I want to write a mobile application to access a database that is currently held on our LAN and accessed by an application on the network. I know that I can open a port in our firewall to redirect the traffic from the mobile device to the database but I a concerned about the security.
What ways could I consider to provide secure mobile access to the database while still allowing access from the local network application?
What I would do in this situation is provide an interface like WCF (REST/JSON/etc.) to the database for your mobile users. Eventually you could even convert over to using that for the LAN and the web. The result would be even better security all around.
Here are some examples of how to do this:
Java RESTful Web Services Guide – http://www.oracle.com/technetwork/articles/javase/index-137171.html
WCF Guide – http://msdn.microsoft.com/en-us/netframework/dd939784
Overview of SOAP – http://www.w3schools.com/soap/default.asp