A Resilient Secure Data Access Architecture for Real-Time Web and Mobile Cloud Applications

Abstract

Real-time web and mobile applications, such as financial trading platforms and high-volume e-commerce, demand ultra-low-latency data access coupled with uncompromising security and fault tolerance. Traditional security models often introduce synchronous checks that degrade performance and become single points of failure. This paper proposes the Resilient Secure Data Access Architecture (RSDAA), a novel, multi-zone architecture designed to enforce security policies while maximizing availability and minimizing latency. RSDAA leverages a Decentralized Policy Enforcement Point (PEP) mesh combined with a leaderless, multi-region Policy Decision Point (PDP) to ensure continuous operation even during regional outages or security service failures. Key resilience mechanisms include asynchronous policy updates, fast failover routing based on health checks, and a "Secure-by-Cache" policy for transient network partitions. The empirical evaluation demonstrates that RSDAA achieves a $99.99\%$ availability for data access and maintains a P95 transaction latency increase of less than $1.0 \text{ms}$ under load, confirming its ability to deliver high-security standards without sacrificing the low-latency and resilience required by critical real-time cloud systems.