Data security for networks combining encryption with error correction
In one example embodiment, data is received at a node of a network. The data includes encrypted data segments containing data portions and error correction information. The encrypted data segments are decrypted to produce the data portions and the error correction information. Error correction is performed on the data portions using the error correction information. Corrupt data is determined based on the error correction indicating uncorrectable data.
1 . A method comprising:
receiving data of a frame at a node of a network, wherein the data includes encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
generating the unpredictable sequences of values used to encrypt the codewords;
decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
performing authentication and error correction simultaneously on the data portions using the error correction information; and
determining corrupt data based on the error correction indicating uncorrectable data.
2 . The method of claim 1 , wherein the network includes an optical transport network (OTN) and the frame includes an OTN frame.
3 . The method of claim 1 , wherein the data includes Ethernet traffic.
4 . The method of claim 1 , wherein the encrypted codewords include Reed-Solomon codes.
5 . The method of claim 1 , wherein the encrypted value is produced based on an advanced encryption standard (AES).
6 . The method of claim 1 , further comprising:
synchronizing the unpredictable sequences of values with a transmitting node of the network.
7 . The method of claim 6 , wherein decrypting the encrypted codewords comprises:
decrypting the encrypted codewords based on the unpredictable sequences of values synchronized with the transmitting node.
8 . An apparatus comprising:
a network computing device of a network comprising a memory for storing program instructions and one or more processors configured to execute the program instructions and perform operations including:
receiving data of a frame including encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently individually encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
generating the unpredictable sequences of values used to encrypt the codewords;
decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
performing authentication and error correction simultaneously on the data portions using the error correction information; and
determining corrupt data based on the error correction indicating uncorrectable data.
9 . The apparatus of claim 8 , wherein the network includes an optical transport network (OTN) and the frame includes an OTN frame.
10 . The apparatus of claim 8 , wherein the data includes Ethernet traffic.
11 . The apparatus of claim 8 , wherein the encrypted codewords include Reed-Solomon codes.
12 . The apparatus of claim 8 , wherein the encrypted value is produced based on an advanced encryption standard (AES).
13 . The apparatus of claim 8 , wherein the one or more processors are configured to perform further operations including:
synchronizing the unpredictable sequences of values with a transmitting node of the network, and
wherein decrypting the encrypted codewords comprises decrypting the encrypted codewords based on the unpredictable sequences of values synchronized with the transmitting node.
14 . One or more non-transitory computer readable storage media encoded with processing instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
receiving data of a frame at a node of a network, wherein the data includes encrypted codewords generated by encrypting codewords including encoded data segments, wherein the encoded data segments include plaintext symbols representing data portions and error correction information, wherein each plaintext symbol of the encoded data segments is associated with a different portion of unpredictable sequences of values and independently encrypted within the encrypted codewords by corresponding values from the different portion to map each plaintext symbol to a corresponding unpredictable ciphertext symbol, and wherein the unpredictable sequences of values are produced from different portions of an encrypted value;
generating the unpredictable sequences of values used to encrypt the codewords;
decrypting the encrypted codewords of the frame using the unpredictable sequences of values to produce the encoded data segments containing the data portions and the error correction information;
performing authentication and error correction simultaneously on the data portions using the error correction information; and
determining corrupt data based on the error correction indicating uncorrectable data.
15 . The one or more non-transitory computer readable storage media of claim 14 , wherein the network includes an optical transport network (OTN) and the frame includes an OTN frame.
16 . The one or more non-transitory computer readable storage media of claim 14 , wherein the data includes Ethernet traffic.
17 . The one or more non-transitory computer readable storage media of claim 14 , wherein the encrypted codewords include Reed-Solomon codes.
18 . The one or more non-transitory computer readable storage media of claim 14 , wherein the encrypted value is produced based on an advanced encryption standard (AES).
19 . The one or more non-transitory computer readable storage media of claim 14 , wherein the processing instructions cause the one or more processors to perform further operations including:
synchronizing the unpredictable sequences of values with a transmitting node of the network.
20 . The one or more non-transitory computer readable storage media of claim 19 , wherein decrypting the encrypted codewords comprises:
decrypting the encrypted codewords based on the unpredictable sequences of values synchronized with the transmitting node.