Based On Cloud Computing And Rule Engine Research And Design Of General Authorization Service

With cloud computer improving, more enterprise information systems are developed based on cloud computer platform. Authorization is very important part in security management of enterprise information system. In this artile, we talk about how to build a PaaS service for common authorization requirement.We focus on how to build an authorization PaaS which is high-configurable and multi-tenant supported. Our work includes:1) Introduce concept of cloud computer, authorization model, PaaS service architecture and rule engine.2) Study focuses on analysis and role-based authorization model and task-based authorization model, its design, authorization models, principles and authorization steps, to identify their commonalities and summarized.3) Analyse and research the auchitecture and design pattern of PaaS platform through learning exllent open source PaaS platform implement such as Hadoop. According to Hadoop, we work out the model of PaaS platform and basic architecture.4) Single, fixed model cannot meet all the authority needs, and can only be adjusted by modifying the code and licensing strategy. For this deficiency, we designed based on metadata and rules engine can be configured to authorize services, including the authorization API client services, authorization services, management services, authorized service controller, the authorization process, monitoring services and other modules5) Based on 4) design, implement common authorization API client service, authorization service controller, the process of licensing services, authorized service management services, monitoring services and other modules. And verify the correctness of common authorization service architecture, feasibility and practicality. In closing remarks, summarized the main contents of this article, and general technology development and licensing services, the next step was predicted...