WO2021259189A1 - 组播报文处理方法、olt设备、onu设备及计算机可读存储介质 - Google Patents

组播报文处理方法、olt设备、onu设备及计算机可读存储介质 Download PDF

Info

Publication number
WO2021259189A1
WO2021259189A1 PCT/CN2021/101194 CN2021101194W WO2021259189A1 WO 2021259189 A1 WO2021259189 A1 WO 2021259189A1 CN 2021101194 W CN2021101194 W CN 2021101194W WO 2021259189 A1 WO2021259189 A1 WO 2021259189A1
Authority
WO
WIPO (PCT)
Prior art keywords
key
message
olt
multicast
onu
Prior art date
Application number
PCT/CN2021/101194
Other languages
English (en)
French (fr)
Inventor
郇一峰
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2021259189A1 publication Critical patent/WO2021259189A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q11/00—Selecting arrangements for multiplex systems
    • H04Q11/0001—Selecting arrangements for multiplex systems using optical switching
    • H04Q11/0062—Network aspects
    • H04Q11/0067—Provisions for optical access or distribution networks, e.g. Gigabit Ethernet Passive Optical Network (GE-PON), ATM-based Passive Optical Network (A-PON), PON-Ring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q11/00—Selecting arrangements for multiplex systems
    • H04Q11/0001—Selecting arrangements for multiplex systems using optical switching
    • H04Q11/0005—Switch and router aspects
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q11/00—Selecting arrangements for multiplex systems
    • H04Q11/0001—Selecting arrangements for multiplex systems using optical switching
    • H04Q11/0005—Switch and router aspects
    • H04Q2011/0037—Operation
    • H04Q2011/0047—Broadcast; Multicast
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q11/00—Selecting arrangements for multiplex systems
    • H04Q11/0001—Selecting arrangements for multiplex systems using optical switching
    • H04Q11/0062—Network aspects
    • H04Q2011/0064—Arbitration, scheduling or medium access control aspects
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04Q—SELECTING
    • H04Q2213/00—Indexing scheme relating to selecting arrangements in general and for multiplex systems
    • H04Q2213/1301—Optical transmission, optical switches

Definitions

  • the embodiments of the present disclosure relate to, but are not limited to, the field of information processing technology.
  • optical line terminal Optical Line Termination, OLT
  • a physical OLT can be virtualized into multiple sliced OLTs.
  • Operators with OLT equipment are called infrastructure operators, and operators sharing OLT equipment to carry out business are called virtual network operators.
  • Infrastructure operators can use sliced OLTs to connect to the operation support system of each virtual operator (Operational Support System, OSS) realizes independent service issuance and operation and maintenance, and users can independently choose the broadband access and services of the virtual operator of their choice.
  • OSS Operaational Support System
  • the first aspect of the embodiments of the present disclosure provides a multicast packet processing method, which is applied to an OLT device, including: encrypting a multicast packet to obtain an encrypted packet; and sending the encrypted packet to a multicast group member Optical Network Unit (ONU) devices in the list, so that the ONU device carrying the key matching the encrypted message decrypts the encrypted message and sends the decrypted multicast message to the user-side interface .
  • ONU Optical Network Unit
  • a second aspect of the embodiments of the present disclosure provides a multicast packet processing method, which is applied to an ONU device, including: obtaining an encrypted packet from an OLT device, where the encrypted packet is obtained by encrypting the multicast packet by the OLT device; and , Decrypt the encrypted message with the key matching the encrypted message and send the decrypted multicast message to the user-side interface.
  • the third aspect of the embodiments of the present disclosure provides an OLT device, including: a memory, a processor, and a computer program stored in the memory and capable of running on the processor. On the one hand, at least one step of a method for processing a multicast packet is provided.
  • the fourth aspect of the embodiments of the present disclosure provides an ONU device, including: a memory, a processor, and a computer program stored in the memory and capable of running on the processor. At least one step of the multicast packet processing method provided by the second aspect.
  • a fifth aspect of the embodiments of the present disclosure provides a computer-readable storage medium on which computer-executable instructions are stored.
  • the multicast packet processing method provided by any aspect of the embodiments of the present disclosure is implemented At least one step.
  • FIG. 1 is a schematic diagram of a system architecture platform for executing a multicast packet processing method provided by an embodiment of the present disclosure.
  • Fig. 2 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 3 is a schematic diagram of a message structure of a multicast message provided by an embodiment of the present disclosure.
  • Fig. 4 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • Fig. 5 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • Fig. 6 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • Fig. 7 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 8 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 9 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 10 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 11 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 12 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 13 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 14 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • FIG. 15 is a flowchart of a method for processing a multicast packet provided by an embodiment of the present disclosure.
  • the slice OLT when the slice OLT runs the multicast service, the slice OLT will copy the multicast packets to the physical passive optical network (Passive Optical Network, PON) port.
  • Passive Optical Network PON
  • Each ONU device under the physical PON port is Have to receive and parse all multicast packets.
  • MVLAN Multicast Virtual Local Area Network
  • the connected ONU device cannot distinguish which multicast packets are sent by the operator of their choice , So it will parse all the messages and forward them to the set-top box, which will cause the problem of receiving two copies of the same multicast message or receiving undesired multicast messages.
  • MVLAN Multicast Virtual Local Area Network
  • the present disclosure provides a multicast message processing method, OLT equipment, ONU equipment, and computer-readable storage medium.
  • the OLT equipment can encrypt the multicast message and obtain the encrypted message; then the OLT device can The encrypted message is sent to the ONU device in the multicast group member list.
  • the ONU device can decrypt the encrypted message with the key to obtain The multicast message required by itself is sent to the user-side interface; if the connected ONU device does not carry a key that matches the encrypted message, then the ONU device cannot decrypt the encrypted message, which indicates that it is unsuccessful The decrypted multicast message is not the multicast message required by the ONU device, and the encrypted message that has not been successfully decrypted will be discarded. Therefore, the embodiments of the present disclosure can enable the ONU device to receive the multicast message on demand through the key without parsing all the multicast messages, thereby improving the transmission performance of the multicast message.
  • FIG. 1 is a schematic diagram of a system architecture platform for executing a multicast packet processing method provided by an embodiment of the present disclosure.
  • the system architecture platform includes an OLT device 100 and an ONU device 200, where the above-mentioned OLT device 100 and ONU device 200 are both provided with a memory 120 and a processor 110, where the memory 120 and the processor 110 can be It is connected via a bus or other means.
  • the connection via a bus is taken as an example.
  • the memory 120 can be used to store non-transitory software programs and non-transitory computer-executable programs.
  • the memory 120 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state storage devices.
  • the memory 120 may optionally include memories remotely provided with respect to the processor 110, and these remote memories may be connected to the system architecture platform through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.
  • network slicing technology and applications are mainly embodied in the OLT device 100, and one physical OLT device 100 can be virtualized into multiple sliced OLTs.
  • Operators with OLT equipment 100 are called infrastructure operators, and operators sharing OLT equipment 100 to carry out services are called virtual network operators.
  • Infrastructure operators can use sliced OLTs to connect to the OSS of each virtual operator to achieve independent service distribution and service. Operation and maintenance, and users can independently choose their favorite virtual operator broadband access and services.
  • the slice OLT When the slice OLT runs the multicast service, the slice OLT copies the multicast packets to the physical PON port, and each ONU device 200 under the physical PON port has to receive and parse all the multicast packets.
  • the connected ONU device 200 cannot distinguish which multicast packets are sent by the operator selected by itself, so it will parse all the packets and forward them to Set-top box, this will cause the problem of receiving two copies of the same multicast message or receiving undesired multicast messages.
  • the OLT device 100 can encrypt the multicast message and obtain the encrypted message; then the OLT device 100 can send the encrypted message to the members of the multicast group
  • the OLT device 200 For the ONU device 200 in the list, if the connected ONU device 200 carries a key that matches the encrypted message, then the ONU device 200 can decrypt the encrypted message by using the key to obtain the multicast that it needs The message is sent to the user-side interface; if the connected ONU device 200 does not carry a key that matches the encrypted message, then the ONU device 200 cannot decrypt the encrypted message, indicating that the multicast has not been successfully decrypted If the message is not the multicast message required by the ONU device 200, the encrypted message that has not been successfully decrypted will be discarded. Therefore, the embodiments of the present disclosure can enable the ONU device 200 to receive the multicast message on demand through the key without having to parse all the multicast messages, thereby improving the transmission performance of the multicast message
  • the system architecture platform can be applied to third-generation mobile communication technology (3rd-Generation, 3G) communication network systems, long-term evolution (Long Term Evolution, LTE) communication network systems, and fifth-generation mobile communication systems.
  • 3rd-Generation, 3G third-generation mobile communication technology
  • LTE Long-term evolution
  • 5G 5th-Generation Mobile Communication Technology
  • the subsequently evolved mobile communication network system, etc. are not specifically limited in the embodiments of the present disclosure.
  • FIG. 1 does not constitute a limitation on the embodiments of the present disclosure, and may include more or less components than those shown in the figure, or a combination of certain components, or different components. Component arrangement.
  • the processor 110 can call the multicast packet processing program stored in the memory 120 to execute the multicast packet processing method.
  • FIG. 2 is a flowchart of a multicast packet processing method provided by an embodiment of the present disclosure.
  • the multicast packet processing method can be applied to an OLT device, including but not limited to steps S100 and S200. .
  • step S100 the multicast message is encrypted to obtain an encrypted message.
  • step S200 the encrypted message is sent to the ONU device in the multicast group member list, so that the ONU device carrying the key matching the encrypted message decrypts the encrypted message and decrypts the decrypted multicast message.
  • the text is sent to the user-side interface.
  • the OLT device when the OLT device runs the multicast service, the OLT device can encrypt the multicast message to obtain the encrypted message, and send the encrypted message to the physical PON port through the physical PON port. All ONU devices, among them, the ONU devices that are not in the multicast group member list will discard the encrypted message, and the ONU devices that are already in the multicast group member list will receive the encrypted message, which can make the encrypted message It is successfully sent to the ONU device in the multicast group member list; if the encrypted message is sent by the operator selected by some ONU devices in the multicast group member list, therefore, in the embodiment of the present disclosure, the multicast group member list Only the ONU device that carries the key matching the encrypted message can successfully decrypt the encrypted message, which means that the successfully decrypted multicast message is the multicast message required by the ONU device, and the decrypted message will be obtained.
  • the multicast message is sent to the user-side interface and sent to the set-top box through the user-side interface; while the ONU device that does not carry a key matching the encrypted message in the multicast group member list cannot decrypt the encrypted message. It indicates that the unsuccessfully decrypted multicast message is not the multicast message required by the ONU device, then the unsuccessfully decrypted encrypted message will be directly discarded without analysis. Therefore, the embodiments of the present disclosure can enable the ONU device to receive the multicast message on demand through the key without parsing all the multicast messages, thereby improving the transmission performance of the multicast message.
  • the OLT device when the OLT device is connected to the OSS of the first operator, and the OLT device is running the multicast service, the OLT device will encrypt the multicast message of the first operator to obtain the encrypted message, and then The encrypted message is sent to all the ONU devices under the physical PON port and in the multicast group member list through the physical PON port.
  • all the ONU devices in the multicast group member list include the first ONU device and the second ONU device , Where the operator corresponding to the first ONU device is the first operator, and the operator corresponding to the second ONU device is not the first operator, so only the first ONU device will carry the corresponding encrypted message Corresponding key, so the first ONU device can decrypt the encrypted message with the key, and the second ONU device does not have the key corresponding to the encrypted message, so the second ONU device cannot decrypt the encrypted message. Therefore, the second ONU device directly discards the encrypted message that has not been successfully decrypted without analyzing it.
  • the format of the foregoing multicast message may include, but is not limited to, the format of the multicast message shown in FIG. 3, where the format of the multicast message includes a GEM frame header and a payload section.
  • the GEM frame header includes, but is not limited to, a payload length indication field, a port identification field, a payload type indication field, and a header error control field.
  • the payload section is used to fill encrypted multicast messages.
  • each slice OLT uses a different encryption algorithm to encrypt their respective multicast packets, and each ONU device in the multicast group member list Corresponding to a slice OLT, each ONU device carries a key matching the encryption algorithm adopted by the corresponding slice OLT.
  • the OLT devices can be virtualized as multiple slice OLTs, and the operators and slice OLTs correspond one-to-one, when different operators
  • each slice OLT will use its own encryption algorithm to encrypt the multicast packets of their respective operators, obtain multiple encrypted packets, and pass the multiple encrypted packets
  • the physical PON port sends to all the ONU devices under the physical PON port.
  • the ONU devices that are not in the multicast group member list will discard the encrypted message, and the ONU devices that are already in the multicast group member list will Receive encrypted messages, so that multiple encrypted messages can be smoothly sent to the ONU devices in the multicast group member list; since one ONU device in the multicast group member list is associated with one operator, the multicast group member list
  • Each ONU device can only decrypt the encrypted messages of its associated operator with the corresponding key, but cannot decrypt the encrypted messages of other operators. If it is successfully decrypted, the decrypted multicast message will be decrypted. The message is sent to the user-side interface, and if the decryption fails, the encrypted message that has not been successfully decrypted will be directly discarded without being parsed. Therefore, the embodiments of the present disclosure can enable each ONU device to receive the multicast message sent by its corresponding operator on demand through the key, without having to parse all the multicast messages, thereby improving the transmission of the multicast messages. performance.
  • slicing OLT can be divided into PON board-level slicing, PON port-level slicing, ONU-level slicing, and mixed mode slicing according to different slice granularity.
  • infrastructure operators can use ONU-level slicing granularity for slicing, docking with each virtual operator’s OSS to achieve independent service issuance and operation and maintenance, in addition to sharing OLT equipment and access to the computer room, but also It can share more key resources such as optical fiber pipelines and Optical Distribution Network (ODN).
  • ODN Optical Distribution Network
  • infrastructure operators can maximize the value of their investment, and users can also choose their favorite virtual operator broadband access and services.
  • the multicast packet processing method may further include, but is not limited to, step S410, step S420, step S430, and step S440.
  • step S410 a key is generated according to a preset encryption algorithm.
  • step S420 the join message information from the ONU device is obtained.
  • step S430 the ONU device is added to the multicast group member list according to the join message information.
  • step S440 the key information is exchanged with the ONU device to send the key to the ONU device.
  • the OLT device After the OLT device enables the multicast function, it will generate a key according to a preset encryption algorithm, and then the OLT device will monitor the join message information of the connected ONU side, such as Internet Group Management Protocol (Internet Group Management Protocol). Group Management Protocol, IGMP) join message information. If the OLT device receives the join message information from the ONU device, it will add the corresponding interface of the ONU device to the multicast group member list, and the OLT device will communicate with the ONU The device sends the generated key to the ONU device by way of key information interaction, thereby realizing the transmission of the key from the OLT device to the ONU device.
  • IGMP Group Management Protocol
  • each slice OLT will independently generate its own key according to its own preset encryption algorithm, that is, ensure that the keys of each slice OLT are different from each other, and then store the new key in the backup key of the slice OLT In the register, the content in the backup key register is then copied to the activation key register in the slice OLT for key activation.
  • the joining or renewal of the ONU device will send the aforementioned joining message information to the OLT device.
  • step S440 may include, but is not limited to, step S510, step S520, step S530, and step S540.
  • step S510 the key notification message is sent to the ONU device, so that the ONU device generates a key request message according to the key notification message.
  • step S520 a key request message from the ONU device is obtained.
  • step S530 the key is sent to the ONU device according to the key request message, so that the ONU device generates key confirmation information according to the key.
  • step S540 the key confirmation information from the ONU device is obtained.
  • the slice OLT can send a key notification message to the ONU device that joins or renews the lease through a unicast channel.
  • the ONU device When the ONU device receives the key notification message, it will send a key notification message to the above-mentioned device through the unicast channel.
  • the slicing OLT sends a key request message. If the slicing OLT can receive the key request message of the ONU device, the ONU device that joins or renews the lease is considered to be able to receive the encrypted multicast message, and the slice OLT will respond And send the key to the ONU device that joins or renew the lease through the unicast channel.
  • the ONU device When the ONU device obtains the key, it will send a key confirmation message to the slice OLT through the unicast channel; if the slice OLT receives the ONU device According to the key confirmation information, it is considered that the ONU device can decrypt the encrypted multicast message. Therefore, the slice OLT can subsequently encrypt the multicast message to be forwarded and then forward it through the multicast channel. If there are other members in the multicast group before and the encrypted multicast message has been delivered, the slice OLT does not need to send another encrypted multicast message, but only needs to maintain its multicast group member list.
  • the normal leave message of the ONU device and the special query message of the multicast group are the same as the normal multicast message processing flow, which will not be repeated in the embodiment of the present disclosure.
  • the general query message processing flow is the same as the joining message processing flow in the embodiment of the present disclosure, and the description is not repeated in the embodiment of the present disclosure.
  • the above steps S510 to S540 are implemented through a unicast channel between the slice OLT and the ONU device.
  • the slice OLT executes the above steps S510 to S540, that is, when the slice OLT runs unicast services, the downstream data adopts the broadcast mode.
  • All ONU devices under the same physical PON port can receive the same data, but the same physical PON port
  • the Gigabit-Capable Passive Optical Networks (GPON) encapsulation mode port identifier (GPON Encapsulation Mode Port Identifier, GEM Port ID) corresponding to each ONU device is different.
  • the GEM Port ID of the ONU device on the same physical PON port is allocated starting from 129 and the GEM Port ID is not 4095, and the ONU device can only receive data belonging to itself through the GEM Port ID filter.
  • the above step S200 is implemented in a multicast manner. Due to the characteristics of the PON network and the sliced OLT, the sliced OLT system copies the multicast message to its corresponding physical PON port.
  • the GEM Port ID of the message is the broadcast ID.
  • the GEM Port ID is 4095, and the physical PON Each ONU device under the port will receive the multicast message.
  • the specific message format can be Physical Layer Operations Administration and Maintenance (PLOAM) , Optical network unit management and control interface (ONU Management and Control Interface, OMCI) or ordinary data packets, etc., which are not particularly limited in the embodiment of the present disclosure.
  • PLOAM Physical Layer Operations Administration and Maintenance
  • ONU Management and Control Interface Optical network unit management and control interface
  • ordinary data packets etc., which are not particularly limited in the embodiment of the present disclosure.
  • the multicast packet processing method may further include step S600 in FIG. 6 or step S700 in FIG. 7.
  • step S600 when the number of times the key notification message is sent reaches the first preset number and the key request message from the ONU device is not obtained, the key synchronization failure information is sent to the ONU device, and the ONU device Remove from the list of multicast group members.
  • the slice OLT when it does not receive a key request message from an ONU device that joins or renews the lease within a given time, it will send a key notification message to the ONU device through the unicast channel. Waiting for the key request message of the ONU device; if the key notification message has been sent for the first preset number of times, for example, three times, if the key request message of the ONU device is still not received, the slicing OLT will Send a key synchronization failure message to the ONU device through the unicast channel and delete the corresponding interface of the ONU device from the multicast group member list.
  • step S700 when the number of key transmission times reaches the second preset number of times and the key confirmation information from the ONU device is not obtained, the key synchronization failure information is sent to the ONU device, and the ONU device is sent from the multicast Delete from the group member list.
  • the slice OLT when it does not receive the key confirmation information of the ONU device that joins or renews the lease within a given time, it will send the key to the ONU device through the unicast channel; After the number of transmissions reaches the second preset number of times, for example, three times, if the key confirmation information of the ONU device is still not received, the slice OLT will send a key synchronization failure message to the ONU device through the unicast channel and send the ONU The corresponding interface is deleted from the multicast group member list.
  • FIG. 8 is a flowchart of a multicast packet processing method provided by an embodiment of the present disclosure.
  • the multicast packet processing method can be applied to an ONU device, including but not limited to steps S800 and S900. .
  • step S800 an encrypted message from the OLT device is obtained, and the encrypted message is obtained by encrypting the multicast message by the OLT device.
  • step S900 the encrypted message is decrypted by the key matching the encrypted message and the decrypted multicast message is sent to the user-side interface.
  • the OLT device when the OLT device runs the multicast service, the OLT device can encrypt the multicast message to obtain the encrypted message, and send the encrypted message to the physical PON port through the physical PON port and All ONU devices that exist in the multicast group member list; among them, if the current ONU device carries a key that matches the encrypted message, then the current ONU device can decrypt the encrypted message with the key and successfully decrypt it It means that the multicast message is the multicast message required by the current ONU device, and then the current ONU device will send the decrypted multicast message to the user-side interface and send it to the set-top box through the user-side interface.
  • the embodiments of the present disclosure can enable the ONU device to receive the multicast message on demand through the key without parsing all the multicast messages, thereby improving the transmission performance of the multicast message.
  • step S800 when each ONU device carries a key that matches the encryption algorithm adopted by the corresponding slice OLT; the encryption report from the OLT device is obtained in step S800.
  • the text may include but is not limited to step S1000 in FIG. 9; correspondingly, the above step S900 may include but is not limited to step S1100 in FIG. 10.
  • step S1000 obtain encrypted messages from at least two slice OLTs in the OLT device; wherein, the encrypted messages are obtained by encrypting respective multicast messages by the respective corresponding slice OLTs.
  • the OLT devices can be virtualized as multiple slice OLTs, and the operators and slice OLTs correspond one-to-one, when different operators
  • each slice OLT will use its own encryption algorithm to encrypt the multicast packets of their respective operators, obtain multiple encrypted packets, and pass the multiple encrypted packets
  • the physical PON port sends to all the ONU devices under the physical PON port.
  • the ONU devices that are not in the multicast group member list will discard the encrypted message, and the ONU devices that are already in the multicast group member list will Receive encrypted messages, so that multiple encrypted messages can be smoothly sent to ONU devices in the multicast group member list.
  • step S1100 the encrypted message from the respective slice OLT is decrypted by the key corresponding to the encrypted message of the respective slice OLT, and the decrypted multicast message is sent to the user-side interface.
  • each ONU device in the multicast group member list can only use the corresponding key pair to associate with the operator.
  • the encrypted messages of other operators cannot be decrypted. If the decryption is successful, the decrypted multicast message will be sent to the user-side interface. If the decryption fails, the unsuccessful decryption will be The encrypted message is directly discarded without analysis. Therefore, the embodiments of the present disclosure can enable each ONU device to receive the multicast message sent by its corresponding operator on demand through the key, without having to parse all the multicast messages, thereby improving the transmission of the multicast messages. performance.
  • the multicast packet processing method may further include, but is not limited to, step S1210, step S1220, and step S1230.
  • step S1210 the joining message information is obtained.
  • step S1220 the joining message information is sent to the OLT device.
  • step S1230 perform key information interaction with the OLT device to obtain the key from the OLT device.
  • the OLT device after the OLT device enables the multicast function, it will generate a key according to a preset encryption algorithm, and then the OLT device will monitor the join message information of the connected ONU side.
  • the ONU device When the ONU device is connected to the organic top box Join, the ONU device will obtain the join message information and send it to the OLT device. If the OLT device receives the join message information from the ONU device, it will add the corresponding interface of the ONU device to the multicast group member list. And the OLT device will send the generated key to the ONU device by way of key information interaction with the ONU device, thereby realizing the transfer of the key from the OLT device to the ONU device.
  • step S1230 may include, but is not limited to, step S1310, step S1320, step S1330, and step S1340.
  • step S1310 a key notification message from the OLT device is obtained, and a key request message is generated according to the key notification message.
  • step S1320 the key request message is sent to the OLT device, so that the OLT device sends the key according to the key request message.
  • step S1330 a key from the OLT device is obtained, and key confirmation information is generated according to the key.
  • step S1340 the key confirmation information is sent to the OLT device.
  • the slice OLT can send a key notification message to the ONU device that joins or renews the lease through a unicast channel.
  • the ONU device When the ONU device receives the key notification message, it will send a key notification message to the above-mentioned device through the unicast channel.
  • the slicing OLT sends a key request message. If the slicing OLT can receive the key request message of the ONU device, the ONU device that joins or renews the lease is considered to be able to receive the encrypted multicast message, and the slice OLT will respond And send the key to the ONU device that joins or renew the lease through the unicast channel.
  • the ONU device When the ONU device obtains the key, it will send a key confirmation message to the slice OLT through the unicast channel; if the slice OLT receives the ONU device According to the key confirmation information, it is considered that the ONU device can decrypt the encrypted multicast message. Therefore, the slice OLT can subsequently encrypt the multicast message to be forwarded and then forward it through the multicast channel. If there have been other members in the multicast group before and the encrypted multicast message has been delivered, the slice OLT does not need to send another encrypted multicast message, but only needs to maintain its multicast group member list.
  • the multicast packet processing method may further include, but is not limited to, a step S1400.
  • step S1400 after the key request message is sent to the OLT device and the key from the OLT device is not received within a preset time, the key synchronization failure information is sent to the OLT device.
  • the ONU device that has joined or renewed the lease After the ONU device that has joined or renewed the lease sends a key request message, it will be in a state of waiting to receive the key sent by the slice OLT. Key, a key synchronization failure message will be sent to the slice OLT through the unicast channel.
  • the specific message format may be PLOAM, OMCI, or ordinary data packet, etc., which is not particularly limited in the embodiment of the present disclosure.
  • the multicast may further include but is not limited to step S1500 in FIG. 14 or step S1600 in FIG. 15.
  • step S1500 the key from the OLT device is stored in the backup key register, and the key in the backup key register is compared with the original key in the activation key register. If the key is consistent with the original key in the activation key register, the original key in the activation key register is activated.
  • the new valid key will be stored in the backup key register of the current ONU device, and then the The ONU device compares the content in its backup key register with the content in the activation key register, and if the contents of the two are the same, it continues to use the key in the activation key register. After the ONU device compares the new and old keys and continues to use the old key, it will send a key confirmation message to the slice OLT through the unicast channel.
  • step S1600 the key from the OLT device is stored in the backup key register, and the key in the backup key register is compared with the original key in the activation key register. If the key is inconsistent with the original key in the activation key register, delete the original key in the activation key register, store the key in the backup key register in the activation key register, and check the activation key The key in the register is activated.
  • the new valid key will be stored in the backup key register of the current ONU device, and then the The ONU device compares the content in the backup key register with the content in the activation key register. If the contents of the two are inconsistent, the key switch is performed, and the content of the backup key register is copied to the activation key register, thus slicing the OLT Both the ONU and the ONU device start to use the new key. After the ONU device compares the old and new keys and continues to use the new key, it sends a key confirmation message to the slice OLT through the unicast channel.
  • embodiments of the present disclosure also provide an OLT device, an ONU device, and a computer-readable storage medium.
  • the OLT device may include a memory, a processor, and a computer program stored on the memory and running on the processor.
  • the processor and the memory can be connected by a bus or in other ways.
  • the OLT device in the embodiment of the present disclosure can be applied to the system architecture platform shown in FIG. 1, and the OLT device in the embodiment of the present disclosure can form a part of the system architecture platform shown in FIG. Both belong to the same inventive concept, so the two have the same implementation principle and beneficial effects, and will not be repeated here.
  • the non-transitory software programs and instructions required to implement the foregoing multicast packet processing method are stored in the memory.
  • at least one step of the foregoing multicast packet processing method is executed, for example, the above-described diagram is executed.
  • the ONU device may include a memory, a processor, and a computer program stored on the memory and running on the processor.
  • the processor and the memory can be connected by a bus or in other ways.
  • the ONU device in the embodiment of the present disclosure can be applied to the system architecture platform shown in FIG. 1, and the ONU device in the embodiment of the present disclosure can form a part of the system architecture platform shown in FIG. Both belong to the same inventive concept, so the two have the same implementation principle and beneficial effects, and will not be repeated here.
  • the non-transitory software programs and instructions required to implement the foregoing multicast packet processing method are stored in the memory.
  • at least one step of the foregoing multicast packet processing method is executed, for example, the above-described diagram is executed.
  • the implementation of the device described above is merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the objectives of the embodiments of the present disclosure.
  • the computer-readable storage medium provided by the embodiment of the present disclosure stores computer-executable instructions, and the computer-executable instructions are used to execute the foregoing multicast packet processing method.
  • being executed by a processor in the above-mentioned OLT device may cause the above-mentioned processor to execute at least one step of the above-mentioned multicast packet processing method, for example, to execute the method steps S100 to S200 in FIG.
  • execution by a processor of the ONU device may cause the processor to execute at least one step of the multicast packet processing method, for example, execute the steps S800 to S900 of the method in FIG. 8 described above, and in FIG. 9 Step S1000 in Figure 10, Step S1100 in Figure 10, Step S1210 to S1230 in Figure 11, Step S1310 to S1340 in Figure 12, Step S1400 in Figure 13, Step S1500 in Figure 14, and/or Figure 15 Step S1600 in.
  • Computer storage medium includes volatile and non-volatile data implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules, or other data).
  • Information such as computer-readable instructions, data structures, program modules, or other data.
  • Computer storage media include but are not limited to Random Access Memory (RAM), Read-Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, tape, magnetic disk storage or other magnetic storage device, or any that can be used to store desired information and can be accessed by a computer Other media.
  • communication media generally include computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery media. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Small-Scale Networks (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本公开实施例涉及信息处理技术领域，并提供了一种组播报文处理方法、OLT设备、ONU设备及计算机可读存储介质。应用于OLT设备的组播报文处理方法包括：对组播报文进行加密，得到加密报文；以及，将加密报文发送至组播组成员列表中的ONU设备，以使携带有与加密报文匹配的密钥的ONU设备对加密报文进行解密并将解密后的组播报文发送至用户侧接口。

Description

组播报文处理方法、OLT设备、ONU设备及计算机可读存储介质
本公开要求在2020年6月23日提交中国专利局、申请号为202010581056.6的中国专利申请的优先权，该申请的全部内容通过引用结合在本公开中。
技术领域
本公开实施例涉及但不限于信息处理技术领域。
背景技术
在光接入网络中，网络切片技术和应用主要体现在光线路终端(Optical Line Termination，OLT)设备上，可以将一个物理OLT虚拟为多个切片OLT。拥有OLT设备的运营商称为基础架构运营商，共享OLT设备开展业务的运营商称为虚拟网络运营商，基础架构运营商可采用切片OLT对接各虚拟运营商的运营支撑系统(Operational Support System，OSS)实现业务独立发放和运维，而用户可以自主选择心仪的虚拟运营商宽带接入和服务。
发明内容
本公开实施例的第一方面提供一种组播报文处理方法，应用于OLT设备，包括：对组播报文进行加密，得到加密报文；以及，将加密报文发送至组播组成员列表中的光网络单元(Optical Network Unit，ONU)设备，以使携带有与加密报文匹配的密钥的ONU设备对加密报文进行解密并将解密后的组播报文发送至用户侧接口。
本公开实施例的第二方面提供一种组播报文处理方法，应用于ONU设备，包括：获取来自OLT设备的加密报文，加密报文由OLT设备对组播报文进行加密得到；以及，通过与加密报文匹配的密钥对加密报文进行解密并将解密后的组播报文发送至用户侧接口。
本公开实施例的第三方面提供一种OLT设备，包括：存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器 执行计算机程序时实现本公开实施例的上述第一方面提供的组播报文处理方法的至少一个步骤。
本公开实施例的第四方面提供一种ONU设备，包括：存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序，处理器执行计算机程序时实现本公开实施例的上述第二方面提供的组播报文处理方法的至少一个步骤。
本公开实施例的第五方面提供一种计算机可读存储介质，其上存储有计算机可执行指令，计算机可执行指令被执行时实现本公开实施例的任一方面提供的组播报文处理方法的至少一个步骤。
附图说明
图1是本公开实施例提供的用于执行组播报文处理方法的系统架构平台的一种示意图。
图2是本公开实施例提供的组播报文处理方法的一种流程图。
图3是本公开实施例提供的组播报文的一种报文结构示意图。
图4是本公开实施例提供的组播报文处理方法的一种流程图。
图5是本公开实施例提供的组播报文处理方法的一种流程图。
图6是本公开实施例提供的组播报文处理方法的一种流程图。
图7是本公开实施例提供的组播报文处理方法的一种流程图。
图8是本公开实施例提供的组播报文处理方法的一种流程图。
图9是本公开实施例提供的组播报文处理方法的一种流程图。
图10是本公开实施例提供的组播报文处理方法的一种流程图。
图11是本公开实施例提供的组播报文处理方法的一种流程图。
图12是本公开实施例提供的组播报文处理方法的一种流程图。
图13是本公开实施例提供的组播报文处理方法的一种流程图。
图14是本公开实施例提供的组播报文处理方法的一种流程图。
图15是本公开实施例提供的组播报文处理方法的一种流程图。
具体实施方式
为了使本公开的目的、技术方案及优点更加清楚明白，以下结 合附图及实施例，对本公开进行进一步详细说明。应当理解，此处所描述的具体实施例仅用以解释本公开，并不用于限定本公开。
需要说明的是，虽然在装置示意图中进行了功能模块划分，在流程图中示出了逻辑顺序，但是在某些情况下，可以以不同于装置中的模块划分，或流程图中的顺序执行所示出或描述的步骤。说明书、权利要求书或上述附图中的术语“第一”、“第二”等是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。
在光接入网络中，当切片OLT运行组播业务时，切片OLT会将组播报文向物理无源光纤网络(Passive Optical Network，PON)口拷贝，该物理PON口下每个ONU设备都不得不接收并解析所有组播报文。当不同运营商使用相同的组播虚拟局域网(Multicast Virtual Local Area Network，MVLAN)和相同的组播组地址的时候，下接的ONU设备无法区分哪些组播报文是自己所选运营商发送的，因此会解析所有的报文并转发给机顶盒，这样就会造成同一组播报文收到两份或收到不想收到的组播报文的问题。
有鉴于此，本公开提供了一种组播报文处理方法、OLT设备、ONU设备及计算机可读存储介质，OLT设备可以对组播报文进行加密并得到加密报文；接着OLT设备可以将加密报文发送至组播组成员列表中的ONU设备，若下接的ONU设备携带有与加密报文匹配的密钥，那么该ONU设备就能够通过密钥来对加密报文进行解密，获取自身所需求的组播报文并发送至用户侧接口；若下接的ONU设备没有携带有与加密报文匹配的密钥，那么该ONU设备就无法对加密报文进行解密，则表明未成功解密的组播报文不是该ONU设备所需求的组播报文，那么就会将未成功解密的加密报文丢弃。因此，本公开实施例能够使得ONU设备通过密钥按需接收组播报文，无需解析所有的组播报文，从而能够提高组播报文的传输性能。
下面结合附图，对本公开实施例作进一步阐述。
如图1所示，图1是本公开实施例提供的用于执行组播报文处理方法的系统架构平台的一种示意图。
在图1的示例中，该系统架构平台包括OLT设备100和ONU设 备200，其中，上述的OLT设备100和ONU设备200均设置有存储器120和处理器110，其中，存储器120和处理器110可以通过总线或者其他方式连接，图1中以通过总线连接为例。
存储器120作为一种非暂态计算机可读存储介质，可用于存储非暂态软件程序以及非暂态性计算机可执行程序。此外，存储器120可以包括高速随机存取存储器，还可以包括非暂态存储器，例如至少一个磁盘存储器件、闪存器件、或其他非暂态固态存储器件。在一些实施方式中，存储器120可选包括相对于处理器110远程设置的存储器，这些远程存储器可以通过网络连接至该系统架构平台。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。
在相关技术中，网络切片技术和应用主要体现在OLT设备100上，可以将一个物理OLT设备100虚拟为多个切片OLT。拥有OLT设备100的运营商称为基础架构运营商，共享OLT设备100开展业务的运营商称为虚拟网络运营商，基础架构运营商可采用切片OLT对接各虚拟运营商的OSS实现业务独立发放和运维，而用户可以自主选择心仪的虚拟运营商宽带接入和服务。
当切片OLT运行组播业务时，切片OLT会将组播报文向物理PON口拷贝，该物理PON口下每个ONU设备200都不得不接收并解析所有组播报文。当不同运营商使用相同的MVLAN和相同的组播组地址的时候，下接的ONU设备200无法区分哪些组播报文是自己所选运营商发送的，因此会解析所有的报文并转发给机顶盒，这样就会造成同一组播报文收到两份或收到不想收到的组播报文的问题。
因此，基于上述情况，在图1示例所提供的系统架构平台中，OLT设备100可以对组播报文进行加密并得到加密报文；接着OLT设备100可以将加密报文发送至组播组成员列表中的ONU设备200，若下接的ONU设备200携带有与加密报文匹配的密钥，那么该ONU设备200就能够通过密钥来对加密报文进行解密，获取自身所需求的组播报文并发送至用户侧接口；若下接的ONU设备200没有携带有与加密报文匹配的密钥，那么该ONU设备200就无法对加密报文进行解密， 则表明未成功解密的组播报文不是该ONU设备200所需求的组播报文，那么就会将未成功解密的加密报文丢弃。因此，本公开实施例能够使得ONU设备200通过密钥按需接收组播报文，无需解析所有的组播报文，从而能够提高组播报文的传输性能。
本领域技术人员可以理解的是，该系统架构平台可以应用于第三代移动通信技术(3rd-Generation，3G)通信网络系统、长期演进(Long Term Evolution，LTE)通信网络系统、第五代移动通信技术(5th-Generation Mobile Communication Technology，5G)通信网络系统以及后续演进的移动通信网络系统等，本公开实施例对此并不作具体限定。
本领域技术人员可以理解的是，图1中示出的系统架构平台并不构成对本公开实施例的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
在图1所示的系统架构平台中，处理器110可以调用储存在存储器120中的组播报文处理程序，从而执行组播报文处理方法。
基于上述系统架构平台，下面描述本公开实施例提供的组播报文处理方法。
如图2所示，图2是本公开实施例提供的组播报文处理方法的一种流程图，该组播报文处理方法可以应用于OLT设备，包括但不限于有步骤S100和步骤S200。
在步骤S100中，对组播报文进行加密，得到加密报文。
在步骤S200中，将加密报文发送至组播组成员列表中的ONU设备，以使携带有与加密报文匹配的密钥的ONU设备对加密报文进行解密并将解密后的组播报文发送至用户侧接口。
在一种可实施方式中，当OLT设备运行组播业务时，OLT设备可以对组播报文进行加密，得到加密报文，并将加密报文通过物理PON口发送至该物理PON口下的所有ONU设备，其中，没有存在于组播组成员列表中的ONU设备会将加密报文丢弃，已存在于组播组成员列表中的ONU设备则会接收加密报文，从而可以使得加密报文顺利发送至组播组成员列表中的ONU设备；若加密报文是组播组成员列表中的部 分ONU设备所选的运营商下发的，因此在本公开实施例中，组播组成员列表中携带有与加密报文匹配的密钥的ONU设备才可以对加密报文进行成功解密，即表明成功解密的组播报文就是该ONU设备所需求的组播报文，并将解密后得到的组播报文发送至用户侧接口，并通过用户侧接口发送至机顶盒；而组播组成员列表中没有携带有与加密报文匹配的密钥的ONU设备则无法对加密报文进行解密，则表明未成功解密的组播报文不是该ONU设备所需求的组播报文，那么就会将未成功解密的加密报文直接丢弃而不作解析。因此，本公开实施例能够使得ONU设备通过密钥按需接收组播报文，无需解析所有的组播报文，从而能够提高组播报文的传输性能。
示例性地，当OLT设备与第一运营商的OSS对接，在OLT设备运行组播业务的情况下，OLT设备会对第一运营商的组播报文进行加密，得到加密报文，并将加密报文通过物理PON口发送至该物理PON口下并且存在于组播组成员列表中的所有ONU设备，若组播组成员列表中的所有ONU设备包括了第一ONU设备和第二ONU设备，其中，第一ONU设备所对应的运营商是第一运营商，而第二ONU设备所对应的运营商并不是第一运营商，因此只有第一ONU设备才会相应携带有与加密报文对应的密钥，所以第一ONU设备可以通过密钥对加密报文进行解密，而第二ONU设备由于没有与加密报文对应的密钥，因此第二ONU设备无法对加密报文进行解密，所以第二ONU设备就会将未成功解密的加密报文直接丢弃而不作解析。
值得注意的是，关于上述的组播报文的格式，可以包括但不限于图3所示的组播报文的格式，其中组播报文的格式包括了GEM帧头和净荷段。GEM帧头包括但不限于净荷长度指示字段、端口标识字段、净荷类型指示字段和首部差错控制字段，净荷段用于填充加密的组播报文。
另外，在一种可实施方式中，当OLT设备设置有至少两个切片OLT，各个切片OLT采用不同的加密算法对各自的组播报文进行加密，组播组成员列表中的每个ONU设备对应一个切片OLT，每个ONU设备携带有与对应的切片OLT采用的加密算法匹配的密钥。
在一种可实施方式中，当存在OLT设备需要同时对接多个运营商的情况下，可以将OLT设备虚拟为多个切片OLT，并且运营商和切片OLT分别一一对应，当不同的运营商使用相同的MVLAN和相同的组播组地址时，每个切片OLT都会采用各自的加密算法对各自运营商的组播报文进行加密，得到多份加密报文，并将多份加密报文通过物理PON口发送至该物理PON口下的所有ONU设备，其中，没有存在于组播组成员列表中的ONU设备会将加密报文丢弃，已存在于组播组成员列表中的ONU设备则会接收加密报文，从而可以使得多份加密报文顺利发送至组播组成员列表中的ONU设备；由于组播组成员列表中一个ONU设备对应关联一个运营商，因此，组播组成员列表中的每个ONU设备只能够通过对应的密钥对各自关联的运营商的加密报文进行解密，而不能对其他运营商的加密报文进行解密，若成功解密后会将解密后的组播报文发送至用户侧接口，若解密失败后则会将未成功解密的加密报文直接丢弃而不作解析。因此，本公开实施例能够使得每个ONU设备可以通过密钥按需接收各自对应运营商所发出的组播报文，而无需解析所有的组播报文，从而能够提高组播报文的传输性能。
值得注意的是，关于上述的切片OLT，是用来对物理网络进行逻辑划分，在一台物理设备上虚拟出多台逻辑设备，从而减少网络重复投资，从而能够实现业务汇聚、安全隔离和差异化服务。其中，切片OLT按照切片颗粒度的不同，可分为PON板级切片、PON口级切片、ONU级切片和混合模式级切片。从最大化共享接入网基础资源层面，基础架构运营商可采用ONU级切片颗粒度进行切片，对接各虚拟运营商OSS实现业务独立发放和运维，除共享OLT设备、接入机房外，还可共享光纤管道、光分配网(Optical Distribution Network，ODN)等更多关键资源。另外，基础架构运营商可以实现投资价值最大化，用户也可以自主选择心仪的虚拟运营商宽带接入和服务。
另外，参照图4，在一种可实施方式中，在上述步骤S100之前，该组播报文处理方法还可包括但不限于有步骤S410、步骤S420、步骤S430和步骤S440。
在步骤S410中，根据预设的加密算法生成密钥。
在步骤S420中，获取来自ONU设备的加入报文信息。
在步骤S430中，根据加入报文信息将ONU设备添加至组播组成员列表中。
在步骤S440中，与ONU设备进行密钥信息交互以将密钥发送至ONU设备。
在一种可实施方式中，OLT设备启用组播功能后，会根据预设的加密算法生成密钥，然后OLT设备会监听下接的ONU侧的加入报文信息，如互联网组管理协议(Internet Group Management Protocol，IGMP)加入报文信息，若OLT设备接收到来自ONU设备的加入报文信息，就会将该ONU设备的相应接口加入至组播组成员列表中，并且OLT设备会通过与ONU设备进行密钥信息交互的方式将已生成的密钥发送至该ONU设备，从而实现了密钥从OLT设备向ONU设备的传送。
值得注意的是，在OLT设备设置有多个切片OLT的情况下，当切片OLT启用组播功能后，切片OLT会就会产生、存储和激活密钥。其中，每个切片OLT会按照自身预设的加密算法分别独立产生自身的密钥，即保证每个切片OLT的密钥互不相同，然后将新的密钥存储在切片OLT中的备份密钥寄存器内，接着将备份密钥寄存器中的内容复制到切片OLT中的激活密钥寄存器内进行密钥激活。
可以理解的是，ONU设备的加入或者续租都会发送上述的加入报文信息至OLT设备。
另外，参照图5，在一种可实施方式中，上述步骤S440可包括但不限于步骤S510、步骤S520、步骤S530和步骤S540。
在步骤S510中，将密钥通知消息发送至ONU设备，以使ONU设备根据密钥通知消息生成密钥请求报文。
在步骤S520中，获取来自ONU设备的密钥请求报文。
在步骤S530中，根据密钥请求报文将密钥发送至ONU设备，以使ONU设备根据密钥生成密钥确认信息。
在步骤S540中，获取来自ONU设备的密钥确认信息。
在一种可实施方式中，切片OLT可以通过单播通道给加入或者续租的ONU设备发送一个密钥通知消息，当该ONU设备接收到密钥通 知消息后，会通过单播通道给上述的切片OLT发送一个密钥请求报文，若切片OLT能够接收到该ONU设备的密钥请求报文，则认为加入或者续租的ONU设备能够接收加密的组播报文，从而切片OLT就会响应并通过单播通道发送密钥至加入或者续租的ONU设备，当ONU设备获取到密钥后，会通过单播通道给该切片OLT发送一个密钥确认信息；若切片OLT接收到该ONU设备的密钥确认信息，则认为该ONU设备能对加密后的组播报文进行解密，因此，切片OLT后续可以对要转发的组播报文进行加密然后通过组播通道进行转发。如果该组播组中之前已经有其他成员且加密的组播报文已经下发，则切片OLT不需要再发一份加密的组播报文，只需要维护其组播组成员列表即可。
值得注意的是，ONU设备的正常离开报文、组播组的特殊查询报文和正常的组播报文处理流程一致，本公开实施例不再赘述。通用查询报文处理流程和本公开实施例中的加入报文处理流程一致，本公开实施例也不再赘述。
需要说明的是，切片OLT和ONU设备之间是通过单播通道来实现上述步骤S510至步骤S540。当切片OLT执行上述步骤S510至步骤S540，即切片OLT运行单播业务时，下行数据采用广播方式，同一个物理PON口下所有的ONU设备都能收到相同的数据，但是同一个物理PON口下每个ONU设备所对应的具有千兆位功能的无源光网络(Gigabit-Capable Passive Optical Networks，GPON)封装模式端口标识(GPON Encapsulation Mode Port Identifier，GEM Port ID)是不一样的。示例性地，同一个物理PON口的ONU设备的GEM Port ID从129开始往后分配，且GEM Port ID不为4095，ONU设备可以通过GEM Port ID过滤只接收属于自己的数据。
相应地，上述步骤S200是通过组播方式实现的。由于PON网络和切片OLT特点，切片OLT系统会将组播报文向其相应的物理PON口拷贝，示例性地，报文的GEM Port ID为广播ID，例如GEM Port ID为4095，该物理PON口下每个ONU设备都将接收到该组播报文。
可以理解的是，关于上述的密钥通知消息、密钥请求报文、密钥和密钥确认信息，具体的报文格式可以为物理层操作管理和维护 (Physical layer Operations Administration and Maintenance，PLOAM)、光网络单元管理控制接口(ONU Management and Control Interface，OMCI)或普通数据包等，本公开实施例不作特别限制。当采用PLOAM格式来发送密钥时，由于PLOAM消息的长度有限，密钥会分为两片进行发送，使用片断字段来指示发送密钥的哪个部分。
另外，参照图6和图7，在一种可实施方式中，在执行上述步骤S440的过程中，该组播报文处理方法还可包括图6中的步骤S600或者图7中的步骤S700。
在步骤S600中，在密钥通知消息的发送次数达到第一预设次数并且未获取到来自ONU设备的密钥请求报文的情况下，发送密钥同步失败信息至ONU设备，并将ONU设备从组播组成员列表中删除。
在一种可实施方式中，切片OLT在给定时间内没有收到加入或续租的ONU设备的密钥请求报文时，会通过单播通道再给该ONU设备发送一个密钥通知消息并等待该ONU设备的密钥请求报文；如果在密钥通知消息的发送次数达到第一预设次数后，例如三次，还是没有收到该ONU设备的密钥请求报文时，切片OLT就会通过单播通道发送一个密钥同步失败信息给该ONU设备并将该ONU设备的相应接口从组播组成员列表中删除。
在步骤S700中，在密钥的发送次数达到第二预设次数并且未获取到来自ONU设备的密钥确认信息的情况下，发送密钥同步失败信息至ONU设备，并将ONU设备从组播组成员列表中删除。
在一种可实施方式中，切片OLT在给定时间内没有收到加入或续租的ONU设备的密钥确认信息时，会通过单播通道再给该ONU设备发送密钥；如果在密钥的发送次数达到第二预设次数后，例如三次，还是没有收到该ONU设备的密钥确认信息时，切片OLT会通过单播通道发送一个密钥同步失败信息给该ONU设备并将该ONU的相应接口从组播组成员列表中删除。
如图8所示，图8是本公开实施例提供的组播报文处理方法的一种流程图，该组播报文处理方法可以应用于ONU设备，包括但不限于有步骤S800和步骤S900。
在步骤S800中，获取来自OLT设备的加密报文，加密报文由OLT设备对组播报文进行加密得到。
在步骤S900中，通过与加密报文匹配的密钥对加密报文进行解密并将解密后的组播报文发送至用户侧接口。
在一种可实施方式中，当OLT设备运行组播业务时，OLT设备可以对组播报文进行加密，得到加密报文，并将加密报文通过物理PON口发送至该物理PON口下并且存在于组播组成员列表中的所有ONU设备；其中，若当前的ONU设备携带有与加密报文匹配的密钥，那么当前的ONU设备就可以通过密钥对加密报文进行解密，成功解密即表示该组播报文就是当前ONU设备所需求的组播报文，随后当前的ONU设备就会将解密后得到的组播报文发送至用户侧接口，并通过用户侧接口发送至机顶盒。若当前的ONU设备没有携带有与加密报文匹配的密钥，那么当前的ONU设备就无法对加密报文进行解密，未成功解密即表示未成功解密的组播报文不是当前ONU设备所需求的组播报文，随后当前的ONU设备就会将未成功解密的加密报文直接丢弃而不作解析。因此，本公开实施例能够使得ONU设备通过密钥按需接收组播报文，无需解析所有的组播报文，从而能够提高组播报文的传输性能。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述的组播报文处理方法的相关描述。
另外，参照图9和图10，在一种可实施方式中，当每个ONU设备携带有与对应的切片OLT采用的加密算法匹配的密钥；上述步骤S800中的获取来自OLT设备的加密报文可包括但不限于有图9中的步骤S1000；对应地，上述步骤S900可包括但不限于有图10中的步骤S1100。
在步骤S1000中，获取来自OLT设备中至少两个切片OLT的加密报文；其中，加密报文由各自对应的切片OLT对各自的组播报文进行加密得到。
在一种可实施方式中，当存在OLT设备需要同时对接多个运营商的情况下，可以将OLT设备虚拟为多个切片OLT，并且运营商和切 片OLT分别一一对应，当不同的运营商使用相同的MVLAN和相同的组播组地址时，每个切片OLT都会采用各自的加密算法对各自运营商的组播报文进行加密，得到多份加密报文，并将多份加密报文通过物理PON口发送至该物理PON口下的所有ONU设备，其中，没有存在于组播组成员列表中的ONU设备会将加密报文丢弃，已存在于组播组成员列表中的ONU设备则会接收加密报文，从而可以使得多份加密报文顺利发送至组播组成员列表中的ONU设备。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述组播报文处理方法的相关描述。
在步骤S1100中，通过各自对应的切片OLT的加密报文对应的密钥对来自各自对应的切片OLT的加密报文进行解密，并将解密后的组播报文发送至用户侧接口。
在一种可实施方式中，由于组播组成员列表中一个ONU设备对应关联一个运营商，因此，组播组成员列表中的每个ONU设备只能够通过对应的密钥对各自关联的运营商的加密报文进行解密，而不能对其他运营商的加密报文进行解密，若成功解密后会将解密后的组播报文发送至用户侧接口，若解密失败后则会将未成功解密的加密报文直接丢弃而不作解析。因此，本公开实施例能够使得每个ONU设备可以通过密钥按需接收各自对应运营商所发出的组播报文，而无需解析所有的组播报文，从而能够提高组播报文的传输性能。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述组播报文处理方法的相关描述。
另外，参照图11，在一种可实施方式中，在上述步骤S800之前，该组播报文处理方法还可包括但不限于有步骤S1210、步骤S1220和步骤S1230。
在步骤S1210中，获取加入报文信息。
在步骤S1220中，将加入报文信息发送至OLT设备。
在步骤S1230中，与OLT设备进行密钥信息交互以获得来自OLT 设备的密钥。
在一种可实施方式中，OLT设备启用组播功能后，会根据预设的加密算法生成密钥，然后OLT设备会监听下接的ONU侧的加入报文信息，当ONU设备下接有机顶盒加入，ONU设备就会获取到加入报文信息并发送至OLT设备，若OLT设备接收到来自ONU设备的加入报文信息，就会将该ONU设备的相应接口加入至组播组成员列表中，并且OLT设备会通过与ONU设备进行密钥信息交互的方式将已生成的密钥发送至该ONU设备，从而实现了密钥从OLT设备向ONU设备的传送。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述组播报文处理方法的相关描述。
另外，参照图12，在一种可实施方式中，上述步骤S1230可包括但不限于步骤S1310、步骤S1320、步骤S1330和步骤S1340。
在步骤S1310中，获取来自OLT设备的密钥通知消息，并根据密钥通知消息生成密钥请求报文。
在步骤S1320中，将密钥请求报文发送至OLT设备，以使OLT设备根据密钥请求报文发出密钥。
在步骤S1330中，获取来自OLT设备的密钥，并根据密钥生成密钥确认信息。
在步骤S1340中，将密钥确认信息发送至OLT设备。
在一种可实施方式中，切片OLT可以通过单播通道给加入或者续租的ONU设备发送一个密钥通知消息，当该ONU设备接收到密钥通知消息后，会通过单播通道给上述的切片OLT发送一个密钥请求报文，若切片OLT能够接收到该ONU设备的密钥请求报文，则认为加入或者续租的ONU设备能够接收加密的组播报文，从而切片OLT就会响应并通过单播通道发送密钥至加入或者续租的ONU设备，当ONU设备获取到密钥后，会通过单播通道给该切片OLT发送一个密钥确认信息；若切片OLT接收到该ONU设备的密钥确认信息，则认为该ONU设备能对加密后的组播报文进行解密，因此，切片OLT后续可以对要转发的组播报文进行加密然后通过组播通道进行转发。如果该组播组中之前已 经有其他成员且加密的组播报文已经下发，则切片OLT不需要再发一份加密的组播报文，只需要维护其组播组成员列表即可。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述组播报文处理方法的相关描述。
另外，参照图13，在一种可实施方式中，在执行上述步骤S1230的过程中，该组播报文处理方法还可包括但不限于有步骤S1400。
在步骤S1400中，在将密钥请求报文发送至OLT设备后并且在预设时间内没有收到来自OLT设备的密钥的情况下，将密钥同步失败信息发送至OLT设备。
在一种可实施方式中，加入或续租的ONU设备发送密钥请求报文后，会处于等待接收切片OLT发送的密钥状态，如在预设时间内没有收到该切片OLT发送的密钥，就会通过单播通道发送一个密钥同步失败信息给该切片OLT。
可以理解的是，关于上述的密钥同步失败信息，具体的报文格式可以为PLOAM、OMCI或普通数据包等，本公开实施例不作特别限制。
值得注意的是，本公开实施例提供的组播报文处理方法的具体实施方式及对应的技术效果，可对应参照前述组播报文处理方法的相关描述。
另外，参照图14和图15，在一种可实施方式中，当ONU设备设置有备份密钥寄存器和激活密钥寄存器；在上述步骤S1330中的获取来自OLT设备的密钥之后，该组播报文处理方法还可包括但不限于图14中的步骤S1500或者图15中的步骤S1600。
在步骤S1500中，将来自OLT设备的密钥存储在备份密钥寄存器中，并将备份密钥寄存器中的密钥与激活密钥寄存器中原有的密钥进行对比，在备份密钥寄存器中的密钥与激活密钥寄存器中原有的密钥一致的情况下，对激活密钥寄存器中原有的密钥进行激活。
在一种可实施方式中，如当前ONU设备在给定时间内接收到该切片OLT发送的密钥，则新的有效密钥会被存储在其当前ONU设备的备份密钥寄存器中，接着该ONU设备会比较其备份密钥寄存器中内容 与激活密钥寄存器中的内容，如果两者内容一致，则继续使用激活密钥寄存器中的密钥。该ONU设备在比对完新旧密钥并作出继续使用旧密钥操作后，会通过单播通道给该切片OLT发送一个密钥确认信息。
在步骤S1600中，将来自OLT设备的密钥存储在备份密钥寄存器中，并将备份密钥寄存器中的密钥与激活密钥寄存器中原有的密钥进行对比，在备份密钥寄存器中的密钥与激活密钥寄存器中原有的密钥不一致的情况下，删除激活密钥寄存器中原有的密钥，将备份密钥寄存器中的密钥存储到激活密钥寄存器中，并对激活密钥寄存器中的密钥进行激活。
在一种可实施方式中，如当前ONU设备在给定时间内接收到该切片OLT发送的密钥，则新的有效密钥会被存储在其当前ONU设备的备份密钥寄存器中，接着该ONU设备会比较其备份密钥寄存器中内容与激活密钥寄存器中的内容，如果两者内容不一致则进行密钥切换，则将备份密钥寄存器的内容复制到激活密钥寄存器中，这样切片OLT和ONU设备都开始使用新的密钥。该ONU设备在比对完新旧密钥并作出继续使用新的密钥操作后，会通过单播通道给该切片OLT发送一个密钥确认信息。
基于上述组播报文处理方法，本公开实施例还提供一种OLT设备、ONU设备和计算机可读存储介质。
本公开实施例提供的OLT设备可包括：存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序。处理器和存储器可以通过总线或者其他方式连接。
需要说明的是，本公开实施例中的OLT设备，可以应用于如图1所示的系统架构平台，本公开实施例中的OLT设备，能够构成图1所示的系统架构平台的一部分，两者属于相同的发明构思，因此两者具有相同的实现原理以及有益效果，此处不再赘述。
实现上述组播报文处理方法所需的非暂态软件程序以及指令存储在存储器中，当被处理器执行时，执行上述组播报文处理方法的至少一个步骤，例如，执行以上描述的图2中的方法步骤S100至S200、图4中的方法步骤S410至S440、图5中的方法步骤S510至S540、 图6中的方法步骤S600，和/或图7中的方法步骤S700。
本公开实施例提供的ONU设备可包括：存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序。处理器和存储器可以通过总线或者其他方式连接。
需要说明的是，本公开实施例中的ONU设备，可以应用于如图1所示的系统架构平台，本公开实施例中的ONU设备，能够构成图1所示的系统架构平台的一部分，两者属于相同的发明构思，因此两者具有相同的实现原理以及有益效果，此处不再赘述。
实现上述组播报文处理方法所需的非暂态软件程序以及指令存储在存储器中，当被处理器执行时，执行上述组播报文处理方法的至少一个步骤，例如，执行以上描述的图8中的方法步骤S800至S900、图9中的步骤S1000、图10中的步骤S1100、图11中的方法步骤S1210至S1230、图12中的方法步骤S1310至S1340、图13中的步骤S1400、图14中的步骤S1500，和/或图15中的步骤S1600。
以上所描述的装置的实施方式仅仅是示意性的，其中作为分离部件说明的单元可以是或者也可以不是物理上分开的，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本公开实施例的目的。
本公开实施例提供的计算机可读存储介质存储有计算机可执行指令，计算机可执行指令用于执行上述的组播报文处理方法。例如，被上述OLT设备中的一个处理器执行，可使得上述处理器执行上述组播报文处理方法的至少一个步骤，例如，执行以上描述的图2中的方法步骤S100至S200、图4中的方法步骤S410至S440、图5中的方法步骤S510至S540、图6中的方法步骤S600，和/或图7中的方法步骤S700。又如，被上述ONU设备的一个处理器执行，可使得上述处理器执行上述组播报文处理方法的至少一个步骤，例如，执行以上描述的图8中的方法步骤S800至S900、图9中的步骤S1000、图10中的步骤S1100、图11中的方法步骤S1210至S1230、图12中的方法步骤S1310至S1340、图13中的步骤S1400、图14中的步骤S1500，和/或图15中的步骤S1600。
本领域普通技术人员可以理解，上文中所公开方法中的全部或某些步骤、系统可以被实施为软件、固件、硬件及其适当的组合。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于随机存取存储器(Random Access Memory，RAM)、只读存储器(Read-Only Memory，ROM)、带电可擦可编程只读存储器(Electrically Erasable Programmable Read Only Memory，EEPROM)、闪存或其他存储器技术、CD-ROM、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外，本领域普通技术人员公知的是，通信介质通常包括计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。
以上是对本公开的较佳实施进行了具体说明，但本公开并不局限于上述实施方式，熟悉本领域的技术人员在不违背本公开精神的共享条件下还可作出种种等同的变形或替换，这些等同的变形或替换均包括在本公开权利要求所限定的范围内。

Claims (14)

  1. 一种组播报文处理方法，应用于光线路终端OLT设备，包括：
    对组播报文进行加密，得到加密报文；以及
    将所述加密报文发送至组播组成员列表中的光网络单元ONU设备，以使携带有与所述加密报文匹配的密钥的ONU设备对所述加密报文进行解密并将解密后的所述组播报文发送至用户侧接口。
  2. 根据权利要求1所述的组播报文处理方法，其中，所述OLT设备设置有至少两个切片OLT，各个所述切片OLT采用不同的加密算法对各自的所述组播报文进行加密，所述组播组成员列表中的每个ONU设备对应一个所述切片OLT，每个所述ONU设备携带有与对应的所述切片OLT采用的加密算法匹配的所述密钥。
  3. 根据权利要求1所述的组播报文处理方法，在对组播报文进行加密之前，还包括：
    根据预设的加密算法生成所述密钥；
    获取来自ONU设备的加入报文信息；
    根据所述加入报文信息将ONU设备添加至所述组播组成员列表中；以及
    与ONU设备进行密钥信息交互以将所述密钥发送至ONU设备。
  4. 根据权利要求3所述的组播报文处理方法，其中，与ONU设备进行密钥信息交互以将所述密钥发送至ONU设备，包括：
    将所述密钥通知消息发送至ONU设备，以使ONU设备根据所述密钥通知消息生成密钥请求报文；
    获取来自ONU设备的所述密钥请求报文；
    根据所述密钥请求报文将所述密钥发送至ONU设备，以使ONU设备根据所述密钥生成密钥确认信息；以及
    获取来自ONU设备的所述密钥确认信息。
  5. 根据权利要求4所述的组播报文处理方法，还包括以下之一：
    在所述密钥通知消息的发送次数达到第一预设次数并且未获取到来自ONU设备的所述密钥请求报文的情况下，发送密钥同步失败信息至ONU设备，并将ONU设备从所述组播组成员列表中删除；以及
    在所述密钥的发送次数达到第二预设次数并且未获取到来自ONU设备的所述密钥确认信息的情况下，发送密钥同步失败信息至ONU设备，并将ONU设备从所述组播组成员列表中删除。
  6. 一种组播报文处理方法，应用于光网络单元ONU设备，包括：
    获取来自光线路终端OLT设备的加密报文，所述加密报文由OLT设备对组播报文进行加密得到；以及
    通过与所述加密报文匹配的密钥对所述加密报文进行解密并将解密后的所述组播报文发送至用户侧接口。
  7. 根据权利要求6所述的组播报文处理方法，其中，一个所述ONU设备对应OLT设备中的一个切片OLT，每个所述ONU设备携带有与对应的所述切片OLT采用的加密算法匹配的所述密钥；
    获取来自OLT设备的加密报文，包括：获取来自OLT设备中至少两个切片OLT的加密报文；其中，所述加密报文由各自对应的切片OLT对各自的组播报文进行加密得到；以及
    通过与所述加密报文匹配的密钥对所述加密报文进行解密并将解密后的所述组播报文发送至用户侧接口，包括：通过各自的所述密钥对来自各自对应的切片OLT的所述加密报文进行解密，并将解密后的所述组播报文发送至用户侧接口。
  8. 根据权利要求6所述的组播报文处理方法，在获取来自OLT设备的加密报文之前，还包括：
    获取加入报文信息；
    将所述加入报文信息发送至OLT设备；以及
    与OLT设备进行密钥信息交互以获得来自OLT设备的所述密钥。
  9. 根据权利要求8所述的组播报文处理方法，其中，与OLT设备进行密钥信息交互以获得来自OLT设备的所述密钥，包括：
    获取来自OLT设备的密钥通知消息，并根据所述密钥通知消息生成密钥请求报文；
    将所述密钥请求报文发送至OLT设备，以使OLT设备根据所述密钥请求报文发出所述密钥；
    获取来自OLT设备的所述密钥，并根据所述密钥生成密钥确认信息；以及
    将所述密钥确认信息发送至OLT设备。
  10. 根据权利要求9所述的组播报文处理方法，还包括：
    在将所述密钥请求报文发送至OLT设备后并且在预设时间内没有收到来自OLT设备的所述密钥的情况下，将密钥同步失败信息发送至OLT设备。
  11. 根据权利要求9所述的组播报文处理方法，其中，所述ONU设备设置有备份密钥寄存器和激活密钥寄存器；以及，在获取来自OLT设备的所述密钥之后，所述方法还包括以下之一：
    将来自OLT设备的所述密钥存储在所述备份密钥寄存器中，并将所述备份密钥寄存器中的所述密钥与所述激活密钥寄存器中原有的密钥进行对比，在所述备份密钥寄存器中的所述密钥与所述激活密钥寄存器中原有的密钥一致的情况下，对所述激活密钥寄存器中原有的密钥进行激活；以及
    将来自OLT设备的所述密钥存储在所述备份密钥寄存器中，并将所述备份密钥寄存器中的所述密钥与所述激活密钥寄存器中原有的密钥进行对比，在所述备份密钥寄存器中的所述密钥与所述激活密钥寄存器中原有的密钥不一致的情况下，删除所述激活密钥寄存器中原有的密钥，将所述备份密钥寄存器中的所述密钥存储到所述激活密钥寄存器中，并对所述激活密钥寄存器中的所述密钥进行激活。
  12. 一种光线路终端OLT设备，包括：存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序，所述处理器执行所述计算机程序时实现根据权利要求1至5中任意一项所述的组播报文处理方法。
  13. 一种光网络单元ONU设备，包括：存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机程序，所述处理器执行所述计算机程序时实现根据权利要求6至11中任意一项所述的组播报文处理方法。
  14. 一种计算机可读存储介质，其上存储有计算机可执行指令，所述计算机可执行指令被执行时实现根据权利要求1至11中任意一项所述的组播报文处理方法。
PCT/CN2021/101194 2020-06-23 2021-06-21 组播报文处理方法、olt设备、onu设备及计算机可读存储介质 WO2021259189A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010581056.6 2020-06-23
CN202010581056.6A CN113840185A (zh) 2020-06-23 2020-06-23 组播报文处理方法、olt设备、onu设备及存储介质

Publications (1)

Publication Number Publication Date
WO2021259189A1 true WO2021259189A1 (zh) 2021-12-30

Family

ID=78964049

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/101194 WO2021259189A1 (zh) 2020-06-23 2021-06-21 组播报文处理方法、olt设备、onu设备及计算机可读存储介质

Country Status (2)

Country Link
CN (1) CN113840185A (zh)
WO (1) WO2021259189A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114448770B (zh) * 2022-01-24 2024-02-23 北京电信规划设计院有限公司 用于自定义宽带网络切片的方法
CN114760090B (zh) * 2022-02-25 2023-07-28 全球能源互联网研究院有限公司 一种电力5g网络切片的通信安全认证方法及装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1953367A (zh) * 2005-10-17 2007-04-25 中兴通讯股份有限公司 一种以太网无源光网络中组播业务加密控制的方法
CN105610590A (zh) * 2015-12-18 2016-05-25 杭州华三通信技术有限公司 一种组播报文传输方法和装置
CN108111931A (zh) * 2017-12-15 2018-06-01 国网辽宁省电力有限公司 一种电力光纤接入网的虚拟资源切片管理方法及装置
CN108989915A (zh) * 2018-06-14 2018-12-11 烽火通信科技股份有限公司 一种基于onu粒度的接入网olt切片的方法及系统
US20190140971A1 (en) * 2017-10-23 2019-05-09 Nokia Solutions And Networks Oy Network slice management

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1953367A (zh) * 2005-10-17 2007-04-25 中兴通讯股份有限公司 一种以太网无源光网络中组播业务加密控制的方法
CN105610590A (zh) * 2015-12-18 2016-05-25 杭州华三通信技术有限公司 一种组播报文传输方法和装置
US20190140971A1 (en) * 2017-10-23 2019-05-09 Nokia Solutions And Networks Oy Network slice management
CN108111931A (zh) * 2017-12-15 2018-06-01 国网辽宁省电力有限公司 一种电力光纤接入网的虚拟资源切片管理方法及装置
CN108989915A (zh) * 2018-06-14 2018-12-11 烽火通信科技股份有限公司 一种基于onu粒度的接入网olt切片的方法及系统

Also Published As

Publication number Publication date
CN113840185A (zh) 2021-12-24

Similar Documents

Publication Publication Date Title
KR100523357B1 (ko) 이더넷 기반 수동형 광네트워크의 보안서비스 제공을 위한키관리 장치 및 방법
WO2021259189A1 (zh) 组播报文处理方法、olt设备、onu设备及计算机可读存储介质
JP3774455B2 (ja) イーサネット（登録商標）受動型光加入者網システムにおけるデータ転送方法
CN111787533B (zh) 加密方法、切片管理方法、终端及接入和移动性管理实体
US20040028409A1 (en) Method for transmitting security data in Ethernet passive optical network system
US8948401B2 (en) Method for filtering of abnormal ONT with same serial number in a GPON system
US11652619B2 (en) System and method for optimizing the routing of quantum key distribution (QKD) key material in a network
US20020150097A1 (en) Method and apparatus for secured multicasting
WO2009039791A1 (fr) Système de communication à diffusion de groupe de réseau optique passif, procédé de gestion de diffusion de groupe et dispositif correspondant
CN100505631C (zh) Gpon系统中的组播处理方法
JP2004343243A (ja) Ｐｏｎシステムにおけるマルチキャスト通信方法および局側装置
CN105610590B (zh) 一种组播报文传输方法和装置
AU2012381695A1 (en) Optical network terminal management control interface message transmission method and system, and corresponding device
WO2017092465A1 (zh) 广播报文加密方法、olt、onu及计算机存储介质
US11652620B2 (en) System and method for proactively buffering quantum key distribution (QKD) key material
CN110798437B (zh) 一种数据保护方法、装置及计算机存储介质
WO2011088700A1 (zh) 一种无源光网络系统组播业务加密方法和装置
WO2014169856A1 (zh) 一种组播通信方法和汇聚交换机
JP4889984B2 (ja) 通信システムおよび通信方法
US8311217B2 (en) Data transmission method and terminal
CN103516515A (zh) Gpon系统中加解密无缝切换的实现方法、olt和onu
CN101547086A (zh) 一种宽带接入网络组播控制方法、系统及装置
EP4138356A1 (en) Inter-node privacy communication method and network node
CN102055598A (zh) 一种实现点到多点802.3ah协议OAM的方法及系统
JP2004260556A (ja) 局側装置、加入者側装置、通信システムおよび暗号鍵通知方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21829540

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 12.05.2023)

122 Ep: pct application non-entry in european phase

Ref document number: 21829540

Country of ref document: EP

Kind code of ref document: A1