Research On Access Control Model In Cloud Storage Of Power Systems Based On Attribute And Policy

Power system needs to be able to handle vast amounts of data processing platformswhich are of high real time and reliability. Power system information platform needs tobe capable of implementing complex, fine-grained and massive access control. In orderto achieve the high efficiency of access control and promote the healthy and sustainabledevelopment of the power system, this paper, aiming at the power cloud storage systemand access control method based on the cloud platform, conducts a more in-depth study,with the following aspects of the job done.(I) This paper makes analysis on four basic access control models, moreover,combined with the actual situation of the power system, it comparatively analyses theirflexibility, scalability and multi-strategy supportive. We focus the challenges about hugeamounts of data, fine-grained and other aspects in the cloud platform access control.Facing these trouble, based on the attribute and policy access control of cloud platforms,the paper carries on a research and design about the critical technology solutions.(II) This paper studies the IEC61970standard which application systems shouldfollow in power cloud storage platform, achieving the compliant standard keys. Byanalyzing redundant rules, it establishes the reasonable rule-redundant processingmethods. In addition, in order to improve the system efficiency of cloud platform, acaching mechanism about attributes, policies and determination results is designed(III) Using the laboratory equipments, this paper builds a eight-node Hadoop cluster.At the same time, combined with the high-speed cloud platform and the advantages ofdistributed computing, it designs the decision algorithm based on the attributes andstrategies of cloud platform (CP-ABAC). Then, by distributed execution strategy, weenable the system to accomplish its policy decision parallelly, thus improving itsresponse performance.(IV) In the prototype system, the access control platform designed in this paper,based on the attribute and policy, is realized. The cloud storage solutions is suitable forlarge-scale, fine-grained access control attributes and strategies. Besides, it tests thesystem attribute access performance, strategic decision-making performance and itscaching performance, and the experimental results are analyzed to verify the feasibility ofthe program. Compared with the traditional stand-alone system and the single accesscontrol model, this new designed access control improves the efficiency of the large,complex and fine-grained access control in the cloud platform.