WO2023019816A1

WO2023019816A1 - Optical network device authentication and configuration management method and system in fttr scenario

Info

Publication number: WO2023019816A1
Application number: PCT/CN2021/135949
Authority: WO
Inventors: 彭文豪; 刘文超; 赵伟峰; 侍芯蕊; 童晟辰
Original assignee: 天翼数字生活科技有限公司
Priority date: 2021-08-20
Filing date: 2021-12-07
Publication date: 2023-02-23
Also published as: CN113852883B; BR112023021776A2; CN113852883A

Abstract

The present invention provides an optical network device authentication and configuration management method and system in an FTTR scenario. The method may comprise: assigning to each optical network device an LOID which indicates a device type, wherein the LOID comprises at least a class A LOID, a class B1 LOID and a class B2 LOID, wherein the class A LOID indicates that the optical network device is a primary ONT device, the class B1 LOID indicates that the optical network device is a class B1 edge ONT device managed by an auto-configuration server (ACS), and the class B2 LOID indicates that the optical network device is a class B2 edge ONT device that is not managed by the ACS; configuring the primary ONT device to register with and authenticate an OLT device and to accept ACS management; configuring the class B1 edge ONT device to register with and authenticate the OLT device via the primary ONT device coupled therewith, and to accept the ACS management; and configuring the class B2 edge ONT device to register with and authenticate the primary ONT device coupled therewith, and to accept management by the primary ONT device.

Description

Optical network device authentication and configuration management method and system in FTTR scenario

technical field

The present invention relates to the field of network technology and security, and more specifically, relates to an optical network device authentication and configuration management method and system under the FTTR scenario.

Background technique

FTTR (Fiber to the Room) refers to the deployment of all-optical gateways and sub-devices in the home on the basis of FTTH (Fiber to the Home), and through the PON (Passive Optical Network) technology to achieve optical fiber communication coverage to the user's room. Figure 1 illustrates a typical architecture for FTTH and FTTR.

In Fig. 1, the upper branch represents an exemplary FTTH scenario. Ordinary home gateway is the optical network terminal equipment ONT (Optical Network Terminal) deployed on the user end, which is connected to the central office equipment OLT (Optical Line Terminal) through the home optical fiber. According to the current PON protocol, when the ONT device goes online, it needs to carry the legal logical ID (LOID) assigned by the operator to initiate registration authentication to the central office device OLT. After passing the authentication, the ONT device initiates account authentication (such as PPPoE dial-up) to the authentication system server (such as BRAS server, Broadband Remote Access Server). Inside the home, the gateway is generally connected point-to-point to the next-level router through a network cable, and the router is further responsible for the network coverage in the home, such as further cascading multiple APs.

The lower branch of Figure 1 represents an exemplary FTTR scenario. In the FTTR scenario, the ONT device first connected to the home optical fiber is the FTTR home all-optical gateway, which is further connected to multiple FTTR sub-devices at the next level through optical fibers (that is, point-to-multipoint). These FTTR sub-devices typically Placed in different rooms, the so-called "fiber into the room". According to the current registration, authentication and management mechanism of optical equipment, only the FTTR home all-optical gateway as the ONT registers and authenticates with the OLT, initiates account authentication to the authentication system server, and accepts the automatic configuration server ACS (Auto-Configuration Server) of the operator. ) (such as ITMS (Integrated Terminal Management System) platform), and these FTTR sub-devices only accept the management of the home all-optical gateway, and the home all-optical gateway forwards the relevant data to the FTTR sub-devices. Therefore, these FTTR sub-devices are similar to routers in FTTH scenarios when used, and belong to the internal devices of the LAN, and the access network does not perceive them.

However, in some practical application scenarios, for example, in school dormitory buildings, office buildings, residences and other FTTR scenarios where one household has multiple rooms and multiple users, it is desired to have a more flexible management method for the existing FTTR architecture. Take a four-room house as an example. Typically, one FTTR sub-device is set in each room, which is jointly connected to the FTTR home all-optical gateway (main ONT device). The room shares the total bandwidth of this household's FTTR service, for example, 1000Mbps. However, if users in each room want to use independently of each other (FTTR primary users), for example, want to purchase different network access services (such as different bandwidth, different activation/deactivation time), the current management method does not support .

Contents of the invention

This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used as an aid in determining the scope of the claimed subject matter.

The invention aims to solve the problem that the device access authentication and management process of the current PON technology cannot be well compatible with the FTTR scene. To this end, a method for classified access authentication and configuration management of home all-optical network equipment based on FTTR scenarios is provided, wherein the home all-optical gateway and sub-devices register and authenticate with the OLT respectively and accept management, and the sub-devices can be managed according to the Depending on the requirements, it supports the two modes of central office access authentication and ACS management or home gateway local management.

According to one aspect of the present invention, a method for optical network device authentication and configuration management in an FTTR scenario is provided, wherein the method includes:

Assign an LOID indicating the type of equipment to each optical network device, wherein the LOID includes at least Type A LOID, Type B1 LOID, and Type B2 LOID, wherein Type A LOID indicates that the optical network equipment is the master ONT equipment, and Type B1 LOID indicates that the optical network The device is a Class B1 edge ONT device managed by ACS, and the Class B2 LOID indicates that the optical network device is a Class B2 edge ONT device not managed by ACS;

Configure the main ONT device to register and authenticate with the OLT device and accept ACS management;

Configure the B1 edge ONT device to register and authenticate with the OLT device through its coupled main ONT device and accept ACS management; and

The B2 type edge ONT device is configured to register and authenticate with its coupled main ONT device and accept the management of the main ONT device.

According to another aspect of the present invention, a method for optical network device authentication and configuration management in an FTTR scenario is provided, wherein each optical network device has a LOID indicating the type of the device, wherein the LOID includes at least a type A LOID , Type B1 LOID, and Type B2 LOID, where Type A LOID indicates that the optical network device is the main ONT device, Type B1 LOID indicates that the optical network device is a Type B1 edge ONT device managed by the ACS, and Type B2 LOID indicates that the optical network device is not A B2 class edge ONT device managed by the ACS, wherein the method is performed by the main ONT device and includes the following steps:

Initiate a registration authentication request to the OLT device, which includes the Class A LOID of the master ONT device in the request;

In response to the OLT device passing the authentication of the master ONT device, requesting configuration information from the ACS;

Receive the account number and configuration information of the master ONT device issued by the ACS and the edge ONT device associated with the master ONT device;

Initiate an account authentication request to the authentication system with the account number of the main ONT device;

In response to receiving the authentication registration request of the edge ONT device, determining the type of the edge ONT device according to the LOID of the edge ONT device included in the authentication registration request of the edge ONT device;

In response to determining that the edge ONT device is a Class B1 edge ONT device:

Transparently transmit the authentication registration request of the B1 type edge ONT device to the OLT device;

Receive the authentication result returned by the OLT device, and transparently transmit it to the B1 edge ONT device;

sending the account and configuration information corresponding to the B1-type edge ONT device from the ACS to the B1-type edge ONT device; and

Transparently transmit the account authentication request and return message between the B1 type edge ONT device and the authentication system; and

In response to determining that the edge ONT device is a Class B2 edge ONT device:

Authenticating the Class B2 edge ONT device; and

If the authentication is passed, the authentication result is returned to the B2-type edge ONT device and a configuration is issued, wherein the configuration configures the B2-type edge ONT device in bridge mode.

According to an embodiment of the present invention, the method further includes: receiving the updated account number and configuration information of the edge ONT device associated with the master ONT device issued by the ACS.

According to yet another aspect of the present invention, a method for optical network device authentication and configuration management in an FTTR scenario is provided, wherein each optical network device has a LOID indicating the type of the device, wherein the LOID includes at least a type A LOID , Type B1 LOID, and Type B2 LOID, where Type A LOID indicates that the optical network device is the main ONT device, Type B1 LOID indicates that the optical network device is a Type B1 edge ONT device managed by the ACS, and Type B2 LOID indicates that the optical network device is not A B2 class edge ONT device managed by the ACS, wherein the method is performed by a B1 class edge ONT device and includes the following steps:

Initiate a registration authentication request to the main ONT device coupled with the B1 type edge ONT device, and the request includes the B1 type LOID of the main B1 type edge ONT device;

Receiving the authentication result from the OLT device returned by the master ONT device;

receiving the account number and configuration information corresponding to the B1-type edge ONT device from the ACS sent by the master ONT device; and

Initiate an account authentication request to the authentication system with the received account number.

According to yet another aspect of the present invention, a method for optical network device authentication and configuration management in an FTTR scenario is provided, wherein each optical network device has a LOID indicating the type of the device, wherein the LOID includes at least a type A LOID , Type B1 LOID, and Type B2 LOID, where Type A LOID indicates that the optical network device is the main ONT device, Type B1 LOID indicates that the optical network device is a Type B1 edge ONT device managed by the ACS, and Type B2 LOID indicates that the optical network device is not A B2 class edge ONT device managed by the ACS, wherein the method is performed by the B2 class edge ONT device and includes the following steps:

Initiate a registration authentication request to the main ONT device coupled with the B2 type edge ONT device, and the request includes the B2 type LOID of the main B1 type edge ONT device;

Receiving the authentication result returned by the main ONT device and the configuration issued; and

Configure the edge ONT device of type B2 into bridge mode according to the received configuration.

According to yet another aspect of the present invention, a method for optical network device authentication and configuration management in an FTTR scenario is provided, wherein each optical network device has a LOID indicating the type of the device, wherein the LOID includes at least a type A LOID , Type B1 LOID, and Type B2 LOID, where Type A LOID indicates that the optical network device is the main ONT device, Type B1 LOID indicates that the optical network device is a Type B1 edge ONT device managed by the ACS, and Type B2 LOID indicates that the optical network device is not A B2 class edge ONT device managed by the ACS, wherein the method is performed by the ACS and includes the following steps:

The account authentication is in response to receiving the configuration information request from the master ONT device, sending the account number and configuration information of the master ONT device and edge ONT devices associated with the master ONT device to the master ONT device; and

In response to changes in the account number and configuration information of the edge ONT device associated with the master ONT device maintained on the ACS, the updated account number and configuration information of the edge ONT device are sent to the master ONT device.

According to yet another aspect of the present invention, a system for providing FTTR services is provided, wherein the system includes an ACS, an authentication system, an OLT device, a master ONT device, and one or more edge ONTs coupled to the master ONT device equipment, of which:

Each of the master ONT device and the edge ONT device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, wherein the type A LOID indicates that the optical network device is a master ONT device, B1 type LOID indicates that the optical network device is a B1 type edge ONT device managed by ACS, and B2 type LOID indicates that the optical network device is a B2 type edge ONT device not managed by ACS;

Wherein said master ONT device is configured to register and authenticate with said OLT device and accept said ACS management;

The B1-type edge ONT device is configured to register and authenticate with the OLT device through the master ONT device and accept the ACS management; and

The B2-type edge ONT device is configured to register and authenticate with its coupled master ONT device and accept the management of the master ONT device.

According to an embodiment of the present invention, the master ONT device is further configured to:

Authenticating the Class B2 edge ONT device; and

According to an embodiment of the present invention, the master ONT device is further configured to: receive the updated account number and configuration information of the edge ONT device associated with the master ONT device issued by the ACS.

According to a further embodiment of the present invention, the B1 type edge ONT device is further configured to:

According to a further embodiment of the present invention, the B2 type edge ONT device is further configured to:

According to a further embodiment of the present invention, the ACS is configured to:

Compared with the existing device access authentication and management process, the present invention can be better applicable to FTTR scenarios, and the management of home gateways and sub-devices can be more detailed. Operators can judge the type of equipment according to the registered LOID, so as to achieve classified management, and it is compatible with multiple management modes of sub-equipment. More specifically, the optical network device authentication and configuration management method of the present invention has at least the following advantages:

1. The home gateway and sub-devices are classified and identified through LOID, and registered and certified separately;

2. Allow operators to manage the home gateway in the FTTR scenario, and at the same time be compatible with automatic network connection management for some sub-devices connected to the home all-optical gateway;

3. In the FTTR scenario, the sub-device in the home accepts two modes of local management or ACS management.

These and other features and advantages will become apparent by reading the following detailed description and by reference to the associated drawings. It is to be understood that both the foregoing general description and the following detailed description are illustrative only and are not restrictive in all respects as claimed.

Description of drawings

So that the manner in which the above recited features of the invention can be understood in detail, a more particular description of what has been briefly summarized above may be had by reference to various embodiments, some aspects of which are illustrated in the accompanying drawings. It is to be noted, however, that the drawings illustrate only certain typical aspects of the invention and are therefore not to be considered limiting of its scope, for the description may admit to other equally effective aspects.

A typical architecture of FTTH and FTTR in the prior art is illustrated in FIG. 1 .

Fig. 2 is a schematic diagram of an FTTR scenario according to an embodiment of the present invention.

Fig. 3 is an example registration authentication process of a B1 type ONT device according to an embodiment of the present invention.

Fig. 4 is an example registration authentication process of a B2 type ONT device according to an embodiment of the present invention.

Fig. 5 is an exemplary flowchart of a method for optical network device authentication and configuration management in an FTTR scenario according to an embodiment of the present invention.

Fig. 6 is an exemplary flowchart of an optical network device authentication and configuration management method implemented by a master ONT device according to an embodiment of the present invention.

Fig. 7 is an exemplary flowchart of an optical network device authentication and configuration management method implemented by an edge ONT device according to an embodiment of the present invention.

Fig. 8 is an exemplary flowchart of an optical network device authentication and configuration management method implemented by an edge ONT device according to an embodiment of the present invention.

Fig. 9 is an exemplary flowchart of an optical network device authentication and configuration management method implemented by an ACS according to an embodiment of the present invention.

Fig. 10 is an example architecture diagram of a system for providing FTTR services according to an embodiment of the present invention.

Detailed ways

The present invention will be described in detail below in conjunction with the accompanying drawings, and the features of the present invention will be further revealed in the following detailed description.

In order to solve the problem of more flexible management of multiple sub-devices in the family mentioned in the background technology section, the present invention performs logic optimization and method improvement for FTTR scenarios on the basis of the current ONT access authentication method.

Those skilled in the art should understand that the "home gateway" or "home all-optical gateway" mentioned in this article is not limited to home use only, but can generally refer to the main ONT device installed on the user side in the FTTR architecture, Meanwhile, the term "master ONT device" can be used interchangeably with "master gateway", "master optical modem", "master device", "traditional ONT device" or "conventional ONT device". Similarly, "FTTR sub-device" or "sub-device" generally refers to the edge ONT device installed on the user side in the FTTR architecture and coupled to the master ONT device, while the term "edge ONT device" can be used with "sub-device" or "slave ONT device" are used interchangeably. The main ONT device and the edge ONT device may also be collectively referred to as "optical network device" or "ONT device".

Fig. 2 is a schematic diagram of an FTTR scenario according to an embodiment of the present invention. As shown in FIG. 2, the FTTR service is applied to a place having four rooms, such as a house. The homeowner has applied for the FTTR service, and the home optical fiber is connected to the FTTR home all-optical gateway (also called the main optical modem or the main ONT device, hereinafter referred to as the main gateway), and then connected to the FTTR sub-unit set in each room through the optical fiber. Devices (also called slave ONT devices or edge ONT devices, hereinafter referred to as sub-device), that is, sub-device 1 in room 1, sub-device 2 in room 2, sub-device 3 in room 3, and sub-device in room 4 4. Among them, tenants 1-3 use sub-device 1-3 respectively, while the householder uses sub-device 4 in room 4.

In this scenario, the sub-device 4 in the house owner's own room does not need to be billed and managed separately, while the sub-device 1-3 in each of the other rooms requires separate billing and management. Therefore, the sub-devices can be divided into two categories, the sub-devices that need to be charged and managed separately (such as sub-devices 1-3) are the first category, and the sub-devices that do not need to be charged and managed separately (such as sub-devices 4) are second category.

To this end, a classification is defined for all ONT devices including master gateways and sub-devices as follows:

Class A: It means that the device is a conventional ONT device, also known as the master ONT device;

Class B (divided into B1 and B2): It means that the device is an FTTR sub-device, also known as an edge ONT device, among which

B1 category: represents the FTTR sub-equipment managed by the operator's ACS, registers and authenticates with the OLT when it goes online, and accepts the configuration management of the ACS;

Type B2: represents the FTTR sub-device locally managed by the main gateway. When it goes online, it registers with the main gateway. The main gateway does not pass it transparently to the OLT, but issues authentication messages by itself and performs network configuration management.

According to this classification, in the scenario in Figure 2, the main gateway is a type A device, the sub-device 1-3 used by each tenant is a type B1 device, and the sub-device 4 used by the householder is a type B2 device. Corresponding to this classification, the corresponding category code is set in the device LOID used in the conventional PON protocol to distinguish whether the device is class A, B1 or B2. For this reason, the version of the PON protocol can be revised and updated, so that The central office equipment can identify the type of ONT equipment through LOID. In one embodiment, since the Class A device is consistent with the conventional ONT device, the LOID of the Class A device does not need to be modified, and its conventional LOID is still used, and only the LOIDs of the Class B1 and B2 devices need to be newly added.

The registration and authentication processes of the B1 type ONT device and the B2 type ONT device are described in detail below in conjunction with Fig. 3 and Fig. 4 respectively.

Fig. 3 is an example registration authentication process of a B1 type ONT device according to an embodiment of the present invention. As shown in FIG. 3 , first, the main gateway (such as a home all-optical gateway) is powered on and carries a type A LOID (ie, a conventional LOID) to initiate registration authentication to the central office OLT device. After passing the authentication, the OLT returns the authentication result to it. Subsequently, the master gateway may request configuration information from the operator's ACS. In response, the ACS issues the account number and configuration information of the main gateway to the main gateway, as well as the accounts and configuration information of one or more sub-devices registered with the operator and hung under the main gateway. The account and configuration information of the sub-device can be cached locally by the main gateway. . In this example, the number of FTTR sub-devices is 3, so the ACS can issue the account and configuration information for each sub-device (the account is a B-type account). It can be understood that the sub-device here refers to a B1-type sub-device, that is, a sub-device that is managed by the ACS. A B-type account is an account dedicated to B1-type sub-devices, and there is no need to further divide B1-type accounts and B2-type accounts, because B2-type devices do not accept ACS management, so no account is required. Subsequently, the main gateway carries the A-type account and initiates an account authentication request to the authentication system. After the account authentication is successful, the authentication system returns the authentication result.

Subsequently, the FTTR sub-device is powered on and carries the B1 type LOID to initiate registration authentication to the OLT. According to the connection architecture of FTTR, the registration authentication request message sent by the sub-device to the OLT will first pass through the main gateway. After receiving the message, the master gateway confirms that the LOID type is B1 type, and transparently transmits the request message to the OLT. After the authentication is passed, the OLT device returns the authentication result to it and sends the configuration, and the main gateway transparently transmits the message returned by the OLT to the sub-device.

Then, the main gateway issues the B-class account and configuration information for the sub-device provided by the ACS to the sub-device. The sub-device uses the Class B account and configuration information to initiate an account authentication request to the authentication system through the main gateway. After the account authentication is successful, the authentication system returns the authentication result. During the sub-device account authentication process, the main gateway transparently transmits the request and return message between the sub-device and the authentication system. So far, the certification registration of B1 sub-equipment is completed.

Fig. 4 is an example registration authentication process of a B2 type ONT device according to an embodiment of the present invention. As shown in Figure 4, first, similar to Figure 3, the main gateway initiates registration authentication to the OLT, and then requests configuration information from the ACS after passing the authentication, and receives and caches the accounts and configuration information of the main gateway and each sub-device. Subsequently, the main gateway carries the A-type account and initiates an account authentication request to the authentication system.

Subsequently, the FTTR sub-device is powered on and initiates registration authentication. Different from the example in FIG. 3 , in this example, the LOID carried by the FTTR sub-device is a B2 type LOID. After receiving the message, the home gateway confirms that the LOID type is B2, recognizes it as a local management device, and then returns the authentication result to it, and configures the sub-device as a bridge mode, that is, the sub-device is connected through the main gateway network. So far, the certification registration of B2 equipment is completed.

Returning to the example scenario in Figure 2, through the optical network device access authentication and configuration management methods described above, when the head of the household requests the operator for the FTTR package service, after the operator installs the FTTR all-optical gateway and each sub-equipment, The FTTR all-optical gateway and each sub-device use Class A and B1 LOIDs to perform OLT registration and authentication respectively, and then the gateway and each sub-device use the accounts assigned by the system to perform account authentication (for example, through PPPoE dialing). The operator's ACS also registers relevant information, recording that the FTTR user's home has an all-optical gateway and sub-devices that are managed separately. In this way, the following various needs can be flexibly met:

1. When tenant 1 applies for a broadband rate of 500M, he can apply for a speed increase, and the operator can flexibly allocate and manage it;

2. When the tenant 2 does not renew the lease, the operator can also stop providing the Internet service of the sub-device 2 at this time, and open it after the new tenant moves in;

3. The sub-device 4 in the landlord's own room does not need to be billed and managed separately, and the sub-device 4 will carry the B2 type LOID to register and authenticate with the all-optical gateway. After completion, the sub-device 4 can access the Internet normally, but the device does not have dial-up It does not have a separate Internet broadband account, but belongs to the broadband service of the all-optical gateway, and accepts the local management of the all-optical gateway.

In addition, when the user's use requirements change, such as adding a new B1 sub-device, changing the original B2 sub-device to B1 sub-device or changing B1 sub-device to B2 sub-device or B2 sub-device alone For speed increase, etc., the user can request the operator to handle related services. After the processing is completed, the operator will register the relevant information in the ACS. At this point, the ACS can deliver the updated sub-device account and configuration information to the main gateway, and the main gateway will update the locally cached sub-device account and configuration information accordingly.

Fig. 5 is an exemplary flowchart of a method 500 for optical network device authentication and configuration management in an FTTR scenario according to an embodiment of the present invention. As shown in FIG. 5 , the method 500 starts at step 502, and allocates a LOID indicating the type of equipment for each optical network device, wherein the LOID includes at least a type A LOID, a type B1 LOID, and a type B2 LOID, wherein the type A LOID indicates that the optical network The device is the main ONT device, the B1 type LOID indicates that the optical network device is a B1 type edge ONT device managed by the ACS, and the B2 type LOID indicates that the optical network device is a B2 type edge ONT device not managed by the ACS.

Next, in step 504, the master ONT device is configured to register and authenticate with the OLT device and accept ACS management. As described before, the master ONT device sends a registration authentication request to the OLT device, and requests configuration information from the ACS after the authentication is passed, and the ACS sends the master ONT device and the B1 edge ONT device coupled with the master ONT device (if (if any) account and configuration information. In addition, the main ONT device is further configured to perform registration authentication and configuration management on the B2 edge ONT device coupled to it.

In step 506, the edge ONT device of type B1 is configured to register and authenticate with the OLT device through its coupled main ONT device and accept ACS management. As described before, after the registration authentication request of the B1-type edge ONT device is sent to the main ONT device, after the main ONT device recognizes that its LOID is B1 type, it is transparently transmitted to the OLT device and completes the authentication registration. Subsequently, the main ONT device will provide it with the account number and configuration information issued by the ACS for it to authenticate with the account number of the authentication system.

In step 508, the B2-type edge ONT device is configured to register and authenticate with its coupled master ONT device and accept the management of the master ONT device. As described before, the registration and authentication request of the B2 edge ONT device is performed by the main ONT device and the configuration is directly issued. This configuration will configure the B2 edge ONT device in bridge mode so that it can connect to into the network.

The methods for completing authentication and configuration management of each device in the FTTR scenario will be further described in detail below in conjunction with FIGS. 6-9 .

Fig. 6 is an exemplary flowchart of an optical network device authentication and configuration management method 600 implemented by a master ONT device according to an embodiment of the present invention. In this example, the master ONT device may be a home all-optical gateway in the FTTR scenario as illustrated in FIG. 2 , that is, a type A device. The method 600 starts at step 602, the master ONT device initiates a registration authentication request to the OLT device, and the request includes the LOID of the master ONT device. After passing the authentication, the OLT device returns the authentication result to it and delivers the configuration.

In step 604, in response to the OLT passing its authentication, the master ONT requests configuration information from the ACS.

Subsequently, in step 606, the account and configuration information of the master ONT device and its associated edge ONT device are received from the ACS. As described above, the account of the main ONT device is a type A account, and the account of the edge ONT device associated with it (that is, the edge ONT device of type B1) is a type B account.

In step 608, the main ONT device initiates an account authentication request to the authentication system server with its own account. After the authentication system passes the authentication of the account, the account authentication is completed. In step 610, in response to receiving the authentication registration request of the edge ONT device, the master ONT device determines the type of the edge ONT device according to the LOID of the edge ONT device contained in the authentication registration request of the edge ONT device. As described before, the types of edge ONT devices include two types, B1 and B2. If it is determined that the edge ONT device is of type B1, the method proceeds to step 612.

In step 612, in response to determining that the edge ONT device is of type B1, the master ONT device transparently transmits the authentication registration request message of the edge ONT device to the OLT device. Next, in step 614, the main ONT device receives the authentication result returned by the OLT device, and transparently transmits it to the edge ONT device.

In step 616, the master ONT device sends the account number and configuration information corresponding to the edge ONT device issued by the ACS to the edge ONT device. Afterwards, in step 618, when the edge ONT device performs account authentication with its account, the master ONT device transparently transmits the account authentication request and return message between the edge ONT device and the authentication system.

Returning to step 610, if it is determined that the edge ONT device is of type B2, the method proceeds to step 620. In step 620, in response to determining that the edge ONT device is of type B2, the master ONT device authenticates the edge ONT device, and if the authentication is passed, returns the authentication result to the edge ONT device in step 622 and issues configuration, wherein the configuration Configure the edge ONT device to bridge mode. So far, the method 600 ends.

Optionally, the method 600 may also include receiving edge ONT device update information issued by the ACS, the update information including the latest account number and configuration information of the edge ONT device associated with the master ONT device, through this update information, Functions such as adding B1 sub-device, changing sub-device type, and sub-device configuration information can be flexibly implemented, thereby supporting flexible management of each FTTR sub-device.

FIG. 7 is an example flowchart of an optical network device authentication and configuration management method 700 implemented by an edge ONT device according to an embodiment of the present invention. In this example, the edge ONT device may be an edge ONT device that requires separate accounting and management in the FTTR scenario as illustrated in FIG. 2 , that is, a B1 type device. The method 700 starts at step 702, the edge ONT device sends a registration authentication request message to the main ONT device coupled to it with a Type B1 LOID. As described before, when the main ONT device identifies and determines that the edge ONT device is of type B1, it will transparently transmit the registration authentication request message to the OLT device for registration authentication, and return the authentication result to the edge ONT device.

Correspondingly, in step 704, the edge ONT device receives the authentication result from the OLT device returned by the main ONT device.

Subsequently, in step 706, the edge ONT device receives the account number and configuration information from the ACS from the master ONT device. The account and configuration information are provided by the ACS to the main ONT device, and the account is a B-type account exclusively used by the edge ONT device.

In step 708, the edge ONT device uses the received account to initiate an account authentication request. So far, the method 700 ends.

FIG. 8 is an exemplary flowchart of an optical network device authentication and configuration management method 800 implemented by an edge ONT device according to an embodiment of the present invention. In this example, the edge ONT device may be an edge ONT device that does not require separate accounting and management in the FTTR scenario as illustrated in FIG. 2 , that is, a B2 type device. The method 800 starts at step 802, the edge ONT device sends a registration authentication request message to the main ONT device coupled to it with a B2 type LOID. As described before, when the main ONT device identifies and determines that the edge ONT device is of type B2, the main ONT device directly returns the authentication result to the edge ONT device, and configures the edge ONT device in bridge mode.

Correspondingly, in step 804, the authentication result and the delivered configuration from the master ONT device are received. Subsequently, in step 806, the edge ONT device itself is configured in bridge mode according to the received configuration. So far, the method 800 ends.

FIG. 9 is an exemplary flow chart of an optical network device authentication and configuration management method 900 implemented by the ACS according to an embodiment of the present invention. The method 900 starts at step 902. In response to receiving an account authentication configuration information request from the master ONT device, the master ONT device and the account and configuration information of the edge ONT device associated with the master ONT device are sent to the master ONT device.

In step 904, in response to changes in the account number and configuration information of the edge ONT device associated with the master ONT device maintained on the ACS, the updated account number and configuration information of the edge ONT device are sent to the master ONT device. So far, the method 900 ends.

FIG. 10 is an example architecture diagram of a system 1000 for providing FTTR services according to an embodiment of the present invention. As shown in FIG. 10, system 1000 may include an ACS 1002, an authentication system 1004, an OLT device 1006, a master ONT device 1008, and one or more edge ONT devices 10101-1010n coupled to the master ONT device. As previously described, each of the master ONT device 1008 and the edge ONT devices 10101-1010n has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a type B1 LOID, and a type B2 LOID, wherein the type A LOID Indicates that the optical network device is a master ONT device, the B1 class LOID indicates that the optical network device is a B1 class edge ONT device managed by the ACS 1002, and the B2 class LOID indicates that the optical network device is a B2 class edge ONT device not managed by the ACS 1002. Main ONT equipment 1008 can be configured to register authentication with OLT equipment 1006 and accept ACS 1002 management, B1 class edge ONT equipment in edge ONT equipment 10101-1010n can be configured to register authentication with OLT equipment 1006 through main ONT equipment 1008 and To accept the management of the ACS 1002, the B2 edge ONT device can be configured to register and authenticate with the main ONT device 1008 and accept the management of the main ONT device 1008.

The method and system for classified access authentication and configuration management of home optical network equipment of the present invention have been described above, wherein gateways and sub-equipment are used for step-by-step access, and when the equipment is registered online, it can carry different types of LOID (type A, type B1) , B2 category) to carry out classification certification, so as to distinguish the device type between the home gateway device and the sub-device, and at the same time divide the management and configuration rights of the sub-device in the home.

It can be seen from the above examples that the present invention enables operators to perform flexible and unlimited management capabilities on all room sub-devices of FTTR users, and is applicable to various scenarios.

What has been described above includes examples of aspects of the claimed subject matter. It is, of course, not possible to describe every conceivable combination of components or methodologies for purposes of delineating the claimed subject matter, but one of ordinary skill in the art will recognize that many further combinations and Permutations are possible. Accordingly, the disclosed subject matter is intended to embrace all such alterations, modifications and variations that fall within the spirit and scope of the appended claims.

Claims

A method for optical network device authentication and configuration management in an FTTR scenario, characterized in that the method includes:

Assign an LOID indicating the type of equipment to each optical network device, wherein the LOID includes at least Type A LOID, Type B1 LOID, and Type B2 LOID, wherein Type A LOID indicates that the optical network equipment is the master ONT equipment, and Type B1 LOID indicates that the optical network The device is a B1-type edge ONT device managed by the automatic configuration server ACS, and the B2-type LOID indicates that the optical network device is a B2-type edge ONT device not managed by the ACS;

Configure the main ONT device to register and authenticate with the OLT device and accept ACS management;

Configure the B1 edge ONT device to register and authenticate with the OLT device through its coupled main ONT device and accept ACS management; and

The B2 type edge ONT device is configured to register and authenticate with its coupled main ONT device and accept the management of the main ONT device.
A method for optical network device authentication and configuration management in an FTTR scenario, characterized in that each optical network device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, where A-type LOID indicates that the optical network device is the main ONT device, B1-type LOID indicates that the optical network device is a B1-type edge ONT device managed by the automatic configuration server ACS, and B2-type LOID indicates that the optical network device is not managed by the ACS B2 class edge ONT equipment, wherein said method is carried out by main ONT equipment and comprises the following steps:

Initiate a registration authentication request to the OLT device, which includes the Class A LOID of the master ONT device in the request;

In response to the OLT device passing the authentication of the master ONT device, requesting configuration information from the ACS;

Receive the account number and configuration information of the master ONT device issued by the ACS and the edge ONT device associated with the master ONT device;

Initiate an account authentication request to the authentication system with the account number of the main ONT device;

In response to receiving the authentication registration request of the edge ONT device, determining the type of the edge ONT device according to the LOID of the edge ONT device included in the authentication registration request of the edge ONT device;

In response to determining that the edge ONT device is a Class B1 edge ONT device:

Transparently transmit the authentication registration request of the B1 type edge ONT device to the OLT device;

Receive the authentication result returned by the OLT device, and transparently transmit it to the B1 edge ONT device;

sending the account and configuration information corresponding to the B1-type edge ONT device from the ACS to the B1-type edge ONT device; and

Transparently transmit the account authentication request and return message between the B1 type edge ONT device and the authentication system; and

In response to determining that the edge ONT device is a Class B2 edge ONT device:

Authenticating the Class B2 edge ONT device; and

If the authentication is passed, the authentication result is returned to the B2-type edge ONT device and a configuration is issued, wherein the configuration configures the B2-type edge ONT device in bridge mode.
A method for optical network device authentication and configuration management in an FTTR scenario, characterized in that each optical network device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, where A-type LOID indicates that the optical network device is the main ONT device, B1-type LOID indicates that the optical network device is a B1-type edge ONT device managed by the automatic configuration server ACS, and B2-type LOID indicates that the optical network device is not managed by the ACS B2 class edge ONT device, wherein said method is carried out by B1 class edge ONT device and comprises the following steps:

Initiate a registration authentication request to the main ONT device coupled with the B1 type edge ONT device, and the request includes the B1 type LOID of the main B1 type edge ONT device;

Receiving the authentication result from the OLT device returned by the main ONT device;

receiving the account number and configuration information corresponding to the B1-type edge ONT device from the ACS sent by the master ONT device; and

Initiate an account authentication request to the authentication system with the received account number.
A method for optical network device authentication and configuration management in an FTTR scenario, characterized in that each optical network device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, where A-type LOID indicates that the optical network device is the main ONT device, B1-type LOID indicates that the optical network device is a B1-type edge ONT device managed by the automatic configuration server ACS, and B2-type LOID indicates that the optical network device is not managed by the ACS B2 class edge ONT device, wherein said method is carried out by B2 class edge ONT device and comprises the following steps:

Initiate a registration authentication request to the main ONT device coupled with the B2 type edge ONT device, and the request includes the B2 type LOID of the main B1 type edge ONT device;

Receiving the authentication result returned by the main ONT device and the configuration issued; and

Configure the edge ONT device of type B2 into bridge mode according to the received configuration.
A method for optical network device authentication and configuration management in an FTTR scenario, characterized in that each optical network device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, where A-type LOID indicates that the optical network device is the main ONT device, B1-type LOID indicates that the optical network device is a B1-type edge ONT device managed by the automatic configuration server ACS, and B2-type LOID indicates that the optical network device is not managed by the ACS B2 class edge ONT equipment, wherein said method is carried out by ACS and comprises the following steps:

The account authentication is in response to receiving the configuration information request from the master ONT device, sending the account number and configuration information of the master ONT device and edge ONT devices associated with the master ONT device to the master ONT device; and

In response to changes in the account number and configuration information of the edge ONT device associated with the master ONT device maintained on the ACS, the updated account number and configuration information of the edge ONT device are sent to the master ONT device.
A system for providing FTTR services, wherein the system includes an automatic configuration server ACS, an authentication system, an OLT device, a master ONT device, and one or more edge ONT devices coupled with the master ONT device, characterized in that:

Each of the master ONT device and the edge ONT device has a LOID indicating the type of device, wherein the LOID includes at least a type A LOID, a B1 type LOID, and a B2 type LOID, wherein the type A LOID indicates that the optical network device is a master ONT device, B1 type LOID indicates that the optical network device is a B1 type edge ONT device managed by ACS, and B2 type LOID indicates that the optical network device is a B2 type edge ONT device not managed by ACS;

Wherein said master ONT device is configured to register and authenticate with said OLT device and accept said ACS management;

The B1-type edge ONT device is configured to register and authenticate with the OLT device through the master ONT device and accept the ACS management; and

The B2-type edge ONT device is configured to register and authenticate with its coupled master ONT device and accept the management of the master ONT device.
The system of claim 6, wherein the master ONT device is further configured to:

Initiate a registration authentication request to the OLT device, which includes the Class A LOID of the master ONT device in the request;

In response to the OLT device passing the authentication of the master ONT device, requesting configuration information from the ACS;

Receive the account number and configuration information of the master ONT device issued by the ACS and the edge ONT device associated with the master ONT device;

Initiate an account authentication request to the authentication system with the account number of the main ONT device;

In response to receiving the authentication registration request of the edge ONT device, determining the type of the edge ONT device according to the LOID of the edge ONT device included in the authentication registration request of the edge ONT device;

In response to determining that the edge ONT device is a Class B1 edge ONT device:

Transparently transmit the authentication registration request of the B1 type edge ONT device to the OLT device;

Receive the authentication result returned by the OLT device, and transparently transmit it to the B1 edge ONT device;

sending the account and configuration information corresponding to the B1-type edge ONT device from the ACS to the B1-type edge ONT device; and

Transparently transmit the account authentication request and return message between the B1 type edge ONT device and the authentication system; and

In response to determining that the edge ONT device is a Class B2 edge ONT device:

Authenticating the Class B2 edge ONT device; and

If the authentication is passed, the authentication result is returned to the B2-type edge ONT device and a configuration is issued, wherein the configuration configures the B2-type edge ONT device in bridge mode.
The system according to claim 6, wherein the B1 type edge ONT device is further configured to:

Initiate a registration authentication request to the main ONT device coupled with the B1 type edge ONT device, and the request includes the B1 type LOID of the main B1 type edge ONT device;

Receiving the authentication result from the OLT device returned by the main ONT device;

receiving the account number and configuration information corresponding to the B1-type edge ONT device from the ACS sent by the master ONT device; and

Initiate an account authentication request to the authentication system with the received account number.
The system according to claim 6, wherein the B2 type edge ONT device is further configured to:

Initiate a registration authentication request to the main ONT device coupled with the B2 type edge ONT device, and the request includes the B2 type LOID of the main B1 type edge ONT device;

Receiving the authentication result returned by the main ONT device and the configuration issued; and

Configure the edge ONT device of type B2 into bridge mode according to the received configuration.
The system of claim 6, wherein the ACS is configured to:

Account authentication is in response to receiving the configuration information request from the master ONT device, sending the account number and configuration information of the master ONT device and edge ONT devices associated with the master ONT device to the master ONT device; and

In response to changes in the account number and configuration information of the edge ONT device associated with the master ONT device maintained on the ACS, the updated account number and configuration information of the edge ONT device are sent to the master ONT device.