Optical network unit staged anti-theft method and device and computer equipment

Abstract

The invention provides an optical network unit staged anti-theft method and device and computer equipment, relates to the technical field of optical network unit anti-theft, and solves the problems that the existing optical network unit anti-theft technology is single in anti-theft mechanism, lagged in state judgment and low in operation and maintenance efficiency. The method comprises the following steps: periodically receiving a communication state from a server by utilizing an optical network unit; when the communication state is a failure state, starting a time lock for timing to obtain an accumulated time length; and implementing a staged anti-theft strategy according to the accumulated duration. According to the invention, firstly, the optical network unit is utilized to periodically detect the communication state with the server, and then the communication abnormal duration is accumulated through the time lock and the staged anti-theft strategy is executed according to the time, so that multi-strategy anti-theft, rapid state judgment and efficient operation and maintenance of the optical network unit are realized.

Description

Technical Field

[0001] This application relates to the field of optical network unit anti-theft technology, and in particular to a phased anti-theft method, device and computer equipment for optical network units. Background Technology

[0002] With the widespread application of fiber optic communication, Optical Network Units (ONUs), as user-end devices in optical access networks, have been deployed extensively in homes, enterprises, and other scenarios. Due to their dispersed installation locations and ease of access, unauthorized users may steal ONUs by disassembling the equipment, modifying configurations, or replacing firmware, leading to the loss of operator equipment assets, abuse of network resources, and even security risks such as unauthorized access to the core network or data leaks.

[0003] Existing ONU anti-theft and device control technologies still have significant shortcomings: On the one hand, most solutions rely solely on static methods such as binding serial numbers and restricting registration to achieve basic anti-theft measures, resulting in a single anti-theft mechanism and a lack of dynamic control capabilities after the device leaves the authorized network; on the other hand, existing methods generally do not incorporate real-time status feedback, making it difficult to detect communication interruptions between the ONU and the auto-configuration server in a timely manner, thus failing to take rapid restrictive measures after the device becomes disconnected or stolen, leading to a lag in status assessment; furthermore, the device recovery process usually requires complex hardware operations, such as chip replacement, resulting in low maintenance efficiency. Summary of the Invention

[0004] This invention proposes a phased anti-theft method, device, and computer equipment for optical network units, aiming to solve the problems of existing anti-theft technologies for optical network units, such as simple anti-theft mechanisms, delayed status judgment, and low operation and maintenance efficiency.

[0005] To achieve the above-mentioned technical effects, the technical solution of the present invention is as follows: A phased anti-theft method for optical network units includes: S1. Periodically receive communication status from the server using the optical network unit; S2. When the communication status is a failure state, a time lock is started to calculate the cumulative duration; S3. Implement a phased anti-theft strategy based on the cumulative duration.

[0006] Preferably, a phased anti-theft strategy is implemented based on the accumulated duration, including: implementing a first-stage anti-theft strategy when the accumulated duration is less than or equal to a first threshold; implementing a second-stage anti-theft strategy when the accumulated duration is greater than the first threshold but less than or equal to a second threshold; and implementing a third-stage anti-theft strategy when the accumulated duration is greater than a third threshold.

[0007] Preferably, the first-stage anti-theft strategy is to monitor the communication status, the second-stage anti-theft strategy is to perform network configuration changes on the optical network unit, and the third-stage anti-theft strategy is to implement a communication blocking scheme and a supplier recovery scheme for the optical network unit.

[0008] Preferably, the first-stage anti-theft strategy involves monitoring communication status, including: If the communication status changes to a successful state, the system will use the storage medium to store the accumulated duration, reset the time lock to start timing again, and restore the parameters of the optical network unit to the preset default value. If not, the system will monitor the accumulated duration until the accumulated duration exceeds the first threshold, and then implement the second stage of the anti-theft strategy.

[0009] Preferably, the second-stage anti-theft strategy involves performing network configuration changes on the optical network unit, including: S321. Change the interface address of the optical network unit, set the super administrator password of the optical network unit to a random password, turn off the WiFi function of the optical network unit, and periodically receive communication status from the server using the optical network unit. S322. Determine whether the communication status has changed to a successful state. If yes, restore the interface address of the optical network unit, keep the super administrator password of the optical network unit as a random password, and enable the WiFi function of the optical network unit. If no, monitor the cumulative duration until the cumulative duration exceeds the second threshold, and implement the third-stage anti-theft strategy.

[0010] Preferably, the communication blocking scheme includes: S331. Shut down the interface of the optical network unit; S332. After the interface is closed, the accumulated duration is stored using a storage medium.

[0011] Preferably, the interface includes a LAN port and an uplink PON port.

[0012] Preferably, the supplier recovery plan includes: S333. Optical network unit suppliers reclaim Phase III optical network units; S334. Calculate the super administrator password of the optical network unit in the third stage; S335. Input the super administrator password of the third-stage optical network unit into the third-stage optical network unit to obtain the optical network unit with the anti-theft status deactivated; S336. Import recovery firmware into the optical network unit that has been deactivated from the anti-theft state to obtain a recovered optical network unit.

[0013] The present invention also provides a device for a phased anti-theft method for optical network units, comprising: A communication status receiving unit is used to periodically receive communication status from the server using an optical network unit; A failure status processing unit is used to start a time lock to calculate the cumulative duration when the communication status is a failure status. The phased anti-theft execution unit is used to implement a phased anti-theft strategy based on the accumulated duration.

[0014] The present invention also provides a computer device, comprising: a processor, a memory, a communication interface, and a communication bus, wherein the processor, the memory, and the communication interface communicate with each other through the communication bus; The memory is used to store at least one executable instruction that causes the processor to perform the operation of the phased anti-theft method for the optical network unit.

[0015] Compared with the prior art, the beneficial effects of the technical solution of the present invention are: This invention proposes a phased anti-theft method, device, and computer equipment for optical network units. First, the optical network unit periodically detects the communication status with the server. Then, a time lock is used to accumulate the duration of communication anomalies and execute a phased anti-theft strategy accordingly. This achieves multi-strategy anti-theft, rapid status judgment, and efficient operation and maintenance of the optical network unit. Attached Figure Description

[0016] Figure 1 This is a flowchart of the phased anti-theft method for optical network units in an embodiment of the present invention; Figure 2 This is a flowchart illustrating the phased anti-theft method for optical network units in an embodiment of the present invention. Figure 3 This is a structural block diagram of the phased anti-theft device for optical network units in an embodiment of the present invention; Figure 4 This is an internal structural diagram of a computer device in an embodiment of the present invention.

[0017] 41. Processor; 42. Memory; 43. Communication interface; 44. Communication bus; 45. Executable instructions. Detailed Implementation

[0018] The accompanying drawings are for illustrative purposes only and should not be construed as limiting the scope of this patent. To better illustrate this embodiment, some parts of the accompanying drawings may be omitted, enlarged, or reduced, and do not represent actual dimensions. The descriptions of directions such as "up" and "down" are not intended to limit this patent. It is understandable to those skilled in the art that some well-known details may be omitted from the accompanying drawings; To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments.

[0019] Example 1 This embodiment provides a phased anti-theft method for optical network units, such as... Figure 1 and Figure 2 As shown, the method includes: S1. Periodically receive communication status from the server using an Optical Network Unit (ONU); In S1, the ONU powers on normally and registers with the OLT, and the service is activated normally. At this time, the ONU normally enables the communication functions of the LAN port and PON port. If the user does not manually turn it off, the WiFi function is enabled by default, and the user can use network services such as broadband Internet access and IPTV normally. The ONU sends an Inform message to the TR069 server every 5 minutes to continuously monitor the Inform status.

[0020] S2. When the communication status is a failure state, a time lock is started to calculate the cumulative duration; In step S2, if the ONU TR069 Inform status is "Fail", Time Lock starts timing. After Time Lock starts timing, if the TR069 Inform status is "Success" in a subsequent iteration, Time Lock timing is reset to 0, and the timing data in Flash is updated. Furthermore, device parameters such as LAN port IP, WiFi parameters, and WAN configuration are restored to their default values, and the process returns to step S1. S3. Implement a phased anti-theft strategy based on the cumulative duration.

[0021] In S3, the first-stage anti-theft strategy is to monitor the communication status, the second-stage anti-theft strategy is to perform network configuration changes on the optical network unit, and the third-stage anti-theft strategy is to implement the communication blocking scheme and the supplier recovery scheme for the optical network unit.

[0022] The first phase of the anti-theft strategy includes: the ONU checks the cumulative duration of Time Lock every minute. When the duration exceeds 7 days and 1 minute, i.e. 7×24×60 +1 = 10081 minutes, it enters the second phase.

[0023] The second-stage anti-theft strategy includes: The ONU changes its LAN port IP address by calling a MAC address XOR algorithm to generate a random IP address, such as 192.168.156.89 based on 00:11:22:33:44:55, overwriting the original default IP; based on the MAC address XOR result, a random 8-16 digit super administrator password is generated through secondary processing using a built-in algorithm, containing uppercase and lowercase letters, numbers, and special characters, while ordinary user passwords are not processed; the WiFi function is disabled by sending a command to disable the ONU's WLAN module, turning off all WiFi frequency bands, and hiding the WiFi configuration option in the web interface, which can only be temporarily enabled via serial port commands for testing; the ONU writes the IP change result, password generation time, and WiFi off status to the device log, but does not record the password in plaintext; the log can be exported via serial port; the ONU still sends an Inform message every 5 minutes. If a message is successfully sent (status = Success), the Time Lock is reset to 0, step S2 is returned, and the LAN port is restored. The IP address is used to re-enable the ONU's WLAN module. The super administrator password remains a random value, which must be obtained by decrypting the device's MAC address using a MAC address XOR calculation tool. The log records "Phase 2: Inform success, Time Lock reset, config restored (password remains random)". The ONU checks the accumulated Time Lock duration every minute. When the duration exceeds 14 days and 1 minute (14 × 24 × 60 + 1 = 20161 minutes), the ONU enters a blocking state, triggering the third-stage operation.

[0024] The third-stage anti-theft strategy includes: disabling all LAN ports on the ONU, preventing the LAN ports from receiving and sending data, and making it impossible to obtain an IP address even if a terminal device is connected; shutting down the uplink PON port on the ONU, stopping the transmission of optical signals, and displaying the ONU as "offline" on the OLT side, making it impossible to re-register; recording "Phase 3: Time Lock>14 days, LAN / PONport disabled" in the ONU log, and writing the blocking time and device MAC address to Flash. The ONU in this state is completely unusable and must be returned to the ONU supplier for recovery. The ONU supplier reclaims the blocked ONU, connects the reserved 4-pin port on the device's PCBA to a computer via a serial cable; calculates the current ONU's super administrator password using a MAC address XOR calculation tool and inputs it into the blocked ONU to unlock it; after unlocking, runs the ONU serial port upgrade script, imports the recovery firmware, the script automatically executes the upgrade process, and the ONU automatically restarts after the upgrade, restoring the default configuration and resetting the Time Lock.

[0025] In this embodiment, some technical terms are explained as follows: OLT: Optical Line Terminal, is a central office device in a passive optical network.

[0026] TR069 Inform Status: The status of the ONU sending an Inform message to the auto-configuration server via the TR069 protocol. It is divided into "Success", which means the communication is normal, and "Fail", which means the communication failed and the ONU cannot connect to the specified auto-configuration server. Time Lock: The time lock is a built-in timing module in the ONU used to record the cumulative duration when the TR069 Inform status is "Fail". The timing data is stored in Flash and is not affected by device restart or factory reset. Tiered anti-theft stages: Based on the cumulative duration of Time Lock, the anti-theft control is divided into three stages, with different security strategies implemented in each stage; MAC address XOR calculation: The tool performs an XOR operation on the ONU's MAC address to generate an encrypted device identifier, which is used for random password generation and device authentication. The calculation process is kept confidential, and only the result is output.

[0027] This embodiment constructs an innovative hierarchical anti-theft control mechanism: centered on Time Lock timing, it builds a three-tiered progressive anti-theft strategy based on the TR069Inform status. From the first stage of normal business monitoring, to the second stage of basic restrictions, and then to the third stage of complete blocking, it achieves full lifecycle management of stolen ONU devices, accurately and flexibly responding to different risk levels. This dynamic hierarchical strategy provides unprecedented multi-layered protection for ONU anti-theft. Simultaneously, it configures a fixed and hard-coded security policy: core configuration parameters such as the TR069 server and user account passwords are hard-coded, prohibiting users from manually modifying them, eliminating the risk of illegal tampering from the source, ensuring the stability and continuity of the device's initial security configuration, and laying a solid foundation for the anti-theft mechanism. Furthermore, it employs refined Time Lock timing management: precisely planning Time Lock activation rules, with strict timing activation conditions for both first-time registration and non-first-time registration scenarios. Timing data is stored in Flash, and is not lost during device restarts or factory resets, ensuring timing continuity and accuracy, providing a reliable time basis for the hierarchical anti-theft strategy.

[0028] Example 2 like Figure 3 As shown, this embodiment provides a phased anti-theft device for an optical network unit, including: A communication status receiving unit is used to periodically receive communication status from the server using an optical network unit; A failure status processing unit is used to start a time lock to calculate the cumulative duration when the communication status is a failure status. The phased anti-theft execution unit is used to implement a phased anti-theft strategy based on the accumulated duration.

[0029] This embodiment provides a phased anti-theft device for optical network units. The device first uses the optical network unit to periodically detect the communication status with the server, and then accumulates the communication abnormality duration through time lock and executes a phased anti-theft strategy accordingly, realizing multi-strategy anti-theft, rapid status judgment and efficient operation and maintenance of optical network units.

[0030] Example 3 This embodiment further illustrates the phased anti-theft method for optical network units through different scenarios.

[0031] Normal business scenario: (1) The network provider deploys the ONU normally and registers it with the OLT. The service is activated normally. At this time, the ONU normally opens the LAN port and PON port communication function. If the user does not manually turn it off, the WiFi function will be enabled by default. The user can use network services normally, such as broadband Internet access and IPTV. (2) The ONU sends an Inform message to the TR069 server every 5 minutes to continuously monitor the Inform status; (3) If the ONU TR069 Inform status is “Success”, then the ONU can be used continuously.

[0032] Theft scenario: (1) After a certain ONU device was illegally disassembled, it was connected to the TR069 server of a non-designated network. The TR069 Inform status remained "Fail" and the Time Lock accumulated to 7 days and 1 minute. (2) When the ONU enters the second stage, the ONU automatically changes the LAN port IP to 192.168.XX.XX based on MAC. The MAC XOR operation makes the super administrator password A8#kL2*pQ, and at the same time, the WiFi is turned off and the WiFi configuration option is hidden in the Web interface. (3) Unauthorized users cannot log in to the management interface using the default IP and password, nor can they use the wireless connection, and the device cannot be used normally; (4) The ONU checks the cumulative duration of Time Lock every minute. When the duration exceeds 14 days and 1 minute, i.e., 14×24×60 +1 = 20161 minutes, the ONU enters the blocking state and triggers the third stage operation. (5) During this stage, the ONU disables all LAN ports, prohibiting the LAN ports from receiving and sending data. Even if a terminal device is connected, it will not be able to obtain an IP address. (6) During this stage, the ONU closes the uplink PON port and stops sending optical signals. The OLT side displays that the ONU is "offline" and cannot be re-registered. The device can only be returned to the ONU supplier for recovery.

[0033] Restore the scene: (1) The ONU supplier reclaims the ONU in the blocked state and connects the 4-pin port reserved on the ONU PCBA to the computer via a USB serial cable. (2) Run the ONU serial port upgrade script, import the recovery firmware, the script will automatically execute the upgrade process, and the ONU will automatically restart and restore the default configuration after the upgrade is completed.

[0034] This embodiment provides a phased anti-theft method for optical network units. The method first uses the optical network unit to periodically detect the communication status with the server, and then accumulates the communication abnormality duration through time lock and executes a phased anti-theft strategy accordingly, realizing multi-strategy anti-theft, rapid status judgment and efficient operation and maintenance of optical network units.

[0035] Example 4 like Figure 4 As shown, this embodiment also proposes a computer device, such as... Figure 4 As shown, it includes: processor 41, memory 42, communication interface 43 and communication bus 44, wherein the processor 41, the memory 42 and the communication interface 43 communicate with each other through the communication bus 44; The processor 41, memory 42, and communication interface 43 communicate with each other via a communication bus 44. The communication interface 43 is used to communicate with other network elements, such as clients or other servers. The processor 41 executes executable instructions 45, specifically performing the operations of the fusion reactor base area turbulence behavior prediction method. Specifically, the executable instructions 45 may include program code. The processor 41 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present invention. The computer device includes one or more processors, which may be of the same type, such as one or more CPUs; or they may be of different types, such as one or more CPUs and one or more ASICs.

[0036] Memory 42 is used to store executable instructions 45. Memory 42 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk storage device.

[0037] Executable instruction 45 can be invoked by processor 41 to cause the computer device to perform the following operations: S1. Periodically receive communication status from the server using the optical network unit; S2. When the communication status is a failure state, a time lock is started to calculate the cumulative duration; S3. Implement a phased anti-theft strategy based on the cumulative duration.

[0038] This embodiment provides a computer device that first uses an optical network unit to periodically detect the communication status with a server, then accumulates the duration of communication anomalies through a time lock and executes a phased anti-theft strategy accordingly, thereby realizing multi-strategy anti-theft, rapid status judgment, and efficient operation and maintenance of the optical network unit.

[0039] Obviously, the above embodiments of the present invention are merely examples for clearly illustrating the present invention, and are not intended to limit the implementation of the present invention. For those skilled in the art, other variations or modifications can be made based on the above description. It is impossible to exhaustively list all the implementation methods here. All obvious variations or modifications derived from the technical solutions of the present invention are still within the protection scope of the present invention.

Claims

1. A phased anti-theft method for optical network units, characterized in that, include: S1. Periodically receive communication status from the server using the optical network unit; S2. When the communication status is a failure state, a time lock is started to calculate the cumulative duration; S3. Implement a phased anti-theft strategy based on the cumulative duration.

2. The phased anti-theft method for optical network units according to claim 1, characterized in that, Based on the accumulated duration, a phased anti-theft strategy is implemented, including: when the accumulated duration is less than or equal to a first threshold, a first-stage anti-theft strategy is implemented; when the accumulated duration is greater than the first threshold but less than or equal to a second threshold, a second-stage anti-theft strategy is implemented; and when the accumulated duration is greater than a third threshold, a third-stage anti-theft strategy is implemented.

3. The phased anti-theft method for optical network units according to claim 2, characterized in that, The first-stage anti-theft strategy is to monitor the communication status; the second-stage anti-theft strategy is to perform network configuration changes on the optical network unit; and the third-stage anti-theft strategy is to implement a communication blocking scheme and a supplier recovery scheme for the optical network unit.

4. The phased anti-theft method for optical network units according to claim 3, characterized in that, The first phase of the anti-theft strategy involves monitoring communication status, including: If the communication status changes to a successful state, the system will use the storage medium to store the accumulated duration, reset the time lock to start timing again, and restore the parameters of the optical network unit to the preset default value. If not, the system will monitor the accumulated duration until the accumulated duration exceeds the first threshold, and then implement the second stage of the anti-theft strategy.

5. The phased anti-theft method for optical network units according to claim 3, characterized in that, The second-stage anti-theft strategy involves performing network configuration changes on the optical network unit, including: S321. Change the interface address of the optical network unit, set the super administrator password of the optical network unit to a random password, turn off the WiFi function of the optical network unit, and periodically receive communication status from the server using the optical network unit. S322. Determine whether the communication status has changed to a successful state. If yes, restore the interface address of the optical network unit, keep the super administrator password of the optical network unit as a random password, and enable the WiFi function of the optical network unit. If no, monitor the cumulative duration until the cumulative duration exceeds the second threshold, and implement the third-stage anti-theft strategy.

6. The phased anti-theft method for optical network units according to claim 3, characterized in that, The communication blocking scheme includes: S331. Shut down the interface of the optical network unit; S332. After the interface is closed, the accumulated duration is stored using a storage medium.

7. The phased anti-theft method for optical network units according to claim 6, characterized in that, The interface includes a LAN port and an uplink PON port.

8. The phased anti-theft method for optical network units according to claim 3, characterized in that, The supplier recovery plan includes: S333. Optical network unit suppliers reclaim Phase III optical network units; S334. Calculate the super administrator password of the optical network unit in the third stage; S335. Input the super administrator password of the third-stage optical network unit into the third-stage optical network unit to obtain the optical network unit with the anti-theft status deactivated; S336. Import recovery firmware into the optical network unit that has been deactivated from the anti-theft state to obtain a recovered optical network unit.

9. A phased anti-theft method device for optical network units, characterized in that, include: A communication status receiving unit is used to periodically receive communication status from the server using an optical network unit; A failure status processing unit is used to start a time lock to calculate the cumulative duration when the communication status is a failure status. The phased anti-theft execution unit is used to implement a phased anti-theft strategy based on the accumulated duration.

10. A computer device, characterized in that, include: The processor, memory, communication interface, and communication bus are provided, wherein the processor, memory, and communication interface communicate with each other via the communication bus. The memory is used to store at least one executable instruction that causes the processor to perform the operation of the phased anti-theft method for optical network units as described in any one of claims 1-8.

Images