Electric power service isolation transmission device and method based on optical wavelength and optical packet switching
Technical Field
The invention relates to the field of power system communication, in particular to a power service isolation transmission device and method based on optical wavelength and optical packet switching.
Background
The communication service of the power system is mainly divided into power grid operation and enterprise management service according to the functions and characteristics of the communication service. The power grid operation type service is divided into an operation control service and an operation information service; the enterprise management services are further classified into information services and office services. These services rely on the support of the communication network, but the requirements for communication are not consistent. For example, the operation control service is used as a link of power grid control, which is directly related to the power grid safety, so that the requirements on communication transmission delay and channel reliability are extremely high. The management information service has extremely high requirements on communication availability, reliability, safety and the like, and has relatively low requirements on time delay. With the gradual development of the construction of smart power grids and the informatization construction of the power industry, the types of power communication services are continuously increased, the services are relatively independent, the requirements of high real-time performance, high reliability and high safety are provided for communication, and the safety isolation requirements among the services are also emphasized. The communication safety of the power grid is related to the operation safety of the intelligent power grid.
The current communication isolation method is more commonly used for dividing VLANs or creating VPNs to achieve the purpose of network partitioning, and two or more independent communication systems are also constructed to respectively transmit different services, such as power distribution and electric communication access networks. The former adopts a logic isolation mode, and the safety and the confidentiality cannot be ensured; the latter is dedicated for private networks, achieves physical isolation effect, but brings negative effects of increasing construction cost and doubling investment for later upgrading and maintenance. Therefore, a new power service isolation method is needed to meet the requirements of power service development and reliable service transmission.
Existing power service isolation techniques
The service isolation methods which can be adopted in the power communication network at present are physical isolation and logical isolation. Logical isolation techniques, also referred to as virtual isolation techniques, can be divided into two types, VLAN and VPN, depending on the level of isolation.
Physical isolation, also called private line isolation, is a common service isolation technique, that is, physical isolation of services using a private line, that is, configuring a separate physical line for each service, as shown in fig. 1. The special line is an independent line, so that the bandwidth can be shared independently and can be completely ensured; the special line service does not share a link with other services, the independence of the services can be physically guaranteed, and the highest security is achieved in various isolation technologies.
VLAN (Virtual Local Area Network) is a two-layer isolation technique, which is based on the principle that devices in a Local Area Network are logically divided into multiple subnets (or segments, VLANs), as shown in fig. 2. The users in each VLAN can access each other, and the users in different VLANs can not access each other, thus ensuring that the information of the LAN can not be intercepted by other VLAN persons, thereby realizing the information confidentiality. Because VLAN is a logical network division, the networking scheme is flexible, the configuration management is simple, the management and maintenance cost is reduced, and the virtual network is a safer and more efficient virtual technology in a two-layer network.
VPN (Virtual Private Network) is a three-layer based isolation technology that has emerged in the mid 90's of the 20 th century, aiming to implement Private connections like Private lines through public Network infrastructure, as shown in fig. 3. The principle is that a dedicated VRF (Virtual routing Forwarding) table is established for each VPN on a three-layer Forwarding device (a router or a three-layer switch), each VRF table is independent of each other and has a special mark, and each VPN data is forwarded on a public network through a dedicated tunnel (GRE, MPLS, IPSec, L2TP, etc.). Through special marks, VPN data are mutually isolated in the VRF and the special tunnel, and the confidentiality and the safety of the VPN data are ensured. At present, the VPN technology is adopted to isolate each service system of electric power, so that enough bandwidth, extremely small time delay and better QoS guarantee can be provided for each service system, and better network safety can be provided. Traffic isolation for wide area networks may also be achieved using VPN technology, i.e. a separate tunnel is configured for each department or for each traffic, but this is a logical isolation.
Disadvantages of existing power service isolation techniques
Although the physical isolation technology can ensure the independence and the safety of a plurality of services, because of the variety of services, two or more sets of physical networks are often required to be constructed and maintained to respectively operate different key services. The disadvantages are:
inconvenient maintenance: the maintenance workload of a network administrator is multiplied in the aspects of basic network management and security policy deployment by a plurality of sets of independent physical networks;
the cost is high: the cost of network hardware and software resources that need to be purchased is multiplied;
the utilization rate is low: multiple sets of physical networks respectively bear different key services, the overall utilization rate of network resources is low, the utilization rate is unbalanced, and resource sharing cannot be well achieved;
poor flexibility: when the services change, the existing service isolation mode needs to be adjusted, and when the services are respectively carried on a plurality of physical networks which are isolated from each other, the integration and the mutual access control of the services are very complicated and even difficult to implement.
VLAN is a two-layer logic network isolation technology, breaks through the restriction of a specific network, divides the network into a plurality of different logic subnets and limits the transmission range of broadcast data. The disadvantages are:
large planning deployment difficulties: with the gradual increase of network scale, the services needing isolation and mutual access increase, the workload of designing and configuring the VLAN by a network administrator is increased, and the possibility of incomplete design and configuration errors is increased;
the safety is poor: on one hand: the spread of virus or malicious attack cannot be prevented, because all users in a VLAN are in the same network, if one user is infected with virus or suffers malicious attack, other users will be infected with the same virus or suffer the same attack; on the other hand, since the VLAN technology can only achieve logical isolation, all data are physically in the same physical channel, and there is a possibility of interception by others.
VPN technology can logically provide effective privacy and security guarantee for different services, but also has the following disadvantages:
bandwidth guarantee measures are imperfect: all VPN technologies virtually form a tunnel on a physical channel, share a physical bandwidth with other services, guarantee of the bandwidth needs a corresponding QoS technology, and the tunnel technology cannot guarantee the tunnel bandwidth;
unreliable security: since VPN technology can only do logical isolation, there is a possibility that all data is physically in the same physical channel and intercepted by others.
At present, two power service isolation methods of common network transmission generally adopt VLAN and VPN. In terms of security, since VLAN and VPN technologies can only achieve logical isolation, all data are physically in the same physical channel, and there is a possibility of interception by others, so that the overall security is not very reliable.
Disclosure of Invention
Based on the above situation in the prior art, the present invention provides an apparatus and a method for power service isolation transmission based on optical wavelength and optical packet switching, in order to solve the security isolation requirement and reliable transmission of power service. The technical scheme provided by the invention directly transmits the power service on the light path, and a plurality of physically isolated single-wavelength light paths can be established in a single pair of optical fibers by utilizing the multi-wavelength transmission characteristic of the optical fibers, so that the transmitted power service is loaded on different wavelengths, complete physical isolation can be realized, the hidden danger of service safety isolation caused by logic isolation is eliminated, and the safety, confidentiality and reliability of power service data are improved.
To achieve the above object, according to one aspect of the present invention, there is provided an electrical service isolation transmission apparatus based on optical wavelength and optical packet switching, the apparatus comprising: the system comprises a service information mapping module and an optical packet service switching module; wherein, the service information mapping module comprises a sending module and a receiving module,
the sending module comprises:
a service identification and classification unit: classifying the received IP data packet according to the service type and the routing information in the IP data packet;
a service mapping and multiplexing unit: mapping different service information to different wavelengths through electro-optical conversion, and multiplexing the different service information to a WDM optical fiber;
the receiving module includes:
a demultiplexing unit: demultiplexing and photoelectric conversion are carried out on data from the WDM optical fiber;
a service distribution unit: distributing the routing information to corresponding service ports;
the optical packet service switching module comprises:
an input unit: decomposing the service carried on the WDM fiber according to different wavelengths;
a switching unit: respectively exchanging different wavelengths;
an output unit: and carrying out wavelength division multiplexing on the services carried by the different wavelengths, and sending the services into a WDM optical fiber for remote transmission.
Further, before the service identification and classification unit, an FIFO unit is further included, and after the IP packet is received from the ethernet, rate matching is performed through the FIFO unit, and then the IP packet enters the service identification and classification unit.
Further, before the service mapping and multiplexing unit, an optical packet header encoding unit is further included, which performs secondary encapsulation on data in the IP data packet and generates an optical packet header code.
Further, an optical packet header encoding unit is further included after the demultiplexing unit, and the optical packet header encoding unit performs optical packet header decoding to decapsulate and restore the optical packet header into an IP data packet.
Furthermore, in the input unit, the traffic carried on the WDM optical fiber is decomposed according to different wavelengths, different types of traffic are carried by different wavelengths using a wavelength-based decomposition strategy, and the different wavelengths are separated by a demultiplexer.
According to another aspect of the present invention, there is provided a power service isolation transmission method based on optical wavelength and optical packet switching, including a service information mapping step and an optical packet service switching step; wherein, the service information mapping step comprises a sending process and a receiving process, and the sending process comprises:
s11, classifying the received IP data packet according to the service type and the routing information in the IP data packet;
s12, mapping different service information to different wavelengths through electro-optical conversion, and multiplexing the different service information to the WDM optical fiber;
the receiving process comprises the following steps:
s13, demultiplexing and photoelectrically converting the data from the WDM fiber;
s14, distributing the routing information to the corresponding service port;
the optical packet service switching step includes:
s21, decomposing the service carried on the WDM fiber according to different wavelengths;
s22, respectively exchanging different wavelengths;
and S23, performing wavelength division multiplexing on the services carried by the different wavelengths, and sending the services into a WDM optical fiber for remote transmission.
Further, in step S11, the IP packet is received from the ethernet, and is subjected to rate matching by the FIFO, and then is classified.
Further, in step S12, before the electrical-to-optical conversion, the method further includes performing secondary encapsulation on the data in the IP data packet and generating an optical header code.
Further, in step S13, after the demultiplexing and the photoelectric conversion, the optical packet header decoding is performed to decapsulate and restore the packet into an IP data packet.
Further, in step S21, the traffic carried on the WDM optical fiber is decomposed according to different wavelengths, different types of traffic are carried by different wavelengths using a wavelength-based decomposition strategy, and the different wavelengths are separated by the demultiplexer.
In summary, the present invention provides an apparatus and a method for power service isolation transmission based on optical wavelength and optical packet switching. By directly transmitting the power service on the light path and utilizing the multi-wavelength transmission characteristic of the optical fiber, a plurality of physically isolated single-wavelength light paths can be established in a single pair of optical fibers, the transmitted power service is loaded to different wavelengths, complete physical isolation can be achieved, the hidden danger of service safety isolation caused by logic isolation is eliminated, and the safety, confidentiality and reliability of power service data are improved.
Drawings
Fig. 1 is a schematic diagram of an intelligent substation SV message directly sampled through an optical fiber in the prior art;
FIG. 2 is a diagram illustrating a prior art VLAN architecture;
FIG. 3 is a diagram of a prior art VPN architecture;
FIG. 4 is a schematic diagram of Wavelength Division Multiplexing (WDM) principles;
fig. 5 is a schematic diagram of the power service isolation transmission method based on optical wavelength and optical packet switching technology of the present invention;
FIG. 6 is a schematic diagram of the edge node preprocessing traffic according to the present invention;
FIG. 7 is a schematic diagram of the physical layer isolation technique based on the optical packet switching technique according to the present invention;
fig. 8 is a flow chart of the power service isolated transmission method based on optical wavelength and optical packet switching technology of the present invention;
fig. 9 is a schematic diagram of the structure of the power service isolation transmission device based on optical wavelength and optical packet switching technology.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings in conjunction with the following detailed description. It should be understood that the description is intended to be exemplary only, and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.
The technical solution of the present invention will be described in detail below with reference to the accompanying drawings. The invention relates to a power service isolation transmission method and a device based on optical Wavelength and optical packet switching technology, which utilize a basic technology-Wavelength Division Multiplexing (WDM), wherein the technology is a main technology for improving the transmission capacity of an optical fiber and is similar to the frequency Division multiplexing technology in a radio system. It combines a plurality of optical carrier signals (carrying various different information or services) with different wavelengths together at the transmitting end via a multiplexer (multiplexer) and couples them into the same optical fiber for transmission, separates the optical carriers with each wavelength at the receiving end using a de-multiplexer (de-multiplexer), and then further processes them by an optical receiver to recover the original signals, and its schematic diagram is shown in fig. 4. As long as the distance between adjacent wavelength channels is far enough, the different wavelength channels will not interfere with each other, so that the multiplexing transmission of multiple optical signals can be realized in one optical fiber. In addition, the bidirectional transmission can be realized by arranging signals in two directions on different wavelengths respectively. WDM technology has greatly increased the transmission capacity of optical fibers, and its development is very rapid due to market driving and research breakthrough of related technologies.
The invention relates to a power service isolation transmission method and a device based on optical wavelength and optical packet switching technology, which are used for carrying out wavelength-level scheduling on different types of services by using optical wavelength switching according to the types of power services and carrying out packet switching scheduling on services carried by the same wavelength. The technical principle of the invention is shown in figure 5: before the power service enters the all-optical switching network, the wavelength-based service mapping is firstly carried out on the corresponding service at the service port according to the characteristics and specific requirements of the service, that is, different services are loaded onto different optical wavelengths, and then the mapped service is sent to the optical packet switching network for service transmission. The technical scheme of the invention is mainly realized by two important functional modules: a traffic mapping module (shown in fig. 5 as a left dashed box) and an optical packet traffic switching module (shown in fig. 5 as a right box) of the edge node.
Specifically, according to another embodiment of the present invention, there is provided an electrical service isolated transmission apparatus based on optical wavelength and optical packet switching technology, and the schematic configuration diagram of the apparatus is shown in fig. 9. The device comprises: a service information mapping module and an optical packet service switching module.
The service information mapping module is also called a service information mapping module of an edge node, and the edge node is also called a service port, and is divided into a sending part and a receiving part, and a functional model is shown in fig. 6. The all-optical switching network can be interconnected with a common electrical switching IP network through edge nodes. The service mapping function module of the edge node mainly realizes the mapping and matching functions between the transmission service and the optical wavelength.
The service information mapping module comprises a sending module and a receiving module. The main functions of the sending module are: the service port receives an IP data packet from the traditional Ethernet; performing rate matching through a FIFO (First Input First Output, First in First out queue); then accessing a service identification and classification module, and classifying the service identification and classification module according to the service type and the routing information; then secondary packaging is carried out and an optical packet header code is generated; finally, different service information is mapped to different wavelengths through E/O (Electric/Optical) conversion, and Multiplexed (MUX) to the WDM fiber. The main functions of the receiving part are: the data from the WDM Optical fiber is converted by an O/E (Optical/electrical, opto-electrical) through a Demultiplexer (DEMUX), service data is decoded from different wavelengths, then an Optical packet header is decoded, the data packet is decapsulated and restored to an IP packet, and then the IP packet is distributed to a corresponding service port according to routing information.
Specifically, the sending module includes: FIFO unit, service identification and classification unit, optical packet head coding unit and service mapping and multiplexing unit.
FIFO unit: and after the IP data packet is received from the Ethernet, the IP data packet is subjected to rate matching through the FIFO unit and then enters the service identification and classification unit.
A service identification and classification unit: and classifying the received IP data packet according to the service type and the routing information in the IP data packet.
Optical packet header encoding unit: and performing secondary encapsulation on the data in the IP data packet and generating an optical packet header code.
A service mapping and multiplexing unit: different service information is mapped to different wavelengths through electro-optical conversion and multiplexed onto the WDM fiber.
The receiving module includes: the system comprises a demultiplexing unit, an optical packet header coding unit and a service distribution unit.
A demultiplexing unit: the data from the WDM fiber is demultiplexed and photoelectrically converted.
Optical packet header encoding unit: and decoding the optical packet header to unpack and restore the optical packet header into an IP data packet.
A service distribution unit: and distributing the routing information to the corresponding service ports.
The service port realizes service classification in an electric switching network aiming at the problem that certain traditional equipment, such as an intelligent substation measurement and control device, uses the same network port to carry out service mixed transmission, and after entering an all-optical switching network, services are borne on independent wavelengths and do not interfere with each other until service data leaves the all-optical network from an edge node, so that physical isolation of service transmission is realized.
The optical packet service switching module is further explained below, the service isolation method based on the optical wavelength and optical packet hybrid switching technology belongs to the physical layer isolation technology, the physical layer isolation technology schematic diagram based on the optical packet switching technology is shown in fig. 7, the module is divided into an input part, a switching processing part and an output part, the input part mainly consists of a demultiplexer, and the demultiplexer mainly functions to decompose the services carried on the WDM optical fiber according to different wavelengths and send the services into the switching processing part; the exchange processing part mainly comprises an optical exchange matrix and realizes the exchange of different wavelengths; the output part is mainly composed of a multiplexer, the main function of the multiplexer is opposite to that of the demultiplexer, the multiplexer carries out wavelength division multiplexing on services carried by different wavelengths and sends the services to a WDM optical fiber for remote transmission.
Specifically, the optical packet service switching module includes:
an input unit: and decomposing the service carried on the WDM optical fiber according to different wavelengths. The method comprises the steps of decomposing services carried on a WDM optical fiber according to different wavelengths, adopting a wavelength-based decomposition strategy, carrying different types of services by different wavelengths, and separating the different wavelengths by a demultiplexer.
A switching unit: different wavelengths are exchanged separately.
An output unit: and carrying out wavelength division multiplexing on the services carried by the different wavelengths, and sending the services into a WDM optical fiber for remote transmission.
The specific implementation process is as follows: the business entering the all-optical switching network adopts the distribution strategy based on wavelength, and different wavelengths bear different types of business; after entering the all-optical packet switching functional module, the wavelength is first separated by the demultiplexer, the wavelengths carrying different services enter corresponding switching units respectively, and are loaded onto the optical fiber by the multiplexer after coming out of the switching units. In the whole process, the light paths are kept independent, and the physical isolation of the service is realized, so that the physical isolation effect of service transmission is realized.
According to another embodiment of the present invention, there is provided a power service isolation transmission method based on optical wavelength and optical packet switching technology, the method having a flowchart as shown in fig. 8, and including a service information mapping step and an optical packet service switching step; the service information mapping step comprises a sending process and a receiving process.
The sending process comprises the following steps:
s11, classifying the received IP data packet according to the service type and the routing information in the IP data packet. The IP packet is received from the ethernet, and after rate matching is performed by FIFO (First Input First Output, First in First out queue), the classification is performed.
And S12, mapping different service information to different wavelengths through electro-optical conversion, and multiplexing the different service information to the WDM optical fiber. Before the electro-optical conversion, the method further comprises the step of performing secondary encapsulation on the data in the IP data packet and generating an optical packet header code.
The receiving process comprises the following steps:
and S13, demultiplexing the data from the WDM optical fiber and performing photoelectric conversion. After the demultiplexing and the photoelectric conversion, optical packet header decoding is also required to decapsulate and restore the packet into an IP data packet.
And S14, distributing the routing information to the corresponding service port.
The optical packet service switching step comprises:
and S21, decomposing the traffic carried on the WDM fiber according to different wavelengths. The method comprises the steps of decomposing services carried on the WDM optical fiber according to different wavelengths, adopting a wavelength-based decomposition strategy, carrying different types of services by different wavelengths, and separating the different wavelengths by a demultiplexer.
And S22, respectively exchanging different wavelengths.
And S23, performing wavelength division multiplexing on the services carried by the different wavelengths, and sending the services into a WDM optical fiber for remote transmission.
In summary, the present invention relates to an apparatus and a method for power service isolated transmission based on optical wavelength and optical packet switching. The transmission of the power service is directly carried out on the light path, and by utilizing the multi-wavelength transmission characteristic of the optical fiber, a plurality of single-wavelength light paths which are isolated physically can be established in a single pair of optical fibers, the transmitted power service is loaded to different wavelengths, the light paths are always kept independent in the whole transmission process, the physical isolation of the service is realized, the physical isolation effect of service transmission is achieved, the hidden danger of service safety isolation caused by logic isolation is eliminated, and the safety, confidentiality and reliability of power service data are improved.
It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention shall be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.