WO2014114065A1

WO2014114065A1 - License management authentication method and system for passive optical network device

Info

Publication number: WO2014114065A1
Application number: PCT/CN2013/079949
Authority: WO
Inventors: 朱崇银; 刘华; 蒋磊; 杨莹
Original assignee: 烽火通信科技股份有限公司
Priority date: 2013-01-25
Filing date: 2013-07-24
Publication date: 2014-07-31
Also published as: CN103067211B; CN103067211A

Abstract

The present invention relates to a license management authentication method and system for a passive optical network device, comprising a license production tool for producing a license file; an FTP server which interacts with an FTP client and remotely loads the license file produced by the license production tool to a device; a network element license management center which verifies the legality of the license file and performs centralized management on key function items and resource items of a network element device; a network element license control center which interacts with the network element license management center and controls the use of the function items and resource items of the device according to an instruction of the network element license management center; and a service module which interacts with the network element license control center, receives the control of the network element license control center and controls the use of specific function items or resource items. The license management authentication method and system of the present invention can conveniently and effectively control function items or resource items of a system, so that subsequent maintenances can be controlled to be charged separately based on the function items or the resource items, ensuring long-term sustainable return.

Description

Passive optical network equipment license management authentication method and system

Technical field

The invention relates to passive optical network equipment security and resource management, in particular to a passive optical network equipment license management authentication method and system. Used to address equipment vendors' deep control over system resource usage. Background technique

Passive optical network is a new type of fiber access network technology. It adopts point-to-multipoint structure and passive optical fiber transmission, which consists of 0LT, 0DN and 0NU. The ODN (Optical Distributed Network) consists of an optical fiber and a passive optical splitter. It connects the 0LT (Optical Line Terminal) of the central office and the ONU (Optical Network Unit) of the client. Under certain physical limits and bandwidth constraints, A plurality of terminal devices 0NU share various services of the central office device OLT, and have the advantages of low cost, high bandwidth, strong scalability, flexible and fast service reorganization, and the like.

In the existing P0N equipment collection, the telecom operators issue the procurement plan according to the actual demand, and the P0N equipment suppliers are basically provided according to the standard configuration, and often the standard configuration exceeds the actual demand, which undoubtedly causes The waste of system resources requires a method and mechanism for deep control of system resource usage to ensure long-term sustainable returns. Summary of the invention

In view of the deficiencies in the prior art, the present invention aims to provide a passive optical network device license management authentication method and system, which can solve the problem of how to deeply control the resources of the passive optical network device, and adopt a flexible license authentication management. "Deep" binds users, promotes the value of software intellectual property, and plays a significant positive role in flexible business strategies. In order to achieve the above object, the technical solution adopted by the present invention is:

A passive optical network device license management authentication method, characterized in that:

(1) The license creation tool creates a license file according to the device information, and the device information includes at least an electronic serial number SN, a function item, and a resource item authorization status;

(2) Remotely load the created license file into the device through FTP;

(3) The license management center authenticates the license file that has been loaded into the device, and delivers the function items and resource items that have passed the verification to the NE license control center.

(4) The network element License Control Center receives the function items and resource items delivered by the NE management center, and authenticates the use of function items and resource items according to the authorization status and application information of the service module.

(5) When a user uses a function item or a resource item of a service module, the service module actively submits an application to the network element license control center, and controls the use of the function item and the resource item according to the authentication information returned by the network element license control center.

On the basis of the above technical solution, in the step (1), the license creation tool directly obtains the electronic serial number SN from the device, and obtains the resource item and the function item authorization status from the contract.

On the basis of the above technical solution, in step (2), first open the FTP server, and deploy the previously generated license file to the FTP server; then log in to the FTP client, enter the remote download command, and configure the license file on the FTP server. Loaded into the local NE license management center where the FTP client is located.

On the basis of the foregoing technical solution, in the step (3), when the device is powered on, the network management center obtains the license file from the local persistent device, parses the license file, and sends the file authorization content to the network license. control center.

On the basis of the above technical solution, in the third step, when the remote FTP is loaded with the license file, the license management center resolves the license file and verifies the legality and security of the license file. The content is sent to the NE license control center. If it fails, the FTP remote login license file is incorrect.

On the basis of the foregoing technical solution, in step (4), after the network element license control center receives the function item and the resource item authorization content, the network element license management center sends the authorization content and the last time. Authorized content and service module application information are compared; if the content of the authorization exceeds the last authorized content, and the service module has information that has not passed the authentication, the content that has not been authenticated by the service module is re-authenticated; If the content of the service module is lower than the last authorized content, and the service module has redundant content that has passed the authentication, the content of the service module that is not authenticated is deregistered. In other cases, the function of the service module and the resource item are controlled.

On the basis of the foregoing technical solution, in the step (5), when the service module submits a resource item or a function item application request to the network element license control center, if the network element license control center passes the authentication, the service module allows the resource item or Use of function items, otherwise the business module does not allow the use of resource items or function items.

A license management system for a passive optical network device, comprising: a license creation tool set in a license creation server, configured to create a license file;

An FTP server configured on the network management server to interact with the FTP client and remotely load the license file created by the license creation tool to the device.

Configure the FTP client in the NE to interact with the FTP server to remotely load the license file from the FTP server to the device.

The NE management center is configured to verify the legality of the license file and centrally manage the key function items and resource items of the NE device.

The NE is configured to interact with the NE license management center and control the function items and resource items of the device according to the NE license management center.

The service module (service configuration module) configured in the NE interacts with the NE license control center to receive control of the NE license control center and control the use of specific function items or resource items.

The passive optical network device license management authentication method and system according to the present invention can conveniently and effectively control system function items or resource items, and subsequent maintenance can control separate billing based on function items or resource items to ensure long-term sustainable return. DRAWINGS

The invention has the following figures:

1 is a structural diagram of a network element license software according to the present invention;

Figure 2 is a flow chart of the present invention,

3 is a flowchart of processing of a network element license management center according to the present invention, and FIG. 4 is a flowchart of processing of a network element license control center according to the present invention.

detailed description

The present invention will be described in detail below with reference to the accompanying drawings.

As shown in FIG. 1 and FIG. 2, the license management authentication method for the passive optical network device according to the present invention includes the following contents:

Step (1) using the license creation tool to create a license file (license file) according to the device information, the device information includes at least an electronic serial number SN, a function item, and a resource item authorization; FIG. 2 corresponds to step S10;

Step 2 (2) Remotely load the created license file into the device (referred to as a passive optical network device) through FTP; Figure 2 corresponds to step S20;

Step (3) The license management center of the NE authenticates the license file that has been loaded into the device, and delivers the function items and resource items that are verified by the NE license control center. Figure 2 corresponds to step S30. ;

Step (4) The NE license control center receives the function items and resource items delivered by the NE license management center, and authenticates the use of the function items and resource items according to the authorization status and the application information of the service module; Corresponding to step S40;

Step (5) When the user uses the function items and resource items of the service module, the service module actively submits an application to the network element license control center, and controls the use of the function item and the resource item according to the authentication information returned by the network element license control center. ; Figure 2 corresponds to the step On the basis of the above technical solution, in the step (1), the license creation tool directly obtains the electronic serial number SN from the device, and obtains the resource item and the function item authorization status from the contract. On the basis of the above technical solution, in step (2), first open the FTP server, and deploy the previously generated license file to the FTP server; then log in to the FTP client, enter the remote download command, and configure the license file on the FTP server. Loaded into the local NE license management center where the FTP client is located. On the basis of the foregoing technical solution, as shown in FIG. 3, in the step (3), when the device is powered on, the NE license management center obtains the license file from the local persistent device, parses the license file, and authorizes the file. It is sent to the NE license control center. Figure 3 corresponds to steps 301, 304. On the basis of the above technical solution, as shown in FIG. 3, in the step (3), when the remote FTP port is loaded with the license file, the license management center analyzes the license file and verifies the legality and security of the license file. If the authentication is passed, the file authorization content is sent to the NE license control center; if it fails, the FTP remote load license file error is returned. Figure 3 corresponds to steps 302, 303. On the basis of the foregoing technical solution, as shown in FIG. 4, in the step (4), after receiving the function item and the resource item authorization content, the network element license control center receives the authorized content and service from the last time. The module application information is compared; if the content of the authorization exceeds the last authorized content, and the service module has information that has not passed the authentication, the content that has not been authenticated by the service module is re-authenticated; if the content of the authorization is lower than the last time If the content is authorized, and the service module has redundant content that passes the authentication, the service module will be unauthenticated through the content of the authentication; in other cases, the function and resource item authentication of the service module are controlled. Figure 4 corresponds to steps 401 through 404. Based on the above technical solution, in step (5), when the service module moves to the network element When the license control center proposes to use a resource item or a function item, if the network element license control center passes the authentication, the service module allows the use of the resource item or function item. Otherwise, the service module does not allow the resource item or function item to be used. As shown in FIG. 1 , the present invention also provides a license management and authentication system for a passive optical network device, including:

A license creation tool that is installed in the license creation server to create a license file.

The service module (service configuration module) configured in the NE interacts with the NE license control center to receive control of the NE license control center and control the use of specific function items or resource items. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present invention are included in the scope of the present invention. Inside.

The contents not described in detail in the present specification belong to the prior art well known to those skilled in the art.

Claims

Claim

(2) Remotely load the created license file into the device through FTP;

The license management authentication method for a passive optical network device according to claim 1, wherein in the step (1), the license creation tool directly obtains an electronic serial number SN from the device, and obtains a resource item and a function from the contract. Item authorization status.

The method for authenticating the license management of the passive optical network device according to claim 1, wherein: in the step (2), the FTP server is first opened, and the previously generated license file is deployed to the FTP server; On the FTP client, enter the remote download command and load the license file from the FTP server to the local NE license management center where the FTP client is located.

The method for authenticating the license management of the passive optical network device according to claim 1, wherein: in the step (3), when the device is powered on, the network management center obtains the license file from the local persistent device. The license file is parsed and the file authorization is delivered to the NE license control center.

The method for authenticating the license management of the passive optical network device according to claim 1, wherein: in the step (3), when the remote FTP loads the license file, the network element The license management center resolves the license file and verifies the legality and security of the license file. If the authentication is passed, the file is authorized to be sent to the NE license control center. If the license is not passed, the FTP remote license file is incorrectly loaded.

The method for authenticating the license management of the passive optical network device according to claim 1, wherein in the step (4), the network management center receives the function item and the resource item authorization content from the network management center. After comparing with the last authorized content and the service module application information; if the content of the authorization exceeds the last authorized content, and the service module has information that has not passed the authentication, the content that has not been authenticated by the service module is re-authenticated; If the content of the authorization is lower than the last authorized content, and the service module has redundant content that passes the authentication, the content of the service module that is not authenticated is deregistered; in other cases, the function of the service module and the resource item are authenticated.

The method for authenticating the license management of the passive optical network device according to claim 1, wherein: in the step (5), when the service module submits a resource item or a function item application request to the network element license control center, If the NE license control center passes the authentication, the service module allows the use of resource items or function items. Otherwise, the service module does not allow the use of resource items or function items.

A passive optical network device license management authentication system, comprising:

The NE license control center is configured to interact with the NE license management center to control the use of device function items and resource items according to the NE license management center. The service module (service configuration module) is configured to interact with the NE license control center to receive control of the NE license control center to control the use of specific function items or resource items.