KEY UPDATE METHOD, APPARATUS AND SYSTEM BASED ON OPTICAL TRANSPORT NETWORK (OTN)

摘要

A key update method, apparatus and system based on an optical transport network (OTN), comprising: when an encryption end detects that local configuration information is valid, detecting validity of decryption end readiness information received via a pre-set receiving overhead channel within a pre-set period of time; after determining that the decryption end readiness information is valid within the pre-set period of time, sending key update information about a local end to the decryption end via a pre-set sending overhead channel when a next pre-set cycle meets a pre-set condition; and when the next pre-set cycle, after the encryption end sends the key update information to the decryption end, meets the pre-set condition, encrypting service information sent to the decryption end by means of an updated key. By means of the technical solution, while ensuring the consistency of keys of an encryption end and a decryption end, it is also ensured that an intermittent service interruption does not occur and a service of an OTN device is not affected in a process of replacing new and old keys.