Detail publikace

New Security Improvements in Next-Generation Passive Optical Networks Stage 2

ČLUPEK, V. HORVÁTH, T. MÜNSTER, P. OUJEZSKÝ, V.

Originální název

New Security Improvements in Next-Generation Passive Optical Networks Stage 2

Typ

článek v časopise ve Web of Science, Jimp

Jazyk

angličtina

Originální abstrakt

Passive optical networks are currently the most promising solution for access networks. These networks rely on broadcast signal distribution in the downstream direction and unicast signal transmission in the upstream direction. The upstream direction is controlled by optical line termination (OLT). The broadcast transmission method increases security vulnerability because the attacker is able to connect his/her modified optical network unit (ONU) to the free port of the splitter (commonly in the basement). We present the concept for the activation process of ONUs based on physical unclonable function (PUF) for next-generation passive optical networks stage 2 (NG-PON2). The use of PUF increases security in the NG-PON2. Furthermore, the registration identifier (ID) is not stored in a nonvolatile memory, in comparison with the common solution defined by the International Telecommunication Union (ITU) recommendation G.989.3. An attacker cannot perform a reverse engineering attack to obtain the registration ID. For this reason, the attacker cannot clone an ONU. We proposed security improvements that involve authentication, encryption, integrity protection, and data origin verification methods in the NG-PON2. Our model uses the standard implementation of the transmission convergence layer of NG-PON2 with the new physical layer operations, administration, and maintenance (PLOAM) messages. The recommendation G.989.3 allows specifying own PLOAM messages since not all IDs are used in the current specification.

Klíčová slova

NG-PON2; physical unclonable function; transmission convergence layer; PLOAM messages; security

Autoři

ČLUPEK, V.; HORVÁTH, T.; MÜNSTER, P.; OUJEZSKÝ, V.

Vydáno

25. 10. 2019

Nakladatel

MDPI

Místo

Bassel, Švýcarsko

ISSN

2076-3417

Periodikum

Applied Sciences - Basel

Ročník

9

Číslo

20

Stát

Švýcarská konfederace

Strany od

1

Strany do

16

Strany počet

16

URL

https://www.mdpi.com/2076-3417/9/20/4430

Plný text v Digitální knihovně

http://hdl.handle.net/11012/184117

BibTex

@article{BUT159359,
  author="Vlastimil {Člupek} and Tomáš {Horváth} and Petr {Münster} and Václav {Oujezský}",
  title="New Security Improvements in Next-Generation Passive Optical Networks Stage 2",
  journal="Applied Sciences - Basel",
  year="2019",
  volume="9",
  number="20",
  pages="1--16",
  doi="10.3390/app9204430",
  issn="2076-3417",
  url="https://www.mdpi.com/2076-3417/9/20/4430"
}