An access control method for scada system

Abstract

The invention discloses an access control method for an SCADA (Supervisory Control and Data Acquisition) system. The method comprises the following steps: 1, building security principals in the SCADA system, wherein the security principals include USERs, AUTHENTICATION, OPERATIONs, SECURITY_LEVEL, DOMAINs and ROLEs; 2, building security objects in the SCADA system, wherein the security objects include OBJECTs; 3, building a relationship between the security principles and the security objects in the SCADA system; and 4, controlling access of a bus layer by firstly matching the ROLE of an initiator specific to each writing operation through a bottom-layer data bus of the SCADA system, permitting writing if the ROLE of the initiator is consistent with a ROLE set by a data object target property to be written, and otherwise stopping; controlling access of an application layer by judging whether each operation of the application layer is included in a current security level of a current logged-in user or not before execution of the operations, if so, permitting the operations, and otherwise stopping the operations. Through adoption of the access control method, the SCADA system has the advantages of flexible configuration and complete function on the aspects of security and user access control.

Description

technical field [0001] The invention relates to an access control method of a SCADA system. Background technique [0002] SCADA (Supervisory Control And Data Acquisition) system can monitor and control on-site operating equipment to realize various functions such as data collection, storage, analysis, equipment control, physical quantity measurement, parameter adjustment and various signal alarms. In power systems such as power plant electrical / substation monitoring, power grid dispatching control, and various types of substation integrated automation systems and terminal distribution network automation applications, SCADA systems are the most widely used and the technology development is the most mature. [0003] As countries around the world increase the importance of information security, my country also issued the "Guidelines for the Classification of Computer Information System Security Protection Levels" in 1999. The "Guidelines" divide information systems into 5 secur...

AI Technical Summary

Problems solved by technology

It realizes access control based on security marks at the application layer (functional layer), but because it was proposed earlier, it fails to provide two or more user identity combination authentication technologies, and, because its mechanism is only based on the application layer, once The attacker masters the application development interface of the system, and can easily bypass the relevant security mechanisms through direct coding to achieve various actions

Images