CAJ | 학술논문

针对智能电网的安全性和隐私问题，提出一种基于CP-ABE的访问控制模型。为解决单个可信控制中心和多个半可信数据服务管理者之间的瓶颈问题，将数据存储在地域上分散的数据中心，分别由各自的数据服务管理器进行数据的访问控制管理，采用ABE和选择群钥分配的双重加密机制，保护数据机密性。研究结果表明，该模型采用不同地域分散存储密文数据，提高了数据的访问效率和可伸缩性，将重加密的任务交由数据服务管理者完成，远程终端单元不参与属性分配和用户权限撤销，减轻了远程终端单元的计算量、通信量和权限管理代价，且具有授权功能灵活的特点。
침대지능전망적안전성화은사문제，제출일충기우CP-ABE적방문공제모형。위해결단개가신공제중심화다개반가신수거복무관리자지간적병경문제，장수거존저재지역상분산적수거중심，분별유각자적수거복무관리기진행수거적방문공제관리，채용ABE화선택군약분배적쌍중가밀궤제，보호수거궤밀성。연구결과표명，해모형채용불동지역분산존저밀문수거，제고료수거적방문효솔화가신축성，장중가밀적임무교유수거복무관리자완성，원정종단단원불삼여속성분배화용호권한철소，감경료원정종단단원적계산량、통신량화권한관리대개，차구유수권공능령활적특점。
Aiming at the security and privacy issues of smart grid,an access control model is proposed,which is based on CP-ABE. In order to solve the bottleneck problem between a control center and multiple semi-trusted data service managers,ciphertext data is dispersive stored in different region,and is managed by the respective service manager. Dual encryption mechanism of the attribute-based encryption and selective group key distribution protects the confidentiality of data. The research results show that ciphertext data is distributed storage, and improves data access efficiency and scalability. The data service managers carry out re-encrypted, and remote terminal unit does not participate in the distribution attributes and user revoked,thus can reduce the computational cost,communication cost and right management costs of the remote terminal unit. The model also has a flexible authorization function.