DMZ framework

摘要

A method and system for providing a secure method and process for accessing resources that are made available by a server. A demilitarized zone (DMZ) framework provides a frontend system that is protected by a firewall and separated from a backend system by a second firewall. The frontend system provides the user interface functionality common to the backend but contains no access directly to the resources that the user interface operates upon. Placing the user interface on a separate machine from the resource data provides an additional layer of security. In addition, separate communication protocols are used between the user and the frontend and between the frontend and the backend system. Thus, a malicious programmer or program will not know the location of the resource or the method for communicating with the backend server to access the resource.

主权项

1. A method for data access comprising:
processing a first request for data according to a first protocol at a frontend system in a demilitarized zone, the frontend system providing a user interface for a backend system; and
sending a second request for the data according to a second protocol to a connector to the backend system to service the second requestproviding local access to a user of a resource through a backend interface, the backend system to send a user data request to the connector of the backend system.