Study on Security Access Control in Electricity Market Operation System

A great deal of private data will be exchanged between market system operator and market participants in the running electricity market, in which lots of market participants scatter. The characteristics of private data exchange, varieties of user types, access authorization and authentication variation with market rules in electricity market demand flexibility and rigidity of security access control in electricity market operation system, which supports the operation of electricity market. In order to surmount the difficult, a general security access control solution is presented in this paper, that is the integration of hardware layer, system software layer and application software layer security access control. And three types of application layer security access control solutions based on J2EE software infrastructure are also introduced, which include J2EE intrinsic security access control, dynamic proxy and control center. Through the analysis of the presented solutions by contrast, the control center security access control solution is selected for its excellent security and flexibility. Application suggests that control center security access control solution could separate authorization and authentication from application development, enable application developers devote their mind to business logic implementation and response to the variation demands of market rule and access logic quickly.