A high-security level private network-public network converged optical network based on software definition

Abstract

The application discloses a high-security-level private network and public network fusion optical network based on software definition, and belongs to the technical field of optical communication and optical network; the application considers the control and management of various private network and public network fusion network equipment, and proposes a logical decoupling scheme for the control plane and the data plane of the software-defined private network and public network fusion optical network. Specifically, a unified software-defined network (SDN) controller is designed to effectively control optical network slice transceivers and optical switching nodes. In addition, performance monitoring is performed in different optical network failure scenarios to evaluate the impact of node and link failures. The results generated by the optical performance monitoring provide information to assist in improving optical network planning or improving the recovery performance of the optical network.

Description

Technical Field

[0001] This invention belongs to the field of optical communication and optical network technology, and in particular to a software-defined, high-security-level private network and public network converged optical network. Background Technology

[0002] Currently, to strongly support emerging industries such as 5G, big data, data centers, and the Internet of Things, optical communication, with its advantages of high speed, large capacity, long transmission distance, and resistance to electromagnetic interference, has been widely used in public network access, backbone transmission, data center interconnection, and inter-satellite links, meeting the ever-increasing demand for network bandwidth. At the same time, the communication needs of private and public networks converging are constantly increasing. The data volume of various private networks is increasing dramatically, making high-data-rate optical networks crucial for development. Optical network technology systems are mainly divided into those based on Synchronous Digital Hierarchy (SDH), Optical Transport Network (OTN), and Packet Enhanced Optical Transport Network (POTN). Effectively implementing the control architecture of optical networks and deploying network services, such as end-to-end services, on a single control plane to uniformly verify end-to-end latency and control overhead is essential.

[0003] On the other hand, optical communication system failures caused by deliberate attacks affect the entire optical network. Furthermore, attacks can propagate to many users and different parts of the network, significantly increasing the complexity of optical network attack detection and localization. Moreover, in IP / optical multilayer optical networks that integrate private and public networks, the different control methods of the IP and optical layers hinder end-to-end service provisioning. Therefore, researching a unified control plane for multilayer optical networks and ensuring high security levels in dedicated multilayer optical networks is a crucial issue for academia, equipment manufacturers, and operators. Summary of the Invention

[0004] In view of this, this invention proposes a software-defined, high-security converged optical network architecture for private and public networks. To facilitate understanding of the method, the principle of this invention is described below. The basic idea of ​​this invention is to address the practical deployment of private and public optical networks, considering the control and management of network equipment in various military units, and propose a logical decoupling scheme for the control and transport planes of Software-Defined Optical Network (SDON). Specifically, based on a distributed control plane of Generalized Label Switching (GMPLS) / Intelligent Switched Optical Network (ASON) and a centralized control plane based on OpenConfig, a unified software-defined network (SDN) controller is designed to effectively control optical network slice transceivers and optical switching nodes. Furthermore, performance monitoring is performed in different optical network failure scenarios to assess the impact of node and link failures. The results generated by optical performance monitoring provide information to assist in improving optical network planning or enhancing the recovery performance of the optical network.

[0005] The objective of this invention is achieved as follows:

[0006] A software-defined, high-security private-public converged optical network mainly consists of an application plane, a control plane, and a transport plane.

[0007] The application plane provides basic optical network management services. It sends information to the main controller of the control plane through the northbound interface and receives information from the main controller to analyze the relevant results.

[0008] The optical network controller in the control plane provides basic control functions for private and public optical networks, including end-to-end cross-domain path calculation, intra-domain path calculation, cross-domain bandwidth resource management and network slicing, connection service or network element configuration, and attack monitoring of each node and location and control of the attack source in the event of an attack. The control plane interacts downwards with elements of private and public optical networks in the transport plane through the OpenConfig protocol. Based on network conditions / requirements, the control plane configures the capacity of each programmable and reconfigurable SDH / OTN / POTN pipeline hard slice, Mach-Zehnder modulator bias, and parameters of bandwidth-variable transceivers such as forward error correction coding, bit and power loading algorithms, and equalization types through an SDN agent. By adopting a vendor-independent OpenConfig data model, the SDN agent reconfigures / programs equipment forms from different vendors.

[0009] The transport plane mainly comprises the infrastructure of converged dedicated optical networks and public optical networks. Within this infrastructure, targets for attack include lasers, photodetectors, optical filters, optical switches, couplers, optical regenerators, and optical amplifiers. Programmable components include the center wavelength, output power, and operating mode of tunable lasers; digital-to-analog converters (DACs) / analog-to-digital converters (ADCs); transceiver digital signal processing units; bandwidth, center wavelength, phase, and attenuation at each port of wavelength switching switches; and power and operating mode of optical amplifiers. Each user terminal will be mapped to a slice of a bandwidth-variable transceiver and assigned to different line ports.

[0010] Furthermore, the dedicated optical network mainly includes a dedicated optical network based on POTN technology (1), a dedicated optical network based on SDN technology (2), a dedicated optical network based on OTN technology (3 and 5), and a dedicated optical network based on a hybrid SDN and OTN technology system (4).

[0011] Among them, the dedicated optical network (1) based on the POTN technology system is the central control center of each dedicated network. The dedicated optical network (1) based on the POTN technology system, the dedicated optical network (2) based on the SDN technology system, the dedicated optical network (3 and 5) based on the OTN technology system, and the dedicated optical network (4) based on the hybrid SDN and OTN technology system are interconnected with the public optical network through optical fiber links.

[0012] Optical fiber interconnection between a dedicated optical network based on SDN technology (2), a dedicated optical network based on OTN technology (3 and 5), and a dedicated optical network based on a hybrid SDN and OTN technology (4) and a public optical network; in the optical network that integrates private and public networks, different security hard slicing strategies are specifically set for each sub-dedicated network domain to perform information interaction.

[0013] Furthermore, the dedicated optical networks based on SDH technology adjust the hard pipes of Virtual Containers (VCs) 4 and VC12; the dedicated optical networks based on OTN technology adjust the latest hard pipes based on Optical Service Units (OSUs); the dedicated optical networks based on POTN technology adjust the hard pipes of OSUs and packet-based soft pipes; while public optical networks adopt and adjust OSU-based hard pipes. Under the above different optical network technologies, each user terminal will be mapped to a slice of a variable bandwidth transceiver and assigned to different line ports.

[0014] Compared with the prior art, the present invention has the following advantages:

[0015] The architecture of this invention can be generalized, thereby simplifying network manageability, improving network flexibility and security, and reducing operating expenses (OPEX) and capital expenditures (CAPEX). For the deployment of dedicated and public optical networks, a logical decoupling scheme for the control and data planes of Software-Defined Optical Networks (SDON) is proposed. Specifically, a unified SDN controller is designed based on a distributed control plane of Generalized Label Switching (GMPLS) / Intelligent Switched Optical Networks (ASON) and a centralized control plane based on OpenConfig, for controlling optical network slice transceivers and optical switching nodes. Furthermore, performance monitoring is performed to assess the impact of node and link failures in different optical network failure scenarios. The results generated by optical performance monitoring provide information to assist in improving optical network planning or enhancing optical network recovery performance. Attached Figure Description

[0016] Figure 1 This invention relates to an optical communication network architecture based on the convergence of private and public networks.

[0017] Figure 2 This is a block diagram of the logical structure of a software-defined, high-security private network / public network converged optical network.

[0018] Figure 3 Target for software-defined adjustment of private and public network converged optical network architecture Detailed Implementation

[0019] The technical solution of this patent will be further explained in more detail below with specific examples.

[0020] Reference Figure 1 The optical communication network architecture of this invention, based on the convergence of private and public networks, mainly consists of a dedicated optical network and a public optical network. The dedicated optical network primarily comprises a dedicated optical network 1 based on POTN technology, a dedicated optical network 2 based on SDN technology, dedicated optical networks 3 and 5 based on OTN technology, a dedicated optical network 4 based on a hybrid SDN and OTN technology architecture, and a public optical network.

[0021] In this diagram, dedicated optical networks 1 through 5 represent the physical areas of each dedicated network. Dedicated optical network 1 serves as the central control center for all dedicated networks. Dedicated optical networks 1-5 are interconnected with the public optical network via fiber optic links. Each dedicated optical network 2-5 is also interconnected with the public optical network via fiber optic cables. Figure 1 Medium gray lines represent fiber optic interconnects between dedicated optical networks that need to cross public optical networks. Figure 1 The black lines represent fiber optic interconnections between dedicated optical networks that do not cross public optical networks; the gray lines (outermost lines) in the diagram represent these interconnections. Because dedicated optical networks have higher security requirements than public optical networks, they are therefore... Figure 1 In the aforementioned optical network that integrates private and public networks, different security policies need to be specifically configured for each sub-private network domain when exchanging information.

[0022] This invention presents a software-defined, high-security private-public converged optical network architecture, primarily composed of an SDN application plane, a control plane, and a transport plane. Classic RESTful serves as the northbound interface between the application plane and the control plane. Specifically, the application plane interacts with the main controller of the control plane via RESTful to manage services.

[0023] Within the controller of the optical network control plane, several components provide the necessary abstractions to offer basic optical network control, such as end-to-end cross-domain path computation (PCE), intra-domain path computation, cross-domain bandwidth resource management and network slicing, connection service or network element configuration, and attack monitoring and location control. Furthermore, the implementation of these functions is particularly crucial in multi-vendor optical networks. Specifically, the attack monitoring and location in this invention is performed in a centralized control mode, where the main controller monitors each node and locates the attack source in the event of an attack.

[0024] The southbound interface of the optical network uses the industry-proven OpenConfig protocol to interact with elements of the underlying transport plane. This invention designs a dedicated out-of-band communication channel to proxy the configuration and control of OpenConfig bandwidth-variable transceivers, thereby establishing the interaction of the southbound interface protocol. Each bandwidth-variable transceiver can be viewed as an OpenConfig terminal device with N user input ports and corresponding M optical channel output ports. On the other hand, due to the adoption of SDN, different programmable and reconfigurable parameters can be modified according to network conditions / requirements. Specifically, the SDN proxy configures the capacity of each SDH / OTN / POTN pipeline hard slice, Mach-Zehnder modulator (MZM) bias, forward error correction coding (FEC), bit and power loading algorithms, and equalization types of the bandwidth-variable transceivers. By adopting a vendor-independent OpenConfig data model, the SDN proxy reconfigures / programs equipment configurations from different vendors.

[0025] This invention relates to an optical network transport plane that integrates private and public networks. Considering security performance, the main attackable device nodes include lasers, photodetectors, optical filters, optical switches, couplers, optical regenerators, and optical amplifiers. Specifically, the programmable elements of this invention include the center wavelength, output power, and operating mode of a tunable laser; digital-to-analog converters (DACs) / analog-to-digital converters (ADCs); a transceiver digital signal processing unit (DSP); the bandwidth, center wavelength, phase, and attenuation of each port of the wavelength conversion switch; and the power and operating mode of the optical amplifier. Hardware abstraction control and adaptation are implemented between each dedicated optical network 1-5 and the public optical network and the controller. Flow tables are used to perform corresponding control operations between the controller and each dedicated optical network and the public optical network.

[0026] Reference Figure 3 When information is exchanged between various dedicated optical networks, there are two scenarios: those that require crossing public optical networks and those that do not. When dedicated optical networks exchange information, it is necessary to first monitor the performance of optical network nodes and links and locate attacks. In addition, when cross-domain public optical network interconnection is required, a hard isolation scheme for dedicated services slicing is still needed.

[0027] Reference Figure 3 Specifically, dedicated optical networks based on SDH technology adjust the hard pipes of Virtual Containers (VC) 4 and VC12; dedicated optical networks based on OTN technology adjust the latest hard pipes based on Optical Service Units (OSUs); dedicated optical networks based on POTN technology adjust the hard pipes of OSUs and packet-based soft pipes; while public optical networks adopt and adjust OSU-based hard pipes.

[0028] In summary, this invention realizes a software-defined, high-security converged optical network architecture for private and public networks. It implements information interaction scenarios for private and public optical networks with different technical systems, as well as different link monitoring and security protection methods through a simple and easy-to-implement approach.

[0029] The above description is merely a specific implementation of the present invention in the embodiments, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the protection scope of the present invention.

Claims

1. A software-defined, high-security-level private-public converged optical network, characterized in that: This includes the application plane, control plane, and transport plane; The application plane provides basic optical network management services. It sends information to the main controller of the control plane through the northbound interface and receives information from the main controller to analyze the relevant results. The optical network controller in the control plane provides basic control functions for private and public optical networks, including end-to-end cross-domain path calculation, intra-domain path calculation, cross-domain bandwidth resource management and network slicing, connection service or network element configuration, and attack monitoring of each node and location of the attack source in the event of an attack. This attack monitoring and location is performed in a centralized control mode, where the optical network controller monitors each node and locates the attack source in the event of an attack. The control plane interacts downwards with elements of private and public optical networks in the transport plane via the OpenConfig protocol. Based on network conditions / requirements, it configures the capacity of each programmable and reconfigurable SDH / OTN / POTN pipeline hard slice and the Mach-Zehnder modulator bias through an SDN agent. When private optical networks exchange information, it first monitors the performance of optical network nodes and links and locates attacks. When interconnecting public optical networks across domains, it implements a hard isolation scheme for slicing private services. The parameters of the bandwidth-variable transceiver include forward error correction coding, bit and power loading algorithms, and equalization type. Using a vendor-independent OpenConfig data model, the SDN agent reconfigures / programs equipment from different vendors. The transport plane primarily comprises the infrastructure of converged dedicated optical networks and public optical networks. Within this infrastructure, targets for attack include lasers, photodetectors, optical filters, optical switches, couplers, optical regenerators, and optical amplifiers. Programmable components include tunable lasers with adjustable center wavelength, output power, and operating modes; digital-to-analog converters (DACs) / analog-to-digital converters (ADCs); transceiver digital signal processing units; bandwidth, center wavelength, phase, and attenuation at each port of wavelength switching switches; and power and operating modes of optical amplifiers. Each user terminal will be mapped to a slice of a bandwidth-variable transceiver and assigned to different line ports. The dedicated optical networks mainly include dedicated optical networks based on POTN technology (1), dedicated optical networks based on SDH technology (2), dedicated optical networks based on OTN technology (3 and 5), and dedicated optical networks based on a hybrid SDH and OTN technology system (4). Among them, the dedicated optical network (1) based on the POTN technology system is the general control center of each dedicated network; the dedicated optical network (1) based on the POTN technology system, the dedicated optical network (2) based on the SDH technology system, the dedicated optical network (3 and 5) based on the OTN technology system, and the dedicated optical network (4) based on the hybrid SDH and OTN technology system are interconnected with the public optical network through optical fiber links. Optical fiber interconnection between a dedicated optical network based on SDH technology (2), a dedicated optical network based on OTN technology (3 and 5), and a dedicated optical network based on a hybrid SDH and OTN technology (4) and a public optical network; in the optical network that integrates private and public networks, different security hard slicing strategies are specifically set for each sub-dedicated network domain to perform information interaction. Among them, dedicated optical networks based on SDH technology adjust the hard pipes of Virtual Containers (VC) 4 and VC12; dedicated optical networks based on OTN technology adjust the latest hard pipes based on Optical Service Units (OSUs); dedicated optical networks based on POTN technology adjust the hard pipes of OSUs and packet-based soft pipes; while public optical networks adopt and adjust OSU-based hard pipes.

Images