WO2014075266A1

WO2014075266A1 - Authentication method, apparatus and system

Info

Publication number: WO2014075266A1
Application number: PCT/CN2012/084674
Authority: WO
Inventors: 张群
Original assignee: 华为技术有限公司
Priority date: 2012-11-15
Filing date: 2012-11-15
Publication date: 2014-05-22
Also published as: CN103222249A; CN103222249B

Abstract

Embodiments of the present invention relate to the technical field of communications, provide an authentication method, an apparatus and a system, and solve a problem that when a terminal is replaced, physical identification information of the terminal after replacement may change accordingly, an authentication device needs to authenticate the terminal after replacement, and a process is complicated, which increases burden of the system and reduces performance of the system. The concrete steps can comprise: a terminal device sending an authentication request to an office end device through an intermediate device; the terminal device receiving an authentication response sent by the office end device through the intermediate device, and the authentication response is a response returned by the office end device after authenticating the terminal device according to the authentication request. The present invention can apply to a process of authenticating the terminal.

Description

Authentication method, device and system

The present invention relates to the field of communications technologies, and in particular, to an authentication method, apparatus, and system.

Background technique

In a P2MP system, the authentication device needs to authenticate at least two terminals, and the terminal device can communicate only after the authentication is passed.

The method for the authentication device to authenticate the terminal device may include:

1. The terminal device sends the physical identification information of the device to the authentication device. The physical identifier information may be, but not limited to: ( Serial Number, serial number 'J number) or MAC (Media Access Controller layer) address, etc. ; Among them, SN is used in GPON (Gigabi t_capable Passive Optical Networks), in EPON

The MAC address is used in the Ethernet Passive Optical Network (Ethernet Passive Optical Network);

2. The authentication device authenticates the terminal according to the received physical identification information.

When the terminal is replaced, the physical identification information of the replaced terminal may change. The authentication device also needs to authenticate the replaced terminal. The process is cumbersome, which increases the burden on the system and reduces the performance of the system.

Summary of the invention

The embodiment of the present invention provides an authentication method, device, and system, which solves the problem that when the terminal is replaced, the physical identification information of the replaced terminal may change accordingly, and the authentication device needs to perform authentication on the replaced terminal. The cumbersomeness increases the burden on the system, which in turn reduces the performance of the system.

In order to achieve the above object, the embodiment of the present invention adopts the following technical solutions:

The first aspect provides an authentication method, where the authentication method is applied to a point-to-multipoint system, including: a central office device, an intermediate device, and at least one terminal device; At least one terminal device is connected, and the central office device passes the backbone physical The method is connected to the intermediate device, and the intermediate device is connected to the at least one terminal device by using a plurality of branch physical lines, wherein the method includes:

The terminal device sends an authentication request to the central office device by using the intermediate device, where the authentication request includes a physical line identifier of a branch physical line where the terminal device is located, and a physical line identifier of the branch physical line is used for unique Identifying the branch physical line;

The terminal device receives an authentication response sent by the central office device by using the intermediate device, where the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

In a first possible implementation manner, the method further includes:

The terminal device acquires a physical line identifier of the branch physical line;

The terminal device sends the physical line identifier of the branch physical line to the central office device.

With reference to the first aspect, in a second possible implementation manner, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify the central office device and a trunk physical line between the intermediate devices, the intermediate device identifier for uniquely identifying the intermediate device.

In a second aspect, an authentication method is provided, where the authentication method is applied to a point-to-multipoint system, including: a central office device, an intermediate device, and at least one terminal device; The at least one terminal device is connected to the intermediate device, and the intermediate device is connected to the at least one terminal device through a plurality of branch physical lines, wherein the The methods include:

The central office device receives an authentication request sent by the terminal device by using the intermediate device, where the authentication request includes a physical line identifier of a branch physical line where the terminal device is located, and a physical line identifier of the branch physical line is used for Uniquely identifying the branch physical line;

The central office device authenticates the terminal device according to the physical line identifier of the branch physical line, and returns an authentication response to the terminal device by using the intermediate device.

In a first possible implementation manner, the authentication method further includes: The central office device receives the physical line identifier of the branch physical line sent by the terminal device and stores the physical line identifier.

With reference to the first possible implementation of the second aspect, in a second possible implementation manner, the determining, by the central office device, the device identifier according to the physical line identifier of the branch physical line, specifically includes:

Determining, by the central office device, whether the physical line identifier in the authentication request is the same as the physical line identifier of the stored branch physical line;

If they are the same, the authentication passes; otherwise, the authentication fails.

With reference to the second aspect, in a third possible implementation manner, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify the central office device and a trunk physical line between the intermediate devices, the intermediate device identifier for uniquely identifying the intermediate device.

In a third aspect, a terminal device is provided, including:

a first sending unit, configured to send, by using the intermediate device, an authentication request to the central office device, where the authentication request includes a physical line identifier of a branch physical line where the terminal device is located, and a physical line identifier of the branch physical line And the first receiving unit is configured to receive an authentication response that is sent by the central office device by using the intermediate device, where the authentication response is that the central office device is configured according to the authentication request. The response returned by the terminal device after authentication.

In a first possible implementation manner, the terminal device further includes:

An acquiring unit, configured to acquire a physical line identifier of the branch physical line;

The first sending unit is further configured to send the physical line identifier of the branch physical line to the central office device.

With reference to the third aspect, in a second possible implementation manner, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify the central office device and a trunk physical line between the intermediate devices, the intermediate device identifier for uniquely identifying the intermediate device. The fourth aspect provides a central office device, including:

a second receiving unit, configured to receive, by using the intermediate device, an authentication request sent by the terminal device, where the authentication request includes a physical line identifier of a branch physical line where the terminal device is located, where the physical line identifier of the branch physical line is used The processing unit is configured to authenticate the terminal device according to the physical line identifier of the branch physical line, and return an authentication response to the terminal device by using the intermediate device.

In a first possible implementation manner, the second receiving unit is further configured to receive and store a physical line identifier of the branch physical line sent by the terminal device.

With reference to the first possible implementation manner of the fourth aspect, in a second possible implementation manner, the processing unit is specifically configured to determine a physical line identifier in the authentication request and the stored branch physical line Whether the physical line identifiers are the same;

With reference to the fourth aspect, in a third possible implementation manner, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify the central office device and a trunk physical line between the intermediate devices, the intermediate device identifier for uniquely identifying the intermediate device.

In a fifth aspect, an authentication system is provided, including:

a central office device, an intermediate device, and at least one terminal device; the central office device is connected to the at least one terminal device by using the intermediate device, and the central office device is connected to the intermediate device by using a trunk physical line. The intermediate device is connected to the at least one terminal device by using a plurality of branch physical lines, wherein the terminal device is the terminal device provided above, and the central office device is the central office device provided above.

After the foregoing method is adopted, the terminal device sends an authentication request to the central office device through the intermediate device, and the terminal device receives the authentication response sent by the central office device through the intermediate device, and the authentication response is the central office end. The response returned by the device after authenticating the terminal device according to the authentication request. In this way, when the terminal device is replaced, the central office device is authenticated according to the corresponding physical line identifier, and is connected between the central office device and the terminal device. The physical line is not replaced. Therefore, the central office device does not need to authenticate the replaced terminal device, which avoids the authentication of the updated terminal device, reduces the burden on the system, and increases the performance of the system.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the embodiments will be briefly described below. Obviously, the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without paying creative labor.

FIG. 1 is a schematic structural diagram of an authentication system according to an embodiment of the present disclosure;

2 is a flow chart of an authentication method using a terminal device as an execution subject according to the embodiment;

FIG. 3 is a flow chart of an authentication method using a central office device as an execution subject according to the embodiment;

4 is a flowchart of an authentication method provided by this embodiment;

FIG. 5 is a schematic structural diagram of another authentication system according to the embodiment;

FIG. 6 is a flowchart of an authentication method applied to an optical network system according to an embodiment of the present invention; FIG. 7 is a schematic structural diagram of a terminal device according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of another terminal device according to the embodiment;

FIG. 9 is a schematic structural diagram of a central office device according to an embodiment of the present disclosure.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The embodiment provides an authentication method, which can be applied to a P2MP point-to-multipoint system. As shown in FIG. 1, the method can include: a central office device, an intermediate device, and at least one terminal device; The intermediate device is connected to the at least one terminal device through the intermediate device, and the central office device is connected to the intermediate device through the trunk physical line, and the intermediate device is respectively connected to the at least one terminal device through multiple branch physical lines; the execution body of the method may be the terminal device As shown in Figure 2, it can include:

The terminal device sends an authentication request to the central office device through the intermediate device, where the authentication request includes the physical line identifier of the branch physical line where the terminal device is located, and the physical line identifier of the branch physical line is used to uniquely identify the branch physical line.

2 02. The terminal device receives the authentication response sent by the central office device through the intermediate device, and the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

The present embodiment is not limited to the functions of the P2MP and the intermediate device. For example, the intermediate device may be, but not limited to, used for splitting, and details are not described herein again.

After the foregoing solution, the terminal device sends an authentication request to the central office device through the intermediate device; the terminal device receives the authentication response sent by the central office device through the intermediate device, and the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request. . In this way, when the terminal device is replaced, since the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced, the central office device does not need to be replaced. After the terminal device is authenticated, the authentication of the updated terminal device is avoided, the burden on the system is reduced, and the performance of the system is increased.

This embodiment provides another authentication method, which can be applied to a P 2MP point-to-multipoint system. As shown in FIG. 1 , the method may include: a central office device, an intermediate device, and at least one terminal device; The at least one terminal device is connected, and the central office device is connected to the intermediate device through the trunk physical line, and the intermediate device is connected to the at least one terminal device through multiple branch physical lines. The execution body of the method may be the central office device, as shown in the figure. As shown in 3, it can include:

3: The central office device receives the authentication request sent by the terminal device by using the intermediate device, where the authentication request includes the physical line identifier of the branch physical line where the terminal device is located, and the physical line identifier of the branch physical line is used to uniquely identify the branch physical line. 302. The central office device authenticates the terminal device according to the physical line identifier of the branch physical line, and returns an authentication response to the terminal device by using the intermediate device.

After the foregoing solution is adopted, the central office device receives the authentication request sent by the terminal device through the intermediate device; the central office device authenticates the terminal device according to the physical line identifier of the branch physical line, and returns an authentication response to the terminal device through the intermediate device. In this way, when the terminal device is replaced, the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced. Therefore, the central office device does not need to be replaced. The latter terminal device performs authentication, which avoids the authentication of the updated terminal device, reduces the burden on the system, and further increases the performance of the system.

This embodiment provides another authentication method, which is a further extension of the method shown in FIG. 2 and FIG. 3. As shown in FIG. 4, the method may include:

401. The terminal device sends an authentication request to the central office device by using the intermediate device.

The authentication request may include, but is not limited to, the physical line identifier of the branch physical line where the terminal device is located, and the physical line identifier of the branch physical line is used to uniquely identify the branch physical line. The authentication request may further include: service information required by the terminal device, and the terminal device The identity of the terminal device, etc.

In this embodiment, the content included in the authentication request is not limited, and may be set according to actual needs, and details are not described herein again.

Before the terminal device sends the authentication request, the terminal device also needs to obtain the physical line identifier of the branch physical line, and the terminal device sends the physical line identifier of the branch physical line to the central office device.

Further, the branch physical line may be, but not limited to, a branch fiber, and the physical line identifier may be, but not limited to, a fiber identifier.

In this case, as an implementation manner of the embodiment, the physical line identifier of the branch physical line where the terminal device obtains may include: after the terminal device is connected to the branch fiber, the branch fiber may be obtained from the connected branch fiber. Logo.

Different optical fibers can be set with different optical transmission parameters, so that data can be transmitted through different optical fibers. Different ways, therefore, different optical fibers can be distinguished according to optical transmission parameters; in addition, different optical fiber IDs are different, and different optical fibers can be distinguished according to optical fiber IDs.

As an implementation manner of this embodiment, the branch fiber identifier may be, but not limited to, a light transmission parameter when transmitting the authentication request, or a branch fiber ID that is a transmission authentication request. The terminal device can obtain the encoded information from the branch fiber plug, and the coded information is the branch light If I D .

The method for obtaining the optical conduction parameter and the branch fiber I D of the terminal is not limited in this embodiment, and is a technology well known to those skilled in the art, and details are not described herein again.

In this embodiment, the branch fiber identifier is not limited, and may be set according to actual needs, and details are not described herein again.

Further, after the terminal device obtains the branch fiber identifier, the terminal device may also send the branch fiber identifier to the central office device for storage by the central office device.

Further, the authentication request may further include, but is not limited to: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify a trunk physical line between the central office device and the intermediate device, and the intermediate device identifier is used for Uniquely identifies the intermediate device.

As an embodiment of the present embodiment, the trunk physical line may be, but not limited to, a trunk fiber. The physical line identifier of the trunk physical line may also be, but not limited to, an optical fiber ID, or a light transmission parameter of the backbone fiber.

As an implementation manner of this embodiment, the terminal device sending the authentication request to the central office device by using the intermediate device may include, but is not limited to:: when the terminal device is connected to the optical fiber, the terminal device is actively triggered to send an authentication request to the central office device; or After the terminal device is connected to the optical fiber and starts an authentication procedure, the terminal device is triggered to send an authentication request to the central office device.

402. The central office device receives an authentication request sent by the terminal device by using the intermediate device.

403. The central office device authenticates the terminal device according to the physical line identifier of the branch physical line.

As an implementation manner of this embodiment, the central office device may further include, according to the physical line identifier of the branch physical line, the terminal device, including but not limited to: The central office device determines whether the physical line identifier in the authentication request is the same as the physical line identifier of the stored branch physical line; if the same, the authentication passes; otherwise, the authentication fails.

The physical line identifier of the stored branch physical line may be stored by the terminal device after being sent to the central office device after acquiring the physical line identifier of the branch physical line.

In this embodiment, the method for authenticating the terminal device by the central office device is not limited, and is a technology well known to those skilled in the art, and may be set according to actual needs, and details are not described herein again.

Further, if the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, the central office device may be based on the physical line identifier of the branch physical line, the physical line identifier of the trunk physical line, or the intermediate device identifier pair. The terminal device performs authentication.

In this embodiment, the method for authenticating the terminal device by the central office device is not limited, and is a technology that is well known to those skilled in the art, and may be set according to actual needs, and details are not described herein again.

404. The central office device sends an authentication response to the terminal device by using the intermediate device.

When the authentication response received by the terminal device is used to describe whether the terminal device passes the authentication, if the authentication is passed, the terminal starts to communicate; when the authentication response received by the terminal device is used to describe the failed authentication, the terminal device may be, but is not limited to, Send an authentication request to the central office device.

As an embodiment of the present embodiment, when the terminal device connected to a branch physical line is replaced, the central office device detects the physical line identifier that is included in the received authentication request sent by the updated terminal device and transmits the authentication request. If the authentication has passed, the authentication response is successfully sent to the terminal device to describe the authentication success. If the authentication fails, the updated terminal device is authenticated according to the physical line identifier included in the authentication request, and sent. Certification response.

The method for authenticating the terminal device by the central office device is not limited in this embodiment, and is a technology well known to those skilled in the art, and details are not described herein again.

After the foregoing solution, the terminal device sends an authentication request to the central office device through the intermediate device; the terminal device receives the authentication response sent by the central office device through the intermediate device, and the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request. . In this way, when the terminal device is replaced, since the central office device is authenticated according to the corresponding physical line identifier, and The physical line between the receiving end device and the terminal device is not replaced. Therefore, the central office device does not need to authenticate the replaced terminal device, thereby avoiding the authentication of the updated terminal device, thereby reducing the burden on the system, thereby increasing the burden. System performance.

Further, the terminal device may be an optical network unit (Optical Network Unit), the central office device may be an optical line terminal (OLT), and the intermediate device may be a splitter.

The embodiment provides an authentication method, which may be, but is not limited to, being applied to an optical network system. As shown in FIG. 5, the optical network system includes: at least one ONU optical access terminal device, 0LT optical access head end device, and optical splitter; The 0LT is connected to the optical splitter through the main fiber, and the optical splitter is respectively connected to the at least one ONU through the plurality of branch fibers, wherein the main fiber and the branch fiber are both configured with the optical fiber identifier; as shown in FIG. 6, the method includes :

601, 0 sends an authentication request to the 0LT through the optical splitter, and the authentication request includes the optical fiber identifier of the backbone fiber and the branch fiber for transmitting the authentication request;

602, 0LT receives an authentication request sent by the optical splitter, and the authentication request includes a fiber identifier of the backbone fiber and the branch fiber for transmitting the authentication request;

603. Perform authentication on the 0NU according to the fiber identifiers of the trunk fiber and the branch fiber according to the corresponding transmission authentication request.

604. Send an authentication response to the 0NU through the optical splitter.

605. Receive an authentication response sent by the 0LT through the optical splitter.

The optical network system and the optical splitter are not limited in this embodiment, and are well known to those skilled in the art, and are not described herein again.

Here are some specific scenarios to illustrate.

As shown in Figure 5, 0LT is connected to six 0NUs. Each trunk fiber is used to connect three branch fibers through a splitter, and each branch fiber is used to connect a volume.

Further, optionally, there is no backbone fiber between the 0 volume and the 0LT, and only the branch fibers are directly connected.

As an implementation manner of this embodiment, taking 0NU1 as an example, the specific steps of the authentication may be To include:

0NU 1 sends an authentication request to the OLT through the branch fiber 1 and the backbone fiber 1. The authentication request includes the fiber identifiers of the branch fiber 1 and the backbone fiber 1; 0LT authenticates the ONU 1 according to the fiber identifiers of the branch fiber 1 and the backbone fiber 1, and The authentication response is sent to the ONU 1; if the authentication is passed, the ONU 1 can communicate.

In this scenario, since 0LT authenticates 0NU 1 according to the fiber identifiers of branch fiber 1 and trunk fiber 1, when 0NU 1 is replaced with 0NU7, it is transmitted by branch fiber 1 and trunk fiber 1 The authentication request, therefore, 0LT does not need to authenticate to the ONU7, and can directly send an authentication response for the authentication pass to the ONU7.

This embodiment is not limited to the foregoing scenario, and may be applied to other scenarios, and details are not described herein again.

After the above solution is adopted, when the ONU is replaced, the 0LT is authenticated according to the optical fiber identifier of the trunk fiber and the branch fiber according to the corresponding transmission authentication request, and the physical line between the 0LT and the ONU is not replaced. Therefore, the central office device does not need to authenticate the replaced ONU, which avoids the authentication of the updated ONU, reduces the burden on the system, and thus increases the performance of the system.

Some apparatus embodiments are provided below that correspond to the respective method embodiments provided above.

The embodiment provides a terminal device. As shown in FIG. 7, the terminal device may include: a sending unit 7 1 configured to send an authentication request to the central office device by using the intermediate device, where the authentication request includes the physical of the branch physical line where the terminal device is located. The line identifier, the physical line identifier of the branch physical line is used to uniquely identify the branch physical line;

The first receiving unit 72 is configured to receive an authentication response sent by the central office device by using the intermediate device, where the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

After the foregoing solution, the sending unit sends an authentication request to the central office device through the intermediate device; the first receiving unit receives the authentication response sent by the central office device through the intermediate device, and the authentication response is that the central office device performs authentication on the terminal device according to the authentication request, and then returns. the response to. This makes it even more When the terminal device is changed, the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced. Therefore, the central office device does not need to replace the replaced terminal device. By performing authentication, the authentication of the updated terminal device is avoided, the burden on the system is reduced, and the performance of the system is increased.

This embodiment provides another terminal device, which is a further extension of the terminal device shown in FIG. 8. As shown in FIG. 8, the terminal device may include:

The sending unit 81 is configured to send an authentication request to the central office device by using the intermediate device, where the authentication request includes a physical line identifier of the branch physical line where the terminal device is located, and the physical line identifier of the branch physical line is used to uniquely identify the branch physical line;

The first receiving unit 82 is configured to receive an authentication response sent by the central office device by using the intermediate device, where the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

Further, the terminal device further includes:

An obtaining unit 83, configured to acquire a physical line identifier of the branch physical line;

The sending unit 81 is further configured to send the physical line identifier of the branch physical line to the central office device. Further, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify a trunk physical line between the central office device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device. .

After the foregoing solution, the sending unit sends an authentication request to the central office device through the intermediate device; the first receiving unit receives the authentication response sent by the central office device through the intermediate device, and the authentication response is that the central office device performs authentication on the terminal device according to the authentication request, and then returns. the response to. In this way, when the terminal device is replaced, since the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced, the central office device does not need to be replaced. After the terminal device is authenticated, the authentication of the updated terminal device is avoided, the burden on the system is reduced, and the performance of the system is increased.

The embodiment provides a central office device. As shown in FIG. 9, the central office device may include: a second receiving unit 91, configured to receive, by using an intermediate device, an authentication request sent by the terminal device, where the authentication request includes a branch physics where the terminal device is located. Physical line identification of the line, branch physical line The physical line identifier of the road is used to uniquely identify the branch physical line;

The processing unit 92 is configured to perform authentication on the terminal device according to the physical line identifier of the branch physical line, and return an authentication response to the terminal device by using the intermediate device.

Further, the second receiving unit 91 is further configured to receive and store the physical line identifier of the branch physical line sent by the terminal device.

Further, the processing unit 92 is specifically configured to determine whether the physical line identifier in the authentication request is the same as the physical line identifier of the stored branch physical line;

Further, the authentication request further includes: a trunk physical line identifier, and/or an intermediate device identifier, where the trunk physical line identifier is used to uniquely identify a trunk physical line between the central office device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device. .

After the foregoing solution, the second receiving unit receives the authentication request sent by the terminal device by using the intermediate device; the processing unit authenticates the terminal device according to the physical line identifier of the branch physical line, and returns an authentication response to the terminal device by using the intermediate device. In this way, when the terminal device is replaced, since the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced, the central office device does not need to be replaced. After the terminal device is authenticated, the authentication of the updated terminal device is avoided, the burden on the system is reduced, and the performance of the system is increased.

This embodiment provides an authentication system, as shown in FIG. 1, which may include: a central office device 1 2, an intermediate device 1 3, at least one terminal device 1 1;

The central office device 1 2 is connected to the at least one terminal device 11 through the intermediate device 13 , and the central office device 12 is connected to the intermediate device 13 through the trunk physical line, and the intermediate device 13 respectively and at least through the plurality of branch physical lines A terminal device 1 1 is connected, and the terminal device 1 1 may be the terminal device shown in FIG. 7 or FIG. 8 , and the central office device 12 may be the optical line terminal shown in FIG. 9 .

After the foregoing solution, the terminal device sends an authentication request to the central office device through the intermediate device; the terminal device receives the authentication response sent by the central office device through the intermediate device, and the authentication response is the central office setting. The response returned after the terminal device is authenticated according to the authentication request. In this way, when the terminal device is replaced, since the central office device is authenticated according to the corresponding physical line identifier, and the physical line connecting the central office device and the terminal device is not replaced, the central office device does not need to be replaced. After the terminal device is authenticated, the authentication of the updated terminal device is avoided, the burden on the system is reduced, and the performance of the system is increased.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be implemented by means of software plus necessary general hardware, and of course, by hardware, but in many cases, the former is a better implementation. . Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer. A hard disk or optical disk or the like includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Claims

claims

1. An authentication method, the authentication method is applied in a point-to-multipoint system, including: a central office device, an intermediate device, and at least one terminal device; the central office device communicates with the at least one terminal through the intermediate device The central office device is connected to the intermediate device through a trunk physical line, and the intermediate device is respectively connected to the at least one terminal device through a plurality of branch physical lines. The method is characterized in that: :

The terminal device sends an authentication request to the central office device through the intermediate device. The authentication request includes the physical line identifier of the branch physical line where the terminal device is located. The physical line identifier of the branch physical line is used to uniquely Identify the branch physical line;

The terminal device receives an authentication response sent by the central office device through the intermediate device, and the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

2. The authentication method according to claim 1, characterized in that, the method further includes: the terminal device obtains the physical line identifier of the branch physical line;

The terminal device sends the physical line identification of the branch physical line to the central office device.

3. The authentication method according to claim 1, wherein the authentication request further includes: a backbone physical line identifier, and/or an intermediate device identifier, and the backbone physical line identifier is used to uniquely identify the central office device. The backbone physical line between the intermediate device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device.

4. An authentication method, the authentication method is applied in a point-to-multipoint system, including: a central office device, an intermediate device, and at least one terminal device; the central office device communicates with the at least one terminal through the intermediate device The central office device is connected to the intermediate device through a trunk physical line, and the intermediate device is respectively connected to the at least one terminal device through a plurality of branch physical lines. The method is characterized in that: :

The central office device receives the authentication request sent by the terminal device through the intermediate device, and the authentication request includes the physical line identification of the branch physical line where the terminal device is located, so The physical line identifier of the branch physical line is used to uniquely identify the branch physical line; the central office device authenticates the terminal device according to the physical line identifier of the branch physical line, and returns authentication through the intermediate device Respond to the terminal device.

5. The authentication method according to claim 4, characterized in that the authentication method further includes:

The central office device receives the physical line identification of the branch physical line sent by the terminal device and stores it.

6. The authentication method according to claim 5, wherein the central office device authenticates the terminal device according to the physical line identification of the branch physical line, specifically including:

The central office device determines whether the physical line identifier in the authentication request is the same as the physical line identifier of the stored branch physical line;

7. The authentication method according to claim 4, wherein the authentication request further includes: a backbone physical line identifier, and/or an intermediate device identifier, and the backbone physical line identifier is used to uniquely identify the central office device. The backbone physical line between the intermediate device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device.

8. A terminal device, characterized in that the terminal device includes:

A sending unit, configured to send an authentication request to the central office device through the intermediate device, where the authentication request includes a physical line identifier of the branch physical line where the terminal device is located, and the physical line identifier of the branch physical line is used to Uniquely identify the branch physical line;

The first receiving unit is configured to receive an authentication response sent by the central office device through the intermediate device, where the authentication response is a response returned by the central office device after authenticating the terminal device according to the authentication request.

9. The terminal device according to claim 8, characterized in that the terminal device further includes:

An acquisition unit, configured to acquire the physical line identification of the branch physical line;

The sending unit is also configured to send the physical line identification of the branch physical line to the Central office equipment.

10. The terminal device according to claim 8, wherein the authentication request further includes: a backbone physical line identifier, and/or an intermediate device identifier, and the backbone physical line identifier is used to uniquely identify the central office. The backbone physical line between the device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device.

1 1. A central office equipment, characterized in that, the central office equipment includes:

The second receiving unit is configured to receive the authentication request sent by the terminal device through the intermediate device. The authentication request includes the physical line identifier of the branch physical line where the terminal device is located. The physical line identifier of the branch physical line is used to Uniquely identify the branch physical line;

A processing unit, configured to authenticate the terminal device according to the physical line identification of the branch physical line, and return an authentication response to the terminal device through the intermediate device.

12. The central office equipment according to claim 11, characterized in that the second receiving unit is further configured to receive the physical line identification of the branch physical line sent by the terminal equipment and store it.

13. The central office device according to claim 12, characterized in that the processing unit is specifically configured to determine whether the physical line identification in the authentication request is consistent with the physical line identification of the stored branch physical line. same;

14. The central office device according to claim 11, wherein the authentication request further includes: a backbone physical line identifier, and/or an intermediate device identifier, and the backbone physical line identifier is used to uniquely identify the central office. The backbone physical line between the terminal device and the intermediate device, and the intermediate device identifier is used to uniquely identify the intermediate device.

15. An authentication system, the system includes: a central office device, an intermediate device, and at least one terminal device; the central office device is connected to the at least one terminal device through the intermediate device, and the central office device The intermediate device is connected to the intermediate device through a trunk physical line, and the intermediate device is connected to the at least one terminal device through a plurality of branch physical lines. The characteristic is that the terminal device is any of claims 8-10. The terminal equipment described in one item, the The central office equipment is the central office equipment described in any one of claims 11-14.