INTEGRATED ACCESS CONTROL FOR PVSS-BASED SCADA SYSTEMS AT CERN
P. Golonka, Manuel Gonzalez-Berges · 2009
The protection of the PVSS-based (Process Control and Visualization [1]) Human-Machine-Interface parts of the Control Systems for the LHC accelerator and the experiments at CERN is implemented using the JCOP (The Join COntrols Project) Framework Access Control component. It ensures the protection from non-malicious actions (such as misuse due to an operator's mistake) by enabling/disabling parts of the User Interface. It extends the native PVSS mechanisms for user-authentication and makes the management of the role-based authorizations easy to configure and maintain. Ultimately, it enables the synchronization of the access-control related data across distributed systems, and allows the synchronization of this data with central user-management resources at CERN (such as Active Directory). It also automates the creation of user accounts and roles (provisioning).