The Study On Security Technologies Of 10G EPON

With the rapid development of Internet technology, user's demand on access network bandwidth is increasing. The existing access network with G/10G bit rate, such as EPON,10G EPON are providing us with efficient data transfer rate, but they are also facing much more serious security threat. The conventional encryption and authentication technology can not meet the security demand any more. Therefore, how to protect the safety of high-speed network communications effectively becomes a research hotspot. This thesis has a deeply study based on the new authenticated encryption standard which is the GCM (Galois/ Counter Mode) authenticated encryption algorithm according to the safety of 10G EPON network. We design the authentication mechanism based on GMAC, using the GMAC authentication tag to ensure the information reliability. At last, we propose a 10G EPON security mechanism based on GMAC and AES, and a mechanism based on GMAC and improved Churning algorithm. This can assure the GE Ethernet a secure data transmission environment.This thesis's main work and relative summing-up are as following:1.Track the standardization progress of 1G EPON and 10G EPON, and analyze the system architecture on detail. Have a deep study on the security of 1G EPON networks and introduce its solutions, then analyze the security problems that 10G EPON is facing. 2.Give a detailed analysis on the authentication technology which takes a very important role in security area. Propose an authentication mechanism of 10G EPON based on GMAC, and design the authentication details including ONU and USER authentication process, and so on. This build a solid foundation for the security solutions of 10G EPON system.3. Propose a security mechanism for 10G EPON based on GMAC and AES, and give detailed planning and analysis. In this mechanism, we use GMAC in the authentication part and AES in the encryption part. This paper also proposes a new key update and synchronization mechanism combined with GCM, which can ensure the security and reliability of the key-exchanging process. At the same time, participate in proposing the standard proposal:"Research for Security of Next Generation PON"4. Propose a security mechanism of 10G EPON based on GMAC and Churning algorithm. In this mechanism, we use GMAC in the authentication part and improved Churning algorithm in the encryption part. This improved algorithm can support the encryption of the data above 10Gbps rate in 10G EPON system.The full text is as follows:The 1st chapter discusses the research background, the access network technology and safety problems, and points out the significance of the research and major research.The 2nd chapter gives a tracking study on the standardization process of 1G EPON and 10G EPON, and their system architecture, security analysis and so on.The 3rd chapter detailed describes the authentication technology, and proposes a 10G EPON authentication scheme combined with GMAC, and gives a detailed planning.The 4th chapter proposes a 10G EPON security solution based on GMAC and AES, and a 10G EPON security solution based on GMAC and improved Churning algorithm, and gives detailed design on the two solutions both on encryption and authentication part.The 5th chapter summary research results of this paper.