变电站自动化远程通信多粒度访问控制系统设计  

Design of Multi-Granularity Access Control System of Substation Automation Remote Communication

作　　者：吴亚联[1] 段斌[1] 胡洪波[1] 刘念[1] 

机构地区：[1]湘潭大学信息工程学院,湖南湘潭411105

出　　处：《湘潭大学自然科学学报》2007年第1期96-101,共6页Natural Science Journal of Xiangtan University

基　　金：湖南省自然科学基金资助项目(05JJ30209)

摘　　要：根据变电站自动化系统对访问控制的需求,分析了IED设备信息模型和信息交换服务这两种访问控制的操作对象,通过对其粒度的粗细划分及访问策略研究,基于RBAC方法设计一种多粒度的访问控制系统.该系统在逻辑上是集中的,在实现上是分布的,它能够为用户的访问提供集中的控制,对用户的权限进行检查,根据请求生成相应的访问决议,并分散到各个有访问控制需求的IED设备上来执行这些控制决议.通过远程配置的实例分析表明该系统能满足变电站自动化的访问控制需求.According to the demands of access control of substation automation system, two operation objects of access control including information model and information exchange service of IED is analyzed. On the study of the granularity of the object and access policy, a multi - granularity access control system based on RBAC is designed. The design of the system is centralized in logical, and distributed in realization. It provides a centralized control for user＇s access, the access policy is generated by privilege verify and implemented in the distributed IED. At last, an instance of remote configuration is illustrated to demonstrate that the design can fidfdl the needs of access control in substation automation.

关 键 词：变电站自动化 访问控制 RBAC 远程配置 

分 类 号：TM76[电气工程—电力系统及自动化]