Policy-Based Customized Privacy Preserving Mechanism for SaaS Applications

摘要

In the SaaS (Software as a Service) model, the sensitive data of tenants are in danger of leakage. Meanwhile there are different privacy requirements for different tenants. This paper presents a policy based customized privacy preserving mechanism which realizes the preserving of tenants' sensitive data. Based on the requirements of the tenants and the transactions of SaaS application, we build the policy of tenants' customized privacy preserving and fragment tenants' sensitive data through the Related Attributes Model(RAM). Finally we realize the effective combination of unencrypted privacy preserving and SaaS application's transaction. To avoid the leakage of tenants' privacy policy, this paper presents a trusted third party model to manage the policy of tenants' customized privacy preserving. The experiment certified it's an effective and practical privacy preserving mechanism.