Optical wireless communication system with enhanced security

Abstract

An optical wireless communication system includes a modem configured to communicate with a main network. The system further includes an optical transceiver that includes a controller configured to communicate authentication information with the modem over a cable connection. The optical transceiver is configured to communicate with an end point device using optical signals. The modem is configured to determine, based on the authentication information, whether the optical transceiver is authorized to communicate with the modem and to communicate user data with the optical transceiver over the cable connection at least in response to determining that the optical transceiver is authorized to communicate with the modem.

Description

[0001] 2024PF80138

[0002] 1

[0003] Optical wireless communication system with enhanced security

[0004] TECHNICAL FIELD

[0005] The present disclosure relates generally to optical wireless networks, and more particularly to authentication of optical transceivers and end point devices for use in an optical wireless network.

[0006] BACKGROUND

[0007] Optical wireless networks, such as Light Fidelity (Li-Fi) networks, use light to communicate information. An optical wireless network may include a modem that interfaces with a backbone network on one interface side and with optical transceivers that connect to the modem on another interface side. The modem may serve as an interface device of the optical wireless network to the backbone network. An optical transceiver of an optical network may be connected to the modem using a cable connection. For example, an optical transceiver may be connected to a port of a modem by a cable connection. Typically, an optical transceiver performs electrical to optical wireless signal conversion, where the optical transceiver converts electrical signals from the modem to optical wireless signals and transmit the optical wireless signals to end point devices of the optical network. The optical transceiver may also perform optical wireless signal to electrical signal conversion of optical wireless signals that are transmitted by end point devices and may transmit the electrical signals to the modem over the cable connection. Alternatively, an optical transceiver may convert optical signals received from the modem over an optical fiber to optical wireless signals that are wirelessly transmitted to the end point devices wirelessly. The optical transceiver may also convert optical wireless signals received wirelessly from the end point devices to optical signals that are transmitted to the modem over an optical fiber. In general, an optical transceiver can be included in or otherwise added to an optical wireless network by connecting the optical transceiver to a port of the modem of the optical wireless network using a cable connection such as an electrical cable or an optical fiber without verification that the optical transceiver is an authorized to be included in the optical wireless network. Because all optical transceivers connected to a modem of an optical wireless network may receive optical network data destined to all end point devices of the optical wireless network,2024PF80138

[0008] 2

[0009] such ease of incorporating an optical transceiver in an optical wireless network poses a security risk. As such, a solution that enables verifying whether optical transceivers of an optical wireless network are authorized for use in the optical wireless network may be desirable.

[0010] SUMMARY

[0011] The present disclosure relates generally to optical wireless networks, and more particularly to authentication of optical transceivers and end point devices for use in an optical wireless network. In an example embodiment, an optical wireless communication system includes a modem configured to communicate with a main network. The system further includes an optical transceiver that includes a controller configured to communicate authentication information with the modem over a cable connection. The optical transceiver is configured to communicate with an end point device using optical signals. The modem is configured to determine, based on the authentication information, whether the optical transceiver is authorized to communicate with the modem and to communicate user data with the optical transceiver over the cable connection at least in response to determining that the optical transceiver is authorized to communicate with the modem.

[0012] In another example embodiment, a method of operating an optical wireless communication system includes receiving, by a modem, authentication information from an optical transceiver over a cable connection. The modem is configured to communicate with a main network. The optical transceiver includes a controller configured to communicate the authentication information with the modem. The optical transceiver is configured to communicate with an end point device using optical signals. The method further includes determining, by the modem, whether the optical transceiver is authorized to communicate with the modem based on the authentication information. The method also includes communicating, by the modem, user data with the optical transceiver over the cable connection at least in response to determining that the optical transceiver is authorized to communicate with the modem.

[0013] These and other aspects, objects, features, and embodiments will be apparent from the following description and the appended claims.

[0014] BRIEF DESCRIPTION OF THE FIGURES

[0015] Reference will now be made to the accompanying drawings, which are not necessarily drawn to scale, and wherein:2024PF80138

[0016] 3

[0017] Fig. 1 illustrates an optical wireless communication system with enhanced optical transceiver security according to an example embodiment.

[0018] Fig. 2 illustrates the modem and one optical transceiver of the optical transceivers of the optical wireless communication system of FIG.1 according to an example embodiment.

[0019] Fig. 3 illustrates the modem, the optical transceiver, and an end point device of the optical wireless communication system of FIG.1 according to an example embodiment.

[0020] Fig. 4 illustrates a method of operating the optical wireless communication system of FIG. 1 according to an example embodiment.

[0021] The drawings illustrate only example embodiments and are therefore not to be considered limiting in scope. The elements and features shown in the drawings are not necessarily to scale, emphasis instead being placed upon clearly illustrating the principles of the example embodiments. Additionally, certain dimensions or placements may be exaggerated to help visually convey such principles. In the drawings, the same reference numerals used in different figures may designate like or corresponding but not necessarily identical elements.

[0022] DETAILED DESCRIPTION OF THE EXAMPLE EMBODIMENTS

[0023] In the following paragraphs, example embodiments will be described in further detail with reference to the figures. In the description, well known components, methods, and / or processing techniques are omitted or only briefly described. Furthermore, reference to various feature(s) of the embodiments is not to suggest that all embodiments must include the referenced feature(s).

[0024] In some example embodiments, a modem of an optical wireless communication system authenticates optical transceivers before the optical transceivers can be used as part of the optical wireless communication system. For example, a controller of the modem may authenticate the optical transceivers in accordance with the zero-trust cybersecurity framework. Zero trust requires organizations to check devices before granting them access to their network of resources. The authentication of an optical transceiver is performed using an additional communication channel (also referred to herein as authentication communication channel) that is separate from user data communication channel used normal operational communication. Optical transceivers that are not authenticated by the modem as authorized optical transceivers are blocked from use in normal operations of the optical wireless communication system. After an optical transceiver2024PF80138

[0025] 4

[0026] is authenticated by the modem, the modem may authenticate an end point device before the end point device can communicate user data with a main or backbone network via the modem and the authenticated optical transceiver.

[0027] FIG. 1 illustrates an optical wireless communication system 100 with enhanced optical transceiver security according to an example embodiment. In some example embodiments, the optical wireless communication system 100 includes a modem 102, optical transceivers 104, 106, 108, and end point devices 124, 126. The modem 102 may be connected to a main network 140, such as the internet, over a wired connection 142 and may serve as an interface device of the optical wireless communication system 100 to the main network 140.

[0028] In some example embodiments, the optical transceivers 104, 106, 108 each include an electrical-to-optical converter and an optical-to-electrical converter. The optical transceiver 106 may be attached to a light fixture 110. The optical transceiver 106 may be attached to the housing of the light fixture 110. To illustrate, the light fixture 110 may be at a desired location for the optical transceiver to transmit and receive optical wireless signals from an end point device such as the end point device 124. For example, the light fixture 110 may be recessed in or suspended from a ceiling or another structure. The optical transceivers 104, 108 may also be attached to a light fixture or another structure.

[0029] In some example embodiments, the optical transceivers 104, 106, 108 may be connected to the modem by cable connections including cables 112, 114, 116. The optical transceiver 104 may be connected to a port 118 of the modem 102 by the cable 112. The optical transceiver 106 may be connected to a port 120 of the modem 102 by the cable 114. The optical transceiver 108 may be connected to a port 122 of the modem 102 by the cable 116. The cables 112, 114, 116 may each include electrical wires, optical fiber lines, or both. For example, separate copper wires may be used for data and power connections between the modem and each one of the optical transceivers 104, 106, 108. Alternatively, optical fiber may be used for data connections and copper wires may be used for power connections between the modem and each one of the optical transceivers 104, 106, 108.

[0030] In some example embodiments, the optical transceiver 104 may transmit optical wireless signals 128, for example, the end point device 124 and may receive optical wireless signals 130 from the end point device 126. For example, the optical transceiver 104 may transmit the optical wireless signals 128 converted from electrical signals from the modem 102 received by the optical transceiver 104 over the cable 112. The optical transceiver 104 may transmit to the modem 102 electrical signals converted from the optical2024PF80138

[0031] 5

[0032] wireless signals 130 from the end point device 126. For example, the optical transceiver 104 may transmit the electrical signals to the modem 102 over the cable 112. The optical wireless signals 128, 130 may each be in the infra-red (IR) frequency range. Alternatively, the optical wireless signals 128, 130 may each be in a visible light frequency range or an ultraviolet (UV) frequency range.

[0033] In general, the optical transceivers 106, 108 may operate in the manner described with respect to the optical transceiver 104. For example, the optical transceiver 106 may transmit and receive optical wireless signals 132 and 134, respectively, and the optical transceiver 108 may transmit and receive optical wireless signals 136 and 138, respectively. The optical transceiver 106 may receive electrical signals from the modem 102 over the cable 114 and transmit the optical wireless signals 132 generated from the electrical signals. The optical transceiver 106 may receive the optical wireless signals 134, for example, from the end point device 124 and transmit to the modem 102 over the cable 114 electrical signals generated from the optical wireless signals 134. The optical wireless signals 132, 134, 136, 138 may each be in the IR light frequency range. Alternatively, the optical wireless signals 132, 134, 136, 138 may each be in a visible light frequency range or a UV light frequency range.

[0034] In some example embodiments, the modem 102 may determine whether each optical transceiver of the optical wireless communication system 100 is an authorized optical transceiver that is authorized to communicate with the modem 102 before the modem 102 communicates user data with the particular optical transceiver. In general, user data may refer to data transmitted to and from one or more end point devices, such as the end point devices 124, 126, of the optical wireless communication system 100 during a normal operation of the optical wireless communication system 100 and intended for or from the main network 140. For example, user data from an end point device of the optical wireless communication system 100 may be received by the modem 102 via an optical transceiver of the optical wireless communication system 100 and transmitted to the main network 140.

[0035] In general, an authorized optical transceiver is an optical transceiver that is authorized to for use in the optical wireless communication system 100. For example, the modem 102 may determine whether the optical transceiver 104 is an authorized optical transceiver before the modem 102 transmits user data to the optical transceiver 104 over the cable 112 and before processing or otherwise using user data received from the optical transceiver 104 over the cable 112. As another example, the modem 102 may determine whether the optical transceiver 106 is an authorized optical transceiver before the modem 1022024PF80138

[0036] 6

[0037] transmits user data to the optical transceiver 106 over the cable 114 and before processing or otherwise using user data received from the optical transceiver 106 over the cable 114. As yet another example, the modem 102 may determine whether the optical transceiver 108 is an authorized optical transceiver before the modem 102 transmits user data to the optical transceiver 108 over the cable 116 and before processing or otherwise using user data received from the optical transceiver 108 over the cable 116.

[0038] To illustrate with respect to the optical transceiver 104, the modem 102 may include a controller that determines whether the optical transceiver 104 is an authorized optical transceiver. The optical transceiver 104 may also include a controller that communicates authentication information with the modem 102. For example, before the optical transceiver 104 is attached to the modem 102 by the cable 112, the modem 102 may disable transmission and reception of user data by the modem 102 via the port 118 of the modem 102. When the optical transceiver 104 is initially attached to the modem 102 by the cable 112, the modem 102 may maintain user data transmission and reception via the port 118 as disabled until the modem 102 determines that the optical transceiver 104 is an authorized optical transceiver.

[0039] In some example embodiments, upon the initial attachment of the optical transceiver 104 to the modem 102 using the cable 112, the optical transceiver 104 may send authentication information to the modem 102 over the cable 112. To illustrate, upon the attachment of the optical transceiver 104 to the modem 102, the optical transceiver 104 may receive power from the modem 102 over the power lines of the cable 112, and the optical transceiver 104 may send authentication information to the modem 102 over the data connection of the cable 112, where the authentication information includes optical transceiver identifier information of the optical transceiver 104. For example, the authentication information may include medium access control (MAC) address of the optical transceiver 104. Alternatively or in addition, the authentication information may include a serial number of the optical transceiver 104. Alternatively or in addition, the authentication information may include another identifier information.

[0040] In some example embodiments, the modem 102 may receive the authentication information over the cable 112 that is connected to the port 118 of the modem 102 and determine whether the optical transceiver 104 is an authorized modem based on the authentication information. For example, optical transceiver identifier information, such as MAC addresses, serial numbers, and / or other optical transceiver identifiers, of authorized optical transceivers may be stored in the modem 102, and the modem 102 may determine2024PF80138

[0041] 7

[0042] whether the authentication information received over the cable 112 includes optical transceiver identifier information that matches optical transceiver identifier information of an authorized optical transceiver stored in the modem 102.

[0043] For example, the modem 102 may determine whether a MAC address, a serial number, and / or another optical transceiver identifier received from the optical transceiver 104 matches a MAC address, a serial number, and / or another optical transceiver identifier of an authorized optical transceiver stored in the modem 102. If the optical transceiver identifier information received from the optical transceiver 104 matches stored optical transceiver identifier information of an authorized optical transceiver, the modem 102 may determine that the optical transceiver 104 is an authorized optical transceiver that is authorized to communicate with the modem 102.

[0044] In response to determining that the optical transceiver 104 is an authorized optical transceiver that is authorized to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100, the modem 102 may start communicating user data with the optical transceiver 104 over the cable 112. For example, the modem 102 may transmit user data to the optical transceiver 104 and may process user data received from the optical transceiver 104 in response to determining that the optical transceiver 104 is an authorized optical transceiver.

[0045] In some cases, the modem 102 may send an authentication message to the optical transceiver 104 over the cable 112 indicating that the optical transceiver 104 is authenticated as an authorized optical transceiver before starting communicating user data with the optical transceiver 104. The optical transceiver 104 may start communicating user data with the modem 102, for example, in response to receiving the authentication message from the modem 102 over the cable 112. For example, prior to receiving the authentication message from the modem 102, the optical transceiver 104 may not send user data received from an end point device (e.g., the end point device 126) to the modem 102 and may not send user data received from the modem 102 to the end point devices of the optical wireless communication system 100.

[0046] In response to determining that the optical transceiver 104 is not an authorized optical transceiver (i.e., the optical transceiver 104 is an unauthorized optical transceiver), the modem 102 may continue to disable the transmission of user data from the modem 102 to the optical transceiver 104 via the cable 112 and may not process user data received via the optical transceiver 104, for example, from the end point device 126 or another end point device. That is, in response to determining that the optical transceiver 104 is an unauthorized2024PF80138

[0047] 8

[0048] optical transceiver based on the authentication information received from the optical transceiver 104 during the authentication process, the modem 102 may reject the optical transceiver 104 for use in the optical wireless communication system 100. The modem 102 may also provide an alert in response to determining that the optical transceiver 104 is unauthorized to communicate with the modem 102. For example, the modem 102 may send an alert message to an administrator of the system 100 via the main network 140.

[0049] Alternatively, or in addition, the modem 102 may provide an audio and / or visual alert.

[0050] In some example embodiments, after the modem 102 determines that the optical transceiver 104 is an authorized optical transceiver, the modem 102 may continue to check whether the optical transceiver 104 and not another optical transceiver is communicably coupled to the modem 102 via the port 118 of the modem 102 over the cable 112. For example, the modem 102 may send an authentication request to the optical transceiver 104, for example, at fixed or variable time intervals. In response, the optical transceiver 104 may send authentication information that includes optical transceiver identifier information of the optical transceiver 104. In response to determining that the optical transceiver identifier information received via the port 118 corresponds to a valid optical transceiver identifier information stored in the modem 102, the modem 102 may continue to allow the transmission of user data by the modem 102 to the optical transceiver 104 and may process user data received from the optical transceiver 104. In response to determining that the optical transceiver identifier information received via the port 118 does not correspond to a valid optical transceiver identifier information stored in the modem 102, the modem 102 may disable the transmission of user data by the modem 102 via the port 118 and may stop processing user data received via the port 118.

[0051] As described above, the optical transceiver 104 may communicate authentication information with the modem 102 over the cable 112 during the authentication process by the modem 102 to determine whether the optical transceiver 104 is an authorized optical transceiver. For example, the modem 102 and the optical transceiver 104 may use an authentication communication channel that is different from a user data communication channel to communicate authentication information with each other during the authentication process. In some cases, the modem 102 may operate in an authentication mode during the authentication process with respect to an optical transceiver that is introduced into the optical wireless communication system 100, and the modem 102 may operate in a normal mode with respect to the optical transceiver after the authentication of the optical transceiver.2024PF80138

[0052] 9

[0053] In some example embodiments, the user data communication channel may use Time Division Multiple Access (TDMA) with the power spectral density, for example, in a range of 2 MHz and 200 MHz, and the data rate with respect to each end point of the optical wireless communication system 100 may depend on the total number of end points of the optical wireless communication system 100. To be clear, the modem 102 may transmit the same user data to all optical transceivers and thus to all end point devices of the optical wireless communication system 100 as TDMA data. For example, the user data communication channel between the optical transceiver 104 and the modem 102 over the cable 112 may support a data stream between the optical transceiver 104 and the end point devices of the optical wireless communication system 100 at a data rate of, for example, 200 megabits per second or more. The authentication communication channel between the modem 102 and the optical transceiver 104 may be a low bitrate communication channel relative to the user data communication channel. For example, the power spectral density of signals using the authentication communication channel may be in a range of kilohertz frequencies.

[0054] In some example embodiments, after the modem 102 determines that the optical transceiver 104 is an authorized optical transceiver, the modem 102 may determine whether the end point device 126 is an authorized end point device before communicating user data between the main network 140 and the end point device 126 via the optical transceiver 104 that communicates with the end point device 126. For example, the modem 102 may determine whether the end point device 126 is an authorized end point device based on end point authentication information from the end point device 126 received via the optical transceiver 104 over the cable 112. To illustrate, end point identifier information, such as MAC addresses, serial numbers, and / or other end point identifiers, of authorized end point devices may be stored in the modem 102, and the modem 102 may determine whether the end point authentication information received via the optical transceiver 104 includes end point identifier information that matches end point identifier information of an authorized end point device stored in the modem 102.

[0055] For example, the modem 102 may determine whether a MAC address, a serial number, and / or another end point identifier received from the end point device 126 via the optical transceiver 104 matches a MAC address, a serial number, and / or another end point identifier of an authorized end point device stored in the modem 102. If the end point identifier information received via the optical transceiver 104 matches stored end point identifier information of an authorized end point device, the modem 102 may determine that2024PF80138

[0056] 10

[0057] the end point device 126 is an authorized end point device that is authorized to communicate with the modem 102.

[0058] In response to determining that the end point device 126 is an authorized end point device that is authorized to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100, the modem 102 may start communication of user data between main network 140 and the end point device 126 via the modem 102. For example, in response to determining that the end point device 126 is an authorized end point device, the modem 102 may transmit user data from the main network 140 to the optical transceiver 104 that sends the user data to the end point device 126, and the modem 102 may send the user data received from the end point device 126 via the optical transceiver 104 to the main network 140.

[0059] In some cases, before starting communication of user data between the main network 140 and the end point device 126, the modem 102 may send an authentication message to the end point device 126 via the optical transceiver 104 indicating that the end point device 126 is authenticated as an authorized end point device. In response to receiving the authentication message from the modem 102 via the optical transceiver 104, the end point device 126 may start sending to the modem 102, via the optical transceiver 104, user data intended for the main network 140. For example, prior to receiving the authentication message from the modem 102, the end point device 126 may send to the modem 102 information related to the authentication of the end point device 126. In some cases, the modem 102 may operate in an authentication mode during the authentication process with respect to an optical transceiver and an associated end point device, and the modem 102 may operate in a normal mode with respect the optical transceiver and the end point device after the authentication of both the optical transceiver and the end point device.

[0060] In some example embodiments, in response to determining that the end point device 126 is not an authorized end point device, the modem 102 may continue to prevent the exchange of user data between the main network 140 and the end point device 126. That is, in response to determining that the end point device 126 is an unauthorized end point device for use in the optical wireless communication system 100, the modem 102 may continue to block communication of user data between the main network 140 and the end point device 126 via the modem 102.

[0061] In some example embodiments, after the modem 102 determines that the end point device 126 is an authorized end point device, the modem 102 may continue to check whether the end point device 126 and not another end point device that is communicating2024PF80138

[0062] 11

[0063] with the modem 102 via the optical transceiver 104. For example, the modem 102 may send an authentication request to the end point device 126, for example, at fixed or variable time intervals. In response, the end point device 126 may send authentication information that includes end point identifier information of the end point device 126. In response to determining that the end point identifier information received via the optical transceiver 104 corresponds to a valid end point identifier information stored in the modem 102, the modem 102 may continue to allow the communication of user data between main network 140 and the end point device 126 via the modem 102. In response to determining that the end point identifier information received via the port optical transceiver 104 does not correspond to a valid end point identifier information stored in the modem 102, the modem 102 may disable the communication of user data between main network 140 and the end point device 126 via the modem 102.

[0064] In some example embodiments, the optical transceiver 104 and the end point device 126 may use an authentication optical wireless communication channel that is different from a user data optical wireless communication channel to communicate authentication information with each other during the authentication process by the modem 102 to determine whether the end point device 126 is an authorized end point device. In some example embodiments, the optical transceiver 104 and the modem 102 may use the authentication communication channel described above to communicate with each other during the authentication process by the modem 102 to determine whether the end point device 126 is an authorized end point device.

[0065] In some example embodiments, the modem 102 may determine whether the optical transceivers 106, 108 are authorized (i.e., authorized optical transceivers) to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100 in the manner described above with respect to the modem 102 and the optical transceiver 104. The modem 102 may also determine whether the end point device 124 and other end point devices, if present, are authorized (i.e., authorized optical transceivers) to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100 in the manner described above with respect to the modem 102 and the end point device 126.

[0066] By authenticating optical transceivers before allowing the use of the optical transceivers, the optical wireless communication system 100 enhances data security. For example, by determining that an optical transceiver is authorized for use in the optical wireless communication system 100, the modem 102 may prevent the use of an unauthorized2024PF80138

[0067] 12

[0068] optical transceiver that may otherwise be used, for example, to steal information transmitted by modem 102 by simply connecting the unauthorized optical transceiver to a port of the modem 102. By authenticating end point devices before allowing the use of the end point devices, the optical wireless communication system 100 enhances data security. For example, by determining that an end point device is authorized for use in the optical wireless communication system 100, the modem 102 may prevent the use of an unauthorized end point device that may otherwise be used, for example, to steal information transmitted by modem 102 by simply communicating with an optical transceiver of the optical wireless communication system 100.

[0069] In some alternative embodiments, the optical wireless communication system 100 may include more or fewer optical transceivers than shown without departing from the scope of this disclosure. In some alternative embodiments, the optical wireless communication system 100 may include more or fewer end point devices than shown without departing from the scope of this disclosure. In some alternative embodiments, the modem 102 may include more or fewer ports than shown without departing from the scope of this disclosure.

[0070] FIG. 2 illustrates the modem 102 and the optical transceiver 104 of the optical transceivers of the optical wireless communication system 100 of FIG.1 according to an example embodiment. Referring to FIGS. 1 and 2, in some example embodiments, the optical transceiver 104 is communicably coupled to the modem 102 by the cable 112 that is attached to port 118 of the modem 102 and to the optical transceiver 104. The modem 102 may be connected to the main network 140, such as the internet, by a wired connection 142 (e.g., an Ethernet cable) that may be a part of a combination of connection segments that connect the modem 102 to the main network 140. As described above, the modem 102 may serve as an interface device of the optical wireless communication system 100 to the main network 140.

[0071] In some example embodiments, the modem 102 includes a baseband unit 202, an analog front end (AFE) unit 204, a controller 206, and an interface unit 208. The baseband unit 202 may process digital data for transmission to and received from the main network 140 and may include a microprocessor or an equivalent unit. The AFE unit 204 may perform analog to digital and digital to analog conversions in addition to conditioning analog signals before conversion to digital signals and after conversion from digital signals. The controller 206 may perform authentication operations to determine whether the optical transceivers 104, 106, 108 are authorized for use in the optical wireless communication system 100. In general,2024PF80138

[0072] 13

[0073] the controller 206 may perform the authentication of the optical transceivers 104, 106, 108 described above with respect to the modem 102.

[0074] In some example embodiments, the interface unit 208 may interface user data from the AFE unit 204 and authentication data from the controller 206 with the port 118 for transmission to the optical transceiver 104. The interface unit 208 may interface the data received from the optical transceiver 104 via the port 118 with the AFE unit 204 and with the controller 206 that can each process the received data to extract the relevant data based on the respective communication channel. For example, the controller 206 may transmit and receive authentication related data via the port 118 in an authentication communication channel that is different from a user data communication channel used for the communication of user data via the AFE unit 204.

[0075] In some example embodiments, the controller 206 includes a microprocessor unit 210 and a memory device 212. Software code and data may be stored in the memory device 212. For example, optical transceiver identifier information, such as MAC addresses, serial numbers, etc., of authorized optical transceivers may be stored the memory device 212. The microprocessor unit 210 may execute the software code stored in the memory device 212 and use the stored optical transceiver identifier information of authorized optical transceivers to perform the authentication of the optical transceiver 104 and other optical transceivers, such as the optical transceivers 106, 108, that may be coupled to the ports of the modem 102. The controller 206 may also include other components to process signals that are transmitted and received via the ports of the modem 102 including the port 118. For example, because the controller 206 may use the authentication communication channel during the authentication of the optical transceiver 104 and other optical transceivers, the controller 206 may include signal processing and other components that enable the use of the authentication communication channel that is, for example, in a different frequency range than the frequency range of signals for user data.

[0076] In some example embodiments, the optical transceiver 104 includes an optical frontend unit 214 and a controller 216. The optical frontend unit 214 may convert electrical signals received by the optical transceiver 104 via the cable 112 to optical wire signals, such as the optical wireless signals 128, transmitted by the optical transceiver 104. The optical frontend unit 214 may convert optical wireless signals, such as the optical wireless signals 130, received by the optical transceiver 104 to electrical signals that are transmitted by the optical transceiver 104 to the modem 102 via the cable 112. The controller 216 may communicate authentication information with the modem 102 using the authentication2024PF80138

[0077] 14

[0078] communication channel during the authentication of the optical transceiver 104 by the controller 206 of the optical transceiver 104.

[0079] In some example embodiments, the controller 216 includes a microprocessor unit 218 and a memory device 220. Software code and data may be stored in the memory device 220. For example, optical transceiver identifier information, such as a MAC address, a serial number, etc., of the optical transceiver 104 may be stored the memory device 212. The microprocessor unit 218 may execute the software code stored in the memory device 220 and send the stored optical transceiver identifier information of the optical transceiver 104 to the modem 102 during the authentication process.

[0080] In some example embodiments, the controller 216 may also include other components to process signals that are transmitted and received to and from the modem 102 via cable 112. For example, because the controller 216 may use the authentication communication channel during the authentication of the optical transceiver 104 by the controller 206 of the modem 102, the controller 216 may include signal processing and other components that enable the use of the authentication communication channel that is, for example, in a different frequency range than the frequency range of signals for user data.

[0081] In some example embodiments, upon the optical transceiver 104 being coupled to the port 118 of the modem 102 by the cable 112, the optical transceiver 104 may be powered by the modem 102, and the controller 216 may transmit to the modem 102 authentication information including the optical transceiver identifier information of the optical transceiver 104. Alternatively, the controller 216 may transmit authentication information including the optical transceiver identifier information of the optical transceiver 104 to the modem 102 upon an authentication request received from the controller 206 of the modem 102 via the cable 112.

[0082] In some example embodiments, the controller 206 of the modem 102 may disable the transmission of user data to the optical transceiver 104 via the port 118 until the optical transceiver 104 is authenticated by the modem 102 as an authorized optical transceiver. For example, the controller 206 may control the interface unit 208 and / or the baseband unit 202 to disable the transmission of user data to the optical transceiver 104 via the port 118. The controller 206 may also control the interface unit 208 and / or the baseband unit 202 to disable the processing of user data received from the optical transceiver 104 via the port 118.

[0083] In some example embodiments, during the authentication of the optical transceiver 104, the controller 206 of the modem 102 may use the stored optical transceiver2024PF80138

[0084] 15

[0085] identifier information of authorized optical transceivers to perform the authentication of the optical transceiver 104 based on the authentication information received by the controller 206 from the controller 216 of the optical transceiver 104.

[0086] In response to determining that the optical transceiver 104 is an authorized optical transceiver that is authorized to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100, the controller 206 may enable the interface unit 208 and / or the baseband unit 202 such that the modem 102 starts communicating user data with the optical transceiver 104 over the cable 112. In some cases, the controller 206 may send an authentication message to the optical transceiver 104 over the cable 112 indicating that the optical transceiver 104 is authenticated as an authorized optical transceiver.

[0087] In response to determining that the optical transceiver 104 is not an authorized optical transceiver (i.e., the optical transceiver 104 is an unauthorized optical transceiver), the controller 206 may continue to disable (i.e., maintain as disabled) the transmission of user data from the modem 102 to the optical transceiver 104 via the cable 112 and may not process user data received via the optical transceiver 104, for example, from the end point device 126 or another end point device.

[0088] In some example embodiments, after the controller 206 determines that the optical transceiver 104 is an authorized optical transceiver, the modem 102 may continue to check whether the optical transceiver 104 and not another optical transceiver that is coupled to the port 118 of the modem 102. For example, the controller 206 may send an authentication request to the optical transceiver 104 using the authentication communication channel, for example, at fixed or variable time intervals. In response, the controller 216 of the optical transceiver 104 may use the authentication communication channel to send to the controller 206 authentication information that includes optical transceiver identifier information of the optical transceiver 104 stored in the memory device 220 (e.g., a flash memory device). Alternatively, the controller 216 may send authentication information to the controller 206 using the authentication communication channel, for example, at fixed or variable time intervals without an authentication request. In response to determining that the optical transceiver identifier information received via the port 118 corresponds to a valid optical transceiver identifier information stored in the memory device 212 (e.g., a flash memory device), the controller 206 may continue to allow the transmission of user data by the modem 102 to the optical transceiver 104 and may process user data received from the optical transceiver 104. In response to determining that the optical transceiver identifier2024PF80138

[0089] 16

[0090] information received via the port 118 does not correspond to a valid optical transceiver identifier information stored in the memory device 212, the controller 206 may disable the transmission of user data by the modem 102 via the port 118 and may disable the processing of user data received via the port 118.

[0091] In some example embodiments, the controller 206 may perform the authentication of the optical transceivers 106, 108 as well as other optical transceivers of the optical wireless communication system 100 in the manner described above with respect to the optical transceiver 104. For example, the optical transceivers 106, 108 may each include a respective controller that corresponds to the controller 216 of the optical transceiver 104. The controller 206 may also control the transmission of user data by the modem 102 to the optical transceivers 106, 108 and the processing of user data received from the optical transceivers 106, 108 depending on whether the optical transceivers 106, 108 are authenticated by the controller 206 as authorized optical transceivers.

[0092] In some alternative embodiments, the modem 102 may include components other than those shown without departing from the scope of this disclosure. In some alternative embodiments, one or more components of the modem 102 may be omitted and / or combined into a single component without departing from the scope of this disclosure. In some alternative embodiments, the controller 206 may include components other than those shown without departing from the scope of this disclosure. In some alternative embodiments, the optical transceiver 104 may include components other than those shown without departing from the scope of this disclosure. In some alternative embodiments, the controller 216 may include components other than those shown without departing from the scope of this disclosure.

[0093] FIG. 3 illustrates the modem 102, the optical transceiver 104, and the end point device 126 of the optical wireless communication system 100 of FIG.1 according to an example embodiment. Referring to FIGS. 1-3, in some example embodiments, after the optical transceiver 104 is authenticated by the modem 102 as an authorized optical transceiver, the modem 102 may determine whether the end point device 126 is an authorized end point device as described above with respect to FIG. 1.

[0094] In some example embodiments, the end point device 126 may be coupled to a user device 302 (e.g., a laptop, a tablet, a smartphone, etc.). The end point device 126 may receive data from the user device 302 and may transmit the user data, for example, to the main network 140 via the optical transceiver 104 and the modem 102. For example, the end point device 126 may transmit the data from the user device 302 to the optical transceiver2024PF80138

[0095] 17

[0096] 104 using the optical wireless signals 130. The end point device 126 may receive user data from the main network 140 via the modem 102 and the optical transceiver 104. For example, the end point device 126 may receive the optical wireless signals 128 from the optical transceiver 104 and provide the data carried by the optical wireless signals 128 to the user device 302.

[0097] In some example embodiments, the end point device 126 may include an optical frontend unit 304, an AFE unit 306, a baseband unit 308, and a controller 310. The optical frontend unit 304 may convert electrical signals from the AFE unit 306 to the optical wireless signals 130. The optical frontend unit 304 may also convert the optical wireless signals 128 to electrical signals provided to the AFE unit 306. The AFE unit 306 may perform analog to digital and digital to analog conversions in addition to conditioning analog signals before conversion to digital signals and after conversion from digital signals. The baseband unit 308 may process the digital data that is provided to the user device 302 and the digital data received from the user device 302. For example, the baseband unit 308 may include a microprocessor or an equivalent unit.

[0098] In some example embodiments, the controller 310 may communicate authentication information with the modem 102 via the optical transceiver 104 that is already authenticated by the modem 102. For example, the controller 310 may include a microprocessor 312 that can execute software code stored in the memory device 314 (e.g., a flash memory) of the end point device 126 to perform the operations of the end point device 126 described herein with respect to the authentication of the end point device 126 by the modem 102.

[0099] To illustrate, before the modem 102 starts operating an interface between the main network 140 and the end point device 126 for the transmission of user data, the controller 206 of the modem 102 may determine whether the end point device 126 is an authorized end point based on the authentication information received by the controller 206 from the end point device 126. For example, the controller 310 of the end point device 126 may send the authentication information to the controller 206 via the optical transceiver 104. The authentication information may include end point identifier information of the end point device 126, such as a MAC address, a serial number, and / or another identifier information. The controller 206 may receive the authentication information and compare the end point identifier information against end point identifier information of authorized end point devices stored in the memory device 212 of the controller 206.2024PF80138

[0100] 18

[0101] In response to determining that the end point device 126 is an authorized end point device that is authorized to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100, the controller 206 may start communication of user data between main network 140 and the end point device 126 via the modem 102. For example, in response to determining that the end point device 126 is an authorized end point device, the controller 206 may enable the modem 102 to transmit user data from the main network 140 to the optical transceiver 104 that sends the user data to the end point device 126 and to send the user data received from the end point device 126 via the optical transceiver 104 to the main network 140. In response to determining that the end point device 126 is not an authorized end point device, the controller 206 may continue to disable the communication of user data between the main network 140 and the end point device 126 via the modem 102.

[0102] In some example embodiments, after the controller authenticates the end point device 126 as an authorized end point device, the controller 206 of the modem 102 may continue to check whether the end point device 126 or another end point device is communicating with the modem 102 via the optical transceiver 104. For example, the controller 206 may send an authentication request to the controller 310 at fixed or variable intervals, and the controller 310 may send authentication information to the controller 206 in response to the authentication request. Alternatively, the controller 310 may send authentication information to the controller 206 periodically. The controller 206 may determine whether the end point device 126 or another end point device is communicating with the modem 102 via the optical transceiver 104 based on the authentication information. The controller 206 may continue to allow the communication between the main network 140 and the end point device 126 in response to determining that the end point device 126 is communicating with the modem 102 via the optical transceiver 104. In response to determining that another end point device is communicating with the modem via the optical transceiver 104, the controller 206 may disable the communication of user data between the main network 140 and the end point device 126 via the modem 102.

[0103] In some example embodiments, the controller 206 of the modem 102 may determine whether the end point device 124 and other end point devices, if present, are authorized (i.e. , authorized optical transceivers) to communicate with the modem 102 or generally authorized for use in the optical wireless communication system 100 in the manner described above with respect to the end point device 126. For example, the end point device2024PF80138

[0104] 19

[0105] 124 may each include a controller that corresponds to the controller 310 of the end point device 126.

[0106] In some alternative embodiments, certain types of transceivers may be allowed to communicate with specific types of end point devices / dongles. For example, transceivers and corresponding end point devices / dongles may be configured to operate with or in specific wavelengths / encryption / modulation schemes / frequency band or may be software-wise configured to work on a specific network security class. Different security networks may be Virtual Private Network (VPN)-wise split over different transceivers, and a particular end point device / dongle may connect to a particular network only if the particular end point device / dongle is authenticated via a particular approved transceiver. An end point device / dongle that, for example, complies with an interoperability standard may be used in the optical wireless communication system 100, and another end point device / dongle may be able to communicate with the transceivers with, for example, a different encryption or security class.

[0107] In some alternative embodiments, the end point device 126 may include components other than those shown without departing from the scope of this disclosure. In some alternative embodiments, one or more components of the end point device 126 may be omitted and / or combined into a single component without departing from the scope of this disclosure. In some alternative embodiments, the controller 310 may include components other than those shown without departing from the scope of this disclosure. In some alternative embodiments, the controller 310 may be omitted without departing from the scope of this disclosure. For example, the baseband unit 308 may include a microprocessor or an equivalent unit that can perform the operations described herein with respect to the controller 310.

[0108] FIG. 4 illustrates a method 400 of operating the optical wireless communication system 100 of FIG. 1 according to an example embodiment. Referring to FIGS. 1-4, in some example embodiments, at step 402, the method 400 includes receiving, by the modem 102, authentication information from an optical transceiver (e.g., the optical transceiver 104, 106, or 108) over a cable connection (e.g., the cable 112, 114, or 116). The modem 102 may be configured to communicate with the main network 140. The optical transceiver (e.g., the optical transceiver 104) may include a controller (e.g., the controller 216) configured to communicate the authentication information with the modem 102. The optical transceiver (e.g., the optical transceiver 104) is configured to communicate with the end point device (e.g., the end point device 124) using optical signals 128, 130. As described2024PF80138

[0109] 20

[0110] above, each optical transceiver of the optical wireless communication system 100 is configured to communicate user data with the modem 102 over a respective cable connection using a respective user data communication channel. Each optical transceiver of the optical wireless communication system 100 is configured to communicate the authentication information with the modem 102 over the respective cable connection using a respective authentication communication channel.

[0111] In some example embodiments, at step 404, the method 400 includes determining, by the modem 102, whether the optical transceiver (e.g., the optical transceiver 104, 106, or 108) is authorized to communicate with the modem 102 based on the authentication information from the optical transceiver (e.g., the optical transceiver 104, 106, or 108). At step 406, the method 400 may include communicating, by the modem 102, user data with the optical transceiver (e.g., the optical transceiver 104, 106, or 108) over the cable connection (e.g., the cable 112, 114, or 116) at least in response to determining that the optical transceiver (e.g., the optical transceiver 104, 106, or 108) is authorized to communicate with the modem 102.

[0112] In some example embodiments, at step 408, the method 400 includes determining, by the modem 102, whether the end point device (e.g., the end point device 124) is an authorized end point device after determining that the optical transceiver (e.g., the optical transceiver 104) is authorized to communicate with the modem 102. At step 410, the method 400 may include, in response to determining that the optical transceiver (e.g., the optical transceiver 104) is unauthorized to communicate with the modem 102, disabling or maintaining as disabled, the modem 102 from communicating the user data with the optical transceiver (e.g., the optical transceiver 104). The method 400 may further include providing, by the modem 102, an alert in response to determining that the optical transceiver (e.g., the optical transceiver 104) is unauthorized to communicate with the modem 102. For example, the controller 206 of the modem 102 may send an alert message to a system administrator via the main network 140. Alternatively, or in addition, the controller 206 may send an alert message to a user device connected to an already authenticated optical transceiver of the optical wireless communication system 100. Alternatively, or in addition, the controller 206 may emit an alert sound and / or an alert light.

[0113] In some alternative embodiments, the method 400 may include steps other than shown and / or described without departing from the scope of this disclosure. In some alternative embodiments, some of the steps of the method 400 may be performed in a different order than shown or described without departing from the scope of this disclosure.2024PF80138

[0114] 21

[0115] In some alternative embodiments, some of the steps of the method 400 may be omitted without departing from the scope of this disclosure.

[0116] Although particular embodiments have been described herein in detail, the descriptions are by way of example. The features of the example embodiments described herein are representative and, in alternative embodiments, certain features, elements, and / or steps may be added or omitted. Additionally, modifications to aspects of the example embodiments described herein may be made by those skilled in the art without departing from the scope of the following claims, the scope of which are to be accorded the broadest interpretation so as to encompass modifications and equivalent structures.

Claims

1. 2024PF8013822CLAIMS:

1. An optical wireless communication system (100), comprising:a modem (102) configured to communicate with a main network (140); and an optical transceiver (104, 106, 108) comprising a controller (216) configured to communicate authentication information with the modem (102) over a cable connection (112), wherein the optical transceiver is configured to communicate with an end point device (124, 126) using optical signals (128, 130), and wherein the modem (102) is configured to:determine, based on the authentication information, whether the optical transceiver (104) is authorized to communicate with the modem;communicate user data with the optical transceiver over the cable connection at least in response to determining that the optical transceiver is authorized to communicate with the modem;determine whether the end point device (124) is an authorized end point device after determining that the optical transceiver (104) is authorized to communicate with the modem; andtransmit, subsequent to the authentication of the optical transceiver, one or more authentication requests to verify the optical transceiver is authorized to communicate with the modem.

2. The optical wireless communication system (100) of claim 1, wherein the modem (102) is configured to disable or to maintain as disabled, in response to determining that the optical transceiver (104) is unauthorized to communicate with the modem, the modem from communicating the user data with the optical transceiver.

3. The optical wireless communication system of claim 2, wherein the modem (102) is configured to determine whether the optical transceiver (104) is communicably coupled to the modem over the cable connection (112) after determining that the optical transceiver (104) is authorized to communicate with the modem.2024PF80138234. The optical wireless communication system of claim 1, wherein the modem is configured to provide an alert in response to determining that the optical transceiver is unauthorized to communicate with the modem.

5. The optical wireless communication system of claim 1, wherein the cable connection (112) includes one or more electrical wires, one or more optical fiber lines, or both.

6. The optical wireless communication system of claim 1, wherein the authentication information comprises a medium access control (MAC) address of the optical transceiver (104) and wherein the controller (216) of the optical transceiver (104) is configured to send the MAC address of the optical transceiver to the modem (102) over the cable connection (112).

7. The optical wireless communication system of claim 1, wherein the authentication information comprises a serial number of the optical transceiver (104) and wherein the controller (216) of the optical transceiver (104) is configured to send the serial number of the optical transceiver to the modem over the cable connection (112).

8. The optical wireless communication system of claim 1, wherein the optical transceiver (104) is configured to communicate the user data with the modem (102) over the cable connection (112) using a user data communication channel and wherein the optical transceiver (104) is configured to communicate the authentication information with the modem (102) over the cable connection (112) using an authentication communication channel.

9. The optical wireless communication system of claim 1, further comprising a second optical transceiver (106) configured to configured to communicate second authentication information with the modem (102) over a second cable connection (114), wherein the second optical transceiver is configured to communicate with a second end point device (126) using second optical signals (132, 134) and wherein the modem (102) is configured to:determine whether the second optical transceiver (106) is authorized to communicate with the modem; and2024PF8013824communicate second user data with the optical transceiver (106) over the second cable connection (114) at least in response to determining that the second optical transceiver is authorized to communicate with the modem.

10. A method (400) of operating an optical wireless communication system (100), the method comprising:receiving (402), by a modem (102), authentication information from an optical transceiver (104) over a cable connection (112), wherein the modem is configured to communicate with a main network (140), wherein the optical transceiver comprises a controller (216) configured to communicate the authentication information with the modem, and wherein the optical transceiver (104) is configured to communicate with an end point device (126) using optical signals (128, 130);determining (404), by the modem, whether the optical transceiver (104) is authorized to communicate with the modem based on the authentication information;communicating (406), by the modem, user data with the optical transceiver over the cable connection (114) at least in response to determining that the optical transceiver (104) is authorized to communicate with the modem (102);determining whether the end point device (124) is an authorized end point device after determining that the optical transceiver (104) is authorized to communicate with the modem; andtransmitting, subsequent to the authentication of the optical transceiver, one or more authentication requests to verify the optical transceiver is authorized to communicate with the modem.

11. The method of claim 10, further comprising disabling or maintaining as disabled (410), in response to determining that the optical transceiver (104) is unauthorized to communicate with the modem (102), the modem from communicating the user data with the optical transceiver.

12. The method of claim 10, further comprising providing, by the modem (102), an alert in response to determining that the optical transceiver (104) is unauthorized to communicate with the modem (102).2024PF801382513. The method of claim 10, further comprising determining (408), by the modem (102), whether the end point device (126) is an authorized end point device after determining that the optical transceiver (104) is authorized to communicate with the modem.

14. The method of claim 10, wherein the optical transceiver (104) is configured to communicate the user data with the modem (102) over the cable connection (112) using a user data communication channel and wherein the optical transceiver (104) is configured to communicate the authentication information with the modem (102) over the cable connection (112) using an authentication communication channel.

Images