Tenant-Centric Attribute Semantic Access Control Policy Model for the Cloud Service Platform

In the open Internet environment, there is a cross-platform access control problem that when tenant needs to business resources of other collaborative platforms through cloud service platform, platform only supports within platform. When tenants need authorization method static and granularity coarse-grained, so dynamic fine-grained not supported. To solve above problems, based on ABAC, this paper proposes tenant-centric attribute semantic policy model for platforms. The its application framework can automatically evaluate whether it has or rights according change tenant’s attributes as determine obtain corresponding resources. Through practical case analysis, we prove ASACPM have good flexibility, scalability, practicability. addition, design some experimental scenarios verify performance meet our expectations reliability, validity, rationality.