基于SAML的电力企业集成服务智能登录系统设计

随着信息技术的发展,电力行业的信息安全已成为影响电力系统稳定运行的重要问题.其中确保访问主体身份的合法性是关键要素.文中针对下一代能量管理系统(EMS)/市场管理系统(MMS)体系结构中关于互操作性和安全性的需求,对其中的智能登录系统进行了研究.运用基于组件和以服务为导向的思想,采用安全声明标记语言(SAML)、可扩展标记语言(XML)、简单对象访问协议(SOAP)、Web服务安全技术(WS-Security)等最新的信息技术,设计了集中式用户身份认证管理、分布式授权访问管理的智能登录系统.通过模型的实例分析,论证了该模型符合未来电力系统所要求的便于集成和重用的设计开发原则.

SAML Based Intelligent Logging-on System in Electric Enterprise Integration Services

With the development of information technology, the information security has become crucial for the stability of power systems, and it is very important to ensure the validity of access entity. In consideration of the requirement on interoperability and security in the architecture of the next generation EMS/MMS, emphasis is placed on the issue of the intelligent logging-on system. Based on the module and service-oriented architecture, by using new information technologies such as security assertion markup language (SAML), extensible markup language (XML), simple object access protocol (SOAP), WS-Security etc, this paper describes the design of an intelligent logging-n system, which is centralized in the identity authentication management and distributed in the access authorization management. Through the analysis of an instance, this model is demonstrated to meet the requirements of future power systems on integration and reuse.