通过q-ROADM实现的动态交换Flex-Grid光网络上的端到端量子安全域间5G业务演示
End-to-end Quantum Secured Inter-Domain 5G Service Orchestration Over Dynamically Switched Flex-Grid Optical Networks Enabled by a q-ROADM
摘要:
由NFV和SDN支持的动态和灵活的光网络是支持新兴5G网络服务的动态性和带宽需求的关键技术推动因素。为了实现5G的目标,网络服务(NS)必须经常透明地部署在多个管理和技术领域。这种情况通常存在安全风险,因为典型的NS可以包括网络功能链,每个网络功能在不同的远程位置执行,并且网络基础设施内的篡改可能危及它们的通信。为了避免这种威胁,QKD已经被确定并提出作为一种未来证明的方法,它不受任何基于量子物理机制的算法密码分析的影响。QKD的成熟使得量子网络与使用电信设备的光网络共存的研发成为可能。这使得QKD成为分布式和虚拟化网络服务安全的合适候选者。在本文中,我们首次提出了一种动态量子安全光网络,用于支持通过在多个网络域上链接VNF动态创建的网络服务。这项工作包括一个新的量子ROADM,对SDN支持的光控制平面的扩展,以及对NFV编排的扩展,以实现VNF的量子感知,按需链接。实验结果验证了在共享光纤链路上单独和动态路由量子和经典数据通道的能力。此外,5G网络中VNF的量子安全链接通过使用5GUK Exchange编排平台通过q-ROADM与八个光通道同时互连四个自治5G岛进行实验演示。实验场景和结果证实了所提出的数据平面架构和控制/管理平面框架的益处。
英文摘要:
Dynamic and flexible optical networking enabled by NFV and SDN are the key technology enablers for supporting the dynamicity and bandwidth requirements of emerging 5G network services. To achieve the objective of 5G, Network Services (NSes) must be often deployed transparently over multiple administrative and technological domains. Such case often presents security risks since a typical NS may comprise a chain of network functions, each executed in different remote locations, and tampering within the network infrastructure may compromise their communication. To avoid such threats, QKD has been identified and proposed as a future-proof method immune to any algorithmic cryptanalysis based on quantum-physics mechanisms. The maturity of QKD has enabled the R&D of quantum networks coexisting with optical networks using telecom equipment. This makes the QKD a suitable candidate for the security of distributed and virtualised network services. In this paper, for the first time, we propose a dynamic quantum-secured optical network for supporting network services that are dynamically created by chaining VNF over multiple network domains. This work includes a new quantum-ROADM, extensions to SDN-enabled optical control plane, and extensions to NFV orchestration to achieve quantum-aware, on-demand chaining of VNFs. The experimental results verify the capability of routing quantum and classical data channels both individually and dynamically over shared fibre links. Moreover, quantum secured chaining of VNFs in 5G networks is experimentally demonstrated via interconnecting four autonomous 5G islands simultaneously through the q-ROADM with eight optical channels using the 5GUK Exchange orchestration platform. The experimental scenarios and results confirm the benefit of the proposed data plane architecture and control/management plane framework.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。