A novel dynamic multi-service multi-grade encryption scheme used in EPON

Ethernet Passive optical network (EPON) considered as an efficient solution for high-speed bandwidth data transmission, is a promising candidate for next generation access network with safety problems such as eavesdropping, forgery and tampering because of its point-to-multipoint (P2MP) shared topology structure and broadcasted data pattern in the downstream direction. Besides, under multi-service circumstances, both encrypting efficiency and effective transmission of high-speed data can be difficult to be guaranteed when traditional single static encryption (TSSE) mechanism focusing on only one encryption method based on DES, AES or TAES for all business flows is adopted. To solve these problems, a multi-service multi-grade encryption (MSMGE) mechanism is presented. In MSMGE, service flows from providers are first divided into four queues according to differentiated service (DiffServ) model, then encrypted by calling relative encryption method on the basis of different security needs of different services and the simulation results indicate the validity of the proposed MSMGE mechanism in packet loss rate and integrity of data transmission.