Research On The OAuth2.0-based Authentication And Authorization SaaS Architecture In The Cloud Environment

It is difficult to imagine the development of science and technology in these years.When we are still immersed in the incredible software brought convenience,the times have been to the next level,the next more convenient direction.Cloud computing so quietly entered our era.Unexpected costs,efficient information processing capabilities,to give a lot of financial strength of small and medium enterprises unparalleled practical efficiency,to enable them to compare with large enterprises.However,data and software are commissioned "cloud",which will inevitably bring another problem-security issuesSaaS model as the main model of cloud computing,because of its simple deployment,low cost,easy to maintain the characteristics of small and medium enterprises by the general favor,many small and medium enterprises have deployed this model.Because of this,in such a model will inevitably face a more serious security risks.Providers to provide SaaS services to face this risk,in the use of cloud computing communications users have to face this riskThis paper mainly studies the SaaS architecture based on OAuth2.0 authentication in the cloud environment.By analyzing the data security between the users,the resource provider and the SaaS service provider,the OAuth2.0 protocol is used to solve the interactive authentication.Authorization issues,but also based on the HTTPS protocol to ensure that the three parties when the data transmission problems.And then further analysis of OAuth2.0 protocol in the development process often encountered security vulnerabilities,by adding digital certificate technology to ensure the legitimacy of the identity of both sides,but also based on TLS\SSL protocol to ensure that the authorization code and access token in the transmission process Not being stolen,thus optimizing the security of the OAuth protocol.At the end of this paper,the analysis and implementation of the specific case based on OAuth2.0 authentication and authorization SaaS architecture are analyzed.In the end,cloud computing which contains the number of potential and problems to be resolved need to carry on studying and discovering slowly.