Method and apparatus for authentication in passive optical network

• US 9,942,634 B2
• Filed: 04/25/2017
• Issued: 04/10/2018
• Est. Priority Date: 07/13/2007
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wu, Wei, Gao, Hai
• Primary Examiner(s): TRAN, DZUNG D
• Application Number:
  US15/497,029
• Publication Number:
  US 20170230737A1
• Time in Patent Office: 350 Days
• CPC Class Codes: H04B 10/2589 Bidirectional transmission
• CPC Class Codes: H04B 10/27 Arrangements for networking
• CPC Class Codes: H04J 14/0238 Wavelength allocation for communications one-to-many, e.g. multicasting wavelengths
• CPC Class Codes: H04J 3/1694 Allocation of channels in TDM/TDMA networks, e.g. distributed multiplexers Passive Optical Networks H04Q11/0062
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04Q 11/0067 Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
• CPC Class Codes: H04Q 2011/0079 Operation or maintenance aspects

Abstract

A method and apparatus for authentication in a passive optical network are disclosed. In the disclosure, a first terminal serial number of an ONU and a first logic registration code are transmitted from the ONU to an OLT; if the OLT determines that the first terminal serial number does not match a second terminal serial number stored on the OLT, the OLT judges whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT; the OLT stores the first terminal serial number received from the ONU on the OLT if the first logic registration code matches the second logic registration code.

Claims

1. A method for authentication in a passive optical network (PON) comprising an optical line terminal (OLT) and an optical network unit (ONU), the method comprising:

receiving, by the OLT, a first terminal serial number of the ONU;

receiving, by the OLT, a logic registration code of the ONU;

determining, by the OLT, whether the first terminal serial number matches with a second terminal serial number stored on the OLT;

determining, by the OLT, whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT if the first terminal serial number does not match the second terminal serial number; and

determining, by the OLT, that the ONU is a valid ONU and assign a formal ONU identifier (ONU-ID) to the ONU, if the first logic registration code matches the second logic registration code.

2. The method according to claim 1, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from the formal ONU-ID that is assigned by the OLT to the ONU.

3. The method according to claim 1, wherein after judging that the first logic registration code matches the second logic registration code, the method further comprises:

receiving, by the OLT, a log-out message from the ONU; and

in response to the reception of the log-out message, releasing, by the OLT, a binding relationship between the first terminal serial number of the ONU and the ONU-ID.

4. The method according to claim 1, further comprising:

binding, by the OLT, the first terminal serial number of the ONU and the formal the ONU-ID and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by an operation management system to identify the ONU.

5. An apparatus comprising an optical line terminal (OLT) coupled to an optical network unit (ONU), wherein the OLT is configured for:

receiving, by the OLT, a first terminal serial number and a logic registration code of the ONU;

determining, by the OLT, whether the first terminal serial number matches with a second terminal serial number stored on the OLT;

determining, by the OLT, when the first terminal serial number does not match the second terminal serial number, whether the first logic registration code received from the ONU matches a second logic registration code stored on the OLT; and

determining, by the OLT, that the ONU is a valid ONU and assign a formal ONU identifier (ONU-ID) to the ONU, if the first logic registration code matches the second logic registration code.

6. The apparatus according to claim 5, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from the formal ONU-ID that is assigned by the OLT to the ONU.

7. The apparatus according to claim 5, wherein the OLT is configured to receive a log-out message from the ONU, and release a binding relationship between the first terminal serial number of the ONU and the ONU-ID in response to the reception of the log-out message.

8. The apparatus according to claim 5, wherein the OLT is configured to bind the first terminal serial number of the ONU and the ONU-ID, and a management terminal identifier of the ONU, wherein the management terminal identifier is adopted by an operation management system to identify the ONU.

9. A method performed on an optical network unit (ONU), comprising:

transmitting, by the ONU, a first terminal serial number and a logic registration code of the ONU to a central office comprising an optical line terminal (OLT) when the ONU logs on at a first time;

receiving, by the ONU, a request for a logic registration code from the central office, if the central office determines that the first terminal serial number does not match a second terminal serial number;

in response to the request, transmitting, by the ONU, a logic registration code to the central office for authentication;

receiving, by the ONU, a formal ONU identifier (ONU-ID), when the first logic registration code matches the second logic registration code after the first terminal serial number does not match the second terminal serial number stored on the OLT.

10. The method according to claim 9, wherein the logic registration code is different from the first terminal serial number of the ONU, and is different from the formal ONU-ID that is assigned by the OLT to the ONU.

11. The method according to claim 9, wherein when the ONU logs on at a second time, the method further comprising:

transmitting, by the ONU, the first terminal serial number of the ONU to the central office without sending the logic registration code, wherein the first terminal serial number transmitted at the second time is used by the central office to match a stored terminal serial number received from the ONU when the ONU logs on at the first time.

12. An optical network unit (ONU) comprising:

a storing module, configured to store a terminal serial number and a logic registration code;

a transmitting module, configured to transmit a first terminal serial number to a central office comprising an optical line terminal (OLT) when the ONU logs on at a first time, and

a receiving module, configured to receive a request for a logic registration code from the central office, if the central office determines that the first terminal serial number does not match a second terminal serial number stored thereon;

wherein the transmitting module, further configured to transmit a logic registration code to the central office in response to the request for logical registration code;

wherein the receiving module, further configured to receive a formal ONU identifier (ONU-ID), when the first logic registration code matches the second logic registration code stored on the OLT.

13. The ONU according to claim 12, wherein the first logic registration code is different from the first terminal serial number of the ONU, and is different from the ONU-ID that is assigned by the OLT to the ONU.

14. The ONU according to claim 12, wherein when the ONU logs on at a second time, the transmitting module is configured to transmit the first terminal serial number to the central office without sending the logic registration code, wherein the first terminal serial number transmitted at the second time is used by the central office to match a stored terminal serial number received from the ONU when the ONU logs on at the first time.