communication networks, satellites are currently susceptible to unauthorized access and detection by other satellites. They are vulnerable to denial-of-service (DoS) attacks, interference attacks, spoofing attacks, unauthorized access, malware, and other attacks. Specifically, in harsh natural environments, inter-satellite links and satellite-to-ground links are subject to long-term electromagnetic interference, potentially allowing malicious eavesdropping. Satellite nodes directly exposed in space orbit are vulnerable to illegal interception. Internal routing within orbital satellite networks is also susceptible to malicious attacks, and the attack methods can vary greatly in complexity, destructive potential, and difficulty in detection and countermeasures, making the security problems of space-based optical interconnections increasingly serious. Currently, the industry is focusing on various secure space-based optical interconnection technologies at multiple network layers, including the overall network architecture, physical layer, and network layer. Existing solutions, such as encryption technology, are designed to address external attacks on satellite networks. Since the corresponding keys cannot enter the encrypted satellite network, encryption technology cannot solve the problem of internal attacks on satellite networks. Spectral analysis, which measures the spectral shape of optical signals at the physical layer, can detect various interference attacks. However, if the attack signal does not introduce significant spectral changes, in-band interference may go undetected. Furthermore, this method is impractical unless the analyzer is placed on a space link, making it less effective in detecting eavesdropping attacks. Therefore, the convergence of various heterogeneous networks places higher security demands on traditional routing, network access, and handover strategies, urgently requiring interconnection control to ensure multi-layered security. Currently, there is no simultaneous analysis of optical switching and security performance in software-defined space-based optical interconnect networks, necessitating the development of new functions such as the recognition and autonomous management of space-based optical network transmission and security performance. Summary of the Invention

[0004] The purpose of this invention is to provide a software-defined OSU slicing-based secure space-based optical interconnect network architecture. This architecture implements flexible and adaptive security attack detection based on different space-based optical interconnect network switching granularities. Furthermore, addressing the security requirements of space-based optical interconnect networks, a security protection method based on optical service unit slicing is proposed, through attack detection, attack processing, and recovery mechanisms.

[0005] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0006] A software-defined OSU slicing secure space-based optical interconnection network includes a ground central control station, high-orbit satellites, medium-orbit satellites, and low-orbit satellites; the low-orbit satellites are divided into domains, and each domain and the low-orbit satellites in each domain have a corresponding ID identification number;

[0007] Low-Earth orbit satellites act as access nodes, connecting to adjacent medium-Earth orbit satellites to achieve end-to-end communication, receiving services from ground control stations and transmitting services to the backbone network.

[0008] Medium-Earth orbit satellite nodes serve as service channels converging to high-Earth orbit satellite nodes;

[0009] High-orbit satellites serve as switching nodes in the backbone network, providing forwarding services for space-based optical interconnection networks.

[0010] The ground center node, acting as a software-defined master controller, is used to send service information to high-orbit satellites.

[0011] Both low-Earth orbit (LEO) and medium-Earth orbit (MEO) satellite nodes, as bandwidth-variable nodes, adopt the POTN technology system based on OSU hard slicing. They both include: a transmitter DSP module with adaptive bandwidth variable module, a receiver DSP module with adaptive bandwidth variable module, an analog-to-digital conversion module, a digital-to-analog conversion module, an up-fiber modulation module, and an down-fiber detection module. Among them, the transmitter DSP module and the receiver DSP module provide selectable OSU hard channel modes / configurations, and the OSU hard slice bandwidth can be adjusted programmably by changing the modulation format and forward error correction coding.

[0012] Furthermore, it provides reconfigurable, highly dynamic, flexible, and scalable services for various space-based optical interconnection network scenarios in the application plane;

[0013] The network control plane maintains the connection between satellite nodes in each network time slice of the time-varying network, enabling mutual cooperation between satellite nodes. Specifically, it performs dynamic topology control, dynamic propagation delay control, attack status notification and location, slice bandwidth adjustment between physical nodes, and security analysis of the space-based optical interconnection network.

[0014] The transmission plane includes wireless laser transmission, wireless laser switching, precise time / frequency synchronization, and attack / eavesdropping detection. Wireless laser transmission employs intensity modulation direct detection or field modulation coherent detection. Wireless laser switching is responsible for converting satellite data into a standardized onboard format, configuring network satellite nodes, and transmitting user applications. Medium-Earth orbit (MEO) satellites are equipped with buffer modules to process data pre-transmitted by low-Earth orbit (LEO) satellites. When the buffer capacity is large, the load on MEO satellite nodes will be concentrated on high-Earth orbit (HEO) satellite nodes. LEO satellites transmit optical information to adjacent MEO satellites in real time during allocated time slots, and time / frequency synchronization is achieved under these conditions.

[0015] The source satellite node, together with the data channel service, periodically sends "Hello" packets to the destination satellite node. If a certain number of consecutive "Hello" packets are not received within a given time, the destination satellite node reports an attack. The destination satellite node sends attack notification information to the source satellite node or upstream satellite node through the control layer. The network management system in the network control plane performs attack detection notification and attack location. The corresponding satellite node triggers a service recovery plan, including service switching and restoration.

[0016] The beneficial effects of this invention are as follows:

[0017] This invention addresses the flexible service requirements and varying security levels of application scenarios in space-based optical interconnect networks (SIOs). The main idea is to design a software-defined OSU-POTN architecture within each individual satellite, forming an OSU-sliced ​​secure SIO-based SIO architecture. This optical network architecture fully considers the characteristics of the different services it carries, employing standard management interfaces as well as some open interfaces, allowing for flexible bandwidth adjustments based on user needs. Furthermore, considering the security of SIOs, this architecture ensures rapid response to optical layer attacks. Upon detecting an attack, the Network Management System (NMS) will eliminate it as quickly as possible, restoring and re-establishing reliable communication before the slower upper network layer's attack response mechanisms activate. This addresses a critical information security issue in SIOs. Attached Figure Description

[0018] Figure 1 This invention provides a software-defined OSU-sliced ​​secure space-based optical interconnect network architecture.

[0019] Figure 2 The logical structure of a software-defined OSU slice secure space-based optical interconnect network.

[0020] Figure 3 A flowchart illustrating the information exchange process between nodes of a software-defined OSU slice security satellite. Detailed Implementation

[0021] The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings and examples. However, the embodiments described herein are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0022] The basic idea of ​​this invention is to address the characteristics of resilient and secure space-based optical interconnects, such as frequent topology changes, heterogeneity, significant long-distance optical propagation delays, and high security requirements. The invention designs a secure space-based optical interconnect architecture consisting of a centralized network manager and network satellite nodes. This architecture flexibly adjusts the signal bandwidth according to different service requirements, thereby solving the security problems in existing space-based optical interconnects.

[0023] Each individual satellite is designed with a packet-enhanced optical transport network architecture based on optical service units, forming a software-defined OSU-sliced ​​secure space-based optical interconnect network architecture. This optical network architecture fully considers the characteristics of the different services it carries, employing standard management interfaces as well as some open interfaces and user configurations for flexible bandwidth adjustment of the space-based optical interconnect network. Furthermore, considering the security of the space-based optical interconnect network, the network architecture's response to attacks is such that once an attack is detected, the Network Management System (NMS) will eliminate the attack as quickly as possible and re-establish reliable communication, including:

[0024] The ground control station performs the overall configuration and control of the space-based optical interconnection network. Ground control station nodes communicate with the GEO via laser or microwave links.

[0025] The ground control station acts as the network control plane, and it uses the OpenConfig interface model to communicate with the transport plane. This model handles different white-box network elements to ensure the effectiveness of SDN methods.

[0026] The ground control station enables satellite nodes to collaborate, maintaining adjacency between satellite nodes in each network time slice of the time-varying network. This includes dynamic topology control, dynamic propagation delay control, attack status notification and location, slice bandwidth adjustment between physical nodes, and security analysis of the space-based optical interconnect network.

[0027] The types of satellites involved in the network are mainly LEO satellite nodes along the edge of the Earth and MEO and GEO core satellite nodes. Each satellite node is regarded as an optical switching satellite node, which can provide high capacity and low latency.

[0028] GEO, as a switching node in the ring-shaped backbone network, provides forwarding services for the space-based optical interconnect network and has relatively low bandwidth. Meanwhile, the core network is based on unidirectional, high-bandwidth laser links.

[0029] Each LEO satellite is divided into domains, and each domain has a corresponding ID identification number. A dynamic LEO can act as an access node to an adjacent MEO and send services to the backbone network to achieve end-to-end communication.

[0030] MEO nodes are used to aggregate services to GEO nodes.

[0031] MEO / LEO nodes, as variable bandwidth nodes, mainly include: a transmitter DSP module with adaptive variable bandwidth, a receiver DSP module with adaptive variable bandwidth, an analog-to-digital converter, a digital-to-analog converter, an up-fiber modulation module, and an down-fiber detection module.

[0032] Each source satellite node and the destination satellite node periodically send "Hello" packets and data service packets to perform attack detection and data transmission;

[0033] The network management system in the control plane performs attack detection, notification, and attack location;

[0034] The corresponding satellite node triggers include service switching and recovery plans.

[0035] The following is a reference to the appendix. Figures 1 to 3 To further explain,

[0036] A topology for a software-defined OSU slicing secure space-based optical interconnect network includes a ground-based central control station, high-orbit satellites (GEO), medium-orbit satellites (MEO), and low-orbit satellites (LEO).

[0037] refer to Figure 1 The ground-based central station node, based on the topology of a software-defined OSU-sliced ​​secure space-based optical interconnect network, acts as the central controller, deploying a central control unit to achieve central forwarding control and configure the overall space-based optical interconnect network. The ground-based central station node communicates with GEOs via laser or microwave links. The types of satellites involved in the network mainly include LEO satellite nodes along the Earth's edge and core satellite nodes between MEOs and GEOs. Each satellite node is considered a switching satellite node in the optical transport network. GEOs, as switching nodes in the ring-shaped backbone network, provide forwarding services for the space-based optical interconnect network. Simultaneously, the core network is based on unidirectional, high-bandwidth laser links. MEO nodes aggregate LEO services to GEO nodes. Dynamically, an LEO acts as an access node to an adjacent MEO, sending services to the backbone network to achieve end-to-end communication. Compared to high-orbit and medium-orbit satellites, there are a large number of low-orbit satellites. Therefore, this invention divides each LEO satellite into domains, and each domain has a corresponding ID identification number, such as LEO(i,j), where i is the domain number and j is the j-th LEO satellite node in domain i.

[0038] refer to Figure 2 A logical structure for a software-defined OSU slice-based secure space-based optical interconnect network that can provide high capacity and low latency includes three planes: the application plane, the network control plane, and the transport plane.

[0039] Specifically, the application plane provides reconfigurable, highly dynamic, flexible, and scalable services for various space-based optical interconnect network scenarios. The interface between the application plane and the network control plane is a northbound RESTful interface.

[0040] The network control plane maintains connectivity between satellite nodes in each network time slice of the time-varying network, enabling cooperation among them. Specifically, it performs dynamic topology control, dynamic propagation delay control, attack status notification and location, slice bandwidth adjustment between physical nodes, and security analysis of the space-based optical interconnect network. The network control plane and transport plane use an OpenConfig interface model, which employs SDN methods to handle different white-box network elements.

[0041] The transport plane primarily includes wireless laser transmission, wireless laser switching, precise time / frequency synchronization, and attack / eavesdropping detection. Wireless laser transmission can employ intensity modulation direct detection or field modulation coherent detection. Wireless laser switching is responsible for converting satellite data into a standardized onboard format, configuring network satellite nodes, and transmitting user applications. MEOs are equipped with buffer modules to handle data pre-sent by LEOs; when the buffer capacity is large, the load on MEO nodes will converge to GEO nodes. LEOs transmit optical information to adjacent MEOs in real-time during allocated time slots, achieving time / frequency synchronization in this process. Specifically, the source satellite node, along with data channel services, periodically sends "Hello" packets to the destination satellite node; if a certain number of consecutive "Hello" packets are not received within a given time, the destination satellite node reports an attack; the destination satellite node sends attack notification information to the source satellite node or upstream satellite node through the control layer; the network management system of the control plane performs attack detection notification and attack localization; the corresponding satellite node triggers a service recovery scheme, including service switching and restoration. Due to the high-speed data in the optical channel, attack recovery is strictly time-dependent.

[0042] refer to Figure 3 This paper describes the node interaction process of a secure space-based optical interconnect network based on software-defined OSU slicing. To meet various service and user requirements, the satellite system introduces OSU-based network hard slicing to improve resource efficiency and flexibility. Through OSU network hard slicing, the shared physical infrastructure is divided into multiple end-to-end network hard slicing instances. Each end-to-end network OSU slicing instance is a hard pipe, and its independent programmable network architecture is tailored to meet end-to-end service level agreements.

[0043] (1) The ground center node acts as a software-defined master controller to control the GEO nodes;

[0044] (2) GEO nodes act as proxy devices;

[0045] (3) The MEO / LEO nodes, as bandwidth-variable nodes, mainly adopt the POTN technology system based on OSU hard slicing, which mainly includes: a transmitter DSP module with adaptive bandwidth variable module, a receiver DSP module with adaptive bandwidth variable module, an analog-to-digital conversion module, a digital-to-analog conversion module, an up-fiber modulation module, and an down-fiber detection module. Among them, the transmitter DSP module and the receiver DSP module with adaptive bandwidth variable module provide different selectable OSU hard channel modes / configurations, and the OSU hard slice bandwidth can be adjusted programmably by changing the modulation format and forward error correction coding (FEC).

[0046] The specific security protocol process is as follows:

[0047] (1) Along with the data channel service, the source satellite node periodically sends "Hello" packets to the destination satellite node;

[0048] (2) If the destination node fails to receive a certain number of consecutive "Hello" packets within a given time period, the destination satellite node will report an attack.

[0049] (3) The target satellite node sends attack notification information to the source satellite node or upstream satellite node through the control layer;

[0050] (4) The network management system in the control plane performs attack detection notification and attack location;

[0051] (5) The corresponding satellite node triggers a service recovery plan that includes service switching and restoration. Due to the data rate in the optical channel, attack recovery is strictly time-dependent.

[0052] In summary, this invention implements a software-defined OSU-sliced ​​secure space-based optical network architecture. It achieves security protection by addressing different service granularities and security levels through a simple and easily implemented method, and by flexibly adjusting OSU hard slices. The above descriptions are merely specific embodiments of this invention, but the scope of protection is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this invention should be included within the scope of protection of this invention.

Claims

1. A software-defined OSU slicing secure space-based optical interconnection network, comprising a ground central node, high-orbit satellites, medium-orbit satellites, and low-orbit satellites; characterized in that, Low-Earth orbit satellites are divided into domains, and each domain and each low-Earth orbit satellite in each domain has a corresponding ID identification number; Low-Earth orbit satellites act as access nodes, connecting to adjacent medium-Earth orbit satellites to achieve end-to-end communication, receiving services from ground central nodes and sending services to the backbone network. Medium-Earth orbit (MEO) satellite nodes aggregate services from low-Earth orbit (LEO) satellites to high-Earth orbit (HEO) satellite nodes; High-orbit satellites serve as switching nodes in the backbone network, providing forwarding services for space-based optical interconnection networks. The ground center node, acting as a software-defined master controller, is used to send service information to high-orbit satellites. Both low-Earth orbit (LEO) and medium-Earth orbit (MEO) satellite nodes, as bandwidth-variable nodes, adopt the POTN technology system based on OSU hard slicing. They both include: a transmitter DSP module with adaptive bandwidth variable module, a receiver DSP module with adaptive bandwidth variable module, an analog-to-digital conversion module, a digital-to-analog conversion module, an up-fiber modulation module, and an down-fiber detection module. Among them, the transmitter DSP module and the receiver DSP module provide selectable OSU hard channel modes / configurations, and the bandwidth of the OSU hard slice can be programmably adjusted by changing the modulation format and forward error correction coding.

2. The software-defined OSU slicing secure space-based optical interconnection network according to claim 1, characterized in that, The application plane supports scenario reconstruction, dynamic topology adaptation, flexible service scheduling, and scalable service functions for space-based optical interconnection networks. The network control plane maintains the connection between satellite nodes in each network time slice of the time-varying network, enabling mutual cooperation between satellite nodes. Specifically, it performs dynamic topology control, dynamic propagation delay control, attack status notification and location, slice bandwidth adjustment between physical nodes, and security analysis of the space-based optical interconnection network. The transmission plane includes wireless laser transmission, wireless laser switching, time / frequency synchronization, and attack / eavesdropping detection. Wireless laser transmission uses intensity modulation direct detection or field modulation coherent detection. Wireless laser switching is responsible for converting satellite data into a standardized onboard format, configuring network satellite nodes, and transmitting user applications. Medium-Earth orbit (MEO) satellites are equipped with buffer modules to process data sent in advance by low-Earth orbit (LEO) satellites. When the buffer module has a large amount of buffered data, the load on MEO satellite nodes will be concentrated on high-Earth orbit (HEO) satellite nodes. LEO satellites send optical information to adjacent MEO satellites in real time during their allocated time slots, and complete time / frequency synchronization between LEO and MEO satellites during this period. The source satellite node, together with the data channel service, periodically sends "Hello" packets to the destination satellite node; If a certain number of consecutive "Hello" packets are not received within a given time, the destination satellite node sends an attack notification message to the source satellite node or upstream satellite node through the control layer, and reports the attack to the network management system of the network control plane. The network management system in the network control plane performs attack detection notifications and attack location; satellite nodes affected by the attack trigger service recovery plans, including service switching and restoration, based on the location results from the network management system.

Images