Systems and methods for front-end and back-end data security protocols

Abstract

A security framework and methodology is provided which provides front-end security through authentication and authorization, and back-end security through a virtual private data-store created within an insecure environment using existing object-relational mapping (ORM) layers or database drivers. The front-end security utilizes numerous multi-factor authentication metrics and a distributed denial of service (DDoS) cryptographic boundary to proactively attack malicious users using a cryptographic puzzle, and the back-end security provides data encryption and decryption, data privacy, data integrity, key management, pattern monitoring, audit trails and security alerts while simultaneously hiding the complexity behind an identical or similar ORM or database drive application programming interface (API).

What is claimed is: 
     
         1 . A system for securing application data, the system comprising:
 a multifactor authentication (MFA) server performing a plurality of user and client authentications;   a distributed denial of service (DDoS) protection server sending cryptographic puzzles to requesting clients; and   an application server hosting a virtual private data-store for application data, the application server comprising:
 an application configured to generate the application data, 
 an Object Relational Mapping (ORM) layer configured to convert the application data into values that can be stored in a database, 
 a data security module (DSM) configured to provide security processing for the application date, wherein security processing comprises at least some of data encryption and decryption, tamper protection, data privacy, key management, key access pattern monitoring, and generation of security alerts and events, and 
 a DSM-ORM adaptor, communicatively coupled between the ORM later and the DSM, which routes and maps sensitive data flowing from the application to the database, and vice versa, through the ORM, wherein the DSM-ORM adaptor determines whether the data is sensitive data based on at least one of an event, function pointer, hook, or similar mechanism.