Multi-layer and multi-domain is the inevitable trend of the future large-scale optical interconnection networks.However

how to construct secure and reliable light-path or light-tree is a new problem under the condition of the lack of global information.In this paper

we first analyze the construction mechanism of light-path based on the Path Computation Element（PCE）architecture.Then we summarize the security threats of path computation phase and link establishment phase

which include active attack and passive attack.To deal with the issue of the identity authentication

data source authentication

encryption

digital signature and privacy protection

specific security mechanisms of the path construction of PCE communication Protocol（PCEP）and GMPLS RSVP-TE are proposed based on several technologies including Transport Layer Security（TLS）

identity-based cryptosystem

and authentication option of TCP.The proposed technique can enhance the confidentiality

integrity

authenticity

non-repudiation

freshness and privacy of the path construction of multi-domain optical networks.