基于光学加密拓扑的多域光纤通信网络安全域划分系统设计  

Design of security domain division system for multi-domain optical fiber communication network based on optical encryption topology

作　　者：曹生林[1] 柳立言[1] 康凯[1] CAO Shenglin;LIU Liyan;KANG Kai(Ningxia Normal University School of Mathematics and Computer Science,Ningxia 756000,China)

机构地区：[1]宁夏师范学院数学与计算机科学学院,宁夏756000

出　　处：《激光杂志》2023年第8期145-149,共5页Laser Journal

基　　金：国家自然科学基金(No.62166031)。

摘　　要：为增强多域光纤通信网络安全,设计一种基于光学加密拓扑的多域光纤通信网络安全域划分系统。将网络安全域分为四种类型,在本地接入端链路实施1∶1热备份,利用分光器、威胁预警检测板块、主操控板块和自动切换板块组建系统硬件;系统软件融合类内信息熵与类间信息熵,引入加权差异性度量策略,获得面向不同类型光纤数据的加权算法,划分安全域属性特征,以两个已知图像节点振幅为收敛条件,创建陷门单向函数,实现光学图像拓扑加密。实验结果表明,所建系统可有效抵御恶意攻击,安全域信息提取速率与精度均满足实际需求,可靠性强。In order to enhance the security of multi-domain optical fiber communication network,a security do-main partition system of multi-domain optical fiber communication network based on optical encryption topology is de-signed.The network security domain is divided into four types,and 1∶1 hot backup is implemented on the local ac-cess end link,and the system hardware is built by using the optical splitter,threat early warning detection module,main control module and automatic switching boards.The system software integrates the intra-class information entropy and the inter-class information entropy,introduces the weighted difference measurement strategy,obtains the weigh-ting algorithm for different types of optical fiber data,divides the attribute characteristics of the security domain,and creates a trap one-way function with the amplitudes of two known image nodes as the convergence condition to realize the topological encryption of optical images.The experimental results show that the system can effectively resist mali-cious attacks,the speed and accuracy of information extraction in the security domain meet the actual needs,and the reliability is strong.

关 键 词：光学加密拓扑 多域光纤通信 安全域划分 系统构建 图像加密 

分 类 号：TN929[电子电信—通信与信息系统]