基于面向服务的多租户访问控制模型研究

Multi-tenant service oriented access control model

在具体搭建面向多租户的平台过程中,传统访问控制模型在多租户环境下无法满足租户之间的隔离访问以及对各租户的访问请求实行有效的统一管理。为了在多租户环境下实现一套快速的、访问控制可配置的实施方案,提出一个面向服务的多租户访问控制模型。根据对多视图业务模型之间的关联进行分析,识别出组织模型及其相关的资源模型。通过映射和转换将组织模型转换为面向服务的多租户访问控制模型,并构建访问控制模块对系统进行配置,然后运行访问控制模型。最后,以某交通物流信息平台为范例验证了该模型的可行性和有效性。验证结果表明,模型能够在多租户环境下提供兼备快速配置与访问控制的实现支持。

In the process of building the platform of facing muhi-tenant, the traditional access and control model can＇ t sati- stify the isolation access and manage their access request effectively, in order to control accessing to system resources in isolation and to manage requests from different groups of users uniformly, propose the MSOAC （ multi-tenant service oriented access control） model. Firstly, analyze the relationship among elements of business model and identify the organization mod- el and related resource models. After that, transform business model into MSOAC model and then build the access control module to configure and run the model. Lastly, examine the feasibility and correctness of the model with transportation and logistics information platform. The result shows the MSOAC model can properly be used to provide a simple and flexible access control solution in multi-tenant environment.