JP6683646B2 - Subscriber line termination device authentication device and subscriber line termination device authentication method - Google Patents

Description

  The present invention relates to a subscriber line termination device authentication device and a subscriber line termination device authentication method.

  Conventionally, when an ONU (Optical Network Unit) breaks down, a maintenance person has carried out replacement by coordinating with an operator on the station side at the ONU installation site by telephone or the like. Specifically, when performing ONU failure replacement, the local maintenance personnel contact the operator at the station side to replace the registered ONU identifier (MAC address, etc.) with the ONU identifier of the failed ONU. This could be done by rewriting to the ONU identifier of the ONU for use. Therefore, the operation of registering one ONU identifier for one user can be dealt with.

JP, 2014-11660, A

  However, as the number of ONUs has increased, the need for maintenance by DIY (Do It Yourself), where maintenance personnel do not go to the field, is increasing. However, in the case of DIY maintenance, it is difficult for the user to cooperate with the operator. Therefore, since the user replaces the replacement ONU with the defective ONU by himself, there is a problem that a technique suitable for DIY is required.

  In view of the above circumstances, according to the present invention, when there is a connection request from the ONU, the OLT that responds to the connection request from the ONU has a different LLID (Logical ID) for each user ID based on the correspondence table of the user ID and the ONU identifier. Allocate a Link ID). The correspondence table is a correspondence table in which a plurality of ONU identifiers of ONUs can be registered for each user ID. An object of the present invention is to provide a technique in which even if the number of ONUs increases, a replacement ONU is distributed to a failed ONU user, and the user can easily recover by DIY.

  According to an aspect of the present invention, a communication unit that receives a connection request including a subscriber line termination device identifier included in the subscriber line termination device from the subscriber line termination device, and a user who uses the subscriber line termination device is identified. A correspondence table holding unit that stores a correspondence table that associates the user identifier with at least one or more subscriber line terminating devices, and whether the received information is information addressed to the own device based on the user identifier. A subscriber line terminating device registration / authentication unit that acquires a logical identifier for the subscriber line terminating device to determine whether the subscriber line terminating device registration / authentication unit is included in the connection request. The subscriber line terminating device authentication device transmits a connection response and the logical identifier to the subscriber line terminating device when the terminating device identifier is included in the correspondence table.

  One aspect of the present invention is the subscriber line terminating device authenticating device, wherein the subscriber line terminating device registration authenticating unit includes at least one of the subscriber line terminating device authenticating device corresponding to the user identifier. If any one of the subscriber line terminating equipment identifiers has been authenticated, the connection request is issued from a subscriber line terminating equipment different from the subscriber line terminating equipment corresponding to the user identifier. Even if accepted, the connection response is not transmitted.

  One aspect of the present invention is the subscriber line terminating device authentication apparatus described above, wherein a registration authentication history holding a subscriber line terminating device identifier connected to the subscriber line terminating device authentication device is stored for each user identifier. It further has a registration authentication history holding unit for storing, and the subscriber line termination device registration authentication unit is stored in the registration authentication history among at least one of the subscriber line termination device identifiers corresponding to the user identifier. When the authentication is received from the subscriber line terminating device identifier which is not present, the authentication of the subscriber line terminating device identifier which is not stored in the registration authentication history among the at least one subscriber line terminating device identifier is released.

  According to an aspect of the present invention, a communication step of receiving a connection request including a subscriber line terminating device identifier included in the subscriber line terminating device from the subscriber line terminating device, and identifying a user who uses the subscriber line terminating device. A correspondence table holding step of storing a correspondence table for associating a user identifier with at least one or more subscriber line terminating devices, and whether the received information is information addressed to the own device based on the user identifier. A subscriber line terminating device registration authentication step of acquiring a logical identifier for the subscriber line terminating device to determine whether the subscriber line termination device registration authentication step is included in the connection request. In the subscriber line terminating device authentication method, when the line terminating device identifier is included in the correspondence table, a connection response and the logical identifier are transmitted to the subscriber line terminating device in response to the connection request. That.

  According to the present invention, even if the ONU fails, the user can more easily replace the failure.

1 is an overall configuration diagram of an optical communication system 1 of a first example. It is a functional block diagram of OLT100 of a 1st Example. It is a figure which shows the specific example of the correspondence table of 1st Example. It is a figure which shows one specific example at the time of performing ONU exchange of 1st Example. It is a functional block diagram of OLT100a of a 2nd Example. It is a figure which shows one specific example of a process at the time of installing ONU200a of a 2nd Example. It is a flow chart showing a flow of attestation processing of ONU200a of a 2nd example. It is a functional block diagram of OLT100b of a 3rd Example. It is a figure which shows the specific example of the registration authentication history of 3rd Example. It is a figure which shows a specific example of a process at the time of installing ONU200a of the 3rd Example. It is a flow chart showing a flow of attestation processing of ONU200a of a 3rd example.

(First embodiment)
FIG. 1 is an overall configuration diagram of an optical communication system 1 of the first embodiment. The optical communication system 1 includes an OLT (Optical Line Terminal) 100, a plurality of ONUs 200, and an optical multiplexing / demultiplexing device 300. The OLT 100 and each ONU 200 are communicably connected to each other via the optical multiplexer / demultiplexer 300.

  The OLT 100 is a subscriber line terminal device. The OLT 100 is a device that realizes communication with another communication device (for example, ONU) by an optical signal that passes through an optical communication network. The optical communication network to which the OLT 100 is connected is, for example, a passive optical communication network such as PON (Passive. Optical Network). The OLT 100 is installed in, for example, a station building connected to an optical communication network. The OLT 100 is an aspect of a subscriber line termination device authentication device.

  The ONU 200 is a subscriber line terminating device. The ONU 200 is a device that realizes communication with another communication device by an optical signal passing through a communication network. The communication network to which the ONU 200 is connected is, for example, an optical fiber network such as PON. The ONU 200 may be configured by using a plurality of devices. The ONU 200 is installed, for example, in the home of a user who receives a communication service.

  The optical multiplexer / demultiplexer 300 aggregates the signals transmitted from the ONUs 200 and transmits them to the OLT 100. The optical multiplexer / demultiplexer 300 distributes the signal transmitted from the OLT 100 and transmits the signal to the ONU 200. The optical multiplexer / demultiplexer 300 is, for example, an optical splitter.

  FIG. 2 is a functional configuration diagram of the OLT 100 according to the first embodiment. The OLT 100 functions as a device including the communication unit 101, the correspondence table holding unit 102, the ONU registration authentication unit 103, and the LLID storage unit 104 by executing the ONU registration authentication program.

  The communication unit 101 is a network interface. The communication unit 101 communicates with each ONU 200 via the optical multiplexer / demultiplexer 300. The communication unit 101 is, for example, a port to which an optical communication line such as a PON port can be connected. The optical communication line is, for example, an optical fiber or the like.

  The correspondence table holding unit 102 is configured by using a storage device such as a magnetic hard disk device or a semiconductor storage device. The correspondence table holding unit 102 stores the correspondence table. The correspondence table stores the user ID and the ONU identifier. The correspondence table can hold a plurality of ONU identifiers for one user ID. The user ID is an aspect of the user identifier.

  The user ID is an identifier by which the OLT 100 identifies a user who uses the ONU 200. The user ID is information that does not overlap with other user IDs. The user ID may be any information as long as it can identify the user of the ONU 200. The user ID may be, for example, a random combination of character strings or numbers. The ONU identifier is an identifier by which the OLT 100 identifies each ONU 200. The ONU identifier is information that does not overlap with other ONUs 200. The ONU identifier may be any information as long as it can identify the ONU 200. The ONU identifier may be, for example, a MAC address.

  When there is a connection request from the ONU 200, the ONU registration authentication unit 103 responds to the connection request from the ONU 200 based on the correspondence table. Specifically, the ONU registration authentication unit 103 acquires the user ID from the correspondence table based on the ONU identifier received from the ONU 200. When the received ONU identifier is included in the correspondence table, the ONU registration authenticating unit 103 acquires the LLID from the LLID storage unit 104 based on the acquired user ID. The ONU registration authentication unit 103 transmits the LLID to the ONU 200 and responds to the connection request to the ONU 200. LLID is one aspect of a logical identifier. The ONU registration authentication unit 103 is an aspect of the subscriber line termination device registration authentication unit.

  The LLID storage unit 104 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The LLID storage unit 104 stores the LLID. The LLID is an identifier for the ONU 200 to determine whether or not the frame received from the OLT 100 is a frame addressed to the own device. As the LLID, a different LLID is assigned to each user ID. The LLID may be a random combination of character strings or numbers.

  FIG. 3 is a diagram showing a specific example of the correspondence table of the first embodiment. The correspondence table has a correspondence table record. The correspondence table record has respective values of user ID and ONU identifier. The correspondence table record has at least one or more ONU identifiers. In the example shown in FIG. 3, in the uppermost record of the correspondence table, the user ID value is "1", the ONU identifier value is "AA: AA: AA: AA: AA: AA" and "BB: BB:". BB: BB: BB: BB ". Therefore, according to the record at the top of the correspondence table, in the case of the ONU 200 whose user ID is “1”, the ONU identifiers are “AA: AA: AA: AA: AA: AA” and “BB: BB: BB: BB”. It can be seen that two of :: BB: BB ”are registered. The correspondence table shown in FIG. 3 is only one specific example. Therefore, the correspondence table may be configured in a mode different from that of FIG. For example, the correspondence table may have an LLID.

  FIG. 4 is a diagram showing a specific example when the ONU exchange of the first embodiment is performed. When the ONU 200 is replaced, the ONU identifier transmitted from the ONU 200 to the OLT 100 is changed from “AA: AA: AA: AA: AA: AA” to “BB: BB: BB: BB: BB: BB”. In the correspondence table stored in the correspondence table holding unit 102, “AA: AA: AA: AA: AA: AA” and “BB: BB: BB:” as ONU identifiers in the correspondence table record with the user ID “1”. “BB: BB: BB” is stored. Therefore, even if the ONU identifier received from the ONU 200 is changed from “AA: AA: AA: AA: AA: AA” to “BB: BB: BB: BB: BB: BB”, the OLT 100 has the user ID “1”. It is possible to identify that the information is information received from the ONU 200. The OLT 100 can communicate with the ONU 200 by assigning to the ONU 200 the same LLID as when the user ID is “1” for the ONU 200 having the ONU identifier “BB: BB: BB: BB: BB: BB”.

  In the OLT 100 configured in this way, when LLIDs are assigned to user IDs, the same LLID can be assigned regardless of which of the plurality of ONU identifiers is connected.

(Second embodiment)
FIG. 5 is a functional configuration diagram of the OLT 100a according to the second embodiment. The OLT 100a in the second embodiment is different from the first embodiment in that an ONU registration authentication unit 103a is provided instead of the ONU registration authentication unit 103, but the other configurations are the same. The points different from the first embodiment will be described below.

  Upon receiving the ONU identifier from the ONU 200, the ONU registration authentication unit 103a performs the authentication process of the ONU 200. In the authentication processing, the ONU registration authenticating unit 103a, if any one of the ONU identifiers corresponding to the user ID has been authenticated, the ONU registration authenticating unit 103a corresponds to the authenticated ONU corresponding to the same user ID. It does not respond to a connection request from the ONU 200 that is different from the identifier. Specifically, the ONU registration authentication unit 103a acquires the user ID corresponding to the received ONU identifier from the correspondence table. The ONU registration authentication unit 103a determines whether or not there is an authenticated ONU identifier from the plurality of ONU identifiers corresponding to the acquired user ID.

  If there is no authenticated ONU identifier, authentication is allowed. When the authentication is permitted, the ONU registration authentication unit 103a acquires the LLID from the LLID storage unit 104 based on the user ID. The ONU registration authentication unit 103a transmits the LLID to the ONU 200 and responds to the connection request to the ONU 200. Authentication is not allowed if there is an authenticated ONU identifier. If the authentication is not permitted, the ONU registration authentication unit 103a does not respond to the connection request from the ONU.

  FIG. 6 is a diagram showing a specific example of the processing when the ONU 200a of the second embodiment is installed. The ONU 200 has been authenticated with respect to the OLT 100a and is communicating with the OLT 100a. The ONU 200a is a newly installed ONU. Both the ONU 200 and the ONU 200a are installed in the same user's home. When the ONU 200a is installed, the ONU 200a sends an ONU identifier “BB: BB: BB: BB: BB: BB” to the OLT 100a to make a connection request. Upon receiving the connection request from the ONU 200a, the OLT 100a acquires the ONU identifier stored in the correspondence table holding unit 102. In the correspondence table holding unit 102, the ONU identifier “BB: BB: BB: BB: BB: BB” received from the ONU 200a corresponds to “1” as the user ID. Two ONA identifiers corresponding to "1" as the user ID, "AA: AA: AA: AA: AA: AA" and "BB: BB: BB: BB: BB: BB", are registered. The ONU identifier “AA: AA: AA: AA: AA: AA” has been authenticated. Therefore, the ONU registration authentication unit 103a of the OLT 100a does not respond to the connection request from the ONU 200a.

  FIG. 7 is a flowchart showing the flow of authentication processing of the ONU 200a of the second embodiment. The ONU 200a is installed in the optical communication system 1 by the user. (Step S101). The ONU 200a transmits the ONU identifier to the OLT 100a and makes a connection request (step S102). The OLT 100a performs an authentication process based on the ONU identifier received from the ONU 200a (step S103).

  The ONU registration authentication unit 103a determines whether to permit the authentication of the ONU 200a based on the result of the authentication processing (step S104). When the authentication is permitted (step S104: YES), the ONU registration authenticating unit 103a sets the accepted ONU identifier as authenticated (step S105). The ONU registration authentication unit 103a acquires the LLID corresponding to the user ID from the LLID storage unit 104 (step S106). The ONU registration / authentication unit 103a transmits the connection permission communication to the ONU 200a together with the LLID (step S107). When the authentication is not permitted (step S104: NO), the OLT 100a ends the process without responding to the ONU 200a.

  In the OLT 100a configured in this way, two or more ONUs 200 corresponding to the same user ID are not connected at the same time. Therefore, the simultaneous connection can be restricted even for the connection request from the falsely placed ONU 200.

(Third embodiment)
FIG. 8 is a functional configuration diagram of the OLT 100b according to the third embodiment. The OLT 100b in the third embodiment is different from the first embodiment in that an ONU registration authentication unit 103b is provided instead of the ONU registration authentication unit 103, and a registration authentication history holding unit 105 is further provided, but other configurations are provided. Are the same. The points different from the first embodiment will be described below.

  Upon receiving the ONU identifier from the ONU 200, the ONU registration authentication unit 103b performs the ONU authentication process. In the authentication processing, the ONU registration authentication unit 103b acquires the user ID corresponding to the ONU identifier received from the correspondence table. The ONU registration authentication unit 103b determines whether or not the received ONU identifier among at least one ONU identifier corresponding to the user ID is stored in the registration authentication history stored in the registration authentication history holding unit 105.

  When receiving the ONU identifier not stored in the registration authentication history, the ONU registration authenticating unit 103b permits the authentication. When the authentication is permitted, the ONU registration authenticating unit 103b cancels the authentication of the at least one ONU identifier corresponding to the acquired user ID, except the ONU identifier that is not in the registration authentication history. Upon canceling the authentication, the ONU registration authenticating unit 103b sets the accepted ONU identifier as authenticated. The ONU registration authentication unit 103b acquires the LLID from the LLID storage unit 104 based on the acquired user ID. The ONU registration authentication unit 103b transmits the LLID to the ONU 200 and responds to the connection request to the ONU 200.

  When the ONU identifier stored in the registration authentication history is accepted, the ONU registration authenticating unit 103b does not permit the authentication. When the authentication is not permitted, the ONU registration authentication unit 103b does not respond to the connection request from the ONU 200.

  The registration authentication history holding unit 105 is configured using a storage device such as a magnetic hard disk device or a semiconductor storage device. The registration authentication history storage unit 105 stores the registration authentication history. The registration authentication history holds the ONU identifier connected to the OLT 100b so far for each user ID.

  FIG. 9 is a diagram showing a specific example of the registration authentication history according to the third embodiment. The registration authentication history has a registration authentication history record. The registration authentication history record has respective values of user ID and ONU identifier. In the example shown in FIG. 9, the record at the top of the correspondence table has a user ID value of "1" and an ONU identifier value of "AA: AA: AA: AA: AA: AA". Therefore, according to the record at the top of the registration authentication history, the ONU having the user ID “1” among the ONUs connected to the user in the past is “AA: AA: AA: AA: AA: AA”. . The registration authentication history shown in FIG. 9 is merely one specific example. Therefore, the registration authentication history may be configured in a mode different from that of FIG. 9. For example, the registration authentication history may have an LLID.

FIG. 10 is a diagram showing a specific example of the processing when the ONU 200a of the third embodiment is installed. The ONU 200 has been authenticated with respect to the OLT 100a and is communicating with the OLT 100a. The ONU 200a is a newly installed ONU. Both the ONU 200 and the ONU 200a are installed in the same user's home. When the ONU 200a is installed, the ONU 200a sends an ONU identifier “BB: BB: BB: BB: BB: BB” to the OLT 100a to make a connection request. Upon receiving the connection request from the ONU 200a, the OLT 100a acquires the user ID corresponding to the received ONU identifier from the correspondence table stored in the correspondence table holding unit 102. In the correspondence table holding unit 102, the ONU identifier “BB: BB: BB: BB: BB: BB” received from the ONU 200a corresponds to “1” as the user ID. The ONU registration authentication unit 103b acquires "1" as the user ID. The ONU registration authentication unit 103b determines from the registration authentication history stored in the registration authentication history holding unit 105 whether or not the received ONU identifier is registered. When the received ONU identifier is registered in the registration authentication history, it does not respond to the connection request from the ONU 200a. When the received ONU identifier is not registered in the registration authentication history, the ONU registration authenticating unit 103b selects ONU identifiers other than the received ONU identifier stored in the correspondence table among the ONU identifiers corresponding to “1” as the user ID. Deauthorize the identifier. The ONU registration authentication unit 103b sets the received ONU as authenticated. The ONU registration authentication unit 103b adds "BB: BB: BB: BB: BB: BB" as the ONU identifier to the registration authentication history record of the user ID "1" in the registration authentication history.

  FIG. 11 is a flowchart showing the flow of authentication processing of the ONU 200a of the third embodiment. The ONU 200a is installed in the optical communication system 1 by the user. (Step S101). The ONU 200a transmits the ONU identifier to the OLT 100b and makes a connection request (step S102). The OLT 100b performs the authentication process based on the ONU identifier received from the ONU 200a (step S201).

  The ONU registration authentication unit 103b determines whether or not the received ONU identifier is stored in the registration authentication history based on the result of the authentication process (step S202). When the ONU identifier is not stored in the registration authentication history (step S202: YES), the ONU registration authenticating unit 103b cancels the authentication of the ONU identifiers other than the received ONU identifier stored in the correspondence table (step S203). The ONU registration authentication unit 103b sets the accepted ONU identifier stored in the correspondence table as authenticated (step S204). The ONU registration authentication unit 103b stores the received ONU identifier in the registration authentication history (step S205). The ONU registration authentication unit 103b acquires the LLID corresponding to the user ID from the LLID storage unit 104 (step S206). The ONU registration authentication unit 103b transmits the connection permission communication to the ONU 200a together with the LLID (step S207). When the authentication is not permitted (step S202: NO), the OLT 100b ends the process without responding to the ONU 200a.

  In the OLT 100b thus configured, the newly installed ONU is connected to the OLT only by being connected to the optical communication system 1. Therefore, even if the ONU fails, the user can more easily replace the failure.

  Although the embodiment of the present invention has been described in detail above with reference to the drawings, the specific configuration is not limited to this embodiment, and includes a design and the like within a range not departing from the gist of the present invention.

  INDUSTRIAL APPLICABILITY The present invention is applicable to a PON system in which a user exchanges ONUs with DIY.

1 ... Optical communication system, 100 ... OLT, 101 ... Communication part, 102 ... Correspondence table holding part, 103 ... ONU registration authentication part, 104 ... LLID storage part, 200 ... ONU, 300 ... Optical multiplexing / demultiplexing device, 100a ... OLT, 103a ... ONU registration authentication unit, 100b ... OLT, 103b ... ONU registration authentication unit, 105 ... Registration authentication history holding unit

Claims (3)

A communication unit that receives a connection request from the subscriber line terminating device, the connection request including the subscriber line terminating device identifier of the subscriber line terminating device;
A correspondence table holding unit that stores a correspondence table that associates a user identifier for identifying a user who uses the subscriber line terminating device with at least one or more subscriber line terminating devices;
A subscriber line terminating device registration / authentication unit that acquires a logical identifier by which the subscriber line terminating device determines whether or not the received information is information for its own device based on the user identifier,
Equipped with
When the subscriber line terminating device identifier included in the connection request is included in the correspondence table, the subscriber line terminating device registration authentication unit provides the subscriber with a connection response and the logical identifier in response to the connection request. Send to line terminator,
The subscriber line terminating device registration / authentication unit authenticates the subscriber line terminating device authentication device with any one of the subscriber line terminating devices among the at least one subscriber line terminating device identifier corresponding to the user identifier. In the case where the connection request is received from the subscriber line termination device different from the subscriber line termination device corresponding to the user identifier, the connection response is not transmitted.
Subscriber line termination device authenticator. A registration authentication history holding unit that stores a registration authentication history that holds a subscriber line termination device identifier connected to the subscriber line termination device authentication device for each user identifier,
The subscriber line terminating device registration / authentication unit receives authentication from a subscriber line terminating device identifier that is not stored in the registration authentication history among at least one of the subscriber line terminating device identifiers corresponding to the user identifier. In this case, if at least one of the subscriber line termination device identifiers is not stored in the registration authentication history, the subscriber line termination device other than the accepted subscriber line termination device identifier stored in the correspondence table Deauthorize the identifier,
The subscriber line termination device authentication device according to claim 1 . A communication step of receiving a connection request including a subscriber line termination device identifier of the subscriber line termination device from the subscriber line termination device;
A correspondence table holding step of storing a correspondence table that associates a user identifier for identifying a user who uses the subscriber line termination device with at least one or more subscriber line termination devices;
A subscriber line terminating device registration / authentication step of acquiring a logical identifier by which the subscriber line terminating device judges whether the received information is information for its own device based on the user identifier,
Have
In the subscriber line terminating device registration authentication step, when the subscriber line terminating device identifier included in the connection request is included in the correspondence table, a connection response and the logical identifier are sent to the subscriber in response to the connection request. Send to line terminator,
In the subscriber line termination device registration authentication step, the subscriber line termination device authentication device is authenticated with any one of the subscriber line termination device identifiers among at least one of the subscriber line termination device identifiers corresponding to the user identifier. In the case of, the connection response is not transmitted even if the connection request is received from a subscriber line termination device different from the subscriber line termination device corresponding to the user identifier,
Subscriber line termination device authentication method.

Images