Research And Implement Of SaaS Oriented General Access Control Technology

With the rapid development of web new technologies, such as SOA and Web2.0, have become more sophisticated. Applications of SaaS become more popular. On-demand subscription model of SaaS is popular among small and medium Enterprises. Meanwhile, the major independent Software Vendors have already expanded the SaaS market since they saw enormous profits in SaaS field. But security of SaaS is one of the important factors in availability and universality. The security issue includes SaaS identity authentication, access control, data privacy and so on. Now these security issues have caused widespread concern. How to take access control method to meet the demand of security and flexibility in SaaS field? Solution of these security issues is very important to popularize SaaS, so it has significant research value.This paper analyzed and researched on these security issues. Borrowed ideas from unified authentication, which is one of the service authentication forms, research the access control technology in SaaS field.Firstly, this paper introduced the development status of SaaS technology and access control technology, and proposed a SaaS oriented identity authentication and access control model. Secondly, the paper researched the SaaS access control method and rule based on model. Last, this paper showed the detailed design and implement of the SaaS oriented general access control platform.