SG-RBAC : 스마트그리드 환경에 적합한 역할기반접근제어 모델

국문 초록 (Abstract)

스마트그리드는 다양한 도메인의 다양한 기기가 상호 운용되고 상황에 따라 다른 접근권한을 가질 수 있다. 따라서 스마트그리드 기기 및 시스템 내부에 접근 가능한 권한들을 효율적으로 관리하여, 접근권한 관련 설정 오류를 최소화하고 권한이 없는 사용자의 접근을 차단하기 위한 ‘스마트그리드 환경에 적합한 접근제어 기술’이 요구된다. 본 논문에서는 스마트그리드 환경을 분석하여 접근제어 시 요구사항들을 정리하고 이를 만족하는 SG-RBAC 모델을 제안하였다. SG-RBAC 모델은 사용자 특성, 역할 특성, 시스템 특성에 따라 권한 활성화 제약이 가능하며, 권한위임과 권한 상속 시에 시간, 위치정보, 위기 상황 발생여부에 따라 제약을 가할 수 있다.

다국어 초록 (Multilingual Abstract)

Smart grid is composed of variable domains including different systems, and different types of the access control are needed in the multiple domain. Therefore, the access control model suitable for the smart grid environment is required to minimize access control error and deny the unauthorized access. This paper introduce the access control requirements in the smart grid environment and propose the access control model, SG-RBAC, satisfied with the requirements. SG-RBAC model imposes constraints on the access right activation according to the user property, the role property, and the system property. It also imposes constraints on the delegation and the inheritance of access right according to temporal/spatial information and a crisis occurrence.

목차 (Table of Contents)

• 요약
• ABSTRACT
• I. 서론
• II. 스마트그리드 환경에서의 접근제어 요구사항
• III. SG-RBAC 모델
• IV. 결론
• 참고문헌

참고문헌 (Reference)

• 1 Eric Freudenthal, "dRBAC: Distributed Role-based Access Control for Dynamic Coalition Environments" 411-420, 2002
• 2 Elisa Bertino, "TRBAC: A temporal role-based access control model. ACM Trans" 4 (4): 191-233, 2001
• 3 Jonathan D. Moffett, "Specifying discretionary access control policy for distributed systems" 13 (13): 571-580, 1990
• 4 D. Ferraiolo, "Role-Based Access Controls" 554-563, 1992
• 5 Songyun Liu, "Role-Based Access Control for Distributed Cooperation Environment" 455-459, 2009
• 6 Ravi S. Sandhu, "Role-Based Access Control Models" 29 (29): 38-47, 1996
• 7 David F. Ferraiolo, "Proposed NIST standard for role-based access control" 4 (4): 224-274, 2001
• 8 Qun Ni, "Privacy-Aware Role-Based Access Control" 7 (7): 35-43, 2009
• 9 Anour F. A. Dafa-Alla, "PRBAC: An Extended Role Based Access Control for Privacy Preserving Data Mining" 68-73, 2005
• 10 Matunda Nyanchama, "Modeling Mandatory Access Control in Role-Based Security Systems" 129-144, 1995
• 11 Lindqvist, H., "Mandatory access control" Umea University 2006
• 12 James Joshi, "Hybrid Role Hierarchy for Generalized Temporal Role Based Access Control Model" 951-956, 2002
• 13 Elisa Bertino, "Enforcing Mandatory Access Control in Object Bases" 96-116, 1993
• 14 Klaus R. Dittrich, "Discretionary Access Control in Structurally Object-Oriented Database Systems" 105-121, 1988
• 15 Chang N. Zhang, "Designing a Complete Model of Role-based Access Control System for Distributed Networks" 18 (18): 871-889, 2002
• 16 Elisa Bertino, "An Access Control Model Supporting Periodicity Constraints and Temporal Reasoning" 23 (23): 231-285, 1998
• 17 Elisa Bertino, "A discretionary access control model with temporal authorizations" 102-107, 1994
• 18 James Joshi, "A Generalized Temporal Role-Based Access Control Model" 17 (17): 4-23, 2005
• 19 Jaime A. Pavlich-Mariscal, "A Formal Enforcement Framework for Role-Based Access Control Using Aspect-Oriented Programming" 537-552, 2005