高速光子防火墙关键技术综述

doi:10.11959/j.issn.1000-436x.2019212

通信学报 ›› 2019, Vol. 40 ›› Issue (9): 157-167.doi: 10.11959/j.issn.1000-436x.2019212

高速光子防火墙关键技术综述

黄善国,李新,唐颖,郭俊峰

北京邮电大学信息光子学与光通信研究院，北京 100876

修回日期:2019-08-22 出版日期:2019-09-25 发布日期:2019-09-28
作者简介:黄善国（1978- ），男，山东淄博人，博士，北京邮电大学教授、博士生导师，主要研究方向为多维光交换与光网络理论与技术，包括智能光交换与数据光网络、光网络规划与优化技术、高频光载无线系统等。|李新（1986- ），男，山东枣庄人，博士，北京邮电大学讲师、硕士生导师，主要研究方向为数据中心光网络、光网络生存性、光网络安全、软件定义的光网络（SDON）等。|唐颖（1993- ），女，广西梧州人，北京邮电大学博士生，主要研究方向为数据中心光网络、光网络安全与光网络虚拟化等。|郭俊峰（1995- ），男，浙江杭州人，北京邮电大学硕士生，主要研究方向为光网络安全、光子防火墙等。
基金资助:
国防科技创新特区基金资助项目(18-163-21-TS-001-018-01);国家自然科学基金资助项目(61701039);中央高校基本科研业务费专项资金资助项目(2018RC23);国家杰出青年科学基金资助项目(61622102)

Overview of the key technology of photonic firewall at high speed

Shanguo HUANG,Xin LI,Ying TANG,Junfeng GUO

State Key Laboratory of Information Photonics and Optical Communication,Beijing University of Posts and Telecommunications,Beijing 100876,China

Revised:2019-08-22 Online:2019-09-25 Published:2019-09-28
Supported by:
Special Zone for National Defense Science and Technology Innovation(18-163-21-TS-001-018-01);The National Natural Science Foundation of China(61701039);Fundamental Research Funds for the Central Universities(2018RC23);The National Science Found for Outstanding Youth Scholars of China(61622102)

摘要/Abstract

摘要：

为了维护光网络安全，亟需研究部署能够有效处理高速光信号的光子防火墙，以替代现有的高能耗的电子防火墙。在介绍光子防火墙原理的基础上，基于相关运算和逻辑门2种主要实现方式综述了模式匹配技术，对比了各匹配系统的优劣，并总结了全光逻辑门的实现方法。最后，展望了全光模式匹配研究的下一步方向与发展趋势，即更高效的系统结构和响应速度更快的非线性器件。分析表明，基于全光模式匹配的光子防火墙在网络安全中具有良好的应用前景。

关键词: 光子防火墙, 模式匹配, 半导体光放大器, 高非线性光纤

Abstract:

In order to maintain the security of optical network,it is urgent to research and deploy photonic firewall which can effectively process high-speed optical signals to replace existing electronic firewall which consumes high energy.After a brief review of the principle of photonic firewall,the pattern matching technology based on correlation operation and all-optical logic gates were summarized,and the matching systems was compared according to their advantages and disadvantages.Besides,the realization methods of all-optical logic gates were introduced.Finally,the next research direction and development trend of all-optical pattern matching were prospected:more efficient system structure or non-linear devices with faster response speed.The survey shows that photonic firewall based on all-optical pattern matching has a good application prospect in network security.

Key words: photonic firewall, pattern matching, semiconductor optical amplifier, highly nonlinear fiber

中图分类号:

TN929

黄善国,李新,唐颖,郭俊峰. 高速光子防火墙关键技术综述[J]. 通信学报, 2019, 40(9): 157-167.

Shanguo HUANG,Xin LI,Ying TANG,Junfeng GUO. Overview of the key technology of photonic firewall at high speed[J]. Journal on Communications, 2019, 40(9): 157-167.

图/表 10

图1

图2

图3

图4

图5

图6

图7

表1

基于NPR效应的全光逻辑门中不同逻辑的实现"

逻辑	真值表	中心波长	非线性相移	相对偏振
A	0 011	—	—	—
B	0 101	—	—	—
AB	0 001	λ_A(λ_B)	π	$\frac{π}{4}$
$\bar{A} B$	0 100	λ_B	π	$\frac{3π}{4}$
$A \bar{B}$	0 010	λ_A	π	$\frac{3π}{4}$
$\bar{A}$	1 100	λ_C	π	$\frac{3π}{4}$
$\bar{B}$	1 010	λ_C	π	$\frac{3π}{4}$
A?B	1 001	λ_C	π	$\frac{3π}{4}$
A⊕B	0 110	λ_C	π	$\frac{π}{4}$
A+B	0 111	λ_C	π2	$\frac{3π}{4}$

表1

图8

图9

参考文献 57

[1]	顾婉仪 . 光纤通信:第2版[M]. 北京: 人民邮电出版社, 2011.
	GU W Y . Optical fiber communications[M]. 2nd ed. Beijing: Posts ＆Telecom PressPress, 2011.
[2]	KRISHNAN S , BORUDE A . Security issues in all-optical networks[C]// 2011 Annual SRII Global Conference. IEEE, 2011: 790-794.
[3]	SHANEMAN K , GRAY S . Optical network security:technical analysis of fiber tapping mechanisms and methods for detection ＆ prevention[C]// Military Communications Conference (MILCOM). IEEE, 2004(2): 711-716.
[4]	潘青, 解东宏, 程晓江 ,等. 一种基于信号延迟的光网络攻击方式[J]. 电子设计工程, 2012,20(4): 125-129.
	PAN Q , XIE D H , CHENG X J ,et al. An optical network attack approach based on signal delay[J]. Electronic Design Engineering, 2012,20(4): 125-129.
[5]	罗青松, 阳华, 刘志强 ,等. 光网络安全现状及关键技术研究[J]. 中国电子科学研究院学报, 2013,8(4): 338-343.
	LUO Q S , YANG H , LIU Z Q ,et al. Security status and key technologies study of optical network[J]. Journal of CAEIT, 2013,8(4): 338-343.
[6]	COBB S , . Establishing firewall policy[C]// Southcon/96 Conference Record. IEEE, 1996: 198-205.
[7]	KRIT S , HAIMOUD E . Overview of firewalls:types and policies:managing windows embedded firewall programmatically[C]// 2017 International Conference on Engineering ＆ MIS. IEEE, 2017: 1-7.
[8]	WU C , YANG X L , WENG Q W ,et al. Simulation on high-speed all-optical pattern recognition using SOA-MZIs[C]// 17th Opto- Electronics and Communications Conference. IEEE, 2012: 821-822.
[9]	SLITI M , HAMDI M , BOUDRIGA N . A novel optical firewall architecture for burst switched networks[C]// 12th International Conference on Transparent Optical Networks. IEEE, 2010: 1-5.
[10]	WEBB R P , DAILEY J M , MANNING R J ,et al. All-optical header processing in a 42.6 Gb/s optoelectronic firewall[J]. IEEE Journal of Selected Topics in Quantum Electronics, 2012,18(2): 757-764.
[11]	KITAYAMA K , WADA N , SOTOBAYASHI H . Architectural considerations for photonic IP router based upon optical code correlation[J]. Journal of Lightwave Technology, 2000,18(12): 1834-844.
[12]	HAUER M C , MCGEEHAN J E , KUMAR S . Optically assisted Internet routing using arrays of novel dynamically reconfigurable FBG-based correlators[J]. Journal of Lightwave Technology, 2003,21(1): 2765-2778.
[13]	CHITGARHA M R , KHALEGHI S , YILMAZ O F ,et al. Coherent correlator and equalizer using a reconfigurable all-optical tapped delay line[J]. Optics Letters, 2013,38(13): 2271-2273.
[14]	ZIYADI M , CHITGARHA M R , KHALEGHI S ,et al. Tunable optical correlator using an optical frequency comb and a nonlinear multiplexer[J]. Optics Express, 2014,22(1): 1-6.
[15]	WILLNER A N , LIAO P C , ZOU K H ,et al. Scalable and reconfigurable optical tapped-delay-line for multichannel equalization and correlation using nonlinear wave mixing and a Kerr frequency comb[J]. Optics Letters, 2018,43(22): 5563-5566.
[16]	MOKHTAR M R , IBSEN M , TEH P C ,et al. Reconfigurable multilevel phase-shift keying encoder-decoder for all-optical networks[J]. IEEE Photonics Technology Letters, 2003,15(3): 431-433.
[17]	WIDJAJA J , WADA N , ISHII Y ,et al. Photonic packet address processor using holographic correlator[J]. Electronics Letters, 2001,37(11): 703-704.
[18]	KANG I , RASRAS M , DINU M ,et al. All-optical byte recognition for 40 Gbit/s phase-shift-keyed transmission using a planar-lightwavecircuit passive correlator[J]. IEEE Photonics Technology Letters, 2008,20(12): 1024-1026.
[19]	SAIDA T , OKAMOTO K , UCHIYAMA K ,et al. Integrated optical digital-to-analogue converter and its application to pulse pattern recognition[J]. Electronics Letters, 2001,37(20): 1237-1238.
[20]	COTTER D , COTTER S C . Algorithm for binary word recognition suited to ultrafast nonlinear optics[J]. Electronics Letters, 1993,29(11): 945-947.
[21]	COTTER D , LUCEK J K , SHABEER M ,et al. Self-routing of 100 Gbit/s packets using 6 bit 'keyword' address recognition[J]. Electronics Letters, 1995,31(25): 2201-2202.
[22]	HALL K L , RAUSCHENBACH K A . All-optical bit pattern generation and matching[J]. Electronics Letters, 1996,32(13): 1214-1215.
[23]	HAMILTON S A , ROBINSON B S . 40-Gb/s all-optical packet synchronization and address comparison for OTDM networks[J]. IEEE Photonics Technology Letters, 2002,14(2): 209-211.
[24]	CHEN H , ZHU G , WANG Q ,et al. All-optical logic XOR using differential scheme and Mach-Zehnder interferometer[J]. Electronics Letters, 2002,38(21): 1271-1273.
[25]	RAMOS F , KEHAYAS E , MARTINEZ J M ,et al. IST-LASAGNE:towards all-optical label swapping employing optical logic gates and optical flip-flops[J]. Journal of Lightwave Technology, 2005,23(10): 2993-3011.
[26]	WEBB R P , YANG X L , MANNING R J ,et al. All-optical binary pattern recognition at 42 Gb/s[J]. Journal of Lightwave Technology, 2009,27(13): 2240-2245.
[27]	YANG X L , WEBB R P , MANNING R J ,et al. Application of semiconductor optical amplifier logic gates in high-speed all-optical pattern recognition[C]// 10th Anniversary International Conference on Transparent Optical Networks. IEEE, 2008: 148-151.
[28]	YANG X L , WEBB R P , MANNING R J ,et al. Demonstration of all-optical pattern recognition at 42Gbit/s[C]// European Conference on Optical Communication. IEEE, 2008: 1-4.
[29]	WEBB R P , YANG X L , MANNING R J ,et al. 42Gbit/s all-optical pattern recognition system[C]// 2008 Conference on Optical Fiber Communication/national Fiber Optic Engineers Conference. IEEE, 2008: 1-3.
[30]	KAKARLA R , VENKITESH D . Demonstration of optical header recognition for BPSK data using novel design of logic gates[J]. Optics Communications, 2016(363): 117-122.
[31]	DAGENAIS M , SAINI S , TOUDEH-FALLAH F ,et al. All-optical header recognition using a semiconductor optical amplifier switch matrix[C]// 2007 Photonics in Switching. IEEE, 2007: 65-66.
[32]	MUKHERJEE K , KUMBHAKAR D . Simulation of two photon absorption in silicon wire waveguide for implementation of all optical logic gates[J]. Optical and Quantum Electronics, 2012,123(6): 489-493.
[33]	WANG J , SUN J , SUN Q . Proposal for all-optical switchableOR/XOR logic gates using sum-frequency generation[J]. IEEE Photonics Technology Letters, 2007,19(8): 541-543.
[34]	BOGONI A , WU X , BAKHTIARI Z ,et al. 640 Gbits/s photonic logic gates[J]. Optics Letters, 2010,35(23): 3955-3957.
[35]	吴岑 . 基于半导体光放大器的全光高速二进制数据序列的识别[D]. 上海:上海交通大学, 2013.
	WU C . High-speed all-optical binary data pattern recognition based on semiconductor optical amplifier[D]. Shanghai:Shanghai Jiao Tong University, 2013.
[36]	SHEHATA M I , MOHAMMED N A . Design and optimization of novel two inputs optical logic gates (NOT,AND,OR and NOR) based on single commercial TW-SOA operating at 40Gbit/s[J]. Optical and Quantum Electronics, 2016,48(6): 1-16.
[37]	FJEIDE T , WOLFSON D , KLOCH A ,et al. Demonstration of 20 Gbit/s all-optical logic XOR in integrated SOA based interferometric wavelength converter[J]. Electronics Letters, 2000,36(22): 1863-1864.
[38]	HOUBAVLIS T , ZOIROS K , VLACHOS K ,et al. All-optical XOR in a semiconductor optical amplifier-assisted fiber Sagnac gate[J]. IEEE Photonics Technology Letters, 1999,11(3): 334-336.
[39]	ZORIOS K E , PAPADOPOULOS G , HOUBAVLIS T ,et al. Theoretical analysis and performance investigation of ultrafast all-optical boolean XOR gate with semiconductor optical amplifier-assisted Sagnac interferometer[J]. Optics Communications, 2006,258(2): 114-134.
[40]	CHATTOPADHYAY T , ROY J N . Semiconductor optical amplifier (SOA)-assisted Sagnac switch for designing of all-optical tri-state logic gates[J]. Optik - International Journal for Light and Electron Optics, 2011,122(12): 1073-1078.
[41]	BINTJAS C , KALYVAS M , THEOPHILOPOULOS G ,et al. 20 Gb/s all-optical XOR with UNI gate[J]. IEEE Photonics Technology Letters, 2000,12(7): 834-836.
[42]	SIARKOS T , ZOIROS K E , NASTOU D . On the feasibility of full pattern-operated all-optical XOR gate with single semiconductor optical amplifier-based ultrafast nonlinear interferometer[J]. Optics Communications, 2009,282(14): 2729-2740.
[43]	ZORIOS K E , SIARKOS T . Design rules for full pattern-operated all-optical XOR gate with single semiconductor optical amplifier-based ultrafast nonlinear interferometer[C]// 2010 7th International Symposium on Communication Systems,Networks ＆ Digital Signal Processing. IEEE, 2010: 631-635.
[44]	WANG Q , ZHU G , CHEN H ,et al. Study of all-optical XOR using Mach-Zehnder Interferometer and differential scheme[J]. IEEE Journal of Quantum Electronics, 2004,40(6): 703-710.
[45]	EL-SAEED E M , EL-AZIZ A A , FAYED H A ,et al. Optical logic gates based on semiconductor optical amplifier Mach-Zehnder interferometer:design and simulation[J]. Optical Engineering, 2016,55(2): 1-12.
[46]	JAHROMI H D , BINAIE A , ZARIFKAR A ,et al. A new structure for all-optical three-input XOR logic gate based on semiconductor optical amplifier Mach-Zehnder interferometer[J]. International Journal of Modern Physics B, 2014,28(7): 1-11.
[47]	KIM J Y , KANG J M , KIM T Y ,et al. All-optical multiple logic gates with XOR,NOR,OR,and NAND functions using parallel SOA-MZI structures:theory and experiment[J]. Journal of Lightwave Technology, 2006,24(9): 3392-3399.
[48]	WANG W R , YU J L , HAN B C ,et al. Experimental research on 10 Gbit/sall-optical logic gates with return-to-zero data in high nonlinear fiber[C]// 2011 Asia Communications and Photonics Conference and Exhibition. IEEE, 2011: 1-6.
[49]	OKUNO T , NAKANISHI T , HIRANO M ,et al. Practical considerations for the application of highly nonlinear fibers[C]// 2007 Conference on Optical Fiber Communication. IEEE, 2007: 1-3.
[50]	AGRAWAL G P . Nonlinear fiber optics fifth edition[M]. 5th ed. Pittsburgh: Academic PressPress, 2013.
[51]	TAKAHASHI M , SUGIZAKI R , HIROISHI J ,et al. Low-loss and low-dispersion-slope highly nonlinear fibers[J]. Journal of Lightwave Technology, 2005,23(11): 3615-3624.
[52]	WANG J , SUN Q , SUN J ,et al. Experimental demonstration on 40 Gbit/s all-optical multicasting logic XOR gate for NRZ-DPSK signals using four-wave mixing in highly nonlinear fiber[J]. Optics Communications, 2009,282(13): 2615-2619.
[53]	LI L , WU J , QIU J F ,et al. Reconfigurable and simultaneous implementation of all-optical logic gate using four-wave mixing (FWM) in HNLF for NRZ-PolSK signal[C]// 36th European Conference and Exhibition on Optical Communication. IEEE, 2010: 1-3.
[54]	VELANAS P , BOGRIS A , SYVRIDIS D . Operation properties of a reconfigurable photonic logic gate based on cross phase modulation in highly nonlinear fibers[J]. Optical Fiber Technology, 2009,15(1): 65-73.
[55]	王文睿, 于晋龙, 罗俊 ,等. 基于非线性光纤环镜的40Gb/s可重构光逻辑门[J]. 光学学报, 2012,32(5): 45-50.
	WANG W R , YU J L , LUO J ,et al. 40Gb/s Reconfiguration all-optical logic gate based on nonlinear optical loop mirror[J]. Journal of Optics, 2012,32(5): 45-50.
[56]	WANG W R , YU J L , HAN B C ,et al. Experimental research on 10 Gbit/s all-optical logic gates with return-to-zero data in high nonlinear fiber[C]// 2011 Asia Communications and Photonics Conference and Exhibition. IEEE, 2011: 1-6.
[57]	王文睿, 于晋龙, 韩丙辰 ,等. 基于高非线性光纤中非线性偏振旋转效应的全光逻辑门研究[J]. 物理学报, 2012,61(8): 268-276.
	WANG W R , YU J L , HAN B C ,et al. Research on all-optical logic gate based on nonlinear polarization rotation effect in highly nonlinear fiber[J]. Journal of Physics, 2012,61(8): 268-276.

高速光子防火墙关键技术综述

Overview of the key technology of photonic firewall at high speed

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 10

参考文献 57

相关文章 9

Metrics

推荐阅读 0

[1]	张琦涵, 巩小雪, 李瑞, 李新, 黄善国, 郭磊. 光子防火墙中42 Gbit/s BPSK信号4位全光模式匹配系统及实验验证[J]. 通信学报, 2022, 43(7): 31-40.
[2]	许建秋,梁珺秀,秦小麟. 基于时空标签轨迹的k近邻模式匹配查询[J]. 通信学报, 2018, 39(4): 112-122.
[3]	敬茂华，杨义先，汪韬，辛阳. 新颖的正则NFA引擎构造方法[J]. 通信学报, 2014, 35(10): 12-106.
[4]	敬茂华,杨义先,汪韬,辛阳. 新颖的正则NFA引擎构造方法[J]. 通信学报, 2014, 35(10): 98-106.
[5]	朱映映,吴锦锋,明仲. 基于网络事件和深度协议分析的入侵检测研究[J]. 通信学报, 2011, 32(8): 171-178.
[6]	黄鹏,郭渊博,刘威. 面向网络安全应用的高速硬件多模式匹配结构设计[J]. 通信学报, 2010, 31(9A): 190-196.
[7]	李志东,杨武,张汝波,王巍. 基于异构隐式存储的多模式匹配算法[J]. 通信学报, 2009, 30(3): 119-124.
[8]	何晶,文鸿,雷小燕,陈林,余建军,文双春. 采用半导体光放大器进行直接调制的全双工光纤无线通信系统实验研究[J]. 通信学报, 2008, 29(3): 93-97.
[9]	林昭文,王鲲鹏,马严. IPv6入侵检测系统性能优化的研究与实现[J]. 通信学报, 2006, 27(11A): 68-71.