Equipment authentication processing method, device and system for all-optical networking, network equipment, storage medium and program product

Abstract

The invention relates to an equipment authentication processing method, device and system for all-optical networking, network equipment, a computer readable storage medium and a computer program product, and relates to the technical field of optical access networks. According to the invention, the authentication processing efficiency and the network security of the slave device of the all-optical networking can be improved. The method comprises the following steps: in response to an authentication request of slave equipment, authenticating the slave equipment based on an authentication mode corresponding to identity information of the slave equipment; if the authentication is passed, sending an authentication identifier of the slave device to an authentication acquisition management and control platform; the authentication acquisition management and control platform is used for verifying the legality of the authentication identifier; and carrying out corresponding service forwarding processing on the slave equipment according to the legality verification result.

Description

Technical Field

[0001] The present application relates to the technical field of optical access networks, and in particular to a method, apparatus, system, network equipment, computer-readable storage medium, and computer program product for device authentication processing in all-optical networking. Background Art

[0002] Fiber-optic broadband is an important part of the communication network. Driven by the demand for innovative services and applications, the fiber-optic network is further extended to users to achieve full coverage of the fiber-optic network.

[0003] The all-optical networking solution is based on optical fiber media networking. An all-optical master device is deployed at the user information network access point. An all-optical network is built with the all-optical master device as the center. The slave device can be extended to various areas where users need to deploy according to the internal structure of entities such as enterprises, so as to realize the comprehensive business carrying of related users and achieve high-quality broadband.

[0004] In the current network environment, users have a growing demand for all-optical networking. All-optical networking can provide higher bandwidth, lower latency, and more stable network performance. With the increase in the number of devices and the complexity of network architecture, it is necessary to effectively authenticate the slave devices that access the all-optical network.

[0005] In this regard, current technology requires a cumbersome device authentication process to authenticate slave devices connected to the all-optical network, which has technical problems such as low authentication processing efficiency and network security. Summary of the invention

[0006] Based on this, it is necessary to provide a device authentication processing method, apparatus, system, network equipment, computer-readable storage medium and computer program product for all-optical networking to address the above technical problems.

[0007] In a first aspect, the present application provides a method for processing device authentication in an all-optical network, comprising:

[0008] In response to an authentication request from a slave device, authenticating the slave device based on an authentication mode corresponding to identity information of the slave device;

[0009] If the authentication is successful, the authentication identifier of the slave device is sent to the authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier;

[0010] According to the result of the legality check, corresponding service forwarding processing is performed on the slave device.

[0011] In one of the embodiments, before authenticating the slave device based on the authentication mode corresponding to the identity information of the slave device, it also includes: obtaining the identity information of the slave device; the identity information includes one or more of the device manufacturer, device type and operator version of the slave device; and determining the authentication mode based on the identity information.

[0012] In one of the embodiments, before sending the authentication identifier of the slave device to the authentication collection management and control platform, it also includes: obtaining one or more of the organization unique identifier, serial number, region code and device type of the slave device; obtaining the authentication identifier of the slave device based on one or more of the organization unique identifier, serial number, region code and device type.

[0013] In one of the embodiments, the authentication collection management and control platform is used to determine whether the organization unique identifier in the authentication identification exists in the registration database; and / or, the authentication collection management and control platform is used to confirm whether the serial number is unique; and / or, the authentication collection management and control platform is used to verify whether the combination of the region code and the device type matches.

[0014] In one of the embodiments, the corresponding business forwarding processing is performed on the slave device based on the legitimacy check result, including: if the legitimacy check result is passed, the north-south and east-west business forwarding channels of the slave device are opened; if the legitimacy check result is failed, the east-west business forwarding channel of the slave device is opened.

[0015] In one of the embodiments, the authentication identifier includes the organization-unique identifier, serial number, region code and device type of the slave device; the authentication collection management and control platform is used to return the passed legitimacy verification result if the legitimacy verification of the organization-unique identifier, serial number, region code and device type are all passed; the authentication collection management and control platform is used to return the failed legitimacy verification result if the legitimacy verification of the organization-unique identifier, serial number, region code and device type are not all passed.

[0016] In a second aspect, the present application also provides a device authentication processing apparatus for all-optical networking, including:

[0017] an authentication module, configured to respond to an authentication request from a slave device and authenticate the slave device based on an authentication mode corresponding to the identity information of the slave device;

[0018] A sending module, used for sending the authentication identification of the slave device to the authentication collection and control platform if the authentication is passed; the authentication collection and control platform is used to verify the legitimacy of the authentication identification;

[0019] The processing module is used to perform corresponding business forwarding processing on the slave device according to the legitimacy verification result.

[0020] In a third aspect, the present application also provides an all-optical network device authentication processing system, including: an all-optical master device and an authentication collection and control platform; wherein,

[0021] The all-optical master device is used to respond to an authentication request from a slave device and authenticate the slave device based on an authentication mode corresponding to the identity information of the slave device;

[0022] The all-optical master device is further used to send the authentication identifier of the slave device to the authentication collection and control platform if the authentication is passed;

[0023] The authentication collection and control platform is used to verify the legitimacy of the authentication identifier and feed back the legitimacy verification result to the all-optical main device;

[0024] The all-optical master device is further used to perform corresponding service forwarding processing on the slave device according to the legitimacy verification result.

[0025] In a fourth aspect, the present application further provides a network device, including a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, the following steps are implemented:

[0026] In response to an authentication request from a slave device, the slave device is authenticated based on an authentication mode corresponding to the identity information of the slave device; if the authentication is successful, the authentication identifier of the slave device is sent to an authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier; based on the legitimacy verification result, corresponding business forwarding processing is performed on the slave device.

[0027] In a fifth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the following steps are implemented:

[0028] In response to an authentication request from a slave device, the slave device is authenticated based on an authentication mode corresponding to the identity information of the slave device; if the authentication is successful, the authentication identifier of the slave device is sent to an authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier; based on the legitimacy verification result, corresponding business forwarding processing is performed on the slave device.

[0029] In a sixth aspect, the present application further provides a computer program product, including a computer program, which implements the following steps when executed by a processor:

[0030] In response to an authentication request from a slave device, the slave device is authenticated based on an authentication mode corresponding to the identity information of the slave device; if the authentication is successful, the authentication identifier of the slave device is sent to an authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier; based on the legitimacy verification result, corresponding business forwarding processing is performed on the slave device.

[0031] The above-mentioned device authentication processing method, apparatus, system, network device, computer-readable storage medium and computer program product for all-optical networking, in response to the authentication request of the slave device, authenticates the slave device based on the authentication mode corresponding to the identity information of the slave device; if the authentication is successful, the authentication identification of the slave device is sent to the authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identification; according to the legitimacy verification result, the slave device is subjected to corresponding service forwarding processing. This scheme can authenticate the slave device based on the authentication mode corresponding to the identity information of the slave device, and after the authentication is successful, the authentication identification of the slave device is sent to the authentication collection and control platform to verify the legitimacy of the authentication identification, and finally, according to the legitimacy verification result, the slave device is subjected to corresponding service forwarding processing, thereby realizing efficient and unified authentication processing for the slave devices connected to the all-optical network, which can improve the flexibility and compatibility of the all-optical network, and improve the authentication processing efficiency and network security of the slave devices in the all-optical network. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0033] Figure 1 An application environment diagram of a method for processing device authentication in an all-optical network in one embodiment;

[0034] Figure 2 A schematic diagram of a process flow of a device authentication processing method for all-optical networking in one embodiment;

[0035] Figure 3 A schematic diagram of a process flow of an authentication process mechanism of a master-slave device in one embodiment;

[0036] Figure 4 It is a structural block diagram of a device authentication processing apparatus for all-optical networking in one embodiment;

[0037] Figure 5 FIG. 4 is a diagram showing the internal structure of a network device in one embodiment. DETAILED DESCRIPTION

[0038] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0039] Due to the rich user types of entities such as institutions and enterprises, and the wide coverage of business scenarios and business needs, according to the nature of the industry and business needs, in actual deployment applications, according to user attributes and scale, the number of access points in the all-optical network is generally more than 4, and the authentication collection control platform and the main device are required to complete the networking and authentication with a large number of slave devices. In addition, the current slave devices have many manufacturers, types, and versions. Therefore, the current technology that requires cumbersome equipment authentication processes to authenticate the slave devices connected to the all-optical network has technical problems such as low authentication processing efficiency and network security, and will affect the equipment control, service activation and operation and maintenance efficiency of the commercial all-optical network FTTR-B, and there are certain access security risks.

[0040] In this regard, the present application embodiment provides a device authentication processing method for all-optical networking, which can be applied to Figure 1 In the application environment shown, efficient and unified authentication processing can be implemented for slave devices accessing the all-optical network, which can improve the flexibility and compatibility of the all-optical networking, and improve the authentication processing efficiency and network security of the slave devices in the all-optical networking.

[0041] The following is based on Figure 1 The application environment shown is combined with various embodiments and corresponding drawings to illustrate the device authentication processing method of the all-optical network of the present application.

[0042] In an exemplary embodiment, Figure 2 As shown, a device authentication processing method for all-optical networking is provided, which can be applied to Figure 1 The all-optical master device in the embodiment of the present invention may include the following steps:

[0043] Step S201 , in response to an authentication request from a slave device, authenticating the slave device based on an authentication mode corresponding to identity information of the slave device.

[0044] In this step, the slave device may send an authentication request to the all-optical master device when accessing the all-optical network, the all-optical master device receives the authentication request sent by the slave device, the all-optical master device responds to the authentication request, and the all-optical master device may authenticate the slave device based on the authentication mode corresponding to the identity information of the slave device. The identity information of the slave device may include relevant information for representing the identity of the slave device. As an example, the identity information of the slave device may include but is not limited to the model of the slave device, a unique identifier (such as a MAC address, i.e., a media control access address), a device manufacturer, a device type, and an operator version. The all-optical master device may be pre-set with multiple authentication modes, and these authentication modes may include multiple combinations, which may correspond to the identity information of the slave device to ensure that it can adapt to different security requirements and network environments. Therefore, the all-optical master device can authenticate the slave device based on the authentication mode corresponding to the identity information of the slave device to flexibly adapt to different slave devices and security requirements and network environments. Among them, the specific authentication process is not limited here to ensure the flexibility and efficiency of the authentication process. As an example, during the authentication process, the all-optical master device can negotiate with the slave device, and the all-optical master device can automatically obtain the attribute field information required for authentication (such as device type, supported protocol version, etc.) for authentication processing.

[0045] Step S202: If the authentication is successful, the authentication identifier of the slave device is sent to the authentication collection and control platform. The authentication collection and control platform is used to verify the legitimacy of the authentication identifier.

[0046] Wherein, the all-optical master device authenticates the slave device based on the authentication mode corresponding to the identity information of the slave device, and an authentication result can be obtained, and the authentication result can be an authentication result representing the link layer authentication. In this step, if the authentication is passed, the all-optical master device can send the authentication identification of the slave device to the authentication acquisition and control platform. Wherein, the authentication identification can be generated according to a unified coding rule, and the unified coding rule can be a predefined coding rule, and the coding rule is a rule for specifying which code or codes, fields or their combination are used to form the authentication identification. Wherein, the authentication acquisition and control platform can serve as the data processing and management center of the device authentication processing system of the all-optical network, and can be responsible for receiving, verifying and feeding back the verification results. Wherein, the authentication acquisition and control platform can be used to verify the legitimacy of the authentication identification.

[0047] In this step, after the all-optical master device sends the authentication identifier of the slave device to the authentication collection control platform, the authentication collection control platform can verify the legitimacy of the authentication identifier, and specifically can perform a legitimacy check on each code or field contained in the authentication identifier, obtain a legitimacy check result and feed it back to the all-optical master device. Among them, the legitimacy check can be used to verify whether the slave device is a legitimate slave device, and its specific verification form is not limited here. As an example, the serial number of the slave device can be carried in the authentication identifier, so that the authentication collection control platform can perform a legitimacy check on the serial number, obtain a legitimacy check result and feed it back to the all-optical master device.

[0048] Step S203: Perform corresponding service forwarding processing on the slave device according to the validity verification result.

[0049] In this step, the all-optical master device can perform corresponding business forwarding processing on the slave device based on the legitimacy verification result fed back by the authentication collection and control platform. For example, it can open or restrict the business forwarding channel in the corresponding direction of the slave device based on the legitimacy verification result, so as to securely control the traffic of the slave device.

[0050] The device authentication processing method of the all-optical network of this embodiment, in response to the authentication request of the slave device, authenticates the slave device based on the authentication mode corresponding to the identity information of the slave device; if the authentication is successful, the authentication identifier of the slave device is sent to the authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier; according to the legitimacy verification result, the slave device is subjected to corresponding service forwarding processing. This scheme can authenticate the slave device based on the authentication mode corresponding to the identity information of the slave device, and after the authentication is successful, the authentication identifier of the slave device is sent to the authentication collection and control platform to verify the legitimacy of the authentication identifier, and finally, according to the legitimacy verification result, the slave device is subjected to corresponding service forwarding processing, which realizes efficient and unified authentication processing of the slave devices connected to the all-optical network, can improve the flexibility and compatibility of the all-optical network, and improve the authentication processing efficiency and network security of the slave devices of the all-optical network.

[0051] In an exemplary embodiment, before authenticating the slave device based on the authentication mode corresponding to the identity information of the slave device in step S201, the following steps may also be included:

[0052] Obtain identity information of the slave device; the identity information may include one or more of a device manufacturer, a device type, and an operator version of the slave device; and determine an authentication mode based on the identity information.

[0053] like Figure 1As shown, the slave devices accessing the network may have different device manufacturers, device types, and operator versions. In this embodiment, the all-optical master device may obtain the identity information of the slave device according to the authentication request. The identity information of the slave device obtained by the all-optical master device may include one or more of the device manufacturer, device type, and operator version of the slave device. Thus, the corresponding authentication mode may be determined in combination with one or more of the device manufacturer, device type, and operator version to adapt to the access requirements and security requirements of different slave devices, thereby improving the flexibility and compatibility of the device authentication processing system of the all-optical network.

[0054] In an exemplary embodiment, before sending the authentication identification of the slave device to the authentication collection and control platform in step S202, the following steps may also be included:

[0055] Obtain one or more of the organization unique identifier, serial number, region code and device type of the slave device; obtain the authentication identifier of the slave device according to one or more of the organization unique identifier, serial number, region code and device type.

[0056] The organizational unique identifier can be recorded as OUI, the serial number can be recorded as Serial Number, the region code can be recorded as Province Code, and the device type can be recorded as Device Type.

[0057] In this embodiment, the all-optical master device can obtain one or more of the organization's unique identifier, serial number, region code and device type of the slave device. The all-optical master device can generate an authentication identifier of the slave device according to unified coding rules and one or more of the organization's unique identifier, serial number, region code and device type, which is used for the authentication collection and control platform to perform legitimacy verification.

[0058] Further, in an exemplary embodiment, the authentication collection management and control platform can be used to determine whether the organization unique identifier in the authentication identification exists in the registration database; and / or, the authentication collection management and control platform can be used to confirm whether the serial number is unique; and / or, the authentication collection management and control platform can be used to verify whether the combination of the region code and the device type matches.

[0059] In this embodiment, the authentication identification may include one or more of the organization unique identifier, serial number, region code and device type of the slave device, so that the authentication collection control platform can verify one or more of the organization unique identifier, serial number, region code and device type of the slave device according to the authentication identification. Among them, the authentication collection control platform can determine whether the organization unique identifier in the authentication identification exists in the registration database, thereby obtaining the legitimacy verification result for the organization unique identifier, wherein the registration database can be used to record the organization unique identifiers of various network devices. Among them, the authentication collection control platform can confirm whether the serial number is unique, thereby obtaining the legitimacy verification result for the serial number. Among them, the authentication collection control platform can verify whether the combination of the region code and the device type matches, thereby obtaining the legitimacy verification result for the region code and the device type. Thus, the authentication collection control platform can complete the legitimacy verification of the authentication identification.

[0060] In an exemplary embodiment, performing corresponding service forwarding processing on the slave device according to the legitimacy check result in step S203 may include the following steps:

[0061] If the result of the legality check is passed, the north-south and east-west business forwarding channels of the slave device are opened; if the result of the legality check is not passed, the east-west business forwarding channel of the slave device is opened.

[0062] In this embodiment, if the result of the legitimacy check fed back by the authentication collection control platform is passed, the all-optical master device can determine that the slave device is a legal slave device, and the all-optical master device can open the north-south and east-west business forwarding channels of the slave device, thereby ensuring that the slave device can perform network communication normally. If the result of the legitimacy check fed back by the authentication collection control platform is not passed, the all-optical master device can determine that the slave device is an illegal slave device, and the all-optical master device can close the north-south business forwarding channel of the slave device, and retain the east-west business forwarding channel of the slave device to ensure the basic LAN communication capability of the slave device. In some embodiments, the all-optical master device can also start the authentication polling mechanism for the illegal slave device, so as to further monitor and process the illegal slave device. In this regard, in some embodiments, if the legitimacy status of the slave device changes, the all-optical master device can automatically update it to the device database, and the device database can be used to record relevant data of the slave device, such as legitimacy status data, etc., to maintain the consistency and accuracy of the system data.

[0063] Furthermore, in an exemplary embodiment, the authentication identifier may include the organization-unique identifier, serial number, region code and device type of the slave device; the authentication collection management and control platform is used to return a passed legitimacy verification result when the legitimacy verification of the organization-unique identifier, serial number, region code and device type are all passed; the authentication collection management and control platform is used to return a failed legitimacy verification result when the legitimacy verification of the organization-unique identifier, serial number, region code and device type are not all passed.

[0064] In this embodiment, the all-optical master device can form an authentication identifier according to the following unified coding rules: [OUI]-[Serial Number]-[Province Code]-[Device Type]. Among them, OUI represents the organizational unique identifier, Serial Number represents the serial number, Province Code represents the regional code, and Device Type represents the device type. Therefore, the authentication collection and control platform can perform a legitimacy check on the organizational unique identifier, serial number, regional code and device type. If the legitimacy check of the organizational unique identifier, serial number, regional code and device type are all passed, a passed legitimacy check result is returned to the all-optical master device. If the legitimacy check of one or more of the organizational unique identifier, serial number, regional code and device type fails, a failed legitimacy check result is returned to the all-optical master device.

[0065] In one embodiment, a device authentication processing system for all-optical networking is also provided. Figure 1 As shown, the system may include an all-optical main device and an authentication collection and control platform; wherein:

[0066] The all-optical master device can be used to respond to an authentication request of a slave device and authenticate the slave device based on an authentication mode corresponding to the identity information of the slave device.

[0067] The all-optical master device can also be used to send the authentication identifier of the slave device to the authentication collection and control platform if the authentication is passed.

[0068] The authentication collection and management platform can be used to verify the legitimacy of the authentication mark and feedback the legitimacy verification results to the all-optical main device.

[0069] The all-optical master device can also be used to perform corresponding service forwarding processing on the slave device according to the legitimacy verification result.

[0070] In this embodiment, the all-optical master device can perform authentication processing on the slave device connected to the all-optical network with the help of the authentication collection and control platform according to the device authentication processing method for all-optical networking described in any of the above embodiments.

[0071] As a specific example, when a slave device accesses the network, the slave device can send an authentication request to the all-optical master device, and the all-optical master device can obtain the identity information of the slave device, which may include the device manufacturer, device type, operator version, unique identifier (such as MAC address), model, etc. of the slave device. The all-optical master device can dynamically select the corresponding authentication mode according to the device type and operator version. These authentication modes may include multiple combinations to ensure that they can adapt to different security requirements and network environments. As an authentication example, Figure 3 As shown, during the authentication process, the all-optical master device negotiates with the slave device to automatically obtain the required attribute field information, such as device type, supported protocol version, etc. This process can be adaptively performed in combination with the device type and operator version to ensure the flexibility, compatibility, efficiency and accuracy of the authentication process.

[0072] After the link layer authentication is completed, the all-optical master device can integrate the link layer authentication status (which can be used to indicate the authentication result), authentication mode and authentication identification of the slave device to form a unified authentication information record to ensure the integrity and traceability of the information. Among them, the all-optical master device can generate the authentication identification of each slave device according to the predefined coding rules. Among them, the all-optical master device can combine the organizational unique identifier, serial number, regional code and device type of the slave device into an authentication identification, and report the authentication identification to the authentication collection and control platform to achieve standardized management of the authentication identification of the slave device to ensure uniqueness and identifiability.

[0073] The authentication collection control platform receives the authentication identifier sent by the all-optical master device and can compare the authentication identifier with the predefined authentication identifier list to verify its legitimacy. The verification may include: determining whether the organization unique identifier in the authentication identifier exists in the registration database, confirming whether the serial number is unique, and verifying whether the combination of the region code and the device type matches. The authentication collection control platform can feed back the legitimacy verification result to the all-optical master device so that the all-optical master device can decide on the subsequent processing steps.

[0074] The all-optical master device can perform different service forwarding processing on the slave device according to the legitimacy verification results fed back by the authentication collection and control platform. Among them, for the legal slave device, the all-optical master device can open the north-south and east-west service forwarding channels to ensure that the device can communicate normally on the network. For illegal slave devices, the all-optical master device can close the north-south service forwarding channel and retain the east-west service forwarding channel to ensure the basic LAN communication capability of the slave device. In this way, the security and flow control of the network can be ensured. At the same time, the all-optical master device can start the authentication polling mechanism to further monitor and process the illegal slave devices, so as to timely discover and deal with potential security risks and maintain the overall security of the network. Among them, the all-optical master device can automatically update the legitimacy status of the slave device to the device database when the legitimacy status of the slave device changes, so as to maintain the consistency and accuracy of the system data. If the illegal slave device meets the access conditions in the subsequent authentication process (such as passing the authentication of the corresponding authentication mode and the legitimacy verification of the authentication mark), it can be dynamically adjusted according to the new legitimacy verification result to allow it to access the network again.

[0075] The scheme of this embodiment can realize the intensive and standardized control of the authentication collection control platform and the all-optical master device over the slave devices of each access point. On the basis of the existing networking architecture and scheme, through the all-optical master device with multiple authentication modes, link layer authentication can be realized for various slave devices (different equipment manufacturers, equipment types and operator versions) based on the adaptation of the authentication method, thereby improving the flexibility and compatibility of the system, being able to adapt to different slave devices, and being able to initiate business layer authentication to the authentication collection control platform according to a unified authentication identifier, thereby reducing authentication time and resource consumption and improving operation and maintenance efficiency. At the same time, different business forwarding mechanisms can be made for the slave devices according to the legitimacy verification results, thereby ensuring that the slave devices that meet the requirements can access the network, effectively preventing security risks, and meeting the LAN communication needs of relevant users, thereby realizing efficient and standardized authentication of access slave devices and improving network security and management efficiency.

[0076] It should be understood that, although the various steps in the flowcharts involved in the above-mentioned embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above-mentioned embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0077] Based on the same inventive concept, the embodiment of the present application also provides an all-optical network device authentication processing device for implementing the above-mentioned all-optical network device authentication processing method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above-mentioned method, so the specific limitations in one or more all-optical network device authentication processing device embodiments provided below can refer to the limitations of the all-optical network device authentication processing method above, and will not be repeated here.

[0078] In an exemplary embodiment, Figure 4 As shown, a device authentication processing device for all-optical networking is provided, and the device 400 may include:

[0079] An authentication module 401, configured to respond to an authentication request from a slave device and authenticate the slave device based on an authentication mode corresponding to identity information of the slave device;

[0080] The sending module 402 is used to send the authentication identifier of the slave device to the authentication collection and control platform if the authentication is passed; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier;

[0081] The processing module 403 is used to perform corresponding service forwarding processing on the slave device according to the legitimacy verification result.

[0082] In one embodiment, the authentication module 401 is further used to obtain the identity information of the slave device; the identity information includes one or more of the device manufacturer, device type and operator version of the slave device; and the authentication mode is determined according to the identity information.

[0083] In one embodiment, the sending module 402 is also used to obtain one or more of the organization unique identifier, serial number, region code and device type of the slave device; and obtain the authentication identifier of the slave device based on one or more of the organization unique identifier, serial number, region code and device type.

[0084] In one embodiment, the authentication collection management and control platform is used to determine whether the organization unique identifier in the authentication identification exists in the registration database; and / or, the authentication collection management and control platform is used to confirm whether the serial number is unique; and / or, the authentication collection management and control platform is used to verify whether the combination of the region code and the device type matches.

[0085] In one embodiment, the processing module 403 is used to open the north-south and east-west business forwarding channels of the slave device if the result of the legitimacy check is passed; if the result of the legitimacy check is failed, open the east-west business forwarding channel of the slave device.

[0086] In one embodiment, the authentication identifier includes the organization-unique identifier, serial number, region code and device type of the slave device; the authentication collection management and control platform is used to return the passed legitimacy verification result if the legitimacy verification of the organization-unique identifier, serial number, region code and device type are all passed; the authentication collection management and control platform is used to return the failed legitimacy verification result if the legitimacy verification of the organization-unique identifier, serial number, region code and device type are not all passed.

[0087] Each module in the above-mentioned all-optical networking device authentication processing device can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the network device in the form of hardware, or can be stored in the memory in the network device in the form of software, so that the processor can call and execute the operations corresponding to each of the above modules.

[0088] In an exemplary embodiment, a network device is provided. The network device may be an all-optical master device, and its internal structure diagram may be as shown in FIG. Figure 5As shown. The network device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. The processor of the network device is used to provide computing and control capabilities. The memory of the network device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the network device is used to exchange information between the processor and the external device. The communication interface of the network device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be realized through WIFI, a mobile cellular network, near field communication (Near Field Communication, NFC) or other technologies. When the computer program is executed by the processor, a device authentication processing method for all-optical networking is realized. The display unit of the network device can be used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the network device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the network device shell, or an external keyboard, touchpad or mouse.

[0089] Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a partial structure related to the scheme of the present application, and does not constitute a limitation on the network device to which the scheme of the present application is applied. The specific network device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0090] In one embodiment, a network device is further provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the steps in the above-mentioned method embodiments when executing the computer program.

[0091] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the steps in the above-mentioned method embodiments are implemented.

[0092] In one embodiment, a computer program product is provided, including a computer program, which implements the steps in the above method embodiments when executed by a processor.

[0093] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0094] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0095] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0096] The above-described embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A device authentication processing method for all-optical networking, characterized in that: The method comprises: In response to an authentication request from a slave device, authenticating the slave device based on an authentication mode corresponding to identity information of the slave device; If the authentication is successful, the authentication identifier of the slave device is sent to the authentication collection and control platform; the authentication collection and control platform is used to verify the legitimacy of the authentication identifier; According to the result of the legality check, corresponding service forwarding processing is performed on the slave device.

2. The method according to claim 1, characterized in that Before authenticating the slave device based on the authentication mode corresponding to the identity information of the slave device, the method further includes: Acquire the identity information of the slave device; the identity information includes one or more of the device manufacturer, device type and operator version of the slave device; The authentication mode is determined according to the identity information.

3. The method according to claim 1, characterized in that Before sending the authentication identifier of the slave device to the authentication collection management and control platform, the method further includes: Obtaining one or more of an organizational unique identifier, a serial number, a region code, and a device type of the slave device; The authentication identification of the slave device is obtained according to one or more of the organization unique identifier, the serial number, the region code and the device type.

4. The method according to claim 3, characterized in that The authentication collection control platform is used to determine whether the organization unique identifier in the authentication mark exists in the registration database; and / or, the authentication collection control platform is used to confirm whether the serial number is unique; And / or, the authentication collection management and control platform is used to verify whether the combination of the region code and the device type matches.

5. The method according to any one of claims 1 to 4, characterized in that The performing corresponding service forwarding processing on the slave device according to the result of the legitimacy verification includes: If the result of the legality check is passed, the north-south and east-west business forwarding channels of the slave device are opened; If the result of the legality check is failure, the east-west business forwarding channel of the slave device is opened.

6. The method according to claim 5, characterized in that The authentication identifier includes the organization unique identifier, serial number, region code and device type of the slave device; the authentication collection management and control platform is used to return the passed legitimacy verification result when the legitimacy verification of the organization unique identifier, serial number, region code and device type is passed; The authentication collection management and control platform is used to return a failed legitimacy verification result when the legitimacy verification of the organization's unique identifier, serial number, region code and device type fails.

7. A device authentication processing device for all-optical networking, characterized in that: The device comprises: an authentication module, configured to respond to an authentication request from a slave device and authenticate the slave device based on an authentication mode corresponding to the identity information of the slave device; A sending module, used for sending the authentication identification of the slave device to the authentication collection and control platform if the authentication is passed; the authentication collection and control platform is used to verify the legitimacy of the authentication identification; The processing module is used to perform corresponding business forwarding processing on the slave device according to the legitimacy verification result.

8. An all-optical networking device authentication processing system, characterized in that: The system includes: an all-optical main device and an authentication collection and control platform; wherein, The all-optical master device is used to respond to an authentication request from a slave device and authenticate the slave device based on an authentication mode corresponding to the identity information of the slave device; The all-optical master device is further used to send the authentication identifier of the slave device to the authentication collection and control platform if the authentication is passed; The authentication collection and control platform is used to verify the legitimacy of the authentication identifier and feed back the legitimacy verification result to the all-optical main device; The all-optical master device is further used to perform corresponding service forwarding processing on the slave device according to the legitimacy verification result.

9. A network device, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images