WO2023116424A1

WO2023116424A1 - Gateway locking method and apparatus based on pon technology, and server and medium

Info

Publication number: WO2023116424A1
Application number: PCT/CN2022/136999
Authority: WO
Inventors: 向浩; 陈杰
Original assignee: 深圳创维数字技术有限公司
Priority date: 2021-12-21
Filing date: 2022-12-06
Publication date: 2023-06-29
Also published as: CN114286420A; CN114286420B

Abstract

Disclosed in the present application is a gateway locking method based on PON technology. The method is applied to a server, wherein the server is connected to a target gateway by means of PON technology. The method comprises the following steps: upon receiving binding request information sent by a target gateway, obtaining binding reply information on the basis of the binding request information; sending the binding reply information to the target gateway, such that the target gateway returns egress network address information on the basis of the binding reply information; and when the egress network address information does not meet a preset condition, performing a locking operation on the target gateway, so as to prohibit the target gateway from accessing the Internet.

Description

Locking method, device, server and medium of gateway based on PON technology

This application claims priority to a Chinese patent application with application number 202111576336.9 filed on December 21, 2021, the entire contents of which are incorporated herein by reference.

technical field

The present application relates to the technical field of network connection, in particular to a PON technology-based gateway locking method, device, server and storage medium.

Background technique

In order to attract new users, operators may give away or sell home gateway products at low prices when users go through the network registration procedures. Usually, in order to bind new users and prevent loss of new users, when the new user connects the gateway to the network of other operators, the operator to which the gateway belongs will lock the gateway.

In the related art, a locking scheme is disclosed, in which the gateway directly stores preset network address information corresponding to the locking operation, and when the gateway adopts the preset network address information, the gateway locking operation is performed.

However, with the existing method, after each update of the server of the operator, the gateway that does not meet the requirements needs to be manually locked, resulting in low efficiency of the locking operation.

technical problem

The main purpose of this application is to provide a locking method, device, server and storage medium for gateways based on PON technology, aiming to solve the problem of manually locking gateways that do not meet the requirements in the prior art, resulting in low efficiency of locking operations technical problem.

technical solution

In order to achieve the above object, the present application proposes a gateway locking method based on PON technology for a server, the server is connected to the target gateway through PON technology, and the method includes the following steps:

Obtain binding reply information based on the binding request information when receiving the binding request information sent by the target gateway;

sending the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information;

When the egress network address information does not meet the preset condition, a locking operation is performed on the target gateway to prohibit the target gateway from accessing the Internet.

In an embodiment, the step of obtaining binding reply information based on the binding request information includes:

Acquiring sending network address information corresponding to the binding request information;

Obtain the binding reply information according to the sending network address information.

In an embodiment, the step of sending the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information, includes:

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending The network address information is obtained by obtaining an address information conversion identifier, and returning the egress network address information based on the address information conversion identifier.

In an embodiment, the sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the The target network address information and the sending network address information, obtaining the address information conversion identifier, and based on the address information conversion identifier, the step of returning the egress network address information includes:

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending For network address information, obtain an address information conversion identifier, and when the address information conversion identifier is a first preset value, determine the target network address information as the egress network address information, and return the egress network address information; or,

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending For network address information, obtain an address information conversion identifier, and when the address information conversion identifier is a second preset value, determine the sending network address information as the egress network address information, and return the egress network address information.

In one embodiment, the step of locking the target gateway when the egress network address information does not meet the preset conditions includes:

Acquiring the target identifier of the target gateway when the egress network address information does not meet the preset condition;

If the target identifier does not match the preset identifier, a locking operation is performed on the target gateway.

In an embodiment, after the step of locking the target gateway when the egress network address information does not meet the preset condition, the method further includes:

receiving an unlocking instruction for the target gateway;

According to the unlocking instruction, an unlocking operation is performed on the target gateway to allow the target gateway to access the Internet.

In one embodiment, the preset conditions include:

Legal network address information matching the egress network address information exists in the preset legal network address information set.

In addition, in order to achieve the above purpose, this application also proposes a gateway locking device based on PON technology, which is used for a server, and the server is connected to the target gateway through PON technology, and the device includes:

A receiving module, configured to obtain binding reply information based on the binding request information when receiving the binding request information sent by the target gateway;

A sending module, configured to send the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information;

A locking module, configured to perform a locking operation on the target gateway when the egress network address information does not meet a preset condition, so as to prohibit the target gateway from accessing the Internet.

In addition, in order to achieve the above object, the present application also proposes a server, the server includes: a memory, a processor, and a locking program stored in the memory and running on the processor based on the PON technology gateway, so When the locking program of the gateway based on PON technology is executed by the processor, the steps of the locking method of the gateway based on PON technology described in any one of the above are implemented.

In addition, in order to achieve the above purpose, the present application also proposes a storage medium, on which a locking program of a gateway based on PON technology is stored, and when the locking program of a gateway based on PON technology is executed by a processor, the following The steps of the locking method of the gateway based on PON technology described in any one of the above.

The technical solution of the present application proposes a gateway locking method based on PON technology, wherein, for a server, the server is connected to the target gateway through PON technology, and the method includes the following steps: after receiving the target gateway When sending the binding request information, obtain binding reply information based on the binding request information; send the binding reply information to the target gateway, so that the target gateway, based on the binding reply information, Returning the egress network address information; when the egress network address information does not meet the preset condition, perform a locking operation on the target gateway to prohibit the target gateway from accessing the Internet.

Beneficial effect

Using the method of this application, the server automatically returns the binding reply information, so that the target gateway obtains the egress network address information based on the binding reply information, and when the egress network address information does not meet the preset conditions, it is determined that the target gateway does not meet the requirements, The target gateway is automatically locked to prohibit the target gateway from accessing the Internet without manual locking by the user, which greatly reduces the manual locking time and improves the locking efficiency.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present application, and those skilled in the art can also obtain other drawings according to the structures shown in these drawings without creative effort.

Fig. 1 is a schematic diagram of the server structure of the hardware operating environment involved in the solution of the embodiment of the present application;

Fig. 2 is a schematic flow chart of the first embodiment of the locking method of the gateway based on the PON technology of the present application;

FIG. 3 is a structural block diagram of a first embodiment of a locking device for a gateway based on the PON technology of the present application.

The realization, functional features and advantages of the present application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

Embodiments of the present invention

The following will clearly and completely describe the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of this application.

Referring to FIG. 1 , FIG. 1 is a schematic diagram of the server structure of the hardware operating environment involved in the solution of the embodiment of the present application.

Generally, the server includes: at least one processor 301, a memory 302, and a locking program of a gateway based on PON technology that is stored on the memory and can run on the processor, and the locking program of the gateway based on PON technology configures Steps for realizing the locking method of the gateway based on the PON technology as described above.

The processor 301 may include one or more processing cores, such as a 4-core processor, an 8-core processor, and the like. The processor 301 can adopt at least one hardware form in digital signal processing (Digital Signal Processing, DSP), field programmable gate array (Field-Programmable Gate Array, FPGA), programmable logic array (Programmable Logic Array, PLA) accomplish. The processor 301 may also include a main processor and a coprocessor, the main processor is a processor for processing data in the wake-up state, and is also called a central processing unit (Central Processing Unit, CPU); the coprocessor is used to Low-power processor for processing data in standby state. In some embodiments, the processor 301 can be integrated with a graphics processor (Graphics Processing Unit, GPU), the GPU is used to render and draw the content that needs to be displayed on the display screen. Processor 301 can also include artificial intelligence (Artificial Intelligence, AI) processor, this AI processor is used for processing the locking method operation about the gateway based on PON technology, makes the locking method model of the gateway based on PON technology can self-training learning, improves efficiency and accuracy.

Memory 302 may include one or more storage media, which may be non-transitory. The memory 302 may also include high-speed random access memory and non-volatile memory, such as one or more magnetic disk storage devices and flash memory storage devices. In some embodiments, the non-transitory storage medium in the memory 302 is used to store at least one instruction, and the at least one instruction is used to be executed by the processor 301 to implement the gateway based on PON technology provided by the method embodiments in this application the locking method.

In some embodiments, the terminal may optionally further include: a communication interface 303 and at least one peripheral device. The processor 301, the memory 302, and the communication interface 303 may be connected through a bus or a signal line. Each peripheral device can be connected to the communication interface 303 through a bus, a signal line or a circuit board. Specifically, the peripheral device includes: at least one of a radio frequency circuit 304 , a display screen 305 and a power supply 306 .

The communication interface 303 may be used to connect at least one peripheral device related to input/output (Input/Output, I/O) to the processor 301 and the memory 302 . In some embodiments, the processor 301, the memory 302 and the communication interface 303 are integrated on the same chip or circuit board; in some other embodiments, any one or both of the processor 301, the memory 302 and the communication interface 303 It can be implemented on a separate chip or circuit board, which is not limited in this embodiment.

The radio frequency circuit 304 is used for receiving and transmitting radio frequency (Radio Frequency, RF) signal, also known as electromagnetic signal. The radio frequency circuit 304 communicates with the communication network and other communication devices through electromagnetic signals. The radio frequency circuit 304 converts electrical signals into electromagnetic signals for transmission, or converts received electromagnetic signals into electrical signals. In one embodiment, the radio frequency circuit 304 includes: an antenna system, an RF transceiver, one or more amplifiers, a tuner, an oscillator, a digital signal processor, a codec chipset, a subscriber identity module card, and the like. The radio frequency circuit 304 can communicate with other terminals through at least one wireless communication protocol. The wireless communication protocol includes, but is not limited to: a metropolitan area network, various generations of mobile communication networks (2G, 3G, 4G and 5G), a wireless local area network and/or a wireless fidelity (Wireless Fidelity, WiFi) network. In some embodiments, the radio frequency circuit 304 may also include circuits related to Near Field Communication (NFC), which is not limited in this application.

The display screen 305 is used to display the user interface (User Interface, UI). The UI can include graphics, text, icons, video, and any combination thereof. When the display screen 305 is a touch display screen, the display screen 305 also has the ability to collect touch signals on or above the surface of the display screen 305 . The touch signal can be input to the processor 301 as a control signal for processing. At this time, the display screen 305 can also be used to provide virtual buttons and/or virtual keyboards, also called soft buttons and/or soft keyboards. In some embodiments, there can be one display screen 305, which is the front panel of the electronic device; in other embodiments, there can be at least two display screens 305, which are respectively arranged on different surfaces of the electronic device or in a folded design; In some embodiments, the display screen 305 may be a flexible display screen disposed on a curved surface or a folded surface of the electronic device. Even, the display screen 305 can also be set as a non-rectangular irregular figure, that is, a special-shaped screen. Display screen 305 can adopt liquid crystal display screen (LiquidCrystal Display, LCD), organic light emitting diode (Organic Light-Emitting Diode, OLED) and other materials.

The power supply 306 is used to supply power to various components in the electronic device. Power source 306 may be alternating current, direct current, disposable batteries, or rechargeable batteries. When the power source 306 includes a rechargeable battery, the rechargeable battery can support wired charging or wireless charging. The rechargeable battery can also be used to support fast charging technology.

Those skilled in the art can understand that the structure shown in FIG. 1 is not limited to the server, and may include more or less components than shown in the figure, or combine some components, or arrange different components.

In addition, the embodiment of the present application also proposes a storage medium, on which a locking program of a gateway based on PON technology is stored, and when the locking program of a gateway based on PON technology is executed by a processor, the above-mentioned The steps of the locking method of the gateway based on the PON technology. Therefore, details will not be repeated here. In addition, the description of the beneficial effect of adopting the same method will not be repeated here. For the technical details not disclosed in the storage medium embodiments involved in the present application, please refer to the description of the method embodiments of the present application. By way of example, program instructions may be deployed to execute on one server, or on multiple servers at one site, or, alternatively, on multiple servers distributed across multiple sites and interconnected by a communication network. .

Those of ordinary skill in the art can understand that all or part of the processes in the method of the above-mentioned embodiments can be completed by instructing related hardware through a computer program. The above-mentioned program can be stored in a storage medium. When the program is executed, It may include the processes of the embodiments of the above-mentioned methods. Wherein, the above-mentioned storage medium can be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM) or a random storage memory (Random AccessMemory, RAM), etc.

Based on the above hardware structure, an embodiment of a locking method for a gateway based on the PON technology of the present application is proposed.

Referring to Fig. 2, Fig. 2 is a schematic flow chart of the first embodiment of the locking method of the gateway based on PON technology in the present application, and the method includes the following steps:

Step S11: Obtain binding reply information based on the binding request information when receiving the binding request information sent by the target gateway.

It should be noted that the execution subject of the present application is a server, and the server is installed with a locking program of a gateway based on PON technology. When the server executes the locking program of a gateway based on PON technology, the locking method of a gateway based on PON technology of this application is realized step. Usually, the server and the target gateway are connected through PON technology, that is, the connection mode between the server and the target gateway is PON.

PON is a single-fiber bidirectional optical access network using a point-to-multipoint (P2MP) structure. The PON system consists of an optical line terminal (OLT) at the central office, an optical distribution network (ODN) and an optical network unit (ONU) at the user side, and is a single-fiber bidirectional system. In the downstream direction (OLT to ONU), the signal sent by the OLT reaches each ONU through the ODN. In the upstream direction (ONU to OLT), the signal sent by the ONU will only reach the OLT, but will not reach other ONUs. In order to avoid data conflicts and improve network efficiency, the uplink adopts TDMA multiple access mode, and manages the data transmission of each ONU. The ODN provides an optical channel between the OLT and the ONU.

The target gateway is any type of gateway to be carried out in the locking method of the gateway based on PON technology of the present application, and the target gateway can be a plurality of target gateways, and each target gateway is locked based on the gateway of the PON technology according to the method of the present application method steps. The target gateway can be directly connected to the server, and the target gateway can also access the server through a multi-level gateway. Connect (connect to the public network).

In this application, the server can be a network management operation system (ACS/STUN Server), the server and the target gateway device are connected through the TR069 protocol, and the gateway identifies the egress network address information (including the egress network address) based on the TR111 STUN protocol (rfc5389) in the TR069 protocol and the corresponding send port).

The target gateway first needs to send binding request information, the server receives the binding request information, and then obtains binding reply information according to the binding request information.

Specifically, the step of obtaining binding reply information based on the binding request information includes: obtaining sending network address information corresponding to the binding request information; obtaining the binding to reply to the message. Wherein, the binding reply information includes sending network address information, and the binding reply information may also include server network address information of the server.

In this application, the sending network address information includes the sending network address and the corresponding sending port, and the server network address information includes the server network address and the corresponding sending port. Sending the network address information refers to sending the binding request information to the egress network address information of the server.

When the target gateway can directly connect to the server, the sending network address information is the target gateway’s own network address information—the target network address information in the text (the export network address information is the target gateway’s own information), when the target gateway can also pass When multi-level gateways access the server, the sending network address information is the network address information of the access gateway accessing the server at the last level. The access gateway refers to the last gateway that accesses the public network (connected to the server) among the multi-level gateways.

Step S12: Send the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information.

Based on the above content, the target gateway actually obtains the egress network address information based on the server network address information and the sending network address information in the binding reply information.

Specifically, the step of sending the binding reply information to the target gateway so that the target gateway returns egress network address information based on the binding reply information includes: sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and obtains an address information conversion identifier according to the target network address information of the target gateway and the sending network address information , and return the egress network address information based on the address information conversion identifier.

Wherein, the sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the step of sending the network address information, obtaining the address information conversion identifier, and returning the egress network address information based on the address information conversion identifier, comprising: sending the binding reply information to the target gateway to make the target gateway obtain the sending network address information based on the binding reply information, obtain an address information conversion identifier according to the target network address information of the target gateway and the sending network address information, and When the information conversion flag is the first preset value, determine the target network address information as the egress network address information, and return the egress network address information; or, send the binding reply information to the target gateway so that the target gateway obtains the sending network address information based on the binding reply information, obtains an address information conversion identifier according to the target network address information of the target gateway and the sending network address information, and When the address information conversion flag is the second preset value, determine the sending network address information as the egress network address information, and return the egress network address information. The egress network address information includes the egress network address and the corresponding sending port.

In this application, the first default value is 0, and the second default value is 1. When the sending network address information is the same as the target network address information, it means that the target gateway is directly connected to the public network—directly connected to the server, and the target The network address information of the gateway (target network address information) is the egress network address information, and the corresponding address translation flag is 0, indicating that the network address information of the target gateway has not undergone address translation operations—Nat technology modifies the network address.

When the sending network address information is not the same as the target network address information, it means that the target gateway is not directly connected to the public network—connected to the server through other access gateways, and the network address information of the target gateway (target network address information) is not the exit If there is no network address information, then the sending network address information of the access gateway at this time is indeed the egress network address information. The corresponding address translation flag is 1, indicating that the network address information of the target gateway has undergone an address translation operation.

Step S13: When the egress network address information does not meet the preset condition, perform a locking operation on the target gateway to prohibit the target gateway from accessing the Internet.

Wherein, in this application, the preset condition includes: legal network address information matching the egress network address information exists in the preset legal network address information set. The servers of different operators may be set with multiple legal network address information, and the aggregated set of multiple legal network address information is the preset legal network address information set. The legal network address information includes a legal network address and a corresponding sending port.

When there is legal network address information matching the egress network address information in the preset legal network address information set, it means that the egress network address information belongs to the network address information allowed by the server, and the egress network address information satisfies the preset condition and no further processing is required. The target gateway performs a lock operation.

When there is no legal network address information matching the egress network address information in the preset legal network address information set, it means that the egress network address information does not belong to the network address information allowed by the server, and the egress network address information does not meet the preset condition, The target gateway needs to be locked to prevent the target gateway from accessing the Internet.

Usually, the preset legal network address information set by an operator's server includes the operator's own legal network address information, and does not include other operators' legal network address information.

In order to adapt to the most common NAT gateway, when the server performs locking and unlocking operations on the target gateway, the control port and control address used may be the same as the communication address and communication port used for communication between the server and the target gateway.

In some embodiments, the step of locking the target gateway when the egress network address information does not meet the preset condition includes: obtaining the The target identifier of the target gateway; if the target identifier does not match the preset identifier, the target gateway is locked.

For some gateways that do not meet the preset conditions, some of them may be allowed to be used, then set a preset identifier for it, and store the preset identifier in the server, so that the server can obtain the target identifier of the target gateway. When the ID matches (generally refers to the same ID), it means that although the egress network address information of the target gateway does not meet the preset conditions, it is still allowed to perform network services, and no locking operation is required.

If the target identifier matches the preset identifier, it means that although the egress network address information of the target gateway does not meet the preset condition, it is no longer allowed to conduct network services.

Among them, the specific locking operation is as follows:

For egress network addresses that do not meet the preset conditions, the corresponding target gateway can automatically or manually ban all (or part of) network services; for egress network addresses that meet the preset conditions, the corresponding target gateway can automatically or manually ban all (or part of) network services. part) network business.

For the locked target gateway, after the step of locking the target gateway when the egress network address information does not meet the preset condition, the method further includes: receiving an unlocking action for the target gateway An instruction; according to the unlocking instruction, perform an unlocking operation on the target gateway, so as to allow the target gateway to access the Internet.

Based on the user's unlocking instruction, an unlocking operation of all or part of the network services may be performed on the target gateway.

Referring to Fig. 3, Fig. 3 is a structural block diagram of the first embodiment of the locking device of the gateway based on PON technology in the present application, the device is used for the server, based on the same inventive concept as the previous embodiment, the device includes:

A reading module 10, configured to read the target scheduling message of the first message queue;

The judging module 20 is configured to judge the configured service state of the dispatching service instance; wherein, the service state of the dispatching service instance is configured by receiving service state information broadcast by the second message queue;

The determining module 30 is configured to determine, in the local storage, a selected execution script corresponding to the target scheduling message for executing the scheduled task if the service status is service enabled.

It should be noted that since the steps performed by the device in this embodiment are the same as those in the foregoing method embodiments, the specific implementation manners and achievable technical effects can refer to the foregoing embodiments, and will not be repeated here.

The above are only optional embodiments of the present application, and are not intended to limit the patent scope of the present application. Under the inventive concept of the present application, the equivalent structural transformations made by using the description of the application and the contents of the accompanying drawings, or direct/indirect Applications in other relevant technical fields are included in the patent protection scope of the present application.

Claims

A method for locking a gateway based on PON technology, wherein, for a server, the server is connected to the target gateway through PON technology, and the method includes the following steps:

Obtain binding reply information based on the binding request information when receiving the binding request information sent by the target gateway;

sending the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information;

When the egress network address information does not meet the preset condition, a locking operation is performed on the target gateway to prohibit the target gateway from accessing the Internet.
The method according to claim 1, wherein the binding reply information includes sending network address information and server network address information.
The method according to claim 2, wherein the sending network address information of the sending network address information refers to the egress network address information of sending the binding request information to the server.
The method according to claim 2, wherein the server network address information includes a server network address and a corresponding sending port.
The method according to claim 1, wherein said step of obtaining binding reply information based on said binding request information comprises:

Acquiring sending network address information corresponding to the binding request information;

Obtain the binding reply information according to the sending network address information.
The method according to claim 5, wherein the step of sending the binding reply information to the target gateway, so that the target gateway returns the egress network address information based on the binding reply information, comprises:

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending The network address information is obtained by obtaining an address information conversion identifier, and returning the egress network address information based on the address information conversion identifier.
The method according to claim 6, wherein the sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, according to The step of obtaining the address information conversion identifier from the target network address information of the target gateway and the sending network address information, and returning the egress network address information based on the address information conversion identifier, includes:

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending For network address information, obtain an address information conversion identifier, and when the address information conversion identifier is a first preset value, determine the target network address information as the egress network address information, and return the egress network address information; or,

sending the binding reply information to the target gateway, so that the target gateway obtains the sending network address information based on the binding reply information, and according to the target network address information of the target gateway and the sending For network address information, obtain an address information conversion identifier, and when the address information conversion identifier is a second preset value, determine the sending network address information as the egress network address information, and return the egress network address information.
The method according to claim 1, wherein the step of locking the target gateway when the egress network address information does not meet a preset condition includes:

Acquiring the target identifier of the target gateway when the egress network address information does not meet the preset condition;

If the target identifier does not match the preset identifier, a locking operation is performed on the target gateway.
The method according to claim 1, wherein the step of locking the target gateway when the egress network address information satisfies a preset condition comprises:

Allow the target gateway to access the Internet.
The method according to claim 1, wherein, after the step of locking the target gateway when the egress network address information does not meet the preset conditions, the method further comprises:

receiving an unlocking instruction for the target gateway;

According to the unlocking instruction, an unlocking operation is performed on the target gateway to allow the target gateway to access the Internet.
The method according to claim 1, wherein the access gateway refers to the last gateway connected to the server among the multi-level gateways.
The method according to any one of claims 1-11, wherein the preset conditions include:

Legal network address information matching the egress network address information exists in the preset legal network address information set.
A locking device for a gateway based on PON technology, wherein, for a server, the server is connected to the target gateway through PON technology, and the device includes:

A receiving module, configured to obtain binding reply information based on the binding request information when receiving the binding request information sent by the target gateway;

A sending module, configured to send the binding reply information to the target gateway, so that the target gateway returns egress network address information based on the binding reply information;

A locking module, configured to perform a locking operation on the target gateway when the egress network address information does not meet a preset condition, so as to prohibit the target gateway from accessing the Internet.
A server, wherein the server includes: a memory, a processor, and a locking program of a gateway based on PON technology that is stored on the memory and runs on the processor, and the locking program of the gateway based on PON technology is controlled by The processor executes the steps to realize the locking method of the PON technology-based gateway according to any one of claims 1 to 12.
A storage medium, wherein a locking program of a gateway based on PON technology is stored on the storage medium, and when the locking program of a gateway based on PON technology is executed by a processor, it is implemented as described in any one of claims 1 to 12 The steps of the locking method of the gateway based on the PON technology described above.