Intercommunication authentication method, optical communication system and related equipment
Directly obtaining and verifying signature information through OLT, establishing an intercommunication connection with ONT, solving the problem of low intercommunication authentication security in optical communication systems, and achieving higher authentication security and system security.
Patent Information
- Application Number
- CN202310860982.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2023-07-13
- Publication Date
- 2025-01-14
AI Technical Summary
The security of intercommunication authentication in existing optical communication systems is low and there are loopholes, resulting in the authentication being unreliable.
Directly obtain and verify signature information through OLT, establish interoperable connection with ONT, increase the OLT identification to avoid other OLTs using other OLTs, and reduce the complexity of signature verification of network management devices, reduce the complexity and transmission of configuration files. Resource consumption.
Improve the security of intercommunication authentication, prevent ONT from bypassing authentication, reduce the complexity of configuration files and the consumption of transmission resources, and enhance the security of the system.
Smart Images
Figure CN119316143A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of optical communications, and in particular to an interoperable authentication method, an optical communication system and related equipment. Background Art
[0002] The passive optical network (PON) system includes an optical line terminal (OLT), an optical distribution network (ODN) and an optical network terminal (ONT). ONT can also be called an optical network unit (ONU). OLT can configure the type of ONT that is allowed to interoperate. Only ONTs that have passed interoperability certification can interoperate with OLT. In order to facilitate the management of interoperability authentication policies for multiple OLTs, the PON system can be provided with a network management device. The network management device sends interoperability configuration parameters to the signature server, and the interoperability configuration parameters are used to indicate the type information of the ONT that is allowed to interoperate with the OLT. The interoperability configuration parameters also include the identification of the network management device. The signature server signs the interoperability configuration parameters and returns the interoperability configuration file. The interoperability configuration file includes the interoperability configuration parameters and the signature information of the interoperability configuration parameters. The network management device performs signature verification on the interoperability configuration file according to the signature information. After the signature verification is passed, the network management device sends the interoperability configuration parameters to the OLT. The OLT performs interoperability authentication on the online ONT based on the interoperability configuration parameters.
[0003] In actual applications, the above method has some loopholes, which leads to low security of interoperable authentication. Summary of the invention
[0004] The present application provides an interoperable authentication method, an optical communication system and related equipment, which can improve the security of interoperable authentication by performing signature authentication through OLT.
[0005] The first aspect of the present application provides an intercommunication authentication method. The intercommunication authentication method includes the following steps: the first OLT obtains an intercommunication configuration file. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT allows to intercommunication. The first OLT verifies the signature information. The first OLT receives the type information of the first ONT from the first ONT. If the first condition is met, the first OLT establishes an intercommunication connection with the first ONT. The first condition includes: the signature information is verified correctly; the first ONT is the type information of the ONT type that the first OLT allows to intercommunication.
[0006] In an optional manner of the first aspect, the first condition further includes: the intercommunication configuration parameter includes an identifier of the first OLT. By adding the identifier of the first OLT, other OLTs can be prevented from using the intercommunication configuration file of the first OLT, thereby improving the security of intercommunication authentication.
[0007] In an optional manner of the first aspect, the first OLT obtains the intercommunication configuration file, including: the first OLT receives the intercommunication configuration file from a network management device. The intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters.
[0008] In an optional manner of the first aspect, the intercommunication configuration parameter does not include the identifier of the network management device. In the present application, the first OLT directly verifies the signature information. Therefore, the intercommunication configuration parameter may not include the identifier of the network management device. Therefore, the present application can reduce the size of the intercommunication configuration file, thereby saving transmission resources. Moreover, in the present application, the network management device may not need to perform signature verification on the intercommunication configuration file, thereby reducing the complexity of verification.
[0009] In an optional manner of the first aspect, before the signature information is verified, the first OLT cannot establish an intercommunication connection with the ONT. In order to prevent some ONTs from bypassing the intercommunication authentication, it can be limited that the first OLT cannot establish an intercommunication connection with the ONT before the signature information is verified. Therefore, the present application can improve the security of the intercommunication authentication.
[0010] In an optional manner of the first aspect, the intercommunication authentication method further includes the following steps: the first OLT obtains type information of the ONT that is allowed to intercommunication by default. The first OLT establishes an intercommunication connection with the ONT according to the type information of the ONT that is allowed to intercommunication by default. In order to reduce the complexity of the later intercommunication configuration file, some ONT types can be used as the ONT that is allowed to intercommunication by default by the first OLT. Therefore, the present application can reduce the complexity of configuring the intercommunication file.
[0011] In an optional manner of the first aspect, the type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: OLT identifier, ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identifier, and ONT model.
[0012] A second aspect of the present application provides a first OLT. The first OLT includes a transceiver and a processor. The transceiver is used to obtain an intercommunication configuration file. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT allows to intercommunication. The processor is used to verify the signature information. The transceiver is also used to receive the type information of the first ONT from the first ONT. If the first condition is met, the processor is also used to establish an intercommunication connection with the first ONT. The first condition includes: the signature information is verified correctly; the first ONT is the type information of the ONT of the ONT type allowed to intercommunication by the first OLT.
[0013] In an optional manner of the second aspect, the first condition further includes: the intercommunication configuration parameter includes an identifier of the first OLT.
[0014] In an optional manner of the second aspect, the transceiver is used to obtain the intercommunication configuration file, including: the transceiver is used to receive the intercommunication configuration file from the network management device. The intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters.
[0015] In an optional manner of the second aspect, the intercommunication configuration parameters do not include an identifier of the network management device.
[0016] In an optional manner of the second aspect, before the signature information is verified, the first OLT cannot establish an intercommunication connection with the ONT.
[0017] In an optional manner of the second aspect, the processor is further configured to obtain type information of the ONTs that are allowed to interoperate by default. The processor is further configured to establish an interoperability connection with the ONT according to the type information of the ONTs that are allowed to interoperate by default.
[0018] In an optional manner of the second aspect, the type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: OLT identifier, ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identifier, and ONT model.
[0019] In a third aspect of the present application, an optical communication system is provided. The optical communication system includes a first OLT and a first ONT. The first OLT is used to obtain an intercommunication configuration file. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT allows to intercommunication. The first OLT is also used to verify the signature information. The first ONT is used to send the type information of the first ONT to the first OLT. If the first condition is met, the first OLT is also used to establish an intercommunication connection with the first ONT. The first condition includes: the signature information is verified correctly; the first ONT is an ONT type that the first OLT allows to intercommunication.
[0020] In an optional manner of the third aspect, the first condition further includes: the intercommunication configuration parameter includes an identifier of the first OLT.
[0021] In an optional manner of the third aspect, the optical communication system further includes a network management device. The network management device is used to obtain intercommunication configuration parameters. The network management device is also used to obtain an intercommunication configuration file and send the intercommunication configuration file to the first OLT. The intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters.
[0022] In an optional manner of the third aspect, the intercommunication configuration parameters do not include an identifier of the network management device.
[0023] In an optional manner of the third aspect, before the signature information is verified, the first OLT cannot be interconnected with the ONT.
[0024] In an optional manner of the third aspect, the first OLT is further configured to obtain type information of the ONTs that are allowed to interoperate by default. The first OLT is further configured to establish an intercommunication connection with the ONT according to the type information of the ONTs that are allowed to interoperate by default.
[0025] In an optional manner of the third aspect, the type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: OLT identifier, ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identifier, and ONT model.
[0026] The fourth aspect of the present application provides an intercommunication authentication method. The intercommunication authentication method comprises the following steps: the network management device obtains an intercommunication configuration file. The intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters. The intercommunication configuration file includes the intercommunication configuration parameters and the signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include the type information of the ONT that the first OLT allows to intercommunication. The network management device sends the intercommunication configuration file to the first OLT. The intercommunication configuration file is used by the first OLT to establish an intercommunication connection with the first ONT.
[0027] In an optional manner of the fourth aspect, the intercommunication configuration parameter includes an identifier of the first OLT.
[0028] In an optional manner of the fourth aspect, the intercommunication configuration parameters do not include an identifier of the network management device.
[0029] In a fifth aspect, the present application provides an intercommunication network management device. The network management device includes a receiver and a transmitter. The receiver is used to receive an intercommunication configuration file. The intercommunication configuration file is obtained by a signature server according to intercommunication configuration parameters. The intercommunication configuration file includes the intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of the optical network terminal ONT that the first OLT allows to intercommunication. The transmitter is used to send the intercommunication configuration file to the first OLT. The intercommunication configuration file is used by the first OLT to establish an intercommunication connection with the first ONT.
[0030] In a sixth aspect, the present application provides a processing chip. The processing chip includes an input / output port and a processing circuit. The processing circuit is used to execute the method described in the first aspect or any one of the embodiments of the first aspect; or execute the method described in the fourth aspect or any one of the embodiments of the fourth aspect.
[0031] The seventh aspect of the present application provides a computer storage medium, characterized in that instructions are stored in the computer storage medium, and when the instructions are executed on a computer, the computer executes the method as described in the first aspect or any one of the embodiments of the first aspect; or the computer executes the method as described in the fourth aspect or any one of the embodiments of the fourth aspect.
[0032] In an eighth aspect, the present application provides a computer program product, characterized in that when the computer program product is executed on a computer, it enables the computer to execute the method described in the first aspect or any one of the embodiments of the first aspect; or enables the computer to execute the method described in the fourth aspect or any one of the embodiments of the fourth aspect. BRIEF DESCRIPTION OF THE DRAWINGS
[0033] Figure 1 A first structural schematic diagram of an optical communication system provided in an embodiment of the present application;
[0034] Figure 2 A first flow chart of an interoperable authentication method provided in an embodiment of the present application;
[0035] Figure 3 A second structural schematic diagram of an optical communication system provided in an embodiment of the present application;
[0036] Figure 4 A second flow chart of the interoperable authentication method provided in an embodiment of the present application;
[0037] Figure 5 A schematic diagram of the structure of a network management device provided in an embodiment of the present application;
[0038] Figure 6 A first structural diagram of a first OLT provided in an embodiment of the present application;
[0039] Figure 7 A second structural diagram of the first OLT provided in an embodiment of the present application. DETAILED DESCRIPTION
[0040] The present application provides an interoperable authentication method, an optical communication system, and related equipment, which can improve the security of interoperable authentication by performing signature authentication through OLT. It should be understood that the "first", "second", etc. used in this application are only used for the purpose of distinguishing descriptions, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying order. In addition, for the sake of simplicity and clarity, reference numbers and / or letters are repeated in multiple figures of this application. Repetition does not indicate a strict limiting relationship between various embodiments and / or configurations.
[0041] The optical communication system provided by the present application is applied to the field of optical communication, such as a passive optical network (PON) system. In the PON system, in order to facilitate the management of the types of optical network terminals (ONT) that allow intercommunication between optical line terminals (OLT), a network management device can be provided. The network management device is used to send intercommunication configuration parameters to the OLT. The OLT performs intercommunication authentication on the online ONT according to the intercommunication configuration parameters. In practical applications, there are some loopholes in the above method, which leads to low security of intercommunication authentication.
[0042] To this end, an embodiment of the present application provides an optical communication system. Figure 1 The first structural diagram of the optical communication system provided in the embodiment of the present application. Figure 1 As shown, the optical communication system includes a first OLT 101, an optical distribution network (ODN) 102 and a plurality of ONTs. Figure 1 In the example of FIG. 1 , the plurality of ONTs include ONTs 104 to 106. OLT 101 is connected to the plurality of ONTs via ODN 102. ODN 102 includes optical splitter 103. In the downstream direction, first OLT 101 distributes downstream optical signals to all ONTs via optical splitter 103. In the upstream direction, upstream optical signals from various optical terminals are coupled to first OLT 101 via optical splitter 103.
[0043] The first OLT 101 is used to obtain an intercommunication configuration file. The embodiment of the present application does not limit the manner in which the first OLT 101 obtains the intercommunication configuration file. For example, the first OLT 101 is used to obtain the intercommunication configuration file from a network management device. For another example, the first OLT 101 is used to obtain the intercommunication configuration file from a signature server. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT 101 allows to intercommunication. The type information of the ONT may include one or more of the following: ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identification, and ONT model. Among them, the ONT access type may include gigabit-capable passive optical network (GPON), gigabit Ethernet passive optical network (EPON), or XG-PON (10-gigabit-capable passive optical network, 10G-GPON), etc. The ONT management mode may include "ONT" or "MXU". "ONT" refers to the management and control protocol of ONU. "MXU" refers to the management of simple network management protocol (SNMP). ONT port types can include Ethernet (ETH), plain old telephone service (POTS), radio frequency (RF), IPHOST or wireless fidelity (WIFI). IPHOST is the virtual port inside the ONT.
[0044] The first OLT 101 is used to verify the signature information. If the signature information is verified correctly, the intercommunication configuration parameters take effect. If the intercommunication configuration parameters take effect, the first OLT 101 is used to update the intercommunication authentication policy, allowing the establishment of an intercommunication connection with the ONT represented by the type information of the ONT in the intercommunication configuration parameters. If the intercommunication configuration parameters are not effective, the first OLT 101 does not update the intercommunication authentication policy. It should be understood that before obtaining the intercommunication configuration file this time, the first OLT 101 may be used to obtain other intercommunication configuration files and generate previous intercommunication authentication policies based on other intercommunication configuration files. In subsequent examples, for the convenience of description, it is assumed that the first OLT 101 has not generated a previous intercommunication authentication policy.
[0045] After the intercommunication configuration parameters take effect, the first OLT 101 is used to receive the type information of the first ONT from the first ONT. The first ONT can be any one of ONTs 104 to 106. After the first ONT goes online, the first ONT performs registration and authentication at the first OLT 101. After registration and authentication, the first OLT 101 can establish an ONU management and control channel (ONU management control channel, OMCC) with the first ONT. The first OLT 101 can be used to obtain the type information of the first ONT through the OMCC. For example, OLT 101 is used to send an OMCI message to the first ONT through the OMCC to obtain the identification of the first ONT. Among them, the first OLT 101 is used to query the Vendor ID, Serial number and Version attributes of the ONU-G ME corresponding to the first ONT through the OMCI message. Vendor ID represents the manufacturer name of the first ONT. Serial number represents the device serial number of the first ONT. Version represents the hardware version information of the first ONT. The first OLT 101 is used to query the Equipment id attribute of the ONU2-G ME corresponding to the first ONT through the OMCI message. The Equipment id represents the equipment model information of the first ONT. ONU-G ME and ONU2-G ME are OMCI management entity names defined in standards such as G.988.
[0046] After obtaining the type information of the first ONT, the first OLT 101 performs interoperability authentication on the first ONT according to the type information of the first ONT. If the type of the first ONT is an ONT type that the first OLT 101 allows to interoperate, that is, the first ONT is an ONT represented by the type information of the ONT in the intercommunication configuration parameters, the first OLT 101 establishes an intercommunication connection with the first ONT. After the intercommunication connection is established, the first OLT 101 can issue a control instruction to the first ONT, and configure services such as broadband, video or voice, allowing the user plane data on the first ONT side to be exchanged in the first OLT 101. If the type of the first ONT is not an ONT type that the first OLT 101 allows to interoperate, that is, the first ONT is not an ONT represented by the type information of the ONT in the intercommunication configuration parameters, the first OLT 101 does not establish an intercommunication connection with the first ONT. In the case where the intercommunication connection is not established, the first OLT 101 can disconnect the connection with the first ONT. The first ONT cannot provide network services for user terminals.
[0047] In actual applications, if the intercommunication configuration file is signed and verified by the network management device, it cannot be guaranteed that the intercommunication configuration parameters received by the first OLT 100 are intercommunication configuration parameters verified by the network management device. In addition, the network management device can send the verified intercommunication configuration parameters to any number of OLTs, and the intercommunication configuration parameters serve as the intercommunication authentication policy of the OLT. At this time, the number of OLTs is uncontrollable. Therefore, the security of intercommunication authentication performed in the above manner is low. In the embodiment of the present application, the security of intercommunication authentication can be improved by performing signature authentication through OLT.
[0048] Figure 2 The first flow chart of the interoperable authentication method provided in the embodiment of the present application. Figure 2 As shown, the interoperable authentication method includes the following steps.
[0049] In step 201, the first OLT obtains an interworking configuration file, where the interworking configuration file includes interworking configuration parameters and signature information of the interworking configuration parameters, and the interworking configuration parameters include type information of ONTs that the first OLT allows to interwork.
[0050] In step 202, the first OLT verifies the signature information.
[0051] The signature information is obtained by electronically signing the intercommunication configuration parameters by other devices. The other device may be a signature server set by the first OLT manufacturer. The embodiment of the present application does not limit the electronic signature method, the content of the signature information and the verification method.
[0052] In step 203, the first ONT sends type information of the first ONT to the first OLT.
[0053] The first ONT may send the type information of the first ONT to the first OLT via an OMCI message. The type information of the first ONT may be one or more of ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identifier, and ONT model.
[0054] In step 204, if the first condition is met, the first OLT establishes an intercommunication connection with the first ONT, and the first condition includes: the signature information is verified correctly; the first ONT is an ONT type that the first OLT allows to intercommunication.
[0055] After the signature information is verified correctly, the intercommunication configuration parameters take effect. After the intercommunication configuration parameters take effect, if the first ONT is an ONT type that the first OLT allows to intercommunication, that is, the first ONT is an ONT represented by the type information of the ONT in the intercommunication configuration parameters, the first OLT establishes an intercommunication connection with the first ONT. If the first ONT is not an ONT type that the first OLT 101 allows to intercommunication, that is, the first ONT is not an ONT represented by the type information of the ONT in the intercommunication configuration parameters, the first OLT 101 does not establish an intercommunication connection with the first ONT.
[0056] It should be understood that Figure 2 Description and Figure 1 There are similarities between the description of the optical communication system in China. Therefore, for the description of the interoperable authentication method, you can refer to Figure 1 For example, after establishing the intercommunication connection, the first OLT can issue a control instruction to the first ONT and configure the bandwidth to allow the user plane data on the first ONT side to be exchanged in the first OLT 101. Figure 1 As can be seen from the description, the first OLT 101 can be used to obtain the intercommunication configuration file from the network management device. Figure 3 This is a second structural diagram of the optical communication system provided in the embodiment of the present application. Figure 3 As shown, in Figure 1 On the basis of, the optical communication system further includes a network management device 301. The network management device 301 is connected to one or more OLTs. The one or more OLTs include a first OLT 101. The network management device 301 is used to send an intercommunication configuration file to the first OLT 101.
[0057] Figure 4 The second flow chart of the interoperable authentication method provided in the embodiment of the present application is as follows. Figure 4 As shown, the interoperable authentication method includes the following steps.
[0058] In step 401, the network management device obtains intercommunication configuration parameters.
[0059] The network management device can be connected to one or more OLTs. When the network management device is connected to multiple OLTs, the network management device can generate intercommunication configuration parameters for multiple OLTs in batches. The intercommunication configuration parameters corresponding to each OLT can be the same or different. For example, the intercommunication configuration parameters corresponding to the first OLT represent model X of manufacturer A. After the first OLT makes the intercommunication configuration parameters effective, the first OLT can establish an intercommunication connection with the ONT of model X of manufacturer A. The intercommunication configuration parameters corresponding to the second OLT represent model Y of manufacturer A. After the second OLT makes the intercommunication configuration parameters effective, the second OLT can establish an intercommunication connection with the ONT of model Y of manufacturer A.
[0060] In step 402, the network management device sends intercommunication configuration parameters to the signature server.
[0061] After the operator purchases a new OLT, the network management device can obtain the signature server address of the OLT manufacturer, thereby accessing the signature server of the OLT manufacturer. After obtaining the intercommunication configuration parameters, the network management device sends the intercommunication configuration parameters to the signature server.
[0062] In step 403, the signature server signs the intercommunication configuration parameters to obtain an intercommunication configuration file.
[0063] The signature server electronically signs the intercommunication configuration parameters to obtain an intercommunication configuration file. The intercommunication configuration file includes the intercommunication configuration parameters and the signature information of the intercommunication configuration parameters. The embodiment of the present application does not limit the electronic signature method and the content of the signature information.
[0064] In step 404, the signature server sends the intercommunication configuration file to the network management device.
[0065] The signature server sends the intercommunication configuration file to the network management device, and the network management device sends the intercommunication configuration file to the first OLT. Alternatively, the signature server directly sends the intercommunication configuration file to the first OLT.
[0066] In step 405, the first OLT verifies the signature information.
[0067] In step 406, the first ONT sends type information of the first ONT to the first OLT.
[0068] In step 407, if the first condition is met, the first ONT establishes an intercommunication connection with the first ONT.
[0069] It should be understood that Figure 4 Description and Figure 2 There are similarities in the description of the authentication method used in the intercommunication. Figure 4 For a description of the authentication method in Intercommunication, please refer to Figure 2 For example, for the description of steps 405 to 407, please refer to the aforementioned Figure 2 Description of steps 202 to 204 in .
[0070] according to Figure 1 to Figure 4It can be seen from the description that the intercommunication configuration parameters include the type information of the ONTs that the first OLT allows to intercommunication. In practical applications, the intercommunication configuration parameters may also include the identifier of the OLT. The identifier of the OLT may be the serial number of the OLT. The first OLT will only make the intercommunication configuration parameters effective if the following conditions are met. The following conditions include: the intercommunication configuration parameters include the identifier of the first OLT; the signature information is verified correctly. When the intercommunication configuration parameters do not include the identifier of the first OLT or the signature information is verified incorrectly, the first OLT does not update the intercommunication authentication policy.
[0071] In practical applications, the intercommunication configuration parameters may not include the identifier of the network management device. In the technical solution provided in the present application, the signature information is directly verified by the first OLT. Therefore, the signature server does not need to care about the source of the intercommunication configuration parameters. The signature server directly determines whether to sign for it based on the correspondence between the identifier of the OLT and the type information of the ONT that the OLT allows to intercommunication. After the OLT is sold, the signature server may store the correspondence between the identifier of the OLT and the type information of the ONT that the OLT allows to intercommunication. When the correspondence in the intercommunication configuration parameters is the same as the stored correspondence, the signature server electronically signs the intercommunication configuration parameters. When the correspondence in the intercommunication configuration parameters is not the same as the stored correspondence, the signature server may refuse to electronically sign the intercommunication configuration parameters.
[0072] according to Figure 1 As can be seen from the description, the first OLT can receive multiple intercommunication configuration files to update the intercommunication authentication policy.
[0073] In order to improve the security of intercommunication authentication, before the intercommunication authentication policy is generated through the intercommunication configuration file, the first OLT may not be able to establish an intercommunication connection with any ONT. Alternatively, before the first OLT leaves the factory, the first OLT is configured with a default intercommunication authentication policy. The default intercommunication authentication policy includes type information of ONTs that are allowed to intercommunication by default. The first OLT can establish an intercommunication connection with an ONT that is allowed to intercommunication by default.
[0074] The optical communication system and the intercommunication authentication method provided by the present application are described above. The network management device and OLT provided by the present application are described below. Figure 5 This is a schematic diagram of the structure of the network management device provided in the embodiment of the present application. Figure 5 As shown, the network management device 301 includes a processor 501, a memory 502, a bus 503, a network interface 504 and an input device 505. The input device 505 can be a keyboard, a touch screen or a USB flash drive interface. The network interface 504 can be an interface of a wireless module or an optical module. The processor 501, the memory 502, the network interface 504 and the input device 505 are connected via a bus 503.
[0075] The network interface 504 is used to receive an intercommunication configuration file, for example, to receive the intercommunication configuration file from a signature server through an optical module. The intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters. The intercommunication configuration file includes the intercommunication configuration parameters and the signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include the type information of the ONTs that the first OLT allows to intercommunication. The network interface 504 is also used to send the intercommunication configuration file to the first OLT. The intercommunication configuration file is used by the first OLT to establish an intercommunication connection with the first ONT.
[0076] The processor 501 may be a central processing unit (CPU), a network processor (NP) or a combination of a CPU and a NP. The processor 1001 may further include a hardware chip or other general-purpose processor. The hardware chip may be an application specific integrated circuit (ASIC), a programmable logic device (PLD) or a combination thereof. The processor 501 may be used to generate intercommunication configuration parameters.
[0077] The memory 502 may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), or a flash memory, etc. The volatile memory may be a random access memory (RAM). The memory 502 stores program code, such as an operating system. The memory 502 may be used to store intercommunication configuration parameters and / or intercommunication configuration files.
[0078] It should be understood that the description of the network management device 301 and Figure 4 Therefore, for the description of the network management device 301, please refer to Figure 4 For example, the intercommunication configuration parameters include the identifier of the first OLT. For another example, the intercommunication configuration parameters do not include the identifier of the network management device 301.
[0079] Figure 6 This is a first structural diagram of a first OLT provided in an embodiment of the present application. Figure 6As shown, the first OLT 101 includes three planes. The three planes include a data plane 603, a control plane 602, and a management plane 601. The data plane 603 is used to connect to the ONT through the UNI user side interface. The data plane 603 is used to implement OAM, synchronization, protection, QoS, and switching functions. The control plane 602 is used to connect to the network through the NNI network side interface. The control plane 602 is used to implement resource management and signaling functions.
[0080] In an embodiment of the present application, the management plane 601 is used to obtain an intercommunication configuration file. For example, the management plane 601 is used to obtain an intercommunication configuration file from a network management device. For another example, the management plane 601 is used to obtain an intercommunication configuration file from a signature server through a network. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT allows to intercommunication. The management plane 601 is also used to verify the signature information. The control plane 602 is used to receive type information of the first ONT from the first ONT. If the first condition is met, the data plane 603 is used to establish an intercommunication connection with the first ONT. The first condition includes: the signature information verification is correct; the first ONT is an ONT type that the first OLT allows to intercommunication.
[0081] Figure 7 This is a second structural diagram of the first OLT provided in the embodiment of the present application. Figure 7 As shown, the first OLT 101 includes a processor 701 and a transceiver 702. The transceiver 702 is used to obtain an intercommunication configuration file. The intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters. The intercommunication configuration parameters include type information of ONTs that the first OLT allows to intercommunication. The processor 701 is used to verify the signature information. The transceiver 702 is also used to receive the type information of the first ONT from the first ONT. If the first condition is met, the processor 701 is also used to establish an intercommunication connection with the first ONT. The first condition includes: the signature information is verified correctly; the first ONT is an ONT type that the first OLT allows to intercommunication. In other embodiments, the first OLT 101 may also include a memory 703. The memory 703 may be used to store the intercommunication configuration file and / or the intercommunication configuration parameters.
[0082] It should be understood that the description of the first OLT 101 and Figure 1 to Figure 4 Therefore, for the description of the first OLT 101, reference may be made to Figure 1 to Figure 4 Description in any figure. For example, the intercommunication configuration parameter includes the identifier of the first OLT. For another example, the type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following: OLT identifier, ONT software version, ONT access type, ONT management mode, ONT port type, ONT manufacturer identifier, and ONT model.
[0083] The above are only specific implementation methods of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be covered by the protection scope of the present application.
Claims
1. An interoperable authentication method, characterized in that: include: The first optical line terminal OLT obtains an intercommunication configuration file, where the intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters, where the intercommunication configuration parameters include type information of the optical network terminal ONT that the first OLT allows to intercommunication; The first OLT verifies the signature information; The first OLT receives type information of the first ONT from the first ONT; If a first condition is met, the first OLT establishes an intercommunication connection with the first ONT, and the first condition includes: the signature information is verified correctly, and the first ONT is an ONT type that the first OLT allows to intercommunicate.
2. The method according to claim 1, characterized in that The first condition also includes: the intercommunication configuration parameter includes an identifier of the first OLT.
3. The method according to claim 1 or 2, characterized in that: The first OLT obtaining the intercommunication configuration file includes: the first OLT receiving the intercommunication configuration file from a network management device, where the intercommunication configuration file is obtained by a signature server according to the intercommunication configuration parameters.
4. The method according to claim 3, characterized in that The intercommunication configuration parameters do not include the identifier of the network management device.
5. The method according to any one of claims 1 to 4, characterized in that: Before the signature information is verified, the first OLT cannot establish an intercommunication connection with the ONT.
6. The method according to any one of claims 1 to 4, characterized in that The method further comprises: The first OLT obtains type information of ONTs that are allowed to interoperate by default; The first OLT establishes an intercommunication connection with the ONT according to the type information of the ONT that is allowed to intercommunication by default.
7. The method according to any one of claims 1 to 6, characterized in that: The type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: an ONT manufacturer identifier and an ONT model.
8. A first optical line terminal OLT, characterized in that: Includes a transceiver and a processor, wherein: The transceiver is used to obtain an intercommunication configuration file, the intercommunication configuration file includes intercommunication configuration parameters and signature information of the intercommunication configuration parameters, and the intercommunication configuration parameters include type information of optical network terminals ONTs that the first OLT allows to intercommunication; The processor is used to verify the signature information; The transceiver is further configured to receive type information of the first ONT from the first ONT; If a first condition is met, the processor is further configured to establish an intercommunication connection with the first ONT, wherein the first condition includes: the signature information is verified correctly, and the first ONT is an ONT type that is allowed to intercommunicate with the first OLT.
9. The first OLT according to claim 8, characterized in that: The first condition also includes: the intercommunication configuration parameter includes an identifier of the first OLT.
10. The first OLT according to claim 8 or 9, characterized in that: The transceiver is used to obtain the intercommunication configuration file, which includes: the transceiver is used to receive the intercommunication configuration file from a network management device, and the intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters.
11. The first OLT according to claim 10, characterized in that: The intercommunication configuration parameters do not include the identifier of the network management device.
12. The first OLT according to any one of claims 8 to 11, characterized in that: Before the signature information is verified, the first OLT cannot establish an intercommunication connection with the ONT.
13. The first OLT according to any one of claims 8 to 11, characterized in that: The processor is further used to obtain type information of the ONT that is allowed to intercommunicate by default; The processor is further configured to establish an intercommunication connection with the ONT according to the type information of the ONT that is allowed to intercommunication by default.
14. The first OLT according to any one of claims 8 to 13, characterized in that: The type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: an ONT manufacturer identifier and an ONT model.
15. An optical communication system, characterized in that: It includes a first optical line terminal OLT and a first optical network terminal ONT, wherein: The first OLT is used to obtain an intercommunication configuration file, where the intercommunication configuration file includes an intercommunication configuration parameter and signature information of the intercommunication configuration parameter, where the intercommunication configuration parameter includes type information of the ONT that the first OLT allows to intercommunication; The first OLT is further used to verify the signature information; The first ONT is used to send type information of the first ONT to the first OLT; If a first condition is met, the first OLT is further used to establish an intercommunication connection with the first ONT, and the first condition includes: the signature information is verified correctly, and the first ONT is an ONT type that the first OLT allows to intercommunication.
16. The optical communication system according to claim 15, characterized in that: The first condition also includes: the intercommunication configuration parameter includes an identifier of the first OLT.
17. The optical communication system according to claim 15 or 16, characterized in that: The optical communication system further includes a network management device, wherein: The network management device is used to obtain the intercommunication configuration parameters; The network management device is further used to obtain the intercommunication configuration file and send the intercommunication configuration file to the first OLT, where the intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters.
18. The optical communication system according to claim 17, characterized in that: The intercommunication configuration parameters do not include the identifier of the network management device.
19. The optical communication system according to any one of claims 15 to 18, characterized in that: Before the signature information is verified, the first OLT cannot be interconnected with the ONT.
20. The optical communication system according to any one of claims 15 to 18, characterized in that: The first OLT is further used to obtain type information of ONTs that are allowed to interoperate by default; The first OLT is further configured to establish an intercommunication connection with the ONT according to the type information of the ONT that is allowed to intercommunication by default.
21. The optical communication system according to any one of claims 15 to 20, characterized in that: The type information of the ONTs that the first OLT allows to intercommunicate includes one or more of the following contents: an ONT manufacturer identifier and an ONT model.
22. An interoperable authentication method, characterized in that: include: The network management device obtains an intercommunication configuration file, where the intercommunication configuration file is obtained by the signature server according to the intercommunication configuration parameters, the intercommunication configuration file includes the intercommunication configuration parameters and the signature information of the intercommunication configuration parameters, and the intercommunication configuration parameters include the type information of the optical network terminal ONT that the first optical line terminal OLT allows to intercommunicate; The network management device sends the intercommunication configuration file to the first OLT, where the intercommunication configuration file is used for the first OLT to establish an intercommunication connection with the first ONT.
23. The method according to claim 22, characterized in that The intercommunication configuration parameter includes an identifier of the first OLT.
24. The method according to claim 23, characterized in that The intercommunication configuration parameters do not include the identifier of the network management device.
25. A network management device, characterized in that: It includes a receiver and a transmitter, wherein: The receiver is used to receive an intercommunication configuration file, where the intercommunication configuration file is obtained by a signature server according to an intercommunication configuration parameter, the intercommunication configuration file includes the intercommunication configuration parameter and signature information of the intercommunication configuration parameter, and the intercommunication configuration parameter includes type information of an optical network terminal ONT that the first optical line terminal OLT allows to intercommunication; The transmitter is used to send the intercommunication configuration file to the first OLT, where the intercommunication configuration file is used for the first OLT to establish an intercommunication connection with the first ONT.