Role-based access control for substation automation systems using XACML

There has been an increasing need for accessing data of internal equipment and devices of a substation system from external systems as power grids evolve. This has also introduced growing concerns on data security. In response to the concerns, IEC 62351 has proposed role-based access control (RBAC)...

Full description

Saved in:
Bibliographic Details
Published in:Information systems (Oxford) 2015-10, Vol.53, p.237-249
Main Authors: Lee, Byunghun, Kim, Dae-Kyoo, Yang, Hyosik, Jang, Hyuksoo
Format: Article
Language:English
Subjects:
Access control
Automation
Communication systems
Evolution
Information systems
Messages
RBAC
Smart grid
Specifications
Substation automation
Substations
XACML
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:There has been an increasing need for accessing data of internal equipment and devices of a substation system from external systems as power grids evolve. This has also introduced growing concerns on data security. In response to the concerns, IEC 62351 has proposed role-based access control (RBAC) for substation automation. In this work, we present a novel approach for implementing RBAC based on IEC 62351 for substation automation using eXtensible Access Control Markup Language (XACML). We integrate the approach with IEC 61850 by extending Abstract Communication Service Interface (ACSI), Manufacturing Message Specification (MMS), and System Configuration Language (SCL). A major advantage of the approach is that it fully conforms to both IEC 61850 and IEC 62351 and highly compatible with SCL as both XACML and SCL are XML-based. We implement the approach using OpenIEC61850 which is an open source library for ACSI services and demonstrate the implementation.
ISSN:0306-4379
1873-6076
DOI:10.1016/j.is.2015.01.007