Design of Authentication and Key Exchange Protocol in Ethernet Passive Optical Networks

摘要

An EPON has security threats because it is a broadcast architecture that consists of one OLT and multiple ONUs. So the EPON needs strong security services of authentication, confidentiality and access control. In this paper, we analyze general and EPON-specific threats and propose an authentication and key exchange protocol based on the public key mechanism. We design the security protocol in EPON MAC layer for reducing the overhead of security service. User authentication and ONU authentication are performed separately for efficient key management and strong authentication service. We design the efficient key exchange protocol using derived session key by exchanging the random number. The proposed protocol is verified in the view of known key secrecy, key compromise impersonation, explicit key authentication and unknown key-share.