Wdm Optical Steganography Based on Amplified Spontaneous Emission Noise

We propose and experimentally demonstrate a wavelength-division multiplexed (WDM) optical stealth transmission system carried by amplified spontaneous emission (ASE) noise. The stealth signal is hidden in both time and frequency domains by using ASE noise as the signal carrier. Each WDM channel uses part of the ASE spectrum, which provides more flexibility to apply stealth transmission in a public network and adds another layer of security to the stealth channel. Multi-channel transmission also increases the overall channel capacity, which is the major limitation of the single stealth channel transmission based on ASE noise. The relations between spectral bandwidth and coherence length of ASE carrier have been theoretically analyzed and experimentally investigated. Optical steganography has been studied to transmit stealth data in a public network [1–3]. Compared with optical encryption, which encrypts data as unreadable signals but still expose the existence of the signals [4–7], optical steganography hides the very existence of the stealth channel in both time and frequency domains. Without knowing the existence of the stealth channel, the eavesdropper will not try to decrypt the stealth signal. Recently, an optical steganography method based on amplified spontaneous emission (ASE) noise has been theoretically studied and experimentally demonstrated [8–10]. This method uses the amplifier noise that widely exists in fiber optic networks to carry signals. The spectrum of the ASE carrying signal is exactly the same as the spectrum of the original ASE noise, which hides the signal in the frequency domain. Moreover, because the ASE has short coherence length, the eavesdropper cannot detect the phase modulated data without pre-known information of the optical delay, which hides the signal in the time domain. Optical steganography based on ASE noise effectively hides the stealth signal in the public network; however, the capacity of the stealth channel is limited [8,10]. As the signal is carried by spontaneous emission noise with random phase, the data rate is limited by the noise properties of ASE [10]. The previous approach used the entire ASE spectrum to carry the stealth channel, so the steg-anography system only has a single channel. To achieve multi-channel and multiuser steganography capabilities, the ASE spectrum must be divided and deployed in a more efficient way. In this Letter, we propose and experimentally demonstrate a WDM optical steganography system. The stealth signal is carried by a filtered spectrum of ASE noise and multi-channel with different wavelengths is achieved. The multi-channel transmission increases the …


Introduction
With the increased accessibility of optical networks in the last decade, it is important that the communications over optical networks are properly secured. Recently, all-optical data encryption [1][2][3] and optical steganography [4][5][6][7][8][9][10] have been explored for securing networks at the optical layer. Optical encryption enables low latency and high speed encryption without the generating electromagnetic signatures [11]. In particular, optical chaos encryption has been widely studied during the past decade [12][13][14]. Using spread spectrum techniques to encrypt data in a broadband chaotic signal, optical chaos encryption enhances the robustness and privacy of the system. Optical steganography, on the other hand, provides a way to hide private data within the existing public channel so no one, apart from the intended recipient, knows the existence of the message [4]. Transmitting such private data is called a "stealth channel." Without knowing information about the encryption process in the stealth channel, the eavesdropper can neither demodulate the private data nor know the existence of the stealth channel. Previous approaches to optical steganography based on stretching an optical pulse through chromatic dispersion [5], combined with different modulation methods of public channel, have been studied [5][6][7][8][9][10]. Although widely stretched and low amplitude pulses can be buried in the system noise, the optical spectrum of the stealth channel signal is still not sufficiently wide to perfectly match the spectrum of the system noise. A better solution is not to mimic the system noise, but to use the system noise directly to transmit the stealth signal.
Erbium doped fiber amplifiers (EDFAs) are widely deployed in today's optical communication systems. Although amplified spontaneous emission (ASE) noise from EDFAs is undesirable from the perspective of system performance [15], we can benefit from it in the area of photonic network security. We propose to add private signals on top of the ASE noise and thus hide them plain sight. Since ASE already exists as noise in optical systems, and ASE carrying signals have identical spectra as the original noise ASE, an eavesdropper will not be able to differentiate whether it is "signal ASE" or "noise ASE" by observing the spectrum. Another benefit of ASE noise is its short coherence length. Using optical homodyne detection [16], the optical delay length has to be exactly matched at the receiver for the signal to be demodulated. This enables the system to have a key for modulation and demodulation. An eavesdropper has to search a large range of delay lengths to satisfy the matching condition and demodulate the signal.
In this paper, we make use of ASE noise as the source of the stealth channel. Utilizing the short coherence length characteristic of ASE noise, we use DPSK modulation for the stealth channel at the transmitter, and use homodyne detection to demodulate the signal at the receiver. The optical delay length difference at the transmitter is the key for demodulation, which can be several meters. To demodulate the signal without knowing the length difference, the eavesdropper needs to scan the entire length difference to search for the matching condition. The scan has to be precise enough to observe the coherenc length of ASE noise, which is only 372µm. To further prevent the delay length difference from being detected, we use motorized controlled delay lines at both the transmitter and receiver. Controlled by two separate computers, the receiver delay line can follow the movement of the transmitter delay-a "hopping" key. As a consequence, even if the eavesdropper can scan delay line difference and find the matching condition, this process will not be fast enough to find the matching condition before the key changes. Moreover, DPSK is used in the pubic channel. The phase modulated public channel provides both signal and noise with constant power to the system, so the stealth channel can hide in the noise secretly all the time.

Experimental setup
The experimental setup makes use of the short coherence length of ASE noise, and the structure of the stealth channel is a Mach-Zehnder (MZ) interferometer (see Fig. 1). The carrier for the stealth channel comes directly from an EDFA. The EDFA generates ASE noise which has the same characteristics as the ASE noise that exists in the pubic channel. The ASE noise is then input into the MZ interferometer. The stealth signal is modulated onto one arm of the interferometer using a phase modulator. The public channel employs DPSK modulation using a laser source having wavelength 1551.72 nm. To simulate the ASE noise that would be introduced by EDFAs in a long distance transmission system, additional ASE is added at the public channel transmitter. The public channel and stealth channel are combined by a 50:50 coupler and sent over 25 km of standard single mode fiber (SSMF), followed by dispersion compensation fiber (DCF). Three wavelength division multiplexer (WDM) filters are connected in series to spectrally separate the stealth channel from the public channel. The stealth channel receives the signal from the reflection output of the third WDM filter. The public channel receives the transmission output of the first WDM filter. The transmitter and receiver of the stealth channel actually represent a large Mach-Zehnder interferometer. There are two pairs of optical paths: path 1→3, 2→4 and path 1→4, 2→3 (see Fig. 1). Line 1 is 6m longer than line 2. Because ASE noise has a very short coherence length, which we measured to be 372 µm (as detailed in Section 3), interference can only occur when the length of one pair of the light paths matches exactly with that of the corresponding other pair. In this experiment, light path 1→3 and light path 2→4 have the same length. Two tunable delay lines are used. One is at the transmitter and the other is at the receiver. They are controlled by two separate computers which share a secret key. Thus, if tunable delay 1 (T1) moves to a new position, tunable delay 2 (T2) is instructed to mimic that movement, and reestablish the matching condition. The fiber-based Mach-Zehnder interferometer is sensitive to temperature and mechanical vibration [17]. The temperature and mechanical vibrations can cause the eye diagram and bit error rate (BER) at the receiver of the stealth channel to vary as a function of time. To minimize these effects, we: (1) packaged the interferometers both at the transmitter and receiver of the stealth channel; and (2) Physically stabilized all the fibers. Using this method, the eye diagram can stay stable for up to 5 s, which is long enough to measure the BER at a given signal power. For deployed transmission systems, industry standards for stability control would be required.

Coherence length measurement
The coherence length of the ASE noise can be measured by scanning one of the two delay lines and using a photo detector at the receiver to detect the output power. If the optical path difference between the paths 1→3 and 2→4 is longer than the coherence length, then there will be no interference, leading to a constant power at the detector. If the optical path difference between the paths 1→3 and 2→4 is within the coherence length, then interference will be observed by a change in the received power at the detector. When the delay line is scanning at a constant speed, constructive and destructive interference occur alternatively, so the detector receives optical power varying as sinusoidal function with time [see Fig. 2(b)]. After one delay scan through the coherence length, an interference peak can be observed at the detector as illustrated in Fig. 2(a). The coherence length of the ASE noise is determined by measuring the full width at half-maximum (FWHM) of the interference peak which is 1.24 ps in terms of optical delay, or 372 µm in terms of length. To successfully transmit the signal using the stealth channel, the delay-length difference must be within the coherence length of the ASE noise to demodulate the DPSK signal. The presence of an interference peak indicates a zero delay-length difference, which results in the strongest signal intensity and lowest BER for the stealth channel. To demonstrate this effect, we measure the BER of the stealth channel when the delay line scans through the coherence peak, as exemplified in Fig. 2(c). A radio frequency (RF) amplifier is used to amplify the electrical signal from the detector. The BER reaches a minimum value at the coherence peak, as expected. Note that the BER rises rapidly, and therefore the signal cannot be detected, if the delay length is outside of the coherence length. The results show that in order to detect the signal in the stealth channel, the eavesdropper needs to scan the entire optical path difference of lines 1 and 2, which is 6 m, to find a range of 372 µm that achieves interference. This scanning must be accomplished before the path length is altered.
To further prevent the delay length from being detected, it would be advantageous to change our delay length difference as a function of time. In the experiment, we changed the delay length every 20 s. The two delay lines share the same secret key, so the delay line at the receiver can change in accordance with changes at the transmitter. In this experiment, the changing range is 9cm, but a larger range can be achieved by using longer automatic delay lines.  3(c)). This is measured at point A in Fig. 1 when the signal ASE is turned off (see Fig.  3(a)) and on (see Fig. 3(b)). The power of the signal ASE is 14.5 dB lower than the public channel, so the power change with and without signal ASE is small. To further inhibit the eavesdropper from detecting the existence of stealth channel, the signal ASE can be on all the time. Whether the stealth channel is transmitting signals depends on whether phase modulation is added to the signal ASE. Therefore the power level on the stealth channel will always be the same whether the stealth channel is on (see Fig. 3(b)) or off (see Fig. 3(c)). In the spectral domain, the signal ASE has same spectrum as the AASE that originally exists in the public channel (see Fig. 4(a)), so the eavesdropper cannot detect the existence of the stealth channel by observing the spectrum of the signal.

Time and spectral domain measurement
The stealth receiver can only demodulate the signal and receive a clear eye diagram when the delay-line lengths are matched. The data rate of the stealth channel and public channel are 500 Mb/s and 10 Gb/s, respectively. Figures 3(d) and 3(e) depict the eye diagrams of the signal at the receiver of the stealth channel with and without the public channel on, respectively. To reduce the out-of-band high-frequency noise from the ASE source of the stealth channel, two RF low-pass filters (LPFs) with −3dB cutoff frequencies of 600 MHz and 5 GHz are used in series at the receiver of the stealth channel. Comparing Figs. 3(d) and 3(e), we observe that the simultaneous presence of the public channel does not change the quality of the signal in the stealth channel. This is because three WDM optical filters are used to separate the stealth channel and public channel. The central frequency of the optical filters is 1551.72 nm with a −3dB bandwidth 0.5 nm. The filters effectively suppress the power of the public channel (see Fig. 4(b)). When additional ASE is added to the public channel, the stealth channel has smaller eye opening (Fig. 3(f)). This is because additional ASE saturates the EDFA at the receiver of stealth channel.
The eye diagrams of the public channel show that the original public channel eye diagram (see Fig. 3(g)) does not change when stealth channel is added to the system (see Fig. 3(h)). Therefore, even the eavesdropper can demodulate the public channel, he/she still cannot detect the existence of the stealth channel.

Power penalty of the system
The BER measurements of the stealth channel show that adding the public channel to the system does not result in a power penalty of stealth channel. In Fig. 5(a), the BER curves of the stealth channel with and without the public channel are indistinguishable. This is because the ASE noise covers a large range of spectrum from 1520 nm to 1560 nm (see Fig. 4(a)), whereas the public channel is only at a single wavelength of 1551.72 nm, which can easily be filtered from the stealth channel. However, we note that there is a power penalty of 6.5 dBm when additional ASE with the same power as the signal ASE is added. This is because additional ASE has the same spectrum as ASE carrying stealth signals. They cannot be separated by optical filters, so more power is required to reach the same BER when additional ASE is added. The BER reaches a noise floor at 10 −6 . The power penalty is qualitatively observed from the degradation in the eye diagram of the stealth channel in Fig. 3(e) with more jitter and smaller eye opening. The additional ASE saturates the EDFA of the stealth channel and causes the amplitude of eye to be smaller. The power penalty at different additional ASE to signal ASE power ratios is shown in the inset of Fig. 5(a). The results show that power penalty increases monotonically when the ratio of additional ASE to signal ASE increases. Besides additional ASE, other effects including dispersion and nonlinear effect also affect the performance of the stealth channel. In our experiment, we use DCF to compensate the dispersion from 25km fiber. Because the stealth channel has weak power, the influence of nonlinear effect from stealth channel is not observed. The BER measurements of the public channel show that adding the stealth channel only causes a 0.2 to 0.3 dBm power penalty. The BER line for the public channel with only the stealth signal (see dash red line in Fig. 5(b)) and the public channel with only additional ASE (see solid blue line in Fig. 5(b)) almost overlap as the ASE carrying the stealth signal and additional ASE have the same power.

Conclusion
An optical steganography method is proposed and experimentally demonstrated using ASE noise and homodyne detection. ASE noise carrying a stealth signal has the same spectrum as the ASE noise originally existing in the system, which hides the stealth signal in the frequency domain. In the time domain, because the ASE noise has a short coherence length, the optical delays must be matched exactly in order to receive the stealth signal. Changing the delay length frequently makes it impossible for the eavesdropper to find and track the optical delay length difference. BER measurements of the system show that the stealth channel and the public channel do not interfere with each other. Furthermore, the public channel does not induce any power penalty on the stealth channel. On the other hand, the stealth channel only causes a 0.2-0.3 dBm power penalty on the public channel.