Encrypting and securing data with reverse proxies across frames in an on-demand services environment
In accordance with embodiments, there are provided mechanisms and methods for facilitating protection of data in a database environment in an on-demand services environment according to one embodiment. In one embodiment and by way of example, a method includes detecting, by a first computing device in the database environment, sensitive data associated with a user having access to a second computing device, where the sensitive data is capable of being communicated within a geographic residency. The method may further include performing, by the first computing device, secured communication of the sensitive data between at least one of multiple computing devices and multiple application frames within the geographic residency, wherein the first computing device includes a proxy server that is locally situated within the geographic residency.
1. A method comprising:
detecting, by a server computing device in the database environment, sensitive data capable of being communicated between multiple client computing devices, wherein the server computing device serves as a local proxy server within a geographic residency and is coupled to a token database located within the geographic residency, wherein the token database is associated with a client computing device of the multiple computing devices;
performing, by the server computing device, secured communication of the sensitive data between two or more of the multiple client computing devices across one or more application frames within the geographic residency, wherein the secured communication is performed based on localizing one or more communication paths associated with the two or more multiple computing devices and the one or more application frames as facilitated by the local proxy server within the graphics residency without having to access a centralized server computing device or engage one or more remotely-located security computing entities, wherein the local proxy server serves as a reverse proxy server within the geographic residency to associate the client computing device with the token database and one or more client computing devices of the multiple client computing devices; and
wherein the secured communication is performed based on tokenization of the sensitive data and encryption of the sensitive data.
2. The method of claim 1 , wherein one or more of the tokenization and the encryption are performed using one or more of tokens and encryption protocols, respectively, from the token database located within the geographic residency, wherein the secured data is received and de-tokenized or decrypted, respectively.
3. The method of claim 1 , wherein the one or more application frames comprise one or more of a user interface, an application programming interface (API), and a Representational State Transfer (REST) API, wherein the user interface includes a Web browser providing access to an application screen, wherein the Web browser serves as a primary application frame, and wherein the application screen serves as a secondary application frame within the primary application frame.
4. A system comprising:
a server computing device having, a processor coupled to memory, the processor facilitating a mechanism to:
detect sensitive data capable of being communicated between multiple client computing devices, wherein the server computing device serves as a local proxy server within a geographic residency and is coupled to a token database located within the geographic residency, wherein the token database is associated with a client computing device of the multiple computing devices;
perform secured communication of the sensitive data between two or more of the multiple client computing devices and across one or more application frames within the geographic residency, wherein the secured communication is performed based on localizing one or more communication paths associated with the two or more multiple computing devices and the one or more application frames as facilitated by the local proxy server within the graphics residency without having to access a centralized server computing device or engage one or more remotely-located security computing entities, wherein the local proxy server serves as a reverse proxy server within the geographic residency to associate the client computing device with the token database and one or more client computing devices of the multiple client computing devices; and
wherein the secured communication is performed based on tokenization of the sensitive data and encryption of the sensitive data.
5. The system of claim 4 , wherein one or more of the tokenization and the encryption are performed using one or more of tokens and encryption protocols, respectively, from the token database located within the geographic residency, wherein the secured data is received and de-tokenized or decrypted, respectively.
6. The system of claim 4 , wherein the one or more application frames comprise one or more of a user interface, an application programming interface (API), and a Representational State Transfer (REST) API, wherein the user interface includes a Web browser providing access to an application screen, wherein the Web browser serves as a primary application frame, and wherein the application screen serves as a secondary application frame within the primary application frame.
7. A non-transitory machine-readable medium comprising a plurality of instructions which, when executed by a server computing device, cause the server computing device to perform operations comprising:
detecting sensitive data capable of being communicated between multiple client computing devices, wherein the server computing device serves as a local proxy server within a geographic residency and is coupled to a token database located within the geographic residency, wherein the token database is associated with a client computing device of the multiple computing devices;
performing secured communication of the sensitive data between two or more of the multiple client computing devices and across one or more application frames within the geographic residency and is coupled to a token database located within the geographic residency, wherein the secured communication is performed based on localizing one or more communication paths associated with the two or more multiple computing devices and the one or more application frames as facilitated by the local proxy server within the graphics residency without having to access a centralized server computing device or engage one or more remotely-located security computing entities, wherein the local proxy server serves as a reverse proxy server within the geographic residency to associate the client computing device with the token database and one or more client computing devices of the multiple client computing devices; and
wherein the secured communication is performed based on tokenization of the sensitive data and encryption of the sensitive data.
8. The non-transitory machine-readable medium of claim 7 , wherein one Or more of the tokenization and the encryption are performed using one or more of tokens and encryption protocols, respectively, from the token database located within the geographic residency, wherein the secured data is received and de-tokenized or decrypted, respectively.
9. The non-transitory machine-readable medium of claim 7 , wherein the one or more application frames comprise one or more of a user interface, an application programming interface (API), and a Representational State Transfer (REST) API, wherein the user interface includes a Web browser providing access to an application screen, wherein the Web browser serves as a primary application frame, and wherein the application screen serves as a secondary application frame within the primary application frame.