Security
Security is of the utmost importance when doing business on the Web. JSecureConnect is a fully J2EE compliant JDBC driver that provides a complete layer of security for all JDBC database access. JSecureConnect provides a range of powerful security features that support the following important features required in a fully secure environment.
- JDBC Data privacy: Using a unique session key, JSecureConnect encrypts all information exchanged between the JDBC client and the database, such as credit card numbers or other confidential data. This ensures that confidential information cannot be viewed if intercepted by unauthorized persons.
- JDBC Authentication: Both sides of a secure JDBC connection can authenticate each other to ensure secure identity.
- JDBC Message integrity: JDBC data that is transferred over a network or Internet cannot be tampered with.
- Full Strength Encryption Keys: JSecureConnect uses the widely-adopted SSL/TLS encryption protocol which supports a range of full strength keys and cipher suites.
Performance
JSecureConnect has been extensively optimized to provide the performance required by your enterprise applications while still offering secure connectivity to any JDBC-supported database. There is no longer any need to sacrifice speed for security with JSecureConnect.
HTTP Tunneling
Security firewalls are used today by the majority of corporations to provide a layer of protection between internal users and potential security threats from the outside world. JSecureConnect provides a range of features that allow JDBC database access to be performed when the JDBC client is separated from the target database by a firewall or a secure proxy server. JSecureConnect support firewall tunneling with either the HTTP or HTTPS protocols. Usage of these industry-standard protocols ensures that firewall tunneling can be accomplished without requiring modification of the firewall configuration by the system administrator. In addition, the security level provided by the firewall is not compromised by requiring the system administrator to open additional ports.
JDBC Compliance
JSecureConnect is a JDBC 2.0 compliant driver and can therefore replace any non-secure JDBC driver used by a JDBC application with zero code changes required to the application. Applications that wish to use secure JDBC are only required to change their database connection properties to make secure connections. In a J2EE environment, these properties are typically configured into datasources, in which case the application requires no code change at all.