一种10Gbit/s EPON的综合安全方案  

An Integrated Security Scheme Based on 10Gbit/s EPON

作　　者：占雪梅[1] 李春莹[1] 张清淼[1] ZHAN Xue-mei LI Chun-ying ZHANG Qing-miao(Zhengzhou Railway Vocational ＆ Technical College, Zhengzhou 45000)

机构地区：[1]郑州铁路职业技术学院,郑州450000

出　　处：《光通信研究》2016年第3期13-15,共3页Study on Optical Communications

摘　　要：设计了一种10Gbit/s EPON(以太网无源光网络)综合安全方案,用于解决其点到多点拓扑结构造成的诸如窃听和伪装对安全敏感类业务的威胁。该方案包括含有密钥交换的双向认证方案及基于时间标签的加密算法。其中,认证方案可在注册过程中验证OLT(光线路终端)及ONU(光网络单元),加密算法可使用帧结构中的时间戳生成时变的密钥。实验结果证明了该综合安全方案的有效性。An integrated security scheme for 10 Gbit/s EPON is proposed to prevent eavesdropping and masquerading threats to sensitive data caused by its point-to-multi-point topology. This scheme includes a bilateral authentication method combining with key exchange protocol and an encryption algorithm based on the timestamp. The authentication method can verify the OLT and ONU during the registration process and the encryption algorithm adopts timestamp in the frameto generate time-varying cipher keys. The validity of the proposed scheme is demonstrated in the experiment.

关 键 词：10Gbit/s以太网无源光网络 双向认证 加密算法 安全 

分 类 号：TN915.6[电子电信—通信与信息系统]