secure desktop application with database

I need to build asp.net secure desktop application using windows form, and i don't know how the structure should be. I thought it should be that way: * client. *server with local db *ssl connection

The client send 'get' message to the server with the parameters and the action to do . The server builds and opperates the sql query and then return the answer to the client if needed.

Is it the right way? There is a better way to increase the security ? There is a recommended design pattern for this project?

Thanks in advance.