Authors : Akanksha Pokale; G. A. Patil

Volume/Issue : Volume 11 - 2026, Issue 8 - August

---

Google Scholar : https://tinyurl.com/2m9z6ah6

Scribd : https://tinyurl.com/356akj7m

DOI : https://doi.org/10.38124/ijisrt/26aug704

Note : A published paper may take 4-5 working days from the publication date to appear in PlumX Metrics, Semantic Scholar, and ResearchGate.

---

Abstract : Keeping tenants properly separated, and stopping one customer's data from leaking into another's hands, is still one of the harder problems in multi-tenant cloud design. This paper puts forward the Secure Multi-Tenant Cloud Platform (SMTCP), a framework built specifically to make multi-tenant systems trustworthy. SMTCP keeps tenants apart through role-based access control, locks down stored data with AES-256 encryption, and protects data on the move with TLS 1.3. On top of that, row-level security in PostgreSQL makes it impossible for one tenant to read another tenant's rows, while JSON Web Token (JWT) authentication carries each tenant's identity and role inside every request so that validation stays both fast and reliable.

Keywords : JWT, Cloud Security, Row-Level Security, AES-256, Encryption.

References :

1. Bezemer, C. P., & Zaidman, A. (2010). Multi-tenant SaaS applications: Maintenance dream or nightmare? Proceedings of the Joint ERCIM Workshop on Software Evolution and International Workshop on Principles of Software Evolution, pp. 88–92.
2. Guo, C. J., Sun, W., Huang, Y., Wang, Z. H., & Gao, B. (2007). A framework for native multi-tenancy application development and management. Proceedings of the 9th IEEE International Conference on E-Commerce Technology and 4th IEEE International Conference on Enterprise Computing, E-Commerce and E-Services, pp. 551–558.
3. Sandhu, R. S., Coyne, E. J., Feinstein, H. L., & Youman, C. E. (1996). Role-based access control models. IEEE Computer, 29(2), pp. 38–47.
4. National Institute of Standards and Technology. (2001). Advanced Encryption Standard (AES). FIPS PUB 197. U.S. Department of Commerce.
5. Yaish, H., Goyal, M., & Feuerlicht, G. (2011). An elastic multi-tenant database schema for software as a service. Proceedings of the 2011 IEEE 8th International Conference on E-Business Engineering, pp. 409–414.
6. Mell, P., & Grance, T. (2011). The NIST definition of cloud computing. NIST Special Publication 800-145. National Institute of Standards and Technology.
7. Subashini, S., & Kavitha, V. (2011). A survey on security issues in service delivery models of cloud computing. Journal of Network and Computer Applications, 34(1), pp. 1–11.
8. Rescorla, E. (2018). The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446. Internet Engineering Task Force.
9. PostgreSQL Global Development Group. (2023). PostgreSQL 15 Documentation: Row Security Policies. PostgreSQL Documentation. https://www.postgresql.org/docs/current/ddl-rowsecurity.html
10. Hashicorp. (2023). Vault Documentation: Secrets Engines – Key/Value. Hashicorp Vault. https://developer.hashicorp.com/vault/docs/secrets/kv