2.1. Design of the Proposed Optical Sensing Device
Figure 1 presents a schematic diagram of the sensing device with a double-layered structure. The first layer consists of a signal-processing interface circuit for connecting the optical temperature sensors, a broadband light source (BLS), and Quad-RX. In this study, a BLS with emission wavelengths ranging from 1530 to 1550 nm was utilized as a transmitter for the FBG-based temperature sensor. The BLS provides several benefits, including high stability and the capability of increasing the point of sensing [
13]. In this paper, the point of sensing means the number of gratings, that is the number of measurable sensors. Another sensing device obtained the data with a tunable laser diode (LD) capable of selecting a wavelength [
14]. In this study, in order to use a relatively inexpensive BLS, the bandpass filter and the linear transmission filter were used to select a wavelength and sense the corresponding wavelength region data.
The second layer consists of an interface circuit for connecting electrical sensors, a microcontroller unit (MCU), a security module, and two wireless communication modules (Wi-Fi and Bluetooth). These wireless communication modules were used to transfer the data between sensing device, gateway, and control platform. To present the sensor data and communication state, a liquid crystal display (LCD) and illumination sensor were installed on the top cover. An electrical sensor interface circuit includes electronic sensors (i.e., humidity, angular velocity, and acceleration) and makes these electronic sensors and the illumination sensor on the top cover of the sensing device operate normally and transmit data. These electrical sensors can be usefully used depending on the measurement environment. For example, when a sensing device is installed on a power pole, tilt or vibration is measured by an acceleration or angular velocity sensor to prevent safety accidents.
Figure 2a presents a schematic view of a Quad-RX module, which was used to collect optical signals from the FBG sensor. This module consists of a main body, four p-i-n (PIN) photo diodes (PDs), three beam splitters (BSs), two linear filters (LFs), two band-pass filters (BFs), and an optical fiber. The BSs split a received beam into a 5:5 ratio and divide the optical path in the Quad-RX module.
Figure 2b is a graph showing the transmittance of the BF and LF as the current received from the PD. The LFs and BFs selectively pass wavelengths ranging from 1535 to 1539 nm into PD
1 and PD
2 and from 1545 to 1549 nm into PD
3 and PD
4. The measured photocurrents of PD
1, PD
2, PD
3, and PD
4 (i.e., R
1, R
2, R
3, R
4) were used to convert received optical signals into electrical signals. By dividing the R
1 (R
3) output by the R
2 (R
4) output, the peak wavelength shift can be calculated [
15]. The peak wavelength shift presents the change in external physical quantities, i.e., temperature change in this paper [
6]. It is worth noting that this calculation can also extract strain information using the FBG sensor [
16]. Because the Quad-RX module that senses the data from the temperature sensor is contained in the sensing device, and the device is usually used at room temperature independently of the temperature sensor, the temperature stabilization of the LF or BF is not considered herein.
Figure 3a,b present the developed symmetric-key algorithm and SHA-based security module for our real-time facility monitoring system and a test setup for evaluating the security module. The security module contains an MCU (M4 core at 84 MHz, ARM
® Cortex
®) and was designed to provide symmetric-key-based encryption and decryption of up to 64 bytes (512 bits) of plain text using the academy, research, institute, agency (ARIA), high security and light weight (HIGHT), and SEED algorithms [
17,
18]. Additionally, the security module was designed to provide a cryptographic hash function (i.e., SHA), which condenses input data into fixed size outputs [
19]. It is worth emphasizing that this security module was developed to increase the number of encryption and decryption methods (e.g., public key algorithms and digital signature algorithms) to enhance the security of the real-time monitoring system.
Table 1 lists the possible encryption types and key information for the developed security module.
To pass encrypted data from a sensing device to a control platform, we developed a gateway with a security module. This gateway was designed to minimize electromagnetic interference (EMI) and to connect up to 12 sensing devices to reduce the overall volume of the monitoring system [
9,
10]. For the further extension of sensing devices, we designed the gateway to accept wireless communication modules in a pluggable form. The entire procedure for data transmission from the sensing device to the control platform requires at least 3 s (including encryption and decryption). Therefore, we programed the security system to alternatingly apply the ARIA, HIGHT, SEED, and SHA algorithms every 3 s and transmit the encrypted sensor data using wireless communications (i.e., Wi-Fi and Bluetooth).
2.2. Fabrication
Figure 4 presents the produced Quad-RX module. This Quad-RX module integrates four analog PIN PDs in the main body and employs a ferrule connector (FC)/angled physical contact (APC) connector. Additionally, filter holders and thin-film filters, including BSs, LFs, and BFs, were integrated in the main body, as shown in
Figure 2. The main body was produced using a laser welding method. Precise optical alignment of the four PIN PDs (PD
1, PD
2, PD
3, and PD
4) was conducted using an active alignment process after connecting the input fiber to the main body.
Figure 5 shows the optical temperature sensor using the FBG sensor made of bare fiber. When an optical sensor in the form of bare fiber is directly attached to the facility, it may break. Therefore, we packaged the sensing component in a brass tube with a good thermal conductivity. The sensing component was packaged in a brass tube and fixed. At the time, if the brass tube was too short or hard, epoxy was used and the optical temperature sensor was pulled tight. Tight packaging breaks the period of a grating designed with a certain period to reflect a specific wavelength. This led to a low linearity because it is hard to reflect the wavelength correctly when conducting temperature sensing. After packaging, the optical temperature sensor employed a ferrule connector (FC)/angled physical contact (APC) connector as the input fiber.
Figure 6a,b present top-view images of the produced doubled-layered sensor board. As mentioned previously, the first layer integrates a BLS, a Quad-RX module, a signal processing component, and an optical interface component. The second layer contains an MCU, electronic sensors, a security module, an electronic sensor interface, and Wi-Fi and Bluetooth modules, as shown in
Figure 6b.
Figure 6c presents the end product covered with a plastic case with a LCD panel.
2.3. Experimental Results
Figure 7 shows the output characteristics of packaged optical sensors 1 and 2 measuring the peak wavelength by increasing the temperature from 0 °C to 100 °C in a chamber with constant temperature and humidity (SU-641, ESPEC), measured using an optical spectrum analyzer (AQ6319, YOKOGAWA). The optical temperature sensor R-square (Coefficient of Determination, COD), which is a linear factor, was 0.99. We confirmed that the peak wavelength, detected by the optical temperature sensor, shifted linearly 0.01 nm according to a 1 °C change. Since the FBG sensor can only receive wavelength information, a calibration process was required to convert the wavelength to temperature [
10]. We conducted a temperature calibration process for the produced FBG-based temperature sensor by placing the sensing device in a chamber with a constant temperature and humidity. In this study, we only utilized the measured photocurrents of PD
1 and PD
2 (R
1 and R
2) to calibrate the FBG-based temperature sensor.
Figure 8a presents the measured photocurrents and R
1/R
2 values for the FBG-based temperature sensor as a function of the temperature in the chamber. When raising the temperature, R
1 and R
2 fluctuated. However, since the fluctuation trend was similar, the R
1/R
2 value did not affect the temperature detection in terms of linearity [
11]. We calculated R
1/R
2 for the temperature calibration and the results are plotted in
Figure 8a. After plotting the R
1/R
2 over temperature, polynomial fitting was performed for calibration. From these results, we obtained R
1/R
2-dependent temperature data and derived the calibration temperature from R
1/R
2, as shown in
Figure 8b. The calibration temperature was very close to the actual temperature, with a difference of only ±1.6 °C. Temperature experiments were repeatedly performed to confirm the reproducibility, with the Quad-RX module demonstrating an average reproducibility of 0.4 °C and the FBG sensor demonstrating an average peak wavelength shift of 0.01 nm.
Figure 9 presents the processes for the encryption and decryption between the sensing device and gateway. In all of these processes, Wi-fi or Bluetooth was used for packet transmission. In
Figure 9i, the packet shows that the user had to enter into the security module for encryption. The blue box shows the algorithm type, i.e., the ARIA algorithm. The green box presents the data for encryption, i.e., “61 62 63 64 … 8f 00”, and the encrypted data are shown in the red box. In addition, if the encrypted data are transmitted to the security module of the gateway, as shown in
Figure 9ii, a decryption packet (green box) and a decrypted packet (red box), as shown in
Figure 9iii, are created. Here, “Check sum” is the process of checking the integrity of the encryption data using the SHA algorithm. When the decrypted data, i.e., “61626364…8f00”, are the same as “the data for encryption”, the user can finally check the monitoring data.
Figure 10 presents encryption (encoding) data transfer and decryption (decoding) between the sensing device and the gateway.
Figure 10a shows the encryption and transmission of the original value on the sensing device to the gateway, and
Figure 10b shows the decryption of encrypted data on the gateway. In the sensing device, the original values of temperature and humidity are encoded by ARIA and send to gateway. The gateway also sends the data to the control platform in the same way and the user can check the monitoring data. On the basis of this process, we can confirm that encryption and decryption using the developed security module work reasonably well. In this security procedure, data other than the communication pin are not exposed, so it is impossible for an attacker to steal the packet from the security module. In addition, even if it is hacked, it cannot be decrypted because the attacker cannot obtain the encryption key.
Figure 11a presents the proposed security-enhanced control platform, which was developed using a constrained application protocol (CoAP)-based lightweight machine-to-machine (LWM2M) protocol for real-time facility monitoring. For the field test, we installed sensing devices, a gateway, and optical temperature sensors at ESS facilities and a photovoltaic (PV) converter in a sewage treatment plant for 1 month, as shown in
Figure 11b,c. Two optical temperature sensors are attached to the facility, and these sensors are connected to the sensing device through a FC/APC connector. These two sensors monitor the temperature at two points through the two wavelengths reflected from each grating. In this paper, two channel gratings, including two gratings in one fiber, are used. But if more gratings are used, the temperature at more points can be measured.
As shown in
Figure 11a, the temperature, humidity, illuminance, angular velocity, and acceleration data collected from the sensors inside the sensing devices could be visually monitored using the control platform in real time. On the basis of this field test, we can confirm the accuracy and stability of the developed security-enhanced sensing device.