WO2018058624A1

WO2018058624A1 - Method for accessing optical network by optical network unit, and authentication device and system

Info

Publication number: WO2018058624A1
Application number: PCT/CN2016/101301
Authority: WO
Inventors: 祁彪; 康竞然; 李三星
Original assignee: 华为技术有限公司
Priority date: 2016-09-30
Filing date: 2016-09-30
Publication date: 2018-04-05

Abstract

Embodiments of the present invention provide a method for accessing an optical network by an optical network unit (ONU), and an authentication device and system, which are used for improving an effect of supervising a connection relationship of the ONU accessing an optical network. The method comprises: an authentication device receiving an online request sent by an ONU, and detecting a connection relationship between the ONU and an output port of an optical splitter according to the online request; if it is determined that the detected connection relationship is consistent with a legitimate connection relationship of the ONU, determining that the authentication of the ONU succeeds, and permitting the ONU to access the optical network, wherein the legitimate connection relationship is used for indicating that the output port of the optical splitter connected with the ONU is a legitimate output port allocated to the ONU.

Description

Method, authentication device and system for optical network unit to access optical network

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method, an authentication device, and a system for an optical network unit to access an optical network.

Background technique

As the scale of optical fiber networks expands rapidly, Passive Optical Network (PON) technology has become a hot spot in optical access network technology.

At present, when an optical network unit (ONU) is connected to a PON, the network management system (NMS) in the PON mainly verifies the legitimacy according to the serial number and password of the ONU, and allows the verification when passing the verification. The ONU accesses to prevent unauthorized ONUs from making unauthorized access.

However, in an actual application, since the NMS cannot identify the output port of the optical splitter to which the ONU is connected, if the user carries the authenticated authorized ONU to go online on the illegal output port of the same optical splitter in the passive optical network, The NMS cannot know that the output port of the splitter connected to the ONU has changed. The output port allocated by the NMS to the ONU is considered to be the legal output port of the ONU, and the output port not allocated to the ONU is considered to be the illegal output port of the ONU. For example, the legal output port assigned to the authenticated ONU is the output port 1 of the splitter. If the user removes the ONU from the output port 1, re-connecting the ONU to the splitter is an illegal output for the ONU. When the output port 2 of the port goes online, the NMS cannot detect that the output port connected when the ONU goes online has changed.

Therefore, at present, the PON cannot determine the connection between the ONU and the output port, and the usage of each output port in the optical splitter cannot be known, so that it is impossible to determine which output ports of the optical splitter output port are available output ports that are not connected to the ONU. Then, when the PON needs to allocate an output port for the newly registered ONU, since the usage of each output port in the optical splitter cannot be known, there is no guarantee that the allocated output port is not occupied by other ONUs, so the newly registered ONU may not be available. When the assigned output port is used, the ONU cannot access the optical network normally.

Summary of the invention

The embodiments of the present invention provide a method, an authentication device, and a system for an optical network unit to access an optical network, which are used to solve the technical problem that the monitoring effect of the optical network unit connected to the optical network is poor.

In a first aspect, a method for an optical network unit to access an optical network is provided, the method being performed by an authentication device. The method includes: when receiving the online request sent by the optical network unit for requesting access to the optical network, the authentication device can detect the connection relationship between the optical network unit and the output port of the optical splitter according to the online request, in the authentication When the device determines that the detected connection relationship is consistent with the legal connection relationship of the optical network unit, that is, when the output port of the optical splitter currently connected to the optical network unit is a legal output port allocated for the optical network unit, it is determined that the optical network unit passes the authentication. Thereby allowing the optical network unit to access the optical network.

In the embodiment of the present invention, when the optical network unit requests to access the optical network, the authentication device can detect the connection relationship between the optical network unit and the output port of the optical splitter, and determine that the current connection relationship is consistent with the legal connection relationship. Allows the optical network unit to access the optical network. By authenticating the connection relationship of the optical network unit, it is possible to effectively ensure that the optical network unit goes online through the legal output port assigned to it, thereby avoiding the situation that one optical network unit occupies the output port of other optical network unit. Moreover, the usage of each output port can be relatively conveniently obtained. When an output port needs to be allocated for a new optical network unit, a corresponding legal output port can be allocated to the new optical network unit from the unoccupied output port, thereby The output ports of the optical splitters are properly utilized, and the optical network units can be put on the line normally, so that some optical network units cannot be connected to the optical network because the allocated output ports are occupied, and the management of the output ports is more effective.

With reference to the first aspect, in a first possible implementation manner of the first aspect, the authentication device sends the first test signal to the legal output port allocated to the optical network unit in the optical splitter according to the online request, and the legal output is outputted by the single port. A reflection of the test signal, the authentication device can obtain feedback information for indicating information of the reflected signal generated by the legal output port for the first test signal, and the authentication device can determine the connection relationship of the optical network unit according to the feedback information.

In the embodiment of the present invention, the authentication device sends the first test signal to each legal output port. And obtaining feedback information of each legal output port for the first test signal to determine a connection relationship, and the feedback information can represent information of a reflected signal generated by the corresponding legal output port for the first test signal, such as an optical power intensity of the reflected signal, The duration of receiving the reflected signal, etc., the authentication device only needs to analyze the feedback information to determine the connection relationship of the optical network unit, so the determination method is convenient, which helps to improve the working efficiency of the authentication device to determine the connection relationship of the optical network unit.

With reference to the first possible implementation manner of the first aspect, in a second possible implementation manner of the first aspect, the authentication device determines, according to the obtained feedback information, a fiber position that has a maximum optical power of the reflected signal indicated by the feedback information. Whether the position of the predetermined fiber position of the legal output port is the same as the position of the reflected signal of the first test signal when the optical fiber has the maximum optical power. If the position is consistent, it indicates that the reflected signal is at the output port. The reflection device reflects, so that it can be determined that the optical network unit is not connected to the legal output port. If it is inconsistent, it indicates that the reflected signal is not reflected by the reflection device at the output port, so it can be determined that the legal output port is currently connected to the optical network unit. .

In the embodiment of the present invention, since the position of the optical fiber is a position where the reflected signal of the first test signal has the maximum optical power in the optical fiber, and the preset optical fiber position is generated by the reflection device reflected by the reflective device at the legal output port. The reflected signal has a position where the maximum optical power is located in the optical fiber, so the authentication device can determine the optical network by comparing the position of the optical fiber having the maximum optical power of the reflected signal indicated by the feedback information with the preset optical fiber position of the legal output port. Whether the unit is connected to the legal output port, that is, whether the reflected signal is reflected by the reflection device in the legal output port, and if so, the dust cap of the legal output port is not removed, and the legal output port is not connected to the optical network unit. Otherwise, it is determined that the legal output port is connected to the optical network unit. Therefore, the determining process is relatively simple and fast, which helps to reduce the workload of the authentication device.

In conjunction with the second possible implementation of the first aspect, in a third possible implementation of the first aspect, before the authentication device sends the first test signal to the legal output port of the optical splitter for the optical network unit The authentication device may further send a second test signal to the output port of the optical splitter, and the authentication device obtains a reflected signal generated by each output port of the optical splitter to reflect the second test signal, and determines that each reflected signal has a maximum optical power. Fiber position and the fiber position Recorded as the default fiber position of the corresponding output port, it is possible to determine the preset fiber position of each output port in the splitter, and then store it.

Since each of the plurality of output ports included in the optical splitter is connected to the input port of the optical splitter through the optical fiber, the length of the optical fiber between the different output ports and the input port is different, and each of the plurality of output ports is output. A reflective device for reflecting the optical signal is disposed at the port. Therefore, the preset optical fiber position of any one of the output ports may be a second test signal sent by the authentication device, and the reflected signal returned from any one of the output ports has the maximum light in the optical fiber. The location of the power, so the preset fiber positions of different output ports are also different. Therefore, different output ports can be distinguished according to the preset fiber position, which helps to improve the identification capability of the authentication device for the output port, thereby improving the authentication device to determine the optical network unit. The accuracy of the connection relationship.

With reference to the first possible implementation manner of the first aspect, in a fourth possible implementation manner of the first aspect, determining a fiber position of the reflected signal indicated by the feedback information and having a maximum optical power and a preset optical fiber of the optical network unit If the locations are the same, the authentication device determines that the optical network unit is connected to the legal output port. Otherwise, the optical network unit is not connected to the legal output port.

Wherein, the position of the optical fiber is a position at which the reflected signal of the first test signal has the maximum optical power in the optical fiber, and the predetermined optical fiber position is a transmission signal generated by the reflection device reflected by the reflection device of the optical network unit, and has a maximum light in the optical fiber. The location where the power is located.

In the embodiment of the present invention, only by comparing the position of the optical fiber indicated by the feedback information with the preset optical fiber position of the optical network unit, whether the reflected signal is reflected by the reflective device of the optical network terminal, that is, the reflected signal can be determined. Whether it is transmitted along the optical fiber to the location where the optical network terminal is located, thereby determining whether the optical network unit is connected to the legal output port, the determination manner is relatively fast.

In conjunction with the fourth possible implementation of the first aspect, in a fifth possible implementation manner of the first aspect, the authentication device sends a second test signal to a legal output port of the optical splitter that is legally connected to the optical network unit, and A reflection device for reflecting the optical signal is disposed in the optical network unit, so that the authentication device can obtain the reflected signal generated by the optical network unit reflecting the second test signal, and then the optical fiber position record when the reflected signal has the maximum optical power. Preset fiber position for the optical network unit Set and store.

In the embodiment of the present invention, since the optical network unit is provided with a reflection device for reflecting the optical signal, when the optical network unit is connected to the legal output port, the optical network unit can be detected and determined by sending a test signal to the legal output port. In the legal connection relationship, the reflected signal generated by the reflection device in the optical network unit reflects the position of the optical fiber having the maximum optical power in the optical fiber, and the optical fiber position can be recorded, because the optical network unit is different in connection. The output ports correspond to different fiber lengths. Therefore, the preset fiber positions of the optical network units determined by the test are also different from each other. Therefore, the output connected to the optical network unit can be determined according to the preset fiber position of the optical network unit. The length of the fiber corresponding to the port, so that the corresponding output port can be determined according to the correspondence between the length of the fiber and the output port, thereby improving the recognition capability of the output port connected to the optical network unit.

With reference to the first aspect or the first to fifth possible implementation manners of the first aspect, in the sixth possible implementation manner of the first aspect, if the authentication device determines the connection relationship between the detected optical network unit and the output port If the legal connection relationship with the optical network unit is inconsistent, the optical network unit is denied access to the optical network.

In the embodiment of the present invention, if the authentication device determines that the optical network unit is not connected to the allocated legal output port, the optical network unit is rejected, thereby preventing the optical network unit from abusing other output ports except the legal output port, thereby effectively improving the uplink network. Management effect on the online optical network unit.

The second aspect provides an authentication device, where the authentication device is located in an optical network system, where the authentication device includes: a receiver for receiving an online request sent by the optical network unit, and a memory for storing a legal connection relationship of the optical network unit, And a processor, where the processor can detect the connection relationship between the optical network unit and the output port of the optical splitter according to the online request, and determine that the optical network unit passes when determining that the detected connection relationship is consistent with the legal connection relationship of the optical network unit. Authentication allows the optical network unit to access the optical network.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the processor can be configured to send, according to the online request, the first test signal to the legal output port allocated to the optical network unit in the optical splitter, and obtain the legal The feedback information of the output port for the first test signal, the feedback information indicating the information of the reflected signal generated by the legal output port for the first test signal, such as the optical power intensity And other information, the processor can determine the connection relationship of the optical network unit according to the feedback information.

In conjunction with the first possible implementation of the second aspect, in a second possible implementation of the second aspect, the processor is configured to determine a fiber position of the reflected signal indicated by the feedback information and a legal output port Whether the position of the preset fiber is consistent, and the position of the fiber is the position where the reflected signal of the first test signal has the maximum optical power in the fiber. If they are consistent, it indicates that the optical network unit is not connected to the legal output port; otherwise, it indicates The optical network unit is connected to a legal output port.

In conjunction with the second possible implementation of the second aspect, in a third possible implementation of the second aspect, the processor may further send the first test to the legal output port allocated to the optical network unit in the optical splitter Before the signal, sending a second test signal to the output port of the splitter, the splitter includes a plurality of output ports, wherein each output port is connected to the input port of the optical splitter through the optical fiber; between the different output ports and the input port The lengths of the optical fibers are different, and a reflection device for reflecting the optical signal is disposed at each of the plurality of output ports, thereby obtaining a reflection signal generated by each output port of the optical splitter reflecting the second test signal, The position of the fiber at which each of the reflected signals has the maximum optical power is recorded as the predetermined fiber position of the corresponding output port.

In conjunction with the first possible implementation of the second aspect, in a fourth possible implementation of the second aspect, the processor is configured to determine a fiber position of the optical signal unit with the maximum optical power of the reflected signal indicated by the feedback information Whether the position of the optical fiber is consistent; wherein the position of the optical fiber is the position where the reflected signal has the maximum optical power in the optical fiber, and if it is determined that the two are consistent, it is determined that the optical network unit is connected to the legal output port; otherwise, the optical network unit is determined. Not connected to a legal output port.

In conjunction with the fourth possible implementation of the second aspect, in a fifth possible implementation of the second aspect, the processor may further send the first test to the legal output port allocated to the optical network unit in the optical splitter Before the signal, the second test signal is sent to the legal output port of the optical splitter that is legally connected to the optical network unit, and the optical network unit is provided with a reflective device for reflecting the optical signal, and then the authentication device can acquire the optical network unit to the second The reflected signal generated by the reflection of the test signal is recorded, and the position of the optical fiber when the reflected signal has the maximum optical power is recorded as the preset optical fiber position of the optical network unit, and stored, so as to determine the connection relationship of the optical network unit according to the preset optical fiber position later. .

In conjunction with the third possible implementation of the second aspect, in a first possible implementation of the second aspect, the processor, before transmitting the first test signal to the legal output port of the optical splitter for the optical network unit And is further configured to send a second test signal to the output port of the optical splitter, and obtain a reflected signal generated by each output port of the optical splitter to reflect the second test signal, and the optical fiber when each of the reflected signals has the maximum optical power The position is recorded as the preset fiber position of the corresponding output port; wherein each output port is connected to the input port of the optical splitter through the optical fiber, the length of the optical fiber between the different output ports and the input port is different, and multiple output ports Reflecting means for reflecting the optical signal are disposed at each of the output ports;

And sending a second test signal to the legal output port of the optical splitter that is legally connected to the optical network unit, where the optical network unit is provided with a reflective device for reflecting the optical signal, and then the processor obtains the optical network unit and the second test signal. The reflected signal generated by the reflection is recorded, and the position of the optical fiber when the reflected signal has the maximum optical power is recorded as the preset optical fiber position of the optical network unit.

In a third aspect, a spectroscope is provided, the spectroscope being located in an optical distribution network in an optical network system, the optical splitter comprising: an input port and a plurality of output ports, and each of the plurality of output ports and the input port The fibers are connected by fiber, and the length of the fiber between each output port and the input port is in an equal relationship.

In the example of the present invention, since the lengths of the optical fibers between the output ports and the input ports in the optical splitter are in an equal relationship, the corresponding output ports can be determined based on the difference between the lengths of the optical fibers, which is convenient for different optical splitters. The output port is distinguished.

In conjunction with the third aspect, in a first possible implementation of the third aspect, the optical splitter further includes a reflective device disposed at each of the plurality of output ports, and the reflective device can be configured to reflect the light of the corresponding output port signal.

In the embodiment of the present invention, since each of the output ports of the optical splitter is provided with a reflecting device that can be used for reflecting the optical signal, different output ports can be distinguished by transmitting the reflected signals reflected by the output ports in the optical fiber. Improve the recognition efficiency of the output port.

A third aspect provides an optical network system for performing the method of any one of the first aspect or the first aspect, the optical network system comprising: a splitter and an authentication The device, the optical splitter can be used to provide an optical transmission channel of the optical network system, and the authentication device can be connected to the optical splitter for receiving an online request sent by the optical network unit connected to the output port of the optical splitter, and the uplink request is used for the optical The network unit requests to access the optical network, and the authentication device can detect the connection relationship between the optical network unit and the output port of the optical splitter according to the online request. If it is determined that the detected connection relationship is consistent with the legal connection relationship of the optical network unit, the optical network is determined. The unit is authenticated to allow the optical network unit to access the optical network. The legal connection relationship is used to indicate that the output port of the optical splitter to which the optical network unit is connected is a legal output port allocated for the optical network unit.

In the embodiment of the present invention, since the optical splitter includes a plurality of output ports, each of the output ports is connected to the input port of the optical splitter through an optical fiber, and the lengths of the optical fibers between the different output ports and the input ports are different, and the plurality of output ports are Each of the output ports is provided with a reflection device for reflecting the optical signal, so when the authentication device detects the connection relationship between the optical network unit and the output port, the optical network unit can be distinguished based on the characteristics of the output ports in each optical splitter. The output port of the connected network is determined to be a legal output port. Therefore, the process of determining the connection relationship of the optical network unit is relatively simple and has high accuracy, which helps the optical network system to access the optical network unit of the optical network. Effective supervision.

In an actual application, the optical network system may further include an optical distribution network including at least one of the foregoing optical splitters, and the optical distribution network may be configured to provide an optical transmission channel between the optical line terminal and the optical network unit; The line terminal can be used to provide an interface for accessing the optical network, and receive an online request for the optical network unit that requests the network access, and send the online request to the authentication device, and the authentication device can detect the optical network unit and the output according to the online request. The connection relationship of the port is determined to be consistent with the legal connection relationship. Therefore, it is determined whether the output port currently connected to the optical network unit is a legal output port allocated by the PON. If yes, it is determined that the optical network unit passes the authentication, and the light is allowed at the moment. The network unit is connected to the optical network.

Therefore, the optical line terminal included in the optical network system can send the online request of the optical network unit to the authentication device, so that the authentication device can detect the connection relationship between the optical network unit and the output port of the optical splitter based on the online request, and The length of the optical fiber connected between each output port and the input port in the optical splitter is different, so that the output port connected to the optical network unit can be easily determined according to the characteristics of each output port in the optical splitter, and then it can be determined whether it is light or not. Legal assignment of network elements The output port is allowed to access the optical network only when it is YES, thereby ensuring the legitimacy of the optical network unit that accesses the optical network and improving the security of the optical network system.

With reference to the fourth aspect, in a first possible implementation manner of the fourth aspect, the optical network system further includes a test device connected to the authentication device, where the test device may be an optical time domain reflectometer, which may be based on the received authentication The control command of the device sends a test signal to the legal output port allocated to the optical network unit in the optical splitter, and sends the obtained legal output port to the authentication device for the reflected signal generated by the test signal.

In the embodiment of the present invention, the authentication device can transmit the test signal through the optical time domain reflectometer, and the test signal can be transmitted along the optical fiber to the corresponding output port, and the information of the received reflected signal is reported to the authentication device, and the authentication device is based on the reflection. The analysis of the signal can determine the reflection of each output port for the test signal, and it is convenient to monitor the link quality of the optical fiber, so that the link fault in the optical fiber can be detected and located in time.

With reference to the first possible implementation manner of the fourth aspect, in a second possible implementation manner of the fourth aspect, the lengths of the plurality of optical fibers between the plurality of output ports of the optical splitter and the input port are in an equal relationship, and Each output port is also provided with a reflecting means for reflecting the optical signal.

In the embodiment of the present invention, the test signal in the corresponding output port can be reflected by the reflection device disposed at each output port of the optical splitter, so the output port can be determined by determining the information of the reflected signal of each output port for the test signal. Whether it is used or not, the determination method is relatively simple, and since the reflected signal has good stability in fiber transmission, it helps to improve the accuracy of the test result.

In a fifth aspect, an authentication device is provided, which may comprise a functional module for performing the method of the first aspect or any of the possible implementations of the first aspect.

In the example of the present invention, the connection between the optical network unit and the output port of the optical splitter is tested by the authentication device, thereby effectively ensuring that the optical network unit goes online through the legal output port allocated thereto, thereby improving the access of the optical network system. The regulatory effect of the optical network unit of the optical network.

These and other aspects of the invention will be more apparent from the following description of the embodiments.

DRAWINGS

In order to more clearly illustrate the technical solution in the embodiment of the present invention, the following description will be made on the embodiment. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are incorporated in the drawings, FIG. Other figures are obtained from these figures.

FIG. 1 is a schematic structural diagram of a system of a PON according to an embodiment of the present disclosure;

2 is a schematic structural diagram of a beam splitter according to an embodiment of the present invention;

3 is a schematic diagram of a position of a reflection peak of an output port of a beam splitter according to an embodiment of the present invention;

4 is a flowchart of a method for an ONU to access an optical network according to an embodiment of the present invention;

5A-5B are schematic diagrams of detection curves of a connection relationship of an ONU according to an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of an authentication device according to an embodiment of the present disclosure;

FIG. 7 is a structural block diagram of an authentication device according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Some of the terms in the embodiments of the present invention are first explained to be understood by those skilled in the art.

1) Optical network refers to the network structure that uses optical fiber transmission. In the embodiment of the present invention, the optical network is a PON as an example. The optical network in the embodiment of the present invention is not limited thereto. The PON has a single-fiber bidirectional structure, that is, it can simultaneously receive optical signals and transmit optical signals in one optical fiber, and the optical transmission efficiency is high.

2) The authentication device is used to authenticate the ONU that requests access to the PON to ensure that the ONU can go online using the legal output port assigned to it. In the embodiment of the present invention, the authentication device may be a device that includes an NMS, and may authenticate the ONU by detecting a connection relationship between the ONU and the optical fiber link. Wherein, the NMS can be set as a function module in the authentication device, and the authentication device can be The authentication process is implemented by the NMS, that is, the connection relationship of the ONU is detected to determine whether the ONU passes the authentication. Alternatively, the authentication device may implement the authentication process in other manners, which is not limited in the embodiment of the present invention.

In the following description, the authentication of the built-in NMS of the device and the authentication of the ONU by the NMS are taken as an example.

3) Test equipment, a device for testing the connection relationship between the ONU and the output port of the optical splitter. In the embodiment of the present invention, the test device is an optical time domain reflectometer (OTDR). For example, the test device in the embodiment of the present invention is not limited thereto. The OTDR can emit test light signals and measure the length of the fiber, the attenuation of the transmission of the fiber, the attenuation of the joint, and the fault location by backscattering generated by the test optical signal transmitted in the fiber.

In practical applications, the OTDR can be set as a function module in other devices, for example, in an authentication device. Alternatively, the OTDR can also be a stand-alone device that can communicate with other devices via fiber optics or short-range communication protocols. The short-range communication protocol is, for example, Bluetooth or Wireless-Fidelity (Wi-Fi).

When the test optical signal needs to be sent, if the OTDR is set in the authentication device, the authentication device can send the test optical signal through the OTDR in the authentication device, or if the OTDR and the authentication device are two independent devices, then the authentication device The OTDR can be communicated to transmit the test optical signal through the OTDR.

The system architecture applied in the embodiment of the present invention is described below with reference to the accompanying drawings.

As shown in Figure 1, it is a schematic diagram of the system architecture of the PON.

The PON generally includes three parts, which are an Optical Line Terminal (OLT), an Optical Distribution Network (ODN), and an ONU.

The OLT can provide an interface between the access network and the local switch, and communicate with the ONU through optical transmission.

The ODN can be used to provide an optical transmission channel between the OLT and the ONU. The ODN includes one or more stages of splitters, each splitter including at least one output port, and the ONU is connected to the PON through an output port of the splitter.

The ONU can convert the optical signal sent by the OLT into an electrical signal, and can transmit the electrical signal to a User Equipment (UE) that communicates with the ONU.

In the PON, the signal sent by the OLT can reach the corresponding ONU through the ODN, for example, to the ONU1 and/or the ONU2 in FIG. Similarly, the signal sent by the ONU in the PON can reach the OLT, but generally does not reach other ONUs.

The NMS in the authentication device can communicate with the OLT in the OTDR and the PON respectively. Figure 1 shows an example in which the OTDR and the authentication device are independent devices. The authentication device can send the test optical signal through the OTDR, and the test optical signal sent by the OTDR can enter the optical fiber corresponding to the output port of the optical splitter by wavelength division multiplexing (WDM), so that the test optical signal can be correspondingly The fiber is transmitted to the output port that needs to be tested. For example, the test optical signal sent by the OTDR in FIG. 1 can be transmitted to the ONU 2 to be tested through WDM.

It will be understood by those skilled in the art that FIG. 1 is merely an example of a network architecture for a PON, and does not constitute a limitation on an authentication device and a PON. The PON may include more or less devices than those illustrated, or may combine certain devices.

For the sake of understanding, FIG. 2 shows a spectroscope provided by an embodiment of the present invention. The spectroscope can be applied to the network architecture shown in FIG. 1. That is, the structure of the optical splitter shown in FIG. 1 can be referred to FIG. 2.

The spectroscope can reflect the test signal with a specific reflectivity, and the reflected signal is returned to the authentication device along the optical fiber. The internal structure of the optical splitter provided by the embodiment of the present invention has at least the following features:

1. In order to facilitate the detection of the use of the output ports of the optical splitter by the test optical signal, each output port of the optical splitter may be configured with a reflecting means for reflecting the optical signal, such as a U-band reflector. Wherein, the reflecting device can be fixedly disposed in the dust cap configured for each output port. Then, if the dust cap is sleeved on the output port, the output port can reflect the optical signal. If the dust cap is removed, the output port can transmit the optical signal to the next level device, such as the UE.

In practical applications, when the output port is not used, the dust cap is sleeved on the output port to prevent dust from entering the output port. If an output port of the optical splitter needs to be connected to the ONU, you can remove the dust cap of the output port and connect the ONU to the output port to enable the ONU to access the optical network.

2. The length of the optical fiber connected between the different output ports of the optical splitter and the input port of the optical splitter is different, that is, the connection between any two output ports of the same optical splitter and the input port of the optical splitter The length of the fiber is different.

In practical applications, the optical splitter manufacturer can select different lengths of fiber to connect the output port to the input port, and there is no specific limit on the length of each fiber, which helps to improve the flexibility when using fiber for connection. For example, the length of the fiber connected between the output port 1 and the input port may be 1.20 m, and the length of the fiber connected between the output port 2 and the input port may be 1.48 m, and the length of the fiber of the output port 3 may be taken as 1.55m, etc., the length of each optical fiber is not specifically limited in the embodiment of the present invention.

Alternatively, the length of the fiber connected between each output port and the input port of the splitter can also be set according to certain rules. For example, the lengths of the optical fibers of each output port are equal to each other, so that after the optical fibers having the equal-distance relationship are provided for the respective output ports, different output ports can be distinguished according to the length and the equal-difference relationship of the optical fibers. Helps improve the recognition efficiency of the output port. In the embodiment of the present invention, an equal difference relationship between the length of the optical fiber between the output port of the optical splitter and the input port is taken as an example. For example, the length of the fiber between the output port 1 and the input port of the beam splitter is L, the length of the fiber between the output port 2 and the input port is L+a, and the length of the fiber between the output port 3 and the input port is L+2a..., and so on, the length of the fiber between the output port N and the input port is L+(N-1)×a, where N is a positive integer.

The technical solutions provided by the embodiments of the present invention are further described in detail below with reference to the accompanying drawings. The following introduction process takes the system architecture shown in FIG. 1 as an example. The structure of the optical splitter mentioned below can be referred to FIG. 2.

Referring to FIG. 4, an embodiment of the present invention provides a method for an ONU to access an optical network, where the method can be performed by using an authentication device as shown in FIG. 1. The process of the method is as follows:

S11: The authentication device receives the online request sent by the ONU, and the online request is used for the ONU to request access to the PON;

S12: The authentication device goes online to detect a connection relationship between the ONU and the output port of the optical splitter.

S13: If it is determined that the detected connection relationship is consistent with the legal connection relationship of the ONU, determine the ONU pass. The authentication is performed to allow the ONU to access the PON. The legal connection relationship is used to indicate that the output port of the optical splitter to which the ONU is connected is a legal output port allocated for the ONU.

When an ONU needs to access an optical network, it usually needs to connect to the output port of the optical splitter, and then send an online request to the authentication device through the optical splitter. The online request may carry the login information of the ONU, and the login information may include a serial number (Serial Number) and a password (Password) of the ONU. Of course, the login information may further include other information, such as an identifier of the ONU, and the ONU. The identity may be a unique identifier assigned by the PON to the ONU for identifying the identity of the ONU in the PON.

Generally, when the ONU registers with the PON, the PON obtains the serial number (Serial Number) and password (Password) of the ONU, and after registering, can set the corresponding identifier for the ONU, and store the information. The identifier of the ONU may be randomly set by the PON, or may be set based on the serial number of the ONU, and the identifier may be the serial number of the ONU, and may be set by a person skilled in the art according to actual conditions. This example does not impose any specific restrictions.

In practical applications, the serial number and password can be used for the login credentials when the ONU is online again. The identifier can be used for the identity identification of the PON to the ONU when the ONU goes online. Then, when the ONU is online again, the authentication device performs preliminary verification on the ONU according to the login information in the online request sent by the obtained ONU, that is, whether the login information is consistent with the preset login information of the registered ONU, and if it is consistent, the initial Verification, but the authentication device does not allow the ONU to access the optical network. It will further detect whether the output port of the optical splitter currently connected to the ONU currently on the line is the legal output port of the ONU, that is, the ONU is detected according to the online request. Whether the connection relationship with the output port of the optical splitter is consistent with the legal connection relationship, and the legal connection relationship may be directly invoked by the authentication device according to the identifier of the ONU carried by the online request.

The following describes a process for detecting whether a connection relationship is consistent with a legal connection.

The authentication device sends a detection command to the OTDR through the NMS, and the OTDR executes the detection command to send a test optical signal to the legal output port allocated to the ONU in the optical splitter, and the test optical signal is referred to as a first test signal. When the first test signal reaches the legal output port, the reflective device disposed in the legal output port will reflect the first test signal to generate a reflected signal, and the reflected signal is along the original When the road returns to the OTDR, the OTDR sends the feedback information related to the reflected signal to the authentication device, and the authentication device determines the connection relationship between the ONU and the output port of the optical splitter according to the obtained feedback information. The feedback information can indicate information of the reflected signal generated by the legal output port for the first test signal, for example, the optical power intensity of the reflected signal, the time of receiving the reflected signal, and other possible information.

The authentication device may determine the connection relationship between the ONU and the output port of the optical splitter according to the feedback information. For example, the time difference method or the optical power mode may be used. The following two methods are respectively introduced.

1. Optical power mode.

When the optical power mode is adopted, it may include, but is not limited to, the following determination processes:

Determination Process 1: The authentication device determines whether the reflected fiber signal indicated by the feedback information has the maximum optical power and the fiber position is consistent with the preset fiber position of the legal output port.

The legal output port refers to the output port allocated by the PON to the ONU. For example, when the ONU first registers, the PON can allocate an output port for the ONU, and the allocated output port is also the legal output port of the ONU. An ONU can have one legal output port or multiple legal output ports. For example, the optical splitter includes three output ports: output port 1, output port 2, and output port 3. If the ONU1 is registered in the PON, the PON allocates the output port 1 to the ONU1, and the output port 1 is the legal output port of the ONU1. .

The reflected signal of the legal output port may be an optical signal transmitted to the legal output port along the optical fiber and reaching the output port of the optical splitter, and the reflecting device in the output port reflects the optical signal. The preset fiber position of the legal output port may refer to the position of the reflected signal in the fiber when it has the maximum optical power. Generally, the optical signal sent to the legal output port is transmitted along the optical fiber and reaches the output port of the optical splitter. The reflective device in the output port can reflect the optical signal according to a specific reflectivity, and the reflected signal generated at the output port. With maximum power, it can be considered that the position of the fiber having the maximum power of the reflected signal reflected by the reflecting means of the output port can indicate the position of the output port in the fiber.

In practical applications, the reflected signal of the legal output port should have the preset optical fiber with the maximum optical power. The location can be pre-tested, for example, tested prior to S12. The following describes a process for testing the default fiber position of a legal output port:

The authentication device sends a second test signal to the output port of the optical splitter, and obtains a reflected signal generated by each output port of the optical splitter to reflect the second test signal, thereby recording the optical fiber position of each of the reflected signals having the maximum optical power. The default fiber position for the corresponding output port. Of course, in the test process, it is not possible to send to each output port, and send a second test signal to the output port that needs to be tested. Just to make the test coverage wider, you can send to each output port, that is, you can test all the output ports of the splitter.

In the test, since each of the output ports of the optical splitter is provided with a dust cap of a built-in reflection device, if the dust cap is attached to the output port, if the authentication device sends a second to the input port of the optical splitter The test signal can be transmitted along the optical fiber and reach the output port of the optical splitter. The reflective device in the output port can reflect the optical signal according to a specific reflectivity to obtain a reflected signal, and the reflected signal is returned to the authentication device along the optical fiber. Thereby, the authentication device can analyze the reflected signals of the received output ports. For example, an analysis method is that a process of transmitting an optical signal to each output port to a reflected signal of the receiving output port is presented in a coordinate system, wherein the vertical axis of the coordinate system is the optical power of the optical signal, and the horizontal axis is the optical signal in the optical fiber. In the transmission time, the transmission time can characterize the distance that the optical signal is transmitted in the optical fiber, so the position of the optical signal in the optical fiber can be located based on the transmission time, that is, the horizontal axis can represent the optical fiber between the output port and the input port. The length, or the distance at which the optical signal of the output port is transmitted in the fiber. Therefore, by labeling the change of the optical signal when the optical signal is transmitted in each output port in the coordinate system, a curve characterizing the optical power with time when the optical signal is transmitted on the optical fibers of each output port can be obtained. OTDR detection curve.

Through the OTDR detection curve, it can be seen that the maximum value of the optical power when the optical signal is transmitted on the optical fiber corresponding to the different output port, that is, the position where the output port has a reflection peak in the optical fiber, so the optical fiber of the reflection peak can be The position is the preset fiber position of the corresponding output port and is stored.

As shown in FIG. 3, when the lengths of the optical fibers corresponding to the output ports of the optical splitter are in an equal relationship, The time at which the reflected signals of the output port 1 to the output port N of the optical splitter on the OTDR detection curve have the maximum optical power, that is, the position where the corresponding reflected peak appears in the optical fiber. For example, the position of the reflection peak of the output port 1 is located at the position 1 on the horizontal axis of the coordinate system, the position of the reflection peak of the output port 2 is at the position 2, ..., and the position of the reflection peak of the output port N is at the position N. Since the lengths of the fibers corresponding to the output ports are in an equal relationship, for example, the lengths of the fibers corresponding to the output ports 1 and the output ports 2 are different by a, and the lengths of the fibers corresponding to the output ports 2 and the output ports 3 are also different by a. In the coordinate system shown in FIG. 3, the position 1 of the reflection peak of the output port 1 and the position 2 of the reflection peak of the output port 2 are spaced apart from each other, and the position 2 of the reflection peak of the output port 2 and the reflection peak of the output port 3 are Position 3 is also separated by b.

Since the time during which the optical signal is transmitted in the optical fiber is usually related to the length of the optical fiber during the actual transmission process, the longer the optical fiber may be, the longer the transmission time of the optical signal is. Therefore, the position of the reflection peak on the OTDR detection curve may indicate the optical signal. The length of the fiber that has been transmitted when the fiber cross-section is encountered on the fiber, and the position of the fiber cross-section is usually the position at which the output port is set, because the length of the fiber between the different output port and the input port in the embodiment of the present invention Different, so the position of the reflection peak of each output port on the OTDR detection curve is different. According to the position of the reflection peak on the OTDR detection curve, the corresponding output port can be determined, and the determination method is faster and the accuracy is higher.

After the first test signal is sent to the legal output port of the optical splitter, the authentication device obtains the feedback information of the legal output port for the first test signal, and the optical fiber position of the reflected signal indicated by the feedback information has the maximum optical power. The preset fiber positions of the legal output ports are compared. If the two are consistent, that is, when the reflected signal of the legal output port should have the maximum optical power, a reflection peak appears at the corresponding position in the fiber, indicating that the first test signal is at the output port. The position is reflected, that is, the dust cap of the output port is not removed, and it is determined that the ONU is not connected to the legal output port. Of course, if the two are inconsistent, it indicates that the first test signal is not reflected at the output port, the dust cap of the legal output port has been removed, and it is determined that the ONU is connected to the legal output port.

Determination Process 2: The authentication device determines whether the reflected fiber signal indicated by the feedback information has the maximum optical power and the fiber position is consistent with the preset fiber position of the ONU.

The preset fiber position of the ONU can be legal when the ONU is connected to the legal output port. The output port sends an optical signal, and the test optical signal is transmitted along the optical fiber and reaches the ONU connected to the legal output port, and the reflected signal generated by the reflection device in the ONU reflects the position of the optical fiber with the maximum optical power. . The preset fiber position of the ONU can also be pre-tested, for example, before S12. The following describes a process for testing the default fiber position of an ONU:

The authentication device sends a test optical signal to the legal output port of the optical splitter that is legally connected to the ONU through the OTDR. The test optical signal is called a second test signal, and a reflective device for reflecting the optical signal is disposed in the ONU. Furthermore, the OTDR can acquire the reflected signal generated by the reflection device of the ONU to reflect the second test signal, and record the position of the fiber with the maximum optical power of each reflected signal as the preset fiber position of the corresponding ONU, for example, OTDR detection. The position at which the reflected peak appears on the curve.

Then, after determining the position of the optical fiber of the ONU according to the feedback information, if the authentication device determines that it is consistent with the preset optical fiber position of the ONU, it indicates that the first test signal is reflected by the reflection device in the ONU, so that the ONU can be determined to be connected to the legal output port. If they are inconsistent, indicating that the first test signal is not reflected by the reflecting device in the ONU, it is determined that the ONU is not connected to the legal output port.

In the embodiment of the present invention, in order to determine the connection relationship of the ONU, the authentication device may be implemented in two ways: combining the OTDR detection curve and the foregoing determining the connection relationship.

For example, if the PON is the legal output port assigned to the ONU1, it is the output port 1 of the optical splitter as shown in FIG. 2. The authentication device sends a first test signal to the output port 1 of the optical splitter through the OTDR, and detects the connection relationship between the ONU1 and the output port of the optical splitter. The corresponding OTDR detection curve is obtained as shown in FIG. 5A, and FIG. 5A shows The position of the reflection peak of the other output port of the spectroscope is taken out, wherein the position A is the position where the ONU1 is located when the ONU1 and the output port 1 are connected by the optical fiber.

As can be seen from FIG. 5A, when the ONU1 is connected to the legal output port, the following information can be obtained:

a. The reflection peak at the output port 1 of the beam splitter disappears;

b. ONU1 has a new reflection peak at position A;

c. The characteristic distance between the position where the reflection peak of ONU1 is located and the position where the reflection peak of the output port 1 of the spectroscope is located is D1, which can represent the light between ONU1 and output port 1. The length of the fiber.

Therefore, by observing the position of the reflection peak of the legal output port, that is, the reflected signal of the legal output port in the coordinate system has the optical fiber position at the maximum optical power, which is consistent with the preset fiber position. Here, the preset fiber position may be legal. The preset fiber position of the output port and the preset fiber position of the OUN1 can determine whether the ONU is connected to the legal output port according to the determination process described above. The judgment mode is quick and accurate, and the output port is observed through the OTDR detection curve. The condition of the reflected signal can better monitor the link quality and detect and locate the link fault in time.

Further, if the user pulls out the ONU1 from the output port 1 and transfers to the output port 2 to connect, the output port 1 has been re-applied with the dust cap of the built-in reflector, and the reflection peak of the output port 1 reappears, and the position The reflection peak of A will also disappear, and since the dust cap of the output port 2 connected to the ONU is removed, the reflection peak at the corresponding position on the OTDR detection curve disappears, and the corresponding ONU1 is connected to the output port 2 The position B at the location will also have a corresponding reflection peak, that is, the position where the optical power of the reflected signal generated by the reflection signal reflected by the reflection device built in the ONU1 is the largest, and the corresponding OTDR detection curve is as shown in FIG. 5B, wherein the ONU1 The characteristic distance from the splitter output port 1 is changed from D1 to D2.

It can be seen that when the ONU is connected to the legal output port, the distance between the ONU and the connected output port is fixed, and when the connection relationship is changed, the characteristic distance between the ONU and the connected output port is usually also Corresponding changes, in the process of determining the connection relationship between the ONU and the legal output port, the ONU can be connected to the legal output port to effectively lock the access user and the access network. The location provides effective protection for some access situations with high security requirements, preventing illegal personnel from accessing the optical network by using legally authorized ONUs in their homes.

2, the time difference method.

When determining by time difference, including but not limited to the following several determination processes:

Determination Process 1: The authentication device determines whether the time difference between the time at which the reflected signal indicated by the feedback information is received and the time at which the first test signal is transmitted is consistent with the legal time difference that the legal output port should have.

The legal time difference of the legal output port is the time difference between the transmission of the optical signal to the legal output port and the reception of the optical signal reflected by the legal output port. The legal time difference of the legal output port can be pre-tested, for example, it is tested before S12. The following describes a process for testing the legal time difference of a legal output port:

The authentication device sends a test optical signal to each output port of the optical splitter through the OTDR, and the test optical signal is referred to as a second test signal. In the test, since each output port is provided with a dust cap with a built-in reflection device, when the second test signal is transmitted to the output port, the reflection device at the output port reflects it to generate a second test signal. The reflected signal and the reflected signal are transmitted to the OTDR, and the OTDR can record the time of receiving the reflected signal of each output port, that is, the time at which the OTDR receives the reflected signal of the reflecting device for the second test signal in each output port, and records the receiving time. Send to the authentication device. In addition, the OTDR can also record the time when the second test signal is sent to the output port, that is, record the transmission time of the second test signal, and send the recorded transmission time to the authentication device.

After the authentication device receives the reception time and the transmission time of the reflected signals of the OTDRs sent by the OTDR for each output port, the legal time difference of each output port can be determined. The legal time difference of any one of the output ports is the time difference between the time when the second test signal is sent to the output port and the time when the reflected signal returned from the arbitrary one of the output ports is received.

For example, the OTDR sends a second test signal to the N output ports of the optical splitter at time T ₀ . After the second test signal reaches the output port, the second test signal is reflected by the reflection device at the output port, and the reflected signal is returned to the OTDR, and the OTDR records for N. The receiving time of the reflected signal of the output port is T ₁ , T ₂ , . . . , T _N-1 , T _N , where 1 to N represent the serial number of the output port. Then, the authentication device determines that the legal time difference of the output port 1 of the optical splitter is T ₁ -T ₀ , the legal time difference of the output port 2 is T ₂ -T ₀ , ..., and the legal time difference of the output port N is T _N -T ₀ .

In the embodiment of the present invention, the legal time difference of each output port of the optical splitter may be obtained in advance, so that when the connection relationship between the ONU and the output port of the optical splitter is detected by using the first test signal, feedback information for the first test signal is adopted. The manner in which the indicated time difference matches the legal time of each output port tested in advance may determine that the output port tested by the first test signal is specifically Which output port in the splitter has a higher recognition efficiency for the output port.

For example, the lengths of the optical fibers of the output port 1, the output port 2, and the output port 3 of the optical splitter are L, L+a, L+2a, respectively, if the second test signal is respectively sent to the three output ports, and based on The feedback information of the second test signal determines that the legal time difference corresponding to the three output ports is T ₁ , T ₂ , T ₃ , where T is the corresponding time when the test signal and the reflected signal are transmitted in the fiber link of length L. Time, if the time difference of an output port detected by sending the first test signal is the same as T ₂ , it indicates that the output port of the first test signal test is output port 2.

In practical applications, the test optical signal may be affected during the transmission of the optical fiber, such as loss, bandwidth, etc., so that the time difference of the same output port tested at different times may fluctuate. As long as it floats within a certain range, that is, the difference between the time difference of the test and the legal time difference is within a certain range, the two can be considered to be consistent. This range can be set based on experience.

For example, the second test signal determines that the legal time difference of the output port 1 is 6 us, and the set floating range is [0, 0.3 us]. If the first test signal determines that the time difference of the tested output port is 5.8 us, it is legal. If the time difference of the time difference is within the allowable floating range, the output port of the test can be considered as the output port 1. If the first test signal determines that the time difference of the tested output port is 5.2us, it is between the legal time difference A time gap that exceeds the allowed floating range indicates that the output port being tested is not output port 1.

If the authentication device determines that the detected time difference is consistent with the legal time difference of the legal output port, it indicates that the reflected signal is reflected by the reflection device in the output port, indicating that the dust cap of the legal output port is in an unpicked state, that is, the ONU is obviously Not connected to a pre-assigned legal output port. Alternatively, if it is determined that the detected time difference is inconsistent with the legal time difference of the legal output port, indicating that the reflected signal is not reflected by the reflective device in the output port, then the reflected signal is considered to be reflected by the ONU connected to the legal output port, that is, The ONU is connected to the legal output port of the ONU.

For example, if the optical splitter includes three output ports, an output port a, an output port b, and an output port c, wherein the output port b is a legal output port allocated by the ONU1, and the output port a, the output port b, and the output port c are determined through advance testing. The legal time difference is in turn T _a , T _b and T _c . Then, if the time difference obtained by sending the first test signal test to the output port b does not coincide with T _b , it indicates that ONU1 is currently connected to the legal output port assigned thereto. Alternatively, if the time difference obtained by sending the first test signal test to the output port b is consistent with T _b , it indicates that the ONU1 is not currently connected to the legal output port allocated thereto, and at this time, it can be determined that the first two output ports are sent first. Whether the time difference tested by the test signal is consistent with the corresponding legal time difference. If it is determined that the time difference of any one of the tested output ports is inconsistent with the corresponding legal time difference, it indicates that the ONU is currently connected to the output port, for example, if it is determined to send to the output port c The time difference obtained by a test signal test is inconsistent with T _c , indicating that the ONU is connected to the output port c.

Therefore, after the first test signal is sent to the legal output port allocated for the ONU, the authentication device can determine the time difference indicated by the feedback information, and further, by comparing whether the time difference indicated by the feedback information and the predetermined output port are legal. If the time difference is consistent, it can be determined whether the legal output port is connected to the ONU, and the determination manner is relatively fast. Certainly, if multiple legal output ports are allocated for an ONU, when determining whether the ONU is connected to the legal output port, the first test signal may be sent to each legal output port, and the time difference of each output port is obtained. Then, the detected time difference is compared with the legal time difference of the corresponding legal output port. As long as the time difference between the legal output port and the legal output port of one legal output port is inconsistent with the legal time difference of the legal output port, the ONU is determined to be connected to the legal output port. .

It can be seen that the second test signal is used to detect the legal time difference of each output port. In the process of determining the connection relationship, it is only necessary to test whether the time difference of the legal output port allocated for the ONU is consistent with the legal time difference of the legal output port. Determining whether the ONU is connected to the legal output port provides a way to determine the connection relationship between the ONU and the output port. The determination method is relatively simple, and the determined result is relatively accurate.

Determination Process 2: The authentication device determines whether the time difference between the time at which the reflected signal indicated by the feedback information is received and the time at which the first test signal is transmitted is consistent with the legal time difference that the ONU should have.

The legal time difference of the ONU is the time difference between sending a test signal to the ONU connected to the legal output port to receiving the signal reflected by the ONU. The legal time difference of the ONU can also be Pre-tested, for example, was tested before S12. The following describes a process for testing the legal time difference of an ONU:

The authentication device sends a test optical signal to the legal output port of the optical splitter that is legally connected to the ONU through the OTDR, and the test optical signal may still be referred to as a second test signal. The second test signal is reflected back to the OTDR by the reflecting device provided in the ONU, and the OTDR can determine the difference between the time when the second test signal is sent and the time of receiving the reflected signal from the ONU for the second test signal, the difference. That is, the legal time difference of the ONU, the authentication device can store it in the database in advance, so that it can be called when receiving the online request of the corresponding ONU in the later stage, so as to determine the connection relationship of the ONU based on the legal time difference of the ONU.

In practical applications, when the ONU is connected to the output port of the optical splitter, it is connected to the output port of the optical splitter through a fiber optic cable. When the connection is made, the dust cap of the output port is removed. Therefore, during the testing process When the authentication device sends the first test signal to the output port, the first test signal is transmitted along the fiber link, and when it reaches the output port of the beam splitter, no reflection of the test signal is generated, and when the test signal edge When the optical fiber continues to be transmitted to the ONU, the reflection device provided in the ONU reflects the first test information, and the reflected signal is returned to the authentication device. At this time, the time for transmitting the first test signal and the time for receiving the reflected signal are obtained by the authentication device test. The time difference between them is usually greater than the legal time difference of the output port. That is to say, for the same output port, when detecting the legal time difference of the ONU, the transmission distance of the optical signal in the optical fiber is generally greater than the distance that the optical signal is transmitted in the optical fiber when detecting the legal time of the output port.

During the process of determining the connection relationship between the authentication device, it may be determined whether the time difference determined by the first test signal is consistent with the legal time difference of the ONU to determine whether the current ONU is connected to the allocated legal output port. If the authentication device determines that the time difference is consistent with the legal time difference of the ONU, the authentication device determines that the ONU is currently connected to the legal output port, that is, the received reflected signal is a signal reflected by the reflection device in the ONU. If not, the ONU does not have a legal output port. Connected, at this time, the legal output port may not be connected or connected to other ONUs.

For example, if the optical splitter includes three output ports: output port 1, output port 2, and output port 3, when the ONU1 is connected to the output port 1, the output port 2, and the output port 3 respectively, the legal time difference of the ONU1 is T ₁ , T ₂ and T ₃ , where output port 2 is the legal output port assigned by ONU1. Then, during the test, if the time difference of the ONU sent by the first test signal to the output port 2 is consistent with T ₂ , it indicates that the ONU 1 is currently connected to the legal output port assigned thereto. Alternatively, if the transmission time of the first test signal test ONU1 resulting difference to the output port 2 and T ₂ do not match, this indicates that no ONU1 connected to the output port assigned to legitimate, in which case it can be determined to send another two output ports Whether the time difference of the ONU1 tested by the first test signal is consistent with T ₁ or T ₃ . If it is determined that the time difference of any one of the tested output ports is consistent with the corresponding legal time difference, it indicates that ONU1 is currently connected to the output port, for example, if the authentication device determining a first transmission time ONU1 test signal test to output the resulting difference between port 1 and T ₁ is consistent, it is determined that the output port 1 is connected to ONU1.

Therefore, the time difference method can be used to detect the time difference of the ONU of the legal output port, and the difference between the detected time difference and the legal time difference can be quickly determined whether the ONU is connected to the legal output port, and the ONU is solved in the prior art. The technical defect that the system cannot detect when changing the connection relationship with the legal output port, and can also determine the output port connected after the ONU changes the connection relationship based on the detected time difference and the legal time difference of the ONU. For example, the user sets the ONU1 from the optical splitter. When the legal output port 2 is switched to the other output port 1, the new connection relationship is that the ONU1 is connected to the output port 1, thereby facilitating the better supervision effect on the connection relationship of the ONUs of the access network.

Of course, in the actual application, when determining the connection relationship between the ONU and the output port by using any of the foregoing methods, any one of the foregoing determining processes may be used alone, or may be used in combination with two determining processes, which is not used by the embodiment of the present invention. Specific restrictions. Even in the case of no conflict, the optical power mode and the time difference mode can be combined to determine the connection relationship between the ONU and the output port.

In an actual application, if the authentication device determines that the detected connection relationship is consistent with the legal connection relationship of the ONU, the ONU is authenticated. At this time, the authentication device will allow the ONU to access the PON. If the authentication device is inconsistent, the authentication device can refuse the ONU to go online. The ONU1 position change alarm can be issued. Even after the connection relationship is changed, the port identifier corresponding to the output port connected to the ONU, such as output port 2 or output port 3, is reported to the authentication device to improve the connection relationship with the optical network unit. Supervisor Test, easy to understand the ONU's network access trends in real time.

In the embodiment of the present invention, the authentication device can quickly determine the output port currently connected to the ONU by using the optical power mode or the time difference mode. If the output port is a legal output port, the connection relationship is consistent with the legal connection relationship, that is, the authentication is performed. The ONU-based connection is used to authenticate the ONU. This can effectively ensure that the ONU can go online only through the output port assigned to it. This prevents unauthorized users from sharing the network connection with different optical access ports. Services help operators manage broadband access users and improve network security.

As shown in FIG. 6, the authentication device provided in the embodiment of the present invention may include a receiver 601, a memory 602, and a processor 603 connected to the same bus 600.

Optionally, the authentication device may further include a transmitter 604, which is shown together in FIG. Since the transmitter 604 is an optional physical component, it is drawn in the form of a dashed line in FIG.

Specifically, the receiver 601 can be configured to receive an online request sent by the optical network unit, and the online request is used by the optical network unit to request access to the optical network.

The memory 602 can be used to store a legal connection relationship of the optical network unit, where the legal connection relationship is used to indicate that the output port of the optical splitter to which the optical network unit is connected is a legal output port allocated for the optical network unit.

The processor 603 is configured to detect a connection relationship between the optical network unit and the output port of the optical splitter according to the online request. If it is determined that the detected connection relationship is consistent with the legal connection relationship of the optical network unit, determining that the optical network unit passes the authentication, allowing the light. The network unit is connected to the optical network.

In an actual application, the processor 603 may be a central processing unit (CPU) or an application specific integrated circuit (ASIC), and may be one or more integrated circuits for controlling program execution. Is a baseband chip, and so on.

The number of the memory 602 in the authentication device may be one or more, and the memory 602 may be a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk. and many more.

The transmitter 604 can be used to transmit a test signal or the like when the optical network unit and the output port of the optical splitter are connected, or can also send other data, which is not provided by the embodiment of the present invention. Body limitation.

The receiver 601, the memory 602, and the transmitter 604 may be connected to the processor 603 via the bus 600 (for example, as shown in FIG. 6), or may be separately connected to the processor 603 through a dedicated connection line.

The receiver 601 and the memory 602 transmitter 604 may also be connected via a bus 600 (for example, as shown in FIG. 6), or may be connected through a dedicated connection line.

By designing and programming the processor 603, the code corresponding to the method for accessing the ONU to the PON is solidified into the chip, so that the chip can execute the method provided by the foregoing embodiment shown in FIG. 4 during operation, how to The processor 603 performs design programming and is well known to those skilled in the art, and details are not described herein again.

In addition, since the authentication device in the embodiment of the present invention can be used to perform the method provided by the embodiment shown in FIG. 4, the functions that can be implemented by each functional unit in the authentication device in the embodiment of the present invention can be seen in FIG. The description of the embodiments will not be repeated here.

As shown in FIG. 7, an embodiment of the present invention provides an authentication device, which can be applied to an optical network system as shown in FIG. 1. The authentication device can include a receiving module 701, a testing module 702, and a processing module 703. .

In an actual application, the physical device corresponding to the receiving module 701 may be the receiver 601 in FIG. 6 , the physical device corresponding to the testing module 702 may be the transmitter 604 in FIG. 6 , and the physical device corresponding to the processing module 703 may be FIG. 6 . Processor 603 and memory 602.

The various modules in the authentication device may be used to perform the methods provided by the embodiment shown in FIG. 4, such as an authentication device as previously described. Therefore, for the functions and the like implemented by the modules in the authentication device, reference may be made to the description of the previous method section, and details are not described herein.

It will be clearly understood by those skilled in the art that for the convenience and brevity of the description, only the division of each functional module described above is exemplified. In practical applications, the above function assignment can be completed by different functional modules as needed. The internal structure of the device is divided into different functional modules to perform all or part of the functions described above.

In the several embodiments provided by the present invention, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative For example, the division of the module or unit is only a logical function division, and the actual implementation may have another division manner, for example, multiple units or components may be combined or integrated into another system, or some Features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application, in essence or the contribution to the prior art, or all or part of the technical solution may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to perform all or part of the steps of the methods described in various embodiments of the present application.

The above embodiments are only used to describe the technical solutions of the present application in detail, but the description of the above embodiments is only for helping to understand the method and the core idea of the present invention, and should not be construed as limiting the present invention. Those skilled in the art will be able to devise variations or alternatives within the scope of the present invention within the scope of the present invention.

Claims

A method for an optical network unit to access an optical network, comprising:

Receiving, by the authentication device, an online request sent by the optical network unit, where the online request is used by the optical network unit to request access to the optical network;

The authentication device detects a connection relationship between the optical network unit and an output port of the optical splitter according to the online request;

If it is determined that the detected connection relationship is consistent with the legal connection relationship of the optical network unit, determining that the optical network unit passes the authentication, allowing the optical network unit to access the optical network; wherein the legal connection relationship is used. An output port indicating the optical splitter to which the optical network unit is connected is a legal output port allocated for the optical network unit.
The method of claim 1, wherein the detecting a connection relationship between the optical network unit and an output port of the optical splitter according to the online request comprises:

Sending, by the authentication device, the first test signal to the legal output port allocated by the optical network unit in the optical splitter according to the online request;

The authentication device obtains feedback information of the legal output port for the first test signal;

The authentication device determines the connection relationship according to the feedback information, where the feedback information is used to indicate information of a reflected signal generated by the legal output port for the first test signal.
The method of claim 2, wherein the determining, by the authentication device, the connection relationship according to the feedback information comprises:

Determining, by the authentication device, whether the position of the optical fiber having the maximum optical power of the reflected signal indicated by the feedback information is consistent with a preset optical fiber position of the legal output port; wherein the optical fiber position is that the reflected signal has a The position in the fiber when the maximum optical power is stated;

If it is determined that the two are consistent, the authentication device determines that the optical network unit is not connected to the legal output port; otherwise, the authentication device determines the optical network unit and the legal output port. Connected.
The method according to claim 3, wherein said authentication device transmits a first test signal to said legal output port assigned to said optical network unit in said optical splitter according to said online request ,Also includes:

The authentication device sends a second test signal to an output port of the optical splitter; wherein the optical splitter includes a plurality of output ports, wherein each output port is connected to an input port of the optical splitter through an optical fiber; a length of the optical fiber between the output port and the input port is different, and a reflective device for reflecting the optical signal is disposed at each of the plurality of output ports;

The authentication device acquires a reflection signal generated by each output port of the optical splitter to reflect the second test signal, and records the position of the optical fiber when each of the reflected signals has the maximum optical power as a corresponding output port. Preset fiber position.
The method of claim 2, wherein the determining, by the authentication device, the connection relationship according to the feedback information comprises:

Determining, by the authentication device, whether the position of the optical fiber having the maximum optical power of the reflected signal indicated by the feedback information is consistent with a preset optical fiber position of the optical network unit; wherein the optical fiber position is that the reflected signal has a The position in the fiber when the maximum optical power is stated;

If it is determined that the two are consistent, the authentication device determines that the optical network unit is connected to the legal output port; otherwise, the authentication device determines that the optical network unit is not connected to the legal output port.
The method according to claim 5, wherein said authentication device transmits a first test signal to said legal output port assigned to said optical network unit in said optical splitter according to said online request ,Also includes:

The authentication device sends a second test signal to a legal output port of the optical splitter that is legally connected to the optical network unit, where a reflective device for reflecting the optical signal is disposed in the optical network unit;

The authentication device acquires a reflection signal generated by the optical network unit to reflect the second test signal, and records the position of the optical fiber when the reflected signal has the maximum optical power as a preset fiber position of the optical network unit. .
An authentication device, comprising:

a receiver, configured to receive an online request sent by the optical network unit, where the online request is used by the optical network unit to request access to the optical network;

a memory for storing a legal connection relationship of the optical network unit, where the legal connection relationship is used to indicate that an output port of the optical splitter to which the optical network unit is connected is a legal output port allocated for the optical network unit;

a processor, connected to the receiver, configured to detect a connection relationship between the optical network unit and an output port of the optical splitter according to the online request, if the detected connection relationship is determined with the optical network unit The legal connection relationship is consistent, and the optical network unit is determined to pass the authentication, and the optical network unit is allowed to access the optical network.
The authentication device according to claim 7, wherein the processor is configured to detect a connection relationship between the optical network unit and an output port of the optical splitter according to the online request, including:

Transmitting, according to the online request, a first test signal to the legal output port allocated to the optical network unit in the optical splitter;

Obtaining feedback information of the legal output port for the first test signal, and determining the connection relationship according to the feedback information, where the feedback information is used to indicate that the legal output port is for the first test signal The information of the generated reflected signal.
The authentication device of claim 8 wherein said processor is operative to:

Determining whether the position of the optical fiber having the maximum optical power of the reflected signal indicated by the feedback information is consistent with a preset optical fiber position of the legal output port; wherein the optical fiber position is that the reflected signal has the maximum optical power The position in the fiber;

If it is determined that the two are consistent, it is determined that the optical network unit is not connected to the legal output port; otherwise, the optical network unit is determined to be connected to the legal output port.
The authentication device of claim 9, wherein the processor is further configured to:

Sending a second test to an output port of the optical splitter before transmitting the first test signal to the legal output port allocated to the optical network unit in the optical splitter according to the online request a signal; wherein the optical splitter includes a plurality of output ports, wherein each output port is connected to an input port of the optical splitter through an optical fiber; a length of an optical fiber between different output ports and an input port is different, and Reflecting means for reflecting the optical signal are disposed at each of the plurality of output ports;

Obtaining a reflected signal generated by each output port of the optical splitter to reflect the second test signal, and recording a position of the optical fiber when each of the reflected signals has a maximum optical power as a preset optical fiber position of the corresponding output port .
The authentication device of claim 8 wherein said processor is operative to:

Determining whether the position of the optical fiber having the maximum optical power of the reflected signal indicated by the feedback information is consistent with a preset optical fiber position of the optical network unit; wherein the optical fiber position is that the reflected signal has the maximum optical power The position in the fiber;

If it is determined that the two are consistent, it is determined that the optical network unit is connected to the legal output port; otherwise, it is determined that the optical network unit is not connected to the legal output port.
The authentication device according to claim 11, wherein the processor is further configured to:

And sending a legal output to the optical network unit legally connected to the optical network unit before sending the first test signal to the legal output port allocated to the optical network unit in the optical splitter according to the online request The port sends a second test signal, and a reflective device for reflecting the optical signal is disposed in the optical network unit;

Acquiring a reflected signal generated by the optical network unit to reflect the second test signal, and recording a position of the optical fiber when the reflected signal has a maximum optical power as a preset optical fiber position of the optical network unit.
A beam splitter, comprising:

Input port

a plurality of output ports, each of the plurality of output ports and the input port are connected by an optical fiber, and the length of the optical fiber between each of the output ports and the input port is in an equal relationship .
The optical splitter of claim 13 wherein said optical splitter further comprises:

And a reflecting device disposed at each of the plurality of output ports for reflecting an optical signal of the corresponding output port.
An optical network system, comprising:

a beam splitter for providing an optical transmission channel of the optical network system, the optical splitter comprising a plurality of output ports, wherein each output port is connected to an input port of the optical splitter through an optical fiber, and different output ports and input ports are The lengths of the fibers are different, and a reflecting device for reflecting the optical signal is disposed at each of the plurality of output ports;

An authentication device, connected to the optical splitter, for receiving an online request sent by an optical network unit connected to an output port of the optical splitter, where the online request is used by an optical network unit to request access to the optical network, and according to Determining the connection relationship between the optical network unit and the output port of the optical splitter, and determining that the detected connection relationship is consistent with the legal connection relationship of the optical network unit, determining the optical network unit The optical network unit is allowed to access the optical network by using the authentication, wherein the legal connection relationship is used to indicate that an output port of the optical splitter to which the optical network unit is connected is allocated for the optical network unit Legal output port.
The system of claim 15 wherein said optical network system further comprises:

a test device, connected to the authentication device, configured to send a test signal to a legal output port allocated to the optical network unit in the optical splitter based on a control instruction of the authentication device, and obtain the legal output The information of the port for the reflected signal generated by the test signal is sent to the authentication device.
The system of claim 16 wherein the lengths of the plurality of optical fibers between the plurality of output ports of the optical splitter and the input port are in an equal relationship.