SaaS resource access control method based on resource permission tree

Abstract

The invention discloses a SaaS resource access control method based on a resource permission tree, which comprises the following steps: firstly, designing a SaaS access control theoretical model basedon the resource permission tree in combination with an H-RBAC model and an ABAC model, and referring to an H-RRBAC model for short; then performing resource authority distribution and access controlbased on the H-RRBAC model, and the method specifically comprises the steps that SaaS platform resource registration is carried out, and a resource directed atom tree is automatically generated; a resource directed tree is generated; a resource permission tree of the role is constructed; a resource permission tree of the user is generated; and when the user accesses the service, the access of theuser to the resources based on the resource permission tree of the user is controlled. The method can adapt to different permission management scenes of different tenants in the SaaS mode, efficient and low-complexity permission allocation is achieved, and meanwhile the permission access control requirements of different tenants for different granularities and dynamic attribute changes of resources are met.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a SaaS resource access control method based on a resource authority tree. Background technique [0002] SaaS is the abbreviated name of Software-as-a-Service, which means software as a service, that is, providing software services through the network. As a software application model of cloud computing, SaaS clearly defines software as a service, provides customers with reproducible "standardized" service solutions, and solves problems such as software construction, operation and maintenance costs, and management costs in customer information construction. Especially popular with SMEs. Although SaaS has many advantages, there are still many problems, among which SaaS security has become the primary problem restricting the development of SaaS model. In order to reduce service usage costs, service providers mostly design SaaS with the idea of ​​single-instance multi-tena...

AI Technical Summary

Problems solved by technology

At present, there have been attempts to combine the RBAC and ABAC models to achieve access control, but they have ignored the complexity of permission allocation. In the SaaS model, in order to ensure the data privacy of tenants, the access permissions of users in tenants to resources are usually managed by tenants. If the authority allocation complexity is too high, it will directly affect the use and promotion of SaaS

Images