System and method for authentication for transceivers

摘要

A method and apparatus of a network element that authenticates a transceiver and/or a field replaceable unit of the network element is described. The network element generates a stored transceiver signature using transceiver data stored in the removable transceiver and a nonce. In addition, the network element generates a hardware transceiver signature using data stored in secure storage of the network element and the nonce. If the stored transceiver signature and the hardware transceiver signature are equal, the network element uses the transceiver to communicate network data for the network element. Otherwise, the network element disables the transceiver.

主权项

1. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to authenticate a removable transceiver coupled to a network element, the method comprising:
receiving cryptographically signed transceiver data from the removable transceiver, wherein the cryptographically signed transceiver data is cryptographically signed with a key prior to the removable transceiver coupling to the network element using a type of cryptographic operation; generating a stored transceiver signature by re-cryptographically signing the cryptographically signed transceiver data using a nonce and the same type of cryptographic operation, the cryptographically signed transceiver data stored in the removable transceiver; generating a hardware transceiver signature using the nonce and data stored in a secure storage of the network element; and using the removable transceiver to communicate network data for the network element if the stored transceiver signature and the hardware transceiver signature are equal.