高技术通讯2011，Vol.21Issue(10)：1007-1013,7.DOI:10.3772/j.issn.1002-0470.2011.10.003
基于身份映射的多租户隔离机制研究
Research on the multi-tenant isolation mechanism based on indentity mapping
摘要
Abstract
Based on the thorough study of the user access isolation of multi -tenant systems in cloud computation applications , the paper presents an account related model based on identity mapping, gives the formalized defintion of the isolation conception, and analyzes the prerequisites for isolation. And then, according to the designed objectives of lowest overhead and highest resource utilization, the objective function of the proposed model is established and its efficient solution (algorithm) is provided. The algorithm tries to select the mapping operation with lowest overhead to implement isolation based on system runtime information of mapping and resource usage, and tries to release redundant resources according to actual usage requirements. The experimental results show the model can achieve user access isolation with the better performance improvement by efficiently reducing system overhead and enhancing resource utilization.关键词
隔离模型/用户映射/资源绑定/系统优化/云计算安全Key words
isolation model/ user mapping/ resource binding/ system optimization/ security in clouding computing引用本文复制引用
覃安,余海燕..基于身份映射的多租户隔离机制研究[J].高技术通讯,2011,21(10):1007-1013,7.基金项目
863计划(2009AA01A131)和973计划(2005CB321807)资助项目. （2009AA01A131）
