Design And Implementation Of SaaS Platform Data Security Mechanism

In the traditional software industry,if customers need some kind of software service,they must purchase the software from the developer.In order to run the software,they also need to provide the corresponding hardware and software environment.For business customers,the cost of using software in this way is prohibitive,which limits the growth of the software industry.The emergence of Software as a Service(SaaS)effectively reduces the cost of using software services.Customers rent a SaaS service over the network,eliminating the need to purchase and deploy software,or human resources to maintain the day-to-day operations of the software.However,in order to use the SaaS service,customers need to hand their data to the SaaS platform.For some highly data-sensitive customers,losing absolute control over the data is dangerous.They are eager to ensure the security of data through technical means.In this paper,aiming at the problem of data security in traditional SaaS platform,this paper proposes a scheme of using cryptography to protect the privacy of customers.The content includes the following three parts:1.Data encryption:data encryption includes plaintext,ciphertext,key and encryption algorithm 4 parts.The sender uses the key and the encryption algorithm to convert plaintext to meaningless ciphertext,and then sends the ciphertext.Even if the attacker intercepts the ciphertext,it can't recover the plaintext without the key,thus ensuring Data Security;2.Cryptographic search:plaintext is converted into ciphertext,the structure of the data has lost the information can't be found by traditional fuzzy search means.In this paper,the method of inverted index is proposed to directly retrieve the ciphertext by fuzzy search.3.Proxy Server:The traditional SaaS platform is B/S architecture,and clients use the browser to access the SaaS service.However,in order to ensure data security,the data needs to be encrypted.Obviously,a simple browser can't accomplish this task.Therefore,this paper proposes to introduce a layer of proxy server into the traditional SaaS platform architecture.By the proxy server to complete the work of data encryption.4.SaaS platform:SaaS platform is a multi-tenant sharing platform.In order to ensure the platform's own security,the tenant information needs to be encrypted and saved.Combined with the distributed nature of SaaS platform,this paper proposes a scheme of using blockchain encryption to preserve tenant information and prevent tenant information from being tampered.