Method for filtering of abnormal ONT with same serial number in a GPON system

A method in which an optical line terminal authenticates registration of an optical network terminal in a Gigabit passive optical network (GPON), comprising:

• at the optical line terminal, being assigned an optical line terminal (OLT) private key and assigning an optical line terminal (OLT) public key to the optical network terminal when the optical network terminal joins the GPON;
• at the optical line terminal, decrypting a header of a frame associated with the registration of the optical network terminal, the header including a physical layer Operations, Administration and Maintenance (OAM) message, using the OLT private key, and registering the optical network terminal using the frame with the decrypted header;
• wherein the registration of the optical network terminal comprises:
• decrypting a physical layer OAM message included in a header of a frame associated with registration of a serial number of the optical network terminal using the OLT private key, authenticating the serial number of the optical network terminal associated with the registration and sending a registration approval for the serial number to the optical network terminal;
• and
• receiving an optical network terminal (ONT) public key created by the optical network terminal from the optical network terminal in response to the registration of the serial number being authenticated.

An optical network terminal which obtains a registration approval from an optical line terminal in a Gigabit Passive Optical Network (GPON), the optical network terminal comprising:

• an encryption/decryption unit to encrypt a physical layer Operations, Administration and Maintenance (OAM) message included in a header a frame associated with registration of a serial number of the optical network terminal using an optical network terminal (OLT) public key assigned to the optical network terminal, by the optical line terminal, when the optical network terminal joins the GPON, the OLT public key corresponding to an optical line terminal (OLT) private key assigned to the optical line terminal, to transmit the encrypted physical layer OAM message to the optical line terminal, and to decrypt a physical layer OAM message associated with the registration approval received from the optical line terminal using the OLT public key;
• an authentication unit obtaining the registration approval from the optical line terminal according to the result of the decryption;
• and
• a key creator to create an optical network terminal (ONT) private key and an ONT public key and transmit the ONT public key to the optical line terminal in response to the authentication unit obtaining the registration approval according to the result of the decryption.

An optical line terminal which performs registration authentication of an optical network terminal in a Gigabit Passive Optical Network (GPON), the optical line terminal comprising:

• an encryption/decryption unit to receive and decrypt a physical layer Operations, Administration and Maintenance (OAM) message included in a header of a frame associated with registration of a serial number of the optical network terminal using an optical line terminal (OLT) private key assigned to the optical line terminal, the OLT private key corresponding to an optical line terminal (OLT) public key assigned to the optical network terminal, by the optical line terminal, when the optical network terminal joins the GPON;
• an authentication unit to authenticate registration of the serial number of the optical network terminal according to the result of the decryption;
• and
• a key table created to store a received optical network terminal (ONT) public key, the ONT public key corresponding to an optical network terminal (ONT) private key stored on the optical network terminal, wherein the ONT public key is received from the optical network terminal in response to the registration of the serial number being authenticated.

A Gigabit Passive Optical Network (GPON) comprising:

• an optical network terminal configured to:
• encrypt or decrypt a physical layer Operations, Administration and Maintenance (OAM) message included in a header of a frame associated with registration of a serial number of the optical network terminal using an optical line terminal (OLT) public key assigned to the optical network terminal, by an optical line terminal, when the optical network terminal joins the GPON, the OLT public key corresponding to an optical line terminal (OLT) private key assigned to the optical line terminal,
• transmit the encrypted physical layer OAM message to the optical line terminal,
• decrypt a physical layer OAM message associated with a registration approval of the serial number received from the optical line terminal using the OLT public key,
• create an optical network terminal (ONT) private key and an optical network terminal (ONT) public key, the ONT public key corresponding to the ONT private key, and
• transmit the ONT public key to the optical line terminal in response to obtaining the registration approval from the optical line terminal;
• and
• the optical line terminal configured to:
• encrypt or decrypt a physical layer Operations, Administration and Maintenance (OAM) message included in a header of a frame associated with the registration of the serial number using the private OLT key assigned or the ONT public key created by and received from the optical network terminal,
• authenticate the registration of the serial number according to the result of the encryption or decryption of the header of the frame, and
• store the received ONT public key in response to the registration of the serial number being authenticated.