基于租户的访问控制模型T-ARBAC<br>A Tenant-Based Access Control Model T-Arbac

Abstract

SaaS service model not only greatly reduces the cost of enterprises, improves business efficiency, but also improves the management level of enterprises and accelerates the pace of innovation. However, it is an unavoidable problem that how to protect data for tenants when the data stored in the SP (service provider) data storage platform. And as the big amount of users in the platform, we also have to take management of user into consideration. This paper designed a new access control model T-ARBAC (Tenant-Administrative Role Based Access Control), combined with rolebased access control (RBAC) model, to support multi-tenant access control and facilitate the management of SaaS platform, meeting the requirements of diversity of tenant roles and independent access of coexisting data.

Autonomous Decentralized Authorization and Authentication Management for Hierarchical Multi-Tenancy

“…• RBAC-alike model for MTA isolation in SaaS After identifying the problems of applying RBAC to SaaS systems, Li [10], [11] propose a H-RBAC model, in which access control is divided into tenant-level and systemlevel with role delegation and time-constraints. T-Arbac [12] is proposed by adding "Tenant" into AR-BAC model. System-level and tenant-level administrations are separated.…”