SaaS模式下可插拔访问控制框架的设计  

Design of Pluggable Framework of Access Control for SaaS Model

作　　者：申利民[1] 刘波[1] 邢昌元[1] 宋诚忠[1] 

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛0660004

出　　处：《小型微型计算机系统》2010年第6期1107-1111,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60873008)资助;河北省自然科学基金项目(F2008000861)资助

摘　　要：目前的应用系统对其资源的访问控制往往与业务逻辑交织在一起,使访问控制模块开发和复用、系统维护及扩展变得复杂.针对SaaS模式下多租赁的特点,应用接口抽取方法与关注点分离思想,提出一种可以同时对多个系统进行访问控制管理,且满足SaaS模式下多租赁体系结构的可插拔的访问控制框架,给出了接口抽取法的形式化定义、插拔配置的方法和步骤、访问控制判定实现过程,在基本上不改变原应用系统程序的基础上,实现了对应用系统与访问控制框架的柔性连接.最后,通过一个会议系统的实例说明该框架的有效性.At present,application system often interweaves its resources＇ access control with its business logic,which makes the development,reuse,maintenance and expansion of the access control module complex.In the view of multi-tenant of SaaS model,the method of application interface extraction and thought of concern separation propose a hot plug access control architecture,which can carry on access control management to many systems simultaneously,and satisfy SaaS model＇s multi-tenant infrastructure.The architecture gives the method of interface extraction a formalized definition,gives hot plug a configuration method and steps,gives access control a criterion realization process,on the context of without changing original application system,realizing the flexible connection between application system and access control architecture.Finally,an instance of conference system is used to explain the validity of the framework.

关 键 词：访问控制 SAAS 访问控制框架 可插拔 多租赁性 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]