New Security Improvements in Next-Generation Passive Optical Networks Stage 2

dc.contributor.authorČlupek, Vlastimilcs
dc.contributor.authorHorváth, Tomášcs
dc.contributor.authorMünster, Petrcs
dc.contributor.authorOujezský, Václavcs
dc.coverage.issue20cs
dc.coverage.volume9cs
dc.date.accessioned2020-08-04T11:01:00Z
dc.date.available2020-08-04T11:01:00Z
dc.date.issued2019-10-25cs
dc.description.abstractPassive optical networks are currently the most promising solution for access networks. These networks rely on broadcast signal distribution in the downstream direction and unicast signal transmission in the upstream direction. The upstream direction is controlled by optical line termination (OLT). The broadcast transmission method increases security vulnerability because the attacker is able to connect his/her modified optical network unit (ONU) to the free port of the splitter (commonly in the basement). We present the concept for the activation process of ONUs based on physical unclonable function (PUF) for next-generation passive optical networks stage 2 (NG-PON2). The use of PUF increases security in the NG-PON2. Furthermore, the registration identifier (ID) is not stored in a nonvolatile memory, in comparison with the common solution defined by the International Telecommunication Union (ITU) recommendation G.989.3. An attacker cannot perform a reverse engineering attack to obtain the registration ID. For this reason, the attacker cannot clone an ONU. We proposed security improvements that involve authentication, encryption, integrity protection, and data origin verification methods in the NG-PON2. Our model uses the standard implementation of the transmission convergence layer of NG-PON2 with the new physical layer operations, administration, and maintenance (PLOAM) messages. The recommendation G.989.3 allows specifying own PLOAM messages since not all IDs are used in the current specification.en
dc.formattextcs
dc.format.extent1-16cs
dc.format.mimetypeapplication/pdfcs
dc.identifier.citationApplied Sciences - Basel. 2019, vol. 9, issue 20, p. 1-16.en
dc.identifier.doi10.3390/app9204430cs
dc.identifier.issn2076-3417cs
dc.identifier.other159359cs
dc.identifier.urihttp://hdl.handle.net/11012/184117
dc.language.isoencs
dc.publisherMDPIcs
dc.relation.ispartofApplied Sciences - Baselcs
dc.relation.urihttps://www.mdpi.com/2076-3417/9/20/4430cs
dc.rightsCreative Commons Attribution 4.0 Internationalcs
dc.rights.accessopenAccesscs
dc.rights.sherpahttp://www.sherpa.ac.uk/romeo/issn/2076-3417/cs
dc.rights.urihttp://creativecommons.org/licenses/by/4.0/cs
dc.subjectNG-PON2en
dc.subjectphysical unclonable functionen
dc.subjecttransmission convergence layeren
dc.subjectPLOAM messagesen
dc.subjectsecurityen
dc.titleNew Security Improvements in Next-Generation Passive Optical Networks Stage 2en
dc.type.driverarticleen
dc.type.statusPeer-revieweden
dc.type.versionpublishedVersionen
sync.item.dbidVAV-159359en
sync.item.dbtypeVAVen
sync.item.insts2020.09.02 13:54:53en
sync.item.modts2020.09.02 13:39:50en
thesis.grantorVysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií. Ústav telekomunikacícs
thesis.grantorVysoké učení technické v Brně. . CESNET, zájmové sdružení právnických osobcs
Files
Original bundle
Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
applsci0904430v2.pdf
Size:
1.25 MB
Format:
Adobe Portable Document Format
Description:
applsci0904430v2.pdf