Research On Data Isolation And Access Control Based On Level 4 SaaS

With the development of cloud computing technology and the maturity of Web applications,software as a service(SaaS)has gradually gained attention as an application model of cloud computing,and has gradually become one of the important ways for enterprises to acquire information technology resources..But data storage and data security issues have always been the biggest concern for businesses.In order to solve the data storage and security problems of different tenants in the SaaS platform,this paper studies the technology of database isolation storage in the multi-tenant situation of SaaS platform,and proposes a multi-level access control model and dynamic permission model.To meet the needs of data isolation and access control in the complex business scenarios of the SaaS platform.Multi-tenant technology provides the same or even customized services for most users in a shared data storage center with a single system architecture and comprehensive services.Each tenant relies on data isolation and security in the actual operation process.For the three main data storage schemes of SaaS multi-tenant in storage mode,independent database,shared database isolation data architecture and shared database sharing table,hybrid database storage mode is adopted for data isolation.The database storage mode and flexible workflow of multi-tenant under various storage schemes are designed and implemented.For the management of security and dynamic rights of access control,a unified identity authentication system and a dynamic control system for access control are adopted.The user is controlled from four aspects: user login,authorization,authentication,and access.On the one hand,it prevents users from malicious operations and ensures enterprise data security,on the other hand,it improves the stability and flexibility of the SaaS platform.Finally,based on the farm management system,the database isolation and access control system of SaaS platform under multi-tenant is designed and implemented,and analyzed and verified.Experiments show that the model designed in this paper can effectively cope with SaaS complex.Multi-tenant data isolation and access control management in the environment.