Role-classification-based Access Control Mechanism for Energy Internet of Things Data Service Platform

With the development of Internet of things technology, the energy industry is gradually entering the era of "wisdom". The data service platform provides valuable information services to the ISV in the form of the API through collection, cleaning, transmission, storage, and mining. The API access control is one of the most important parts of the data service platform, unreasonable access control will lead to data chaos between applications, resource leakage and other problems. The application of traditional access control technology to the energy Internet of things data service platform with huge data resources will increase the complexity of the platform and the possibility of unauthorized attacks. In order to solve these problems, this paper proposes the concept of role classification based on the role-based access control mechanism (RBAC) [1], assigning roles and grades to API and third-party applications respectively, and implementing permission control through the double check of roles and grades. The analysis and evaluation of the proposed role-classification-based access control mechanism through using case evaluation showing that this mechanism can effectively control the API, the security of the platform is greatly improved, and the platform data resources can be reasonably invoked between applications.