Extending data over cable service interface specification (DOCSIS) provisioning of ethernet passive optical network (EPON) (DPoE) to EPON over coax (EPoC) multicast key management
Disclosed herein are mechanisms to support the management of multicast keys for a multicast group comprising one or more optical line terminals (OLTs), one or more fiber to coax units (FCUs), and a plurality of coax network units (CNUs). The disclosed embodiments may support the management of multicast keys over optical and coaxial networks. In some embodiments, an FCU may facilitate communication of operations, administration and maintenance (OAM) messages containing multicast keys from one or more OLTs to one or more CNUs (typically a plurality of CNUs). Some embodiments may employ one multicast key over both the optical network and coaxial network. Other embodiments may employ an optical domain multicast key over the optical network and an electrical domain multicast key over the coaxial network. Embodiments may comprise adding a first CNU to a multicast group as well as adding subsequent CNUs to the multicast group.
1. A fiber to coax unit (FCU) comprising:
a transmitter;
a receiver: and
a processor coupled to the transmitter and the receiver and configured to cause the FCU to:
receive an encrypted coaxial network unit (CNU) operations, administration and maintenance (OAM) message containing an electrical domain multicast key from an optical line terminal (OLT) via an optical network, wherein the OAM message is addressed to a CNU;
decrypt the encrypted CNU OAM message to read and store the electrical domain multicast key;
encrypt the OAM message with a CNU unicast key;
send the encrypted CNU OAM message to the CNU via a coaxial network;
receive an acknowledgment OAM message from the CNU;
snoop the acknowledgment OAM message to read and store acknowledgment OAM message information;
relay the acknowledgment OAM message from the CNU to the OLT; and
employ the electrical domain multicast key to encrypt multicast data transmitted to the CNU via the coaxial network.
2. The FCU of claim 1 , further comprising a memory coupled to the processor, wherein one or more CNU unicast keys, associated with one or more CNUs, is stored in the memory.
3. The FCU of claim 1 , wherein the processor is further configured to cause the FCU to:
receive a second encrypted CNU OAM message containing the electrical domain multicast key from the OLT via an optical network, wherein the OAM message is addressed to a second CNU;
decrypt the second encrypted CNU OAM message to read and store the electrical domain multicast key;
encrypt the second OAM message with a second CNU unicast key;
send the second encrypted CNU OAM message to the second CNU via a coaxial network;
receive a second acknowledgment OAM message from the second CNU;
snoop the second acknowledgment OAM message to read and store second acknowledgment OAM message information;
relay the second acknowledgment OAM message from the second CNU to the OLT; and
employ the electrical domain multicast key to encrypt multicast data transmitted to the second CNU via the coaxial network.
4. The FCU of claim 1 , wherein the FCU operates in bridge mode by maintaining separate security domains in an optical domain and an electrical domain.
5. The FCU of claim 1 , wherein the processor further causes the FCU to:
receive an encrypted FCU OAM message containing an optical domain multicast key from the OLT, wherein the encrypted FCU OAM message is addressed to the FCU;
decrypt the encrypted ECU OAM message to read and store the optical domain multicast key in a memory;
send an acknowledgment FCU OAM message to the OLT; and
employ the optical domain multicast key to decrypt multicast data received from the OLT.
6. The FCU of claim 5 , wherein the FCU receives the encrypted FCU OAM message before the FCU receives the encrypted CNU OAM message.
7. The FCU of claim 5 , wherein the FCU receives the encrypted CNU OAM message before the FCU receives the encrypted FCU OAM message.
8. A method, comprising:
receiving, at a receiver of a fiber to coax unit (FCU), an encrypted coaxial network unit (CNU) operations, administration and maintenance (OAM) message containing an electrical domain multicast key from an optical line terminal (OLT) via an optical network, wherein the OAM message is addressed to a CNU;
decrypting, by a processor of the FCU, the encrypted CNU OAM message to read and store the electrical domain multicast key;
encrypting, by the processor, the OAM message with a CNU unicast key;
sending, by a transmitter of the FCU, the encrypted CNU OAM message to the CNU via a coaxial network;
receiving, by the receiver, an acknowledgment OAM message from the CNU;
snooping, by the processor, the acknowledgment OAM message to read and store acknowledgment OAM message information;
relaying, by the transmitter, the acknowledgment OAM message from the CNU to the OLT; and
employing, by the processor, the electrical domain multicast key to encrypt multicast data transmitted to the CNU via the coaxial network.
9. The method of claim 8 , further comprising storing, in a memory coupled to the processor, one or more CNU unicast keys associated with one or more CNUs.
10. The method of claim 8 , further comprising:
receiving a second encrypted CNU OAM message containing the electrical domain multicast key from the OLT via an optical network, wherein the OAM message is addressed to a second CNU;
decrypting the second encrypted CNU OAM message to read and store the electrical domain multicast key;
encrypting the second OAM message with a second CNU unicast key;
sending the second encrypted CNU OAM message to the second CNU via a coaxial network;
receiving a second acknowledgment OAM message from the second CNU;
snooping the second acknowledgment OAM message to read and store second acknowledgment OAM message information;
relaying the second acknowledgment OAM message from the second CNU to the OLT; and
employing the electrical domain multicast key to encrypt multicast data transmitted to the second CNU via the coaxial network.
11. The method of claim 8 , wherein the FCU operates in bridge mode by maintaining separate security domains in an optical domain and an electrical domain.
12. The method of claim 8 , further comprising:
receiving an encrypted FCU OAM message containing an optical domain multicast key from the OLT, wherein the encrypted FCU OAM message is addressed to the FCU;
decrypting the encrypted FCU OAM message to read and store the optical domain multicast key in a memory;
sending an acknowledgment FCU OAM message to the OLT; and
employing the optical domain multicast key to decrypt multicast data received from the OLT.
13. The method of claim 12 , wherein the FCU receives the encrypted FCU OAM message before the FCU receives the encrypted CNU OAM message.
14. The method of claim 12 , wherein the FCU receives the encrypted CNU OAM message before the FCU receives the encrypted FCU OAM message.