A lightweight two-way authentication scheme between communication nodes for software defined optical access network

• Published in: IEEE access Vol. 7; p. 1
• Main Authors: Tang, Yongli, Liu, Tao, He, Xu, Yu, Jinxia, Qin, Panke
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 01.01.2019; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Algorithms; Authentication; Binding; Communication; Cryptography; Electronic devices; Forging; Lightweight; Nodes; OLT; openflow; optical access network; Optical communication; Optical fiber networks; Process control; Protocols; SDN; Security; Software-defined networking; Switches
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2019.2941084

For the rapid increase in the number of optical line terminals (OLTs) and optical network units (ONUs) connected to the control center in the software defined optical access network (SDOAN) environment, the security problems caused by the communication between devices and the high cost caused by the introduction of security schemes, we propose a lightweight identity twoway authentication scheme (LTWA) based on the cryptographically generated address (CGA) algorithm combined with the hash generated address (HGA) algorithm. The scheme introduces the CGA algorithm and the HGA algorithm without third party participation, so as to complete the first authentication binding and the non-first authentication binding between the communication nodes respectively, which effectively prevents an attacker from forging or tampering with authentication interaction messages, thereby establishing an end-toend trusted connection in the access network. We experimentally verify the proposed LTWA scheme. The simulation results show that the scheme guarantees the security interaction between communication nodes, and reduces the average computational overhead and the blocking rate caused by malicious attacks.