Research Of CORBA Component's Security Management And The Security Policy Of Electric Power System Software

As the development of computer networks and Object-Oriented technology, Distributed Object Computing (DOC) technology emerged and had been widely used. CORBA (Common Object Request Broker Architecture) specification is one of primary standards of Object-Oriented and distributed technology, and it is going mature and perfect day by day. CORBA component plays an important role on developing electric power system software which is based on IEC 61970, 61968, but in actual applications, system's security must be ensured. Compared with the traditional systems, distributed object system is more vulnerable to be attacked by the internal and exterior resources due to its distributed nature. In addition, the isomerism of distributed object system can lead to the inconsistency of the security module, so the intruder has more opportunities to destroy the security. Consequently, the implementation of security service in CORBA system is extremely necessary. The task will study the security management mode of CORBA module, based on which, it will study the security policy of the electric power system software, and finally achieve the aim of improving the system's security grade.First, the paper studies the security threat faced by the distributed object system and the measures in the OMG CORBA Specifation dealing with the security problems.Then, based on the careful study of CORBA Security Service Specification, Security Reference Module and other CORBA Security Infrastructures, combined with the requirements of GDA Server, HSDA Server, TSDA Server and other CIS Serveres in the electric power system software which is based on IEC 61970, the paper analyzes the typical scenes of CIS Server's security requirements in detail, designes a CIS Security Service Framework which is based on the CORBA Security Service, that is a core security model, two application mode of common security agent and precise security control of the interface function level. Finally, based on the status of CORBA Security Service, the paper tests the feasibility of CIS Security Service Framework which is used TAO, Orbacus, JacORB, fully verified the feasibility of CIS Security Service Framework.