Techniques for secured partitioning of an optical transmission system to provide multi-client management access and a network management system implementing same

Abstract

A system and method consistent with the present disclosure allows for a single NMS system to manage data access and control for N number of customer domains and associated users. In particular, an NMS consistent with the present disclosure may include a configuration that partitions the optical communication system by domain. For each domain, partitioning can further define per-user access constraints and privileges including access to specific equipment by, for instance, fiber pair designation, wavelength designation, specifically identified hardware elements, component categories, or any combination thereof. The NMS system may utilize a proxy server approach to authentication, e.g., using RADIUS, that allows for each party/customer to maintain separate authentication databases and equipment-specific constraints. The NMS may therefore validate users and enforce domain restrictions via the partitioning information such that each user has a secure 'view' of only those portions of the system associated with their particular domain.