论文信息 - RBAC-Based Access Control for SaaS Systems

RBAC-Based Access Control for SaaS Systems

SaaS (Software as a Service) deliver software as a service over the Internet, eliminating the need to install and run the application on the customers' own computers and simplifying maintenance and support. Access control is an important information security mechanism, according to user identity and the attribution of a predefined group of users to restrict access to certain information items, and limit the use of certain functions. In view of the features of multi-tenant, if we apply existing access control methods to SaaS systems directly, the following problems will appear: (1) role name conflicts (2) cross-level management (3) the isomerism of tenants' access control. This paper propose the S-RBAC model which can be applied to SaaS systems, this model extends from the RBAC model and ARBAC97 model, it uses layered structures to achieve system-level and tenant-level access control, solves the SaaS system access control problems. And we put forward a way to implement the access control module for SaaS systems based on S-RBAC model.

Qiang Wei | Dancheng Li | Zhiliang Liu | Cheng Liu | Binsheng Liu

[1] Wang Xiao-ming. An Expanded Role-Based Access Control Model , 2006 .

[2] Messaoud Benantar,et al. Access Control Systems: Security, Identity Management and Trust Models , 2005 .

[3] D. Richard Kuhn,et al. Role-Based Access Controls , 2009, ArXiv.

[4] Jiwu Jing,et al. An Administrative Model for Role-Based Access Control Using Hierarchical Namespace , 2006, PACIS.

[5] Ravi S. Sandhu,et al. A model for role administration using organization structure , 2002, SACMAT '02.

[6] Zhang Li-ming. An Expanded Role-Based Access Control Model , 2004 .

[7] He Da-ke. Application of RBAC in the Railway Passenger Ticket Network Security System , 2004 .

[8] Ravi S. Sandhu,et al. Role-Based Access Control Models , 1996, Computer.

[9] Ian T. Foster,et al. A Flexible Attribute Based Access Control Method for Grid Computing , 2008, Journal of Grid Computing.

[10] Yücel Karabulut,et al. Secure Enterprise Services Consumption for SaaS Technology Platforms , 2009, 2009 IEEE 25th International Conference on Data Engineering.