PKI和PMI安全方案在电力数据申报系统中的实现

电力市场技术支持系统中存在冒充、越权、否认和泄密等威胁,因此安全方案对电力数据申报系统至关重要。文章首先提出通过公钥证书和采用数字签名技术来验证系统用户的合法性,然后根据电力市场技术支持系统用户的分布性和业务操作的时间性,提出了一种具有时空约束的基于角色的访问控制模型,使用属性证书作为用户角色和权限的分配载体,以保证用户的合法操作。最后将上述的安全方法应用于电力市场数据申报子系统中,验证了安全方案的有效性。

Realization of network information security based on PKI and PMI in power data process system

Because of the risks of impersonate,ultra vires,denial and divulgence happen in technical support system of power market,an security scheme is very important for power data process system.This paper first introduces the legitimacy verification on system users by using public key certificates and digital signature technology.And then,based on the distribution of users and the timeliness of service operation,a role-based access control model with space-time constraints is proposed.This model uses attribute ce...