MS-UCON: A Usage Control Model for Meteorological Operational Systems

With the national Belt and Road strategy in place, meteorological operational systems will face domestic and international dangers, and it is very urgent and important to protect the safety of meteorological equipment and resources. The existing meteorological operational system uses a role-based access control model for permission management, whose permissions do not change during one authorized access, and cannot sense the threat of user behavior to the system in real time, much less adjust user permissions in time, thus failing to cope with the security needs of the weather business system. In this paper, we propose a Meteorological Operational System-oriented Usage Control (MS-UCON) model to address this problem. The model refines the UCON model according to industry characteristics and business needs, and adds a periodic trust assessment module and a collection of trust value assessment factors to monitor user behavior in real time, perform periodic trust assessment on user behavior, sense user risky behavior in time, dynamically update user trust value attributes, and dynamically adjust permissions. Finally, the security of the MS-UCON model is proved based on state machine theory. The results show that the MS-UCON model can solve the problem that user privileges cannot be dynamically adjusted in meteorological operational systems, and also meet the security requirements of meteorological operational systems.