PON Activation Authentication Using Random Delay and Partial Serial Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional passive optical networks (PON) are vulnerable to security threats due to the transmission of serial numbers in plain text, allowing malicious users to perform directed theft or denial of service attacks, and insufficient authentication mechanisms fail to distinguish legitimate and malicious ONUs with the same serial number.
Innovation Solution
Implementing a secure mutual authentication method by transmitting only a random delay value or a part of the serial number during the ONU identity assignment process, preventing malicious users from obtaining the complete serial number and ensuring legitimate ONUs are authenticated through a secure identity assignment mechanism.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If serial numbers are transmitted in plain text during ONU identity assignment, then the authentication process is simple and fast, but the network becomes vulnerable to security threats such as serial number theft and denial of service attacks
Solution Approach 1:
The patent extracts only the necessary portion of the serial number (last 5 bits) and the random delay value for authentication, rather than transmitting the complete serial number in plain text. This selective extraction maintains authentication functionality while eliminating the security vulnerability of exposing the full serial number.
Solution Approach 2:
The patent introduces a random delay value as an intermediary element in the authentication process. This random delay acts as a mediator that replaces the direct transmission of sensitive serial number information, providing security while enabling the authentication mechanism to function properly.
2Measurement precision
If complete serial numbers are transmitted during activation, then authentication accuracy is high, but malicious users can perform directed theft or denial of service attacks
Solution Approach 1:
The patent extracts only the essential authentication elements (last 5 bits of serial number and random delay value) rather than transmitting the complete serial number. This extraction maintains sufficient authentication accuracy while preventing malicious users from obtaining the full serial number needed for directed theft or denial of service attacks.
Solution Approach 2:
The patent applies preliminary anti-action by proactively limiting the information transmitted during authentication. By sending only partial serial number data and random delay values before any potential attack can occur, the system prevents malicious users from gathering the complete information needed to perform directed theft or denial of service attacks.
3Object-affected harmful factors
If random delay values and partial serial numbers are transmitted instead of complete serial numbers, then network security is enhanced, but the authentication mechanism becomes more complex
Solution Approach 1:
The patent simplifies the authentication mechanism by extracting only the necessary elements (last 5 bits of serial number and random delay value) rather than implementing complex encryption or multi-factor authentication systems. This extraction approach enhances security by limiting exposed information while keeping the authentication mechanism relatively simple and efficient.
Solution Approach 2:
The random delay value serves as an intermediary that simplifies the authentication mechanism while enhancing security. Instead of implementing complex cryptographic protocols, the system uses this intermediary element to provide security through a relatively simple mechanism that compares transmitted random delay values with expected values.
4Productivity
If insufficient authentication mechanisms are used, then the activation process is fast and simple, but legitimate and malicious ONUs cannot be distinguished
Solution Approach 1:
The patent extracts additional authentication elements (random delay value and partial serial number) that provide sufficient reliability to distinguish legitimate from malicious ONUs. This extraction approach maintains fast activation speeds by avoiding complex authentication protocols while improving reliability through multiple verification points.
Solution Approach 2:
The random delay value acts as an intermediary authentication element that enables reliable distinction between legitimate and malicious ONUs without significantly slowing down the activation process. The OLT can verify the random delay value quickly while still achieving reliable authentication, thus maintaining activation speed while improving reliability.
Data Source
AI summary
Example embodiments of the disclosure relate to a method, a device, an apparatus, and medium for passive optical network activation. According to example embodiments of the present disclosure, a first apparatus transmits first information to a second apparatus. The first information indicates a first random delay value generated at the first apparatus and a first serial number of the first apparatus. The first apparatus also receives second information from the second apparatus. The second information indicates an identity assigned by the second apparatus and one or more of a second random delay value or a second serial number. In this way, the serial number may be prevented from being stolen by malicious device, and meanwhile, it may be ensured that the first apparatus may accurately recognize the identity assigned to the first apparatus by the second apparatus.