Patent ID: 9032209
Filing Date: 2015-05-12
Classification: H04L,H04Q

Abstract:
1. A network apparatus comprising: at least one processor coupled to a memory and configured to: exchange security information using a plurality of attributes in a management entity (ME) in an optical network unit (ONU) via an ONU management and control interface (OMCI) channel, wherein the ME is an abstract representation of resources and services in the ONU, wherein the attributes provide security features for the ONU and an optical line terminal (OLT), wherein the security features comprise a security capability discovery function, an ONU authentication function, an OLT authentication function, and a key privacy function, wherein the ONU authentication function allows the OLT to send a nonce to the ME and obtain a hashed combination of the nonce and a mutual shared secret between the ONU and the OLT from the ME, and wherein the OLT compares the hashed combination with a computed value to authenticate the ONU.