A low-cost cellular signal regeneration system and method based on an optical network terminal
By integrating cellular baseband capabilities into optical network terminals, and utilizing PCIe direct connection, unified power supply and heat dissipation, network latency-driven scheduling, and dual certificate authentication, the problem of indoor signal blind spots is solved, achieving low-cost, plug-and-play cellular signal enhancement, improving call quality and protecting user privacy.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- SHENZHEN TONGKANG CHUANGZHI TECH CO LTD
- Filing Date
- 2026-01-22
- Publication Date
- 2026-05-29
AI Technical Summary
Existing technologies cannot effectively solve the problem of indoor signal blind spots. Existing solutions are costly, complex to install, or functionally isolated, failing to achieve integrated innovation at the system level.
By deeply integrating cellular baseband capabilities into the optical network terminal, and through PCIe direct connection, unified power supply and heat dissipation, network latency-driven scheduling and dual certificate authentication, combined with a cloud collaborative service platform, cellular signal regeneration is achieved.
It achieves low-cost, plug-and-play, pay-as-you-go indoor cellular signal enhancement, improving call quality, protecting user privacy, and reducing hardware costs.
Smart Images

Figure CN122120965A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of communication network convergence technology, specifically to a low-cost cellular signal regeneration system and method based on an optical network terminal. Background Technology
[0002] With the deepening of mobile communication coverage, indoor signal blind spots in homes and offices (such as basements and inner rooms) have become a core pain point affecting user experience. Although users have high-speed broadband, mobile phone voice calls and SMS services are frequently interrupted, and important calls are missed.
[0003] Existing solutions all have significant drawbacks: 1. Outdoor signal amplifiers (repeaters): These rely on weak macro base station signals outdoors, are ineffective in complete dead zones, and are complex to install, requiring professional construction. 2. Traditional home base stations (Femto): These are independent devices, expensive (usually over a thousand yuan), require separate configuration and broadband connection, have high deployment barriers, and are difficult to popularize. 3. USB interface cellular network cards: As peripherals, their performance is limited by the USB bus, and they are functionally isolated from the router, unable to perform system-level resource collaboration, resulting in a fragmented user experience.
[0004] The market urgently needs an indoor signal enhancement solution that can be remotely activated with a single click by operators, is plug-and-play for users, and is extremely low-cost. However, existing technologies are either too expensive, functionally isolated, or unable to achieve zero-configuration activation. The fundamental reason for this is the failure to achieve integrated innovation at the system level, encompassing hardware architecture, resource scheduling, and business models. Therefore, there is a need to provide a low-cost cellular signal regeneration system and method based on optical network terminals, aiming to solve the aforementioned problems. Summary of the Invention
[0005] To address the shortcomings of existing technologies, the present invention aims to provide a system architecture that deeply integrates cellular baseband capabilities into the optical network terminal via a pluggable daughter card, along with a corresponding dynamic resource collaborative scheduling algorithm, a dual-certificate-based secure access mechanism, and a carrier-based package activation method.
[0006] This invention is implemented as follows: a low-cost cellular signal regeneration system based on an optical network terminal, the system comprising: Optical network terminal motherboard and system-on-a-chip; An expansion slot located on the motherboard of an optical network terminal; A cellular function daughter card that is plugged into the expansion slot and connected to the system-on-a-chip via a PCIe channel; The cellular function daughter card does not include an independent power management chip, an independent main control processor, or an independent heat dissipation structure. Its peak power consumption does not exceed 2.5W. The power supply and heat dissipation of the cellular function daughter card are provided and processed uniformly by the optical network terminal. Furthermore, a grounding isolation strip with a width of not less than 3mm and a grounding via array with a spacing of not more than 0.8mm are provided between the cellular function daughter card and the Wi-Fi module of the optical network terminal.
[0007] As a further aspect of the present invention: a network and baseband resource collaborative scheduler runs on the system-on-a-chip, the scheduler comprising: The delay monitoring module is used to periodically collect the round-trip time (RTT) of wide area network ports; The threshold judgment module is used to switch the system to congestion mode when the smoothed RTT is greater than a first preset threshold. The baseband task fragmentation module is used to split the baseband data processing request into multiple task units of no more than 128KB in the congestion mode. CPU core migration module, used to migrate the baseband processing thread from CPU0 to CPU1 in the congestion mode; A priority dynamic adjustment module is used to reduce the scheduling priority of the baseband processing thread in the congestion mode.
[0008] As a further aspect of the present invention: the delay monitoring module uses an exponentially weighted moving average algorithm with a smoothing factor α of 0.3 to smooth the RTT; the first preset threshold is 50ms; the scheduler also includes a recovery module, which is used to restore the baseband task processing parameters to normal mode in an exponential rollback manner after the smoothed RTT has been below 40ms for 1 second.
[0009] As a further aspect of the present invention: the system also includes a cloud collaborative service platform and a user terminal application, and the system adopts a dual-certificate dynamic authentication mechanism, including: Long-term equipment certificates in pre-installed optical network terminal equipment; A one-time session certificate issued by the cloud collaboration service platform for each remote access session; The optical network terminal equipment and the user terminal application establish an end-to-end WireGuard encrypted tunnel based on the one-time session certificate.
[0010] As a further aspect of the present invention: the one-time session certificate is generated based on the Ed25519 algorithm and has a validity period of no more than 5 minutes; the cloud collaborative service platform is only responsible for device certificate management, function activation command processing and session certificate issuance, and does not forward any user voice or data service traffic.
[0011] Another object of the present invention is to provide a low-cost cellular signal regeneration method based on an optical network terminal, the method comprising the following steps: The cloud collaborative service platform receives function activation instructions from the operator's backend and remotely activates the cellular signal regeneration function of the specified optical network terminal. The network and baseband resource co-scheduler in the optical network terminal dynamically adjusts the baseband task processing strategy based on the round-trip delay of the wide area network port in order to co-process broadband data forwarding and cellular signal regeneration services. The high accessibility assurance module monitors the health status of equipment and executes early warning or degradation strategies. When a user terminal application initiates remote access, the cloud collaborative service platform issues a one-time session certificate, and the optical network terminal and the user terminal application establish an end-to-end encrypted tunnel based on the certificate.
[0012] As a further aspect of the present invention: dynamically adjusting the baseband task processing strategy specifically includes: When the smoothed WAN port round-trip latency exceeds 50ms, the baseband data processing task is split into segments of no more than 128KB, the baseband processing thread is migrated to CPU1, and its scheduling priority is reduced. When the smoothing latency remains below 40ms for 1 second, gradually restore task granularity, CPU core binding, and scheduling priority.
[0013] As a further aspect of the present invention: the step of monitoring the health status of the device and executing early warning or degradation strategies through the high accessibility assurance module specifically includes: Heartbeats are sent to the cloud platform via a broadband link at a preset first interval; Lightweight reports containing device RF temperature, power supply voltage, and storage health status are transmitted via cellular link at a preset second interval. It makes predictive judgments based on multiple health risk factors, and triggers an alert or executes a graceful degradation process when any factor exceeds a preset threshold.
[0014] As a further aspect of the present invention: the first interval is 30 seconds, and the second interval is 24 hours; the graceful degradation process includes: stopping accepting new write requests, synchronizing cached data to the storage medium, and remounting the file system in read-only mode.
[0015] As a further aspect of the present invention: the one-time session certificate is issued by the cloud platform after verifying the user's identity and package permissions. The end-to-end encrypted tunnel established based on the certificate automatically expires after the session expires, and all business data traffic does not pass through the cloud platform.
[0016] Compared with the prior art, the beneficial effects of the present invention are: Through a unique end-to-end technical architecture of "unified power domain + unified heat dissipation domain + PCIe direct connection + network latency-driven scheduling + dual certificate authentication," the redundant design of independent modules is eliminated, allowing cellular signal regeneration capabilities to be mounted as plug-ins, significantly reducing hardware costs. Using a closed-loop scheduling algorithm based on WAN latency feedback, VoLTE call latency jitter can be reduced under typical high-bandwidth home traffic models, improving call quality and user experience. Through unified authorization control of device function licenses via the cloud platform, this invention transforms indoor cellular coverage from a one-time hardware sale to a monthly-paid value-added service, realizing a "remote one-click activation, pay-as-you-go" packaged service model. Employing a dual-certificate dynamic authentication mechanism of "long-term device certificate + short-term session certificate," combined with an end-to-end WireGuard encrypted tunnel, the cloud platform only handles signaling and certificate distribution without accessing any business data, meeting operators' requirements for security and control while maximizing user privacy. Attached Figure Description
[0017] Figure 1 This is a schematic diagram of the overall architecture and data interaction of an embodiment of the present invention.
[0018] Figure 2 This provides a sequence diagram for secure access based on dual certificate authentication in this embodiment of the invention.
[0019] Figure 3 This is a flowchart illustrating the workflow of the network and baseband resource collaborative scheduler in this embodiment of the invention.
[0020] Figure 4 This is a timing diagram of the graceful degradation strategy in an embodiment of the present invention. Detailed Implementation
[0021] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.
[0022] The specific implementation of the present invention will be described in detail below with reference to specific embodiments.
[0023] like Figure 1As shown, this embodiment of the invention provides a low-cost cellular signal regeneration system based on an optical network terminal. The system includes: an optical network terminal motherboard and a system-on-a-chip (SoC), an expansion slot (such as an M.2 Key-B interface) on the optical network terminal motherboard, and a cellular function daughter card plugged into the expansion slot and connected to the SoC via a PCIe channel. The cellular function daughter card does not include an independent power management chip, an independent main control processor, or an independent heat dissipation structure. Its peak power consumption does not exceed 2.5W, and its board size is 30mm × 22mm. The power supply and heat dissipation of the cellular function daughter card are uniformly provided and handled by the optical network terminal. Furthermore, a grounding isolation strip with a width of not less than 3mm and a grounding via array with a spacing of not more than 0.8mm are provided between the cellular function daughter card and the Wi-Fi module of the optical network terminal. The grounding via array is used for strong isolation to suppress radio frequency interference. In this embodiment of the invention, at the hardware level, the optical network terminal (ONT) is directly connected to the cellular function daughter card via a PCIe bus; at the software level, core services such as a resource scheduler run on the ONT SoC. The data stream includes: signal coverage of the mobile phone generated by the cellular sub-card; communication between the ONT and the cloud platform and the operator's core network via the Internet; and the establishment of an end-to-end encrypted data tunnel between the user's APP and the ONT with the assistance of the cloud platform.
[0024] like Figure 3As shown in this embodiment of the invention, the cellular function daughter card only includes an RF front-end, a baseband chip, and an eSIM security unit. The system-on-a-chip runs a network and baseband resource co-scheduler, which includes: a latency monitoring module for periodically (with a period of 100ms) collecting the round-trip time (RTT) of the WAN port; a threshold judgment module for switching the system to congestion mode when the smoothed RTT exceeds a first preset threshold; a baseband task fragmentation module for splitting baseband data processing requests into multiple task units no larger than 128KB in the congestion mode; a CPU core migration module for migrating baseband processing threads from CPU0 to CPU1 in the congestion mode; and a priority dynamic adjustment module for reducing the scheduling priority of the baseband processing thread in the congestion mode, for example, increasing the scheduling nice value of the baseband processing thread by +5. The latency monitoring module uses an exponentially weighted moving average algorithm with a smoothing factor α of 0.3 to smooth the RTT; the first preset threshold is 50ms; the scheduler also includes a recovery module, used to restore the baseband task processing parameters to normal mode in an exponential rollback manner after the smoothed RTT has been below 40ms for 1 second, i.e., restoring task granularity, CPU core binding, and scheduling priority in an exponential rollback manner. This embodiment of the invention is based on closed-loop control logic: the scheduler continuously monitors and smooths the WAN port latency; once it exceeds the threshold (50ms), it immediately enters congestion mode, performing task fragmentation, CPU core migration, and priority adjustment to prioritize network forwarding. After latency recovery, normal scheduling parameters are gradually restored.
[0025] like Figure 2As shown in the embodiment of the invention, the system further includes a cloud collaborative service platform and a user terminal application. The system adopts a dual-certificate dynamic authentication mechanism, including: a long-term device certificate pre-installed in the eSIM security unit of the optical network terminal device; and a one-time session certificate (short-term session certificate) issued by the cloud collaborative service platform for each remote access session, based on the Ed25519 algorithm and with a validity period of no more than 5 minutes. The optical network terminal device and the user terminal application establish an end-to-end WireGuard encrypted tunnel based on the one-time session certificate. The one-time session certificate is generated based on the Ed25519 algorithm and has a validity period of no more than 5 minutes. The cloud collaborative service platform is only responsible for device certificate management, function activation command processing, and session certificate issuance, and does not forward any user voice or data service traffic, thereby reducing cloud-side resource overhead and avoiding service data leaving the network, which conforms to the data minimization principle of privacy design. In this embodiment of the invention, the user terminal application completes device binding, displays cellular signal quality and device health status, and requests a session certificate from the cloud platform when the user initiates remote access, and then establishes an end-to-end encrypted tunnel with the device based on WireGuard. This invention, through its pluggable daughter card and software-upgradeable scheduling algorithm, facilitates operators in evolving cellular capabilities based on existing ONT equipment and also enables subsequent expansion to support cellular modules of different standards and frequency bands.
[0026] In this embodiment of the invention, when establishing secure remote access, the user's app initiates a request to the cloud platform. After successful verification, the cloud platform issues a one-time short-term session certificate to both the device and the app. Subsequently, the device and the app bypass the cloud platform and directly establish a WireGuard encrypted tunnel based on this session certificate. This process ensures secure access to business data without leaving the cloud platform, complying with privacy design principles.
[0027] like Figure 4 As shown in the embodiment of the invention, the system further includes a high reachability assurance module, used for: sending device heartbeats to the cloud collaborative service platform at 30-second intervals via a broadband link; sending lightweight reports carrying device radio frequency temperature, voltage, and storage health status at 24-hour intervals via a cellular link; making joint decisions based on multiple monitoring parameters including radio frequency temperature, voltage fluctuations, and storage media wear indicators; triggering an early warning when any parameter exceeds a preset risk threshold; and triggering a graceful degradation process when emergency conditions are met. The graceful degradation process includes: stopping accepting new write requests, synchronizing cached data to the storage media, and remounting the file system to read-only mode. Thus, when a hardware failure is predicted (such as the storage media nearing the end of its lifespan), the system executes an active protection process. This process ensures that all cached data is completely written to the storage media before switching to read-only mode, maximizing the integrity of user data and achieving a graceful degradation from "fault alarm" to "security protection."
[0028] This invention also provides a low-cost cellular signal regeneration method based on an optical network terminal, the method comprising the following steps: The first step is for the cloud collaborative service platform to receive the function activation command from the operator's backend and remotely activate the cellular signal regeneration function of the specified optical network terminal. The second step involves the network and baseband resource co-scheduler in the optical network terminal dynamically adjusting the baseband task processing strategy based on the round-trip delay of the wide area network port. The task processing strategy includes baseband task granularity, CPU core binding, and scheduling priority to coordinate the processing of broadband data forwarding and cellular signal regeneration services. The third step involves monitoring the device's health status and implementing early warning or degradation strategies through the high accessibility assurance module; the high accessibility assurance module maintains the device's online health status through broadband heartbeat and cellular status reports; Fourth, when the user terminal application initiates remote access, the cloud collaborative service platform issues a one-time session certificate, and the optical network terminal and the user terminal application establish an end-to-end encrypted tunnel based on the certificate.
[0029] In this embodiment of the invention, the dynamic adjustment of the baseband task processing strategy specifically includes: when the smoothed WAN port round-trip latency exceeds 50ms, the baseband data processing task is split into segments of no more than 128KB, the baseband processing thread is migrated to CPU1, and its scheduling priority is reduced; when the smoothed latency remains below 40ms for 1 second, the task granularity, CPU core binding, and scheduling priority are gradually restored.
[0030] In this embodiment of the invention, the steps of monitoring device health status and executing early warning or degradation strategies through a high accessibility assurance module specifically include: sending a heartbeat to the cloud platform via a broadband link at a preset first interval; sending a lightweight report containing device radio frequency temperature, power supply voltage, and storage health status via a cellular link at a preset second interval; making a predictive judgment based on multiple health risk factors, and triggering an early warning or executing a graceful degradation process when any factor exceeds a preset threshold. The first interval is 30 seconds, and the second interval is 24 hours; the graceful degradation process includes: stopping accepting new write requests, synchronizing cached data to the storage medium, and remounting the file system in read-only mode.
[0031] In this embodiment of the invention, the one-time session certificate is issued by the cloud platform after verifying the user's identity and package permissions. The end-to-end encrypted tunnel established based on the certificate automatically expires after the session expires, and all business data traffic does not pass through the cloud platform.
[0032] This invention, without adding an independent main control unit, independent PMIC, or independent heat dissipation structure, integrates cellular micro base station capabilities into existing ONTs as a plug-in, reducing the marginal hardware cost of indoor cellular coverage by more than 70%. On a single SoC platform, a network and baseband resource collaborative scheduling algorithm driven by WAN latency feedback solves the resource contention problem between cellular baseband tasks and broadband internet data forwarding, ensuring the real-time performance and stability of VoLTE voice services even under high-traffic download scenarios. Through a lightweight control plane design where the cloud platform is only responsible for certificate management and session assistance, operators can achieve "package-based function activation" capabilities for end users, allowing users to automatically obtain indoor cellular signal coverage simply by powering on and connecting to broadband. Through dual-certificate dynamic authentication and end-to-end WireGuard encrypted tunnels, secure remote access to services without leaving the network is achieved, balancing operator regulatory compliance with user privacy protection.
[0033] For example, a gigabit smart optical modem based on the MediaTek MT7986B SoC is modified. Part 1, Hardware Implementation: On the motherboard PCB, an M.2 Key-B slot is added next to the SoC's PCIe 3.0×1 lane. The cellular function daughter card uses the Qualcomm Snapdragon X62 5G Modem-RF solution, removing the PMIC (Power Management Chip) and some peripheral circuits from its standard chipset. The design size is 30mm×22mm, with peak power consumption controlled below 2.5W, retaining only the core RF front-end, baseband chip, and eSIM chip. The daughter card is in close contact with the motherboard's original aluminum alloy heatsink via thermally conductive silicone pads. A fully shielded grounding isolation strip with a width ≥3mm is designed between the daughter card and the motherboard's Wi-Fi module, covered with grounding vias spaced 0.8mm apart. Part 2, Software Implementation and Algorithm Details: Cooperative Scheduler Algorithm Implementation: The network and baseband resource cooperative scheduler runs as a kernel module. It obtains the WAN port RTT every 100ms via tcpping, and calculates it using the formula rt_ewma (one-time session certificate) = one-time session certificate 0.3 (one-time session certificate). One-time session certificate rt_new One-time session certificate + One-time session certificate 0.7 One-time session certificate The one-time session certificate rt_ewma is updated with a smoothing value. When rt_ewma > one-time session certificate by 50ms, the scheduler calls the driver interface to limit the baseband data block to 128KB, migrates the baseband processing thread from CPU0 to CPU1 via sched_setaffinity, and increases its nice value by 5. If rt_ewma remains below 40ms for more than 1 second, the default configuration is restored exponentially. A dual-certificate security mechanism is implemented: the device has a pre-installed ECDSA long-term certificate. When an app initiates access, the cloud platform verifies the user and package, issues a one-time session certificate based on the Ed25519 algorithm with a validity of 5 minutes, and distributes it to the device and app. Both parties complete a WireGuard handshake based on this certificate, establishing a point-to-point encrypted tunnel. The tunnel becomes invalid after the session expires. The high reachability guarantee service sends a heartbeat to the cloud platform every 30 seconds via broadband and a lightweight status report every 24 hours via cellular link. Its health prediction model continuously monitors RF temperature (threshold 80°C), voltage fluctuations (threshold ±5%), and storage wear, making joint decisions. Part Three: Service Activation Process (Business Model Implementation): Users apply for the "Whole House Signal Enhancement" value-added package from the operator. The operator's backend binds the user's broadband account to the ONT's eSIM identification code and sends an activation command to the cloud platform. The ONT in the user's home is activated upon its next heartbeat, and the cellular signal becomes effective. No configuration is required from the user throughout the entire process.
[0034] The above description only details the preferred embodiments of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.
[0035] It should be understood that although the steps in the flowcharts of the various embodiments of the present invention are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the various embodiments may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these sub-steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least a portion of the sub-steps or stages of other steps.
[0036] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, storage, databases, or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in various forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), dual data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), Rambus direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.
[0037] Other embodiments of this disclosure will readily occur to those skilled in the art upon consideration of the disclosure in the specification and embodiments. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not disclosed herein. The specification and embodiments are to be considered exemplary only, and the true scope and spirit of this disclosure are indicated by the claims.
Claims
1. A low-cost cellular signal regeneration system based on an optical network terminal, characterized in that, The system includes: Optical network terminal motherboard and system-on-a-chip; An expansion slot located on the motherboard of an optical network terminal; A cellular function daughter card that is plugged into the expansion slot and connected to the system-on-a-chip via a PCIe channel; The cellular function daughter card does not include an independent power management chip, an independent main control processor, or an independent heat dissipation structure. Its peak power consumption does not exceed 2.5W. The power supply and heat dissipation of the cellular function daughter card are provided and processed uniformly by the optical network terminal. Furthermore, a grounding isolation strip with a width of not less than 3mm and a grounding via array with a spacing of not more than 0.8mm are provided between the cellular function daughter card and the Wi-Fi module of the optical network terminal.
2. The low-cost cellular signal regeneration system based on an optical network terminal according to claim 1, characterized in that, The system-on-a-chip runs a network and baseband resource co-scheduler, which includes: The delay monitoring module is used to periodically collect the round-trip time (RTT) of wide area network ports; The threshold judgment module is used to switch the system to congestion mode when the smoothed RTT is greater than a first preset threshold. The baseband task fragmentation module is used to split the baseband data processing request into multiple task units of no more than 128KB in the congestion mode. CPU core migration module, used to migrate the baseband processing thread from CPU0 to CPU1 in the congestion mode; A priority dynamic adjustment module is used to reduce the scheduling priority of the baseband processing thread in the congestion mode.
3. The low-cost cellular signal regeneration system based on an optical network terminal according to claim 2, characterized in that, The delay monitoring module uses an exponentially weighted moving average algorithm with a smoothing factor α of 0.3 to smooth the RTT; the first preset threshold is 50ms; the scheduler also includes a recovery module, which is used to restore the baseband task processing parameters to normal mode in an exponential rollback manner after the smoothed RTT has been below 40ms for 1 second.
4. The low-cost cellular signal regeneration system based on an optical network terminal according to claim 1, characterized in that, The system also includes a cloud collaborative service platform and user terminal applications. The system adopts a dual-certificate dynamic authentication mechanism, including: Long-term equipment certificates in pre-installed optical network terminal equipment; A one-time session certificate issued by the cloud collaboration service platform for each remote access session; The optical network terminal equipment and the user terminal application establish an end-to-end WireGuard encrypted tunnel based on the one-time session certificate.
5. The low-cost cellular signal regeneration system based on an optical network terminal according to claim 4, characterized in that, The one-time session certificate is generated based on the Ed25519 algorithm and is valid for no more than 5 minutes. The cloud collaboration service platform is only responsible for device certificate management, function activation command processing and session certificate issuance, and does not forward any user voice or data service traffic.
6. A low-cost cellular signal regeneration method based on an optical network terminal, applied to the low-cost cellular signal regeneration system based on an optical network terminal as described in claim 1, characterized in that, The method includes the following steps: The cloud collaborative service platform receives function activation instructions from the operator's backend and remotely activates the cellular signal regeneration function of the specified optical network terminal. The network and baseband resource co-scheduler in the optical network terminal dynamically adjusts the baseband task processing strategy based on the round-trip delay of the wide area network port in order to co-process broadband data forwarding and cellular signal regeneration services. The high accessibility assurance module monitors the health status of equipment and executes early warning or degradation strategies. When a user terminal application initiates remote access, the cloud collaborative service platform issues a one-time session certificate, and the optical network terminal and the user terminal application establish an end-to-end encrypted tunnel based on the certificate.
7. The low-cost cellular signal regeneration method based on an optical network terminal according to claim 6, characterized in that, Dynamically adjusting the baseband task processing strategy specifically includes: When the smoothed WAN port round-trip latency exceeds 50ms, the baseband data processing task is split into segments of no more than 128KB, the baseband processing thread is migrated to CPU1, and its scheduling priority is reduced. When the smoothing latency remains below 40ms for 1 second, gradually restore task granularity, CPU core binding, and scheduling priority.
8. The low-cost cellular signal regeneration method based on an optical network terminal according to claim 6, characterized in that, The steps for monitoring device health status and implementing alerts or degradation strategies through the high accessibility assurance module specifically include: Heartbeats are sent to the cloud platform via a broadband link at a preset first interval; A lightweight report containing device RF temperature, power supply voltage, and storage health status is transmitted via a cellular link at a preset second interval. It makes predictive judgments based on multiple health risk factors, and triggers an alert or executes a graceful degradation process when any factor exceeds a preset threshold.
9. The low-cost cellular signal regeneration method based on an optical network terminal according to claim 8, characterized in that, The first interval is 30 seconds, and the second interval is 24 hours; the graceful degradation process includes: stopping accepting new write requests, synchronizing cached data to the storage medium, and remounting the file system in read-only mode.
10. The low-cost cellular signal regeneration method based on an optical network terminal according to claim 6, characterized in that, The one-time session certificate is issued by the cloud platform after verifying the user's identity and package permissions. The end-to-end encrypted tunnel established based on the certificate automatically expires after the session expires, and all business data traffic does not pass through the cloud platform.