Trust-Based Dynamic Access Control Model for Power Micro-Applications

Aiming at solving security access control issues such as frequent user authentication and unauthorized access faced by power micro-applications, this paper proposes a dynamic access control model for power micro-applications. This model overcomes the shortcomings of static allocation of traditional access control policies, and applies trust evaluation and access control to micro-applications. User access rights can be dynamically adjusted according to user requests and service status to ensure system security. This paper proposes a multi-level trust evaluation indicators for micro-applications and a trust threshold setting algorithm, which realizes fine-grained dynamic trust perception and dynamic adjustment of user permissions. In addition, through the secondary development of the Application Programming Interface (API) gateway, this paper not only unifies the identity authentication methods between different micro-applications, but also strengthens the existing security protection. Simulation experimental results show that our model can effectively adjust user permissions dynamically, identify potential malicious users, and reject or downgrade access of malicious users, thereby achieving secure access control for power micro-applications and enhancing the security of accessing microservice.

I. Introduction

With the increasing demand for elasticity, scalability, rapid operation and maintenance in the power industry, power micro-applications based on microservice architecture have become the main way for power companies to support their business. The micro-application is a lightweight application based on a microservice architecture that can run on various devices such as mobile devices and desktops, with an independent user interface and specific use case scenarios [1] . Combined with the power mobile business, power micro-applications can independently provide functions for users, involving multiple aspects such as power equipment, safety supervision, infrastructure, and materials.