Method and apparatus for authentication in passive optical network

• US 9,397,777 B2
• Filed: 05/20/2014
• Issued: 07/19/2016
• Est. Priority Date: 07/13/2007
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wu, Wei, Gao, Hai
• Primary Examiner(s): TRAN, DZUNG D
• Application Number:
  US14/282,642
• Publication Number:
  US 20140255030A1
• Time in Patent Office: 791 Days
• US Class Current: 1/1
• CPC Class Codes: H04B 10/2589 Bidirectional transmission
• CPC Class Codes: H04B 10/27 Arrangements for networking
• CPC Class Codes: H04J 14/0238 Wavelength allocation for communications one-to-many, e.g. multicasting wavelengths
• CPC Class Codes: H04J 3/1694 Allocation of channels in TDM/TDMA networks, e.g. distributed multiplexers Passive Optical Networks H04Q11/0062
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04Q 11/0067 Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

A method and apparatus for authentication in a passive optical network are disclosed. In the disclosure, a first terminal serial number of an ONU and a first logic registration code are transmitted from the ONU to an OLT; if the OLT determines that the first terminal serial number does not match a second terminal serial number stored on the OLT, the OLT judges whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT; the OLT stores the first terminal serial number received from the ONU on the OLT if the first logic registration code matches the second logic registration code.

Claims

1. A method for authentication in a passive optical network (PON) comprising an optical line terminal (OLT) and an optical network unit (ONU), the method comprising:

receiving, by the OLT, a first terminal serial number of the ONU and a first logic registration code from the ONU;

determining, by the OLT, that the first terminal serial number does not match a second terminal serial number stored on the OLT;

in the event that the first terminal serial number does not match the second terminal serial number, judging, by the OLT, whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT; and

determining, by the OLT, that the ONU is a valid ONU if the first logic registration code matches the second logic registration code.

2. The method according to claim 1, further comprising:

authenticating, by the OLT, the ONU based on information including the stored first terminal serial number of the ONU without the second logic registration code.

3. The method according to claim 1, wherein the step of the receiving, by the OLT, the first terminal serial number of the ONU and the first logic registration code from the ONU, comprises:

receiving, by the OLT, the first terminal serial number of the ONU from the ONU;

transmitting, by the OLT, a request for requesting a terminal serial number to the ONU; and

receiving, by the OLT, the first logic registration code from the ONU.

4. The method according to claim 3, wherein after judging that the first logic registration code matches the second logic registration code, the method further comprises:

receiving, by the OLT, a log-out message from the ONU; and

in response to the reception of the log-out message, releasing, by the OLT, a binding relationship between the first terminal serial number of the ONU and the ONU-ID.

5. The method according to claim 1, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU.

6. The method according to claim 1, further comprising:

binding, by the OLT, the first terminal serial number of the ONU, an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by an operation management system to identify the ONU.

7. An apparatus comprising an optical line terminal (OLT) coupled to an optical network unit (ONU), wherein the OLT is configured to:

receive a first terminal serial number of the ONU and a first logic registration code from the ONU;

determine that the first terminal serial number does not match a second terminal serial number stored on the OLT;

in the event that the first terminal serial number does not match the second terminal serial number, judge whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT; and

determine that the ONU is a valid ONU if the first logic registration code matches the second logic registration code.

8. The apparatus according to claim 7, wherein

the OLT is configured to authenticate the ONU based on information including the stored first terminal serial number of the ONU without the second logic registration code.

9. The apparatus according to claim 7, wherein the first logic registration code is requested by the OLT after the OLT determines the first terminal serial number does not match the second terminal serial number stored on the OLT.

10. The apparatus according to claim 7, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU.

11. The apparatus according to claim 10, wherein the OLT is configured to receive a log-out message from the ONU, and release a binding relationship between the first terminal serial number of the ONU and the ONU-ID in response to the reception of the log-out message.

12. The apparatus according to claim 7, wherein the OLT is configured to bind the first terminal serial number of the ONU, an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by an operation management system to identify the ONU.

13. A method performed on an optical network unit (ONU), comprising:

transmitting, by the ONU, a first terminal serial number of the ONU to a central office comprising an optical line terminal (OLT) when the ONU logs on at a first time;

receiving, by the ONU, a request for a logic registration code from the central office, if the central office determines that the first terminal serial number does not match a second terminal serial number stored thereon;

in response to the request, transmitting, by the ONU, a logic registration code to the central office for authentication.

14. The method according to claim 13, wherein the logic registration code is different from the first terminal serial number of the ONU, and is different from an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU.

15. The method according to claim 13, wherein when the ONU logs on at a second time, the method further comprising:

transmitting, by the ONU, the first terminal serial number of the ONU to the central office without sending the logic registration code, wherein the first terminal serial number transmitted at the second time is used by the central office to match a stored terminal serial number received from the ONU when the ONU logs on at the first time.

16. An optical network unit (ONU) comprising:

a storing module, configured to store a logic registration code;

a transmitting module, configured to transmit a first terminal serial number to a central office comprising an optical line terminal (OLT) when the ONU logs on at a first time, and transmit the logic registration code to the central office in response to a request for logical registration code that is sent when the central office determines that the first terminal serial number does not match a second terminal serial number stored thereon.

17. The ONU according to claim 16, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from an ONU identifier (ONU-ID) that is assigned by the OLT to the ONU.

18. The ONU according to claim 16, wherein when the ONU logs on at a second time, the transmitting module is configured to transmit the first terminal serial number to the central office without sending the logic registration code, wherein the first terminal serial number transmitted at the second time is used by the central office to match a stored terminal serial number received from the ONU when the ONU logs on at the first time.