Methods And Arrangements In A Passive Optical Network

• US 20110302283A1
• Filed: 06/03/2010
• Published: 12/08/2011
• Est. Priority Date: 06/03/2010
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Nors, Niclas
• Application Number:
  US12/793,130
• Publication Number:
  US 20110302283A1
• Time in Patent Office: Days
• US Class Current: 709/222
• CPC Class Codes: H04L 12/2861 Point-to-multipoint connection from the data network to the subscribers
• CPC Class Codes: H04L 12/287 Remote access server, e.g. BRAS
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

Secure downloading of a certificate to an ONU (Optical Network Unit) over an ODN (Optical Distribution Network), by storing the certificate in association with an OLT (Optical Line Terminal). The OLT instructs the ONU to download a file comprising the certificate, and optionally also comprising an address to an ACS (Auto-configuration Server), and indicating the file location. Thereby, the ONU is able to fetch the file over the secure ODN, unpack the file, install the certificate, and connect to the ACS for provisioning.

Claims

1. A method for an Optical Line Terminal (OLT) of secure downloading of a certificate to an Optical Network Unit (ONU), wherein the certificate is stored in connection with the OLT, the method comprising:

establishing a communication channel to the ONU over a secure Optical Distribution Network (ODN);

exchanging configuration information with the ONU, the information comprising an instruction to the ONU to download a file comprising the certificate over the secure ODN, the instruction further indicating the file location.

2. The method according to claim 1, wherein the file further comprises the address to an Auto-Configuration Server (ACS).

3. The method according to claim 1, wherein the certificate is stored in a certificate storage unit within the OLT, and the file location corresponds to the location of the OLT.

4. The method according to claim 1, wherein the certificate is stored in a certificate storage unit connected to the OLT via the secure ODN, and the file location corresponds to the location of the certificate storage unit.

5. A method for an Optical Network Unit (ONU) of secure downloading of a certificate, wherein the certificate is stored in connection with an Optical Line Terminal (OLT), the method comprising:

establishing a communication channel to the OLT over a secure Optical Distribution Network (ODN);

exchanging configuration information with the OLT, the information comprising receiving an instruction from the OLT to download a file comprising the certificate, the instruction further indicating the file location; and

fetching the file from the file location.

6. The method according to claim 5, wherein the file further comprises the address of an Auto-Configuration Server (ACS).

7. The method according to claim 5, wherein the certificate is unique for the ONU.

8. The method for an ONU, according to claim 5, further comprising:

unpacking the file; and

installing the certificate contained in the file.

9. The method for an ONU, according to claim 8, further comprising:

establishing a connection to the ASC, using the ASC address; and

exchanging configuration information with the ASC.

10. An Optical Line Terminal (OLT) connectable to a secure Optical Distribution Network (ODN), the OLT configured to download a certificate to an Optical Network Unit (ONU), wherein the certificate is stored in connection with the OLT, the OLT comprising:

a communication unit comprising a sender and a receiver for communicating over the secure ODN;

an instruction unit comprising a processing circuit, the instruction unit configured to;

establish a communication channel to the ONU over the secure ODN;

exchange configuration information with the ONU, the information comprising an instruction to the ONU to download a file comprising the certificate over the secure ODN, the instruction further indicating the file location.

11. The OLT according to claim 10, wherein the file further comprises an address to an Auto-Configuration Server (ACS).

12. The OLT according to claim 10, the OLT further comprising a certificate storage unit.

13. The OLT according to claim 10, the OLT further being connectable to a certificate storage unit over the ODN.

14. An Optical Network Unit (ONU) connectable to a secure Optical Distribution Network (ODN), the ONU configured to download a certificate, which is stored in connection with an OLT (Optical Line Terminal), the ONU comprising:

a communication unit comprising a sender and a receiver for communicating over the secure ODN;

a user interface;

a downloading unit comprising a processing circuit, the downloading unit configured to;

establish a communication channel to the OLT over the secure ODN;

exchange configuration information with the OLT, the information comprising receiving an instruction from the OLT to download a file comprising the certificate, the instruction further indicating the file location; and

fetch the file from the file location.

15. The ONU according to claim 14, wherein the file further comprises an address to an Auto-Configuration Server (ACS).

16. The ONU according to claim 14, wherein the certificate is unique for the ONU.

17. The ONU according to claim 14, wherein the downloading unit is further configured to unpack the file and install the certificate contained in the file.

18. The ONU according to claim 14, the ONU being an Optical Network Termination (ONT) comprising an Integrated Residential Gateway.