An integrated security scheme for 10Gbit/s EPON is proposed to prevent eavesdropping and masquerading threats to sensitive data caused by its point-to-multi-point topology.This scheme includes a bilateral authentication method combining with key exchange protocol and an encryption algorithm based on the timestamp.The authentication method can verify the OLT and ONU during the registration process and the encryption algorithm adopts timestamp in the frameto generate time-varying cipher keys.The validity of the proposed scheme is demonstrated in the experiment.