Apparatus and method for providing a secure database access

A system providing a secure database access from an application program implemented on a client device in a first zone to a database located in a second zone different from the first zone, applying an Open Database Connectivity ODBC or a JAVA Database Connectivity JDBC application programming Interface as a traditional database access application programming interface, comprising

• a database access protocol interface driver including an authentication agent the database access protocol interface driver being implemented on the client device in the first zone,
• a database access proxy being connected to a data base and located in the second zone, wherein the database access driver and the database access proxy are implemented for
• performing an authentication of a user of the application program via an authentication agent located on the database access driver and an authentication server located in the second zone or in a third zone other than the first or second zone,
• delivering a credential and a role of the user for accessing the database from the authentication server to the database access driver in response to a successful authentication,
• sending the credential and the role of the user from the database access driver to the database access proxy, and
• enabling database access to the user of the application program, in response to the credential and the role of the user are accepted by the database access proxy,
• wherein the authentication server and the database access proxy periodically synchronize the role of the user for accessing the database.

A computer program product, comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement a method for providing a secure database access from an application program implemented on a client device located in a first zone to a database located in a second zone, which is outside of the first zone, applying an Open Database Connectivity ODBC or a JAVA Database Connectivity JDBC application programming Interface as a traditional database access application programming interface, the method comprising:

• implementing a database access driver on the client device in the first zone and implementing a database access proxy in the second zone, which is connected to the database,
• performing an authentication of a user of the application program via an authentication agent located on the database access driver and an authentication server located in the second zone or in a third zone other than the first or second zone,
• delivering a credential and a role of the user for accessing the database from the authentication server to the database access driver in response to a successful authentication,
• sending the credential and the role of the user from the database access driver to the database access proxy, and
• enabling database access to the user of the application program in response to the credential and the role of the user being accepted by the database access proxy, wherein the authentication server and the database access proxy periodically synchronize the role of the user for accessing the database.