Multitenant Server Access Control via Tenant Relationship Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multitenant services, ensuring secure access to data across tenants while preventing data leakage is challenging, as existing methods either allow unrestricted access or require complex access right management, posing security risks.
Innovation Solution
A server system with determination units to assess the relationship between tenants and allow access only when the relationship permits, ensuring that access is restricted and controlled, using a three-tiered determination process to validate tenant identity and authorization for function execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If data of multiple tenants is managed by a shared server to improve cost efficiency, then cost efficiency is improved, but data security deteriorates due to increased risk of data leakage
Solution Approach 1:
The patent segments data access control into three distinct determination units that evaluate different aspects of access requests: tenant identity verification, function processing capability, and tenant relationship validation. This segmentation allows the system to maintain shared server resources while implementing granular security controls that prevent data leakage between tenants.
Solution Approach 2:
The patent introduces an intermediary access control mechanism that sits between the shared server and tenant data. The determination units act as intermediaries that intercept and evaluate all access requests, allowing the system to share infrastructure while maintaining logical data separation and preventing unauthorized access.
2Object-affected harmful factors
If complex access right management is implemented to prevent unauthorized access, then data security is improved, but system complexity increases
Solution Approach 1:
The access control system is segmented into three specialized determination units, each responsible for a specific aspect of access validation. This division of responsibility simplifies the overall system design by making each unit focused and manageable, while collectively providing comprehensive security.
Solution Approach 2:
Each determination unit performs a specific local function: verifying tenant identity, checking function processing capability, and validating tenant relationships. This local specialization allows the system to implement complex security checks without requiring a monolithic complex system, as each unit handles only its specific aspect of access control.
Data Source
AI summary
In a multitenant service, security of the entire service is guaranteed by logically separating data for each tenant, and performing control to prevent access to data of another tenant. In an operation of the multitenant service, there are some special cases in which an access to data of another tenant becomes necessary. Further, processing executable across tenants needs to be subjected to restrictions on an executor of the processing and a processing target in addition to restrictions on a processing content. In data access control of the multitenant service, a control operation to determine whether processing is executable across tenants for each API and a control operation to determine whether processing is executable across tenants according to tenant categories of the executor and the processing target are performed.