Tian Jianuo, Qin Panke, Zhao Zongqu, Qin Baodong
Jiaozuo Technician College, Jiaozuo 454000, China.
School of Software, Henan Polytechnic University, Jiaozuo 454000, China.
Entropy (Basel). 2025 Jan 27;27(2):135. doi: 10.3390/e27020135.
In the context of increasing demand for secure and efficient communication networks, addressing the issue of mutual authentication in ethernet passive optical networks (EPONs) has become both valuable and practically significant. This paper proposes a solution based on ideal lattices. The proposed scheme leverages the security of the ring learning with errors (RLWE) problem to establish a robust public-key cryptosystem. By involving ONUs, OLTs, and an SDN controller in the authentication process, it enables mutual authentication through a series of message exchanges facilitated by the SDN controller. Utilizing approximate smooth projection hash functions for secure key exchange and verification, the scheme ensures robust security performance against various attacks, including man-in-the-middle, impersonation, replay, and known key secrecy attacks. Simulation results demonstrate that the proposed solution introduces minimal delay and maintains a high registration success rate compared to traditional authentication methods. Additionally, this paper explores the convergence of quantum network protocols with EPONs, highlighting their potential to achieve unprecedented levels of communication security. Integrating quantum technology with EPON networks, due to the unique security properties of quantum, can also better prevent man-in-the-middle attacks. Secure interception detection techniques based on fundamental quantum properties provide a fundamental security direction for future communication systems, aligning with the growing interest in quantum-resistant cryptographic protocols.
在对安全高效通信网络的需求不断增加的背景下,解决以太网无源光网络(EPON)中的相互认证问题变得既具有价值又具有实际意义。本文提出了一种基于理想格的解决方案。所提出的方案利用带误差的环学习(RLWE)问题的安全性来建立一个强大的公钥密码系统。通过在认证过程中纳入光网络单元(ONU)、光线路终端(OLT)和软件定义网络(SDN)控制器,它通过SDN控制器促进的一系列消息交换实现相互认证。该方案利用近似平滑投影哈希函数进行安全的密钥交换和验证,确保针对各种攻击(包括中间人攻击、伪装攻击、重放攻击和已知密钥保密性攻击)具有强大的安全性能。仿真结果表明,与传统认证方法相比,所提出的解决方案引入的延迟最小,并保持较高的注册成功率。此外,本文探讨了量子网络协议与EPON的融合,强调了它们实现前所未有的通信安全水平的潜力。由于量子具有独特的安全特性,将量子技术与EPON网络集成还可以更好地防止中间人攻击。基于基本量子特性的安全拦截检测技术为未来通信系统提供了一个基本的安全方向,这与对量子抗性密码协议日益增长的兴趣相一致。