Identity Propagation through Application Layers Using Contextual Mapping and Planted Values

摘要

Mechanisms are provided for propagating source identification information from an application front-end system in an application layer to a data layer inspection system associated with a back-end system. An incoming user request is received, at the data layer inspection system, from a gateway system associated with the application front-end system. One or more outgoing statements targeting a back-end system are received at the data layer inspection system. The data layer inspection system accesses a mapping data structure based on the one or more outgoing statements to thereby correlate the one or more outgoing statements with the incoming user request. The data layer inspection system retrieves source identification information associated with the incoming user request based on the correlation of the one or more outgoing statements with the incoming user request. The data layer inspection system performs a data layer inspection operation based on the source identification information.

主权项

1. A method, in a data processing system, for propagating source identification information from an application front-end system in an application layer to a data layer inspection system associated with a back-end system, comprising:
receiving, at the data layer inspection system, an incoming user request from a gateway system, in the application layer, associated with the application front-end system; receiving, at the data layer inspection system, one or more outgoing statements targeting the back-end system and being generated by the application front-end system based on the received incoming user request; accessing, by the data layer inspection system, a mapping data structure based on the one or more outgoing statements to thereby correlate the one or more outgoing statements with the incoming user request; retrieving, by the data layer inspection system, source identification information associated with the incoming user request based on the correlation of the one or more outgoing statements with the incoming user request; and performing, by the data layer inspection system, a data layer inspection operation based on the source identification information.