随着科技的发展, 金融业信息化程度不断提高, 金融行业和电力营销平台在紧密结合的同时, 增加了用户与电力营销平台大数据(如客户基本档案数据、电能计量数据、电费回收数据等)的双向互动. 而这种双向互动增加了数据泄露的风险. 营销数据泄露会导致用电策略、电价等的错误制定, 从而给电力企业带来巨大经济损失, 严重影响电力企业的经济效益. 因此, 需要采用访问控制机制来满足电力营销系统数据交互的安全需求, 从而保障电力企业的经济效益. 提出了一个基于有序二元决策图(Ordered Binary Decision Diagram, OBDD)的密文策略、基于属性加密(Ciphertext Policy Attribute Based Encryption, CP-ABE)分级访问控制方案, 解决了访问远程终端单元共享数据权限控制自主性过高的问题, 并提高了数据访问的效率及安全性. 最后, 安全分析和性能分析表明, 所提访问控制方案相较于其他方案更高效安全.

With the rapid proliferation of technology, the degree of informatization in the financial industry continues to increase. The integration of financial data with power marketing platforms, moreover, is accelerating the interaction between users and power marketing platform data (e.g., basic customer details, energy metering data, electricity fee recovery data). The increased interaction, however, leads to higher data transmission leakage which can result in incorrect formulation of power usage strategies and electricity prices. Therefore, to satisfy the security requirements for data interaction in power marketing systems and ensure economic benefits for the power company, we propose an Ordered Binary Decision Diagram (OBDD) based on Ciphertext Policy Attribute Based Encryption (CP-ABE). This multi-level access approach can reduce the autonomy of shared data authority control in the remote terminal unit and improve the efficiency of data access. In addition, based on security and performance analysis, the proposed access control scheme is both more efficient and more secure than other schemes.