智能电网云存储访问控制中用户属性更新撤销方法研究

发布时间：2018-11-20 15:54

【摘要】：随着智能电网技术的快速发展,电力大数据的出现将使得电力系统中的数据和信息爆炸性的增长。面对海量、分布式、多源异构的信息,现有的电力系统数据存储平台难以满足智能电网信息的存储要求。云存储系统在存储和共享海量数据方面有很大的优势,但同时也为智能电网云存储系统中数据安全带来隐患。因此,保证数据的安全成为智能电网云存储系统中急需解决的问题。访问控制技术可以阻止未授权用户对系统资源的访问,保证了数据的安全。基于属性的访问控制通过合理的设置访问策略,可以实现复杂的、细粒度的访问控制,适用于智能电网云存储系统中。然而,在基于属性的访问控制实际应用中,用户属性更新撤销操作是不可避免的问题。针对该问题,本文深入研究了面向智能电网云存储系统中基于属性的访问控制模型,设计了一种用户属性更新撤销方法,完成了以下几方面的工作:(1)针对基于属性的访问控制中用户属性更新撤销问题,将基于密文属性的加密算法和基于属性的用户撤销方案结合改进,设计了一种用户属性更新撤销算法,理论分析了算法的安全性,提高了用户属性更新效率。(2)针对智能电网中用户属性更新撤销的问题,给出了面向智能电网云存储系统多授权中心的访问控制模型,并将本文所提的用户属性更新撤销算法应用于智能电网云存储系统中,提高了用户私钥更新效率。(3)利用实验室设备搭建了9个节点的Spark云存储平台,采用某供电局的历史数据对用户属性更新方法的执行效率进行了测试,通过实验对比验证了所设计方法与传统方法相比在用户属性更新撤销的执行时间上有明显的提高。
[Abstract]:With the rapid development of smart grid technology, the emergence of power big data will make the power system data and information explosive growth. In the face of massive, distributed and heterogeneous information, the existing power system data storage platform is difficult to meet the storage requirements of smart grid information. Cloud storage system has great advantages in storing and sharing massive data, but it also brings hidden trouble to data security in smart grid cloud storage system. Therefore, ensuring the security of data becomes an urgent problem in smart grid cloud storage system. Access control technology can prevent unauthorized users from accessing system resources and ensure the security of data. Access control based on attributes can realize complex and fine-grained access control by setting access policy reasonably. It can be used in smart grid cloud storage system. However, in the practical application of attribute-based access control, user attribute update revocation is an inevitable problem. In order to solve this problem, this paper deeply studies the attribute-based access control model in smart grid cloud storage system, and designs a user attribute update revocation method. The following works have been accomplished: (1) aiming at the problem of updating and revocation of user attributes in attribute-based access control, the encryption algorithm based on ciphertext attributes and the scheme of user revocation based on attributes are combined and improved. A user attribute update revocation algorithm is designed, the security of the algorithm is analyzed theoretically, and the efficiency of user attribute updating is improved. (2) aiming at the problem of user attribute update revocation in smart grid, This paper presents an access control model for multiple authorization centers in smart grid cloud storage systems, and applies the user attribute update revocation algorithm proposed in this paper to smart grid cloud storage systems. The efficiency of private key updating is improved. (3) the Spark cloud storage platform with nine nodes is built using laboratory equipment, and the execution efficiency of user attribute updating method is tested by using the historical data of a power supply bureau. Compared with the traditional method, the proposed method can significantly improve the execution time of user attribute update revocation.
【学位授予单位】：华北电力大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;TM76

【参考文献】