A group key management scheme based on distributed Path Computation Element (PCE) architecture was proposed aiming at the communication characteristics and key management requirement of multi-domain optical networks in PCE architecture. Firstly, the key relation of multi-domain optical network under distributed PCE architecture was modeled as a two-layer key hypergraph by using hypergraph theory. Then, the key management method based on self-authenticated public key cryptosystem and member filtering technique was adopted in the autonomous domain layer and the group key agreement method based on elliptic curve cryptosystem was adopted in the PCE layer. Finally, the generation, distribution, update and dynamic management of the key were completed, and the confidentiality problem of the private key of member and the impersonation problem of the third party node were well solved. At the same time, the computational overhead of key update was reduced. The performance analysis shows that the proposed scheme has forward security, backward security, private key confidentiality and is against collusion attack. Compared with the typical decentralized scheme, the proposed scheme achieves better performance in terms of key storage capacity, encryption/decryption times and communication overhead.

How to ensure the survivability of static multicast business has become a widespread concern in the multi-domain optical network of pre-configured multicast business. Concerning the above problem, by adopting the global topological information and scheduling calculation model based on hierarchical Path Computation Element (PCE) architecture, a bimatrix game model was used to generate link-disjoint multicast trees and multicast protected trees, finally hierarchical PCE-based and bimatrix game-based multicast dedicated protection algorithm was put forward under static state, and concrete examples of the algorithm were given. Theoretical analysis and experimental results show that under certain redundancy allocation of network resources, the proposed algorithm has low time complexity, and it can obviously improve the multicast business survivability in multi-domain optical network under static state, with optimizing resources allocation structure of protection work in the optimal multicast working trees and multicast protected trees at the same time.