CN101447864A - Method and system for realizing password configuration and device for realizing password backup and configuration - Google Patents

Method and system for realizing password configuration and device for realizing password backup and configuration Download PDF

Info

Publication number
CN101447864A
CN101447864A CNA2007101681861A CN200710168186A CN101447864A CN 101447864 A CN101447864 A CN 101447864A CN A2007101681861 A CNA2007101681861 A CN A2007101681861A CN 200710168186 A CN200710168186 A CN 200710168186A CN 101447864 A CN101447864 A CN 101447864A
Authority
CN
China
Prior art keywords
password
backup
user side
optical network
equipment
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CNA2007101681861A
Other languages
Chinese (zh)
Inventor
谢卫平
曲志军
高海
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to CNA2007101681861A priority Critical patent/CN101447864A/en
Priority to PCT/CN2008/073199 priority patent/WO2009074060A1/en
Publication of CN101447864A publication Critical patent/CN101447864A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/44Star or tree networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention relates to the technical field of optical network communication and discloses a method for realizing password configuration, and the method comprises: a password which is distributed to a user is configured on a first optical network user-side device, and the password is backuped on a backup device which is corresponding to the first optical network user-side device; the judgment of whether the password configuration needs to be carried out on a second optical network user-side device or not is carried out after adopting the second optical network user-side device to replace the first optical network user-side device, if yes, the password which is saved on the backup device which is corresponding to the first optical network user-side device is configured on the second optical network user-side device. The embodiment of the invention also discloses a system for realizing the password configuration and a device for realizing the password backup and the configuration. The use of the embodiment of the invention can directly configure the password at the backup device on the user-side device without the manual re-configuration of the password when the user-side device needs to be updated.

Description

Method and system for realizing password configuration and device for realizing password backup and configuration
Technical Field
The present invention relates to the field of optical network communication technologies, and in particular, to a method and a system for implementing password configuration and a device for implementing password backup and configuration.
Background
Currently, optical networks have been increasingly used, and among them, gigabit-capable (Gbit) passive optical networks (GPONs) are used more. In the GPON architecture, Optical Network Units (ONUs) need to register on an Optical Line Terminal (OLT) before traffic runs, as specified by the GOPN protocol g.984.
In the prior art, the registration of an ONU is implemented by two ways:
1. writing a Serial Number (SN) of the ONU into the OLT in advance through a management system, such as a Network Management System (NMS) or an Element Management System (EMS), and realizing the registration of the ONU by utilizing the SN;
2. writing a password (password) of the ONU into the OLT in advance through a management system, such as NMS or EMS, and realizing the registration of the ONU by using the password; the password is a password distributed to the user by the system when the user applies for the service.
In practical applications, because it is difficult for operators to manage SNs of ONUs, the second method is currently more likely to be used for registration of ONUs, and in the process of using this method, the following two stages are included:
the first stage is as follows: and a service distribution stage:
referring to fig. 1, the service issuance phase includes the following steps:
step 101: when a user needs to use a certain service, applying for the service to an operator website providing the service or applying for the service through a telephone;
step 102: sending application information of a user to an Operation Support System (OSS) of an operator;
step 103: the OSS system creates account information for the user and distributes a corresponding password for the user;
step 104: and the operator provides the account information and the password for maintenance personnel, the maintenance personnel installs the ONU and the CPE for the user on the door, and opens the service for the user according to the account information and the password.
And a second stage: and a service opening stage:
referring to fig. 2, the service provisioning phase specifically includes the following steps:
step 201: an OSS system of an operator configures a password distributed for a user by the OSS system in a service sending stage into an OLT through a management system;
step 202: the method comprises the steps that maintenance personnel perform door-to-door service, an ONU and a CPE are installed, and after the ONU and the CPE are powered on, a password distributed to a user in a service sending stage is configured on the ONU through an ONU configuration interface;
step 203: the ONU initiates registration to the OLT by utilizing the password configured on the ONU;
step 204: and the OLT verifies the registration request of the ONU, registers the ONU after the verification is passed, and performs service configuration on the ONU through an optical terminal management control interface (OMCI) protocol so that the ONU can use corresponding services according to the configuration after the registration is successful.
Through the above process, although the registration of the ONU can be realized, the following problems still exist in the practical application process:
the ONU or the CPE at the user side may need to be replaced due to damage or update, and by adopting the above manner, at this time, maintenance personnel of an operator needs to go to the home to replace hardware for the user, and because the newly replaced hardware does not have a password allocated by the OSS system for the user, the maintenance personnel needs to re-configure the passwords on the ONU and the CPE during the going to the home service while replacing the hardware, so that the ONU can register and perform corresponding services on the OLT after the hardware is updated. Because all the above-mentioned processes need the service of maintainer going to the door, can increase the human input of realizing this kind of mode undoubtedly, especially to the higher area of human cost, the human cost input of improvement this kind of mode that can be by a wide margin is unfavorable for the practical application of this scheme.
Disclosure of Invention
The embodiment of the invention aims to: the method and the system for realizing the password configuration and the device for realizing the password backup and configuration are provided, so that the password can be automatically reconfigured on updated hardware after the optical network hardware is updated.
In order to achieve the above object, the embodiments of the present invention provide the following technical solutions:
a method of implementing a cryptographic configuration, the method comprising:
configuring a password distributed for a user on first optical network user side equipment, and backing up the password on backup equipment corresponding to the first optical network user side equipment;
after the first optical network user side equipment is replaced by second optical network user side equipment, whether password configuration needs to be carried out on the second optical network user side equipment is judged, and if yes, a password stored on the backup equipment corresponding to the first optical network user side equipment is configured on the second optical network user side equipment.
An apparatus for implementing a password backup, the apparatus comprising:
the password backup unit is used for backing up the password configured on the first optical network user side equipment;
a backup password providing unit for: after the first optical network user side equipment is replaced by second optical network user side equipment, when the password configuration needs to be carried out on the second optical network user side equipment, the password backed up by the password backup unit is provided for the second optical network user side equipment.
An apparatus for implementing a cryptographic configuration, the apparatus comprising:
a determination unit configured to: after a first optical network user side device is replaced by a second optical network user side device, judging whether password configuration needs to be carried out on the second optical network user side device or not;
and the configuration unit is used for configuring the password stored on the backup equipment corresponding to the first optical network user side equipment on the second optical network user side equipment when the judgment unit judges that the password configuration is required currently.
A system for implementing a cryptographic configuration, the system comprising:
the backup device is used for backing up the password configured on the first optical network user side device on the backup device, and providing the backed-up password for the second optical network user side device when the password configuration of the second optical network user side device is needed after the first optical network user side device is replaced by the second optical network user side device and is judged;
a second optical network user side device, configured to: configuring the password provided by the backup device on itself.
A method of implementing a cryptographic configuration, the method comprising:
judging whether the optical network user side equipment and the backup equipment corresponding to the user side equipment have consistent passwords or not, if so, ending the process, otherwise, executing the subsequent steps;
and password transmission is carried out between the optical network user side equipment and the backup equipment, and the same password is configured on the optical network user side equipment and the backup equipment by using the password transmission.
A system for realizing password configuration comprises an optical network user side device, a backup device and a judgment device, wherein:
the optical network user side equipment is used for: providing the password configuration result of the user to the judgment device;
the backup device is configured to: saving the password and providing the password saving result to the judging device;
the judgment device is configured to: judging whether the optical network user side equipment and the backup equipment corresponding to the user side equipment have consistent passwords or not according to a password configuration result provided by the optical network user side equipment and a password storage result provided by the backup equipment;
after the judging device judges that the optical network user side device and the backup device corresponding to the user side device do not have the consistent password, password transmission is carried out between the optical network user side device and the backup device, and the same password is configured on the optical network user side device and the backup device by using the password transmission.
Therefore, in the embodiment of the invention, because the password of the user side equipment is backed up on the backup equipment corresponding to the optical network user side equipment, when the user side equipment needs to be updated, the corresponding password can be directly obtained from the backup equipment and configured on the user side equipment, so that the password does not need to be manually reconfigured, the investment of labor cost is saved, and the maintenance cost is reduced. In practical application, when the user side equipment needs to be replaced, by adopting the embodiment of the invention, an operator only needs to mail the replaced user side equipment, such as ONU or CPE, to a user, and after the user replaces the user side equipment by himself, the user can directly power on to register the user side equipment, and the registered user side equipment is utilized to use corresponding services, so that the operation and maintenance cost is reduced.
Drawings
Fig. 1 is a flow chart of implementing service delivery in the prior art;
fig. 2 is a flow chart of implementing service provisioning in the prior art;
FIG. 3 is a flowchart of a password backup process provided by an embodiment of the present invention;
FIG. 4 is a flowchart of a password backup process provided in a preferred embodiment of the present invention;
FIG. 5 is a flowchart of a password backup process provided in a preferred embodiment of the present invention;
FIG. 6 is a flow diagram of a password configuration process provided by an embodiment of the present invention;
fig. 7 is a schematic diagram of an apparatus for implementing password backup according to an embodiment of the present invention;
FIG. 8 is a diagram illustrating an apparatus for implementing a password configuration according to another embodiment of the present invention;
FIG. 9 is a schematic diagram of a system for implementing password configuration, provided by an embodiment;
FIG. 10 is a flowchart of a method for implementing password configuration according to a preferred embodiment of the present invention;
fig. 11 is a flowchart of a method for implementing password configuration according to a preferred embodiment of the present invention.
Detailed Description
Embodiments of the present invention will be described in detail below with reference to the accompanying drawings.
A method for realizing password configuration comprises the following steps:
the method for realizing the password configuration provided by the embodiment of the invention comprises the following steps:
configuring a password distributed for a user on first optical network user side equipment, and backing up the password on backup equipment corresponding to the first optical network user side equipment;
after the first optical network user side equipment is replaced by second optical network user side equipment, whether password configuration needs to be carried out on the second optical network user side equipment is judged, and if yes, a password stored on the backup equipment corresponding to the first optical network user side equipment is configured on the second optical network user side equipment.
For clarity, the following description will be made on the password backup process and the password configuration process in the above method, respectively:
a password backup process:
referring to fig. 3, a password backup process provided in the embodiment of the present invention includes the following steps:
step 301: distributing a corresponding password for the user;
step 302: and configuring the password on the ONU, and backing up the password on the backup device corresponding to the ONU.
In a preferred embodiment of the present invention, the method has different implementation manners in different application scenarios, and the specific implementation of the method is described in detail below in combination with the different application scenarios:
scene one: and carrying out password backup when the user newly applies for the service:
in practical application, a user mostly applies for a service by using a factory-new ONU, and a corresponding password configuration is not usually performed on the factory-new ONU, and at this time, referring to fig. 4, a password backup process provided in an embodiment of the present invention specifically includes:
step 401: a user applies for a service to an operator, and the operator creates account information for the user according to application information of the user and distributes a corresponding password;
step 402: and configuring the password on the ONU provided for the user through the door-to-door service of operator maintenance personnel, and backing up the password on the backup equipment corresponding to the ONU.
In scenario one, the following situations may occur:
in order to avoid the above situation, in step 402, the specific implementation of the password backup on the backup device corresponding to the ONU may be:
opening a password covering function of an ONU (optical network unit), wherein the ONU sends a password covering instruction to the backup equipment, and the backup equipment forcibly covers an old password stored on the backup equipment by adopting the password configured on the ONU after receiving the instruction, so that the password is backed up on the backup equipment;
or, before the password backup, the password clearing function of the ONU may be turned on, the ONU sends a password clearing instruction to the backup device, and after receiving the instruction, the backup device forcibly clears the old password stored in the ONU itself, and then performs the password backup step, and also the password backup may be implemented when a new service is applied.
Scene two: and carrying out password backup when the user modifies the password:
in practical applications, it may be necessary to change the password allocated to the user into a new password for some reason, in this case, referring to fig. 5, the password backup process provided by the embodiment of the present invention specifically includes:
step 501: after the password change is triggered, a new password is distributed to the user;
step 502: configuring the new password on the ONU;
step 503: the ONU compares the password of the ONU with the password stored on the corresponding backup device, and after the inconsistency of the password of the ONU and the password stored on the corresponding backup device is found, the password covering function of the ONU is opened, and the password newly configured on the ONU is backed up on the backup device; or, the password clearing function of the ONU may be turned on, the password saved on the backup device is forcibly cleared, and then the password newly configured on the ONU is backed up on the backup device.
In the above embodiment, the backup device may be Customer Premises Equipment (CPE), and in other embodiments of the present invention, other devices may also be used as the backup device, specifically:
1. adopting other ONU equipment having a backup relationship with the ONU equipment as backup equipment, and further adopting backup equipment corresponding to other ONU equipment having a backup relationship with the ONU equipment as the backup equipment;
2. other independent devices are adopted as the backup device, for example, a Personal Computer (PC) can be adopted as the backup device, and at this time, the password backup can be realized only by the PC having the backup function, and of course, other devices having the backup function, such as a set-top box, can also be adopted as the backup device, without affecting the implementation of the embodiment of the present invention.
In the above embodiments, the ONU is taken as an example to be described as the optical network user side device, and in other embodiments of the present invention, an Optical Network Terminal (ONT) that is also the optical network user side device may be used instead of the ONU, without affecting the implementation of the embodiment of the present invention.
(II) password configuration process:
referring to fig. 6, a password configuration process provided in the embodiment of the present invention includes the following steps:
step 601: after a second ONU is adopted to replace a first ONU, judging whether password configuration needs to be carried out on the second ONU or not, if so, executing a step 602, otherwise, ending the process;
step 602: and configuring the password stored in the backup equipment corresponding to the first ONU on the second ONU.
Similarly, in the preferred embodiment of the present invention, the above method has different implementation manners in different application scenarios, and the following describes in detail the specific implementation of the above method in combination with different application scenarios:
scene 1: and applying for the service by adopting a second ONU device which is not configured with the password:
in this scenario, since the ONU is not configured with the password, it may be determined that the password configuration of the second ONU is currently required, and the specific implementation of step 602 is:
the second ONU sends a password acquisition request to the backup equipment, the backup equipment receiving the request returns the password stored by the second ONU to the second ONU, and the second ONU configures the password on the second ONU after receiving the password; in an embodiment of the present invention, after receiving the password obtaining request, the backup device may further include:
and judging whether the backup equipment stores a valid password, if so, continuing to execute the step of returning the password to the second ONU, otherwise, sending indication information to the user to prompt that no available password exists currently, or directly reporting an error to the user.
Scene 2: and applying for service by adopting the second ONU configured with the password:
in this scenario, since the second ONU already has the password, the password stored in the backup device needs to be used to replace the original password on the second ONU device, so that after the second ONU device is installed, the registration of the second ONU device can be completed, and in this scenario, the specific implementation of determining whether the password configuration needs to be performed on the second ONU in step 601 is:
judging whether the password configured on the second ONU is consistent with the password stored on the backup device, if not, judging that the password configuration of the second ONU is required currently; the above determination may be performed by the second ONU, may be performed by the backup device, or may be performed by a separate control device:
(1) when the backup device performs the determination, the backup device receives the password currently configured on the second ONU, and compares the password with the password stored in the backup device, and accordingly, the specific implementation of step 602 is:
after judging that the passwords are inconsistent, the backup equipment sends the stored passwords to the second ONU, and the second ONU configures the received passwords on the second ONU;
(2) when the second ONU performs the determination, the second ONU acquires the password saved by the backup device from the backup device, and compares the password with the password currently configured by the second ONU, and accordingly, the specific implementation of step 602 is:
the second ONU sends the comparison result to the backup device, the backup device sends the password stored by the backup device to the second ONU after knowing that the password stored by the backup device is inconsistent with the password currently configured by the second ONU according to the comparison result, and the second ONU configures the received password on the second ONU;
(3) when the single device executes the judgment, the single device acquires the currently configured password from the second ONU after detecting that the second ONU is currently configured with the password, acquires the password stored by the backup device from the backup device, and compares the two passwords to obtain a comparison result; correspondingly, the specific implementation of step 602 may be:
the single equipment sends the comparison result to the backup equipment, the backup equipment sends the stored password to the second ONU after knowing that the stored password is inconsistent with the password currently configured by the second ONU according to the comparison result, and the second ONU configures the received password on the second ONU; or,
the single equipment sends the comparison result to the second ONU, the ONU learns that password updating is needed according to the comparison result, obtains the password stored by the backup equipment from the backup equipment and configures the password on the second ONU; or,
and the independent equipment acquires that the password of the second ONU needs to be updated according to the comparison result, and directly configures the password acquired from the backup equipment on the second ONU.
Also, in the method for configuring a password, the backup device may be a CPE corresponding to the first ONU, another ONU device having a backup relationship with the first ONU device, or a backup device corresponding to the ONU device having a backup relationship with the first ONU device, or an independent device having a backup function, such as a PC or a set-top box, may also be used as the backup device, without affecting the implementation of the embodiment of the present invention.
In the above embodiments, the ONU is taken as an example to be described as the optical network user side device, and in other embodiments of the present invention, the ONT that is also the optical network user side device may be used instead of the ONU, which does not affect the implementation of the embodiment of the present invention.
Secondly, the device for realizing password backup and configuration:
an embodiment of the present invention provides an apparatus for implementing password backup, where the apparatus corresponds to the backup device, and referring to fig. 7, the apparatus includes:
a password backup unit 701 configured to backup a password configured on the first ONU;
a backup password providing unit 702 for: and after the first ONU is replaced by a second ONU, providing the password backed up by the password backup unit to the second ONU when the password configuration of the second ONU is determined to be required.
In combination with the case that the passwords are not consistent as described in the above scenario one and scenario two, in a preferred embodiment of the present invention, the apparatus for implementing password backup may further include:
and the password clearing unit is used for clearing the current backup password of the password backup unit after receiving the password clearing instruction sent by the first ONU.
Alternatively, the following method can be adopted to solve the problem caused by inconsistent passwords: the password backup unit 701 includes:
the coverage instruction receiving unit is used for receiving the password coverage instruction sent by the first ONU;
a password override unit to: and according to the password covering instruction, forcibly covering the old password stored on the first ONU by adopting the password configured on the first ONU.
In this embodiment, the device for implementing password backup may be: the CPE corresponding to the first ONU, the other ONU device having the backup relationship with the first ONU device, or the backup device corresponding to the ONU device having the backup relationship with the first ONU device, and of course, an independent device having a backup function, such as a PC or a set-top box, may also be used as the backup device, without affecting the implementation of the embodiment of the present invention.
(ii) an embodiment of the present invention further provides a device for implementing password configuration, where the device may correspond to the optical network user side device, and refer to fig. 8, the device includes:
a judging unit 801, configured to: after a second ONU is adopted to replace a first ONU, judging whether password configuration needs to be carried out on the second ONU or not;
a configuration unit 802, configured to configure, when the determining unit 801 determines that password configuration is currently required, a password stored on the backup device corresponding to the first ONU on the second ONU.
In the scenario described in the foregoing method embodiment, the determining unit 801 may also have different implementations, and corresponding to scenario 1, the determining unit 801 includes:
the password detection unit is used for judging whether the second ONU is configured with a password or not, and if not, judging that the password configuration of the second ONU is required currently;
a judgment result notification unit, configured to notify the configuration unit 802 of the detection result of the password detection unit.
Corresponding to scenario 2, the determining unit 801 may specifically include:
the password comparison unit is used for comparing the password acquired from the backup equipment with the password configured on the second ONU equipment, and if the comparison result is inconsistent, the password configuration of the second ONU is judged to be required;
a determination result notification unit configured to notify the configuration unit 802 of a detection result of the password comparison unit.
The device for realizing the password configuration can be the ONU, the backup device or the independent device, and the implementation of the embodiment of the invention is not influenced.
Thirdly, the system for realizing the password configuration:
corresponding to the above method, an embodiment of the present invention further provides a system for implementing password configuration, and referring to fig. 9, the system includes:
the backup device 902 is configured to backup the password configured on the first onu, and provide the backed-up password for the second onu when the second onu is determined to be required to perform password configuration after the first onu is replaced with the second onu;
a second optical network user side device 901, configured to: configuring the password provided by the backup device on itself.
In this embodiment, the backup device may be a CPE corresponding to the first ONU, another ONU device having a backup relationship with the first ONU device, or a backup device corresponding to the ONU device having a backup relationship with the first ONU device, or an independent device having a backup function, such as a PC or a set-top box, may also be used as the backup device, without affecting the implementation of the embodiment of the present invention.
In this embodiment, an ONU is taken as an example to describe the ONU as the optical network user side device, and in other embodiments of the present invention, an ONT that is also the optical network user side device may be used instead of the ONU, which does not affect the implementation of the embodiment of the present invention.
Fourthly, the method and the system for realizing the password configuration:
in the preferred embodiment of the present invention, the above-mentioned password backup and configuration processes are considered comprehensively, and referring to fig. 10, the method for configuring a password provided in this embodiment includes:
step 1001: judging whether the ONU and the backup equipment corresponding to the ONU have consistent passwords or not, if so, ending the process, otherwise, executing a subsequent step 1002;
step 1002: and password transmission is carried out between the ONU and the backup device, and the same password is configured on the ONU and the backup device by utilizing the password transmission.
The above method is described in detail with reference to a specific example, and referring to fig. 11, the method for implementing password configuration provided in this embodiment includes:
step 1101: after the backup device is powered on and started, judging whether a password stored in the backup device is null, if so, executing a step 1102, otherwise, executing a step 1106; in the step, if no feedback of whether the password is empty is obtained, whether the time for detecting the password is overtime is judged, if not, the step 1101 is returned, whether the password is empty is continuously judged, and if not, the detection overtime error is reported;
step 1102: the backup equipment sends a password obtaining request to the ONU corresponding to the backup equipment, and in the embodiment of the invention, HTTP GET password information in an HTTP protocol is adopted to send the password obtaining request;
step 1103: after receiving the password acquisition request, the ONU judges whether the configured password is empty, if so, returns an error message to prompt the user that no available password exists currently and can further prompt the user to input a corresponding password; otherwise, go to step 1104; in the embodiment of the present invention, the error message is an HTTP 404 message in an HTTP protocol;
step 1104: since it is determined in step 1103 that the password is currently configured in the ONU, in this step, the password is sent to the backup device to implement password backup; in the embodiment of the invention, the password is sent by adopting HTTP POST password message of HTTP protocol;
step 1105: after receiving the password sent by the ONU, the backup device stores the password to realize password backup;
step 1106: since it is determined in step 1101 that the password of the backup device is not null, in this step, the backup device sends its own password to the ONU; in the embodiment of the invention, an HTTP POST password message in an HTTP protocol is adopted to send the password;
step 1107: after receiving the password sent by the backup device, the ONU determines whether the password stored by the ONU is empty, if so, performs step 1108 to complete password configuration for the ONU, otherwise, performs step 1109 to perform mutual verification of the password, and performs corresponding operation according to the verification result;
step 1108: the ONU judges that the password of the ONU is null, so the ONU configures the password transmitted from the backup equipment on the ONU, and the password configuration process is completed; further, after the secret code configuration process is performed, the ONU may further return a configuration success message to inform the user that the current configuration is successful; in the specific embodiment of the invention, an HTTP/1.1200OK message is adopted as the configuration success message;
step 1109: the ONU judges whether the password sent by the backup equipment is consistent with the password currently configured on the ONU per se, and if so, the ONU directly returns a configuration success message; otherwise, according to the needs of different scenes, the password configured on the ONU is adopted to cover the password on the backup device to complete password backup, or the password configured on the ONU is adopted to cover the password on the backup device to complete password configuration.
In the above specific examples, messages in the HTTP protocol are used for password transmission or corresponding response messages are returned, and in other embodiments of the present invention, messages in other protocols may also be used without affecting the implementation of the embodiments of the present invention, specifically, Return OK messages may be used instead of the HTTP/1.1200OK messages, and Return wreng messages may be used instead of the HTTP 404 messages.
Corresponding to the above method, an embodiment of the present invention further provides a system for implementing password configuration, where the system includes an ONU, a backup device, and a determination device, where:
the ONU is configured to: providing the password configuration result of the user to the judgment device;
the backup device is configured to: saving the password and providing the password saving result to the judging device;
the judgment device is configured to: judging whether the ONU and the backup equipment corresponding to the ONU have consistent passwords or not according to a password configuration result provided by the ONU and a password storage result provided by the backup equipment;
and after the judging device judges that the ONU and the backup device corresponding to the ONU do not have consistent passwords, password transmission is carried out between the ONU device and the backup device, and the same passwords are configured on the ONU and the backup device by using the password transmission.
In the embodiment of the system, the determining device may be located on the ONU, may be located on the backup device, or may be a separate device, which does not affect the implementation of the embodiment of the present invention. In addition, the backup device may be a CPE corresponding to the ONU, another ONU device having a backup relationship with the ONU, or a backup device corresponding to the ONU device having a backup relationship with the ONU device, and of course, an independent device having a backup function, such as a PC or a set-top box, may also be used as the backup device, without affecting the implementation of the embodiment of the present invention.
In the above embodiments, the ONU is taken as an example to be described as the optical network user side device, and in other embodiments of the present invention, the ONT that is also the optical network user side device may be used instead of the ONU, which does not affect the implementation of the embodiments of the present invention.
The foregoing is only a preferred embodiment of the present invention, and it should be noted that, for those skilled in the art, various modifications and decorations can be made without departing from the principle of the present invention, and these modifications and decorations should also be regarded as the protection scope of the present invention.

Claims (23)

1. A method for implementing a cryptographic configuration, the method comprising:
configuring a password distributed for a user on first optical network user side equipment, and backing up the password on backup equipment corresponding to the first optical network user side equipment;
after the first optical network user side equipment is replaced by second optical network user side equipment, whether password configuration needs to be carried out on the second optical network user side equipment is judged, and if yes, a password stored on the backup equipment corresponding to the first optical network user side equipment is configured on the second optical network user side equipment.
2. The method according to claim 1, wherein the specific implementation of assigning the password to the user is:
after the user applies for opening the service, distributing a corresponding password for the user according to the application information of the user; or,
and after the password is changed by the current trigger, distributing a new password for the user.
3. The method according to claim 1, wherein the specific implementation of the backup of the password on the backup device corresponding to the first onu is as follows:
and the first optical network user side equipment sends a password covering instruction to the backup equipment, and the backup equipment adopts the password configured on the first optical network user side equipment to cover the old password stored on the backup equipment after receiving the instruction.
4. The method of claim 1, wherein backing up the password on the backup device corresponding to the first onu further comprises:
and the first optical network user side equipment sends a password clearing instruction to the backup equipment, and the backup equipment forcibly clears the old password stored in the backup equipment after receiving the password clearing instruction.
5. The method according to claim 1, wherein the specific implementation of the determining whether the password configuration needs to be performed on the second onu user side device is as follows:
judging whether the second optical network user side equipment is not configured with a password; or,
and judging whether the password configured on the second optical network user side equipment is inconsistent with the password stored on the backup equipment.
6. The method according to any one of claims 1 to 5, wherein the backup device is:
the customer premises equipment CPE corresponding to the first optical network user side equipment, other user side equipment with backup relation with the first optical network user side equipment, backup equipment corresponding to other user side equipment with backup relation with the first optical network user side equipment, or independent equipment with backup function;
the optical network user side equipment comprises: an optical network unit ONU or an optical network terminal ONT.
7. The method of claim 6, wherein the standalone device is a personal computer or a set-top box.
8. An apparatus for implementing a password backup, the apparatus comprising:
the password backup unit is used for backing up the password configured on the first optical network user side equipment;
a backup password providing unit for: after the first optical network user side equipment is replaced by second optical network user side equipment, when the password configuration needs to be carried out on the second optical network user side equipment, the password backed up by the password backup unit is provided for the second optical network user side equipment.
9. The apparatus of claim 8, wherein the cryptographic backup unit comprises:
the coverage instruction receiving unit is used for receiving a password coverage instruction sent by the first optical network user side equipment;
a password override unit to: and according to the password override instruction, overriding the old password stored in the device by using the password configured on the first optical network user side equipment.
10. The apparatus of claim 8, further comprising:
and the password clearing unit is used for clearing the current backup password of the password backup unit after receiving a password clearing instruction sent by the first optical network user side equipment.
11. The device according to any one of claims 8 to 10, wherein the device for realizing password backup is:
the customer premises equipment CPE corresponding to the first optical network user side equipment, other user side equipment with backup relation with the first optical network user side equipment, backup equipment corresponding to other user side equipment with backup relation with the first optical network user side equipment, or independent equipment with backup function.
12. The apparatus of claim 11, wherein the standalone device is a personal computer or a set-top box.
13. An apparatus for implementing a cryptographic configuration, the apparatus comprising:
a determination unit configured to: after a first optical network user side device is replaced by a second optical network user side device, judging whether password configuration needs to be carried out on the second optical network user side device or not;
and the configuration unit is used for configuring the password stored on the backup equipment corresponding to the first optical network user side equipment on the second optical network user side equipment when the judgment unit judges that the password configuration is required currently.
14. The apparatus according to claim 13, wherein the judging unit includes:
the password detection unit is used for judging whether the second optical network user side equipment is configured with a password or not, and if not, judging that the password configuration of the second optical network user side equipment is required currently;
and the judgment result notification unit is used for notifying the configuration unit of the detection result of the password detection unit.
15. The apparatus according to any one of claims 13 to 14, wherein the apparatus for implementing password configuration is the onu itself, the backup device, or an independent device.
16. A system for implementing a cryptographic configuration, the system comprising:
the backup device is used for backing up the password configured on the first optical network user side device on the backup device, and providing the backed-up password for the second optical network user side device when the password configuration of the second optical network user side device is needed after the first optical network user side device is replaced by the second optical network user side device and is judged;
a second optical network user side device, configured to: configuring the password provided by the backup device on itself.
17. The system of claim 16, wherein the backup device is:
the backup device comprises Customer Premises Equipment (CPE) corresponding to the first customer side equipment, other customer side equipment having a backup relationship with the first customer side equipment, backup equipment corresponding to the other customer side equipment having the backup relationship with the first customer side equipment, or independent equipment having a backup function.
18. The system according to claim 16, wherein the optical network user side device is: an optical network unit ONU or an optical network terminal ONT.
19. A method for implementing a cryptographic configuration, the method comprising:
judging whether the optical network user side equipment and the backup equipment corresponding to the user side equipment have consistent passwords or not, if so, ending the process, otherwise, executing the subsequent steps;
and password transmission is carried out between the optical network user side equipment and the backup equipment, and the same password is configured on the optical network user side equipment and the backup equipment by using the password transmission.
20. The method of claim 19, wherein the determining is implemented as:
judging whether the password is not configured or stored on the optical network user side equipment or the backup equipment, if so, judging that the password which is not consistent between the optical network user side equipment and the backup equipment is not obtained; or,
and judging whether the password configured on the optical network user side equipment is consistent with the password stored in the backup equipment.
21. The method according to claim 19, wherein the configuring the same password on the optical network user side device and the backup device is implemented as follows:
covering the password on the backup equipment by using the password configured by the optical network user side equipment; or,
and covering the configured password on the optical network user side equipment by using the password on the backup equipment.
22. A system for realizing password configuration is characterized in that the system comprises optical network user side equipment, backup equipment and judgment equipment, wherein:
the optical network user side equipment is used for: providing the password configuration result of the user to the judgment device;
the backup device is configured to: saving the password and providing the password saving result to the judging device;
the judgment device is configured to: judging whether the optical network user side equipment and the backup equipment corresponding to the user side equipment have consistent passwords or not according to a password configuration result provided by the optical network user side equipment and a password storage result provided by the backup equipment;
after the judging device judges that the optical network user side device and the backup device corresponding to the user side device do not have the consistent password, password transmission is carried out between the optical network user side device and the backup device, and the same password is configured on the optical network user side device and the backup device by using the password transmission.
23. The system of claim 22, wherein the backup device is:
customer Premises Equipment (CPE) corresponding to the user side equipment, other user side equipment with backup relation with the user side equipment, backup equipment corresponding to other user side equipment with backup relation with the user side equipment, or independent equipment with backup function;
the optical network user side equipment comprises: an optical network unit ONU or an optical network terminal ONT.
CNA2007101681861A 2007-11-28 2007-11-28 Method and system for realizing password configuration and device for realizing password backup and configuration Pending CN101447864A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CNA2007101681861A CN101447864A (en) 2007-11-28 2007-11-28 Method and system for realizing password configuration and device for realizing password backup and configuration
PCT/CN2008/073199 WO2009074060A1 (en) 2007-11-28 2008-11-26 Method and system for password configuration and apparatus for password backup and configuration

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNA2007101681861A CN101447864A (en) 2007-11-28 2007-11-28 Method and system for realizing password configuration and device for realizing password backup and configuration

Publications (1)

Publication Number Publication Date
CN101447864A true CN101447864A (en) 2009-06-03

Family

ID=40743289

Family Applications (1)

Application Number Title Priority Date Filing Date
CNA2007101681861A Pending CN101447864A (en) 2007-11-28 2007-11-28 Method and system for realizing password configuration and device for realizing password backup and configuration

Country Status (2)

Country Link
CN (1) CN101447864A (en)
WO (1) WO2009074060A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108418720A (en) * 2018-04-24 2018-08-17 深圳市菲菱科思通信技术股份有限公司 A kind of restoration methods, device and the routing device of routing device configuration information
CN109088885A (en) * 2018-09-28 2018-12-25 四川天邑康和通信股份有限公司 A kind of method that passive optical network OLT local side node modifies authentication information automatically

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR100594024B1 (en) * 2003-03-10 2006-07-03 삼성전자주식회사 Authentication Method And Apparatus in Ethernet Passive Optical Network
CN100488120C (en) * 2006-09-06 2009-05-13 华为技术有限公司 Method for managing optical network with no source
CN1968089A (en) * 2006-09-29 2007-05-23 华为技术有限公司 Subscriber authentication method for passive optical network

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108418720A (en) * 2018-04-24 2018-08-17 深圳市菲菱科思通信技术股份有限公司 A kind of restoration methods, device and the routing device of routing device configuration information
CN109088885A (en) * 2018-09-28 2018-12-25 四川天邑康和通信股份有限公司 A kind of method that passive optical network OLT local side node modifies authentication information automatically

Also Published As

Publication number Publication date
WO2009074060A1 (en) 2009-06-18

Similar Documents

Publication Publication Date Title
US7873276B2 (en) System and method for registration of network units
KR101425002B1 (en) Remote activation of home devices
CN102739426B (en) DPOE system and service auto-configuration method and network based on DPOE system
CN101729948A (en) Remote upgrading method and system
EP3128698B1 (en) Service processing method and apparatus and optical line terminal
US20080002718A1 (en) Method and apparatus to restore default settings in an Optical Network Terminal (ONT)
CN103378979A (en) Passive optical network management method, device and system
CN101729947A (en) Method for downloading update version and system thereof
US9413829B2 (en) Method for efficient initialization of a telecommunications network and telecommunications network
CN101212346B (en) Software version management method and device for network element management system
JP5105942B2 (en) ONU automatic registration method
EP2666259B1 (en) Service activation in a passive optical network (pon)
CN112929387B (en) Broadband network multiple authentication and encryption method applied to intelligent community
CN101447864A (en) Method and system for realizing password configuration and device for realizing password backup and configuration
EP2403216B1 (en) Method for installation of an application
US20150288683A1 (en) Method, device, and system for authentication
CN113872789A (en) Method for opening ONU service, electronic equipment and storage medium
CN102655459A (en) Configuration data updating method and system of optical network unit (ONU)
KR100495330B1 (en) System and method for managing and controlling of ethernet passive optical access network
CN100589387C (en) Method and system for managing equipment administrator information
EP3826234B1 (en) Method for operation of a broadband access network of a telecommunications network and/or for assignment and/or installation of cable modem devices to be used with a hybrid fiber coaxial network part of the broadband access network, telecommunications network, system, program and computer program product
EP3197096B1 (en) Utilizing interfaces of a network access device
CN112601141B (en) Ethernet Passive Optical Network (EPON)/Gigabit Passive Optical Network (GPON) local side equipment network engineering cut-over method
EP3633946B1 (en) Method and systems for associating subscriber identification information with a residential gateway identifier
CN102130814A (en) Method for configuring user access information, network element (NE) device and server

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20090603