Dual layer transport security configuration

A process comprising:

• receiving into a computer landscape a data transmission from a data transmission network, wherein the data transmission comprises a client certificate authentication and a user-based authentication;
• verifying, at a first layer of the computer landscape, the client certificate authentication, wherein the first layer of the computer landscape comprises a network layer;
• in response to determining at the first layer that the data transmission cannot be authenticated by the client certificate authentication, preventing the data transmission from being transmitted to a second layer of the computer landscape, thereby reducing network traffic that enters into the application layer, wherein the second layer of the computer landscape comprises an application layer;
• in response to determining that the data transmission is authenticated by the client certificate authentication, transmitting the data transmission to the second layer of the computer landscape;
• in response to receiving the data transmission at the second layer from the first layer, verifying the user-based authentication at the second layer;
• in response to determining at the second layer that the data transmission cannot be authenticated by the user-based authentication, preventing the data transmission from being processed at the second layer;
• and
• in response to determining at the second layer that the data transmission is authenticated by the user-based authentication, processing the data transmission at the second layer;
• wherein the client certificate authentication comprises an authentication for a particular client, the particular client comprising a plurality of users;
• wherein the particular client comprises a business organization;
• and
• wherein the data transmission from the second computer processor comprises a payment instruction transmission.

A computer readable storage device comprising instructions that when executed by a processor execute a process comprising:

• receiving into a computer landscape a data transmission from a data transmission network, wherein the data transmission comprises a client certificate authentication and a user-based authentication;
• verifying, at a first layer of the computer landscape, the client certificate authentication, wherein the first layer of the computer landscape comprises a network layer;
• in response to determining at the first layer that the data transmission cannot be authenticated by the client certificate authentication, preventing the data transmission from being transmitted to a second layer of the computer landscape, wherein the second layer of the computer landscape comprises an application layer;
• in response to determining that the data transmission is authenticated by the client certificate authentication, transmitting the data transmission to the second layer of the computer landscape;
• in response to receiving the data transmission at the second layer from the first layer, verifying the user-based authentication at the second layer;
• in response to determining at the second layer that the data transmission cannot be authenticated by the user-based authentication, preventing the data transmission from being processed at the second layer;
• and
• in response to determining at the second layer that the data transmission is authenticated by the user-based authentication, processing the data transmission at the second layer;
• wherein the client certificate authentication comprises an authentication for a particular client, the particular client comprising a plurality of users;
• wherein the particular client comprises a business organization;
• and
• wherein the data transmission from the second computer processor comprises a payment instruction transmission.