Dynamic Access Control Method for Cybersecurity of Metro Integrated Supervisory Control System Based on Zero Trust Architecture

DOI: https://doi.org/10.62517/jiem.202603302

Author(s)

Jinkui Dong1, Yongliang Yang1,*, Yuanchen Liu2，Jianmin Xu2

Affiliation(s)

1Tianjin Binhai New Area Rail Transit Investment & Development Co., Ltd., Tianjin, China 2Shenyang Siasun Robot& Automation Co., Ltd., Shenyang, Liaoning, China *Corresponding Author.

Abstract

Since the metro ISCS is the critical infrastructure, it faces the complex cyber security issues, such as internal privilege abuse, external penetration, and supply chain risk, etc. which can not be well treated by the traditional static access control model. In this study, we propose the zero-trust dynamic access control method with the four-dimensional trust assessment and the adaptive policy adjustment. The simulation results demonstrate that it can improve the illegal access blocking to 96.2%, the permission overgranting to reduce 82.5%, and the response time is within 30ms, and meet the realtime requirement. At last, the practical countermeasures are given for the metro ISCS as well as the similar rail transit.

Keywords

Cybersecurity; Metro Integrated Supervisory Control System; Dynamic Access Control; Trust Assessment; Zero Trust Architecture

References

[1] Liu Xianhai, Guo Wei. Research on Differential Privacy Big Data Protection under Cybersecurity Background. Wireless Internet Technology, 2025, 22(24): 23-26. [2] Xiong Qingchen. Design of Metro Integrated Supervisory Control System Based on Cloud Platform. Integrated Circuit Applications, 2025, 42(11): 121-123. [3] Wang Ruokun, Zhang Ju, Li Lu, et al. Research on Data Configuration Platform for Urban Rail Transit Signaling Systems. Railway Communication and Signaling Engineering Technology, 2025, 22(9): 65-71+121. [4] He Jiayang. Design and Implementation of Metro Integrated Supervisory Control System Based on Three-Layer Networking. Network Security Technology and Applications, 2023, (12): 111-113