PON Activation Authentication Using Random Delay and Partial Serial Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional passive optical networks (PON) are vulnerable to security threats due to the transmission of ONU serial numbers in plain text, allowing malicious users to perform directed theft or denial of service attacks, and insufficient authentication mechanisms fail to distinguish legitimate and malicious ONUs with the same serial number.
Innovation Solution
Implement a secure mutual authentication method by transmitting only a random delay value or a part of the serial number during the ONU identity assignment process, using random delay values and partial serial numbers to verify the identity of legitimate ONUs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete serial numbers are transmitted in plain text during ONU identity assignment, then the authentication process is simple and fast, but the network becomes vulnerable to security threats such as directed theft and denial of service attacks
Solution Approach 1:
The patent divides the complete serial number into multiple parts, transmitting only a first part during the initial authentication process. This segmentation prevents malicious users from obtaining the complete serial number, thereby enhancing security while maintaining a relatively simple authentication flow. The remaining parts are transmitted only after successful authentication, ensuring that even if intermediate transmissions are intercepted, the complete serial number cannot be reconstructed.
Solution Approach 2:
The patent implements preliminary authentication using a portion of the serial number before transmitting the complete serial number. This preliminary action verifies the legitimacy of the ONU before full identity assignment occurs, preventing unauthorized devices from proceeding with the activation process. The random delay value is also transmitted preliminarily to add another layer of verification.
2Reliability
If random delay values and partial serial numbers are transmitted instead of complete serial numbers, then security is enhanced, but the authentication process becomes more complex
Solution Approach 1:
The authentication process is segmented into multiple stages: first transmitting random delay values and partial serial numbers for preliminary verification, then transmitting the complete serial number only after successful authentication. This segmentation enhances security while managing the time loss by parallelizing the verification process rather than adding sequential steps.
Solution Approach 2:
The patent introduces random delay values as an intermediary element in the authentication process. These delay values serve as a mediator that verifies ONU legitimacy without requiring immediate transmission of complete serial numbers. The intermediary mechanism adds security layers without significantly extending the overall activation time because the verification occurs concurrently with the identity assignment process.
3Reliability
If insufficient authentication mechanisms are used, then the activation process is fast and simple, but malicious users cannot be distinguished from legitimate ONUs
Solution Approach 1:
The patent segments the authentication process into multiple verification stages, each using different elements (random delay values, partial serial numbers, then complete serial numbers). This segmented approach provides robust discrimination between legitimate and malicious ONUs without requiring a single complex authentication mechanism, thereby maintaining relative simplicity while enhancing reliability.
Solution Approach 2:
The patent implements feedback mechanisms where the OLT verifies random delay values and partial serial numbers returned by ONUs against expected values. This feedback loop provides continuous verification throughout the activation process, ensuring that legitimate ONUs are distinguished from malicious ones. The feedback-based approach maintains simplicity by using straightforward comparison operations rather than complex cryptographic protocols.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Example embodiments of the disclosure relate to a method, a device, an apparatus, and medium for passive optical network activation. According to example embodiments of the present disclosure, a first apparatus transmits first information to a second apparatus. The first information indicates a first random delay value generated at the first apparatus and a first serial number of the first apparatus. The first apparatus also receives second information from the second apparatus. The second information indicates an identity assigned by the second apparatus and one or more of a second random delay value or a second serial number. In this way, the serial number may be prevented from being stolen by malicious device, and meanwhile, it may be ensured that the first apparatus may accurately recognize the identity assigned to the first apparatus by the second apparatus.