Information security protection system and method based on dual encryption mechanism

Abstract

The invention relates to the technical field of security protection, in particular to an information security protection system and method based on a dual encryption mechanism, and the system comprises a transmitting end, an optical fiber transmission line and a receiving end. The sending end modulates user information needing to be sent and then carries out double encryption protection; the optical fiber transmission line safely transmits the data subjected to double encryption protection to a receiving end; and the receiving end performs recovery and transmission damage compensation on the signal, and recovers and outputs the user information. According to the invention, a dual encryption mechanism is adopted, plug and play is realized, compatibility with the existing network is realized, and information protection secure transmission is realized, so that the problem that the existing optical fiber communication security protection method cannot meet the security requirement of information transmission when facing eavesdropping and attack technologies is solved.

Description

Technical Field

[0001] The present invention relates to the field of security protection technology, and in particular to an information security protection system and method based on a double encryption mechanism. Background Art

[0002] As an emerging optical communication technology, secure optical communication technology can effectively resist eavesdropping attacks from "lines" and "points" in the network and improve the security protection capabilities of information.

[0003] However, with the rapid development of eavesdropping technology, various means of eavesdropping or attack and sabotage have seriously threatened the security of information transmission and the quality of network communications. As a necessary medium for communication, fiber-optic communication has encountered severe challenges in its security, and the original security protection methods no longer meet existing needs. Summary of the invention

[0004] The purpose of the present invention is to provide an information security protection system and method based on a double encryption mechanism, aiming to solve the problem that the existing fiber optic communication security protection method cannot meet the security requirements of information transmission when facing eavesdropping and attack technologies.

[0005] To achieve the above-mentioned object, in a first aspect, the present invention provides an information security protection system based on a double encryption mechanism, comprising a sending end, an optical fiber transmission line and a receiving end, wherein the sending end, the optical fiber transmission line and the receiving end are connected in sequence;

[0006] The sending end is used to modulate the user information to be sent and then perform double encryption protection;

[0007] The optical fiber transmission line is used to efficiently transmit the optical signal encrypted by the sending end to the receiving end;

[0008] The receiving end is used to recover the signal and compensate for transmission damage, recover the user information and output it.

[0009] The transmitting end includes an optical signal input interface, a QPSK modulation unit, an OCDMA optical domain conversion unit and a noise-like coding unit, and the optical signal input interface, the QPSK modulation unit, the OCDMA optical domain conversion unit and the noise-like coding unit are connected in sequence;

[0010] The optical signal input interface is used to provide signal input for the user;

[0011] The QPSK modulation unit is used for serial-to-parallel conversion of the signal and QPSK modulation processing of the optical subcarrier;

[0012] The OCDMA optical domain conversion unit is used to convert regular pulses into complex signal waveforms;

[0013] The noise-like encoding unit performs noise-like encoding on the signal after the light domain transformation, and the encoded signal is similar to the ASE noise of the amplifier.

[0014] Wherein, the optical fiber transmission line is a DWDM (Dense Wavelength Division Multiplexing) transmission system.

[0015] The receiving end includes a noise-like decoding unit, an OCDMA optical domain inverse transformation unit, a digital coherent receiving signal processing unit and an optical signal output interface, and the noise-like decoding unit, the OCDMA optical domain inverse transformation unit, the digital coherent receiving signal processing unit and the optical signal output interface are connected in sequence;

[0016] The noise-like decoding unit performs inverse transformation on the received signal through noise-like decoding;

[0017] The OCDMA optical domain inverse conversion unit performs inverse conversion on the received signal through OCDMA;

[0018] The digital coherent receiving signal processing unit performs data recovery on the reconstructed optical signal;

[0019] The optical signal output interface provides the user with a restored signal output.

[0020] In a second aspect, an information security protection method based on a double encryption mechanism is used in the information security protection system based on a double encryption mechanism described in the first aspect, comprising the following steps:

[0021] The sending end modulates the user information to be sent and then performs double encryption protection;

[0022] The optical fiber transmission line transmits the double-encrypted data securely to the receiving end;

[0023] The receiving end recovers the signal and compensates for transmission damage, recovers the user information and outputs it.

[0024] The present invention provides an information security protection system based on a double encryption mechanism, comprising a transmitting end, an optical fiber transmission line and a receiving end, wherein the transmitting end, the optical fiber transmission line and the receiving end are connected in sequence; the transmitting end is used to modulate the user information to be sent and then perform double encryption protection; the optical fiber transmission line is used to efficiently transmit the optical signal encrypted by the transmitting end to the receiving end; the receiving end is used to recover the signal and compensate for transmission damage, recover the user information and output it. The transmitting end modulates the user information to be sent and then performs double encryption protection; the optical fiber transmission line securely transmits the double encrypted data to the receiving end; the receiving end recovers the signal and compensates for transmission damage, recovers the user information and outputs it. The present invention adopts a double encryption mechanism, which is plug-and-play and compatible with the existing network, and realizes secure transmission of information protection, thereby solving the problem that the existing optical fiber communication security protection method cannot meet the security requirements of information transmission when facing eavesdropping and attack technologies. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0026] Figure 1 It is a schematic diagram of an information security protection system based on a double encryption mechanism provided by the present invention.

[0027] Figure 2 It is the implementation principle diagram of the implementation column.

[0028] Figure 3 It is a flow chart of an information security protection method based on a double encryption mechanism provided by the present invention.

[0029] In the figure: 1-transmitting end, 2-receiving end, 3-optical fiber transmission line, 11-optical signal input interface, 12-QPSK modulation unit, 13-OCDMA optical domain conversion unit, 14-type noise encoding unit, 21-type noise decoding unit, 22-OCDMA optical domain inverse conversion unit, 23-digital coherent receiving signal processing unit, 24-optical signal output interface. DETAILED DESCRIPTION

[0030] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and should not be construed as limiting the present invention.

[0031] See also Figure 1 to Figure 2 In a first aspect, the present invention provides an information security protection system based on a double encryption mechanism, comprising a transmitting end 1, an optical fiber transmission line 3 and a receiving end 2, wherein the transmitting end 1, the optical fiber transmission line 3 and the receiving end 2 are connected in sequence;

[0032] The sending end 1 is used to modulate the user information to be sent and then perform double encryption protection;

[0033] The optical fiber transmission line 3 is used to efficiently transmit the encrypted optical signal of the transmitting end 1 to the receiving end 2;

[0034] The receiving end 2 is used to recover the signal and compensate for transmission damage, recover the user information and output it.

[0035] In this embodiment, the transmitting end 1 modulates the user information to be sent and then performs double encryption protection; the optical fiber transmission line 3 securely transmits the double encrypted data to the receiving end 2; the receiving end 2 recovers the signal and compensates for transmission damage, recovers the user information and outputs it. The present invention adopts a double encryption mechanism, is plug-and-play, is compatible with the existing network, and realizes information protection and secure transmission, thereby solving the problem that the existing optical fiber communication security protection method cannot meet the security requirements of information transmission when facing eavesdropping and attack technologies.

[0036] Further, the transmitting end 1 comprises an optical signal input interface 11, a QPSK modulation unit 12, an OCDMA optical domain conversion unit 13 and a noise-like coding unit 14, and the optical signal input interface 11, the QPSK modulation unit 12, the OCDMA optical domain conversion unit 13 and the noise-like coding unit 14 are connected in sequence;

[0037] The optical signal input interface 11 is used to provide signal input for the user;

[0038] The QPSK modulation unit 12 is used for serial-to-parallel conversion of the signal and QPSK modulation of the optical subcarrier;

[0039] The OCDMA optical domain conversion unit 13 is used to convert regular pulses into complex signal waveforms;

[0040] The noise-like encoding unit 14 performs noise-like encoding on the signal after the optical domain transformation, and the encoded signal is similar to the ASE noise of the amplifier.

[0041] In this embodiment, the optical signal input interface 11 provides signal input for user information of SDH or OTN at 10Gbit / s. The QPSK modulation unit 12 reduces the signal rate to 2.5Gbit / s through signal serial-to-parallel conversion and optical subcarrier QPSK modulation processing, and the carrier spacing is within 50GHz. On the one hand, it increases the coding space of OCDMA, and can also adapt to the 40-wave DWDM system with a channel spacing of 100GHz. The QPSK modulation unit 12 reduces the signal rate through signal serial-to-parallel conversion and optical subcarrier QPSK modulation processing. The OCDMA optical domain conversion unit 13 converts regular pulses into complex signal waveforms, and it is difficult for non-cooperative parties to recognize the converted signals. The noise-like encoding unit 14 performs noise-like encoding on the signal after optical domain conversion. The encoded signal is similar to the ASE noise of the amplifier, and it is difficult for non-cooperative parties to recognize the information carried by the physical state.

[0042] Furthermore, the optical fiber transmission line 3 is a DWDM (Dense Wavelength Division Multiplexing) transmission system.

[0043] In this embodiment, the DWDM transmission system mainly transmits the encrypted optical signal of the transmitting end 1 to the receiving end 2 efficiently. The DWDM transmission system is a C-band 40-wavelength system with a transmission distance of 1000km. After each 100km span of the optical signal, an EDFA (erbium-doped fiber amplifier) ​​is used to amplify and compensate for line loss. At the same time, in order to solve the gain flatness problem between the signals of each channel, dynamic gain equalization of the signal is performed on the line.

[0044] Further, the receiving end 2 includes a noise-like decoding unit 21, an OCDMA optical domain inverse conversion unit 22, a digital coherent received signal processing unit 23 and an optical signal output interface 24, and the noise-like decoding unit 21, the OCDMA optical domain inverse conversion unit 22, the digital coherent received signal processing unit 23 and the optical signal output interface 24 are connected in sequence;

[0045] The noise-like decoding unit 21 performs inverse transformation on the received signal by noise-like decoding;

[0046] The OCDMA optical domain inverse conversion unit 22 performs inverse conversion on the received signal through OCDMA;

[0047] The digital coherent receiving signal processing unit 23 performs data recovery on the reconstructed optical signal;

[0048] The optical signal output interface 24 provides the user with a restored signal output.

[0049] In this embodiment, the digital coherent receiving signal processing unit 23 obtains 4 electrical signals through 4-way dual PIN tube balanced detection and sends them to the DSP (digital signal processing) module for digital signal processing, eliminates 1000km transmission damage, and restores the parallel data carried by the subcarrier. The optical signal output interface 24 provides signal output for the recovered 10Gbit / s SDH or OTN user information. The noise-like decoding unit 21 and the OCDMA optical domain inverse transformation unit 22 realize the reconstruction of the optical signal through noise-like decoding and OCDMA inverse transformation. The digital coherent receiving signal processing unit 23 performs data recovery on the reconstructed optical signal and uses coherent reception to achieve high-performance signal demodulation. The optical signal output interface 24 provides the user with the restored signal output.

[0050] See also Figure 3 In a second aspect, an information security protection method based on a double encryption mechanism is used in the information security protection system based on a double encryption mechanism described in the first aspect, comprising the following steps:

[0051] S1 transmitter 1 modulates the user information to be sent and then performs double encryption protection;

[0052] Specifically, the transmitting end 1 inputs the user information to be sent through the optical signal input interface 11, modulates the high-speed bit signal into a low-speed signal rate through the QPSK modulation unit 12, and performs double encryption protection through the OCDMA optical domain conversion unit 13 and the noise-like coding unit 14.

[0053] S2 optical fiber transmission line 3 securely transmits the double-encrypted data to the receiving end 2;

[0054] Specifically, the signal after double encryption protection enters the DWDM transmission system and is securely transmitted to the receiving end 2.

[0055] The S3 receiving end 2 recovers the signal and compensates for transmission damage, recovers the user information and outputs it.

[0056] Specifically, at the receiving end 2, optical signal reconstruction is implemented through a noise-like decoding unit 21 and an OCDMA optical domain inverse transformation unit 22, and the reconstructed optical signal enters a digital coherent receiving signal processing unit 23 for signal recovery and transmission damage compensation, and user information is recovered and output through an optical signal output interface 24.

[0057] In this example, user information uses a 10 Gbit / s SDH (Synchronous Digital Hierarchy) or OTN (Optical Transport Network) rate, a 40-wave DWDM transmission system, a transmission distance of 1000 km, and a system bit error rate of less than 1e-9.

[0058] In this example, the inverse transformation in the optical domain at the receiving end is performed using an inverse transformation rule that matches the inverse transformation in the optical domain at the transmitting end. The two have similar principles but opposite processes. The noise-like decoding parameters match the encoding parameters at the transmitting end. Through noise-like decoding and OCDMA optical domain inverse transformation, the phase shift at different bits is generated and then moved back, thereby realizing optical signal reconstruction and user information recovery.

[0059] What is disclosed above is only a preferred embodiment of the information security protection system and method based on the double encryption mechanism of the present invention. Of course, it cannot be used to limit the scope of rights of the present invention. Ordinary technicians in this field can understand that all or part of the processes of the above embodiments and equivalent changes made according to the claims of the present invention still fall within the scope of the invention.

Claims

1. An information security protection system based on a double encryption mechanism, characterized in that: It includes a transmitting end, an optical fiber transmission line and a receiving end, wherein the transmitting end, the optical fiber transmission line and the receiving end are connected in sequence; The sending end is used to modulate the user information to be sent and then perform double encryption protection; The optical fiber transmission line is used to efficiently transmit the optical signal encrypted by the sending end to the receiving end; The receiving end is used to recover the signal and compensate for transmission damage, recover the user information and output it.

2. The information security protection system based on the double encryption mechanism as claimed in claim 1, characterized in that: The transmitting end comprises an optical signal input interface, a QPSK modulation unit, an OCDMA optical domain conversion unit and a noise-like coding unit, wherein the optical signal input interface, the QPSK modulation unit, the OCDMA optical domain conversion unit and the noise-like coding unit are connected in sequence; The optical signal input interface is used to provide signal input for the user; The QPSK modulation unit is used for serial-to-parallel conversion of signals and QPSK modulation of optical subcarriers; The OCDMA optical domain conversion unit is used to convert regular pulses into complex signal waveforms; The noise-like encoding unit performs noise-like encoding on the signal after the light domain transformation, and the encoded signal is similar to the ASE noise of the amplifier.

3. The information security protection system based on the double encryption mechanism as claimed in claim 1, characterized in that: The optical fiber transmission line is a DWDM (Dense Wavelength Division Multiplexing) transmission system.

4. The information security protection system based on the double encryption mechanism as claimed in claim 1, characterized in that: The receiving end comprises a noise-like decoding unit, an OCDMA optical domain inverse conversion unit, a digital coherent receiving signal processing unit and an optical signal output interface, wherein the noise-like decoding unit, the OCDMA optical domain inverse conversion unit, the digital coherent receiving signal processing unit and the optical signal output interface are connected in sequence; The noise-like decoding unit performs inverse transformation on the received signal through noise-like decoding; The OCDMA optical domain inverse conversion unit performs inverse conversion on the received signal through OCDMA; The digital coherent receiving signal processing unit performs data recovery on the reconstructed optical signal; The optical signal output interface provides the user with a restored signal output.

5. An information security protection method based on a double encryption mechanism, used in the information security protection system based on a double encryption mechanism as claimed in any one of claims 1 to 4, characterized in that: The following steps are involved: The sending end modulates the user information to be sent and then performs double encryption protection; The optical fiber transmission line transmits the double-encrypted data securely to the receiving end; The receiving end recovers the signal and compensates for transmission damage, recovers the user information and outputs it.

Images