WO2009131858A3 - Method and apparatus for data privacy in passive optical networks - Google Patents

Method and apparatus for data privacy in passive optical networks Download PDF

Info

Publication number
WO2009131858A3
WO2009131858A3 PCT/US2009/040330 US2009040330W WO2009131858A3 WO 2009131858 A3 WO2009131858 A3 WO 2009131858A3 US 2009040330 W US2009040330 W US 2009040330W WO 2009131858 A3 WO2009131858 A3 WO 2009131858A3
Authority
WO
WIPO (PCT)
Prior art keywords
local
counter
remote
data frame
input block
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2009/040330
Other languages
French (fr)
Other versions
WO2009131858A2 (en
Inventor
Ryan E. Hirth
Edward W. Boyd
Ngo Thanh Ho
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Teknovus Inc
Original Assignee
Teknovus Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Teknovus Inc filed Critical Teknovus Inc
Priority to CN200980114981.XA priority Critical patent/CN102037663B/en
Priority to EP09733931A priority patent/EP2291931A2/en
Publication of WO2009131858A2 publication Critical patent/WO2009131858A2/en
Publication of WO2009131858A3 publication Critical patent/WO2009131858A3/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/12—Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0838—Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Small-Scale Networks (AREA)

Abstract

One embodiment provides a system for decrypting data frames in an Ethernet passive optical network (EPON). During operation, the system maintains a local cipher counter at a local node, and receives from a remote node a data frame which is encrypted based on a remote input block and a session key. The remote input block is constructed based on the remote cipher counter and a remote block counter. The system updates the local cipher counter based on a received field located in a preamble of the data frame, truncates the local cipher counter by discarding a number of least significant bits, and constructs for the received data frame a local input block based on the truncated local cipher counter, the received field, and a local block counter. The system then decrypts the data frame based on the local input block and the session key.
PCT/US2009/040330 2008-04-21 2009-04-13 Method and apparatus for data privacy in passive optical networks Ceased WO2009131858A2 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN200980114981.XA CN102037663B (en) 2008-04-21 2009-04-13 Method and device for data security in passive optical network
EP09733931A EP2291931A2 (en) 2008-04-21 2009-04-13 Method and apparatus for data privacy in passive optical networks

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US4665408P 2008-04-21 2008-04-21
US61/046,654 2008-04-21
US12/414,963 US8335316B2 (en) 2008-04-21 2009-03-31 Method and apparatus for data privacy in passive optical networks
US12/414,963 2009-03-31

Publications (2)

Publication Number Publication Date
WO2009131858A2 WO2009131858A2 (en) 2009-10-29
WO2009131858A3 true WO2009131858A3 (en) 2010-01-07

Family

ID=41201110

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2009/040330 Ceased WO2009131858A2 (en) 2008-04-21 2009-04-13 Method and apparatus for data privacy in passive optical networks

Country Status (5)

Country Link
US (1) US8335316B2 (en)
EP (1) EP2291931A2 (en)
CN (1) CN102037663B (en)
TW (1) TWI472214B (en)
WO (1) WO2009131858A2 (en)

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2010183494A (en) * 2009-02-09 2010-08-19 Hitachi Ltd Optical network system, and method of switching encryption key
US8693688B2 (en) * 2009-03-03 2014-04-08 Intel Corporation Adaptive packet ciphering
CN101888268B (en) * 2009-05-14 2013-09-11 中兴通讯股份有限公司 Method and device for realizing backbone optical fiber protection in Ethernet passive optical network
US8812833B2 (en) * 2009-06-24 2014-08-19 Marvell World Trade Ltd. Wireless multiband security
US8560848B2 (en) 2009-09-02 2013-10-15 Marvell World Trade Ltd. Galois/counter mode encryption in a wireless network
US8839372B2 (en) * 2009-12-23 2014-09-16 Marvell World Trade Ltd. Station-to-station security associations in personal basic service sets
US8718281B2 (en) * 2010-04-08 2014-05-06 Cisco Technology, Inc. Rekey scheme on high speed links
CN103138924B (en) * 2011-11-24 2017-12-08 中兴通讯股份有限公司 Scrambled data frame decryption method and device in a kind of EPON system
CN102412962B (en) * 2011-12-23 2018-07-20 南京中兴新软件有限责任公司 The distribution method and device of group secure connection joint ciphering key AK
FR3009163B1 (en) * 2013-07-25 2015-09-04 Thales Sa METHOD FOR SECURITY EXCHANGE OF DATA ON AN AD-HOC NETWORK USING XCAST BROADCAST SERVICE; ASSOCIATED NODE
CN103746814B (en) 2014-01-27 2018-04-20 华为技术有限公司 A kind of encrypting and decrypting methods and equipment
US9843446B2 (en) * 2014-10-14 2017-12-12 Dropbox, Inc. System and method for rotating client security keys
EP3228044B1 (en) * 2014-12-03 2019-02-20 Nagravision S.A. Block cryptographic method for encrypting/decrypting messages and cryptographic devices for implementing this method
EP3316528B1 (en) * 2015-07-17 2021-06-30 Huawei Technologies Co., Ltd. Packet transmission method, apparatus and system
JP2017135461A (en) * 2016-01-25 2017-08-03 三菱電機株式会社 Subscriber termination device, station side termination device, optical signal transmission device, and communication system
FR3052896A1 (en) * 2016-06-16 2017-12-22 Sigfox METHOD AND DEVICE FOR TRANSMITTING DIGIT DATA, METHOD AND DEVICE FOR EXTRACTING DATA
FR3058604B1 (en) * 2016-11-09 2022-12-16 Sigfox METHOD AND DEVICE FOR TRANSMITTING ENCRYPTED DATA, METHOD AND DEVICE FOR DATA EXTRACTION
US11394701B2 (en) * 2017-11-01 2022-07-19 Hewlett-Packard Development Company, L.P. Non-compliance event notifications to companion devices
US11190528B2 (en) * 2017-11-28 2021-11-30 Avago Technologies International Sales Pte. Limited Light-weight mechanism for checking message integrity in data packets
DE102018212361A1 (en) * 2018-07-25 2020-01-30 Robert Bosch Gmbh First vehicle-side terminal, method for operating the first terminal, second vehicle-side terminal and method for operating the second vehicle-side terminal
US10887289B2 (en) * 2018-08-21 2021-01-05 Fujitsu Limited Encryption in optical transport networks using multiple randomly selected keys
US12238076B2 (en) * 2018-10-02 2025-02-25 Arista Networks, Inc. In-line encryption of network data
US11343672B2 (en) * 2019-02-20 2022-05-24 Coretigo Ltd. Secure communication encryption and decryption mechanism in a wireless communication system
US11316869B2 (en) * 2019-12-10 2022-04-26 Cisco Technology, Inc. Systems and methods for providing attestation of data integrity
CN114698149A (en) * 2020-01-21 2022-07-01 华为技术有限公司 Data transmission method and equipment
DE102020114081A1 (en) * 2020-05-26 2021-12-02 Krohne Messtechnik Gmbh Method for synchronizing a receiver initialization vector with a transmitter initialization vector
CN115913518B (en) * 2022-11-10 2026-01-30 山东大学 A GCM Optimization Method and System Based on Block Cipher Algorithms and Bit Slicing
US12495230B2 (en) 2023-11-20 2025-12-09 Ciena Corporation Rangeless failover in PON protection switching

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040028409A1 (en) * 2002-08-07 2004-02-12 Kim A-Jung Method for transmitting security data in Ethernet passive optical network system
US20040073788A1 (en) * 2002-10-02 2004-04-15 Kim A-Jung Method of transmitting security data in an ethernet passive optical network system
US20040136712A1 (en) * 2003-01-13 2004-07-15 Globespan Virata Incorporated Integrated PON processor
US20050201554A1 (en) * 2004-03-11 2005-09-15 Glen Kramer Method for data encryption in an ethernet passive optical network
US20060136715A1 (en) * 2004-12-22 2006-06-22 Kyeong Soo Han MAC security entity for link security entity and transmitting and receiving method therefor
US20070133791A1 (en) * 2005-12-07 2007-06-14 Electronics And Telecommunications Research Institute Method for controlling security channel in MAC security network and terminal using the same

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4654480A (en) * 1985-11-26 1987-03-31 Weiss Jeffrey A Method and apparatus for synchronizing encrypting and decrypting systems
SE465797B (en) * 1990-03-07 1991-10-28 Ericsson Telefon Ab L M PROCEDURE TO TRANSFER SYNCHRONIZATION INFORMATION FOR CRYPED TRANSFER IN A MOBILE RADIO SYSTEM
US6870836B1 (en) 2000-03-31 2005-03-22 Nortel Networks Limited System and method for transfer of IP data in an optical communication networks
US20020044651A1 (en) * 2000-05-16 2002-04-18 Tuvell Walter E. Method and apparatus for improving the security of cryptographic ciphers
WO2003007518A2 (en) * 2001-07-10 2003-01-23 Salira Optical Network Systems, Inc Allocation of upstream bandwidth in an ethernet passive optical network
KR100450771B1 (en) * 2002-11-04 2004-10-01 한국전자통신연구원 Method for controlling upstream data of Ethernet PON and apparatus thereof
US8027473B2 (en) 2003-01-13 2011-09-27 Conexant Systems, Inc. System and method for improved data protection in PONs
US7406103B2 (en) 2003-02-24 2008-07-29 Samsung Electronics Co, Ltd. Method and apparatus for transmitting data in Gigabit Ethernet passive optical network
KR100523357B1 (en) 2003-07-09 2005-10-25 한국전자통신연구원 Key management device and method for providing security service in epon
KR100547724B1 (en) 2003-08-26 2006-01-31 삼성전자주식회사 Passive optical subscriber network based on Gigabit Ethernet that can stably transmit data and data encryption method using same
CN1326340C (en) * 2003-10-21 2007-07-11 华为技术有限公司 Device and method for dynamic bandwidth allocation in passive optical network
US8144701B2 (en) * 2005-01-03 2012-03-27 Nokia Corporation Method and device of frame number encoding for synchronization of electronic devices
US8656480B2 (en) * 2005-03-17 2014-02-18 Samsung Electronics Co., Ltd Method for negotiating security-related functions of subscriber station in wireless portable internet system
US7921463B2 (en) * 2005-09-30 2011-04-05 Intel Corporation Methods and apparatus for providing an insertion and integrity protection system associated with a wireless communication platform
US7508803B2 (en) * 2006-09-07 2009-03-24 Motorola, Inc. Transporting management traffic through a multi-hop mesh network
JP4081724B1 (en) * 2006-12-27 2008-04-30 日本電気株式会社 Client terminal, relay server, communication system, and communication method
KR101191491B1 (en) * 2007-06-18 2012-10-15 엘지전자 주식회사 Downlink packet data convergence protocol behavior during handover

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040028409A1 (en) * 2002-08-07 2004-02-12 Kim A-Jung Method for transmitting security data in Ethernet passive optical network system
US20040073788A1 (en) * 2002-10-02 2004-04-15 Kim A-Jung Method of transmitting security data in an ethernet passive optical network system
US20040136712A1 (en) * 2003-01-13 2004-07-15 Globespan Virata Incorporated Integrated PON processor
US20050201554A1 (en) * 2004-03-11 2005-09-15 Glen Kramer Method for data encryption in an ethernet passive optical network
US20060136715A1 (en) * 2004-12-22 2006-06-22 Kyeong Soo Han MAC security entity for link security entity and transmitting and receiving method therefor
US20070133791A1 (en) * 2005-12-07 2007-06-14 Electronics And Telecommunications Research Institute Method for controlling security channel in MAC security network and terminal using the same

Also Published As

Publication number Publication date
US20090262937A1 (en) 2009-10-22
CN102037663A (en) 2011-04-27
CN102037663B (en) 2015-10-21
WO2009131858A2 (en) 2009-10-29
TW201004263A (en) 2010-01-16
EP2291931A2 (en) 2011-03-09
US8335316B2 (en) 2012-12-18
TWI472214B (en) 2015-02-01

Similar Documents

Publication Publication Date Title
WO2005086950A3 (en) Method for data encryption in an ethernet passive optical network
WO2012033379A3 (en) Method and apparatus of cipher communication for management frame using quality of service mechanism in wireless local area network system
US20220255736A1 (en) Quantum key distribution method, device, and system
JP5785346B1 (en) Switching facility and data processing method supporting link layer security transmission
WO2007069236A3 (en) Method and system for usage of block cipher encryption
WO2008042175A3 (en) Key wrapping system and method using encryption
US9509414B2 (en) Encryption and decryption method and device
AR058741A1 (en) METHOD AND APPLIANCE TO SECURE DATA AND IMPLEMENTATION OF AUTOMATIC REPETITION ORDER IN A WIRELESS COMMUNICATION SYSTEM
MX2023010188A (en) Methods and apparatuses for privacy enhancement through mac address masquerading.
CA2798004C (en) An authentication of encrypted data blocks
WO2010045044A3 (en) Method and device for sending encryption parameters
KR101608815B1 (en) Method and system for providing service encryption in closed type network
JP2011120051A5 (en)
WO2009145495A3 (en) Method and apparatus for providing broadcast service using encryption key in a communication system
WO2008005913A3 (en) Method and apparatus for secure communications
WO2008105834A3 (en) Re-encrypting policy enforcement point
WO2005077134A3 (en) A method and apparatus for a per-packet encryption system
CA2594385A1 (en) Apparatus and method for ciphering/deciphering a signal in a communication system
CN101388829A (en) Relocation signaling and data encryption method, system and radio network controller
CN101938741A (en) Method, system and device for mutual authentication
WO2010057194A3 (en) Storage security using cryptographic splitting
SE1751566A1 (en) Encryption methods and devices
CN102264013A (en) EPON encryption method based on time tag
CN102035642B (en) Selection and synchronization method for counter in block cipher counter running mode
CA2537083A1 (en) Early detection system and method for encrypted signals within packet networks

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 200980114981.X

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09733931

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 2009733931

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE