Research On Multi-tenancy Technology Of Application System Based On SaaS Pattern

SaaS is an application pattern which based on the Internet to provide software service, which is the mainstream trend of software technology development. It mainly has the features of extensibility, efficient multi-tenancy supportive and configurability and so on. Among them, multi-tenant is an vital characteristic of the SaaS which makes if different from other service modes. It is necessary to design more complicated solutions in order to meet the disparate needs of multiple tenants. The main problem to be solved is designing an effective data storage model and a flexible access control method, which could meet the various demands of tenants, equipping shared resources with benign scalability. The paper mainly conducts following research as to this problem:In terms of data storage, this paper gives a design method of database schema based on the attributes on the basis of general table with extension table schema through analyzing of the mainstream of multi-tenant data schema mapping technology. First of all, we classify the attributes according to the share of each attribute among the tenants in the source table and the tenant's business load. Then we use the important attributes to generate the appropriate base table. For the remaining attributes, we construct supplementary table. Finally, we describe the expanded attribute in the extension table and relationship between base table and supplementary table through the metadata. Theoretical analysis and experimental verification shows that our method achieves good scalability, extensibility and low space requirements.Aiming at the security problem of SaaS application system, this paper firstly analyzes the basic features and problems of its access control and gives a multi-layer hierarchical access control model based on ARBAC97 model, which combines the DAC model with ARBAC97 model in order to simplify the operation of rights management and realize local fine-grained access control no matter in the system level or in the tenant level. Secondly, the application model and the user's access control processes are analyzed in detail. Finally, the model is applied to the jewelry store business management cloud platform. System operation conditions show that the model is feasible and effective, which satisfies the business needs of different tenants.