PKI和PMI安全方案在电力数据申报系统中的实现  

Realization of network information security based on PKI and PMI in power data process system

作　　者：徐盛 

机构地区：[1]温州市电力局,浙江温州325000

出　　处：《电力系统通信》2009年第12期30-33,共4页Telecommunications for Electric Power System

摘　　要：电力市场技术支持系统中存在冒充、越权、否认和泄密等威胁,因此安全方案对电力数据申报系统至关重要。文章首先提出通过公钥证书和采用数字签名技术来验证系统用户的合法性,然后根据电力市场技术支持系统用户的分布性和业务操作的时间性,提出了一种具有时空约束的基于角色的访问控制模型,使用属性证书作为用户角色和权限的分配载体,以保证用户的合法操作。最后将上述的安全方法应用于电力市场数据申报子系统中,验证了安全方案的有效性。Because of the risks of impersonate, ultra vires, denial and divulgence happen in technical support system of power market, an security scheme is very important for power data process system. This paper first introduces the legitimacy verification on system users by using public key certificates and digital signature technology. And then, based on the distribution of users and the timeliness of service operation, a role-based access control model with space-time constraints is proposed. This model uses attribute certificate as the user roles and permissions to the distribution of carriers to ensure the legitimate operation of the user. Finally, the security method mentioned above is applied in electricity market data system to verify the correctness of the security scheme.

关 键 词：电力市场技术支持系统 网络信息安全 公钥基础设施 权限管理基础设施 

分 类 号：TM769[电气工程—电力系统及自动化]