Dynamic Wavelength Segmentation for Optical Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing optical network security measures are inadequate as they do not provide dynamic security protection, allowing malicious actors to potentially compromise customer data by accessing dedicated wavelengths, which can lead to data capture and encryption scheme breaking.
Innovation Solution
The method involves segmenting data streams into smaller pieces and dynamically assigning different wavelengths between network nodes, creating a dynamic and obfuscated optical path that makes it difficult for malicious actors to track and associate data with specific customers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single dedicated wavelength is assigned to a customer for data transmission, then transmission efficiency and simplicity are improved, but network security deteriorates as malicious actors can access and compromise the entire data stream
Solution Approach 1:
The patent segments a customer's data stream into multiple segments and assigns each segment to a different wavelength. This divides the original single wavelength assignment into multiple smaller wavelength assignments, maintaining transmission efficiency while improving security by limiting the impact of any single wavelength compromise to only a portion of the data stream
Solution Approach 2:
The patent implements dynamic wavelength assignment where wavelengths are reassigned periodically or based on security policies. This transforms the static single wavelength assignment into a dynamic multi-wavelength system that adapts over time, enhancing security while maintaining transmission efficiency through automated wavelength management
2Reliability
If data is segmented into multiple segments across different wavelengths, then network security is improved by limiting attack surface, but device complexity increases due to segmentation and wavelength management requirements
Solution Approach 1:
The patent employs a controller that performs multiple functions: it manages wavelength assignment, monitors security threats, handles segmentation, and coordinates with network elements. This multi-functional controller consolidates the complexity of segmentation and wavelength management into a single universal management system rather than distributing complexity across multiple specialized components
Solution Approach 2:
The patent introduces a controller as an intermediary between the customer's data stream and the optical network infrastructure. This intermediary handles the complex tasks of segmentation, wavelength assignment, and security monitoring, isolating the complexity from both the customer equipment and the core network elements while maintaining security benefits
3Reliability
If dynamic wavelength hopping is implemented for security, then data protection is improved, but loss of time increases due to wavelength switching and path determination
Solution Approach 1:
The patent pre-establishes multiple wavelength paths for each customer data stream before transmission begins. The controller determines and reserves the wavelength assignments in advance, so that when transmission occurs, the wavelengths are already configured and ready, minimizing actual switching time during data transmission
Solution Approach 2:
The patent implements periodic wavelength reassignment where wavelengths are changed at predetermined intervals or after transmitting a certain amount of data. This periodic action allows the system to balance security benefits with time loss by switching wavelengths at optimized intervals rather than continuously, reducing unnecessary switching overhead while maintaining security
Data Source
AI summary
In one embodiment, a method includes receiving, by a network controller and from a first node of a network, information associated with a data stream of the network and determining, by the network controller, a segmentation for the data stream. The segmentation includes a plurality of data segments and the plurality of data segments includes a first data segment. The method further includes determining, by the network controller, a data flow path for each of the plurality of data segments and determining, by the network controller, a first wavelength to assign to the first data segment. The first wavelength is one of a plurality of wavelengths spanning between the first node and a second node of the network.