Title
Autonomous Decentralized Tenant Access Control Model for Sub-tenancy Architecture in Software-as-a-Service (SaaS)
Abstract
Sub-Tenancy Architecture (STA), is an extension of Multi-Tenancy Architecture (MTA), allows tenants to offer services for subtenant developers to customize their applications in the SaaS infrastructure [1]. In a STA system, tenants are autonomous decentralized entities who can create subtenants, and grant their resources (including private services and data) to their subtenants. The isolation and sharing relations between parent-child tenants, sibling tenants or non-related tenants are more complicated than those between tenants in MTA. It is important to keep resource private, and at the same time, allow them to be shared, and support application customizations for tenants. This paper provides a formal definition of a new tenant-based access control model based on Administrative Role-Based Access Control (ARBAC) for STA in SaaS. Autonomous Areas (AA) and AA-tree are proposed to describe the autonomy of tenants, including their isolation and sharing relationships. Different resource sharing methods are given out to create and deploy the access control scheme in STA models.
Year
DOI
Venue
2015
10.1109/ISADS.2015.47
ISADS
Keywords
Field
DocType
computer architecture,aa tree,resource allocation,resource management,cloud computing,modeling,organizations,software as a service,authorization,authorisation
Architecture,Computer science,Computer security,Multitenancy,Formal description,Software as a service,Access control,Shared resource,Leasehold estate
Conference
Citations 
PageRank 
References 
1
0.36
7
Authors
3
Name
Order
Citations
PageRank
Qiong Zuo151.11
Meiyi Xie274.86
Wei-Tek Tsai33601610.30