本文選題：SaaS體系架構(gòu)　切入點(diǎn)：數(shù)據(jù)存儲(chǔ)層　出處：《北京交通大學(xué)》2014年碩士論文　論文類(lèi)型：學(xué)位論文

【摘要】：SaaS(Software as a Service)模式是云計(jì)算的三大模式之一,其具有多租戶、可配置的特性,它的出現(xiàn)解決了傳統(tǒng)的軟件架構(gòu)的擴(kuò)展能力弱、資源共享差和結(jié)構(gòu)單一等問(wèn)題。在信息系統(tǒng)領(lǐng)域,SaaS模式的應(yīng)用備受關(guān)注,但是由于在SaaS架構(gòu)下,租戶的所有數(shù)據(jù)信息均存儲(chǔ)在服務(wù)提供商的共享數(shù)據(jù)庫(kù)中,于是數(shù)據(jù)訪問(wèn)隔離、訪問(wèn)性能和訪問(wèn)控制安全等方面便成為租戶最擔(dān)心的問(wèn)題,這也是制約SaaS發(fā)展的問(wèn)題所在。因此針對(duì)SaaS信息系統(tǒng)架構(gòu)中數(shù)據(jù)存儲(chǔ)層和訪問(wèn)控制層的優(yōu)化研究便成為必然。 本文探討了SaaS信息系統(tǒng)體系架構(gòu),重點(diǎn)研究體系架構(gòu)中的數(shù)據(jù)存儲(chǔ)層和訪問(wèn)控制層的設(shè)計(jì)模式,從整體上優(yōu)化SaaS的體系架構(gòu)。主要工作內(nèi)容：(1)針對(duì)多租戶數(shù)據(jù)的共享性、通用性和個(gè)性化特性分別設(shè)計(jì)了數(shù)據(jù)存儲(chǔ)方案,基于傳統(tǒng)的鍵值對(duì)存儲(chǔ)模型提出了KVMBH(基于熱點(diǎn)的元數(shù)據(jù)驅(qū)動(dòng)的鍵值對(duì)存儲(chǔ)模型)解決方案,將其應(yīng)用到個(gè)性化數(shù)據(jù)的存儲(chǔ)管理中,構(gòu)建了整個(gè)SaaS環(huán)境下的數(shù)據(jù)存儲(chǔ)模型,并從數(shù)據(jù)空間占用情況和使用率兩方面驗(yàn)證了所提出方案的正確性。(2)對(duì)提出的數(shù)據(jù)存儲(chǔ)模型分別建立索引機(jī)制,通過(guò)實(shí)驗(yàn)驗(yàn)證改進(jìn)的數(shù)據(jù)模型在訪問(wèn)性能上的優(yōu)越性。(3)從安全角度出發(fā),提出了針對(duì)數(shù)據(jù)對(duì)象的MRBAC(基于角色多租戶訪問(wèn)控制模型)訪問(wèn)控制解決方案。 本文最后將改進(jìn)的存儲(chǔ)模型應(yīng)用于數(shù)據(jù)存儲(chǔ)層,MRBAC應(yīng)用于訪問(wèn)控制層,構(gòu)建改進(jìn)的SaaS信息系統(tǒng)架構(gòu)。實(shí)驗(yàn)中,將改進(jìn)的SaaS架構(gòu)應(yīng)用于優(yōu)秀教學(xué)評(píng)審系統(tǒng)中,給出了訪問(wèn)控制層實(shí)現(xiàn)功能介紹,并測(cè)試了改進(jìn)的SaaS系統(tǒng)的訪問(wèn)性能,驗(yàn)證了改進(jìn)架構(gòu)在性能和安全上的有效性。
[Abstract]:The SaaS(Software as a Service (SaaS(Software as a Service) pattern is one of the three major models of cloud computing, with its multi-tenant, configurable features, and its emergence as a solution to the weak scalability of traditional software architectures. In the field of information system, the application of SaaS model has attracted much attention. However, in the SaaS framework, all the data information of the tenant is stored in the shared database of the service provider, so the data access is isolated. Access performance and access control security become the most worrying problem for tenants, which is also the problem that restricts the development of SaaS. Therefore, it is necessary to optimize the data storage layer and access control layer in the SaaS information system architecture. This paper discusses the architecture of SaaS information system, focuses on the design patterns of data storage layer and access control layer in the architecture, and optimizes the architecture of SaaS. Based on the traditional key-value pair storage model, the solution of KVMBH (key-value pair storage model based on hot spot metadata driven) is proposed. It is applied to the storage management of personalized data, and the data storage model of the whole SaaS environment is constructed. The correctness of the proposed scheme is verified in terms of the data space occupancy and the utilization rate. (2) the proposed data storage model is indexed separately. The advantage of the improved data model in access performance is verified by experiments. From the security point of view, the MRBAC (role-based multi-tenant access control model) access control solution for data objects is proposed. Finally, the improved storage model is applied to the access control layer of data storage layer, and the improved SaaS information system architecture is constructed. In the experiment, the improved SaaS architecture is applied to the excellent teaching evaluation system. The implementation function of the access control layer is introduced, and the access performance of the improved SaaS system is tested, which verifies the effectiveness of the improved architecture in performance and security.
【學(xué)位授予單位】：北京交通大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類(lèi)號(hào)】：TP393.09

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 羅小利;吳清烈;任鴻美;;SaaS軟件服務(wù)基于大規(guī)模定制的數(shù)據(jù)層架構(gòu)研究[J];電信科學(xué);2012年04期

2 田維珍;郭歡歡;王連清;;SaaS安全技術(shù)研究[J];計(jì)算機(jī)安全;2010年07期

3 周鴻旋;;云環(huán)境下RBAC模型的改進(jìn)及應(yīng)用[J];閩江學(xué)院學(xué)報(bào);2012年05期

4 朱養(yǎng)鵬;張t，

本文編號(hào)：1589258