CN103166756A - Method for carrying out authentication announcing on optical network unit and corresponding equipment - Google Patents

Method for carrying out authentication announcing on optical network unit and corresponding equipment Download PDF

Info

Publication number
CN103166756A
CN103166756A CN201110418018XA CN201110418018A CN103166756A CN 103166756 A CN103166756 A CN 103166756A CN 201110418018X A CN201110418018X A CN 201110418018XA CN 201110418018 A CN201110418018 A CN 201110418018A CN 103166756 A CN103166756 A CN 103166756A
Authority
CN
China
Prior art keywords
authentication
optical network
unit
notice message
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201110418018XA
Other languages
Chinese (zh)
Inventor
王肖远
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201110418018XA priority Critical patent/CN103166756A/en
Publication of CN103166756A publication Critical patent/CN103166756A/en
Pending legal-status Critical Current

Links

Images

Abstract

Provided are a method for carrying out authentication announcing on an optical network unit and corresponding equipment. The method is used in a passive optical network system and comprises that after an authentication process of the optical network unit is finished, an authentication side sends authentication announcing information to the optical network unit, and the authentication announcing information at least carries authentication result information. The authentication side equipment in the passive optical network system comprises an authentication unit and an announcing unit. The authentication unit is used for authentication of the optical network unit. The announcing unit is used for sending the authentication announcing information to the optical network unit after the authentication unit finishes authentication, and the authentication announcing information at least carries the authentication result information. The authentication side can announce an authentication result to the optical network unit (ONU), the ONU can control a local indicating lamp, prompt an authentication state and fault reason through a page and the like according to the result correspondingly, mounting and maintaining personnel can conveniently carry out checking, and efficiency of operation, maintenance and fault removing is improved.

Description

A kind of method and relevant device that optical network unit is authenticated announcement
Technical field
The present invention relates to EPON (Passive Optical Network is referred to as PON) field, relate in particular to a kind of method and relevant device that optical network unit (Optical Network Unit is referred to as ONU) is authenticated announcement.
Background technology
For guaranteeing reliability and the fail safe of PON system, before the ONU normal operation, EMS (network Element Management System, Element management system or claim NM server) or OLT (Optical Line Terminal, optical line terminal) need to authenticate ONU.The ONU that only has authentication to pass through just can enter normal operating conditions, and the illegal ONU by authentication can not be rejected accesses network.
The present authentication method of PON system comparative maturity, but existing authentication method all is conceived to the security control to the PON network, and ONU is as passive equipment and do not know authentication result.
Summary of the invention
The object of the present invention is to provide a kind of method and relevant device that optical network unit (Optical Network Unit is referred to as ONU) is authenticated announcement, to overcome existing ONU as passive equipment and not know the defective of authentication result.
For addressing the above problem, the invention provides a kind of method that optical network unit is authenticated announcement, be applied to comprise in passive optical network:
After the process that optical network unit is authenticated finished, the described optical network unit of authentication direction sent the authentication notice message, wherein carries at least authentication result information.
Further,
Also carry authentication mode information in described authentication notice message.
Further,
After authentification failure, also carry failure cause information in described authentication notice message.
Further,
Described authentication notice message adopts medium access control control frame form, or defined upper strata media management frame form in described passive optical network.
Further, described method also comprises:
Described optical network unit shows the information of carrying in described authentication notice message after the described authentication notice message that receives is carried out successfully resolved; Perhaps,
Control the state of local EPON status indicator lamp according to the authentication result information of wherein carrying, and other information of wherein carrying are shown.
Further,
Described optical network unit is replied to described authentication side and is replied success message after the described authentication notice message that receives is carried out successfully resolved; After resolving unsuccessfully, reply answer failed message to described authentication side.
Correspondingly, the present invention also provides the method, apparatus of the authentication in a kind of passive optical network, comprising:
Authentication ' unit is used for optical network unit is authenticated;
Notification unit is used for after described authentication ' unit is completed authentication, sends the authentication notice message to described optical network unit, wherein carries at least authentication result information.
Further,
Also carry authentication mode information in described authentication notice message.
Further,
After described authentication ' unit authentification failure, also carry failure cause information in described authentication notice message.
Correspondingly, the present invention also provides the optical network unit in a kind of passive optical network, comprising:
Resolution unit is used for the authentication notice message that the authentication method, apparatus that receives is sent is resolved;
Indicative control unit is used for after described resolution unit is to described authentication notice message successfully resolved, the information of carrying in described authentication notice message being shown; Perhaps, be used for controlling according to the authentication result information of wherein carrying the state of local EPON status indicator lamp, and other information of wherein carrying are shown.
Further, described optical network unit also comprises:
Response unit is used for after described resolution unit is carried out successfully resolved to the described authentication notice message that receives, and replys to described authentication method, apparatus and replys success message; Also be used for replying answer failed message to described authentication method, apparatus after resolving unsuccessfully to described authentication notice message.
After adopting the present invention, authentication can be announced authentication result to ONU, ONU correspondingly indicator light local according to this output control, by page prompts authentication state and failure cause etc., facilitated the maintenance personnel to check, improved O﹠M troubleshooting efficient.
Description of drawings
Fig. 1 is the network topology structure schematic diagram of PON system in the embodiment of the present invention;
Fig. 2 is ONU authentication notice procedures schematic diagram in the embodiment of the present invention.
Embodiment
For making the purpose, technical solutions and advantages of the present invention clearer, hereinafter in connection with accompanying drawing, embodiments of the invention are elaborated.Need to prove, in the situation that do not conflict, the embodiment in the application and the feature in embodiment be combination in any mutually.
As shown in Figure 1, in the PON system, OLT connects ONU by optical splitter (Splitter), and OLT and ONU are managed by EMS as entity.Wherein, the authentication that ONU is authenticated can be EMS, also can be OLT.
In the present embodiment, a kind of method that ONU is authenticated announcement is applied to comprise in the PON system:
After the process that ONU is authenticated finished, this ONU of authentication direction sent the authentication notice message, wherein carries at least authentication result information, can also carry authentication mode information.In addition, in the situation that authentification failure can also carry failure cause information in the authentication notice message.Wherein, authentication can be EMS or OLT; When authentication side was EMS, the authentication notice message that EMS sends sent to ONU through OLT.
when specific implementation, the authentication notice message can be MAC (Medium Access Control, medium access control) control frame, it can be also PON system defined upper strata media management frame, as EPON (Ethernet Passive Optical Network, Ethernet passive optical network) the expansion OAM of system (Operation Administration and Maintenance, operation management maintain) message or GPON (Gigabit-Capable PON, Gigabit Passive Optical Network) OMCI of system (ONTManagement and Control Interface, ONT manages control interface) message.Because the extensibility of media management frame is stronger, therefore more preferably adopt the media management frame.
ONU can show the information of carrying in this message after the authentication notice message of receiving is resolved; Perhaps, the state of controlling local PON status indicator lamp according to the authentication result information of wherein carrying to be pointing out relevant maintenance personnel, and other information of wherein carrying are shown.The information that the maintenance personnel can show by the combinations of states of PON lamp, judge current light path whether normal, ONU whether by authentication or the concrete reason by authentication etc., thereby make the maintenance personnel can investigate easily the authentication relevant issues in the ONU side, improve O﹠M troubleshooting efficient.
Below in conjunction with accompanying drawing, the present invention is realized that the method for ONU authentication announcement is described in further detail.
As shown in Figure 2, as authentication side as example, the method that ONU is authenticated announcement is as follows take OLT:
S201:OLT by and ONU between management channels, get the local authentication information of ONU;
S202:OLT authenticates this ONU according to the local log-on message of the ONU that gets;
Wherein, in step S201 OLT to obtain the specific implementation of local authentication information of ONU relevant with the current authentication mode.As in the EPON system, under the authentication mode based on the ONU physical label, OLT opens ONU and finds window to all ONU broadcast downstream Discovery Gate (discovery gating) message periodically; ONU sends Register REQ (registration request) message in MPCP (Multi-Point Control Protocol, Multi-point Control Protocol) the discovery stage to OLT, comprises its local authentication information (as mac address information) in this message; Under the authentication mode based on the ONU logical identifier, to find and after the OAM discovery procedure completed, OLT sent login request message to ONU at MPCP, the local authentication information (as logical identifier) of active inquiry ONU is to obtain this local authentication information.
S203: after authentication finished, OLT sent the authentication notice message by above-mentioned management channels to above-mentioned ONU, wherein carries authentication result information, goes back portability authentication mode information; In addition, after authentification failure, go back portability failure cause information;
S204:ONU replys success message if can resolve to return to OLT, otherwise returns to answer failed message to OLT after receiving the authentication notice message.ONU can present authentication result in this locality after the authentication notice message that receives is resolved as required, as controlling the PON status indicator lamp, shows the aspects such as authentication state and failure cause demonstration by the page.For example control PON status indicator lamp Chang Liang after authentication success, glimmer when authentification failure, the expression business can't be opened; The maintenance personnel can locate fault easily by checking page status and authentification failure reason, has improved O﹠M troubleshooting efficient.
In addition, when representing with expansion OAM frame or OMCI frame form as the authentication notice message, comprise at least following three attribute fields:
1. authentication mode (Authentication Mode);
2. authentication result (Authentication Status);
3. authentification failure reason (Failure Reason), this field is only effective when authentification failure.
This authentication notice message namely is equivalent to ONU opening state notification message.For the ONU that replys answer failed message, OLT does and ignores processing.For the ONU (may be dont answer as this ONU, may be also not do and reply owing to receiving authentication notification message) of dont answer at the appointed time, OLT will retransmit to this ONU the authentication notice message (as retransmitting 3 times) of pre-determined number.For simplicity, OLT also can not arrange timer to wait for replying of ONU, just repeats to send the authentication notice message of pre-determined number to corresponding ONU.
In the present embodiment, the authentication method, apparatus in a kind of passive optical network comprises:
Authentication ' unit is used for optical network unit is authenticated;
Notification unit is used for after described authentication ' unit is completed authentication, sends the authentication notice message to described optical network unit, wherein carries at least authentication result information.
Preferably,
Also carry authentication mode information in described authentication notice message.
Preferably,
After described authentication ' unit authentification failure, also carry failure cause information in described authentication notice message.
Correspondingly, in the present embodiment, the ONU in a kind of passive optical network comprises:
Resolution unit is used for the authentication notice message that the authentication method, apparatus that receives is sent is resolved;
Indicative control unit is used for after described resolution unit is to described authentication notice message successfully resolved, the information of carrying in described authentication notice message being shown; Perhaps, be used for controlling according to the authentication result information of wherein carrying the state of local EPON status indicator lamp, and other information of wherein carrying are shown.
Preferably, described ONU also comprises:
Response unit is used for after described resolution unit is carried out successfully resolved to the described authentication notice message that receives, and replys to described authentication method, apparatus and replys success message; Also be used for replying answer failed message to described authentication method, apparatus after resolving unsuccessfully to described authentication notice message.
One of ordinary skill in the art will appreciate that all or part of step in said method can come the instruction related hardware to complete by program, described program can be stored in computer-readable recording medium, as read-only memory, disk or CD etc.Alternatively, all or part of step of above-described embodiment also can realize with one or more integrated circuits.Correspondingly, each the module/unit in above-described embodiment can adopt the form of hardware to realize, also can adopt the form of software function module to realize.The present invention is not restricted to the combination of the hardware and software of any particular form.
The above is only the preferred embodiments of the present invention, is not for limiting protection scope of the present invention.According to summary of the invention of the present invention; also other various embodiments can be arranged; in the situation that do not deviate from spirit of the present invention and essence thereof; those of ordinary skill in the art are when making according to the present invention various corresponding changes and distortion; within the spirit and principles in the present invention all; any modification of doing, be equal to replacement, improvement etc., within protection scope of the present invention all should be included in.

Claims (11)

1. method that optical network unit is authenticated announcement is applied to comprise in passive optical network:
After the process that optical network unit is authenticated finished, the described optical network unit of authentication direction sent the authentication notice message, wherein carries at least authentication result information.
2. the method for claim 1 is characterized in that:
Also carry authentication mode information in described authentication notice message.
3. the method for claim 1 is characterized in that:
After authentification failure, also carry failure cause information in described authentication notice message.
4. the method for claim 1 is characterized in that:
Described authentication notice message adopts medium access control control frame form, or defined upper strata media management frame form in described passive optical network.
5. method as described in any one in claim 1~4, is characterized in that, also comprises:
Described optical network unit shows the information of carrying in described authentication notice message after the described authentication notice message that receives is carried out successfully resolved; Perhaps,
Control the state of local EPON status indicator lamp according to the authentication result information of wherein carrying, and other information of wherein carrying are shown.
6. method as claimed in claim 5, is characterized in that, also comprises:
Described optical network unit is replied to described authentication side and is replied success message after the described authentication notice message that receives is carried out successfully resolved; After resolving unsuccessfully, reply answer failed message to described authentication side.
7. the authentication method, apparatus in a passive optical network comprises:
Authentication ' unit is used for optical network unit is authenticated;
Notification unit is used for after described authentication ' unit is completed authentication, sends the authentication notice message to described optical network unit, wherein carries at least authentication result information.
8. authentication method, apparatus as claimed in claim 7 is characterized in that:
Also carry authentication mode information in described authentication notice message.
9. authentication method, apparatus as claimed in claim 7 is characterized in that:
After described authentication ' unit authentification failure, also carry failure cause information in described authentication notice message.
10. the optical network unit in a passive optical network comprises:
Resolution unit is used for the authentication notice message that the authentication method, apparatus that receives is sent is resolved;
Indicative control unit is used for after described resolution unit is to described authentication notice message successfully resolved, the information of carrying in described authentication notice message being shown; Perhaps, be used for controlling according to the authentication result information of wherein carrying the state of local EPON status indicator lamp, and other information of wherein carrying are shown.
11. optical network unit as claimed in claim 10 is characterized in that, also comprises:
Response unit is used for after described resolution unit is carried out successfully resolved to the described authentication notice message that receives, and replys to described authentication method, apparatus and replys success message; Also be used for replying answer failed message to described authentication method, apparatus after resolving unsuccessfully to described authentication notice message.
CN201110418018XA 2011-12-14 2011-12-14 Method for carrying out authentication announcing on optical network unit and corresponding equipment Pending CN103166756A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110418018XA CN103166756A (en) 2011-12-14 2011-12-14 Method for carrying out authentication announcing on optical network unit and corresponding equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110418018XA CN103166756A (en) 2011-12-14 2011-12-14 Method for carrying out authentication announcing on optical network unit and corresponding equipment

Publications (1)

Publication Number Publication Date
CN103166756A true CN103166756A (en) 2013-06-19

Family

ID=48589510

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110418018XA Pending CN103166756A (en) 2011-12-14 2011-12-14 Method for carrying out authentication announcing on optical network unit and corresponding equipment

Country Status (1)

Country Link
CN (1) CN103166756A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104022817A (en) * 2014-06-30 2014-09-03 上海斐讯数据通信技术有限公司 Method and device for registration lighting for ONU (optical network unit) device
CN113490081A (en) * 2021-06-29 2021-10-08 青岛海信宽带多媒体技术有限公司 ONU gateway and PON state lamp lighting method
CN115334379A (en) * 2022-10-12 2022-11-11 武汉长光科技有限公司 Online optical network unit replacement method and device, electronic equipment and storage medium

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1458164A2 (en) * 2003-03-10 2004-09-15 Samsung Electronics Co., Ltd. Method, apparatus and computer readable storage medium for authentication of optical network units in an Ethernet Passive Optical Network EPON
CN1968089A (en) * 2006-09-29 2007-05-23 华为技术有限公司 Subscriber authentication method for passive optical network
CN101068145A (en) * 2007-07-05 2007-11-07 杭州华三通信技术有限公司 EPON network element configuration method and EPON

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1458164A2 (en) * 2003-03-10 2004-09-15 Samsung Electronics Co., Ltd. Method, apparatus and computer readable storage medium for authentication of optical network units in an Ethernet Passive Optical Network EPON
CN1968089A (en) * 2006-09-29 2007-05-23 华为技术有限公司 Subscriber authentication method for passive optical network
CN101068145A (en) * 2007-07-05 2007-11-07 杭州华三通信技术有限公司 EPON network element configuration method and EPON

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104022817A (en) * 2014-06-30 2014-09-03 上海斐讯数据通信技术有限公司 Method and device for registration lighting for ONU (optical network unit) device
CN104022817B (en) * 2014-06-30 2018-10-12 上海斐讯数据通信技术有限公司 A kind of method and device of ONU equipment registration lighting
CN113490081A (en) * 2021-06-29 2021-10-08 青岛海信宽带多媒体技术有限公司 ONU gateway and PON state lamp lighting method
CN113490081B (en) * 2021-06-29 2024-05-07 青岛海信宽带多媒体技术有限公司 ONU gateway and PON status lamp lighting method
CN115334379A (en) * 2022-10-12 2022-11-11 武汉长光科技有限公司 Online optical network unit replacement method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
ES2436866T3 (en) Method and equipment for authentication in a passive optical network and passive optical network thereof
EP2073444B1 (en) Terminal detection authentication method, device and operational management system in passive optical network
US10367693B2 (en) Service configuration data processing method and apparatus
CN102740174B (en) Method for managing ONU (optical network unit) access in GPON (gigabit passive optical network) system
US9755749B2 (en) ONU, communication system and communication method for ONU
CN101827099B (en) Method and device for allocating logical link identifiers for optical network unit
US9083465B2 (en) Method for acquiring PON port association relationship, optical network device, and optical network system
CN110460371B (en) Optical resource checking method and system
EP2697982B1 (en) Mitigating rogue optical network unit (onu) behavior in a passive optical network (pon)
WO2011127731A1 (en) Registration activation method and system for optical network unit
US20110167487A1 (en) Method, system and device for enabling user side terminal to obtain password
CN106992986A (en) A kind of method and system of hybrid authentication
CN103731764A (en) Platform and method for PON system ONU certificate authority
WO2016188196A1 (en) Method and device for detecting abnormal pon terminal
CN104584478A (en) Method, apparatus and system for terminal authentication in passive optical network
CN103166756A (en) Method for carrying out authentication announcing on optical network unit and corresponding equipment
CN102571353A (en) Method for verifying legitimacy of home gateway in passive optical network
CN106464356B (en) A kind of detection method of rogue's optical network unit, apparatus and system
CN105743683B (en) The methods, devices and systems of management terminal device in passive optical network
CN103036715B (en) Device management method, device and corresponding network management system
CN105871615A (en) Method and system for displaying registration information
US11095521B2 (en) Method and system for identifying a communication port of a telecommunication network
CN109120334A (en) Fiber position determines method and device, network element, storage medium and processor
CN103905583B (en) Ethernet passive optical network-controlled method, system and OLT
CN105376663B (en) A kind of method that power user ONU remotely manages OLT in GPON system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20130619

WD01 Invention patent application deemed withdrawn after publication