SECURE CONNECTION BETWEEN A DATA REPOSITORY AND AN INTELLIGENCE APPLICATION

摘要

Embodiments of the invention are directed to systems, methods and computer program products for establishing a secure connection between a data repository and an intelligence application. In one embodiment, a method includes receiving, from a user device and using a processing device, a request from the intelligence application, the request communicated from the intelligence application through a data virtualization application and for obtaining access to the data repository; responding, using the processing device, to the request comprising preparing and sending an authentication request through the data virtualization application to the intelligence application; receiving authentication credentials from the intelligence application through the data virtualization application, the authentication credentials associated with one or more users of a plurality of users authorized to access the data repository; determining that the authentication credentials are valid; and providing device, access to the data repository in response to validating the authentication credentials.

主权项

1. An apparatus for establishing a secure connection between a data repository and an intelligence application for exchanging authentication credentials and secured data, whereby data repository authentication credentials are protected from being compromised as a result of user groups accessing the data repository over insecure channels, the apparatus comprising:
a memory; a processor; and a data repository JDBC driver stored in the memory, comprising computer software code that is executable by the processor, and configured to cause the processor to:
interface between a data virtualization layer and a data repository layer comprising a data repository, wherein the data repository JDBC is in operative communication with an intelligence application layer comprising an intelligence application through the data virtualization layer;receive a request from the intelligence application, originating from a user device, the request communicated from the intelligence application through a data virtualization application and for obtaining access to the data repository, wherein the data repository is configured for access by multiple users each using a same repository authentication credential;respond to the request by sending an authentication request through the data virtualization application to the intelligence application;receive authentication credentials from the intelligence application through the data virtualization application, the authentication credentials associated with one or more users of a plurality of users authorized to access the data repository;determine that the authentication credentials are valid; andin response to determining the user authentication credentials are valid, establish a secure communication channel between the intelligence application layer and the data repository layer through the data virtualization layer in order to provide the repository authentication credential to the data repository layer for authentication and access to the data repository.