数字证书在电力二次系统中的应用研究  

Digital Certificate in the Application of the Secondary Electric Power System Research

作　　者：周鹏[1] 许金超 姜春林 

机构地区：[1]广东电网公司电力科学研究院,广州510080 [2]中标软件有限公司安全产品研发中心,上海200030

出　　处：《计算机安全》2013年第10期61-66,共6页Network & Computer Security

基　　金：南方电网公司重点科技项目(K-ZB2011-011)

摘　　要：基于SOAP的Web Service技术在电力二次系统中具有非常重要的作用。然而,目前的SOAP规范中缺乏标准的访问控制技术,无法为Web Service的安全提供保障。提出了一种增强安全性的SOAP模型,通过在SOAP请求中增加访问控制结构,并增加Web Service前端控制器对SOAP请求权限进行审查,保障了Web Service的安全。SOAP based Web Service technology in power secondary system has a very important role. However, there is still no standard SOAP access control technology for the Web Service which provides security. In order to achieve access control, this paper presents a security-enhanced SOAP model, which added authentication structure to the SOAP request and Web Service frontier filter, can protect the security of the Web Service.

关 键 词：电力二次系统 SOAP 数字证书 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]