Data security in high-speed optical links

Abstract

Wavelength Division Multiplexing (WDM) is a photonic technology capable to transport over a single fiber more than a Tbit/s aggregate traffic. Currently, WDM is the only deployed method in transcontinental and transoceanic applications. In the optical network, each fiber link consists of segments, each several kilometers long, the connecting points of which are amenable to tapping. When a small amount of optical signal is extracted from a tap, when the signal is properly amplified it can be monitored by unauthorized personnel thus threatening communications and land-security. Since each WDM channel carries traffic from one customer, it is not difficult for the connoisseur to demultiplex a specific channel, isolate a specific payload and break the encrypted datagram. Therefore, in addition to data encryption, high-speed communications security should also rely on securing the optical links. In this paper, we present a WDM link security method that, even if fiber is tapped, constitutes channel monitoring and information decrypting by an eavesdropper or unauthorized personnel virtually impossible. In addition, we describe the circuit building blocks behind the method that makes eavesdropping impossible.