WO2017076146A1

WO2017076146A1 - Network access authentication method and system

Info

Publication number: WO2017076146A1
Application number: PCT/CN2016/101364
Authority: WO
Inventors: 刘玉喜
Original assignee: 上海斐讯数据通信技术有限公司
Priority date: 2015-11-05
Filing date: 2016-09-30
Publication date: 2017-05-11
Also published as: CN105407093B; CN105407093A

Abstract

The invention provides a network access authentication method and system, for use in network access authentication in a passive optical network system. The method comprises: when a network access request transmitted from a network access terminal is received, an optical network unit transmits the network access request to an optical line terminal; the optical line terminal pushes, according to the received network access request, to the optical network unit, a network access authentication page; the optical network unit feeds back the received network access authentication page to the network access terminal to enable the network access terminal to perform network access authentication according to the network access authentication page; the network access terminal feeds back a network access authentication result to the optical network unit; and the optical network unit determines, according to the received network access authentication result, whether to grant network access to the network access terminal. The invention can quickly achieve portal authentication in a passive optical network system, and an optical network unit can notify that a user of a network access terminal would like to access a network.

Description

Network access authentication method and system

The present application claims priority to Chinese Patent Application No. 2015 No. No. No. No. No. No. No. No. No. No. No. No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No

Technical field

The present invention relates to the field of network communication technologies, and in particular, to the field of network access technologies, and specifically to a network access authentication method and system.

Background technique

PON (Passive Optical Network) means that the optical distribution network does not contain any passive components such as electronic components and electronic power supplies, and does not require expensive active electronic equipment. A passive optical network includes an optical line terminal (OLT) installed at the central control station, and a set of optical network units (ONUs, optical network units) installed in the user premises. An optical distribution network (ODN) between the OLT and the ONU includes an optical fiber and a passive optical splitter or coupler. The outstanding advantage of the PON network is the elimination of outdoor active devices, all signal processing functions are done in the switch and in the user's home equipment.

GPON (Gigabit-Capable Passive Optical Network) is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x standard, with high bandwidth, high efficiency, large coverage, and users. The interface is rich and many other advantages, and is regarded by most operators as an ideal technology for achieving broadband and integrated transformation of access network services. The basic structure of the device based on GPON technology is similar to that of the existing PON, and is also an OLT (optical line terminal) including the central office and an ONU (optical network unit) at the user end, and is connected between the OLT (optical line terminal) ONU (optical network unit). The device consists of an ODN (Optical Distribution Network) consisting of a single mode fiber (SM fiber) and a passive splitter (Splitter) and a network management system.

Portal authentication is also commonly referred to as web authentication or network access authentication. Portal authentication websites are generally referred to as portal websites. When an unauthenticated user accesses the Internet, the device forces the user to log in to a specific site, and the user can access the service for free. When users need to use other information on the Internet, they must be authenticated on the portal. Internet resources can only be used after the authentication is passed. Users can actively access the known Portal authentication website and enter the user name and password for authentication. This method of starting Portal authentication is called active authentication. Conversely, if a user attempts to access other external networks through HTTP, the Portal authentication website will be forced to access the portal authentication process. This method is called mandatory authentication. The prior art performs Portal authentication on a WLAN (Wireless Local Area Networks). However, as technology advances and needs, it is a trend to do Portal in a home PON system.

Summary of the invention

In view of the above-mentioned shortcomings of the prior art, the present invention aims to provide a network access authentication method and system for solving the problem that network access authentication cannot be implemented in a passive optical network system in the prior art.

To achieve the above and other related objects, the present invention provides a network access authentication method for performing network access authentication in a passive optical network system, where the network access authentication method includes: an optical network in a passive optical network system When receiving the network access request sent by the network access terminal, the unit sends the network access request to the optical line terminal in the passive optical network system; the optical line terminal sends the optical network terminal to the optical network according to the received network access request. The unit pushes a network access authentication page for performing network access authentication; the optical network unit feeds back the received network access authentication page to the network access terminal, so that the network access terminal performs authentication according to the network access The page performs network access authentication; the optical line terminal acquires a network access authentication result of the network access terminal, and feeds back the network access authentication result to the optical network unit; the optical network unit according to the received network Accessing the authentication result to determine whether to allow the network access terminal to perform network ask.

Preferably, the network access authentication method further includes: when the optical network unit receives the network access authentication result that the authentication succeeds, the optical network unit stores the network access authentication result.

Preferably, when receiving the network access request sent by the network access terminal, the optical network unit in the passive optical network system sends the network access request to the optical line terminal in the passive optical network system, and specifically includes: When the optical network unit receives the network access request sent by the network access terminal, the optical network unit determines whether the network access terminal is a network access terminal with successful network access authentication, and the network access terminal is not successfully authenticated by the network access terminal. When the network accesses the terminal, the network access request is sent to the optical line terminal in the passive optical network system.

Preferably, the optical network unit and the optical line terminal communicate through an optical network unit management control interface.

To achieve the above object, the present invention further provides an optical network unit, configured to perform network access authentication in a passive optical network system, where the optical network unit includes: a network access terminal request receiving module, configured to receive a network access terminal to send a network access request; a request sending module, connected to the network access terminal request receiving module, configured to send the network access request to an optical line terminal in a passive optical network system; and an authentication page receiving module, configured to The optical line terminal in the passive optical network system receives a network access authentication page for performing network access authentication; the authentication page feedback module is connected to the authentication page receiving module, and is configured to receive the received network access authentication page. Feedbacking to the network access terminal, so that the network access terminal performs network access authentication according to the network access authentication page; and the network access control module is configured to receive and receive a receiving network from the optical line terminal in the passive optical network system Accessing the authentication result and determining whether based on the network access authentication result Xu the network access network access terminals.

Preferably, the optical network unit further includes: a storage module, configured to receive the network access authentication after successful authentication The network access authentication result is stored when the result is verified.

Preferably, the optical network unit further includes: a determining module, connected to the storage module, configured to determine, when receiving the network access request sent by the network access terminal, whether the network access terminal is a network with successful network access authentication And accessing the terminal; when the network access terminal is not a network access terminal with successful network access authentication, the request sending module sends the network access request to an optical line terminal in the passive optical network system.

To achieve the above object, the present invention also provides an optical line terminal for performing network access authentication in a passive optical network system, the optical line terminal comprising: a network access request receiving module, for using a passive optical network system The optical network unit receives the network access request, and the authentication page pushing module is connected to the network access request receiving module, and is configured to push, according to the received network access request, the network access for network access authentication to the optical network unit. And an authentication result receiving feedback module, configured to receive a network access authentication result from the network access terminal, and feed back the network access authentication result to the optical network unit.

To achieve the above object, the present invention also provides a network access authentication system for performing network access authentication in a passive optical network system, the network access authentication system including the optical network unit as described above and the light as described above Line terminal.

As described above, a network access authentication method and system of the present invention has the following beneficial effects:

The invention sends the network access request sent by the network access terminal to the optical line terminal through the optical network unit, and the network access authentication page for performing network access authentication is pushed by the optical line terminal, and the network access authentication result of the network access terminal is fed back to the optical network. The unit, the optical network unit determines whether to allow the network access terminal to perform network access according to the received network access authentication result, and achieves the purpose of implementing network access authentication in the passive optical network system, and the invention can quickly implement network access authentication ( Portal authentication process, and the optical network unit accesses the end user to access the Internet by quickly notifying the network.

DRAWINGS

FIG. 1 is a schematic flowchart diagram of a network access authentication method according to the present invention.

FIG. 2 is a schematic diagram showing a specific implementation of a network access authentication method according to the present invention.

FIG. 3 is a schematic structural diagram of a network access authentication system according to the present invention.

4 is a schematic view showing the structure of an optical network unit of the present invention.

Figure 5 shows a preferred schematic diagram of the optical network unit of the present invention.

Fig. 6 is a view showing the structure of an optical line terminal of the present invention.

Component label description

1 Network access authentication system

11 optical network unit

111 network access terminal request receiving mode

112 request to send module

113 authentication page receiving module

114 Certification Page Feedback Module

115 Network Access Control Module

116 storage module

117 judgment module

12 optical line terminal

121 Network Access Request Receiving Module

122 Authentication Page Push Module

123 authentication result receiving feedback module

S11~S15 steps

detailed description

The embodiments of the present invention are described below by way of specific examples, and those skilled in the art can readily understand other advantages and effects of the present invention from the disclosure of the present disclosure. The present invention may be embodied or applied in various other specific embodiments, and various modifications and changes can be made without departing from the spirit and scope of the invention.

The purpose of this embodiment is to provide a network access authentication method and system for solving the problem that network access authentication cannot be implemented in a passive optical network system in the prior art. The network access authentication method and system of the present embodiment are described in detail below, and the network access authentication method and system of the present embodiment can be understood by those skilled in the art without any creative work.

This embodiment provides a network access authentication method for performing network access authentication in a passive optical network system. Specifically, as shown in FIG. 1, the network access authentication method includes the following steps.

Step S11: The optical network unit in the passive optical network system sends the network access request to the optical line terminal in the passive optical network system when receiving the network access request sent by the network access terminal.

Step S12: The optical line terminal pushes a network access authentication page for performing network access authentication to the optical network unit according to the received network access request.

Step S13, the optical network unit feeds back the received network access authentication page to the network access terminal, So that the network access terminal performs network access authentication according to the network access authentication page.

Step S14: The optical line terminal acquires a network access authentication result of the network access terminal, and feeds back the network access authentication result to the optical network unit.

Step S15: The optical network unit determines, according to the received network access authentication result, whether the network access terminal is allowed to perform network access.

Steps S11 to S15 will be described in detail below.

This embodiment provides a network access authentication method for performing network access authentication in a GPON (Gigabit-Capable Passive Optical Network). In this embodiment, the network access authentication is Portal authentication. .

Step S11: The optical network unit (ONU, Optical Network Unit) in the passive optical network system receives the network access request sent by the network access terminal (the terminal of the network accessible terminal such as the user computer or the mobile phone) The access request is sent to an optical line terminal (OLT, Optical Line Terminal) in the passive optical network system. In other words, in step S11, when the user sends an online request, the ONU obtains the request through the Http message of the ONU, and the optical network unit is also responsible for reporting the user's online request to the optical line terminal, and the ONU passes the OMCI protocol. The user's MAC address is sent to the OLT.

In this embodiment, the optical network unit and the optical line terminal communicate through an optical network unit management control interface (OMCI, ONU Management and Control Interface). That is, the communication between the optical network unit and the optical line terminal is based on the OMCI protocol Portal message format defined by the OMCI. The OMCI (the ONU Management and Control Interface) is a protocol for information exchange between the OLT and the ONT defined in the GPON standard. It is used for management of the ONT by the OLT in the GPON network, including configuration management. Fault management, performance management, and security management. The OMCI protocol runs on the GEM connection between the OLT controller and the ONT controller, which is established during the initialization of the ONT.

Specifically, in this embodiment, the optical network unit in the passive optical network system sends the network access request to the optical fiber in the passive optical network system when receiving the network access request sent by the network access terminal. The line terminal specifically includes: when the optical network unit receives the network access request sent by the network access terminal, the optical network unit determines whether the network access terminal is a network access terminal with successful network access authentication and accesses the network access terminal. When the terminal is not a network access terminal with successful network access authentication, the network access request is sent to the optical line terminal in the passive optical network system.

In this embodiment, the OMCI message reported by the ONU to the OLT may be specifically referred to as follows, but is not limited to the examples presented below.

Defining a portal receive management entity, where the attributes of the receive authentication service management entity include:

1) Managed Entity ID: This attribute provides a unique number for each instance of the receiving authentication management entity; the receiving authentication management entity has only one instance, its number is 0; (R) , (mandatory), (2 bytes).

2) The number of MAC addresses of the ONU Portal (Portal MAC num): This attribute identifies the number of user MAC addresses reported by the authentication; (R&W), (mandatory), (6 bytes).

3) MAC list table: This attribute identifies the table of user MAC addresses reported by the ONU Portal authentication. The default is NULL (empty); (6*N bytes)

4) Portal up Managed entity ID: indicates the instance id number reported by the portal; Portal MAC num: the number of user MAC addresses reported by the ONU Portal authentication; Portal MAC list table: the table of the user MAC address reported by the ONU Portal authentication. The default is NULL (empty).

The ONU notifies the OLT of the MAC address that requires Portal authentication to the OLT to manage the Portal authentication of the user.

Step S12: The optical line terminal pushes a network access authentication page for performing network access authentication to the optical network unit according to the received network access request. That is, when the OLT receives the Internet access request message, the OLT pushes the Portal authentication page to the ONU, that is, the optical line terminal pushes the Portal page to the optical network unit.

The information OMCI message sent by the optical line terminal to the portal may be specifically referred to as follows, but is not limited to the examples presented below.

Define the Portal information that the OLT sets to the ONU, including the Portal website and the authenticated user MAC. details as follows:

4) Portal up Managed entity ID: indicates the instance id number reported by the portal; Portal MAC num: ONU Portal The number of the user's MAC address that is reported by the authentication. Portal MAC list table: The table of the user MAC address reported by the ONU Portal authentication. The default is NULL.

Step S13: The optical network unit feeds back the received network access authentication page to the network access terminal, so that the network access terminal performs network access authentication according to the network access authentication page.

The network access terminal receives the network access authentication page from the optical network unit, and performs network access authentication according to the network access authentication page. That is, when the user receives the network access authentication page, the authentication can be implemented. If the authentication is passed, the OLT Portal service will notify the authentication result, and the OLT will notify the ONU of the authentication result of the network access terminal through the OMCI protocol.

Step S14: The optical line terminal acquires a network access authentication result of the network access terminal, and feeds back the network access authentication result to the optical network unit. If the network access authentication of the network access terminal passes, the Portal service of the OLT notifies the OLT of the authentication result, and the OLT notifies the ONU of the authentication result of the network access terminal by using the OMCI protocol.

Step S15: The optical network unit determines, according to the received network access authentication result, whether the network access terminal is allowed to perform network access. That is, if the network access terminal passes the authentication, the ONU releases the network access terminal, so that the user can access the terminal through the network.

In addition, in this embodiment, the network access authentication method further includes: when the optical network unit receives the network access authentication result that the authentication succeeds, the optical network unit stores the network access authentication result. That is, if the network access terminal passes the authentication, the ONU releases the network access terminal, so that the user can access the terminal through the network access terminal, and the ONU saves the authentication information of the network access terminal, so that the user can next time. No authentication is required when accessing the network through the network access terminal.

To further understand the network access authentication method of this embodiment, the implementation process of the network access authentication method of this embodiment is further described below.

As shown in Figure 2, when the user sends an Internet access request, the ONU obtains the request from the ONU to determine whether the user has passed the Portal authentication. If the portal authentication is performed before, the user is allowed to access the Internet directly. After the portal authentication is performed, the ONU sends the user's MAC address to the OLT through the OMCI protocol. When the OLT receives the Internet access request packet, the OLT pushes the Portal authentication page to the ONU. The ONU sends the Portal authentication page to the user Http according to the user MAC address. When the portal authentication page is received, the authentication can be implemented. If the authentication succeeds, the OLT obtains the authentication result. The OLT notifies the ONU of the authentication result of the user through the OMCI protocol. If the authentication is released to the user through the ONU, the user can access the Internet and save the ONU. Authentication information so that users do not need to authenticate again next time.

To implement the foregoing network access authentication method, the embodiment provides a network access authentication system for passive use. The network access authentication is performed in the GPON (Gigabit-Capable Passive Optical Network). In this embodiment, the network access authentication is Portal authentication.

Specifically, as shown in FIG. 3, the network access authentication system 1 includes an optical network unit 11 and an optical line terminal 12, wherein in the embodiment, the optical network unit 11 and the optical line terminal 12 pass between The optical network unit 11 manages an interface (OMCI, ONU Management and Control Interface) for communication. That is, the communication between the optical network unit 11 and the optical line terminal 12 is based on the OMCI protocol Portal message format defined by the OMCI. The OMCI (the ONU Management and Control Interface) is a protocol for information exchange between the OLT and the ONT defined in the GPON standard, and is used for management of the ONT by the OLT in the GPON network, including configuration management. , fault management, performance management and security management. The OMCI protocol runs on the GEM connection between the OLT controller and the ONT controller, which is established during the initialization of the ONT.

The optical network unit 11 and the optical line terminal 12 will be described in detail below.

The optical network unit (ONU) is configured to perform network access authentication in a passive optical network system. The optical network unit 11 is responsible for reporting the online request of the user, and saving the user who has already obtained the Portal authentication. Portl's certification results are fed back to the user.

Specifically, in this embodiment, as shown in FIG. 3 and FIG. 4, the optical network unit 11 includes: a network access terminal request receiving mode 111 block, a request sending module 112, an authentication page receiving module 113, and an authentication page feedback module. 114 and a network access control module 115.

The network access terminal requests a receiving mode 111 block for receiving a network access request sent by a network access terminal; the network access terminal requests a receiving mode 111 block for accessing a terminal (a user terminal computer, a mobile phone, etc., a network accessible terminal) ) Receive network access requests. The request sending module 112 is connected to the network access terminal request receiving module 111 for transmitting the network access request to an optical line terminal 12 (OLT) in the passive optical network system.

Specifically, in this embodiment, when the user sends an Internet access request, the network access terminal requests the receiving mode 111 block obtaining request by using the Http message of the ONU, and the request sending module 112 is responsible for reporting the user's online request to In the optical line terminal 12, the request sending module 112 transmits the MAC address of the user to the OLT through the OMCI protocol.

In this embodiment, the OMCI message reported by the request sending module 112 to the OLT may be specifically referred to as follows, but is not limited to the example presented below.

1) Managed Entity ID: This attribute is each instance of the receiving authentication management entity. (Instance) provides a unique number; the receiving authentication management entity has only one instance, its number is 0; (R), (mandatory), (2 bytes).

The authentication page receiving module 113 is configured to receive a network access authentication page for performing network access authentication from the optical line terminal 12 in the passive optical network system;

The authentication page feedback module 114 is connected to the authentication page receiving module 113, and is configured to feed back the received network access authentication page to the network access terminal, so that the network access terminal performs authentication according to the network access The page performs network access authentication.

The network access terminal receives the network access authentication page from the optical network unit 11, and performs network access authentication according to the network access authentication page. That is, when the user receives the network access authentication page, the authentication can be implemented. If the authentication is passed, the OLT Portal service will notify the authentication result, and the OLT will notify the ONU of the authentication result of the network access terminal through the OMCI protocol.

The network access control module is configured to receive a network access authentication result from the optical line terminal 12 in the passive optical network system and determine whether to allow the network access terminal to perform network access according to the network access authentication result. That is, if the network access terminal is authenticated, the network access control mode controls the ONU to release the network access terminal, so that the user can access the terminal through the network.

In addition, in this embodiment, as shown in FIG. 5, the optical network unit 11 further includes: a storage module 116 and a judging module 117.

The storage module 116 is configured to store the network access authentication result when receiving the network access authentication result that the authentication succeeds. That is, if the network access terminal passes the authentication, the ONU releases the network access terminal, so that the user can access the terminal through the network access terminal, and the ONU saves the authentication information of the network access terminal, so that the user can next time. No authentication is required when accessing the network through the network access terminal.

The determining module 117 is connected to the storage module 116, and is configured to determine, when the network access terminal requests the receiving mode 111 block to receive the network access request sent by the network access terminal, whether the network access terminal is successfully authenticated by the network access terminal. The network access terminal; when the network access terminal is not a network access terminal with successful network access authentication, the request sending module 112 sends the network access request to the optical line terminal 12 in the passive optical network system.

The optical line terminal 12 is configured to perform network access authentication in a passive optical network system. The optical line terminal 12 is responsible for constructing a portal authentication page, and is responsible for managing the reported user of the optical network unit 11 to the optical network unit 11onu. The portal authentication page is pushed, and the authenticated user information is sent to the optical network unit 11.

Specifically, in the embodiment, as shown in FIG. 3 and FIG. 6, the optical line terminal 12 includes: a network access request receiving module 121, an authentication page pushing module 122, and an authentication result receiving feedback module 123.

The network access request receiving module 121 is configured to receive a network access request from the optical network unit 11 in the passive optical network system. The authentication page pushing module 122 is connected to the network access request receiving module 121, and is configured to push a network access authentication page for performing network access authentication to the optical network unit 11 according to the received network access request. That is, when the network access request receiving module 121 in the OLT receives the Internet access request message, the authentication page pushing module 122 pushes the Portal authentication page to the ONU, that is, the optical line terminal 12 pushes the Portal to the optical network unit 11. page.

The information OMCI message sent by the authentication page pushing module 122 to the portal may be specifically referred to as follows, but is not limited to the examples presented below.

The portal information set by the authentication page pushing module 122 to the ONU is defined, including the portal website and the authenticated user MAC. details as follows:

The authentication result receiving feedback module 123 is configured to receive a network access authentication result from the network access terminal and feed back the network access authentication result to the optical network unit 11. If the network access authentication of the network access terminal passes, the Portal service of the OLT notifies the OLT of the authentication result, and the OLT notifies the ONU of the authentication result of the network access terminal by using the OMCI protocol.

In order to further understand the network access authentication system 1 of the present embodiment, the interaction process between the optical network unit 11 and the optical line terminal 12 in the network access authentication system 1 of the present embodiment is further described below.

As shown in FIG. 2, when the user sends an Internet access request, the network access terminal in the ONU requests the receiving mode 111 block acquisition request through the Http message of the ONU, and the determining module 117 determines whether the user has passed the Portal authentication. If the portal authentication is performed, the network access control module 115 directly allows the user to access the Internet. If the portal authentication has not been performed, the request sending module 112 in the ONU sends the MAC address of the user to the OLT through the OMCI protocol. After the access request receiving module 121 receives the Internet access request message, the authentication page pushing module 122 pushes the Portal authentication page to the ONU, and the authentication page receiving module 113 in the ONU receives the Portal authentication page, and the authentication page feedback module The gateway authentication page is sent to the user Http according to the user MAC address. When the network access terminal (for example, a computer) used by the user receives the portal authentication page, the authentication can be implemented. If the authentication is passed, the authentication result in the OLT receives the feedback. The module 123 obtains the authentication result, and the authentication result receiving feedback module 123 notifies by the OMCI protocol. The ONU authenticates the user. If the authentication is released to the user through the network access control module 115 in the ONU, the user can access the Internet. The storage module 116 in the ONU saves the authentication information so that the user does not need to perform authentication again next time.

In summary, the present invention transmits a network access request sent by a network access terminal to an optical line terminal through an optical network unit, and the network access authentication page for performing network access authentication is pushed by the optical line terminal and the network access authentication of the network access terminal is performed. The result is fed back to the optical network unit, and the optical network unit determines whether to allow the network access terminal to perform network access according to the received network access authentication result, so as to achieve the purpose of implementing network access authentication in the passive optical network system, the present invention can be fast The network access authentication (Portal authentication) process is implemented, and the optical network unit accesses the terminal user to access the Internet by quickly notifying the network. Therefore, the present invention effectively overcomes various shortcomings in the prior art and has high industrial utilization value.

The above-described embodiments are merely illustrative of the principles of the invention and its effects, and are not intended to limit the invention. Modifications or variations of the above-described embodiments may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, all equivalent modifications or changes made by those skilled in the art without departing from the spirit and scope of the invention will be covered by the appended claims.

Claims

A network access authentication method for performing network access authentication in a passive optical network system, wherein the network access authentication method includes:

The optical network unit in the passive optical network system sends the network access request to the optical line terminal in the passive optical network system when receiving the network access request sent by the network access terminal;

The optical line terminal pushes a network access authentication page for performing network access authentication to the optical network unit according to the received network access request;

The optical network unit feeds back the received network access authentication page to the network access terminal, so that the network access terminal performs network access authentication according to the network access authentication page;

Obtaining, by the optical line terminal, a network access authentication result of the network access terminal, and feeding back the network access authentication result to the optical network unit;

The optical network unit determines, according to the received network access authentication result, whether the network access terminal is allowed to perform network access.
The network access authentication method according to claim 1, wherein the network access authentication method further comprises: when the optical network unit receives the network access authentication result that the authentication is successful, the optical network unit stores The network accesses the authentication result.
The network access authentication method according to claim 1 or 2, wherein the optical network unit in the passive optical network system sends the network access request when receiving a network access request sent by the network access terminal The optical line terminal in the passive optical network system specifically includes: when the optical network unit receives the network access request sent by the network access terminal, the optical network unit determines whether the network access terminal is successful in network access authentication. The network access terminal sends the network access request to the optical line terminal in the passive optical network system when the network access terminal is not a network access terminal with successful network access authentication.
The network access authentication method according to claim 1, wherein the optical network unit and the optical line terminal communicate with each other through an optical network unit management control interface.
An optical network unit is configured to perform network access authentication in a passive optical network system, where the optical network unit includes:

a network access terminal request receiving module, configured to receive a network access request sent by the network access terminal;

a request sending module, connected to the network access terminal request receiving module, configured to send the network access request An optical line terminal that is sent to a passive optical network system;

An authentication page receiving module, configured to receive, from an optical line terminal in the passive optical network system, a network access authentication page for performing network access authentication;

The authentication page feedback module is connected to the authentication page receiving module, and is configured to feed back the received network access authentication page to the network access terminal, so that the network access terminal performs network according to the network access authentication page. Access authentication

And a network access control module, configured to receive a network access authentication result from the optical line terminal in the passive optical network system, and determine whether to allow the network access terminal to perform network access according to the network access authentication result.
The optical network unit according to claim 5, wherein the optical network unit further comprises:

And a storage module, configured to store the network access authentication result when receiving the network access authentication result that is successfully authenticated.
The optical network unit according to claim 6, wherein the optical network unit further comprises:

The determining module is connected to the storage module, and is configured to determine, when receiving the network access request sent by the network access terminal, whether the network access terminal is a network access terminal with successful network access authentication;

When the network access terminal is not a network access terminal with successful network access authentication, the request sending module sends the network access request to an optical line terminal in the passive optical network system.
An optical line terminal for performing network access authentication in a passive optical network system, wherein the optical line terminal comprises:

a network access request receiving module, configured to receive a network access request from an optical network unit in the passive optical network system;

The authentication page pushing module is connected to the network access request receiving module, and is configured to push, to the optical network unit, a network access authentication page for performing network access authentication according to the received network access request;

The authentication result receiving feedback module is configured to receive a network access authentication result from the network access terminal and feed back the network access authentication result to the optical network unit.
A network access authentication system for performing network access authentication in a passive optical network system, characterized in that the network access authentication system comprises the optical network according to any one of claims 5 to 7. A unit and an optical line terminal as claimed in claim 8.
The network access authentication system according to claim 9, wherein the optical network unit and the optical line terminal communicate with each other through an optical network unit management control interface.