CAJ | 학술논문

针对云服务中多租户应用面临越权访问和联合恶意攻击问题，综合聚类思想和基于密文策略的属性加密（CP-ABE）提出一种多租户授权管理访问控制模型（MTACM）。该模型根据多租户的业务特点将角色任务聚类为任务组，并采用匹配因子标记任务组，进而通过任务组授权管理角色属性，以实现角色的细粒度授权访问控制管理，减少系统计算量开销，降低系统的复杂度。在虚拟环境下实现了该模型算法，且通过逻辑推理证明了模型的安全性和系统访问的高效性。
침대운복무중다조호응용면림월권방문화연합악의공격문제，종합취류사상화기우밀문책략적속성가밀（CP-ABE）제출일충다조호수권관리방문공제모형（MTACM）。해모형근거다조호적업무특점장각색임무취류위임무조，병채용필배인자표기임무조，진이통과임무조수권관리각색속성，이실현각색적세립도수권방문공제관리，감소계통계산량개소，강저계통적복잡도。재허의배경하실현료해모형산법，차통과라집추리증명료모형적안전성화계통방문적고효성。
Considering the problem of unauthorized access and malicious attacks in multi-tenant application in the cloud services, this paper presents a Multi-Tenant Access Control Model(MTACM)which combines clustering and Ciphertext-Policy Attribute-Based Encryption strategy(CP-ABE). The model separates persona task into different task group according to multi-tenant service feature, and utilizes matching factor to mark task group, then manages persona attribute that is authorized by task group, which not only achieves persona’s fine-grained authorization access control management but also reduces the computational cost of the system and complexity of the system. The algorithm is realized in the virtual environment, and the model security and system access effectively is proof of logical deductions.