摘要： 为解决以太无源光网络下行数据传输的不安全性问题，提出一种基于时间标签函数的加密方案。将高级加密标准算法与时间标签相结合形成密钥，完成下行数据的加密，通过在光线路终端和光网络单元两端增加一个加/解密模块，避免密钥通过不安全的信道传输，并给出时间标签提取与同步以及密钥动态更新与同步问题的解决方案。实验结果表明，与传统加密方案相比，该方案具有延时低、吞吐量高、安全性高等优点。

关键词: 时间标签, 以太无源光网络, 高级加密标准算法, 下行加密, MixColumns变换

Abstract: In order to solve security problem of downstream data transmission of Ethernet Passive Optical Network(EPON), this paper presents a new encryption scheme based on timestamp function. It combines Advanced Encryption Standard(AES) algorithm with timestamp to form keys for encrypting downstream data. By adding an encryption/decryption module in both Optical Line Terminal(OLT) and Optical Network Unit(ONU), unsafe keys transmission through channel can be avoided. The extraction and synchronization of timestamp, along with the dynamic update and synchronization of keys, are released. Experimental results show that the method has the advantages of low delay, high throughput and high security compared with the traditional encryption algorithm.

Key words: timestamp, Ethernet Passive Optical Network(EPON), Advanced Encryption Standard(AES) algorithm, downstream encryption, MixColumns shift

中图分类号: 

• TP309.2