Method, apparatus, and computer program product for implementing customizable caching strategy based on traffic pattern to optimize memory footprint and reduce latency

• US 10,536,557 B2
• Filed: 06/10/2016
• Issued: 01/14/2020
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: HERE Global B.V. (Nokia Corporation)
• Original Assignee: HERE Global B.V. (Nokia Corporation)
• Inventors: Raghavan, Gopalakrishna, Kotamarthi, Kalyan
• Primary Examiner(s): Kim, Jung W
• Assistant Examiner(s): Wickramasuriya, Sameera
• Application Number:
  US15/178,752
• Publication Number:
  US 20170359401A1
• Time in Patent Office: 1,313 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data

Abstract

A method, apparatus, and computer program product are provided to implement a customized caching strategy which optimizes the implementation based on usage patterns. In the context of a method a client request for a service is intercepted and an authentication check is performed for the client request based on cached data. In an instance in which the authentication check succeeds, the method performs an authorization check for the client request based on the cached data. In an instance in which the authorization check succeeds, the method forwards the client request for the service to the service. A corresponding apparatus and a computer program product are also provided.

Claims

1. A method comprising:

intercepting, by a processor, a client request for a service;

retrieving metadata related to the client request based on the client request;

causing the metadata related to the client request to be stored as cached data, wherein the cached data is periodically refreshed according to a subset of clients based upon a frequency with which the clients request a service, wherein the subset of clients based upon a frequency with which the clients request a service is periodically calculated on a per-region basis;

performing an authentication check for the client request based on cached data after retrieving metadata related to the client request;

in an instance in which the authentication check succeeds, performing an authorization check for the client request based on the cached data; and

in an instance in which the authorization check succeeds, forwarding the client request for the service to the service.

2. The method of claim 1 further comprising logging data associated with the client request.

3. The method of claim 1 further comprising:

checking a cache for data relevant to the client request;

in an instance in which the data relevant to the client request is not found in the cache, retrieving metadata related to the client request based on the client request; and

causing the retrieved metadata to be stored to the cache prior to performing the authentication check.

4. The method of claim 3 further comprising clearing data from the cache based on a time-to-live parameter associated with the data.

5. The method of claim 1 wherein the client request for the service comprises a client request for service by a Representational State Transfer (REST) Application Program Interface (API) endpoint.

6. The method of claim 1, wherein the subset of clients most frequently requesting a service on a per-region basis is periodically calculated on a per-service basis.

7. An apparatus comprising at least one processor and at least one memory including computer program instructions, the at least one memory and the computer program instructions, with the at least one processor, causing the apparatus at least to:

intercept a client request for a service;

retrieve metadata related to the client request based on the client request;

cause the metadata related to the client request to be stored as cached data, wherein the cached data is periodically refreshed according to a subset of clients based upon a frequency with which the clients request a service, wherein the subset of clients based upon a frequency with which the clients request a service is periodically calculated on a per-region basis;

perform an authentication check for the client request based on cached data after metadata related to the client request has been retrieved;

in an instance in which the authentication check succeeds, perform an authorization check for the client request based on the cached data; and

in an instance in which the authorization check succeeds, forward the client request for the service to the service.

8. The apparatus of claim 7 wherein the at least one memory and the computer program instructions, with the at least one processor, further cause the apparatus to log data associated with the client request.

9. The apparatus of claim 7 wherein the at least one memory and the computer program instructions, with the at least one processor, further cause the apparatus to:

check a cache for data relevant to the client request;

in an instance in which the data relevant to the client request is not found in the cache, retrieve metadata related to the client request based on the client request; and

cause the retrieved metadata to be stored to the cache prior to performing the authentication check.

10. The apparatus of claim 9 wherein the at least one memory and the computer program instructions, with the at least one processor, further cause the apparatus to clear data from the cache based on a time-to-live parameter associated with the data.

11. The apparatus of claim 7 wherein the client request for the service comprises a client request for service by a Representational State Transfer (REST) Application Program Interface (API) endpoint.

12. The apparatus of claim 7 wherein the apparatus is embodied by a Secure End Node (SEN).

13. A computer program product comprising at least one non-transitory computer-readable storage medium bearing computer program instructions embodied therein for use with a computer, the computer program instructions comprising program instructions which, when executed, cause the computer at least to:

intercept a client request for a service;

retrieve metadata related to the client request based on the client request;

cause the metadata related to the client request to be stored as cached data, wherein the cached data is periodically refreshed according to a subset of clients based upon a frequency with which the clients request a service, wherein the subset of clients based upon a frequency with which the clients request a service is periodically calculated on a per-region basis;

perform an authentication check for the client request based on cached data after metadata related to the client request has been retrieved;

in an instance in which the authentication check succeeds, perform an authorization check for the client request based on the cached data; and

in an instance in which the authorization check succeeds, forward the client request for the service to the service.

14. The computer program product of claim 13 wherein the computer program instructions further comprise program instructions which, when executed, cause the computer to log data associated with the client request.

15. The computer program product of claim 13 wherein the computer program instructions further comprise program instructions which, when executed, cause the computer to:

check a cache for data relevant to the client request;

in an instance in which the data relevant to the client request is not found in the cache, retrieve metadata related to the client request based on the client request; and

cause the retrieved metadata to be stored to the cache prior to performing the authentication check.

16. The computer program product of claim 15 wherein the computer program instructions further comprise program instructions which, when executed, cause the computer to clear data from the cache based on a time-to-live parameter associated with the data.

17. The computer program product of claim 13 wherein the client request for the service comprises a client request for service by a Representational State Transfer (REST) Application Program Interface (API) endpoint.