Method, equipment, and system for detecting and authenticating terminal in passive optical network

• US 8,406,628 B2
• Filed: 10/22/2009
• Issued: 03/26/2013
• Est. Priority Date: 07/13/2007
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wu, Wei, Gao, Hai
• Primary Examiner(s): TRAN, DZUNG D
• Application Number:
  US12/604,085
• Publication Number:
  US 20100040371A1
• Time in Patent Office: 1,251 Days
• Field of Search: 398 58- 72
• US Class Current: 398/70
• CPC Class Codes: H04B 10/2589 Bidirectional transmission
• CPC Class Codes: H04B 10/27 Arrangements for networking
• CPC Class Codes: H04J 14/0238 Wavelength allocation for communications one-to-many, e.g. multicasting wavelengths
• CPC Class Codes: H04J 3/1694 Allocation of channels in TDM/TDMA networks, e.g. distributed multiplexers Passive Optical Networks H04Q11/0062
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04Q 11/0067 Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

A method, equipment, and operation management system for detecting and authenticating a terminal in a passive optical network are provided. The method includes the following steps. The terminal has a logic registration code. A central office end receives the logic registration code sent by the terminal. The central office end judges whether the logic registration code of the terminal matches with the logic registration code stored at the central office end, and determines that the terminal is a valid terminal if the logic registration code sent by the terminal matches with the logic registration code stored at the central office end. The central office end records a terminal serial number from the valid terminal, and records a terminal identifier assigned to the valid terminal. By using the provided method, equipment, and operation management system, it is unnecessary to statically configure the terminal SN at the central office end, such that the maintenance cost of the central office end and the terminal is lowered, the flexibility of terminal detection and authentication is improved, and the maintainability of the central office end and the terminal is also enhanced.

Claims

1. A method for detecting and authenticating a terminal in a passive optical network comprising an optical line terminal (OLT) and a plurality of optical network units/optical network terminals (ONUs/ONTs), the method comprising:

receiving, at the OLT, a first logic registration code sent by an ONU/ONT among the plurality of ONUs/ONTs, wherein the first logic registration code is assigned by an operation management system, which is communicatively connected to the OLT, to a user and provisioned to the ONU/ONT associated with the user;

judging, at the OLT, whether the first logic registration code sent by the ONU/ONT matches with a second logic registration code stored at the OLT, wherein the second logic registration code is assigned by the operation management system to the user and provisioned to the OLT;

determining that the ONU/ONT is a valid ONU/ONT if the first logic registration code sent by the ONU/ONT matches with the second logic registration code stored at the OLT; and

binding, at the OLT, a terminal serial number from the valid ONU/ONT and a terminal identifier assigned to the valid ONU/ONT when determining that the ONU/ONT is the valid ONU/ONT.

2. The method according to claim 1, wherein before determining, at the OLT, that the ONU/ONT is the valid ONU/ONT, the method further comprises:

assigning, at the OLT, a temporary terminal identifier to the ONU/ONT;

performing at least one of registration and ranging process between the OLT and the ONU/ONT assigned with the temporary terminal identifier.

3. The method according to claim 2, wherein the terminal identifier assigned to the valid ONU/ONT is a formal terminal identifier of the ONU/ONT, and the formal terminal identifier of the ONU/ONT is based on the temporary terminal identifier or selected from unused terminal identifiers.

4. The method according to claim 1, wherein the method further comprises:

when receiving a log-out message sent by the valid ONU/ONT, releasing, at the OLT, a binding relationship between the terminal serial number of the valid ONU/ONT and the terminal identifier of the valid ONU/ONT.

5. The method according to claim 1, wherein the receiving, at the OLT, the first logic registration code sent by the ONU/ONT comprises at least one of the following steps:

(a) receiving a message for reporting a password carrying the first logic registration code sent by the ONU/ONT and acquiring the first logic registration code from the message for reporting the password at the OLT; and

(b) receiving a physical layer operation and maintenance message for reporting the first logic registration code sent by the ONU/ONT and acquiring the first logic registration code from the physical layer operation and maintenance message at the OLT.

6. The method according to claim 1, after determining that the ONU/ONT is the valid ONU/ONT, the method further comprising:

transmitting at least one of the terminal serial numbers and a corresponding relationship between the terminal serial number and the terminal identifier from the OLT to the operation management system.

7. The method according to claim 1, wherein the binding, at the OLT, a terminal serial number from the valid ONU/ONT and a terminal identifier assigned to the valid ONU/ONT comprises:

binding at the OLT, the terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and a management terminal identifier of the ONU/ONT different from the terminal identifier of the ONU/ONT, the management terminal identifier of the ONU/ONT being used for identifying the ONU/ONT between the operation management system and the OLT.

8. The method according to claim 7, wherein the method further comprises:

when receiving an log-out message sent by the valid ONU/ONT, releasing, at the OLT, a binding relationship between the terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and the management terminal identifier of the ONU/ONT.

9. A system comprising a passive optical network, the passive optical network comprising an optical line terminal (OLT) and a plurality of optical network units/optical network terminals (ONUs/ONTs),

the OLT is configured to receive a first logic registration code sent by an ONU/ONT among the plurality of ONUs/ONTs, judge whether the first logic registration code sent by the ONU/ONT matches with a second logic registration code stored at the OLT, and bind a terminal serial number acquired from the ONU/ONT and a terminal identifier assigned to the ONU/ONT if the first logic registration code sent by the ONU/ONT matches with the second logic registration code stored at the OLT;

wherein the first logic registration code sent by the ONU/ONT and the second logic registration code stored at the OLT are assigned by an operation management system, which is communicatively connected to the OLT, to a user associated with the ONU/ONT.

10. The system according to claim 9, wherein the OLT is configured to acquire the logic registration code through receiving at least one of the following messages:

a message for reporting a password, which carries the logic registration code; and

a physical layer operation and maintenance, PLOAM, message for reporting the logic registration code.

11. The system according to claim 10, wherein the OLT is configured to release a binding relationship between the terminal serial number of the valid ONU/ONT and the terminal identifier of the valid ONU/ONT when receiving an log-out message sent by the valid ONU/ONT.

12. The system according to claim 10, wherein the OLT is configured to transmit at least one of the terminal serial number and a corresponding relationship between the terminal serial number and the terminal identifier to the operation management system.

13. The system according to claim 12,

wherein the OLT is configured to bind a terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and a management terminal identifier of the ONU/ONT different from the terminal identifier of the ONU/ONT, the management terminal identifier of the ONU/ONT being used for identifying the ONU/ONT between the operation management system and the OLT.

14. The system according to claim 13, wherein the OLT is configured to release a binding relationship between the terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and the management terminal identifier of the ONU/ONT when receiving an log-out message sent by the valid ONU/ONT.

15. The system according to claim 9, wherein the OLT is configured to assign and send a temporary terminal identifier to the ONU/ONT, wherein the temporary terminal identifier is adapted to meet requirements of the terminal in registration or ranging process;

and the OLT is configured to assign a formal terminal identifier to the ONU/ONT and bind the terminal serial number sent by the ONU/ONT with the formal terminal identifier of the ONU/ONT, wherein the formal terminal identifier of the ONU/ONT is based on the temporary terminal identifier or selected from unused terminal identifiers.

16. The system according to claim 9, wherein the OLT is configured to receive the first logic registration code sent by a replaced ONU/ONT used by a same user as the user associated with the ONU/ONT and update the terminal serial number of the ONU/ONT stored at the OLT using a terminal serial number of the replaced ONU/ONT received from the replace ONU/ONT after performing authentication on the replaced ONU/ONT based on the first logic registration code received from the replaced ONU/ONT.

17. A method for detecting and authenticating a terminal in a passive optical network comprising an optical line terminal (OLT) and a plurality of optical network units/optical network terminals (ONUs/ONTs), the method comprising:

receiving, at the OLT, a logic registration code sent by an ONU/ONT among the plurality of ONUs/ONTs;

judging, at the OLT, whether the logic registration code sent by the ONU/ONT matches with a logic registration code stored at the OLT;

determining that the ONU/ONT is a valid ONU/ONT if the logic registration code sent by the ONU/ONT matches with the logic registration code stored at the OLT; and

binding, at the OLT, a terminal serial number from the valid ONU/ONT and a terminal identifier of the ONU/ONT and a management terminal identifier of the ONU/ONT different from the terminal identifier of the ONU/ONT when determining that the ONU/ONT is the valid ONU/ONT, the management terminal identifier of the ONU/ONT being used for identifying the ONU/ONT between an operation management system and the OLT.

18. The method according to claim 17, wherein the method further comprises:

when receiving a log-out message sent by the valid ONU/ONT, releasing, at the OLT, a binding relationship between the terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and the management terminal identifier of the ONU/ONT.

19. A system for a passive optical network, comprising an optical line terminal (OLT) coupled to a plurality of optical network units/optical network terminals (ONUs/ONTs),

wherein the OLT is configured to receive a first logic registration code sent by an ONU/ONT among the plurality of ONUs/ONTs, judge whether the first logic registration code sent by the ONU/ONT matches with a second logic registration code stored at the OLT;

wherein the OLT is configured to acquire the first logic registration code through receiving at least one of the following messages;

a message for reporting a password, which carries the logic registration code; and

a physical layer operation and maintenance (PLOAM) message for reporting the first logic registration code;

wherein the OLT is configured to bind a terminal serial number of the ONU/ONT acquired from the ONU/ONT, a terminal identifier of the ONU/ONT assigned to the ONU/ONT and a management terminal identifier of the ONU/ONT different from the terminal identifier of the ONU/ONT if the first logic registration code sent by the ONU/ONT matches with the second logic registration code stored at the OLT, the management terminal identifier of the ONU/ONT being used for identifying the ONU/ONT between an operation management system and the OLT.

20. The system according to claim 19, wherein the OLT is configured to release a binding relationship between the terminal serial number of the ONU/ONT, the terminal identifier of the ONU/ONT and the management terminal identifier of the ONU/ONT when receiving an log-out message sent by the valid ONU/ONT.