Power marketing big data access control scheme based on a multi-level strategy

doi:10.3969/j.issn.1000-5641.2021.05.015

Abstract

Abstract:

With the rapid proliferation of technology, the degree of informatization in the financial industry continues to increase. The integration of financial data with power marketing platforms, moreover, is accelerating the interaction between users and power marketing platform data (e.g., basic customer details, energy metering data, electricity fee recovery data). The increased interaction, however, leads to higher data transmission leakage which can result in incorrect formulation of power usage strategies and electricity prices. Therefore, to satisfy the security requirements for data interaction in power marketing systems and ensure economic benefits for the power company, we propose an Ordered Binary Decision Diagram (OBDD) based on Ciphertext Policy Attribute Based Encryption (CP-ABE). This multi-level access approach can reduce the autonomy of shared data authority control in the remote terminal unit and improve the efficiency of data access. In addition, based on security and performance analysis, the proposed access control scheme is both more efficient and more secure than other schemes.

Key words: power marketing, multi-level access control, OBDD, CP-ABE

CLC Number:

TP309.7

Yue ZHANG, Xiuxia TIAN, Yuncheng YAN, Guanyu LU. Power marketing big data access control scheme based on a multi-level strategy[J]. Journal of East China Normal University(Natural Science), 2021, 2021(5): 169-184.

Figures/Tables 16

Fig.1

Fig.2

Fig.3

Fig.4

Fig.5

Fig.6

Fig.7

Fig.8

Table 1

Table 2

Table 3

Table 4

Table 5

Fig.9

Fig.10

Fig.11

References 20

1	张鄞吴. 金融科技中数据安全的挑战与对策分析. 科学与信息化, 2020, (3): 140- 141.
2	KHALID H, SHOBOLE A. Existing developments in adaptive smart grid protection: A review. Electric Power Systems Research, 2021, 191, 106901. doi: 10.1016/j.epsr.2020.106901
3	叶婉琦. 大数据环境下电网信息安全技术分析. 电子技术与软件工程, 2020, 185 (15): 239- 240.
4	周一波, 李战, 庞潇. 电力企业金融业务信息安全保障体系建设研究 [C]//2012电力行业信息化年会论文集. 中国电机工程学会电力信息化专业委员会, 2012: 5.
5	LI L, GU T, CHANG L, et al. A ciphertext-policy attribute-based encryption based on an ordered binary decision diagram. IEEE Access, 2017, doi: 10.1109/ACCESS.2017.2651904
6	EDEMACU K, JANG B, KIM J W. Collaborative ehealth privacy and security: An access control with attribute revocation based on OBDD access structure. IEEE Journal of Biomedical and Health Informatics, 2020, doi: 10.1109/JBHI.2020.2973713
7	袁小芳. 一种基于用户角色—权限分级的访问控制模型. 矿业工程研究, 2003, 25 (4): 30- 32.
8	肖宝亮, 顾春华, 高小伍, 等. 基于分级角色的访问控制. 华东理工大学学报 (社会科学版), 2006, (11): 1327- 1330.
9	SAHAI A, WATERS B. Fuzzy identity-based encryption [C]//Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark. 2005: 457–473.
10	GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data [C]//Proceedings of the 13th ACM Conference on Computer and Communications Security, Alexandria, USA. 2006: 89–98.
11	邓宇乔, 杨波, 唐春明, 等. 基于密文策略的流程加密研究. 计算机学报, 2019, 42 (5): 1063- 1075.
12	王冬, 李文, 徐高升, 等. 一种大数据环境下的数据隐私保护策略及其实践. 微型电脑应用, 2013, 30 (6): 6- 8.
13	康丽珠, 黄青松, 刘利军. 一种改进的基于角色的分级授权访问控制模型. 昆明理工大学学报(理工版), 2009, 34 (1): 39- 42.
14	郭军. 基于角色的访问控制分级授权管理的研究 [D]. 西安: 西安电子科技大学, 2012.
15	李莉, 史国振, 王璇, 等. 共享文件加密存储分级访问控制方案的实现. 网络与信息安全学报, 2016, 2 (7): 26- 32.
16	林曦, 韩益亮. 基于属性加密的共享文件分级访问控制方案. 燕山大学学报, 2017, 41 (5): 450- 456.
17	WAN Z, LIU J, DENG R H. HASBE: A hierarchical attribute-based solution for flexible and scalable access control in cloud computing. IEEE Transactions on Information Forensics and Security, 2012, 7 (2): 743- 754.
18	AKINYELE J A, GARMAN C, MIERS I, et al. Charm: A framework for rapidly prototyping cryptosystems. Journal of Cryptographic Engineering, 2013, 3 (2): 111- 128. doi: 10.1007/s13389-013-0057-3
19	黄宁玉, 宋式斌, 孙浩志. 高校网上支付系统的访问控制模型研究及系统实现. 华东师范大学学报(自然科学版), 2015, (S1): 340- 344.
20	李家治. 云存储中基于属性的密文检索与访问控制 [D]. 上海: 华东师范大学, 2015.

机制	分级方式	加密方式	加密结构
文献[16]	两类属性	属性加密	LSSS
文献[15]	指定4个等级	密码卡加密	无
文献[6]	无	属性加密	OBDD
本方案	属性分级	属性加密	OBDD

参数	含义
$N$	全部属性机构的数量
${N_{CT}}$	与访问策略相关的属性机构的数量
${\text{U}}$	总属性集的大小
${U_{CT}}$	访问策略中相关属性的大小
${l_M}$	隐私数据M的大小
${t_P}$	对运算所需最长时间
${t_G}$	幂运算所需最长时间
${E_{{G_0}}}$	${G_0}$ 的幂次数
${E_{{G_1}}}$	${G_1}$ 的幂次数
${P_e}$	双线性对数的计算
$l$	生成用户密钥的属性数量
$T$	OBDD访问结构包含的有效路径的数量
$\sigma $	成功求解的最少的属性数量

机制	加密复杂度	密钥生成复杂度	解密复杂度
机制	${E_{{G_0}}}$	${E_{{G_0}}}$	${E_{{G_1}}}$	${P_e}$
文献[17]	N+1	2N+1	O(N)	O(N)
文献[16]	${N_{CT}}$ +1	$l$ +3	O( $\sigma $ )	O( $\sigma $ )
本方案	T+1	2	O(1)	O(1)

机制	访问结构	存储损耗		通信损耗
机制	访问结构	公钥大小	私钥大小	通信损耗
文献[17]	TREE	$2\left\| G \right\| + \left\| {{G_T}} \right\|$	$({U_s} + 1)\left\| G \right\|$	$({\text{2}}{U_{CT}} + N + 1)\left\| G \right\| + {l_M}\left\| {{G_T}} \right\|$
文献[16]	LSSS	$2U\left\| G \right\| + \left\| {{G_T}} \right\|$	$({U_s} + 1)\left\| G \right\|$	$({U_{CT}} + N + 1)\left\| G \right\| + {l_M}\left\| {{G_T}} \right\|$
本方案	OBDD	$2{U_{CT}}\left\| G \right\| + \left\| {{G_T}} \right\|$	$({U_{CT}} + 1)\left\| G \right\|$	$({U_{CT}} + 1)\left\| G \right\| + {l_M}\left\| {{G_T}} \right\|$

机制	访问结构	计算损耗
机制	访问结构	加密损耗	解密损耗
文献[17]	TREE	$({U_{CT}} + N + {\text{2}}){t_G} + {l_M}N{t_P}$	$({U_s} + N + 1){t_P} + {U_s}{t_G}$
文献[16]	LSSS	$({U_{CT}} + N + 1){t_G} + {l_M}N{t_P}$	$(2{U_s} + N + 1){t_P} + {U_s}{t_G}$
本方案	OBDD	$({U_{CT}} + N + 1){t_G} + {l_M}{t_P}$	$(2{U_{CT}} + {N_{CT}}){t_P}$