Identity Propagation through Application Layers Using Contextual Mapping and Planted Values

A method for use with a data processing system including a front-end application sub-system, a back-end sub-system, and a data layer inspection sub-system associated with the back-end sub-system, the method comprising:

• receiving, by the front-end application sub-system, a plurality of test incoming user requests;
• for each test incoming user request in the plurality of test incoming user requests, generating, by the front-end application system, a pattern of outgoing statements that target the back-end system;
• for each test incoming user request, recording, in a respectively corresponding entry of a mapping data structure;
• the test incoming user request, and
• the pattern of outgoing statements corresponding to test incoming user request;
• and
• propagating source identification information from an application layer in the application front-end system to the data layer inspection sub-system using the entries of the mapping data structure.

An apparatus, comprising:

• a processor;
• and
• a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to:
• receive an incoming user request from a gateway system associated with an application front-end system;
• receive one or more outgoing statements targeting a back-end system and being generated by the application front-end system based on the received incoming user request;
• access a mapping data structure based on the one or more outgoing statements to thereby correlate the one or more outgoing statements with the incoming user request;
• retrieve source identification information associated with the incoming user request based on the correlation of the one or more outgoing statements with the incoming user request;
• and
• perform a data layer inspection operation based on the source identification information.