Server computer protection apparatus and method for controlling data transfer by the same

• US 20030145236A1
• Filed: 01/29/2003
• Published: 07/31/2003
• Est. Priority Date: 01/30/2002
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Digital Solutions Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Tateoka, Masamichi
• Granted Patent: US 7,415,722 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

A threshold value outputting section has a server response measurement sub-section, a time-out counting sub-section, a suspension counting sub-section, and a threshold value counting sub-section, to variably set dynamically a threshold value of the number of times of the data request based on a condition of data requests suspended in the data request transmission section, a condition of a response sent from a server computer, etc. and then output this threshold value.

Claims

1. A server computer protection apparatus comprising:

means for receiving a data request sent from a client on behalf of a server;

means for measuring the number of times the data request, destined for a server computer, received from the client has been received by the server computer within a past specific period;

means for comparing the measured number of times of the data request to a threshold value;

means for suspending the received data request or transferring the received data request to the request-destination server computer in accordance with a result of the comparison; and

means for dynamically variably controlling the threshold value based on a suspension condition of the received data request and a condition of a response sent from the server when the data request is sent to the server.

3. The server computer protection apparatus according to claim 1, wherein the data request transmission means has means for making an attempt again to send the data requests once suspended to the server computer after different time lapses thereof have elapsed.

2. A server computer protection apparatus comprising:

request reception means for receiving a data request sent from a client on behalf of a server;

measurement means for measuring the number of times the data request, destined for a server computer, received by the request reception means from the client has been received by the server computer within a past specific period;

comparison means for comparing the number of times of the data request measured by the measurement means to a threshold value output from the threshold value outputting means; and

data request transmission means for suspending the data request received by the request reception means if a comparison result by the comparison means indicates that the number of times of the data request measured by the measurement means is in excess of the threshold value and sending the data request received by the request reception means to the server computer if the comparison result indicates that the number of times of the data request measured by the measurement means is not in excess of the threshold value, wherein;

the threshold value outputting means includes;

suspension counting means for counting the number of times the data request received by the request reception means has been suspended within a constant period;

server response measurement means for measuring a required time from a moment when the data request is sent from the data request transmission means to a moment when a response is received from the server computer which has received the data request;

time-out counting means for counting the number of times the required time measured by the server response measurement means has exceeded a predetermined time within a past specific time; and

threshold value counting means for receiving a count value of the suspension counting means for each specific time, subtracting the threshold value at a specified subtraction ratio if the count value is not more than a predetermined value and adding to the threshold value at a specified addition ratio if the count value of the suspension counting means is in excess of the predetermined value and a count value of the time-out counting means is not more than a predetermined value; and

the data request transmission means controls the transmission of the received data request based on a dynamic threshold value output from the threshold value counting means provided to the threshold value outputting means.

4. The server computer protection apparatus according to claim 2, wherein the data request transmission means has means for making an attempt again to send the data requests once suspended to the server computer after different time lapses thereof have elapsed.

5. The server computer protection apparatus according to claim 2, wherein the time-out counting means has means for counting the number of times the required time measured by the server response measurement means has exceeded a predetermined time within a past specific time and, if the count value is in excess of a specific value, initializing a value of the threshold value counting means using a value between a pre-specified minimum value and a current count value.

6. The server computer protection apparatus according to claim 5, wherein:

there is provided threshold value initialization history holding means for holding a history of the count value of the threshold value counting means obtained when the threshold value counting means is initialized; and

the addition ratio at which the count value of the threshold value counting means undergoes addition is determined on the basis of the history held in the threshold value initialization history holding means.

7. A data transfer controlling method comprising the steps of:

receiving a data request sent from a client on behalf of a server;

measuring the number of times the data request, destined for a server computer, received from the client has been received by the server computer within a past specific period;

comparing the measured number of times of the data request to a threshold value;

based on a result of the comparison, suspending the data request received or transferring the same to the request-destination server computer;

variably controlling the threshold value dynamically based on a suspension condition of the received data request and a condition of a response sent from the server when the data request is sent to the server; and

conducting data transfer control for suppressing within a variable range a rapid increase in an amount of the data requests received instead of the client to be transferred to the server computer.