摘要
随着接入网的发展,10GEPON获得关注。由于其拓扑结构仍然是点到多点,且下行数据是广播发送,因而将会遭受窃听和伪装攻击。为了消除这些安全威胁,提出了一个完整的安全方案,包括一个双向认证方法和一种结合了单向哈希(Hash)函数的加密算法。该认证方法可以在注册过程中验证OLT和ONU,以阻止非法用户加入网络,同时安全地建立用于后续加密的会话密钥。该方案的安全性基于计算性Diffie-Hellman假设和抗碰撞函数难解性。
With the development of access network, 10G EPON has gained attention. As its topology structure is still point-to-multi-point and the downstream data is broadcasted, it will suffer from eavesdropping and mas- querading attack. To eliminate these safety threats, this paper proposes an integrated security scheme including a bilateral authentication method and an encryption algorithm combine with one-way hash function. The au- thentication method can verify OLT and ONU during the registration process, preventing illegal users joining the network, and safely establish a secret key used for encrypting as well. The proposed scheme's security is based on the computational Diffie-Hellman assumption and the target collision resistant hash functions.
出处
《光通信技术》
CSCD
北大核心
2014年第7期49-52,共4页
Optical Communication Technology
基金
国家自然科学基金(编号:61262079)资助
2013年国家级大学生创新训练项目基金(编号:201310404016)资助