Web service multi-key rate limiting method and system

Abstract

The present invention provides a method and computer system for limiting a number of web service programming calls including intercepting a web request for web service programming from a client and extracting call specific data from the web request. The method and computing system further includes transmitting call specific data to a plurality of rate limiter servers and on the rate limiter servers, calculating a total number of web requests, where the web requests are identified by the call specific data. The method and computing system further includes receiving web request totals from the rate limiter servers and thereby determining accessibility of the client to the web request based on a comparison of the number of web requests for the web service programming relative to a predetermined access limit.

1 . A method for limiting a number of web service programming calls, the method comprising:
 intercepting a web request for web service programming from a client;   extracting call specific data from the web request;   transmitting call specific data to a plurality of rate limiter servers;   on the rate limiter servers, calculating a total number of web requests, identified by the call specific data;   receiving web request totals from the rate limiter servers; and   determining accessibility of the client to the web request based on a comparison of the number of web requests for the web service programming relative to a predetermined access limit.   
     
     
         2 . The method of  claim 1  wherein the determination of accessibility includes denying access if the number of web requests exceeds the predefined limit. 
     
     
         3 . The method of  claim 1  further comprising: determining a priority designation of the web request, wherein the accessibility of the client to the web request is also based on the priority designation. 
     
     
         4 . The method of  claim 1  wherein the call specific data at least one of: a client identifier, an application identifier and a client IP address. 
     
     
         5 . The method of  claim 4  further comprising: generating a plurality of hashes from the call specific data; accessing a transport module to determine which of the plurality of rate limiter servers to send the hashes; and transmitting the hashes to the designated rate limit servers. 
     
     
         6 . The method of  claim 1  wherein the accessibility determination is predicated on receipt the web request totals from the rate limiter servers. 
     
     
         7 . The method of  claim 6  further comprising: re-assigning rate limiter server assignments if a connection is disrupted between the plurality of rate limiter server. 
     
     
         8 . Computer non-transitory readable media comprising program code that when executed by a programmable processor causes the processor to execute a method for limiting a number of web service programming calls, the computer readable media comprising:
 program code for intercepting a web request for web service programming from a client;   program code for extracting call specific data from the web request;   program code for transmitting call specific data to a plurality of rate limiter servers;   on the rate limiter servers, program code for calculating a total number of web requests, identified by the call specific data;   program code for receiving web request totals from the rate limiter servers; and   program code for determining accessibility of the client to the web request based on a comparison of the number of web requests for the web service programming relative to a predetermined access limit.   
     
     
         9 . The computer readable media of  claim 8  wherein the determination of accessibility includes denying access if the number of web requests exceeds the predefined limit. 
     
     
         10 . The computer readable media of  claim 8  further comprising: program code for determining a priority designation of the web request, wherein the accessibility of the client to the web request is also based on the priority designation. 
     
     
         11 . The computer readable media of  claim 8  wherein the call specific data comprises at least one of: a client identifier, an application identifier and a client IP address. 
     
     
         12 . The computer readable media of  claim 11  further comprising: program code for generating a plurality of hashes from the call specific data; program code for accessing a transport module to determine which of the plurality of rate limiter servers to send the hashes; and program code for transmitting the hashes to the designated rate limit servers. 
     
     
         13 . The computer readable media of  claim 8  wherein the accessibility determination is predicated on receipt the web request totals from the rate limiter servers. 
     
     
         14 . The computer readable media of  claim 13  further comprising: program code for re-assigning rate limiter server assignments if a connection is disrupted between the plurality of rate limiter server. 
     
     
         15 . An apparatus for limiting a number of web service programming calls, the apparatus comprising: a memory device having executable instructions stored therein; and a processing device, in response to the executable instructions, operative to: intercept a web request for web service programming from a client; extract call specific data from the web request; transmit call specific data to a plurality of rate limiter servers; on the rate limiter servers, calculate a total number of web requests, identified by the call specific data; receive web request totals from the rate limiter servers; and determine accessibility of the client to the web request based on a comparison of the number of web requests for the web service programming relative to a predetermined access limit. 
     
     
         16 . The apparatus of  claim 15  wherein the determination of accessibility includes denying access if the number of web requests exceeds the predefined limit. 
     
     
         17 . The apparatus of  claim 15 , the processing device, in response to the executable instructions, further operative to: determine a priority designation of the web request, wherein the accessibility of the client to the web request is also based on the priority designation. 
     
     
         18 . The apparatus of  claim 15  wherein the call specific data comprises at least one of: a client identifier, an application identifier and a client IP address, the processing device, in response to the executable instructions, further operative to: generate a plurality of hashes from the call specific data; access a transport module to determine which of the plurality of rate limiter servers to send the hashes; and transmit the hashes to the designated rate limit servers. 
     
     
         19 . The apparatus of  claim 15  wherein the accessibility determination is predicated on receipt the web request totals from the rate limiter servers. 
     
     
         20 . The apparatus of  claim 19 , the processing device, in response to the executable instructions, further operative to: re-assign rate limiter server assignments if a connection is disrupted between the plurality of rate limiter server.