Method and apparatus for authentication in passive optical network

• US 8,774,629 B2
• Filed: 02/19/2013
• Issued: 07/08/2014
• Est. Priority Date: 07/13/2007
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wu, Wei, Gao, Hai
• Primary Examiner(s): TRAN, DZUNG D
• Application Number:
  US13/770,743
• Publication Number:
  US 20130163989A1
• Time in Patent Office: 504 Days
• Field of Search: 398 58- 72
• US Class Current: 398/70
• CPC Class Codes: H04B 10/2589 Bidirectional transmission
• CPC Class Codes: H04B 10/27 Arrangements for networking
• CPC Class Codes: H04J 14/0238 Wavelength allocation for communications one-to-many, e.g. multicasting wavelengths
• CPC Class Codes: H04J 3/1694 Allocation of channels in TDM/TDMA networks, e.g. distributed multiplexers Passive Optical Networks H04Q11/0062
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04Q 11/0067 Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

A method and apparatus for authentication in a passive optical network are disclosed. In the disclosure, a PLOAM message is sent from an ONU to an OLT, where the PLOAM message includes a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a first logic registration code, where the ONU-ID is assigned by the OLT to identify the ONU and wherein the first logic registration code is assigned to a user by an operation management system communicatively connected to the OLT and provisioned to the user for authentication. The OLT is configured to judge whether the first logic registration code received from the ONU matches with a second logic registration code provisioned by the operation management system to the OLT and to promote the ONU into service if the first logic registration code matches with the second logic registration code.

Claims

1. A method for authentication in a passive optical network (PON) comprising an optical line terminal (OLT) and a plurality of optical network units (ONUs) connected the OLT via an optical distribution network (ODN), the method comprising:

receiving a terminal serial number from an ONU;

transmitting a request for logic registration code if it is determined that the terminal serial number does not match a terminal serial number stored on the OLT;

in response to the request for logic registration code, receiving, at the OLT, a physical layer operation and maintenance (PLOAM) message from the ONU in the PON the PLOAM message including a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a first logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU and wherein the first logic registration code is assigned to a user by an operation management system communicatively connected to the OLT, and is provisioned for the authentication;

judging, at the OLT, whether the first logic registration code received from the ONU matches a second logic registration code provisioned by the operation management system to the OLT;

promoting, at the OLT, the ONU into service if the first logic registration code received from the ONU matches the second logic registration code.

2. The method according to claim 1, wherein each of the first logic registration code and the second logic registration code is different from a terminal serial number of the ONU.

3. The method according to claim 2, wherein each of the first logic registration code and the second logic registration code is different from the ONU-ID.

4. The method according to claim 2, wherein after judging that the first logic registration code matches with the second logic registration code, the method further comprises:

receiving a log-out message from the ONU to the OLT,

in response to the reception of the log-out message, releasing, at the OLT, a binding relationship between the terminal serial number of the ONU and the ONU-ID.

5. The method according to claim 2, wherein after judging that the first logic registration code matches with the second logic registration code, the method further comprises:

transmitting information associated with the ONU from the OLT to the operation management system, the information associated with the ONU including one of the group consisting of (a) the terminal serial number of the ONU and (b) a corresponding relationship between the terminal serial number of the ONU and the ONU-ID.

6. The method according to claim 2, wherein the method further comprises:

binding at the OLT, the terminal serial number of the ONU, the ONU-ID and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by the operation management system to identify the ONU.

7. The method according to claim 1, wherein during at least one of a ranging process and a registration process, another ONU-ID different from the ONU-ID is adopted by the ONU to perform data interaction with the OLT.

8. The method according to claim 1, wherein the step of promoting, at the OLT, the ONU into service comprises:

configuring service parameters from the OLT to the ONU after the ONU succeeds in accomplishing a registration process.

9. An apparatus comprising an optical line terminal (OLT) configured to couple to a plurality of optical network units (ONUs) via an optical distribution network (ODN),

wherein the OLT is communicatively connected to an operation management system;

wherein the OLT is configured to receive a terminal serial number from an ONU, and transmit a request for logic registration code if it is determined that the terminal serial number does not match a terminal serial number stored on the OLT;

wherein the OLT is configured to, in response to the request, receive a physical layer operation and maintenance (PLOAM) message from an ONU within the plurality of ONUs, wherein the PLOAM message includes a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a first logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU, and the first logic registration code is assigned to a user by the operation management system and is provisioned for authentication;

wherein the OLT is configured to judge whether the first logic registration code received from the ONU matches a second logic registration code provisioned by the operation management system to the OLT, and to promote the ONU into service if the first logic registration code received from the ONU matches the second logic registration code.

10. The apparatus according to claim 9, wherein each of the first logic registration code and the second logic registration code is different from a terminal serial number of the ONU.

11. The apparatus according to claim 10, wherein each of the first logic registration code and the second logic registration code is different from the ONU-ID.

12. The apparatus according to claim 10, wherein the OLT is configured to receive a log-out message from the ONU, and release a binding relationship between the terminal serial number of the ONU and the ONU-ID in response to the reception of the log-out message.

13. The apparatus according to claim 10, wherein the OLT is configured to transmit information associated with the ONU to the operation management system, the information associated with the ONU including one of the group consisting of (a) the terminal serial number of the ONU and (b) a corresponding relationship between the terminal serial number of the ONU and the ONU-ID.

14. The apparatus according to claim 10, wherein the OLT is configured to bind the terminal serial number of the ONU, the ONU-ID and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by the operation management system to identify the ONU.

15. The apparatus according to claim 9, wherein during at least one of a ranging process and a registration process, the OLT is configured to adopt another ONU-ID different from the ONU-ID to perform data interaction with the ONU.

16. A method in a passive optical network (PON) comprising an optical line terminal (OLT) and a plurality of optical network units (ONUs) connected to the OLT via an optical distribution network (ODN), the method comprising:

transmitting a terminal serial number from an ONU to the OLT;

receiving a request for logic registration code from the OLT if the OLT determes that the terminal serial number does not match a terminal serial number stored on the OLT;

in response to the request, generating a physical layer operation and maintenance (PLOAM) message from an ONU in the PON to the OLT, the PLOAM message including a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU and wherein the logic registration code is assigned to a user by an operation management system communicatively connected to the OLT, and is provisioned to the OLT for authentication, wherein the logic registration code is different from a terminal serial number of the ONU;

transmitting the PLOAM message.

17. The method according to claim 16, wherein the logic registration code is different from the ONU-ID.

18. The method according to claim 16, further comprising:

during at least one of a ranging process and a registration process, performing data interaction between the ONU and the OLT adopting another ONU-ID different from the ONU-ID.

19. An optical network unit (ONU) in a passive optical network (PON), the ONU coupled to an optical line terminal (OLT) in the PON and comprising:

a storing module, configured to store a logic registration code assigned to a user who files a service application, wherein the logic registration code is provisioned by an operation management system communicatively connected to the OLT for authentication, wherein the logic registration code is different from a terminal serial number of the ONU;

a transmitting module, configured to transmit a terminal serial number to the OLT, and in response to a request for logical registration code that is sent when the OLT determines that the terminal serial number does not match a terminal serial number stored on the OLT, transmit the logic registration code via a physical layer operation and maintenance (PLOAM) message including a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying the logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU.

20. The ONU according to claim 19, wherein the logic registration code is different from the ONU-ID.

21. A method for authentication in a passive optical network (PON) comprising an optical line terminal (OLT) and a plurality of optical network units (ONUs) connected the OLT via an optical distribution network (ODN), the method comprising:

receiving, at the OLT, a physical layer operation and maintenance (PLOAM) message from an ONU in the PON, the PLOAM message including a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a first logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU and wherein the first logic registration code is assigned to a user by an operation management system communicatively connected to the OLT, and is provisioned for the authentication;

judging, at the OLT, whether the first logic registration code received from the ONU matches a second logic registration code provisioned by the operation management system to the OLT;

promoting, at the OLT, the ONU into service if the first logic registration code received from the ONU matches the second logic registration code, wherein each of the first logic registration code and the second logic registration code is different from the ONU-ID; and

binding at the OLT, the terminal serial number of the ONU, the ONU-ID and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by the operation management system to identify the ONU.

22. An apparatus comprising an optical line terminal (OLT) coupled to a plurality of optical network units (ONUs) via an optical distribution network (ODN),

wherein the OLT is communicatively connected to an operation management system;

wherein the OLT is configured to_receive a physical layer operation and maintenance (PLOAM) message from an ONU within the plurality of ONUs, wherein the PLOAM message includes a first field for carrying an ONU identifier (ONU-ID) and a second field for carrying a first logic registration code, wherein the ONU-ID is assigned by the OLT to identify the ONU, and the first logic registration code is assigned to a user by the operation management system and is provisioned for authentication;

wherein the OLT is configured to judge whether the first logic registration code received from the ONU matches a second logic registration code provisioned by the operation management system to the OLT, and to promote the ONU into service if the first logic registration code received from the ONU matches the second logic registration code, wherein each of the first logic registration code and the second logic registration code is different from a terminal serial number of the ONU; and

wherein the OLT is configured to bind the terminal serial number of the ONU, the ONU-ID and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by the operation management system to identify the ONU.