10 Gbit/s ethernet passive optical network certification scheme based on number theory research unit signature algorithm

摘要

The article is mainly to solve the security problems existing in ethernet passive optical network. The most obvious thing is that when optical network unit (ONU) is registered, to prevent attackers from eavesdropping and camouflage, we need mutual authentication between the optical line terminal and ONU to ensure the legality of both sides. To solve this problem, this paper designs a bidirectional authentication scheme based on number theory research unit signature algorithm (NTRUSign), using NTRUSign algorithm for authentication, can avoid impersonation attacks but could not prevent the middle eavesdropping attacks, so the data encryption algorithm AES using the traditional transmission of encrypted. Elliptic curve Diffie-Hellman algorithm is used to carry out key exchange, as the key to the subsequent data transmission, and can be completed in the ONU registration process without the need of third-party participation. The analysis results show that this method improves the reliability of identity authentication and data transmission security.