Abstract: Consistent with the present disclosure, a method and related system for secure autonomic optical transport networks are disclosed. The method includes steps for adding a network element in an optical network. The method includes an initial step of verifying, with a new network element, a first identifier certificate from a proxy network element. In a further step, a second identifier certificate from the new network element is verified with the proxy element. A registrar is used for verifying the second identifier certificate from the proxy network element and sending domain specific parameters to the proxy network element for forwarding to the new network element Next, a local certificate is generated on the new network element. The local certificate is derived from a secure module and sent to the proxy network element for forwarding to the registrar. Further, the new network element in the autonomic domain is enrolled, with the registrar.

Abstract: A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

Abstract: Methods and systems for secure autonomic optical transport networks are disclosed, including a method of adding a network element in an optical network, comprising: verifying, with a new network element, a first identifier certificate from a proxy network element; verifying, with the proxy network element, a second identifier certificate from the new network element; using a registrar for verifying the second identifier certificate from the proxy network element and sending domain specific parameters to the proxy network element for forwarding to the new network element; generating, on the new network element, a local certificate derived from a secure module and sending it to the proxy network element for forwarding to the registrar; enrolling, with the registrar, the new network element in the autonomic domain; and signing, with the registrar, the local certificate and sending the signed local certificate to the new network element.

Abstract: A telemetry manager receives, from a network server, global data collection information about network components in an optical network device. The global data collection information includes identifiers for network nodes in the network components from which telemetry data are to be collected, and reporting frequency and encoding format for sending collected telemetry data to the network server. The telemetry manager identifies, from the global data collection information, local data collection information specified for a network component, and sends this information to a telemetry agent in the network component. The telemetry manager receives telemetry data generated by a network node of the network component, where the data is provided according to instructions in the local data collection information. The telemetry manager converts the telemetry data from its native format to an encoding format specified by the global data collection information, and sends the encoded telemetry data to the network server.

Abstract: A method of executing in-session encryption verification includes receiving a plurality of client data packets for transmission through a network; receiving one or more test data packets for verifying an encryption device; merging the client data packets and the one or more test packets into a data stream; selecting security parameters for each packet in the data stream based on a corresponding packet type; encrypting each packet in the data stream using the encryption device and the corresponding security parameters; and transmitting the data stream comprising encrypted packets through the network. The method also includes decrypting the encrypted packets at a receiving system using congruent techniques.

Abstract: A telemetry manager receives, from a network server, global data collection information about network components in an optical network device. The global data collection information includes identifiers for network nodes in the network components from which telemetry data are to be collected, and reporting frequency and encoding format for sending collected telemetry data to the network server. The telemetry manager identifies, from the global data collection information, local data collection information specified for a network component, and sends this information to a telemetry agent in the network component. The telemetry manager receives telemetry data generated by a network node of the network component, where the data is provided according to instructions in the local data collection information. The telemetry manager converts the telemetry data from its native format to an encoding format specified by the global data collection information, and sends the encoded telemetry data to the network server.