Passive Optical Network Ranging for Unauthorized CPE Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In passive optical networks, there is a lack of effective mechanisms to detect and prevent customer-premises equipment (CPE) from being used at unauthorized locations, posing security risks and operational challenges due to the shared communication channel and lack of one-to-one mapping between OLT ports and CPE.

Innovation Solution

The system obtains ranging information by determining the round-trip delay between network elements and the OLT, comparing it to stored data to detect location changes, and outputs an alert or disables communication if the CPE is moved beyond an authorized range, ensuring secure and authorized use.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If ranging information is obtained and compared to detect location changes, then security and control are enhanced, but system complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system uses existing ranging mechanisms already present in PON networks to obtain location information. The ranging information is obtained through standard protocols between the OLT and network elements, allowing the system to self-monitor location changes without requiring external monitoring equipment or additional complex infrastructure.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system implements continuous monitoring by comparing current ranging information with stored baseline information, creating a feedback loop that detects location changes. When location changes are detected, the system provides feedback by generating alerts or disabling communication, enabling proactive security management without requiring constant human intervention.

Inventive Principle:
Principle #23Feedback

2Reliability

If location monitoring and alerting mechanisms are implemented, then unauthorized usage is prevented, but operational complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidoperational complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system automatically performs location verification by comparing current ranging information with stored information, and autonomously takes actions such as generating alerts or disabling communication when unauthorized location changes are detected. This automation eliminates the need for manual monitoring and intervention, simplifying operations despite the enhanced security functionality.

Inventive Principle:
Principle #25Self-service

3Reliability

If communication is disabled based on location changes, then network security is improved, but service availability may be reduced

Engineering Contradiction:
ImprovesecurityVSAvoidservice availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system implements a feedback-based approach where communication is only disabled after verified location changes are detected through ranging information comparison. The system provides alerts and allows for verification before taking restrictive actions, ensuring that communication is disabled only when genuinely unauthorized usage is detected, not due to false alarms or legitimate relocations.

Inventive Principle:
Principle #23Feedback

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This solution enhances security and control by restricting CPE use to authorized locations, preventing unauthorized usage and improving network management without requiring additional hardware, using existing infrastructure and protocols.

Implementation Method 1

determining a round-trip delay between transmitting the ranging request and receiving the ranging response; and determining the ranging information based on the round-trip delay

Methodology Applied
Scientific EffectTime of flight: Time of Flight

Data Source

PatentUS9820022B2Managing network access based on ranging information
Publication Date: 2017.11.14 ADTRAN INC
  • US9820022B2 patent drawing
  • US9820022B2 patent drawing
  • US9820022B2 patent drawing

AI summary

Methods, systems, and apparatus for restricting use of a network element outside an authorized location range are disclosed. In one aspect a method includes obtaining, for a network element of a passive optical network, an identifier and ranging information corresponding to a present location of the network element; identifying, from a database and based on the identifier of the network element, stored ranging information specifying a previous location of the network element; determining, based on a comparison of the ranging information with the stored ranging information, that the location of the network element has changed more than a specified amount; and outputting an alert in response to determining that the location of the network element has changed more than a specified amount.