Key synchronization for end-to-end ODU service encryption

  • Giouroukos P.

Operators consider the optical transport network secure since there is no direct access to the data-plane. However, Wikileaks and Snowden disclosures have proven this assumption wrong. Customers demand data encryption e.g. when interconnecting data centers. One possible solution is to take security measures at the gateway adding costs. Another solution is to encrypt data on OTU/ODU layer, which could raise interworking issues since such solutions might use reserved overhead bytes. However, the ODU path layer allows to setup secure communication channels end-to-end even across operators boundaries. While the optical transport network is standardized neither methods for key ex-change, nor overhead for key transport have been defined. In this paper a standards compliant solution will be presented to overcome these issues. A protocol running between the edge nodes of the optical transport network has been defined, capable to support various key distribution mechanisms (e.g. Diffie-Hellman, PKI) in order to exchange a session key used to encrypt and authenticate the communication between the involved edge nodes. This is a precondition to exchange the keys needed by the ODU encryption engine to encrypt the data stream on the ODU layer. The protocol also supports re-keying, periodically or on request. Essential characteristic of the protocol is the support for a hitless key exchange mechanism of the ODU encryption engine. Traffic interruption caused by protection switching or service preemption is considered by the protocol and adequate measures are implemented.

View Original Article

Recent Publications

January 01, 2018

Fair Dynamic Spectrum Management for QRD-Based Precoding with User Encoding Ordering in Downstream G.fast Transmission

In next generation DSL networks such as G.fast, employing discrete multi-tone transmission in high frequencies up to 212 MHz, the crosstalk among lines reaches very high levels. To precompensate the crosstalk in downstream transmission, QRD-based precoding has been proposed as a near-optimal dynamic spectrum management (DSM) technique. However, the performance ...

January 01, 2018

Practical Mitigation of Passive Intermodulation in Microstrip Circuits

This paper presents new experimental evidence and a novel practical approach for mitigation of passive intermodulation (PIM) in microstrip circuits fabricated on commercial printed circuit board laminates. The mechanisms of distributed PIM in microstrip circuits are reviewed and a phenomenology of PIM generation due to locally enhanced electromagnetic fields at ...

January 01, 2018

Efficient Cooperative HARQ for Multi-Source Multi-Relay Wireless Networks

In this paper, we compare the performance of three different cooperative Hybrid Automatic Repeat reQuest (HARQ) protocols for slow-fading half-duplex orthogonal multiple access multiple relay channel. Channel State Information (CSI) is available at the receiving side of each link only. Time Division Multiplexing is assumed, where each orthogonal transmission occurs ...