Method for Increasing Security in a Passive Optical Network

A method performed at an optical line termination for a passive optical network comprising:

• detecting access of an optical termination device to said passive optical network;
• establishing a connection with said optical termination device by assigning a time interval for upstream transmission to said optical termination device;
• generating a first authentication message comprising a first random number associated with said optical termination device, said first authentication message being configured as a physical layer operations and maintenance message;
• transmitting said first authentication message through said established connection;
• receiving a second authentication message through said established connection, said second authentication message comprising a first authentication code, said second authentication message being configured as a physical layer operations and maintenance message;
• calculating a second authentication code by using said first random number and a secret code stored at said optical line termination;
• and
• authenticating said optical termination device if said first authentication code (AC*) matches said second authentication code.

A method performed by an optical termination device configured to access a passive optical network including an optical line termination, said method comprising:

• having assigned a time interval for upstream transmission with said optical line termination;
• through an established connection, said first authentication message comprising a first random number associated to said optical termination device, said first authentication message being configured as a physical layer operations and maintenance message;
• calculating an authentication code by using said first random number and a secret code stored at said optical termination device;
• and
• generating and transmitting through said established connection a second authentication message comprising said first authentication code, said second authentication message being configured as a physical layer operations and maintenance message.

A non-transitory computer readable medium having computer program code stored thereon that, when executed by a computing device at an optical line termination for a passive optical network, performs the steps comprising:

• detecting access of an optical termination device to said passive optical network;
• establishing a connection with said optical termination device by assigning a time interval for upstream transmission to said optical termination device;
• generating a first authentication message comprising a first random number associated with said optical termination device, said first authentication message being configured as a physical layer operations and maintenance message;
• transmitting said first authentication message through said established connection;
• receiving a second authentication message through said established connection, said second authentication message comprising a first authentication code, said second authentication message being configured as a physical layer operations and maintenance message;
• calculating a second authentication code by using said first random number and a secret code stored at said optical line termination;
• and
• authenticating said optical termination device if said first authentication code matches said second authentication code.

A non-transitory computer program readable medium having computer program code stored thereon that, when said program is executed by a computing device at an optical termination device configured to access a passive optical network including an optical line termination, performs the steps comprising:

• having assigned a time interval for upstream transmission with said optical line termination;
• receiving a first authentication message through an established connection, said first authentication message comprising a first random number associated with said optical termination device, said first authentication message being configured as a physical layer operations and maintenance message;
• calculating an authentication code by using said first random number and a secret code stored at said optical termination device;
• and
• generating and transmitting through said established connection a second authentication message comprising said first authentication code, said second authentication message being configured as a physical layer operations and maintenance message.