Abstract:
A method is provided for detecting intrusion into an optical cable of an optical network comprising where monitoring light signals are transmitted along a telecommunications optical fiber to be monitored either along a fiber additional to a data fiber or by multiplexing onto a common fiber. The received monitoring light signals after transmission along the telecommunications optical fiber are analyzed for changes indicative of movement of the optical fiber for detecting an intrusion event. The monitoring light signals at the receive end of the fiber signals are returned along the same fiber by a coupler where the legs are connected or by a reflective material.

Description:
[0001]    This invention relates to a network alarm system utilizing a single sensing fiber. 
         [0002]    This invention monitors over a single fiber by coupling the transmit and receive circuits of a standard monitoring system and returns the signal at the far end by means of a reflection or loopback. 
       BACKGROUND OF THE INVENTION 
       [0003]    This application relates to alarm system manufactured by the present assignees under the trade marks Interceptor and Vanguard, details of which are available from a number of prior issued patents by the Assignees including U.S. Pat. No. 7,333,681 (Murphy) issued Feb. 19, 2008 which describes a system for securing multimode fibers and U.S. Pat. No. 7,142,737 (Murphy) issued Nov. 28, 2006 which describes a system for securing single mode fibers. The disclosures of each of the above patents are incorporated herein by reference. 
         [0004]    In each of these systems, an optical signal is transmitted along a fiber and the signal received at a receiver which extracts a received signal which can have different characteristics relative to the transmitted signal due to movement of the fiber. The received signal is thus analyzed in a light signal analysis system to extract a signal indicative of any changes in characteristics of the light signal. This signal is then itself analyzed to determine whether the characteristics have changed sufficiently to indicate that a movement of the fiber indicative of an attempt to intrude into the fiber has occurred. The system further includes a control and alarm system which controls the system and an alarm in the event that an intrusion has been found. 
         [0005]    The arrangement and location of the components can vary widely with the receiver located at the same end as the transmitter or at an opposed end. The alarm and control system can also be located at different positions in the system. Communication of data between the components can be carried out in different ways. 
         [0006]    Many different constructions and techniques for this system are well known to persons skilled in the art and can be determined from one or more of the patents of the Assignees. 
         [0007]    According to US Government regulations, a network carrying unencrypted classified data must be protected by a Protected Distribution System (PDS), One form of PDS is the Alarmed Carrier, which is a system by which a conveyance or carrier is alarmed by a device for detecting intrusions and attempted intrusions. 
         [0008]    An example of an arrangement of this type is shown in U.S. Pat. No. 7,706,641 issued Apr. 27, 2010 by the present Applicants which describes in detail the monitoring system used in the present application, the disclosure of which is incorporated herein by reference. This patent describes that some or all of the optical fibers of a single-mode or multi-mode cable are monitored for intrusion by transmitting through the fibers a signal which can be analyzed for changes in its characteristics which are indicative of movement as a prelude to an intrusion event. 
         [0009]    Data can be stolen from an optical fiber by removing the jacket and installing a tap device on the bare fiber, or by other methods. Optical fiber intrusion detection systems of the type described above detect when a fiber cable is being subjected to vibration, motion, or handling that would be typical of an intrusion attempt. The system reports the intrusion attempt to the cable owner so that the cable can be inspected and the threat removed. 
         [0010]    The fiber intrusion detection system works by transmitting a monitoring signal through a fiber loop. Disturbances on the fiber cause the monitoring signal to be modulated. At the end of the loop, the modulated signal is received, digitized and processed, and alarms are raised when an intrusion is detected. 
         [0011]    Historically, alarmed carriers required two fibers for monitoring-classically one carrying the laser signal away from the monitoring device, and one carrying the alarm signal back, these joined at the far end (known as “looping back”). 
         [0012]    A legacy optical network contained two optical fibers for data. Recent advances in technology have seen the introduction of the Passive Optical Network (PON). The PON is a system which delivers bidirectional communication over a single fiber by use of separation of send and receive by utilizing separate wavelengths. 
         [0013]    A passive optical network (PON) is a point-to-multipoint, fiber to the premises network architecture in which unpowered optical splitters are used to enable a single optical fiber to serve multiple premises, typically in the range 16-128. A PON consists of an optical line terminal (OLT) at the service provider&#39;s central office and a number of optical network terminals (ONTs) near the end users. A PON reduces the amount of fiber and central office equipment required compared with legacy network architectures. 
       SUMMARY OF THE INVENTION 
       [0014]    It is one object of the invention to provide an alarm system of the above type using a single fiber, thus allowing lower cost installation and system design. 
         [0015]    According to one aspect of the invention there is provided a method for detecting intrusion into one or more optical fibers of an optical fiber cable of the above type wherein the monitoring light signals are transmitted at the transmit end of the telecommunications optical fiber and at the receive end of said fiber the signals are returned along the same fiber. 
         [0016]    The present arrangement where the same monitor signal is returned back into the monitored fiber from the remote end can be used with a single fiber or with a multiplex system such as a PON where the data is multiplexed onto individual fibers from a common source. 
         [0017]    The arrangement is particularly applicable to a PON system described herein but is not limited to same. When used in the PON, the PON signal fibers and monitor fibers are concurrent in the same cable such that the monitor fiber detects any attempt to access the PON signal fiber. 
         [0018]    Preferably the monitor system acts detecting movement of the fiber at locations along the length of the fiber. 
         [0019]    Preferably the monitor system acts by providing at least one sensor arrangement for receiving a light signal transmitted through the fibers, detecting a series of received light signals which have been transmitted along the fibers to be monitored; comparing at least some of the received light signals relative to data obtained from previously received ones of the received light signals to detect changes in the received light signals relative to the previously received light signals; and analyzing the changes to determine any changes which are indicative of manipulation of the optical fiber causing movement of a portion thereof along the length thereof. 
         [0020]    Preferably the monitor system acts to generate an alarm in response to the detection of any such changes which are indicative of manipulation of the optical fiber causing movement of a portion thereof along the length thereof. 
         [0021]    In most cases the receive input and the transmit output of the monitor signals are connected into the same fiber by use of an optical coupler. 
         [0022]    In other cases however the receive input and the transmit output of the monitor signals are connected into the same fiber by use of another device. 
         [0023]    Preferably there is provided an optical isolator on the laser output leg to protect the signal laser from reflections. 
         [0024]    Preferably there is provided an insensitive lead-in fiber leading to the multiplexer. 
         [0025]    Preferably 1×2 couplers are obtained using a 2×2 coupler with the extra leg terminated where the extra leg has a low reflectance termination. 
         [0026]    Preferably there is provided connectors on a junction box of the multiplex system which are treated with low reflectance termination such as angled connectors or index matching gel which aids in moves, additions and changes. 
         [0027]    Preferably the fiber is non-reflective, and can be used as needed by plugging in a new fiber. 
         [0028]    Preferably there is provided terminating connectors on the junction box of the multiplex system with low reflectance termination such as a mating connector with index matching gel or a “dog legged” non reflective fiber stub. 
         [0029]    Preferably the PON signal and the monitor signal are located in an armored duplex zip cord so as to meet federal approval for armored cable PDS. 
         [0030]    Preferably the PON signal and protection signal are multiplexed using WDM so SPON exists on a single fiber. 
         [0031]    Preferably the multiplexing is performed by wavelength, utilizing an out of band laser for monitoring, coupled in through a WDM. 
         [0032]    Preferably an unused wavelength of the PON transmitter is used as the monitor source. 
         [0033]    Preferably the monitor signal is returned at the end user by a 1×2 coupler joining the two legs together to loopback the signal by means of splicing or mechanical connection. 
         [0034]    Preferably there is provided a reflective optical connector to terminate the monitored fiber in the UB by way of deposited reflective material such as Au or an open air reflection. 
         [0035]    Preferably the receive input and the transmit output of the monitor signals are connected into the same fiber by a device which is internal to the alarm unit creating a one-box solution. 
         [0036]    Alternatively the receive input and the transmit output of the monitor signals are connected into the same fiber by a device which is external to and remote from the alarm unit. 
         [0037]    The cables to the users can be all fiber cables or hybrid fiber/electrical. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0038]    One embodiment of the invention will now be described in conjunction with the accompanying drawings in which: 
           [0039]      FIG. 1  is a schematic illustration of a first embodiment of the system according to the present invention. 
           [0040]      FIG. 2  is a schematic illustration of a second embodiment of the system according to the present invention. 
       
    
    
     DETAILED DESCRIPTION 
       [0041]    A data source  3  provides data on an optical fiber  4  in a system such as a PON Optical Line Terminal (OLT). 
         [0042]    An alarm unit  1  of the type defined above is provided in the apparatus for detecting intrusion and provides and receives optical monitoring light signals on transmit and receive fibers  1 A,  1 B through a multiplexer  1 C to supply to the system and to receive from the system after passing through the fibers for detecting the indication of intrusion as previously defined. 
         [0043]    The alarm signals are connected to the 1×2 coupler  1 C. The signals from the coupler  1 C are supplied on a fiber ID to a junction box  20  including a 1×N optical splitter  6 , which is typically, but not necessarily a 1×32 splitter, and which acts to connect the monitor signal from the alarm device  1  to multiple outputs. Each output containing alarm signal from the splitter  8  is supplied respectively to a monitor signal patch panel  8 . 
         [0044]    The data signals from data device  3  are connected by the fiber  4  to the junction box  20  including a 1×N optical splitter  7 , which is also typically, but not necessarily a 1×32 splitter, and which acts to connect the data signal to multiple outputs. Each output containing data signals from the splitter  7  is supplied respectively to a monitor signal patch panel  9 . 
         [0045]    In  FIG. 1 , the splitters  6  and  7  and the patch panels  8  and  9  form part of the junction box  20 . However in an alternative arrangement, there may be provided a cable delivering signals from the splitter  6 ,  7  to a remote location for implementations when splitters  6 ,  7  are in a separate location from the patch panels  8 ,  9 . 
         [0046]    The output from the junction box  20  is supplied on fibers  8 A and  9 A,  8 B,  9 B to fibers  10 A and  10 B in cable  10  and to fibers  11 A and  11 B in cable  11  for transmission to remote locations. Thus each of the cables  10 ,  11  caries combined monitor and data signals from the patch boards  8 ,  9  to a remote location such as a user drop box  15 ,  16 . Thus cables  10 ,  11  carries combined monitor and data signals to a remote location such as a user drop box  15 ,  16 . The cables  10  and  11  are shown as examples of a series of such cables from the separate output ports of patch boards  8 ,  9 . 
         [0047]    At each user&#39;s drop box  15 ,  16  is a connector  12  for delivering data to user equipment. There is also provided a device  13  for returning a monitor signal back to alarm unit  1 . Unused ports on patch boards  8 ,  9  are optionally terminated by a low reflectance termination device  14 . The user drop boxes  15  and  16  are conventional and allow end user to access secure network with equipment such as an ONT. 
         [0048]    In some more complex systems there can be provided a secondary distribution box similar to the junction box  20 , also known as a “Zone Box” for further distributing the data and/or monitoring to further locations. 
         [0049]    In some cases the splitter  1 C that multiplexes the transmit  1 A and receive  1 B of alarm signal can be mounted internally of the alarm unit  1  rather than as an external element as shown. The alarm system is arranged to include summing the receive input and the transmit output of the monitor signals such that there is a single fiber connection to the alarm monitoring equipment. 
         [0050]    The output fibers of the alarm unit  1  are multiplexed together by the coupler  1 C. Concurrently, the PON Optical Line Terminal (OLT)  3  is sending and receiving time division multiplexed data for the end users over fiber  4 . The alarm signal is split by splitter  6  for feeding the ultimate end users, similarly data is split by splitter  7 . These multiple signals are managed by patch boards  8 ,  9  feeding cables represented by  10  and  11  to the end users. There can be as many drop boxes  15 ,  16  as there are channels in the splitters  6 ,  7 , and there will typically be one cable  10 ,  11  per box. 
         [0051]    The termination device  14  is used for terminating unused channels of the splitters  6 ,  7  in a non-reflective manner. This protects the detection system from exposure to excessive reflection from unused circuits. 
         [0052]    The device  13  acts to return the signal to the alarm unit, as shown in  FIG. 1  by a loopback  18  constructed by connecting the two legs of a 1×2 coupler  18 A. 
         [0053]    An alternative method by which this can also be accomplished is shown in  FIG. 2  by terminating or connecting the end of the monitor portion  10 B of cable  10  to a reflective device  19 , or depositing the reflective material directly onto the end of the fiber  10 B at  19 . 
         [0054]    Other methods can also be provided such as by means of splicing or mechanical connection. This is accomplished by terminating fiber  10  with a 1×2 optical coupler at location  19 . The two output legs of the coupler are optically connected to form a continuous path by methods such as fusion splicing or a mechanical splice. This arrangement feeds the monitor signal back onto the fiber, similar to the reflective method. 
         [0055]    That is there can be provided an optical connector to terminate the monitored fiber in the UB by way of deposited reflective material such as gold or an open air reflection. 
         [0056]    The signal at the far end can be returned by either looping it back on itself using a coupler, or by hitting a reflection and bouncing back. The easiest ways to do a reflection is either to deposit gold or other similar reflective material onto the face of the fiber or connector, and this gives a reflection of more than 90%. Alternatively it is possible to an interface with a medium of substantially different refractive index. The cheapest way of doing this is to simply have a clean connector sitting un-terminated, which gives something like a 4% reflection which may be adequate in some circumstances. 
         [0057]    Additional implementations can include substituting additional layers of distribution by additional junction boxes for many more end users. For example, patch boards  8 ,  9  can feed cables to individual floors of a building. On those floors are the additional distribution boxes such as junction boxes for supplying the users in offices. 
         [0058]    As shown, the receive input  1 A and the transmit output  1 B of the monitor signals from the alarm device  1  are connected into the same fiber  1 D by use of the optical coupler  1 C. An optical isolator  1 E is provided on the laser output leg  1 B to protect the signal laser from reflections. The lead-in fiber  1 D leading to the multiplexer may be insensitive. or desensitised. 
         [0059]    The coupler  1 C acts as a 1×2 coupler but can be formed as a 2×2 coupler with the extra leg  1 F terminated at  1 G so that the extra leg has a low reflectance termination. 
         [0060]    The termination connectors  14  on the patch board  8  of the junction box  20  are treated with low reflectance termination index matching gel which aides in moves, additions and changes. They can alternatively include a low reflectance termination such as an angled connector, or a mating connector with index matching gel or a “dog legged” non-reflective fiber stub. 
         [0061]    The fiber is non-reflective, and can be used as needed by plugging in a new fiber. Typically when built, all of the outputs of patch board  8  are active, and any reflection causes a signal to return to monitor unit  1  which could cause a stability issue in the measurement of detection. By pre-terminating all of these sixteen outputs with index matching gel, no appreciable reflection occurs. Connectors can just be plugged unto index gel without side effect, so circuits can be added by just plugging them in. 
         [0062]    The cables  10 ,  11  carrying the PON signal and the monitor signal are located in an armored duplex zip cord  10 A,  11 A so as to meet federal approval for armored cable PDS. Alternatively, the PON and monitoring fibers  10 A,  10 B and  11 A and  11 B can be located in other approved hardened carrier conveyances such as EMT or conduit. 
         [0063]    Thus in the present invention, instead of transmitting up one fiber and back along another, the present arrangement uses a construction in which the signals go up and back the same fiber  10 B,  11 B. The receive input  1 A and the transmit output  1 B of the monitor signals are connected into the same fiber by the coupler  2  which can be internal to alarm unit creating a one-box solution. Or the device can be external as shown. 
         [0064]    An alternative arrangement is shown in  FIG. 2  where the PON signal from the data supply  3  and the protection signal from the unit  1  are multiplexed in a multiplexer  2  using WDM so that Secure PON (SPON) is carried on a single fiber. As described above, the multiplexing is performed by wavelength and can use as the source at the alarm unit  1  an out of band laser unused wavelength of the PON transmitter  3  for monitoring. 
         [0065]    Since various modifications can be made in my invention as herein above described, and many apparently widely different embodiments of same made within the spirit and scope of the claims without department from such spirit and scope, it is intended that all matter contained in the accompanying specification shall be interpreted as illustrative only and not in a limiting sense.