A smart grid user access authorization method

Abstract

The present invention proposes a smart grid user access authorization method, including the following steps: deploying a smart grid security access system according to a hierarchical structure, the remote access layer is an intelligent power terminal, the access security layer is an access control component, and the access control component And the authentication server; after the smart power terminal completes the security access authentication, it sends the authority credential information to the access control component, and the access control component calculates and processes the credential information and sends the result to the authentication server for role authentication and authorization. The present invention assigns relevant authentication functions to the access control component for implementation by a third party, weakens the functions of intelligent terminals (especially mobile terminals), and can protect user privacy information in the authorization process. In addition, the present invention performs appropriate access authorization according to the user's role, and only opens to the user access resources within the minimum scope of the user's role, which prevents illegal access to internal resources to a certain extent, and meets the security requirements of the smart grid.

Description

technical field [0001] The invention belongs to the field of access control, and relates to terminal access authorization and user authority management in a smart grid, in particular to a method for user access authorization of a smart grid. Background technique [0002] As a branch of the Internet of Things, smart grid is an important public application network. The electric power industry is the most important basic energy industry in the country's economic development and plays an extremely important role in the sustainable development of the national economy. With the development of the world economy, the intensification of climate change and the adjustment of energy policies in various countries, the relationship between power grids and power plants, governments, customers and other groups has become closer. Customers' requirements for power quality are constantly increasing, and renewable energy has gradually become an important power source. In this context, the coun...

AI Technical Summary

Problems solved by technology

Since the smart grid information exchange security access and access control is still in its infancy, the direct application of the existing access control technology to the smart grid may cause the following problems: (1) The openness of the remote access layer wireless channel makes the smart grid The power grid is easy to be monitored, which makes the privacy and sensitive information of users in the network easy to be stolen. Malicious attackers can access and modify important data of users in the power grid by impersonating users based on the existing background information

(2) The two-way interaction between the power grid and users is enhanced, intelligent collection and intelligent terminal equipment are used in large quantities, a large number of distribution networks and user two-way intelligent terminal equipment need or even must be accessed through wireless public networks, and a large number of user-side access brings security management. here comes more risk

(3) The traditional identity authentication method needs to record the access rights of all users, which will cause the burden on the database server and reduce the user's access speed and access success rate

[0004] At present, traditional access authorization technology can realize trusted authentication of smart grid terminal access, but due to the complexity, bloat and inflexibility of the authentication mechanism, it cannot meet the access requirements of the increasing number of smart grid users for the system, and is not convenient for system and business expansion. , can not protect the privacy information of remote access terminal users well, easily lead to the leakage of user sensitive information, lack of strict authentication and encryption, so that illegal users invade the network to steal user-related data information

Images