PON optical layer physical signature authentication method and optical network equipment

The invention discloses a PON (Passive Optical Network) optical layer physical signature authentication method, which comprises the following steps of: because a spectral characteristic curve of a wavelength division multiplexing WDM optical filter in PON equipment is influenced by different factors during production and assembly, representing different unique ONU characteristics by each ONU due to different factors of each built-in WDM filter; forming an optical fingerprint according to the represented ONU characteristics; and performing PON optical layer physical signature and authentication according to the obtained optical fingerprint, thereby realizing access security of the PON. Compared with a password authentication mode, the fingerprint features are not easy to obtain through monitoring or attacking; according to the method, the required hardware is simple, the cost is low, and the method is easy to implement. The invention also provides the optical network equipment for realizing the PON optical lay