Mutually secure multi-tenant optical data network and method
A digital optical data network system securely interfaces data traffic between multiple carriers ( 114,116,118 ) and multiple end user tenants ( 102,104,106 ) of a site such as an office building ( 100 ) by accepting multiple carrier data lines ( 120,122,124 ) at a common specialized headend ( 128 ) for the building, encrypting/decrypting the traffic at the headend, and feeding ( 130,132,134 ) the same encrypted optical data feed to each of the multiple private tenants. Each tenant has a specialized encrypting/decrypting optical network unit for extracting and injecting only its data to/from the feed.
1 . A digital data network communication method comprises:
accepting a plurality of private data streams serving a plurality of private tenants;
encrypting each of said streams;
aggregating said encrypted streams into a combined encrypted data feed;
optically routing said encrypted data feed to at least two of said plurality of private tenants;
extracting from said encrypted data feed a first one of said private data streams;
wherein said extracting comprises:
partially decrypting said encrypted feed.
2 . The method of claim 1 , wherein encrypting each of said streams comprises:
encrypting informational data;
encrypting telephone data; and,
encrypting video data.
3 . The method of claim 1 , wherein said accepting comprises:
interfacing a plurality of service provider data lines through a single headend.
4 . The method of claim 3 , wherein said interfacing comprises:
utilizing a premise router and a radio frequency video converter; and,
feeding an output of said premise router through an optical line terminal.
5 . The method of claim 4 , wherein said interfacing further comprises:
feeding an output of said converter through said optical line terminal.
6 . The method of claim 3 , wherein said optically routing comprises:
sending said encrypted data feed through an optical splitter.
7 . The method of claim 1 , wherein said encrypted data feed comprises:
a plurality of encrypted ethernet frames;
wherein a subset of said frames are associated with a first one of said tenants and a second subset of said frames is associated with a second one of said tenants.
8 . The method of claim 1 , wherein said extracting comprises:
operating an optical network unit at each of said tenants;
wherein said operating comprises:
decrypting incoming intended data packets from said feed;
not decrypting incoming unintended data packets from said feed; and,
encrypting outgoing data packets to said feed.
9 . The method of claim 1 , wherein said aggregating comprises using an enterprise aggregating switch.
10 . A multi-tenant optical data network comprises:
a plurality of network service carrier lines connected to a premise router;
at least one uplink connecting said premise router to an optical line terminal;
said optical line terminal being connected to a number of feeder passive optical network feeds for carrying a common encrypted data feed to a plurality of optical network units each supporting at least one of a plurality of private tenant devices; and,
wherein each of said optical network units is adapted to extract data packets intended for a supported one of said devices.