A Research Of Secure Access Control Technology In Grid-Cloud System

The categories of the information in the smart grid system can be incredibly tremendous, and the amount of the data is enormous since the requirements from users are huge, which is a situation that the ability in computation and storage of a traditional smart grid system cannot handle. Thus it is supposed to utilize a cloud computing model, which is a promising paradigm taking advantages of virtualization technologies, distributed storage system, and parallel programming. The extensively used model can be brought into smart grid to achieve available storage and fast parallel computing. The main problem limiting the new combination paradigm a further development is the data security and privacy problem.Since the data in cloud computing environment is of highly mobility, and there are lots of tenants in the cloud storage system, which makes it difficult to protect the data storing in the cloud platform from being usurped by illegal users and legal users who are beyond the privilege. Thus it is an urgent task to build a cloud security model including privacy protecting and secure sharing mechanism. Nowadays, the most popular solution for dealing with those security related problems is still cryptology. The thesis mostly concerns about the secure access control technology and a secure key management system.Firstly, based on the introduction to cloud computing model and the cloud security requirements, the thesis proposed a secure infrastructure in the combination paradigm based on the security requirements in smart grid. The secure infrastructure includes an access control method using modified hierarchical identify and attribute based encryption algorithm, which takes advantage of the identify-based encryption, attribute based encryption and hierarchical attribute based encryption, the new proposed access control method is able to resovle the privilege problem in the multi-user data sharing environment in cloud system.Secondly, since the smart grid model owns a strict hierarchical managing structure, the access control system is supposed to own a similar structure in the key management system as well. The key management system plays an important role in a mature security mechanism which is responsible for key generating, key distributing and key managing. The thesis proposes a hierarchical key management system whichi is suitable for the combination paradiagm. The proposed key management system achieves the key management security using the powerful cloud computation and storage ability. More importantly, the system can protect the keys from being eaveasdropped by illegal users.Finally, the thesis designes a web user management system based on Django framework, which proves the correctness and availability of the proposed access control method.