基于隐形传态的跨中心量子身份认证方案

基于量子光学中的隐形传态原理和量子纠缠交换技术,提出一个网络中跨中心的量子身份认证方案。在分布式网络系统中,通过客户端和服务端之间,以及服务端相互之间的量子信道共享EPR纠缠对进行信息传输,同时在经典信道上也进行必须的交互协商,实现了无条件安全的量子身份认证。其无条件安全性得到了量子力学原理的保证,与EPR密钥分发协议的安全性相同。与已有的量子身份认证方案相比,该方案克服了点对点的量子身份认证方案的缺点,具有可跨中心认证的优点,扩大了认证的范围,具有更好的灵活性和实用性。     

带认证的ZigBee密钥分配方案

针对ZigBee节点组网时缺乏身份认证,密钥分配安全性不足的问题,该文提出一种基于身份的无双线性对运算的ZigBee节点身份认证及密钥分配方案。该方案继承了基于身份的认证方案的优点,在实现身份认证的同时完成了ZigBee密钥分配过程,具有较高的安全性和可扩展性。实验结果表明,该文方案具有存储开销小、能耗低等优势。     

带身份认证的BB84协议

利用量子特性实现量子保密通信是目前量子信息学界和密码学界关注的热点问题之一.提出带身份认证的BB84协议,在密钥产生和分配过程中,通信双方利用初始密钥进行身份认证,既能提高效率,又增强了系统的安全性.     

基于身份认证的安全量子中继器网络编码方案

本文将量子一次一密通信方法引入到量子中继器网络中,提出了基于身份认证的安全量子中继器网络编码方案.针对编码过程中存在的主动攻击问题,用一次一密的方式实现任意相邻节点通信过程中的身份认证,优化编码算法,最终在源节点与目的节点间生成量子纠缠态作为信道,构成量子隐形传态网络.方案分析表明,这种方案可以实现高可靠性、高安全性的远程量子通信.     

一种基于光子偏振旋转的量子身份认证方案

实际的量子密钥分发过程中,传输损耗和探测器的效率都直接影响密钥的产生效率。量子身份认证需要通信双方保证认证信息的完整性。针对以上问题,提出了一种基于光子偏振旋转的量子身份认证协议,利用对认证信息的重复编码解决传输损耗问题。考虑到协议的安全性,该协议在相邻的有效认证量子态间编入随机态。安全性分析表明该协议可成功抵御截取重发攻击以及光子数劈裂攻击。在此基础上,设计了现有技术条件下可操作的认证系统方案,考虑了传输损耗和探测效率,具有实用意义。     

基于测量设备无关协议的量子身份认证方案

借助测量设备无关量子密钥分配协议的安全性,提出了测量设备无关的量子身份认证协议。在此协议下,认证中心和认证方以共享密钥加密认证信息和认证密钥,将其发送至第三方进行贝尔态测量以提取安全的认证信息,实现认证中心对认证方有效认证,并更新共享密钥。分析协议性能显示,系统在不同攻击下认证过程是安全且有效的。     

基于团簇态的跨中心量子网络身份认证方案

利用连续两次量子隐形传态技术,提出了基于四粒子团簇态的跨中心量子网络身份认证方案,实现了分布式量子通信网络中对客户的身份认证。在该方案中,认证系统包括主服务器和客户端服务器,主服务器和客户端服务器之间通过共享四粒子团簇态为量子信道进行通信,客户所有的操作都在客户端服务器上进行,不直接与主服务器进行通信。身份认证全部由服务器根据量子力学原理进行,保证了认证方案的安全性。最后,对该方案进行了安全性分析。     

不依赖于第三方的动态量子身份认证方案

提出了一个量子身份认证方案,该方案仅在注册时需要认证中心,以后不再依赖于任何第三方.在方案的实施过程中采用一种动态方式,即合法通信者之间每次可动态获得一个新的认证密钥.所提方案具有可证明安全性,安全性由量子不可克隆性和方案本身的动态特性保证.     

基于量子密码的ASON光包加密方案研究

光包加密是提高ASON(自动交换光网络)安全性的基础。在分析光包加密机制及相关研究现状的基础上,根据ASON分层体系架构及BB84量子密钥分配协议的特点,提出了一种改进的基于四层结构的ASON量子交换机模型;基于该模型,提出了一种基于秘密共享加密的多路径量子密钥分配策略,用于解决长距离传输量子密钥的问题。仿真结果表明该方案是可行的。     

可光纤集成的相干态量子身份认证系统

报道了可光纤集成相干态量子身份认证实验系统。该系统采用偏振相干态的斯托克斯矢量作为量子信号载体,采用动态偏振控制器作为信号调制器,利用固有的相干态量子噪声保证系统的安全性。自行设计了脉冲激光驱动电路、微弱窄脉冲激光探测电路、信号同步模块,采用Socket网络通信程序在TCP/IP局域网中实现了量子保密通信所需要的经典通信。该相干态量子身份认证系统采用的运行密钥为12位,每个光脉冲包含40000个光子,传输速率达到8kbit/s,合法用户间误码率(BER)小于10-4。每传输一个比特信息,攻击者所能窃取的信息量I(Alice,Eve)<10-14bit。     

Network coding based joint signaling and dynamic bandwidth allocation scheme for inter optical network unit communication in passive optical networks

As an innovative and promising technology, network coding has been introduced to passive optical networks (PON) in recent years to support inter optical network unit (ONU) communication, yet the signaling process and dynamic bandwidth allocation (DBA) in PON with network coding (NC-PON) still need further study. Thus, we propose a joint signaling and DBA scheme for efficiently supporting differentiated services of inter ONU communication in NC-PON. In the proposed joint scheme, the signaling process lays the foundation to fulfill network coding in PON, and it can not only avoid the potential threat to downstream security in previous schemes but also be suitable for the proposed hybrid dynamic bandwidth allocation (HDBA) scheme. In HDBA, a DBA cycle is divided into two sub-cycles for applying different coding, scheduling and bandwidth allocation strategies to differentiated classes of services. Besides, as network traffic load varies, the entire upstream transmission window for all REPORT messages slides accordingly, leaving the transmission time of one or two sub-cycles to overlap with the bandwidth allocation calculation time at the optical line terminal (the OLT), so that the upstream idle time can be efficiently eliminated. Performance evaluation results validate that compared with the existing two DBA algorithms deployed in NC-PON, HDBA demonstrates the best quality of service (QoS) support in terms of delay for all classes of services, especially guarantees the end-to-end delay bound of high class services. Specifically, HDBA can eliminate queuing delay and scheduling delay of high class services, reduce those of lower class services by at least 20%, and reduce the average end-to-end delay of all services over 50%. Moreover, HDBA also achieves the maximum delay fairness between coded and uncoded lower class services, and medium delay fairness for high class services.     

Demonstration and Scalability Analysis of All-Optical Virtual Private Network in Multiple Passive Optical Networks Using ASK/FSK Format

We present a scalable all-optical virtual private network (VPN) in a two-stage passive optical network (PON) architecture to connect optical network units (ONUs) in different sub-PONs. It provides efficient access and VPN service covering a wider area. The scheme employs amplitude-shift keying/frequency-shift keying (FSK) orthogonal modulation formats, which are used for the VPN and upstream traffic at 625 Mb/s and 5 Gb/s, respectively. At the optical line terminal side, a fiber Bragg grating reflects one of the two frequency components in the FSK signal back to the ONUs in a same VPN. Using a bidirectional amplifier, the power budget and the scalability of the network are significantly improved, as evidenced by numerical analysis using the parameters in the experiment.     

All-optical OFDM network coding scheme for all-optical virtual private communication in PON

A novel optical orthogonal frequency division multiplexing (OFDM) network coding scheme is proposed over passive optical network (PON) system. The proposed scheme for all-optical virtual private network (VPN) does not only improve transmission efficiency, but also realize full-duplex communication mode in a single fiber. Compared with the traditional all-optical VPN architectures, the all-optical OFDM network coding scheme can support higher speed, more flexible bandwidth allocation, and higher spectrum efficiency. In order to reduce the difficulty of alignment for encoding operation between inter-communication traffic, the width of OFDM subcarrier pulse is stretched in our proposed scheme. The feasibility of all-optical OFDM network coding scheme for VPN is verified, and the relevant simulation results show that the full-duplex inter-communication traffic stream can be transmitted successfully. Furthermore, the tolerance of misalignment existing in inter-ONUs traffic is investigated and analyzed for all-optical encoding operation, and the difficulty of pulse alignment is proved to be lower.     

Development of monitoring system for FTTH‐PON using combined ACS and SANTAD

This paper proposes a design of Access Control System (ACS) for fiber‐to‐the‐home passive optical network (FTTH‐PON). Our design works on a standard local area network using a specially designed hardware interfaced with a microcontroller integrated Ethernet to monitor the status of optical signals flow and provides the restoration against fiber failures/faults in FTTH‐PON. We also introduce the centralized troubleshooting system by means of Smart Access Network Testing, Analyzing, and Database (SANTAD). ACS is the subsystem that controls the troubleshooting mechanism carried out by SANTAD. This design will be implemented together with optical line terminal (OLT) at central office (CO) to centralized monitoring and for controlling each optical fiber line's status as well as detecting any failure that occurs in the network system downwardly from CO toward multiple optical network units at different customer residential locations. The scope of this discussion highlighted only the monitoring and controlling instead of the restoration scheme offered. Copyright © 2009 John Wiley & Sons, Ltd.     

Design and evaluation of scheduling algorithms for TDM/WDM PON based on RSOA

This paper presents a scalable and costeffective hybrid time division multiplexing (TDM)/wavelength division multiplexing (WDM) passive optical network (PON), in which reflective semiconductor optical amplifiers (RSOAs) are used as optical network units (ONUs) and a shared tunable laser and photoreceiver stack locate at the optical line terminal (OLT). Especially,tunable transmitters are not only shared by all ONUs, but also used for both upstream and downstream transmissions. To solve resource contention problem and provide and the ONUs, two novel algorithms are proposed to manipulate the wavelength accessibility and the burst scheduling. The performance of both algorithms in terms of the average packet end-to-end delay and throughput were simulated and evaluated.     

Field Experiment on a “Star Type” Metropolitan Quantum Key Distribution Network

Quantum key distribution (QKD) networks have recently attracted growing attention. The topology of the local QKD network is the basis of the next-generation global secure communication network. In this letter, we report a realization of a wavelength-routing star type QKD network which can span a metropolis using a commercial backbone optical fiber network without trusted relays. The longest and the shortest fiber lengths between two geographically separated nodes are 42.6 and 32 km, respectively, and the maximum average quantum bit-error rate is below 8%. A novel analysis model with experimental validation is also proposed to evaluate the user's performance in this network under the condition of maximum multiuser crosstalk.     

Extended M-sequence codes for SAC FO-CDMA PONS applications

A new code structure, namely extended M-sequence (EMS) codes, is presented suitable for passive optical networks (PON). Based on these codes, a spectral-amplitude-coding (SAC) fibre-optic code-division multiple-access system (FO-CDMA) is designed with shared optical line terminal (OLT) and flexible optical network units (ONUs) for PON applications. The results shows the proposed system has excellent performance.     

Implementation of multiple secure virtual private networks over passive optical networks using electronic CDMA

An optical layer solution for implementing multiple secure virtual private networks (VPNs) over a passive optical network (PON) using electronic code-division multiple access is proposed. The multiple virtual private networking capability is experimentally demonstrated with 40-Mb/s data multiplexed with a 640-Mb/s electronic code that is unique to each of the VPNs in the PON, and the transmission of the electronically coded data is carried out using Fabry-Pe/spl acute/rot laser diodes. Experimental results show that this technique can potentially support high data rate traffic while imposing minimal penalty resulting from optical beat interference.     

WDM-PON中基于AWG的新型OVPN研究

在波分复用无源光网络(WDM-PON)中,提出了一种基于阵列波导光栅(AWG)的新型光虚拟专用网(OVPN)。OVPN采用环形结构,在不同光网络单元(ONU)之间使用波长通道直接通信,不仅保证了ONU之间通信的安全性,而且提高了网络生存性。分别从光功率损耗和系统误码率(BER)进行了数值分析,结果表明,本文结构不仅增加了通信的安全性,而且仅使用4个波长就能实现16个ONU的相互联接,从而节省了波长资源,且具有很强的抗串扰能力。     

A heuristic approach for designing hybrid PONs employing WDM and OCDMA with asymmetric traffic distribution

In this paper we examine the resource provisioning aspects in a passive optical network (PON) employing wavelength-division multiplexing (WDM) and optical code-division multiple access (OCDMA) techniques. A judicious resource allocation scheme is proposed for a given set of optical codes and wavelengths with due consideration to the traffic asymmetry between upstream and downstream transmissions. The proposed scheme employs some initial heuristic estimates, followed by a subsequent open search mode towards reaching an optimal solution. The search mechanism in the provisioning scheme is carried out by employing some network performance metrics and evaluated using the appropriate analytical models.