A secure communication transmission method and system based on wavelength division multiplexing

Abstract

The present invention relates to the field of information transmission management, and discloses a wavelength division multiplexing-based secure communication transmission method and system, comprising: a plurality of communication transmission modules, each of which comprises: a transmitting end and a receiving end; an encryption and decryption module encrypts the transmitting end and decrypts the receiving end; a communication monitoring management module comprises a performance analysis unit, a security analysis unit and a correction management unit; the performance of the signal transmission of the current communication transmission module is analyzed in real time by the performance analysis unit and a performance index is generated; the risk of the signal transmission of the current communication transmission module is analyzed by the security analysis unit and a risk index is generated; the risk index is calculated by the correction management unit, the risk index is compared with a risk interval preset by the system, and corresponding corrective measures are taken for the current communication transmission module according to the comparison result.

Description

Technical Field

[0001] The present invention relates to the field of information transmission management, and in particular to a secure communication transmission method and system based on wavelength division multiplexing. Background Art

[0002] Wavelength division multiplexing, referred to as WDM, allows multiple optical signals of different wavelengths to be transmitted simultaneously on the same optical fiber. The basic principle is to combine two or more optical carrier signals of different wavelengths to carry various information at the transmitting end through a multiplexer, also known as a combiner, and couple them to the same optical fiber of the optical line for transmission; at the receiving end, the optical carriers of various wavelengths are separated by a demultiplexer, also known as a wavelength splitter or demultiplexer, and then further processed by the optical receiver to restore the original signal. Wavelength division multiplexing technology can carry multiple wavelengths, or channels, on one optical fiber, thereby converting one optical fiber into multiple "virtual" fibers. Therefore, wavelength division multiplexing technology has become the main means of expanding the capacity of current optical fiber communication networks.

[0003] Existing communication transmission methods involve confidential data, and wavelength division multiplexing technology only transmits through one optical fiber. Therefore, once one wavelength of the optical carrier signal is cracked and the information is intercepted, there is a risk of leakage of other wavelength optical carrier signals. Before the information is intercepted, there are generally multiple attempts to attack. The existing communication transmission system adopts relatively independent monitoring of the attempted behavior and the operating performance parameters of the system itself, resulting in processing after the danger is discovered, and the protection data has been leaked. Therefore, an improved method that can predict the danger of communication transmission is needed. Summary of the invention

[0004] The purpose of the present invention is to provide a secure communication transmission method and system based on wavelength division multiplexing to solve the above technical problems.

[0005] The purpose of the present invention can be achieved through the following technical solutions:

[0006] A secure communication transmission system based on wavelength division multiplexing, comprising:

[0007] A plurality of communication transmission modules, each of the communication transmission modules comprising:

[0008] Transmitter: includes a light source, a transmitter and a wavelength division multiplexer. The light source is used to emit optical carriers of different wavelengths. The transmitter and wavelength division multiplexer are used to convert electrical signals into optical signals and multiplex multiple optical signals into one signal for transmission.

[0009] Receiving end: Based on the wavelength division multiplexer and receiver, the optical signal output by the transmitting end is demultiplexed into various wavelengths, and the optical signal is converted into an electrical signal;

[0010] Encryption and decryption module, used for encrypting the transmitter and decrypting the receiver;

[0011] Communication monitoring and management module, including performance analysis unit, safety analysis unit and correction management unit;

[0012] The performance analysis unit is used to perform real-time analysis on the performance of signal transmission of the current communication transmission module and generate performance indicators;

[0013] The security analysis unit is used to analyze the risk of signal transmission of the current communication transmission module and generate a risk index;

[0014] The correction management unit is used to calculate the danger index through the formula: M=U*a+F*b, compare the danger index with the danger interval preset by the system, and take corresponding corrective measures for the current communication transmission module according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients.

[0015] As a further technical solution, the working process of the performance analysis unit is:

[0016] Obtain performance parameters such as availability index, delay index, communication transmission rate, bit error rate and optical power in real time;

[0017] By formula:

[0018] Calculate and obtain the performance index U;

[0019] Among them, σ is the dimensionless coefficient, μ i is the preset conversion coefficient, Q i0 is the preset threshold of the i-th performance parameter, Q i is the value of the i-th performance parameter, Q iz It is the reference value of the ith performance parameter, which is determined based on historical data and experimental data.

[0020] As a further technical solution, the working process of the performance analysis unit also includes:

[0021] The performance indicator U is compared with the preset threshold U th Make comparisons;

[0022] If U ≥ U th , then the performance of the current signal transmission is judged to be poor, and the weight coefficient a is adjusted;

[0023] If U<U th , then the performance of the current signal transmission is judged to be good, and the weight coefficient a is kept unchanged;

[0024] The process of adjusting the weight coefficient a is:

[0025] Obtain the performance index change data U(t) over time within a working cycle and the reference change data U' of the performance index over time within a working cycle based on historical data fitting z (t);

[0026] By formula: Calculate and obtain the deviation coefficient X;

[0027] Among them, θt is the reference performance index of the current working cycle obtained based on historical data, t0 is the duration of a working cycle, and t i ,t i +t0 is the start and end time of a working cycle;

[0028] By formula: Calculate and obtain the adjusted weight coefficient a';

[0029] In the formula, a is the current weight coefficient, X th The deviation threshold preset for the system.

[0030] As a further technical solution, the working process of the security analysis unit is:

[0031] By formula: Calculate and obtain the risk index F;

[0032] Among them, R is the stability coefficient, A is the number of unauthorized access attempts in one working cycle, B is the number of eavesdropping attempts on the transmitted data in one working cycle, C is the number of unauthorized modifications to the data in one working cycle, β1, β2, β3 are conversion coefficients, It is a control coefficient formulated based on historical data and experimental data, R<1.

[0033] As a further technical solution, the stability coefficient

[0034]

[0035] In the formula, are the means of the number of unauthorized access attempts, the number of eavesdropping attempts on transmitted data, and the number of unauthorized modifications to data in the jth working cycle, respectively. n is the total number of working cycles, j∈[1,n], ρ1, ρ2, ρ3 are preset proportional coefficients.

[0036] As a further technical solution, the working process of the security analysis unit also includes:

[0037] The calculated risk index F is compared with the preset risk interval Make comparisons;

[0038] like Then keep the current weight coefficient b unchanged;

[0039] like Then 2b will be used as the adjusted weight coefficient;

[0040] like Then it will be as the adjusted weight coefficient.

[0041] As a further technical solution, the process of taking corresponding corrective measures according to the comparison results is:

[0042] If M∈[M min , M max ], then an early warning will be issued to the system backend management personnel on the current communication transmission module;

[0043] If M>M max , then isolate the current communication transmission module;

[0044] If M<M max , then keep the current communication transmission module running normally.

[0045] As a further technical solution, the encryption and decryption module adopts a symmetric key encryption algorithm or an asymmetric key encryption algorithm;

[0046] The working process of the encryption and decryption module is as follows:

[0047] Step 1: Generate secret keys by randomly generating a set of secret keys using a pre-trained neural network model;

[0048] Step 2: key exchange, exchanging the key to the transmitter and the receiver;

[0049] Step 3: Encryption, using the secret key to encrypt the data and convert it into an electrical signal;

[0050] Step 4: Decryption, convert the electrical signal into data and then use the secret key to decrypt it.

[0051] A secure communication transmission method based on wavelength division multiplexing, the method comprising the following steps:

[0052] S100, encrypting the data to be transmitted using an encryption algorithm;

[0053] S200, converting the encrypted data into an electrical signal, converting the electrical signal into an optical signal, and multiplexing a plurality of optical signals into one signal for transmission;

[0054] S300, demultiplexing the optical signal into various wavelengths, converting the optical signal into an electrical signal, and then converting the optical signal into data;

[0055] S400, decrypting the received data using an encryption algorithm;

[0056] S500. Perform real-time analysis on the performance of signal transmission and generate performance indicators through the performance analysis unit; analyze the risk of signal transmission and generate risk indicators through the safety analysis unit; calculate the danger index through the formula M=U*a+F*b in the correction management unit, compare the danger index with the danger interval preset by the system, and take corresponding corrective measures according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients.

[0057] Beneficial effects of the present invention:

[0058] The data transmitted in the communication transmission module is encrypted by the encryption and decryption module, so as to keep the data confidential and improve the security of the data; at the same time, each communication transmission module is monitored by the communication monitoring and management module to obtain the performance index and risk index of each communication transmission module in real time. By calculating the danger index, the risk connection encountered by each communication transmission module during operation and operation can be established. The comprehensive performance index and risk index are found to have potential dangers in each communication transmission module, and the danger index can be compared with the danger interval preset by the system. According to the comparison result, corresponding corrective measures are taken for the current communication transmission module. Obviously, when it falls into the danger interval, it means that the danger is within the normal range, but has not reached an excessively dangerous state. Therefore, it is necessary to warn the system background management personnel of the current communication transmission module so as to carry out subsequent safety inspections in time to ensure that the current communication transmission channel is in an efficient and stable state; when it exceeds the danger interval, it means that the current communication transmission channel is in an excessively dangerous state and may fail at any time. Therefore, it is necessary to isolate the current communication transmission module in time to prevent the impact on the other communication transmission channels in good operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] The present invention will be further described below in conjunction with the accompanying drawings.

[0060] Figure 1 is a system block diagram of the present invention;

[0061] Figure 2 It is a diagram of the method steps of the present invention. DETAILED DESCRIPTION

[0062] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0063] See also Figure 1-Figure 2 As shown, the present invention is a secure communication transmission system based on wavelength division multiplexing, comprising:

[0064] A plurality of communication transmission modules, each of the communication transmission modules comprising:

[0065] Transmitter: includes a light source, a transmitter and a wavelength division multiplexer. The light source is used to emit optical carriers of different wavelengths. The transmitter and wavelength division multiplexer are used to convert electrical signals into optical signals and multiplex multiple optical signals into one signal for transmission.

[0066] Receiving end: Based on the wavelength division multiplexer and receiver, the optical signal output by the transmitting end is demultiplexed into various wavelengths, and the optical signal is converted into an electrical signal;

[0067] Encryption and decryption module, used for encrypting the transmitter and decrypting the receiver;

[0068] Communication monitoring and management module, including performance analysis unit, safety analysis unit and correction management unit;

[0069] The performance analysis unit is used to perform real-time analysis on the performance of signal transmission of the current communication transmission module and generate performance indicators;

[0070] The security analysis unit is used to analyze the risk of signal transmission of the current communication transmission module and generate a risk index;

[0071] The correction management unit is used to calculate the danger index through the formula: M=U*a+F*b, compare the danger index with the danger interval preset by the system, and take corresponding corrective measures for the current communication transmission module according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients.

[0072] The process of taking corresponding corrective measures based on the comparison results is:

[0073] If M∈[M min , M max ], then an early warning will be issued to the system backend management personnel on the current communication transmission module;

[0074] If M>M max , then isolate the current communication transmission module;

[0075] If M<M max , then keep the current communication transmission module running normally.

[0076] In this embodiment, the data transmitted in the communication transmission module is encrypted by the encryption and decryption module, so as to keep the data confidential and improve the security of the data; at the same time, each communication transmission module is monitored by the communication monitoring and management module to obtain the performance index and risk index of each communication transmission module in real time, and the risk index is calculated by the formula M=U*a+F*b, so as to establish the risk relationship between each communication transmission module and the risk encountered during operation, and find out the potential danger of each communication transmission module by combining the performance index and the risk index, and compare the risk index with the risk interval preset by the system, and take corresponding corrective measures for the current communication transmission module according to the comparison result. Obviously, when M∈[M min , M max ], indicating that the danger is within the normal range, but has not reached an excessively dangerous state. Therefore, it is necessary to warn the system backend management personnel about the current communication transmission module so as to conduct subsequent safety inspections in a timely manner and ensure that the current communication transmission channel is in an efficient and stable state; when M>M max , indicating that the current communication transmission channel is in an overly dangerous state and may fail at any time. Therefore, it is necessary to isolate the current communication transmission module in time to prevent it from affecting other communication transmission channels in good operating condition.

[0077] The working process of the performance analysis unit is as follows:

[0078] Obtain performance parameters such as availability index, delay index, communication transmission rate, bit error rate and optical power in real time;

[0079] By formula:

[0080] Calculate and obtain the performance index U;

[0081] Among them, σ is the dimensionless coefficient, μ i is the preset conversion coefficient, Q i0 is the preset threshold of the i-th performance parameter, Q i is the value of the i-th performance parameter, Q iz is the reference value of the i-th performance parameter, which is determined based on historical data and experimental data. It should be noted that the conversion coefficient μ corresponding to the availability index, communication transmission rate, and optical power is i μ i -1 .

[0082] The working process of the performance analysis unit also includes:

[0083] The performance indicator U is compared with the preset threshold U th Make comparisons;

[0084] If U ≥ U th, then the performance of the current signal transmission is judged to be poor, and the weight coefficient a is adjusted;

[0085] If U<U th , then the performance of the current signal transmission is judged to be good, and the weight coefficient a is kept unchanged;

[0086] The process of adjusting the weight coefficient a is:

[0087] Obtain the performance index change data U(t) over time within a working cycle and the reference change data U' of the performance index over time within a working cycle based on historical data fitting z (t);

[0088] By formula: Calculate and obtain the deviation coefficient X;

[0089] Among them, θt is the reference performance index of the current working cycle obtained based on historical data, t0 is the duration of a working cycle, and t i ,t i +t0 is the start and end time of a working cycle;

[0090] By formula: Calculate and obtain the adjusted weight coefficient a';

[0091] In the formula, a is the current weight coefficient, X th The deviation threshold preset for the system.

[0092] In this embodiment, a method for analyzing the performance of a current communication transmission module is provided. Specifically, the availability index, delay index, communication transmission rate, bit error rate and optical power in the performance parameters are obtained; and then the formula is used: The performance index U is calculated. Obviously, if the availability index, delay index, communication transmission rate, bit error rate and optical power deviate from the corresponding preset threshold, it means that the performance of the current communication transmission module has hidden dangers. Then the performance index U is compared with the preset threshold U. th Compare; if U ≥ U th , then the performance of the current signal transmission is judged to be poor, and the weight coefficient a is adjusted; if U<U th , then the performance of the current signal transmission is judged to be good, and the weight coefficient a is kept unchanged;

[0093] Furthermore, firstly, the performance index variation data U(t) within a working cycle and the reference variation data U' of the performance index within a working cycle based on historical data fitting are obtained. z (t); then through Calculate the deviation coefficient X; then use the formula: The adjusted weight coefficient a' is obtained by calculation; obviously, when the deviation coefficient is larger, it means that the adjusted weight coefficient is larger, and the influence on the overall communication module performance coefficient is greater.

[0094] The working process of the security analysis unit is as follows:

[0095] By formula: Calculate and obtain the risk index F;

[0096] Among them, R is the stability coefficient, A is the number of unauthorized access attempts in one working cycle, B is the number of eavesdropping attempts on the transmitted data in one working cycle, C is the number of unauthorized modifications to the data in one working cycle, β1, β2, β3 are conversion coefficients, It is a control coefficient formulated based on historical data and experimental data, R<1.

[0097] The stability factor

[0098]

[0099] In the formula, are the means of the number of unauthorized access attempts, the number of eavesdropping attempts on transmitted data, and the number of unauthorized modifications to data in the jth working cycle, respectively. n is the total number of working cycles, j∈[1,n], ρ1, ρ2, ρ3 are preset proportional coefficients.

[0100] The calculated risk index F is compared with the preset risk interval Make comparisons;

[0101] like Then keep the current weight coefficient b unchanged;

[0102] like Then 2b will be used as the adjusted weight coefficient;

[0103] like Then it will be as the adjusted weight coefficient.

[0104] In this embodiment, the formula The risk index F is calculated and obtained by the formula:

[0105] Dynamically obtain the stability coefficient. Obviously, the larger the R is, the worse the stability of the communication transmission module is, the higher the security risk is, and the larger the risk index F is, the more attacks or dangerous behaviors the current communication transmission module is subjected to in a working cycle. Therefore, the greater the risk of the entire communication transmission module, the more dangerous it is. The above formula can be combined with various potentially dangerous behaviors for comprehensive analysis to accurately reflect the risk level in a working cycle, prevent misjudgment caused by the deviation of the risk index from the actual state, and affect normal communication transmission; at the same time, by comparing the calculated risk index F with the preset risk interval For comparison; if Then keep the current weight coefficient b unchanged; if Then 2b will be used as the adjusted weight coefficient; if Then it will be As the adjusted weight coefficient, dynamic adjustment of the weight coefficient of the risk indicator is achieved to keep the weight coefficient always in line with the weight degree of the risk indicator.

[0106] The encryption and decryption module adopts a symmetric key encryption algorithm or an asymmetric key encryption algorithm;

[0107] The working process of the encryption and decryption module is as follows:

[0108] Step 1: Generate secret keys by randomly generating a set of secret keys using a pre-trained neural network model;

[0109] Step 2: key exchange, exchanging the key to the transmitter and the receiver;

[0110] Step 3: Encryption, using the secret key to encrypt the data and convert it into an electrical signal;

[0111] Step 4: Decryption, convert the electrical signal into data and then use the secret key to decrypt it.

[0112] A secure communication transmission method based on wavelength division multiplexing, the method comprising the following steps:

[0113] S100, encrypting the data to be transmitted using an encryption algorithm;

[0114] S200, converting the encrypted data into an electrical signal, converting the electrical signal into an optical signal, and multiplexing a plurality of optical signals into one signal for transmission;

[0115] S300, demultiplexing the optical signal into various wavelengths, converting the optical signal into an electrical signal, and then converting the optical signal into data;

[0116] S400, decrypting the received data using an encryption algorithm;

[0117] S500. Perform real-time analysis on the performance of signal transmission and generate performance indicators through the performance analysis unit; analyze the risk of signal transmission and generate risk indicators through the safety analysis unit; calculate the danger index through the formula M=U*a+F*b in the correction management unit, compare the danger index with the danger interval preset by the system, and take corresponding corrective measures according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients.

[0118] The above is a detailed description of an embodiment of the present invention, but the content is only a preferred embodiment of the present invention and cannot be considered to limit the scope of implementation of the present invention. All equivalent changes and improvements made within the scope of the present invention should still fall within the scope of the patent coverage of the present invention.

Claims

1. A secure communication transmission system based on wavelength division multiplexing, characterized in that: include: A plurality of communication transmission modules, each of the communication transmission modules comprising: Transmitter: includes a light source, a transmitter and a wavelength division multiplexer. The light source is used to emit optical carriers of different wavelengths. The transmitter and wavelength division multiplexer are used to convert electrical signals into optical signals and multiplex multiple optical signals into one signal for transmission. Receiving end: Based on the wavelength division multiplexer and receiver, the optical signal output by the transmitting end is demultiplexed into various wavelengths, and the optical signal is converted into an electrical signal; Encryption and decryption module, used for encrypting the transmitter and decrypting the receiver; Communication monitoring and management module, including performance analysis unit, safety analysis unit and correction management unit; The performance analysis unit is used to perform real-time analysis on the performance of signal transmission of the current communication transmission module and generate performance indicators; The security analysis unit is used to analyze the risk of signal transmission of the current communication transmission module and generate a risk index; The correction management unit is used to calculate the risk index through the formula: M = U*a + F*b, compare the risk index with the risk interval preset by the system, and take corresponding corrective measures for the current communication transmission module according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients; The working process of the performance analysis unit is as follows: Obtain performance parameters such as availability index, delay index, communication transmission rate, bit error rate and optical power in real time; By formula: Calculate and obtain the performance index U; Among them, σ is the dimensionless coefficient, μ i is the preset conversion coefficient, Q i0 is the preset threshold of the i-th performance parameter, Q i is the value of the i-th performance parameter, Q iz is the reference value of the ith performance parameter, determined based on historical data and experimental data; The working process of the performance analysis unit also includes: The performance indicator U is compared with the preset threshold U th Make comparisons; If U ≥ U th , then the performance of the current signal transmission is judged to be poor, and the weight coefficient a is adjusted; If U<U th , then the performance of the current signal transmission is judged to be good, and the weight coefficient a is kept unchanged; The process of adjusting the weight coefficient a is: Obtain the performance index change data U(t) over time within a working cycle and the reference change data U' of the performance index over time within a working cycle based on historical data fitting z (t); By formula: Calculate and obtain the deviation coefficient X; Among them, θt is the reference performance index of the current working cycle obtained based on historical data, t0 is the duration of a working cycle, and t i ,t i +t0 is the start and end time of a working cycle; By formula: Calculate and obtain the adjusted weight coefficient a'; In the formula, a is the current weight coefficient, X th Deviation thresholds preset for the system; The working process of the security analysis unit is as follows: By formula: Calculate and obtain the risk index F; Among them, R is the stability coefficient, A is the number of unauthorized access attempts in one working cycle, B is the number of eavesdropping attempts on the transmitted data in one working cycle, C is the number of unauthorized modifications to the data in one working cycle, β1, β2, β3 are conversion coefficients, It is a control coefficient based on historical data and experimental data, R<1; The stability factor In the formula, are the means of the number of unauthorized access attempts, the number of eavesdropping attempts on transmitted data, and the number of unauthorized modifications to data in the jth working cycle, respectively. n is the total number of working cycles, j∈[1,n], ρ1, ρ2, ρ3 are preset proportional coefficients.

2. The secure communication transmission system based on wavelength division multiplexing according to claim 1 is characterized in that: The working process of the security analysis unit also includes: The calculated risk index F is compared with the preset risk interval Make comparisons; like Then keep the current weight coefficient b unchanged; like Then 2b will be used as the adjusted weight coefficient; like Then it will be as the adjusted weight coefficient.

3. The secure communication transmission system based on wavelength division multiplexing according to claim 1 is characterized in that: The process of taking corresponding corrective measures based on the comparison results is: If M∈[M min , M max ], then an early warning will be issued to the system backend management personnel on the current communication transmission module; If M>M max , then isolate the current communication transmission module; If M<M max , then keep the current communication transmission module running normally.

4. The secure communication transmission system based on wavelength division multiplexing according to claim 1 is characterized in that: The encryption and decryption module adopts a symmetric key encryption algorithm or an asymmetric key encryption algorithm; The working process of the encryption and decryption module is as follows: Step 1: Generate secret keys by randomly generating a set of secret keys using a pre-trained neural network model; Step 2: key exchange, exchanging the key to the transmitter and the receiver; Step 3: Encryption, using the secret key to encrypt the data and convert it into an electrical signal; Step 4: Decryption, convert the electrical signal into data and then use the secret key to decrypt it.

5. A secure communication transmission method based on wavelength division multiplexing, the method using a secure communication transmission system based on wavelength division multiplexing applicable to any one of claims 1-4; characterized in that: The steps include: S100, encrypting the data to be transmitted using an encryption algorithm; S200, converting the encrypted data into an electrical signal, converting the electrical signal into an optical signal, and multiplexing a plurality of optical signals into one signal for transmission; S300, demultiplexing the optical signal into various wavelengths, converting the optical signal into an electrical signal, and then converting the optical signal into data; S400, decrypting the received data using an encryption algorithm; S500. Perform real-time analysis on the performance of signal transmission and generate performance indicators through the performance analysis unit; analyze the risk of signal transmission and generate risk indicators through the safety analysis unit; calculate the danger index through the formula M=U*a+F*b in the correction management unit, compare the danger index with the danger interval preset by the system, and take corresponding corrective measures according to the comparison result; in the formula, U is the performance index, F is the risk index, and a and b are weight coefficients.

Images