基于Diffie-Hellman的安全的10G EPON认证方案

10Gb/s EPON efficient and secure authentication scheme based on diffie-hellman

随着接入网的发展,10GEPON获得关注。由于其拓扑结构仍然是点到多点,且下行数据是广播发送,因而将会遭受窃听和伪装攻击。为了消除这些安全威胁,提出了一个完整的安全方案,包括一个双向认证方法和一种结合了单向哈希(Hash)函数的加密算法。该认证方法可以在注册过程中验证OLT和ONU,以阻止非法用户加入网络,同时安全地建立用于后续加密的会话密钥。该方案的安全性基于计算性Diffie-Hellman假设和抗碰撞函数难解性。

With the development of access network, 10G EPON has gained attention. As its topology structure is still point-to-multi-point and the downstream data is broadcasted, it will suffer from eavesdropping and mas- querading attack. To eliminate these safety threats, this paper proposes an integrated security scheme including a bilateral authentication method and an encryption algorithm combine with one-way hash function. The au- thentication method can verify OLT and ONU during the registration process, preventing illegal users joining the network, and safely establish a secret key used for encrypting as well. The proposed scheme＇s security is based on the computational Diffie-Hellman assumption and the target collision resistant hash functions.