Universal access layer for accessing heterogeneous data stores

A server computing device comprising:

• one or more processors;
• and
• memory storing instructions that, when executed by the one or more processors, cause the server computing device to:
• determine whether one or more requests for information received from a computing device complies with a canonical model;
• transform, based on a determination that the one or more requests for information does not comply with the canonical model, the one or more requests for information forming a transformed request;
• verify an access token included with the one or more requests for information to determine whether the computing device is authorized to access the information;
• parse, based on verification of the access token, the transformed request to extract a first request for a first piece of information and a second request for a second piece of information;
• transmit the first request for the first piece of information to a first data store, the first request being an encrypted request in response to the first piece of information including personally identifiable information;
• transmit the second request for the second piece of information to a second data store, the second request being an unencrypted request in response to the second piece of information omitting the personally identifiable information;
• receive the first piece of information from the first data store;
• receive the second piece of information from the second data store;
• aggregate the first piece of information and the second piece of information into a response;
• transform the response from the canonical model to a format compatible with the requesting device;
• and
• transmit, to a computing device, the response including the first piece of information and the second piece of information.

One or more non-transitory media storing instructions that, when executed by one or more processors, cause the one or more processors to perform steps comprising:

• determining whether a request for a first piece of information and a second piece of information complies with a canonical model;
• determining, based on a determination that the request for information complies with the canonical model, whether a device is authorized to access the information;
• determining that the first piece of information includes personally identifiable information;
• determining, based on the device being authorized to access the information, a first location of the first piece of information and a second location of the second piece of information, wherein the first location and the second location are different data stores;
• encrypting a first request for the first piece of information in response to the first piece of information including the personally identifiable information;
• transmitting the first request for the first piece of information to a first data store;
• transmitting a second request for the second piece of information to a second data store, the second request being transmitted as an unencrypted request in response to the second piece of information omitting the personally identifiable information;
• receiving the first piece of information from the first data store;
• receiving the second piece of information from the second data store;
• combining the first piece of information and the second piece of information into a response;
• transforming the response from the canonical model to a format compatible with the requesting device;
• and
• transmitting, using a wireless network connection, the response to a computing device.