Research And Application Of RBAC Model In SaaS System

Security technology is widely used in the current; privilege management plays an important role in the information security system. Privilege management which is a key part of business management system is so complex for the logic and core module; its reliability, security and stability directly affect the operation of the system.When the system resources are attached by unauthorized operation, the access control module would provide proper control and measures to protect the confidentiality and integrity of the information. Access control is a key factor in privilege management. It plays an important role in privilege management. It's a focal embodiment when security policy is running. With the extensive development of SaaS in the industry, SaaS systems have become a trend, the paper design for "graduate design system" project which is the actual needs that for the graduate design of high school which is difficult to manage. On this basis, access control module of "graduate design system" has been theorized and abstracted, role-based access control model has been extended. For the separation between management and business, this project mixed centralized management and distributed management together, and designed an extended RBAC Model based on SaaS.Firstly, this article is a study of access control. Secondly, we found the defect of RBAC model by research on popular RBAC model. Then we design an extended model—SAAS-RBAC model:(1) the introduction of management control of the operational side, will introduce the idea of software services access control model, so the idea of rights management is more comprehensive; (2) the role of the RBAC model, the level of the rich. It added the concept of department between user and role, and enhanced capabilities of access control, making the role have more clear privileges in the system. (3) It leads into XML which have the features of structure and cross-platform can make system be more adaptable and versatile.Finally, the model of extended privilege management is applied in graduation system based on SaaS, which get an effective control in the security of SaaS system...