CN101478702B - Terminal detection authentication method, apparatus and operation management system in passive optical network - Google Patents

Abstract

A terminal detection and authentication method, device and operation management system in a passive optical network. The method includes: the terminal has a logical registration code; the central office receives the logical registration code sent by the terminal, and the central office determines that the logical registration code of the terminal matches the logical registration code stored in the central office after determining that the The terminal is a legal terminal; the central office records the terminal sequence code obtained from the legal terminal, and records the terminal identifier assigned to the legal terminal. The embodiment of the present invention does not need to statically configure the terminal sequence code at the central office, reduces the maintenance cost of the central office and the terminal, improves the flexibility of terminal detection and authentication, and the maintainability of the central office and the terminal.

Description

Terminal detection and authentication method, device and operation management system in passive optical network

technical field

The invention relates to the technical field of network communication, in particular to a terminal detection and authentication method, device and operation management system in a passive optical network. the

Background technique

PON (Passive Optical Network) technology is a point-to-multipoint optical fiber access technology. PON is generally composed of OLT (Optical Line Terminal, Optical Line Terminal) on the office side, ONU/ONT (Optical Network Unit/Optical Network Terminal, Optical Network Unit/Optical Network Terminal) on the user side, and ODN (Optical Distribution Network). One PON port of the OLT can be connected to multiple ONUs/ONTs. the

At present, the ONU/ONT detection and authentication method is implemented in the ONU/ONT registration process, and the ONU/ONT registration process is shown in Figure 1. the

In FIG. 1 , in step 1, the OLT sends information requesting the ONU/ONT to report an SN (SerialNumber, serial number) to each ONU/ONT. the

Step 2. The ONU/ONT receiving the above information reports its own SN to the OLT. the

Step 3. The OLT receives the SN and detects the SN, that is, detects the ONU/ONT. The detection process is: SN is pre-configured in the OLT, and the OLT matches the received SN with the pre-configured SN. If they match, the ONU/ONT detection is successful; if they do not match, the ONU/ONT detection fails. The OLT assigns an ONU-ID to the successfully detected ONU/ONT according to the pre-configured correspondence between the SN and the ONU-ID, and sends the assigned ONU-ID to the ONU/ONT. The ONU-ID here is unique under a PON port. the

Step 4. The OLT completes the ranging of the ONU/ONT assigned the ONU-ID. the

Step 5. The OLT sends information requesting the ONU/ONT to report a Password to the ONU/ONT that has completed the ranging. the

Step 6. The ONU/ONT that has received the information requesting to report the Password reports its own Password to the OLT. the

Step 7: The OLT records the terminal sequence code acquired from the legal terminal according to the received Pas central office, and records the terminal identifier assigned to the legal terminal. the

The embodiment of the present invention also provides a network device located at the central office of a passive optical network. The network equipment includes: a first storage module for storing a logical registration code of a terminal, wherein the logical registration code is determined by the central office dynamically generated by the central office, and assigned to the optical network terminal by the central office during the process of user application for services;

The sword authenticates the ONU/ONT. After the authentication is successful, the ONU/ONT registers successfully. the

In the process of realizing the present invention, the inventor finds that there are following problems in the prior art:

In the above-mentioned ONU/ONT detection and authentication process, it is necessary to statically set the corresponding relationship between SN and ONU-ID in the OLT in advance. Therefore, the OLT cannot realize the automatic detection and authentication of the ONU/ONT, so that the ONU/ONT detection And authentication flexibility is poor. In addition, the SN in the OLT is usually managed by the operation management system. When the operation management system issues ONU/ONT to the user, it records the SN of the issued ONU/ONT, and pre-configures the SN in the OLT; when the ONU/ONT needs to be replaced due to equipment failure or other reasons, the operation management system updates its record SN and update the SN in the OLT. That is to say, the operation management system adopts a static management method for its recorded SN and the SN in the OLT. The static management method increases the maintenance cost of the operation management system, OLT, and ONU/ONT, thereby reducing the maintainability of the operation management system, OLT, and ONU/ONT. the

Contents of the invention

Embodiments of the present invention provide a terminal detection and authentication method, device, and operation management system in a passive optical network, which can realize automatic detection and authentication of terminals, improve the flexibility of terminal detection and authentication, and improve the flexibility of local terminals and terminals. maintainability. the

A terminal detection and authentication method in a passive optical network provided by an embodiment of the present invention, the terminal has a logical registration code, and the method includes steps:

The central office receives the logical registration code sent by the terminal, wherein the logical registration code is dynamically generated by the central office, and is assigned to the terminal by the central office during the process of the user applying for a service;

After the central office determines that the logical registration code of the terminal matches the logical registration code stored by the central office, it determines that the terminal is a legal terminal;

The central office records the terminal sequence code obtained from the legal terminal, and records the terminal identifier assigned to the legal terminal. the

The embodiment of the present invention also provides a network device located at the central office of a passive optical network. The network equipment includes: a first storage module for storing a logical registration code of a terminal, wherein the logical registration code is determined by the central office dynamically generated by the central office, and assigned to the optical network terminal by the central office during the process of user application for services;

The receiving module is used to receive the logical registration code and terminal serial code sent by the terminal;

Judging module, used to judge whether the logical registration code received by the receiving module matches the logical registration code stored in the first storage module, and output the judgment result;

An assignment module, used to assign a terminal identifier to the terminal and output it;

The second storage module is configured to store the terminal sequence code received by the receiving module and the terminal identifier output by the distribution module after the judging module outputs the matched judging result information. the

The embodiment of the present invention also provides an operation management system, which is located at the central office of the passive optical network. The operation management system includes: a logical registration code module, used to store the logical registration code, assign the logical registration code to the user, and The logical registration code assigned by the user is transmitted to the optical line terminal, wherein the logical registration code is dynamically generated by the central office, and is assigned to the optical network terminal by the central office during the process of the user applying for a service;

The sequence code module is used for receiving and storing the sequence code of the legal terminal transmitted by the optical line terminal. the

The embodiment of the present invention also provides a terminal device, which is located on the user side of the passive optical network, and the terminal device includes:

The receiving storage module is used to receive and store the logical registration code input to the terminal equipment where it is located, wherein the logical registration code is dynamically generated by the central office and assigned to the Terminal Equipment;

The sending module is configured to send the logical registration code stored in the receiving storage module to the central office according to the request received by the central office at the terminal device where it is located. the

From the description of the above technical solution, it can be seen that the embodiment of the present invention does not need to statically configure the terminal serial code at the central office. By using the logical registration code in the detection and authentication process, after the authentication is passed, the terminal serial code obtained from the legal terminal is recorded. , and record the terminal identification assigned to the legal terminal, so that the central office can realize the automatic detection and authentication of the terminal; The terminal can dynamically manage the terminal serial code and terminal identification, which reduces the maintenance cost of the central office and the terminal; thus, the technical solution provided by the present invention improves the flexibility of terminal detection and authentication, and the maintainability of the central office and the terminal sex. the

Description of drawings

Fig. 1 is the registration flow diagram of ONU/ONT in the prior art;

Fig. 2 is a schematic flow chart of a terminal detection and authentication method according to an embodiment of the present invention;

Fig. 3 is a sequence diagram 1 of a terminal detection and authentication method according to an embodiment of the present invention;

FIG. 4 is a second sequence diagram of a terminal detection and authentication method according to an embodiment of the present invention. the

Detailed ways

The embodiment of the present invention uses the logic registration code of the terminal to realize the automatic detection and authentication of the terminal. The terminal detection and authentication method provided by the embodiments of the present invention will be described in detail below. the

In the embodiment of the present invention, a terminal such as an ONU/ONT corresponds to a logical registration code. The logical registration code of the terminal may be assigned by the central office to the terminal during the service application process of the user. After the central office assigns a logical registration code to the terminal, it needs to record the logical registration code assigned to the terminal. For example, the operation management system of the central office assigns a logical registration code to the terminal and saves the logical registration code assigned by it. The logical registration code assigned to the terminal is transmitted to the OLT at the central office, and the OLT stores the received logical registration code. The logic registration code can be dynamically generated by the central office. Moreover, the logical registration code should be unique in a certain area, for example, under a PON port, the logical registration code of the terminal should be unique. Of course, the logical registration code of the terminal may also be unique globally. The embodiment of the present invention does not limit the area where the logic registration code of the terminal is unique, nor does it limit the specific expression form of the logic registration code, nor does it limit which device at the central office generates the logic registration code. the

During the terminal detection and authentication process, the terminal should first obtain its logical registration code, and transmit the obtained logical registration code to the central office. A manner for the terminal to obtain its logical registration code may be that the terminal receives an externally input logical registration code. For example, the terminal may provide a local command line, a web page, or receive an externally input logic registration code in other ways. The terminal can also generate a logical registration code according to some predetermined rules based on externally input information. At this time, the logical registration code generated by the terminal should be the same as the logical registration code saved by the central office. In the case that the terminal detection and authentication process is completed during the terminal registration process, the terminal can transmit its logical registration code to the central office during the registration process. The embodiments of the present invention do not exclude the possibility that the terminal detection and authentication process is implemented independently, or that the terminal detection and authentication process is implemented in other processes. the

The terminal can use the existing message to transmit its logical registration code to the central office, and the terminal can also use a message newly defined for the transmission of the logical registration code to transmit its logical registration code to the central office. Moreover, during the transmission of the logical registration code, the terminal may transmit the logical registration code in an encrypted manner, or may not transmit the logical registration code in an encrypted manner. The embodiment of the present invention does not limit the specific expression form of the existing message, nor does it limit the specific structure of the newly defined message. the

After receiving the logical registration code transmitted by the terminal, the central office uses its pre-stored logical registration code and the logical registration code transmitted by the terminal to authenticate the terminal. The stored logic registration codes are matched. If the match is confirmed, the terminal is confirmed to be a legal terminal, and if it is confirmed not to match, the terminal is confirmed to be an illegal terminal. the

When the central office confirms that the terminal is a legal terminal, it records the terminal sequence code obtained from the legal terminal and the terminal identifier assigned by the central office to the legal terminal. In the embodiment of the present invention, the terminal sequence code of the legal terminal recorded at the central office is obtained from the legal terminal, so it can be seen that the embodiment of the present invention does not need to pre-configure the terminal sequence code at the central office. Although the embodiment of the present invention needs to pre-configure the logical registration code of the terminal at the central office, when the terminal needs to be replaced due to failure or other reasons, the terminal after the replacement can still use the logical registration code used by the terminal before the replacement, while the central office is The terminal is authenticated according to the logical registration code. Therefore, the central office can automatically detect the legal terminal, and automatically obtain the terminal serial code and terminal identification of the legal terminal, thereby avoiding the need for static configuration replacement at the central office during the process of user replacement. process after the terminal serial number. the

There are various implementation processes for the central office to record the terminal identification of the terminal. For example, the central office can assign a terminal identification to the terminal before confirming that the terminal is a legal terminal, and record the terminal identification of the legal terminal after confirming that the terminal is a legal terminal; For another example, the central office can assign a terminal identifier to the terminal after confirming that the terminal is a legitimate terminal, and record the terminal identifier of the legal terminal; also, the central office can assign a temporary terminal identifier to the terminal before confirming that the terminal is a legal terminal. After confirming that the terminal is a legitimate terminal, assign a formal terminal identifier to the terminal, and record the formal terminal identifier of the legal terminal. The temporary terminal ID assigned to the terminal here can be to meet some implementation needs of the terminal during the registration process; for example, when the terminal transmits the logical registration ID through the message of reporting the password, it can first assign a temporary terminal ID to the terminal to complete the subsequent The ranging process, and then, the terminal transmits the logical registration identifier to the central office through the message of reporting the password. the

The process of recording the terminal serial code of the legal terminal at the central office can be: the OLT records the terminal serial code of the legal terminal; it can also be: both the OLT and other equipment at the central office, such as the operation management system, record the terminal serial code of the legal terminal. The OLT can obtain and record the terminal serial code of the legal terminal by receiving the terminal serial code transmitted by the legal terminal. The OLT can transmit the terminal sequence code of the legal terminal recorded by it to other network devices at the central office, such as the operation management system, so that the operation management system can obtain and record the automatic detection by receiving the terminal sequence code of the legal terminal transmitted by the OLT. terminal serial number. the

The operation management system can manage the terminal serial code and terminal identification recorded by it, and the operation management system can maintain and manage OLT and terminals according to the terminal serial code and terminal identification recorded by it. the

The terminal detection and authentication method provided by the embodiments of the present invention will be described below with reference to the accompanying drawings. the

The flowchart of the terminal detection and authentication method provided by the embodiment of the present invention is shown in Fig. 2 . the

In Fig. 2, step 1, the operation management system generates a logical registration code for the ONU/ONT used by the user who made the service application, and stores the generated logical registration code, for example, the operation management system stores the generated logical registration code in the logic registration code database. The operation management system can generate a logical registration code according to a specific format, and the specific format for generating the logical registration code can be determined by the operation management system. When the operation management system generates a logic registration code, it can ensure that the generated logic registration code is unique under a PON port. the

Step 2. The operation management system generates service parameters that need to be configured for the ONU/ONT according to the service applied by the user. The operation management system sends the business parameters that need to be configured for the ONU/ONT and the logical registration code of the ONU/ONT to the OLT. the

Step 3. The operation management system transmits the logical registration code information of the ONU/ONT to the user. the

Step 4. After the ONU/ONT is powered on, the ONU/ONT receives the logical registration code input from the outside. For example, the ONU/ONT receives an externally input logic registration code by means of a local command line provided by itself, a web page or other external media. the

Step 5. The ONU/ONT reports the logic registration code to the OLT during the registration process. The OLT receives the logical registration code reported by the ONU/ONT, and matches the logical registration code reported by the ONU/ONT with the stored logical registration code. When confirming that the logical registration code reported by the ONU/ONT matches the stored logical registration code, the authentication Success, the OLT confirms that the ONU/ONT is a legal terminal, the OLT records the SN obtained from the legal terminal, and records the ONU-ID (terminal identification) allocated for the legal terminal, and the OLT successfully detects the legal terminal; after confirming that the ONU/ONT When the logical registration code reported by the ONT does not match the stored logical registration code, the authentication fails, the OLT confirms that the ONU/ONT is an illegal terminal, and the registration process for the terminal ends. the

Step 6. After the ONU/ONT registers successfully, the OLT reports the terminal SN transmitted by the detected legal terminal to the operation management system. The OLT may also report the corresponding relationship between the SN and the terminal identifier to the operation management system. the

Step 7. The operation management system stores the received terminal SN, for example, stores the terminal SN in the SN database. The operation management system can maintain and manage OLT, ONU/ONT, etc. according to the stored terminal SN. the

In the above step 5, the ONU/ONT can transmit the logical registration code by reporting the Password message during the registration process, that is, the ONU/ONT carries the logical registration code in the parameter field of the reported Password message, and reports the reported Password message to the OLT . The logic registration code can also be transmitted between the OLT and the ONU/ONT by newly setting a request logic registration code message and reporting a logic registration code message. The newly added request logic registration code message and report logic registration code message may both belong to PLOAM (Physical Layer Operation and Maintenance) messages. The specific structures of the above two newly defined PLOAM messages may be shown in Table 1 and Table 2. the

Table 1, the PLOAM message of the OLT requesting the logical registration code in the downlink direction;

In Table 1, the first byte ONU-ID is used to carry the ONU-ID allocated by the central office for the terminal; the second byte Message ID is used to identify the message as a message requesting a logical registration code; the third byte to the 12th byte Bytes are reserved. the

Table 2, the PLOAM message of the logical registration code reported by the ONU/ONT in the upstream direction;

In Table 2, the first byte ONU-ID is used to carry the ONU-ID allocated by the central office for the terminal; the second byte Message ID is used to identify the message as a message reporting the logic registration code; the third byte to the 12th byte Bytes are used to carry the terminal's logical registration code. the

The above Table 1 and Table 2 are only specific examples of requesting a logic registration code message and reporting a logic registration code message. In the embodiments of the present invention, the message for transmitting the logical registration code is not limited to the above specific examples. the

The specific implementation process of the above step 5 can be implemented in the following two ways:

Method 1. The terminal automatic detection and authentication process of assigning a temporary ONU-ID first and then assigning a formal ONU-ID is shown in Figure 3. the

In Fig. 3, in step 1, the OLT sends a request message for reporting the SN to all ONUs/ONTs. the

Step 2. After receiving the request message sent by the OLT, the ONU/ONT reports its own SN to the OLT. the

Step 3, after the OLT receives the SN reported by the ONU/ONT, it judges whether the SN has been recorded, that is, it judges that the received SN matches the stored SN, if the OLT judges that the received SN is a recorded SN, Then go to step 9; if the OLT judges that the received SN is an unrecorded SN, then the OLT allocates a temporary ONU-ID for the ONU/ONT, and then sends the temporary ONU-ID to the ONU/ONT, and then goes to step 4 . When the OLT allocates a temporary ONU-ID to an ONU/ONT, it can select an ONU-ID from unused ONU-IDs as a temporary ONU-ID. the

Step 4. The OLT completes the ranging of the ONU/ONT assigned the temporary ONU-ID by performing data interaction with the ONU/ONT assigned the temporary ONU-ID. the

Step 5. The OLT sends a request logic registration code message to the ONU/ONT. The request logic registration code message can be realized through a Password request message, or through a newly defined request logic registration code message. the

Step 6. After receiving the logic registration code request message sent by the OLT, the ONU/ONT reports its own logic registration code to the OLT. The ONU/ONT can carry the logical registration code in the reported Password message and transmit it to the OLT, or can carry the logical registration code in the newly defined logical registration code report message and transmit it to the OLT. the

Step 7. The OLT obtains the logical registration code of the ONU/ONT from the received message, and checks the obtained logical registration code according to the pre-configured parameters of the operation management system, that is, the OLT judges whether the obtained logical registration code is consistent with the obtained logical registration code. The stored logic registration code matches, if it matches, confirm that the ONU/ONT is a legal terminal, and record the SN of the ONU/ONT, and terminate the registration process of the ONU/ONT at the same time, go to step 8; if it does not match, confirm the ONU /ONT is an illegal terminal, the registration process is terminated directly, and subsequent steps are not required. the

Step 8. The ONU/ONT goes online again to perform the subsequent registration process, and the ONU/ONT reports its own SN to the OLT. After the OLT receives the SN reported by the ONU/ONT, check whether the SN has been recorded. If the OLT judges that the received SN is a recorded SN, go to step 9; if the OLT judges that the received SN is unrecorded If the SN has passed, the OLT allocates a temporary ONU-ID for the ONU/ONT, and then sends the temporary ONU-ID to the ONU/ONT, and then goes to step 4. the

In step 8, since the OLT has already recorded the SN of the ONU/ONT, go directly to step 9. the

Step 9. The OLT searches for the corresponding ONU-ID, and uses the found ONU-ID as the official ONU-ID. The official ONU-ID may be a temporary ONU-ID, that is, the OLT uses the temporary ONU-ID previously allocated to the ONU/ONT as the official ONU-ID of the ONU/ONT. The OLT can bind the SN of the ONU/ONT with the formal ONU-ID of the ONU/ONT. the

Step 10, the OLT distributes the found official ONU-ID to the ONU/ONT. the

Step 11, the OLT completes the ranging of the ONU/ONT assigned the official ONU-ID by performing data interaction with the ONU/ONT assigned the official ONU-ID. the

In step 12, the OLT registers the ONU/ONT by exchanging data with the ONU/ONT assigned the official ONU-ID. After the registration is successful, go to step 13. the

Step 13, the OLT configures service parameters for the successfully registered ONU/ONT by exchanging data with the successfully registered ONU/ONT. the

In the above description for Figure 3, the logical registration code of the ONU/ONT can be the ONU-ID of the ONU/ONT, that is, in step 6 of the above Figure 3, the logical registration code reported by the ONU/ONT to the OLT is the ONU/ONT The ONU-ID of the ONT, that is to say, the logical registration code generated by the operation management system for the ONU/ONT used by the user who submitted the service application in step 1 of the above-mentioned Figure 2 is the ONU-ID. the

Of course, in the above description for FIG. 3 , the logical registration code of the ONU/ONT may also be different from the ONU-ID of the ONU/ONT. The embodiment of the present invention does not limit the specific expression form of the logical registration code of the ONU/ONT. the

In addition, in the above description of FIG. 3, the management terminal identification can be used to identify the terminal between the operation management system and the OLT; the ONU-ID can be used to identify the terminal between the OLT and the ONU/ONT, and the management terminal identification can be ONU-ID. The ID may also use an identifier different from the ONU-ID. When the management terminal identification between the operation management system and the OLT uses the ONU-ID, the operation management system, the OLT, and the ONU/ONT all use the ONU-ID to identify the ONU/ONT. the

Method 2: Assign ONU-ID first, and then perform terminal automatic detection and authentication process, as shown in Fig. 4 . the

In Fig. 4, in step 1, the OLT sends a request message for reporting an SN to all ONUs/ONTs. the

Step 2. After receiving the request message sent by the OLT, the ONU/ONT reports its own SN to the OLT. the

Step 3: After the OLT receives the SN reported by the ONU/ONT, the OLT selects an ONU-ID from unused ONU-IDs, and assigns the selected ONU-ID to the ONU/ONT. the

Step 4. The OLT completes the ranging of the ONU/ONT assigned the ONU-ID by performing data interaction with the ONU/ONT assigned the ONU-ID. the

Step 5. The OLT sends a request logic registration code message to the ONU/ONT. The request logic registration code message can be realized through a Password request message, or through a newly defined request logic registration code message. the

Step 6. After receiving the logic registration code request message sent by the OLT, the ONU/ONT reports its own logic registration code to the OLT. The ONU/ONT can carry the logical registration code in the reported Password message and transmit it to the OLT, or can carry the logical registration code in the newly defined logical registration code report message and transmit it to the OLT. the

Step 7. The OLT obtains the logical registration code of the ONU/ONT from the received message, and checks the obtained logical registration code according to the pre-configured parameters of the operation management system, that is, the OLT judges whether the obtained logical registration code is consistent with the obtained logical registration code. The stored logical registration code matches, if it matches, confirm that the ONU/ONT is a legal terminal, and record the SN of the ONU/ONT, the OLT can bind the SN of the ONU/ONT with the ONU-ID of the ONU/ONT, Go to step 8; if they do not match, then confirm that the ONU/ONT is an illegal terminal, terminate the registration process directly, and do not proceed to the subsequent steps. the

Step 8. The OLT registers the ONU/ONT by exchanging data with the legal ONU/ONT. After the registration is successful, go to step 9. the

Step 9. The OLT configures service parameters for the successfully registered ONU/ONT by exchanging data with the successfully registered ONU/ONT. the

Step 10, when the ONU/ONT is offline, send an offline message to the OLT. the

After step 11, OLT receives the offline message that ONU/ONT sends, releases the binding relation of the SN of ONU/ONT and the ONU-ID of ONU/ONT. the

In the above description for Figure 4, the terminal can be identified by the management terminal ID between the operation management system and the OLT; the terminal can be identified by the ONU-ID between the OLT and the ONU/ONT, and the management terminal ID can use the ONU-ID , and an identifier different from the ONU-ID can also be used. When the management terminal identification between the operation management system and the OLT does not use the ONU-ID, the OLT in step 7 can use the SN of the ONU/ONT, the ONU-ID of the ONU/ONT, and the management terminal of the ONU/ONT Identification binding; then in step 11, the SN of the ONU/ONT, the ONU-ID of the ONU/ONT, and the management terminal identification binding relationship of the ONU/ONT need to be released. the

It can be seen from the description of the above method implementation that the implementation of the present invention does not need to statically configure the terminal serial code in the central office such as the OLT and the operation management system. By using the logical registration code in the detection and authentication process, after the authentication is passed , record the terminal serial code obtained from the legal terminal, and record the terminal identification assigned to the legal terminal, so that the central office such as the OLT can realize automatic detection and authentication of the terminal; the OLT obtains the terminal serial code and The terminal identification is transmitted to the operation management system, so that the operation management system can dynamically obtain the terminal serial code and terminal identification, avoiding the process of statically configuring the terminal serial code and terminal identification in the operation management system; when the terminal needs to be replaced due to failure or other reasons, the replacement The terminal after replacement can use the logical registration code of the terminal before replacement, thus avoiding the process of updating the serial code of the static configuration by the operation management system brought about by the replacement of the terminal; so that the operation management system can carry out the serial code and terminal identification of the terminal Dynamic management, and the operation management system can easily use the dynamically obtained terminal serial code and terminal identification to maintain OLT and terminals; ultimately reduce the maintenance costs of the operation management system, OLT, and terminals, and improve the flexibility of terminal detection and certification performance, as well as the maintainability of the central office and terminal. the

The embodiment of the present invention also provides a network device, which is located at the central office of the passive optical network, and may be an OLT at the central office. The network equipment includes a first storage module, a receiving module, a judging module, a distribution module and a second storage module. the

The first storage module is used for storing the logical registration code of the terminal. The logical registration code stored in the first storage module can be configured by the operation management system of the central office. the

The receiving module is used for receiving the logical registration code and the terminal serial code sent by the terminal. The receiving module may request the terminal serial code and logical registration code from the terminal, and then receive the terminal serial code and logical registration code transmitted by the terminal according to the request. the

The judging module is used to judge whether the logical registration code received by the receiving module matches the logical registration code stored in the storage module, so as to determine whether the terminal is a legal terminal. The judging module outputs judging result information, for example, the judging module outputs matching information, or outputs non-matching information. the

The assignment module is used to assign a terminal identifier to the terminal and output it. The assigning module may assign a terminal identifier to the terminal before the judging module makes a judgment, or assign a terminal identifier to the terminal after the judging module makes a judgment. the

The second storage module is used for storing the terminal serial code received by the receiving module and the terminal identification output by the distribution module after the judging module outputs the matched judging result information. The terminal serial code and terminal identification stored in the second storage module are terminal serial codes and terminal identifications of legal terminals detected automatically. the

The network device may also optionally include a reporting module. The reporting module is used to report the terminal serial code stored in the second storage module to the operation management system at the central office. The terminal sequence code reported by the reporting module to the operation management system is the terminal sequence code of the legal terminal automatically detected by the network equipment where it is located. the

Depending on the implementation of automatic detection and authentication, the specific operations of the distribution module, the receiving module, etc. are also different. Two specific implementation manners are exemplified below. the

Mode 1. The allocation module includes a judgment sub-module and an allocation sub-module, and the receiving module includes a first request sub-module, a second request sub-module, and a receiving sub-module. the

The first request submodule sends a request message for reporting an SN to all ONUs/ONTs. The receiving sub-module receives the SN reported by the ONU/ONT. After the receiving sub-module receives the SN reported by the ONU/ONT, the judging sub-module judges whether the SN received by the receiving sub-module has been recorded in the second storage module, that is, judges whether the received SN is stored in the second storage module. If the judging sub-module judges that the SN received by the receiving sub-module is the SN recorded by the second storage module, the distribution sub-module is notified to distribute the official ONU-ID; if the judging sub-module judges that the receiving sub-module receives the SN If the SN is an SN that has not been recorded by the second storage module, the allocation sub-module is notified to allocate a temporary ONU-ID. the

After receiving the temporary ONU-ID allocation information from the judging sub-module, the allocation sub-module allocates a temporary ONU-ID to the terminal, and triggers the network device to perform ranging on the terminal. The network device completes the ranging of the ONU/ONT assigned the temporary ONU-ID by performing data interaction with the ONU/ONT assigned the temporary ONU-ID. the

The second request sub-module sends a request logic registration code message to the ONU/ONT after the network device completes the ranging. The request logic registration code message can be implemented through a Password request message, or through a newly defined request logic registration code message. accomplish. The receiving sub-module obtains the logical registration code reported by the ONU/ONT from the received message. the

After the receiving sub-module receives the logical registration code, the judging module verifies the logical registration code received by the receiving sub-module according to the logical registration code stored in the first storage sub-module, that is, the judging module judges the logical registration code received by the receiving sub-module. Whether the code matches the logical registration code stored in the first storage submodule, if it matches, then confirm that the ONU/ONT is a legal terminal, and notify the second storage module to record the SN of the ONU/ONT; if it does not match, then confirm that the ONU/ONT ONT is an illegal terminal, and the registration process is terminated directly. the

The ONU/ONT goes online again for the subsequent registration process, and the ONU/ONT reports its SN to the OLT. After the receiving sub-module receives the SN reported by the ONU/ONT, the judging sub-module searches whether the SN has been recorded in the second storage module, if the judging sub-module judges that the SN received by the receiving sub-module is recorded in the second storage module If the judgment submodule judges that the SN received by the receiving submodule is an unrecorded SN in the second storage module, it notifies the distribution submodule to distribute the ONU-ID for the terminal. Temporary ONU-ID. the

Since the second storage module has recorded the SN of the ONU/ONT during the re-online process of the terminal, the distribution sub-module searches for the ONU-ID after receiving the SN received by the sub-module, and uses the found ONU-ID It is assigned to the terminal as a formal ONU-ID, and triggers the network device to perform ranging on the terminal. the

The network device completes the ranging of the ONU/ONT assigned the official ONU-ID through data interaction with the ONU/ONT assigned the official ONU-ID. The network device registers the ONU/ONT through data interaction with the ONU/ONT assigned the official ONU-ID. /ONT configures service parameters. In addition, when the management terminal identification between the operation management system and the OLT adopts the ONU-ID, the second storage module can store the binding relationship between the SN and the ONU-ID. the

Mode 2, the receiving module includes a first request submodule, a third request submodule and a receiving submodule. the

The first request submodule sends a request message for reporting an SN to all ONUs/ONTs. The receiving sub-module receives the SN reported by the ONU/ONT. After the receiving sub-module receives the SN reported by the ONU/ONT, the assigning module assigns the ONU-ID to the terminal, and triggers the network device to measure the distance of the terminal. The network device completes the ranging of the ONU/ONT assigned the ONU-ID by exchanging data with the ONU/ONT assigned the ONU-ID. the

The third request sub-module sends a request logic registration code message to the ONU/ONT after the network device completes the ranging. The request logic registration code message can be implemented through a Password request message, or through a newly defined request logic registration code message. accomplish. The receiving sub-module obtains the logical registration code reported by the ONU/ONT from the received message. the

After the receiving sub-module receives the logical registration code, the judging module verifies the logical registration code received by the receiving sub-module according to the logical registration code stored in the first storage sub-module, that is, the judging module judges the logical registration code received by the receiving sub-module. Whether the code matches the logical registration code stored in the first storage submodule, if it matches, then confirm that the ONU/ONT is a legal terminal, and notify the second storage module to record the SN of the ONU/ONT; if it does not match, then confirm that the ONU/ONT ONT is an illegal terminal, and the registration process is terminated directly. the

The network device registers the ONU/ONT through data interaction with the ONU/ONT assigned the official ONU-ID. /ONT configures service parameters. the

When the ONU/ONT goes offline, it sends an offline message to the OLT. After the OLT receives the offline message sent by the ONU/ONT, the second storage module releases the stored information of the ONU/ONT. When the management terminal identification between the operation management system and the OLT does not adopt the ONU-ID, the information of the ONU/ONT stored in the second storage module is: the SN of the ONU/ONT, the management terminal identification of the ONU/ONT and the ONU/ONT The binding relationship of the ONU-ID of the ONT. the

The embodiment of the present invention also provides an operation management system in the central office of the passive optical network, and the operation management system includes: a logic registration code module and a sequence code module. the

The logical registration code module is used for storing the logical registration code, assigning the logical registration code to the user, and transmitting the logical registration code assigned to the user to the optical line terminal. The logical registration code module can transmit the logical registration code and service parameters to the optical line terminal. The details are as described in the above method implementation. the

The sequence code module is used for receiving and storing the sequence code of the legal terminal transmitted by the optical line terminal. The sequence code transmitted by the optical line terminal is the sequence code of the legal terminal automatically detected by the optical line terminal. The serial code module can store the received serial code in the SN database. The operation management system is also provided with a module for managing SN. the

The embodiment of the present invention also provides a terminal device in a passive optical network, and the terminal device includes: a receiving storage module and a sending module. the

The receiving storage module is used to receive and store the logical registration code input to the terminal equipment where it is located. The receiving storage module may utilize a local command line provided by the terminal device, a web page, or other methods to receive an externally input logic registration code. The details are as described in the above method implementation. the

The sending module is used to send the logical registration code stored in the receiving storage module to the central office according to the request received by the terminal device where it is located. For example, the sending module sends the logical registration code to the OLT in a message for reporting the password; for another example, the sending module carries the logical registration code in a newly defined message dedicated to transmitting the logical registration code and sends it to the OLT. The details are as described in the above method implementation. the

Although the present invention has been described by way of example, those of ordinary skill in the art know that there are many variations and changes in the present invention without departing from the spirit of the invention, and the claims of the application document of the present invention include these variations and changes. the

Claims (12)

1. A method for terminal detection and authentication in a passive optical network, characterized in that the terminal has a logic registration code, and the method comprises steps: The central office receives the logical registration code sent by the terminal, wherein the logical registration code is dynamically generated by the central office and allocated to the terminal by the central office during the process of the user applying for a service; After the central office determines that the logical registration code of the terminal matches the logical registration code stored by the central office, it determines that the terminal is a legal terminal; The central office records the terminal sequence code acquired from the legal terminal, and records the terminal identifier assigned to the legal terminal. 2. The method according to claim 1, wherein the step of receiving the logical registration code sent by the terminal at the central office comprises: The optical line terminal at the central office assigns a temporary terminal identifier to the terminal after receiving its unrecorded terminal sequence code; After the optical line terminal completes the ranging of the terminal allocated with the temporary terminal identifier, it requests the logical registration code of the terminal. 3. The method according to claim 2, wherein the central office records the terminal sequence code acquired from the legal terminal, and records the terminal identification assigned to the legal terminal comprising: The optical line terminal records the serial code of the legal terminal it receives; After the optical line terminal receives the serial code reported by the legal terminal when it goes online again, it assigns a formal terminal identifier to the legal terminal, and records the formal terminal identifier of the legal terminal. 4. The method according to claim 1, wherein the step of receiving the logical registration code sent by the terminal at the central office comprises: After receiving the serial code of the requested terminal, the optical line terminal at the central office assigns a terminal identifier to the terminal, and after the optical line terminal completes the ranging of the terminal assigned the terminal identifier, it requests the logic of the terminal to registration code. 5. The method according to any one of claims 1 to 4, wherein the logical registration code stored at the central office comprises: The logical registration code stored in the operation management system of the central office; and The operation management system transmits the logical registration code assigned to the user to the optical line terminal, and the optical line terminal receives and stores the logical registration code. 6. The method according to any one of claims 1 to 4, further comprising: The optical line terminal at the central office transmits the recorded terminal sequence code of the legal terminal to the operation management system at the central office, and the operation management system records and manages the terminal sequence code. 7. A network device located at the central office of a passive optical network, characterized in that the network device includes: The first storage module is used to store the logical registration code of the terminal, wherein the logical registration code is dynamically generated by the central office, and is allocated to the optical network terminal by the central office during the process of the user applying for a service; The receiving module is used to receive the logical registration code and the terminal serial code sent by the terminal; A judging module, configured to judge whether the logical registration code received by the receiving module matches the logical registration code stored in the first storage module, and output a judgment result; An assignment module, configured to assign a terminal identifier to the terminal and output it; The second storage module is configured to store the terminal sequence code received by the receiving module and the terminal identifier output by the distribution module after the judging module outputs the matched judging result information. 8. The network device according to claim 7, characterized in that: The allocation module includes: A judging sub-module, used to judge whether the terminal sequence code received by the receiving module is recorded in the terminal sequence code stored in the second storage module, and output the judgment result; The allocation sub-module is used to assign a formal terminal identifier to the terminal after the judging sub-module outputs a recorded judgment result, and assign a temporary terminal identifier to the terminal after the judging sub-module outputs an unrecorded judgment result; and trigger the network device Ranging processing; The receiving module includes: The first request submodule is used to request the terminal serial code of the terminal; The second request submodule is used to request the logical registration code of the terminal after the network device where it is located completes the ranging of the terminal assigned the temporary terminal identifier; The receiving submodule is used to receive the logical registration code and serial code of the terminal. 9. The network device according to claim 8, wherein the receiving module comprises: The first request submodule is used to request the terminal serial code of the terminal; The third request submodule is used to request after the receiving submodule receives the serial code of the terminal, the assignment module assigns the terminal identifier to the terminal, and the network device where it is located completes the ranging of the terminal assigned the terminal identifier The logical registration code of the terminal; The receiving submodule is used to receive the logical registration code and serial code of the terminal. 10. The network device according to claim 8, further comprising: The reporting module is configured to report the terminal sequence code stored in the second storage module to the operation management system at the central office. 11. An operation management system located at the central office of a passive optical network, characterized in that the operation management system includes: The logical registration code module is used to store the logical registration code, assign the logical registration code to the user, and transmit the logical registration code assigned to the user to the optical line terminal, wherein the logical registration code is dynamically generated by the central office, And in the process of the user applying for the service, the central office is assigned to the optical network terminal; The sequence code module is used for receiving and storing the sequence code of the legal terminal transmitted by the optical line terminal. 12. A terminal device located on the user side of a passive optical network, characterized in that the terminal device comprises: The receiving storage module is used to receive and store the logical registration code input to the terminal equipment where it is located, wherein the logical registration code is dynamically generated by the central office and assigned to the Terminal Equipment; The sending module is configured to send the logical registration code stored in the receiving storage module to the central office according to the request received by the central office at the terminal device where it is located.

Images