Process-variability-based encryption for photonic communication architectures
The exemplified methods and systems provide hardware-circuit-level encryption for inter-core communication of photonic communication devices such as photonic network-on-chip devices. In some embodiments, the hardware-circuit level encryption uses authentication signatures that are based on process variation that inherently occur during the fabrication of the photonic communication device. The hardware level encryption can facilitate high bandwidth on-chip data transfers while preventing hardware-based trojans embedded in components of the photonic communication device such as PNoC devices or preventing external snooping devices from snooping data from the neighboring photonic signal transmission medium in a shared photonic signal transmission medium. In some embodiments, the hardware-circuit-level encryption is used for unicast/multicast traffic.
1. A method of securing a photonic signal transmission medium in photonic communication that couple pairs of photonic communication devices, the method comprising:
in a photonic communication device, generating, via electrical circuitries, an analog signal based on anti-symmetric behavior of a microring-resonator of a gateway interface of the photonic communication device;
converting, via the circuitries, a digital signal comprising a plurality of bits corresponding to the generated analog signal; and
encrypting, via digital logic or a processor executing a set of instructions, via an encryption key comprising in whole or in part the plurality of bits, data transmitted through or from the gateway interface between a pair of photonic communication devices, including the photonic communication device, wherein the encryption key is uniquely different from other encryption keys used in the encryption of other gateway interfaces of the respective photonic communication devices because of a hardware-based random process-variation profile of the microring-resonator.
2. The method of claim 1 , wherein the encryption key is generated based on a modulator microring resonator associated with the photonic communication device of the pair.
3. The method of claim 2 , wherein the encryption key is generated based on a detector microring resonator associated with a destination gateway interface for the pair.
4. The method of claim 1 , wherein the encryption key is generated for the gateway interface during a testing operation of the photonic communication device.
5. The method of claim 4 , wherein the encryption key is maintained at the gateway interface, or a component accessible thereto, associated with the at least one photonic signal transmission medium.
6. The method of claim 5 , wherein a unicast encryption key is maintained at the gateway interfaces, or a component accessible thereto, for each destination gateway.
7. The method of claim 6 , further comprising:
transmitting, in a third photonic signal transmission medium, metadata for the communication, wherein the metadata indicates the communication comprises at least a portion of a unicast message or at least a portion of a multicast message.
8. The method of claim 5 , wherein the encryption key is employed in whole or in part as a multicast encryption key, the multicast key being maintained at the gateway interface, or a component accessible thereto, wherein the multicast encryption gateway is associated with a set of two or more destination gateways, and wherein the multicast encryption key is generated from two or more encryption keys associated with the two or more destination gateways.
9. The method of claim 1 , further comprising:
reserving a photonic signal transmission medium for data transfer, in a reservation operation, the at least one gateway interface, wherein a reservation signal associated with the reservation operation is transmitted in a second photonic signal transmission medium coupled between the pair of photonic communication devices, and wherein the second photonic signal transmission medium is separate and distinct from the at least one photonic signal transmission medium.
10. The method of claim 9 , wherein each of the photonic communication devices of the pair comprises a microring resonator-based switch coupled to at least two photonic signal transmission mediums, including the at least one photonic signal transmission medium and the second photonic signal transmission medium.
11. The method of claim 9 , further comprising:
disabling the second microring resonator during transmission of the data signals across the at least one photonic signal transmission medium.
12. The method of claim 9 , further comprising:
enabling the second microring resonator when performing the reservation operation to route signals to the second photonic signal transmission medium.
13. The method of claim 1 , wherein the data is transmitted over the at least one gateway interface as a secure unicast communication.
14. The method of claim 1 , wherein the data is transmitted over the at least one gateway interface as a secure multicast communication.
15. A photonic system comprising:
a plurality of processing cores;
a photonic communication fabric wherein the fabric is coupled to, at least, a portion of the plurality of processing cores, the photonic fabric comprising a first photonic signal transmission medium for transmission of data signals and a second photonic signal transmission medium for transmission of reservation signals; and
control logic configured to reserve, in a reservation operation, at least one gateway interface of the photonic communication fabric over the second photonic signal transmission medium, wherein the control logic is configured to:
generate, via electrical circuitries, an analog signal based on anti-symmetric behavior of a microring-resonator of a gateway interface of the photonic communication device;
converting, via the circuitries, a digital signal comprising a plurality of bits corresponding to the generated analog signal;
encrypting, via digital logic or a processor executing a set of instructions, via an encryption key comprising in whole or in part the plurality of bits, data transmitted through or from the gateway interface between a pair of photonic communication devices, including the photonic communication device, wherein the encryption key is uniquely different from other encryption keys used in the encryption of other gateway interfaces of the respective photonic communication devices because of a hardware-based random process-variation profile of the microring-resonator; and
transmit a reservation signal comprising the encryption key.
16. The system of claim 15 , further comprising:
an encryption circuit, the encryption circuit having stored therein the encryption key associated with each of a plurality of gateway interfaces.
17. The system of claim 16 , further comprising:
a second encryption circuit, the second encryption circuit having stored therein a multicast encryption key, wherein the multicast encryption key is generated from two or more encryption keys associated with the plurality of gateway interfaces.
18. A system comprising:
a plurality of photonic communication devices configured with a secured photonic signal transmission medium that couples the photonic communication device to a paired photonic communication device, wherein the photonic communication device is configured to:
generate, via electrical circuitries, an analog signal based on anti-symmetric behavior of a microring-resonator of a gateway interface of the photonic communication device;
convert, via the circuitries, a digital signal comprising a plurality of bits corresponding to the generated analog signal; and
encrypt, via digital logic or a processor executing a set of instructions, via an encryption key comprising in whole or in part the plurality of bits, data transmitted through or from the gateway interface between a pair of photonic communication devices, including the photonic communication device, wherein the encryption key is uniquely different from other encryption keys used in the encryption of other gateway interfaces of the respective photonic communication devices because of a hardware-based random process-variation profile of the microring-resonator.
19. The system of claim 18 wherein the photonic communication device is further configured to:
reserve, in a reservation operation, the at least one gateway interface, wherein a reservation signal associated with the reservation operation is transmitted in a second photonic signal transmission medium coupled between the photonic communication device and the paired photonic communication device, and wherein the second photonic signal transmission medium is separate and distinct from the at least one photonic signal transmission medium.