Research On The User Security For SaaS-based Collaborative Platform Of Industrial-chain

Modern service industry and advanced manufacturing technology were first set up by the state during the 12th five-year plan period. And the Manufacturing Information Technology Engineering Special Plan was established at the same time. SaaS-based collaborative platform of industrial-chain develops rapidly under the impetus of technology. The platform promotes the development of services and manufacturing, accelerates the combination of informatization and industrialization. The platform makes full use of Internet resources, provides a reliable guarantee for the informatization of middle and small-sized enterprises, and improves the supply chain competition. The platform adopts multi-tenants leasing model. In that model, the tenants order services based on their demand and the resources are controlled and managed by the platform operators.At present, since the platform is serving dozens of union, the security problem has become the primary problem and restricted the development of platform. To meet the requirements of one platform with multi-tenants, one tenant with multi-users and high secure business data of the SaaS-based collaborative platform of industrial-chain for core leading enterprise, a user security research program for SaaS-based collaborative platform of industrial-chain is proposed. This research program solves the problem of multi-tenants identity authentication and authority management. The main work of this paper includes the following points:1) According to the security requirements for multi-tenants and multi-users, this thesis has a detailed analysis on the following three aspects:authentication mode, authentication configuration technology and authority management.2) This paper analyzes the advantages and disadvantages of the existing authentication mode. And then, depending on the characteristics of the platform, this thesis uses five authentication modes, which support for tenants personalization options.3)This dissertation has a research on identity authentication configuration technology, builds the mapping between the identity of tenant and business service function, puts forward tenant-oriented personalized configuration algorithm and storage mechanism of configuration regulation for user identity authentication, allocates the corresponding identity authentication rule according to the safety requirement of users.4) This thesis studies the authority management technology, establishes an authority management model based on roles, puts forward a multi-level authorization algorithm for users. At last, the above algorithms are realized using dynamic menu generation technology and the URL address resolution.