Enhancing WDM-PON Security Using Hybrid Elliptic Curve Cryptography Techniques

Wavelength Division Multiplexing Passive Optical Network (WDM-PON) is an advanced optical access technology that offers high bandwidth, dedicated point-to-point communication, and enhanced scalability by assigning a unique wavelength to each Optical Network Terminal (ONT). ONT serves as the interface between the optical fiber network and the user’s premises. This architecture significantly improves performance, reduces latency, and allows efficient service differentiation, making it ideal for next-generation broadband access networks. However, despite its technical advantages, WDM-PON inherits several security challenges due to its shared physical infrastructure. Potential threats include eavesdropping, unauthorized access, man-in-the-middle (MITM) attacks, key distribution vulnerabilities, physical layer attacks, jamming and interference, fault isolation, and lack of encryption. To address these issues, cryptographic techniques such as the Elliptic Curve Diffie-Hellman (ECDH) for secure key exchange, the Elliptic Curve Digital Signature Algorithm (ECDSA) for authentication, and robust encryption methods are employed. These tools ensure data confidentiality, integrity, and authenticity while maintaining the low-latency, high-efficiency nature of the WDM-PON system.