Research on Unified Cloud Authentication and Centralized Management of Power Internet of Things

At present, the user identity management and authentication of each system are completed in each business system. Meanwhile the users of the application system is extended to non-power company users, such as application developers, network maintenance providers, and other temporary users. The disadvantages of the this management model under the rapid increase in the number of business systems and the increasing number of users are increasingly prominent. Identity authentication and management is not a new issue, but as the security boundaries change, identity management vulnerabilities create increasing security problems for the entire system. This paper aims to study the unified cloud authentication and centralized management of the power Internet of Things. This paper first analyzes the research status and related technologies of the Internet of Things and the unified authentication, and points out that the existing unified authentication system cannot meet the needs of the authentication and security in the Internet of Things environment, and there are complex problems of the authorization management in the unified authorization. Through the analysis of the application system security requirements, combined with the access control and unified authorization related methods, according to the idea of the application system integration, the hierarchical authentication and authorization method is proposed. This method is mainly divided into three parts: hierarchical access policy, user security policy, and unified authorization policy. In the hierarchical access strategy, on the basis of existing authentication, it increases the verification of user dynamic authentication, and calculates the user security level, which dynamically reflects user security. In the unified authorization strategy, it effectively reduces the complexity of authority management in the unified authorization. Finally, the prototype system is designed and implemented in the case to verify the feasibility of the proposed method.