Multi-tenant Database Access Control

Yaish, Haitham; Goyal, Madhu

doi:10.1109/cse.2013.131

Cited by 3 publications

(3 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Furthermore, the multi-tenant schema includes access control data architecture that allows each tenant to have a number of users with different types of access privileges [22].…”

Section: Elastic Extension Tablesmentioning

confidence: 99%

A Proxy Service for Multi-tenant Elastic Extension Tables

Yaish

Goyal

Feuerlicht

2015

Transactions on Large-Scale Data- And Knowledge-Centered Systems XX

Self Cite

View full text Add to dashboard Cite

Abstract. An important challenge in the design of multi-tenant databases that support Software as a Service (SaaS) applications is providing a platform that manages multiple tenants' data in single database storage. To address this challenge, we have previously proposed a multi-tenant database schema called Elastic Extension Tables (EET) that uses single shared database and shared schema for all tenants. In this paper, we extend this work with a multi-tenant database proxy service called Elastic Extension Tables Proxy Service (EETPS) that combines tenants' relational tables with virtual relational tables into single database schema for each tenant. This service enables data access by calling functions in order to avoid writing SQL queries and backend data management code. It allows the tenants to focus on their core business and easily create SaaS, mobile, web, and desktop software applications. We present the EETPS algorithms and perform several experiments to assess their feasibility and effectiveness by comparing the performance of retrieving data from traditional physical tables, virtual tables, and integrated physical and virtual tables.

show abstract

“…Furthermore, the multi-tenant schema includes access control data architecture that allows each tenant to have a number of users with different types of access privileges [22].…”

Section: Elastic Extension Tablesmentioning

confidence: 99%

A Proxy Service for Multi-tenant Elastic Extension Tables

Yaish

Goyal

Feuerlicht

2015

Transactions on Large-Scale Data- And Knowledge-Centered Systems XX

Self Cite

View full text Add to dashboard Cite

show abstract

“…Yaish et al [14,13] have proposed a multi-tenant database access control mechanism, called Elastic Extension Table Access Control (EETAC) that allows each tenant's with different type of access grants to access data in multi-tenant database. The mechanism of data retrieving in multi-tenant database is different from single-tenant database.…”

Section: Related Workmentioning

confidence: 99%

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

Hingwe

Bhanu

2016

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

Database-as-a-service provides services for accessing and managing customers data which provides ease of access, and the cost is less for these services. There is a possibility that the DBaaS service provider may not be trusted, and data may be stored on a untrusted server. The access control mechanism can restrict users from unauthorized access, but in cloud environment access control policies are more flexible. However, an attacker can gather sensitive information for a malicious purpose by abusing the privileges as another user and so database security is compromised. The other problems associated with the DBaaS is to manage role hierarchy and secure session management for query transaction in the database. In this paper, a role based access control for the multitenant database with role hierarchy is proposed. The query is granted with least access privileges, and a session key is used for session management. The proposed work protects data from privilege escalation and SQL injection. It uses the partial homomorphic encryption (Paillier Encryption) for the encrypting the sensitive data. If a query is to perform any operation on sensitive data, then extra permissions are required for accessing sensitive data. Data confidentiality and integrity are achieved by using the role-based access control with partial homomorphic encryption.

show abstract

“…After the user logs in to the system and the authentication succeeds, the user obtains the role and the corresponding authority, and determines whether to allow the access request resource according to the role privilege [3] . Fig5 is a state diagram of the user login system, reflecting the process of user login system status.The security scheme of the educational administration system is role-based access control under the premise of identity authentication, so only the users who succeed in authentication can have the role privilege and access the corresponding system resources.…”

Section: Object Privilege Analysismentioning

confidence: 99%

Role - based Access Control in Educational Administration System

Liu

Yan

et al. 2017

MATEC Web Conf.

View full text Add to dashboard Cite

Abstract. In the 21st century, the network of teaching management not only improves its quality and efficiency but also brings convenience to teachers and students. However, as a network application system, it also faces a variety of security issues. In order to improve the system security , the widely-used RBAC control method is introduced in this paper. Based on the refinement of system privilege and user role, this paper puts forward the security management model of "user classification, role authorization , Unified management ", which is more suited to the structure of multi-level applications by controlling the data range accessible to users, and ultimately achieves the purpose of strengthening the security of the system.

show abstract

Multi-tenant Database Access Control

Cited by 3 publications

References 18 publications

A Proxy Service for Multi-tenant Elastic Extension Tables

A Proxy Service for Multi-tenant Elastic Extension Tables

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

Role - based Access Control in Educational Administration System

Contact Info

Product

Resources

About