Research On The Key Technologies Of Multi-Tenant Model Management On Big Data Platform

With the rapid development of SaaS cloud technology,more and more software developers began to provide users with efficient and convenient software services by the cloud Internet.This new software delivery model greatly facilitates the users.But,it exposed some problems of access control security which is caused by multi-tenants characteristics.For example,the data isolation of the tenant is difficult to be protected,malicious tenants illegally access other tenants' data,permission system monotonous and complex management,etc.Based on the existing research,this thesis carried out some researches aiming at solve the problem of the access control model in the multi-tenant environment.The main content of this thesis is as follows:Firstly,this thesis analyzes traditional access control model and put forward the shortages of traditional access control model,such as mutual destruction between tenants?permission system monotonous and complex management.In order to solve these problems,this thesis proposed a multi-tenancy role-based access control model(MTRBAC).The basic idea of this model is the partition of objects,operations and permissions and proposes three principles: the principle of atomic permission,the principle of area mutual exclusion and the principle of single area.The results show that the model not only ensures the data isolation between tenants,but also makes access control management more convenient.Secondly,this thesis analyzes the demand and shortages of MT-RBAC model in data sharing aspect,and proposed a multi-tenancy role-based access control model which is supported data sharing(SMT-RBAC).Based on the data isolation of the MT-RBAC model,SMT-RBAC model added a special share tenant.The results show that SMT-RBAC model could complete the data sharing through share tenant.Finally,this thesis presents the Big Data SaaS Platform(BDSP)and the design and implementation of platform access control module based on SMT-RBAC model.Finally,the thesis introduces the implementations of single sign-on and the check of data consistency.