Method And Apparatus For ONU Authentication

• US 20150156014A1
• Filed: 12/30/2013
• Published: 06/04/2015
• Est. Priority Date: 12/02/2013
• Status: Abandoned Application

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent USA, Inc. (Nokia Corporation)
• Inventors: Shaffer, Michael R., Ferguson, Julia G.
• Application Number:
  US14/143,434
• Publication Number:
  US 20150156014A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04B 10/27 Arrangements for networking
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0858 Details about key distillation or coding, e.g. reconciliation, error correction, privacy amplification, polarisation coding or phase coding
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04Q 11/0067 Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

A manner of authenticating subscriber devices for operation in an optical access network, such as ONUs attempting to access a PON. When a managing node such as an OLT in a PON detects a subscriber device, it sends a request for a text string or password, which is presumably resident on the subscriber device and known to the managing node.

The request contains an encryption key, which may, after validation by the subscriber device, be loaded into a register. The subscriber device then uses the encryption key in conjunction with a preferably proprietary and embedded encryption algorithm to encrypt the test string or password prior to transmitting it in reply to the request. The managing node may then evaluate the reply message and the encryption or lack thereof of the text string or password prior to determining whether to authorize access by the subscriber device.

Claims

1. A method of authenticating a subscriber device for operation in an optical access network, comprising:

receiving a request at a subscriber device;

the request comprising an encryption key;

encrypting at least a portion of a response using the encryption key; and

transmitting the encrypted response from the subscriber device.

2. The method of claim 1, wherein the request further comprises a key validation code and wherein the method further comprises determining whether the key is valid.

3. The method of claim 2, further comprising loading the key into a register prior to encrypting if the key is determined to be valid.

4. The method of claim 3, further comprising loading a null value into the register prior to encrypting if the key is determined to be not valid.

5. The method of claim 1, wherein the at least a portion of the response is a text string extant in the subscriber device.

6. The method of claim 1, further comprising detecting the subscriber device by a managing node of the optical access network.

7. The method of claim 1, further comprising generating and transmitting the request by a managing node of the optical access network.

8. The method of claim 1 further comprising:

receiving the at least partially encrypted response at a network authentication device; and

evaluating the response.

9. The method of claim 8, wherein evaluating comprises determining whether the encrypted portion of the response has been properly encrypted according to a known encryption algorithm.

10. The method of claim 8, further comprising decrypting the encrypted portion of the response.

11. The method of claim 8, further comprising determining whether to authenticate the subscriber device for network operation based at least in part on the evaluation.

12. The method of claim 8, wherein the managing node is an OLT.

13. The method of claim 1, wherein the subscriber device is an ONU.

14. The method of claim 1, wherein the request is a PLOAM message.