A high-speed transmission type optical communication module for network attack protection

Abstract

The application discloses a high-speed transmission type optical communication module for network attack resistance, and relates to the field of optical communication.In the device, a transmission link protection unit is used for dynamically disguising link characteristics by polarization modulation and power spectrum shaping to obtain dynamically changed link characteristics; a transmission link positioning unit is used for positioning optical domain attack characteristics and signal distortion states of the transmission link, and is used for performing optical domain attack positioning, link abnormal distortion discrimination and attack point position analysis by using an acoustic time delay fusion algorithm and a graph light distortion fusion algorithm; a transmission priority control unit is used for performing optical domain attack positioning discrimination on the transmission link by using an electrical attack sorting fusion algorithm; and a transmission encryption unit and a transmission link repair unit are cooperatively used for realizing constellation mapping encryption and optical path self-recovery.The application can improve the security and transmission efficiency of optical communication.

Description

Technical Field

[0001] This application relates to the field of optical communication, and in particular to a high-speed transmission optical communication module with network attack protection. Background Technology

[0002] With the increasing speed and capacity of optical communication technology, network attack methods are becoming more complex, leading to frequent network security problems such as optical signal interception, link interference, and malicious intrusion, which seriously affect the stability of optical communication systems and the security of data transmission. Existing optical communication technologies have significant shortcomings in terms of anti-attack protection and high-speed transmission optimization, making it difficult to meet the needs of secure and efficient transmission in complex network environments. Summary of the Invention

[0003] The purpose of this application is to provide a high-speed transmission optical communication module with network anti-attack protection, which can improve the security and transmission efficiency of optical communication.

[0004] To achieve the above objectives, this application provides the following solution: This application provides a high-speed transmission optical communication module for network attack protection, comprising: the optical communication device for network attack protection includes: a transmission link protection unit, a transmission channel control unit, a transmission signal sampling unit, a transmission link positioning unit, a transmission priority control unit, a transmission encryption unit, and a transmission link repair unit.

[0005] The transmission link protection unit, the transmission channel control unit, the transmission signal sampling unit, the transmission link positioning unit, the transmission encryption unit, and the transmission link repair unit are each connected to the transmission priority control unit; the transmission link protection unit is also connected to the transmission channel control unit; the transmission channel control unit is also connected to the transmission encryption unit; the transmission signal sampling unit is also connected to the transmission link positioning unit; and the transmission link positioning unit is also connected to the transmission link repair unit.

[0006] The transmission link protection unit is used to dynamically masquerade the link features using polarization modulation and power spectrum shaping to obtain dynamically changing link features; the transmission link positioning unit is used to locate the optical domain attack features and signal distortion state of the transmission link, and uses acoustic delay fusion algorithm and image-optical distortion fusion algorithm to locate optical domain attacks, identify abnormal link distortions, and resolve attack point locations; the transmission priority control unit is used to locate and identify optical domain attacks on the transmission link using an electrical attack sorting fusion algorithm; the transmission encryption unit and the transmission link repair unit work together to realize constellation mapping encryption and optical path self-healing.

[0007] In one embodiment, the transmission link protection unit includes: a polarization state modulator, a power spectrum shaper, a link feature encoder, an interference suppressor, an intrusion detector, and a feature memory connected in sequence.

[0008] The feature memory is also connected to the transmission channel control unit and the transmission priority control unit, respectively.

[0009] In one embodiment, the polarization state modulator includes: a silicon-based grating array, an electrically controlled birefringent crystal, a dynamic phase shifter, and a feature randomizer connected in sequence.

[0010] The feature randomizer is also connected to the power spectrum shaper.

[0011] In one embodiment, the transmission link positioning unit includes: a bidirectional time delay detector, a phase comparator, a polarization analyzer, a distortion discriminator, and a positioning resolver connected in sequence.

[0012] The bidirectional time delay detector is also connected to the transmission link repair unit and the transmission signal sampling unit respectively; the positioning resolver is also connected to the transmission priority control unit.

[0013] In one embodiment, the bidirectional delay detector includes: a bidirectional optical coupler, a time-to-digital converter, a delay difference calculator, and a link fingerprint extractor connected in sequence.

[0014] The bidirectional optical coupler is also connected to the transmission link repair unit and the transmission signal sampling unit, respectively; the link fingerprint extractor is also connected to the phase comparator.

[0015] In one embodiment, the transmission priority control unit includes: an instruction register, a priority discriminator, a channel gating unit, and a clock distributor connected in sequence.

[0016] The instruction register is also connected to the transmission link protection unit, the transmission channel control unit, the transmission signal sampling unit, the transmission link positioning unit, the transmission encryption unit, and the transmission link repair unit, respectively.

[0017] In one embodiment, the transmission encryption unit includes a constellation mapper, an encryption sequence generator, and a symbol shaper connected in sequence.

[0018] The constellation mapper is also connected to the transmission channel control unit and the transmission priority control unit, respectively; the symbol shaper is also connected to the transmission link repair unit.

[0019] In one embodiment, the constellation mapper includes: a modulation format selector, an encrypted constellation generator, a symbol mapper, a nonlinear compensator, and a constellation point optimizer connected in sequence.

[0020] The modulation format selector is connected to the transmission channel control unit and the transmission priority control unit, respectively; the constellation point optimizer is also connected to the encryption sequence generator.

[0021] In one embodiment, the transmission link repair unit includes: an optical switch array, a backup optical path adapter, and a switching driver connected in sequence.

[0022] The optical switch array is connected to the transmission encryption unit and the transmission priority control unit respectively; the switching driver is connected to the transmission link positioning unit.

[0023] According to the specific embodiments provided in this application, the following technical effects are disclosed: This application provides a high-speed transmission optical communication module for network anti-attack protection. It utilizes polarization modulation and power spectrum shaping in a transmission link protection unit to dynamically masquerade link characteristics, obtaining dynamically changing link features. A transmission link location unit uses an electrical attack ranking and fusion algorithm to locate and identify optical domain attacks on the transmission link. A transmission encryption unit and the transmission link repair unit work together to achieve constellation mapping encryption and optical path self-healing. This addresses the problems of poor dynamic anti-attack protection, low attack location accuracy, poor transmission channel adaptability, and weak self-healing capabilities in existing optical communication technologies. It improves the system's anti-attack detection, accurate location, and dynamic defense capabilities, while also meeting the stability requirements of high-speed adaptive transmission, ensuring high-security and high-efficiency optical communication in network environments. Attached Figure Description

[0024] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0025] Figure 1 This is a schematic diagram of a high-speed transmission optical communication module for network anti-attack protection according to an embodiment of this application; Figure 2 This is a schematic diagram of the transmission link protection unit in this application; Figure 3 This is a schematic diagram of the transmission channel control unit in this application; Figure 4 This is a schematic diagram of the transmission signal sampling unit in this application; Figure 5This is a schematic diagram of the transmission link positioning unit in this application; Figure 6 This is a schematic diagram of the transmission priority control unit in this application; Figure 7 This is a schematic diagram of the transmission encryption unit and the transmission link repair unit in this application; Figure 8 This is a flowchart illustrating the working steps of the optical communication method for network anti-attack protection in this application. Figure 9 This application presents a schematic diagram of an optical communication method for network attack protection.

[0026] Reference numerals: 1. Transmission link protection unit; 2. Transmission channel control unit; 3. Transmission signal sampling unit; 4. Transmission link positioning unit; 5. Transmission priority control unit; 6. Transmission encryption unit; 7. Transmission link repair unit; 8. Polarization modulator; 9. High-speed modulator; 10. Optical splitter coupler; 11. Bidirectional delay detector; 12. Command register; 13. Constellation mapper; 14. Optical switch array; 15. Power spectrum shaper; 16. Link feature encoder; 17. Interference suppressor; 18. Intrusion detector; 19. Feature memory; 20. Variable optical attenuator; 21. Bandwidth adjuster; 22. Timing equalizer; 23. Optical power amplifier; 24. Silicon grating array; 15. Electrically controlled birefringent crystal; 16. Dynamic phase shifter; 17. Feature randomizer; 18. Bandpass filter; 39. Signal sampler; 30. Analog-to-digital converter; 31. Feature buffer. 35. Memory, 311. Main fiber optic interface, 312. Silicon-based beam splitter, 313. Bypass optical isolator, 314. Power divider, 315. Main straight-through device, 42. Phase comparator, 43. Polarization analyzer, 44. Distortion discriminator, 45. Positioning resolver, 411. Bidirectional optical coupler, 412. Time-to-digital converter, 413. Delay difference calculator, 414. Link fingerprint extractor, 52. Priority discriminator, 53. Channel gating device, 54. Clock distributor, 521. Attack level register, 522. Weight comparator, 523. Dynamic gating circuit, 524. Resource allocation controller, 62. Encrypted sequence generator, 63. Symbol shaper, 611. Modulation format selector, 612. Encrypted constellation generator, 613. Symbol mapper, 614. Nonlinear compensator, 615. Constellation point optimizer, 72. Backup optical path adapter, 73. Switching driver. Detailed Implementation

[0027] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0028] Traditional optical communication suffers from several shortcomings in terms of attack protection and transmission security. Firstly, it lacks dynamic link feature camouflage and protective components such as polarization modulation and power spectrum shaping. The fixed link characteristics make it easily detectable by attackers and difficult to evade targeted attacks. Secondly, it lacks dedicated attack detection and localization units, enabling only simple transmission and reception, and cannot integrate multi-modal data such as delay, phase, and polarization state for precise attack localization. Thirdly, it lacks attack level and dynamic resource scheduling functions, failing to optimize hardware resource allocation in response to varying attack intensities, resulting in wasted resources and inadequate protection of critical links. Fourthly, transmission channel control uses fixed parameter configurations, lacking functions such as bandwidth adaptive adjustment and timing distortion correction, making it difficult to meet dynamic requirements in complex transmission environments. Fifthly, it lacks dedicated transmission encryption units and optical path self-healing mechanisms, resulting in no dynamic encryption protection for signal transmission and a lack of rapid switching to backup optical paths after link failures, leading to weak security and fault tolerance.

[0029] Meanwhile, existing technologies of the same type suffer from numerous problems such as weak anti-attack protection, low attack location accuracy, poor transmission coordination, and low self-healing capability, failing to simultaneously meet the needs of high-speed transmission and dynamic anti-attack. Therefore, a new optical communication technology is needed that integrates dynamic anti-attack protection, high-speed adaptive transmission, attack location, and link self-healing to overcome existing technological bottlenecks and meet the high-security and high-efficiency transmission requirements of optical communication systems in complex network environments. Thus, this application provides a high-speed transmission optical communication module with network anti-attack protection to improve transmission security and efficiency.

[0030] To make the above-mentioned objectives, features and advantages of this application more apparent and understandable, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0031] In one exemplary embodiment, such as Figures 1-7 As shown, a high-speed transmission optical communication module for network anti-attack protection is provided, including: a transmission link protection unit 1, a transmission channel control unit 2, a transmission signal sampling unit 3, a transmission link positioning unit 4, a transmission priority control unit 5, a transmission encryption unit 6, and a transmission link repair unit 7.

[0032] The transmission link protection unit 1, the transmission channel control unit 2, the transmission signal sampling unit 3, the transmission link positioning unit 4, and the transmission encryption unit 6 are respectively connected to the transmission priority control unit 5; the transmission link protection unit 1 is also connected to the transmission channel control unit 2; the transmission channel control unit 2 is also connected to the transmission encryption unit 6; the transmission signal sampling unit 3 is also connected to the transmission link positioning unit 4; and the transmission link positioning unit 4 is also connected to the transmission link repair unit 7.

[0033] The transmission link protection unit 1 is used to dynamically masquerade the link features using polarization modulation and power spectrum shaping to obtain dynamically changing link features; the transmission link positioning unit 4 is used to locate the optical domain attack features and signal distortion state of the transmission link, and uses the acoustic time delay fusion algorithm and the image-optical distortion fusion algorithm to locate the optical domain attack, identify abnormal distortion of the link, and analyze the attack point location; the transmission priority control unit 5 is used to locate and identify the optical domain attack using the electrical attack sorting fusion algorithm; the transmission encryption unit 6 and the transmission link repair unit 7 work together to realize constellation mapping encryption and optical path self-healing.

[0034] In practical applications, the optical communication device is deployed using a silicon photonics integrated architecture with a parallel, non-serialized structure. The output of the transmission link protection unit 1 is connected to the input of the transmission channel control unit 2. The output of the transmission channel control unit 2 is connected to the input of the transmission signal sampling unit 3. The output of the transmission signal sampling unit 3 is electrically connected to the input of the transmission link positioning unit 4. The output of the transmission link positioning unit 4 is bus-connected to the input of the transmission priority control unit 5. The control terminal of the transmission priority control unit 5 is electrically connected to the transmission link protection unit 1, the transmission channel control unit 2, the transmission signal sampling unit 3, the transmission link positioning unit 4, the transmission encryption unit 6, and the transmission link repair unit 7, respectively. The output of the transmission encryption unit 6 is connected to the signal input of the transmission channel control unit 2. The transmission link repair unit 7 is optically coupled to the transmission port of the transmission channel control unit 2.

[0035] In an exemplary embodiment, the transmission link protection unit 1 includes: a polarization modulator 11, a power spectrum shaper 12, a link feature encoder 13, an interference suppressor 14, an intrusion detector 15, and a feature memory 16 connected in sequence; the feature memory 16 is also connected to the transmission channel control unit 2 and the transmission priority control unit 5 respectively; specifically, the output terminal of the feature memory 16 is also connected to the input terminal of the high-speed modulator 21 in the transmission channel control unit 2 and the input terminal of the priority discriminator 52 in the transmission priority control unit 5 respectively.

[0036] Specifically, the polarization modulator 11 adopts a stacked integrated layout, with internal components stacked sequentially along the optical path. The output of the polarization modulator 11 is optically coupled to the input of the power spectrum shaper 12. The output of the power spectrum shaper 12 is connected to the input of the link feature encoder 13. The output of the link feature encoder 13 is electrically connected to the input of the interference suppressor 14. The output of the interference suppressor 14 is connected to the input of the intrusion detector 15. The output of the intrusion detector 15 is bus-connected to the input of the feature memory 16. The power spectrum shaper 12 is a tunable fiber optic grating filter, the link feature encoder 13 is an optical signal pseudo-random sequence encoder, the interference suppressor 14 is an optical domain noise suppression filter, the intrusion detector 15 is an optical power jump detector, and the feature memory 16 is a high-speed flash memory chip.

[0037] In practical applications, the polarization modulator 11 includes: a silicon-based grating array 111, an electrically controlled birefringent crystal 112, a dynamic phase shifter 113, and a feature randomizer 114 connected in sequence; the feature randomizer 114 is also connected to the power spectrum shaper 12. The silicon-based grating array 111 regulates the polarization direction of the optical signal, the electrically controlled birefringent crystal 112 and the dynamic phase shifter 113 work together to change the signal phase characteristics, and the feature randomizer 114 outputs randomization parameters. The four components simulate the mimicry characteristics of a leaf-tailed gecko through multi-level dynamic regulation, constructing dynamically changing optical signal characteristics. The output end face of the silicon-based grating array 111 is attached to the incident end face of the electrically controlled birefringent crystal 112, the electrically controlled birefringent crystal 112 and the dynamic phase shifter 113 are coupled through an optical fiber collimator, and the dynamic phase shifter 113 is electrically connected to the feature randomizer 114.

[0038] In an exemplary embodiment, the transmission channel control unit 2 includes: a high-speed modulator 21, a variable optical attenuator 22, a bandwidth regulator 23, a timing equalizer 24, and an optical power amplifier 25 connected in sequence; the high-speed modulator 21 is also connected to the link feature encoder 13 in the transmission link protection unit 1; the optical power amplifier 25 is also connected to the signal sampler 33 in the transmission signal sampling unit 3 and the resource allocation controller 524 in the transmission priority control unit 5, respectively.

[0039] The output optical path of the high-speed modulator 21 is connected to the input of the variable optical attenuator 22. The output of the variable optical attenuator 22 is coupled to the input of the bandwidth regulator 23. The output of the bandwidth regulator 23 is electrically connected to the input of the timing equalizer 24. The output port of the timing equalizer 24 is connected to the input of the optical power amplifier 25. The high-speed modulator 21 is a PAM4 format electro-optic modulator, the variable optical attenuator 22 is an electrically controlled optical attenuator, the bandwidth regulator 23 is a tunable bandwidth filter, the timing equalizer 24 is an adaptive optical equalizer, and the optical power amplifier 25 is an erbium-doped fiber amplifier.

[0040] In an exemplary embodiment, the transmission signal sampling unit 3 includes: an optical splitter coupler 31, a bandpass filter 32, a signal sampler 33, an analog-to-digital converter 34, and a feature buffer 35 connected in sequence; the optical splitter coupler 31 is also connected to the optical power amplifier 25 in the transmission channel control unit 2; the feature buffer 35 is also connected to the positioning resolver 45 in the transmission link positioning unit 4 and the attack level register 521 in the transmission priority control unit 5, respectively.

[0041] Specifically, the optical splitter coupler 31 adopts a silicon photonics integrated architecture, with internal components integrated into the same silicon photonics chip; the bypass output of the optical splitter coupler 31 is connected to the input of the bandpass filter 32, the output of the bandpass filter 32 is connected to the input of the signal sampler 33, the output of the signal sampler 33 is electrically connected to the input of the analog-to-digital converter 34, and the output of the analog-to-digital converter 34 is bus-connected to the input of the feature buffer 35; the bandpass filter 32 is a narrowband fiber optic filter, the signal sampler 33 is a high-speed optical sampler, the analog-to-digital converter 34 is a high-speed ADC chip, and the feature buffer 35 is an SRAM cache chip. All components are connected through optical paths or circuit interfaces to form a complete signal splitting, sampling, and storage link.

[0042] In practical applications, the optical splitter coupler 31 includes: a main optical fiber interface 311, a silicon-based beam splitter 312, a bypass optical isolator 313, a power divider 314, and a main straight-through 315; one end of the main optical fiber interface 311 is connected to the high-speed modulator 21 within the transmission channel control unit 2; the other end of the main optical fiber interface 311 is connected to the silicon-based beam splitter 312 and the main straight-through 315 respectively; the silicon-based beam splitter 312 is also connected to the bypass optical isolator 313; the bypass optical isolator 313 is also connected to the power divider 314; the power divider 314 is connected to the bandpass filter 32, and the bandpass filter 32 is connected to the signal sampler 33.

[0043] The main optical fiber interface 311 receives and outputs optical signals. The silicon-based beam splitter 312 utilizes the adaptive scaling characteristics of a mimosa plant to split the main signal. The bypass optical isolator 313 blocks reverse interference. The power divider 314 adjusts the bypass signal power. The main straightener 315 ensures low-loss transmission of the main signal. One end of the main optical fiber interface 311 is connected to the transmission channel control unit 2. The other end of the main optical fiber interface 311 is connected to both the silicon-based beam splitter 312 and the main straightener 315. The output of the silicon-based beam splitter 312 is connected in series with the bypass optical isolator 313. The bypass optical isolator 313 is connected to the power divider 314.

[0044] In an exemplary embodiment, the transmission link positioning unit 4 includes: a bidirectional delay detector 41, a phase comparator 42, a polarization analyzer 43, a distortion discriminator 44, and a positioning resolver 45 connected in sequence; the bidirectional delay detector 41 is also connected to the transmission link repair unit 7 and the transmission signal sampling unit 3, specifically, the bidirectional delay detector 41 is also connected to the feature buffer 35 in the transmission signal sampling unit 3 and the backup optical path adapter 72 in the transmission link repair unit 7; the positioning resolver 45 is also connected to the resource allocation controller 524 in the transmission priority control unit 5.

[0045] Specifically, the output of the bidirectional time delay detector 41 is electrically connected to the input of the phase comparator 42, the output of the phase comparator 42 is connected to the input of the polarization analyzer 43, the output of the polarization analyzer 43 is connected to the input of the distortion discriminator 44, and the output of the distortion discriminator 44 is connected to the input of the positioning resolver 45. The bidirectional time delay detector 41 adopts a cross-shaped arrangement structure, with its internal components arranged in a regular cross shape on the silicon photonics substrate. The phase comparator 42 is an optical phase comparator, the polarization analyzer 43 is a polarization state analyzer, the distortion discriminator 44 is an optical signal distortion detector, and the positioning resolver 45 is a link positioning processor. All components are arranged around the silicon photonics substrate, and data interaction is achieved through onboard circuitry, integrated into the module link monitoring area.

[0046] In practical applications, the bidirectional time delay detector 41 includes: a bidirectional optical coupler 411, a time-to-digital converter 412, a time delay difference calculator 413, and a link fingerprint extractor 414 connected in sequence; the bidirectional optical coupler 411 is also connected to the transmission link repair unit 7 and the transmission signal sampling unit 3 respectively; specifically, the first input terminal of the bidirectional optical coupler 411 is connected to the output terminal of the transmission signal sampling unit 3, and the second input terminal of the bidirectional optical coupler 411 is connected to the output terminal of the transmission link repair unit 7; the link fingerprint extractor 414 is also connected to the phase comparator 42.

[0047] The two signal terminals of the bidirectional optical coupler 411 are respectively connected to the receiving and transmitting optical paths, and the data output terminal is electrically connected to the time-to-digital converter 412. The time-to-digital converter 412 is interconnected with the delay difference calculator 413 via a bus, and the output terminal of the delay difference calculator 413 is connected to the link fingerprint extractor 414. The bidirectional optical coupler 411 couples the bidirectional optical signals of the receiving and transmitting optical paths, the time-to-digital converter 412 converts the optical signal time information into a digital signal, the delay difference calculator 413 calculates the bidirectional transmission delay difference, and the link fingerprint extractor 414 extracts the link-specific features. The four components work together to simulate the environmental perception characteristics of the leaf-tailed gecko, realizing delay detection and link identification.

[0048] In an exemplary embodiment, the transmission priority control unit 5 includes: an instruction register 51, a priority discriminator 52, a channel gating unit 53, and a clock distributor 54 connected in sequence; the instruction register 51 is also connected to the transmission link protection unit 1, the transmission channel control unit 2, the transmission signal sampling unit 3, the transmission link positioning unit 4, the transmission encryption unit 6, and the transmission link repair unit 7, respectively.

[0049] Specifically, the output of the instruction register 51 is electrically connected to the input of the priority discriminator 52, the output of the priority discriminator 52 is connected to the input of the channel gate 53, and the output of the channel gate 53 is connected to the input of the clock distributor 54. The priority discriminator 52 adopts a PCB board integrated layout, and its internal components are interconnected on the same PCB board through metal wiring. The instruction register 51 is a high-speed instruction buffer, the channel gate 53 is an electrically controlled channel selector, and the clock distributor 54 is a clock signal distributor. The PCB board interacts with the instruction register 51, the channel gate 53, and the clock distributor 54 through onboard circuitry, and the adapter module adopts a parallel non-serial architecture.

[0050] In practical applications, the priority discriminator 52 includes: an attack level register 521, a weight comparator 522, a dynamic gating circuit 523, and a resource allocation controller 524 connected in sequence; the attack level register 521 is also connected to the instruction register 51; and the resource allocation controller 524 is also connected to the channel gating device 53.

[0051] The attack level register 521 is electrically connected to the input of the weight comparator 522, the output of the weight comparator 522 is connected to the dynamic gating circuit 523, and the dynamic gating circuit 523 is signal-connected to the resource allocation controller 524. The attack level register 521 stores attack level information, the weight comparator 522 quantifies and compares attack priorities, the dynamic gating circuit 523 uses the rapid response characteristics of the mimosa plant to switch control channels, and the resource allocation controller 524 coordinates the allocation of hardware resources.

[0052] In an exemplary embodiment, the transmission encryption unit 6 includes a constellation mapper 61, an encryption sequence generator 62, and a symbol shaper 63 connected in sequence; the constellation mapper 61 is also connected to the high-speed modulator 21 and the transmission priority control unit 5 in the transmission channel control unit 2, respectively; the symbol shaper 63 is also connected to the optical switch array 71 in the transmission link repair unit 7.

[0053] Specifically, the output of the constellation mapper 61 is electrically connected to the input of the encryption sequence generator 62, and the output of the encryption sequence generator 62 is connected to the input of the symbol shaper 63; the output of the optical switch array 71 is optically coupled to the input of the backup optical path adapter 72, and the output of the backup optical path adapter 72 is electrically connected to the input of the switching driver 73; the encryption sequence generator 62 is a pseudo-random sequence generator, the symbol shaper 63 is a Nyquist shaping filter; the optical switch array 71 is an electrically controlled optical switch, the backup optical path adapter 72 is an optical path adapter, and the switching driver 73 is a high-speed driver chip.

[0054] In practical applications, the constellation mapper 61 includes: a modulation format selector 611, an encrypted constellation generator 612, a symbol mapper 613, a nonlinear compensator 614, and a constellation point optimizer 615 connected in sequence; the modulation format selector 611 is connected to the transmission channel control unit 2 and the transmission priority control unit 5 respectively; the constellation point optimizer 615 is also connected to the encrypted sequence generator 62.

[0055] The constellation mapper 61 is a constellation point distribution optimization structure utilizing the adaptive adjustment characteristics of the mimosa plant. The constellation mapper 61 includes a modulation format selector 611, an encrypted constellation generator 612, a symbol mapper 613, a nonlinear compensator 614, and a constellation point optimizer 615, which are connected in series along the signal processing link. The modulation format selector 611 is electrically connected to the encrypted constellation generator 612. The output of the encrypted constellation generator 612 is connected to the symbol mapper 613. The symbol mapper 613 is bus-connected to the nonlinear compensator 614. The nonlinear compensator 614 is connected to the constellation point optimizer 615.

[0056] In an exemplary embodiment, the transmission link repair unit 7 includes: an optical switch array 71, a backup optical path adapter 72, and a switching driver 73 connected in sequence; the optical switch array 71 is connected to the symbol shaper 63 in the transmission encryption unit 6 and the transmission priority control unit 5, respectively; the switching driver 73 is connected to the bidirectional delay detector 41 in the transmission link positioning unit 4.

[0057] In an exemplary embodiment, the high-speed transmission optical communication module for network anti-attack protection also includes a housing, in which the transmission link protection unit 1, transmission channel control unit 2, transmission signal sampling unit 3, transmission link positioning unit 4, transmission priority control unit 5, transmission encryption unit 6, and transmission link repair unit 7 are all integrated.

[0058] This application addresses the challenges of vulnerability to attack, transmission security, and high-speed transmission in optical communication devices. The optical communication device comprises silicon photonic integrated modules and parallel non-serialized modules, consisting of seven units: transmission link protection, channel modulation, and signal sampling. Each unit has a dedicated core component. Through dynamic link feature camouflage, high-speed signal adaptive transmission, attack feature sampling and location, priority resource scheduling, encryption, and optical path self-healing, it achieves dynamic anti-attack detection, accurate location of attack points, and rapid self-healing, significantly improving the high-speed transmission capability of the optical communication device.

[0059] In one exemplary embodiment, the working principle of an optical communication device for network attack protection is also provided.

[0060] A silicon-based grating changes the polarization direction of an optical signal through polarization modulation; an electrically controlled birefringent crystal 112 and a dynamic phase shifter 113 change the signal phase through phase modulation; a feature randomizer 114 outputs parameters through random parameter principles; and the three work together to construct dynamic optical signal features by mimicking the behavior of a leaf-tailed gecko. A power spectrum shaper 12 changes the power spectrum through grating filtering; a link feature encoder 13 encrypts the link features through pseudo-random sequence encoding; an interference suppressor 14 suppresses noise through optical domain filtering; an intrusion detector 15 identifies intrusions through optical power detection; and a feature memory 16 stores features through high-speed storage. A high-speed modulator 21 converts an electrical signal into an optical signal through PAM4 modulation; a variable optical attenuator 22 changes the power through electrically controlled attenuation; a bandwidth regulator 23 matches transmission requirements through bandwidth adaptation; a timing equalizer 24 corrects distortion through adaptive equalization; and an optical power amplifier 25 enhances the signal through erbium-doped amplification.

[0061] The optical splitter coupler 31 adopts a silicon photonics integrated architecture. The main optical fiber interface 311 uses the optical fiber coupling principle to split the optical signal. One end is connected to the transmission channel control unit 2, and the other end is connected to the silicon-based beam splitter 312 and the main path straightener 315. The silicon-based beam splitter 312 simulates the adaptive expansion and contraction principle of the mimosa to split the main signal. The series bypass optical isolator 313 splits the reverse interference with the optical isolation principle. It is connected to the power divider 314 to split the bypass signal power with the power adjustment principle. The main path straightener 315 splits the main signal for low-loss transmission with the low-loss transmission principle. The bypass output of the optical splitter coupler 31 is connected in series with a bandpass filter 32 to split the target frequency band signal using the narrowband filtering principle. Next, a signal sampler 33, an analog-to-digital converter 34, and a feature buffer 35 are connected in series. The signal sampler 33 uses the high-speed sampling principle to collect feature information, the analog-to-digital converter 34 uses the digital-to-analog conversion principle to convert light into digital signals, and the feature buffer 35 uses the SRAM storage principle to temporarily store feature data. All components are connected through optical paths or circuit interfaces to complete signal splitting, sampling, and storage, which is suitable for modular parallel non-serial architecture.

[0062] A bidirectional delay detector 41 is arranged in a cross shape. It incorporates a built-in bidirectional optical coupler 411 to generate bidirectional light through optical coupling. The dual signal terminals are connected to the receiving and transmitting optical paths, and the data output terminal is electrically connected to a time-to-digital converter 412. The time information is converted using a digital-to-analog conversion principle. The transmission delay difference is calculated using a delay difference calculator 413. The bus is connected to a link fingerprint extractor 414, which extracts link features using a feature extraction principle. These four components work together to achieve delay detection and link identification using a simulated leaf-tail gecko environmental perception principle. The output terminal of the bidirectional delay detector 41 is electrically connected to a phase comparator 42, which obtains the signal phase difference through a phase comparison principle. These are then connected in series with a polarization analyzer 43, a distortion discriminator 44, and a positioning analyzer 45. The polarization analyzer 43 identifies polarization distortion using a polarization detection principle, the distortion discriminator 44 analyzes abnormal features using a distortion detection principle, and the positioning analyzer 45 locates the attack point using a multi-dimensional data fusion principle. All components are arranged sequentially around the silicon photonics substrate, using onboard circuitry for data interaction, and integrated into the module's link monitoring area.

[0063] Priority discriminator 52 is integrated with the PCB board. Attack level register 521 stores attack level information using the information storage principle and is electrically connected to weight comparator 522. Priority is determined using the quantization comparison principle. The output is connected to dynamic gating circuit 523, which switches control channels using the mimosa fast response principle. It is also connected to resource allocation controller 524 to allocate hardware resources using the resource coordination principle. Instruction register 51 stores scheduling instructions using the high-speed cache principle. The output is electrically connected to priority discriminator 52 and is connected to channel gating controller 53, which allocates channels using the electronic selection principle. It is also connected to clock distributor 54 to synchronize timing using the signal allocation principle. The PCB board interacts with each component through onboard lines. The adapter module has a parallel non-serial architecture. After receiving the attack location result, it performs efficient resource scheduling and timing synchronization using the resource coordination principle.

[0064] The constellation mapper 61 is a constellation point distribution optimization structure that simulates the adaptive adjustment principle of the mimosa plant. The modulation format selector 611 determines the modulation mode based on the format selection principle, and is electrically connected to the encrypted constellation generator 612 to construct an encrypted constellation diagram based on the constellation generation principle. The output end is connected to the symbol mapper 613 to convert the signal based on the symbol mapping principle, and is interconnected with the nonlinear compensator 614 to correct nonlinear distortion based on the compensation principle. It is then connected to the constellation point optimizer 615 to adjust the constellation point distribution based on the optimization principle. The five components are connected in series to optimize signal transmission. The output end of the constellation mapper 61 is connected to the encrypted sequence generator 62 to generate an encrypted sequence based on the pseudo-random sequence generation principle, and is connected to the symbol shaper 63 to shape the signal based on the Nyquist filtering principle to form a signal encryption link. In the transmission link repair unit 7, the optical switch array 71 controls the optical path based on the electrical switching principle, and the output end is connected to the fiber-coupled backup optical path adapter 72 to switch the path based on the optical path adaptation principle. The output end is electrically connected to the switching driver 73 to provide the drive signal based on the high-speed drive principle. The three components work together with the transmission encryption unit 6 to achieve signal encryption and optical path self-healing.

[0065] To address the shortcomings of existing optical communication technologies, such as insufficient dynamic anti-attack protection, low attack location accuracy, poor channel adaptability, and weak self-healing capabilities, this application provides an optical communication device with seven functional units: constructing dynamic link camouflage through polarization modulators, employing algorithms such as photoacoustic delay fusion for attack location, using priority discriminators and algorithms to schedule resources, using constellation mappers and optical switch arrays to achieve encryption and optical path self-healing, and using high-speed modulators to achieve high-speed adaptive transmission. This improves anti-attack capabilities, transmission stability, and transmission efficiency, enhances accurate location and dynamic defense capabilities, meets the secure and efficient transmission requirements of complex networks, and solves the problems of poor dynamic anti-attack protection, low attack location accuracy, poor transmission channel adaptability, and weak self-healing capabilities in existing optical communication technologies.

[0066] Based on the same inventive concept, this application also provides an optical communication method for implementing the network attack protection of the optical communication device involved above. The solution provided by this method is similar to the solution described in the above method. Therefore, the specific limitations of one or more embodiments of the optical communication method for network attack protection provided below can be found in the limitations of the optical communication device for network attack protection above, and will not be repeated here.

[0067] In one exemplary embodiment, such as Figure 9 As shown, a network attack protection optical communication method is provided. This method utilizes the aforementioned network attack protection optical communication device and includes: The transmission link protection unit uses polarization modulation and power spectrum shaping to dynamically masquerade link characteristics, obtaining dynamically changing link characteristics and transmitting them to the priority control unit and the transmission channel control unit. Using the transmission link protection unit, the initial link reference parameters are processed by polarization modulation, power spectrum shaping, and link characteristic encoding to obtain dynamically changing link characteristics, which are then transmitted to the transmission channel control unit and the transmission priority control unit, respectively.

[0068] The transmission channel control unit receives the data to be transmitted and dynamically changing link characteristics, performs adaptive transmission processing, and transmits the processed optical transmission signal to the transmission signal sampling unit. Simultaneously, it transmits the channel state parameters and the data to be transmitted to the transmission encryption unit and the transmission priority control unit. Specifically, using the transmission channel control unit, based on the dynamically changing link characteristics, it performs adaptive modulation, optical power amplification, and channel adaptation processing on the service data to be transmitted to obtain a compliant optical transmission signal. This optical transmission signal is then transmitted to the transmission signal sampling unit, while the real-time channel state parameters and the data to be transmitted are simultaneously transmitted to the transmission priority control unit.

[0069] The transmission signal sampling unit samples the received optical transmission signal for attack features, extracts link attack feature data, and transmits it to the transmission link location unit and the transmission priority control unit. Specifically, the transmission signal sampling unit performs optical splitting, bandpass filtering, photoelectric sampling, and analog-to-digital conversion on the optical transmission signal to extract link attack feature data, which is then transmitted to the transmission link location unit and the transmission priority control unit, respectively.

[0070] Based on the received attack feature data, the transmission link localization unit uses an acoustic delay fusion algorithm and an image-optical distortion fusion algorithm to perform optical domain attack localization, link abnormal distortion discrimination, and attack point location analysis, obtaining the attack localization result and transmitting it to the transmission priority control unit and the transmission link repair unit. Specifically, using the attack feature data, the transmission link localization unit performs bidirectional delay detection, phase comparison, and attack localization analysis on the transmission link to obtain the optical domain attack localization result, which is then transmitted to the transmission priority control unit and the transmission link repair unit.

[0071] The transmission priority control unit, based on dynamically changing link characteristics, channel state parameters, attack characteristic data, and attack location results, utilizes an electrical attack ranking and fusion algorithm to determine optical domain attack priority and schedule transmission resources. It then generates cooperative control commands and sends them to the transmission encryption unit and the transmission link repair unit. Specifically, the transmission priority control unit performs priority determination and weight calculation on the dynamically changing link characteristics, real-time channel state parameters, attack characteristic data, and attack location results, generates cooperative scheduling commands, and transmits these commands to the transmission encryption unit and the transmission link repair unit, respectively.

[0072] The transmission encryption unit and the transmission link repair unit receive coordinated control commands issued by the transmission priority control unit to collaboratively implement constellation mapping encryption and optical path self-healing. Specifically, using the transmission encryption unit and the transmission link repair unit, based on the coordinated scheduling commands, dynamic constellation mapping encryption is performed on the service data to be transmitted, and optical path switching and self-healing reconstruction are performed on the attacked link to complete the end-to-end transmission of the encrypted secure optical signal.

[0073] In another exemplary embodiment, such as Figure 8 As shown, an optical communication method for network anti-attack protection is provided. The specific processing procedure in practical applications includes the following steps.

[0074] S1. The transmission link protection unit 1 implements dynamic camouflage of link characteristics.

[0075] The transmission link protection unit 1 is activated. The silicon-based grating array 111 controls the polarization direction of the optical signal. The electrically controlled birefringent crystal 112, in conjunction with the dynamic phase shifter 113, changes the signal phase characteristics. The feature randomizer 114 outputs randomization parameters. These parameters are fused with the pseudo-random sequence generated by the link feature encoder 13. The power spectrum shaper 12 adjusts the signal power spectrum distribution to construct dynamically changing link characteristics and evade attack detection.

[0076] S2, The transmission channel control unit 2 performs high-speed signal adaptive transmission.

[0077] The transmission channel control unit 2 receives the data to be transmitted, the high-speed modulator 21 converts the data into a high-speed optical signal, the variable optical attenuator 22 adjusts the signal power, the bandwidth regulator 23 adapts to the transmission bandwidth requirements, the timing equalizer 24 corrects the signal timing distortion, and after the signal strength is enhanced by the optical power amplifier 25, it is transmitted along the main transmission path.

[0078] S3. The transmission signal sampling unit 3 performs sideband attack feature sampling.

[0079] The transmission signal sampling unit 3 bypasses the main channel optical signal through the silicon-based beam splitter 312, the bypass optical isolator 313 blocks reverse interference, the bandpass filter 32 filters the target frequency band signal, the signal sampler 33 collects feature information, and after being converted into a digital signal by the analog-to-digital converter 34, it is temporarily stored in the feature buffer 35.

[0080] S4. The transmission link positioning unit 4 completes the optical domain attack positioning and discrimination.

[0081] The transmission link positioning unit 4 calls the data in the feature buffer 35, the bidirectional delay detector 41 calculates the signal round-trip delay through the photoacoustic delay fusion algorithm, the phase comparator 42 compares the signal phase difference, the polarization analyzer 43 detects polarization distortion, the distortion discriminator 44 uses the image-optical distortion fusion algorithm to analyze abnormal features, and the positioning resolver 45 combines multi-dimensional data to complete the attack point positioning.

[0082] S5. The transmission priority control unit 5 performs resource scheduling.

[0083] The transmission priority control unit 5 receives the positioning result, the priority discriminator 52 uses the electrical attack sorting fusion algorithm to determine the attack level, the instruction register 51 stores the scheduling instruction, the channel gate controller 53 allocates hardware resources, and the clock distributor 54 synchronizes the timing.

[0084] S6. The transmission encryption unit 6 and the transmission link repair unit 7 work together to achieve signal encryption and optical path self-healing.

[0085] If it is necessary to switch the optical path, the switching driver 73 drives the optical switch array 71 to switch to the backup path through the backup optical path adapter 72. At the same time, the constellation mapper 61 and the encryption sequence generator 62 work together to encrypt the signal.

[0086] In another exemplary embodiment, the specific implementation steps of the photoacoustic time delay fusion algorithm in step S4 are as follows: S41, the bidirectional time delay detector 41 collects dual-mode time delay data and adapts parameters.

[0087] The bidirectional delay detector 41 collects the round-trip delay of the optical signal. Simultaneously acquire the acoustic positioning equivalent time delay reference value ; Count the number of optical fiber cores in the current transmission link Fiber core count and standard reference link and length Measure the length difference between the current link and the standard link. Record the phase shift of the optical signal Set the optical communication delay weighting coefficient Acoustic positioning time delay weighting coefficient ,satisfy Set the link loss correction factor The value range is 0.1-0.3.

[0088] S42, The bidirectional time delay detector 41 calculates the initial fusion time delay value.

[0089] Based on the collected parameters and set coefficients, the preliminary latency value after fusion is calculated using the transmission latency fusion calculation formula, which is:

[0090] In formula (1): This represents the final latency value after fusion, where fus stands for fusion. This is the delay weighting coefficient for optical communication. For acoustic positioning time delay weighting coefficients; The round-trip time delay of the optical signal measured by the bidirectional time delay detector 41; opt is the English word for optics. This refers to the phase shift of the optical signal. The equivalent time delay reference value for acoustic positioning; acou is the English word for acoustics. This represents the number of fiber cores in the current transmission link; "link" is the English word for link. This refers to the number of fiber cores in the standard reference link; ref stands for reference. This is a link loss correction factor; This represents the length difference between the current link and the standard link; "link" is the English word for link. This is the length of the standard reference link.

[0091] S43, The transmission link positioning unit 4 corrects for environmental and link influences.

[0092] The transmission link positioning unit 4 collects the current link ambient temperature. and standard reference temperature Measuring the transmission rate of optical signals in optical fibers Count the number of optical signal power sampling points and the optical signal power at each sampling point Compared with standard reference power Set the link length correction factor The value ranges from 0.8 to 1.2, and the temperature influence coefficient is... The value ranges from 0.001 to 0.005 and is a power attenuation correction factor. The value ranges from 5 to 15. The initial fusion delay value is corrected using the transmission attack point delay difference correction formula to obtain the accurate delay difference of the attack point. The transmission attack point delay difference correction formula is as follows:

[0093] In formula (2): This represents the corrected latency difference at the attack point; corr stands for correction. This is a link length correction factor; This refers to the transmission rate of optical signals in optical fibers; opt is the English word for optics. This is the temperature influence coefficient; This is the current ambient temperature of the link; env stands for environment. This refers to the standard reference temperature; ref stands for reference. This is the power attenuation correction factor; This represents the number of sampling points for the optical signal power. For the first The optical signal power at each sampling point; opt stands for optical. For the first The standard reference power for each sampling point, where ref stands for reference.

[0094] S44, The positioning parser 45 outputs the attack point positioning result.

[0095] The positioning resolver 45 will correct the attack point delay difference value The attack location is determined by comparing the data with a preset delay threshold and combining the phase difference data from the phase comparator 42 with the polarization distortion data from the polarization analyzer 43. The location result is then output to the transmission priority control unit 5.

[0096] To verify the effectiveness of the photoacoustic delay fusion algorithm and the accuracy of attack point localization, a simulated optical communication transmission experimental platform was built. This platform included core components such as a bidirectional delay detector, a transmission link localization unit, and a localization resolver. A current transmission link and a standard reference link were configured. The number of fiber cores in the current link was adjustable, while the number of fiber cores in the standard reference link was fixed at 8, with a length of 10km. The ambient temperature was adjustable from -10℃ to 50℃, and the optical signal transmission rate was fixed. The attack simulation module can be configured to simulate latency anomalies and phase shifts caused by attacks from different locations.

[0097] The experiment was conducted using the controlled variable method. First, the equipment was calibrated to ensure accurate parameter acquisition. Then, the round-trip time delay of the optical signal was acquired using a bidirectional time delay detector. Acoustic positioning equivalent time delay reference value Data such as optical communication delay weighting coefficients are used to set these values. Acoustic positioning time delay weighting coefficient Link loss correction factor Equal parameters. Formula (1) is derived based on the dual-mode data fusion of optical signal delay and acoustic positioning delay, combined with phase drift. Difference in the number of cores in the link and Factors such as length loss are considered to achieve complementary calibration through weight allocation; Formula (2) is applied to ambient temperature. Compared with standard reference temperature Difference, link length difference Interference such as power attenuation is addressed by introducing a link length correction factor. Temperature influence coefficient Power attenuation correction factor Substitute into formula (1) to calculate the initial fusion delay value. Then, the correction is completed using formula (2) to obtain the attack point delay difference. The positioning results were output through the positioning resolver. The experiment was repeated for 5 groups, and the actual attack position and positioning deviation of each group were recorded. The experimental data were sorted out, and the experimental data of the optical-acoustic time delay fusion algorithm attack point positioning is shown in Table 1.

[0098] Table 1. Experimental data on attack point localization using the photoacoustic time-delay fusion algorithm.

[0099] Table 1 shows that the positioning deviation of the five experimental algorithms is within 1-3m, indicating high positioning accuracy. The positioning results match the attack points, demonstrating algorithm stability. Experimental parameters... , , , , , Each group meets the algorithm parameter requirements, with a positioning deviation of 1-3m. The optical communication algorithm utilizing the photoacoustic delay fusion algorithm can effectively calculate the delay difference at the attack point. The positioning deviation is within 3m, which can eliminate phase drift. The effects of factors such as temperature and link loss can be mitigated to improve the accuracy of attack point location in network anti-attack protection and ensure the stability and security of high-speed optical communication transmission.

[0100] The image-optical distortion fusion algorithm includes a transmission signal image-optical fusion distortion degree formula and a transmission link multi-dimensional distortion correction determination formula: The formula for the optical fusion distortion degree of the transmitted signal image is:

[0101] In formula (3): This refers to the image-optical signal fusion distortion degree; img-opt is an abbreviation for image-optics. This represents the number of feature sampling points; For the first A characteristic parameter of the polarization state of an optical signal; opt is the English word for optics. For the first The image-processed feature parameters, where img represents the English word for the image; The variance of the optical signal characteristic parameters; The variance of the image feature parameters; This is the signal-to-noise ratio correction factor, with a value ranging from 0.2 to 0.5; SNR is the actual signal-to-noise ratio of the optical signal. The signal-to-noise ratio threshold is 'th', which stands for threshold.

[0102] The multi-dimensional distortion correction determination formula for the transmission link is as follows:

[0103] In formula (4): This is the final distortion determination value; "final" means final. This refers to the image-optical signal fusion distortion degree; img-opt is an abbreviation for image-optics. This is the phase distortion influence coefficient, with a value ranging from 0.1 to 0.4. This represents the total phase distortion of the optical signal; opt is the English word for optics. This is the feature distance correction factor, with a value range of 0.3-0.7; The number of key feature points; For the first One optical signal feature point With standard reference point The feature difference measure between them, where Dist is the function representing the distance operation, and ref is the reference in English; This represents the maximum value of the feature difference measure; "max" means maximum.

[0104] To verify the effectiveness of the image-optical distortion fusion algorithm and related formulas, a high-speed optical communication transmission simulation platform was built, including an optical signal generator, an image acquisition module, an anti-attack protection unit, a signal-to-noise ratio adjustment module, and a phase distortion simulation unit. The number of feature sampling points was set. Number of key feature points Signal-to-noise ratio threshold Maximum feature distance threshold To ensure that the optical signal and the image signal are collected synchronously during transmission and to eliminate external interference. The formula for the optical-image distortion fusion algorithm is derived by using the synergistic analysis of the polarization state of the optical signal and the image features, through variance, signal-to-noise ratio, and Euclidean distance calculation. The calculation basis is: to quantify the polarization state of the feature sampling points and the deviation of the image parameters into basic distortion, to use both variances to statistically analyze the dispersion of the parameters, and to use the signal-to-noise ratio exponent correction to adapt to the differences in the transmission channel; the final distortion judgment formula uses the phase distortion correction coefficient and the feature distance normalization term, considering the phase shift and feature point position deviation, which conforms to the multi-dimensional distortion characteristics of the actual transmission link. Formulas (3) and (4) are used. Five different experimental conditions are set, and the number of feature sampling points and the number of key feature points are kept constant in each group, and the values ​​are adjusted sequentially. for , , , , Adjust accordingly for , , , , The remaining parameters are fixed according to their value range ( , , Each working condition was tested 10 times, and data was collected. , and feature point coordinate data, calculate the results for each test. and The average value and deviation rate were recorded and statistically analyzed. The experimental data of the image distortion fusion algorithm for distortion determination are shown in Table 2.

[0105] Table 2 Statistical analysis of experimental data under different working conditions

[0106] Table 2 shows that, with The rise, Reasonable control The average value shows a decreasing trend, and the deviation rate is less than 3%, which generally conforms to the variation law of actual distortion value. The deviation rate of each group of working conditions in Table 2 is less than 3%. The results closely match the actual distortion values, proving that the formula's calculations are correct.

[0107] Both formulas yielded a deviation rate of less than 3% between the calculated distortion value and the actual measured value. The rise, Reasonable control The trend is decreasing, which is consistent with the actual trend of transmission distortion.

[0108] The electrical attack ranking fusion algorithm includes the original scoring formula for transmission attack priority and the final value formula for transmission resource adaptation attack ranking.

[0109] The original scoring formula for the priority of transmission attacks is:

[0110] In formula (5): This is a score assigned to the initial priority of the attack; atk stands for attack in English. This refers to the attack severity weighting, where sev stands for severity level. This represents the severity level of the attack, with a value ranging from 1 to 5. The term "loss" refers to the potential loss of transmission capacity caused by an attack. This refers to the total transmission capacity of the link; "total" means total. This is the attack frequency weight, where freq is the English word for frequency; The frequency of attacks occurring per unit of time; This is a time interval correction factor, with a value ranging from 0.2 to 0.6; This refers to the time interval between two attacks; "interval" is the English word for "interval". This is a standard time interval reference value; ref stands for reference.

[0111] The transmission resource adaptation attack ranking final value formula scores and ranks identified attacks based on their threat level and link resource status, guiding priority protection for the most dangerous attacks. The formula is as follows:

[0112] In formula (6): This is the final attack priority ranking value; "final" stands for "final". This is a score assigned to the initial priority of the attack; atk stands for attack in English. This represents the maximum value of the original priority score for all attacks, where "all" represents all English attacks. This is the resource redundancy impact coefficient, with a value range of 0.1-0.4; This represents the current link resource redundancy; res stands for resource. The maximum resource redundancy is represented by "max". This is the link length impact factor, with a value range of 0.05-0.2; This represents the current transmission link length; "link" is the English word for link. This is the maximum link length supported by the system. Number of hardware resource types; For the first The amount of hardware resources used; "used" is the English word for "already used". For the first The total capacity of hardware resources; "total" is the English word for "total".

[0113] To verify the effectiveness of the electrical attack ranking fusion algorithm and the corresponding original scoring formula for transmission attack priority and the final value formula for transmission resource adaptation attack ranking, a high-speed optical communication simulation experimental platform was built. OptiSystem and MATLAB were used for joint simulation, and the total transmission capacity of the link was measured. Set to 100Gbps, the maximum link length supported by the system. 100km, standard time interval reference value For 10 seconds, the number of hardware resource types Set to 3 (bandwidth, cache, and computing power respectively), maximum resource redundancy. The attack severity weight is 20Gbps. Take 0.6 as the attack frequency weight. Set to 0.4, time interval correction factor. The resource redundancy impact coefficient is set to 0.4. The link length impact factor is set to 0.25. The value was set to 0.12. The experimental environment was kept at a constant temperature of 25℃ with no external interference to ensure data stability.

[0114] The experiment was based on the controlled variable method, using five types of attacks (corresponding to attack severity levels). (This is the basic type, setting the number of attacks that occur per unit of time.) The time interval between two attacks The loss of transmission capacity caused by the attack Multiple sets of experiments were conducted using parameters such as [parameters]. The formula is derived based on the transmission characteristics of optical communication links. The original scoring formula combines the severity of the attack, the frequency of occurrence, and the transmission capacity loss. It draws on the weight superposition and exponential correction model in risk assessment and uses the exponential term to correct the impact of the time interval on the attack risk to ensure that the frequency dimension assessment conforms to the actual attack pattern. The final value formula introduces resource redundancy, link length, and hardware resource utilization rate. It refers to the resource adaptability optimization theory, eliminates the influence of the dimension through normalization, and combines the weighted summation of multiple resource utilization rates. The ranking result adapts to the transmission resource status. The formula is based on the optical communication transmission loss law and the network attack risk assessment logic, taking into account both theoretical rationality and practical applicability. The overall structure consists of formula (5) and formula (6). Five types of attacks were simulated in sequence, and each type of attack was tested 20 times. Each test recorded [data]. , , , , and the amount of various hardware resources already used With total capacity Substitute into formula (5) to calculate the original attack priority score. Substitute into formula (6) to calculate the final sort value. The experimental parameters and scoring results of the electric attack sorting fusion algorithm are shown in Table 3.

[0115] Table 3 Experimental parameters and scoring results of the electric attack sorting and fusion algorithm.

[0116] Table 3 shows that, , , The larger, and The higher, The larger, The shorter The smaller the value, the more consistent it is with the derivation trend of formulas (5) and (6); Table 3 shows that the changing trends of each parameter match the algorithm design, which can effectively verify the rationality of the electrical attack ranking fusion algorithm in the evaluation of optical communication attack priority. Experimental results show that the attack severity level Frequency of attacks and transmission capacity loss With the final sort value Positively correlated, link resource redundancy Larger, link length The shorter, The smaller the value, the more consistent it is with the logic of the formula derivation; The attack ultimately ranked highest (0.98). The attack was the lowest (0.10), and the ranking result accurately reflects the attack threat level and resource adaptability, verifying the effectiveness of formula (5), formula (6) and the electrical attack ranking fusion algorithm. It can be used for attack priority ranking of high-speed transmission optical communication for network anti-attack protection.

[0117] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0118] This document uses specific examples to illustrate the principles and implementation methods of this application. The descriptions of the above embodiments are only for the purpose of helping to understand the methods and core ideas of this application. Furthermore, those skilled in the art will recognize that, based on the ideas of this application, there will be changes in the specific implementation methods and application scope. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A high-speed transmission optical communication module for network attack protection, characterized in that, The optical communication device for network attack protection includes: a transmission link protection unit, a transmission channel control unit, a transmission signal sampling unit, a transmission link positioning unit, a transmission priority control unit, a transmission encryption unit, and a transmission link repair unit; The transmission link protection unit, the transmission channel control unit, the transmission signal sampling unit, the transmission link positioning unit, the transmission encryption unit, and the transmission link repair unit are each connected to the transmission priority control unit; the transmission link protection unit is also connected to the transmission channel control unit; the transmission channel control unit is also connected to the transmission encryption unit; the transmission signal sampling unit is also connected to the transmission link positioning unit; and the transmission link positioning unit is also connected to the transmission link repair unit. The transmission link protection unit is used to dynamically masquerade the link features using polarization modulation and power spectrum shaping to obtain dynamically changing link features; the transmission link positioning unit is used to locate the optical domain attack features and signal distortion state of the transmission link, and uses acoustic delay fusion algorithm and image-optical distortion fusion algorithm to locate optical domain attacks, identify abnormal link distortions, and resolve attack point locations; the transmission priority control unit is used to locate and identify optical domain attacks on the transmission link using an electrical attack sorting fusion algorithm; the transmission encryption unit and the transmission link repair unit work together to realize constellation mapping encryption and optical path self-healing.

2. The high-speed transmission optical communication module for network attack protection according to claim 1, characterized in that, The transmission link protection unit includes: a polarization state modulator, a power spectrum shaper, a link feature encoder, an interference suppressor, an intrusion detector, and a feature memory connected in sequence; The feature memory is also connected to the transmission channel control unit and the transmission priority control unit, respectively.

3. The high-speed transmission optical communication module for network attack protection according to claim 2, characterized in that, The polarization modulator includes: a silicon-based grating array, an electrically controlled birefringent crystal, a dynamic phase shifter, and a feature randomizer connected in sequence; The feature randomizer is also connected to the power spectrum shaper.

4. The high-speed transmission optical communication module for network attack protection according to claim 1, characterized in that, The transmission link positioning unit includes: a bidirectional time delay detector, a phase comparator, a polarization analyzer, a distortion discriminator, and a positioning resolver connected in sequence; The bidirectional time delay detector is also connected to the transmission link repair unit and the transmission signal sampling unit respectively; the positioning resolver is also connected to the transmission priority control unit.

5. A high-speed transmission optical communication module for network attack protection according to claim 4, characterized in that, The bidirectional time delay detector includes: a bidirectional optical coupler, a time-to-digital converter, a time delay difference calculator, and a link fingerprint extractor connected in sequence; The bidirectional optical coupler is also connected to the transmission link repair unit and the transmission signal sampling unit, respectively; the link fingerprint extractor is also connected to the phase comparator.

6. The high-speed transmission optical communication module for network attack protection according to claim 1, characterized in that, The transmission priority control unit includes: an instruction register, a priority discriminator, a channel gating unit, and a clock distributor connected in sequence; The instruction register is also connected to the transmission link protection unit, the transmission channel control unit, the transmission signal sampling unit, the transmission link positioning unit, the transmission encryption unit, and the transmission link repair unit, respectively.

7. A high-speed transmission optical communication module for network attack protection according to claim 1, characterized in that, The transmission encryption unit includes: a constellation mapper, an encryption sequence generator, and a symbol shaper connected in sequence; The constellation mapper is also connected to the transmission channel control unit and the transmission priority control unit, respectively; the symbol shaper is also connected to the transmission link repair unit.

8. A high-speed transmission optical communication module for network attack protection according to claim 7, characterized in that, The constellation mapper includes: a modulation format selector, an encrypted constellation generator, a symbol mapper, a nonlinear compensator, and a constellation point optimizer connected in sequence; The modulation format selector is connected to the transmission channel control unit and the transmission priority control unit, respectively; the constellation point optimizer is also connected to the encryption sequence generator.

9. A high-speed transmission optical communication module for network attack protection according to claim 1, characterized in that, The transmission link repair unit includes: an optical switch array, a backup optical path converter, and a switching driver connected in sequence; The optical switch array is connected to the transmission encryption unit and the transmission priority control unit respectively; the switching driver is connected to the transmission link positioning unit.

Images