Server computer protection apparatus and method for controlling data transfer by the same
First Claim
Patent Images
1. A server computer protection apparatus comprising:
- means for receiving a data request sent from a client on behalf of a server;
means for measuring the number of times the data request, destined for a server computer, received from the client has been received by the server computer within a past specific period;
means for comparing the measured number of times of the data request to a threshold value;
means for suspending the received data request or transferring the received data request to the request-destination server computer in accordance with a result of the comparison; and
means for dynamically variably controlling the threshold value based on a suspension condition of the received data request and a condition of a response sent from the server when the data request is sent to the server.
4 Assignments
0 Petitions
Accused Products
Abstract
A threshold value outputting section has a server response measurement sub-section, a time-out counting sub-section, a suspension counting sub-section, and a threshold value counting sub-section, to variably set dynamically a threshold value of the number of times of the data request based on a condition of data requests suspended in the data request transmission section, a condition of a response sent from a server computer, etc. and then output this threshold value.
35 Citations
7 Claims
-
1. A server computer protection apparatus comprising:
-
means for receiving a data request sent from a client on behalf of a server;
means for measuring the number of times the data request, destined for a server computer, received from the client has been received by the server computer within a past specific period;
means for comparing the measured number of times of the data request to a threshold value;
means for suspending the received data request or transferring the received data request to the request-destination server computer in accordance with a result of the comparison; and
means for dynamically variably controlling the threshold value based on a suspension condition of the received data request and a condition of a response sent from the server when the data request is sent to the server. - View Dependent Claims (3)
-
-
2. A server computer protection apparatus comprising:
-
request reception means for receiving a data request sent from a client on behalf of a server;
measurement means for measuring the number of times the data request, destined for a server computer, received by the request reception means from the client has been received by the server computer within a past specific period;
comparison means for comparing the number of times of the data request measured by the measurement means to a threshold value output from the threshold value outputting means; and
data request transmission means for suspending the data request received by the request reception means if a comparison result by the comparison means indicates that the number of times of the data request measured by the measurement means is in excess of the threshold value and sending the data request received by the request reception means to the server computer if the comparison result indicates that the number of times of the data request measured by the measurement means is not in excess of the threshold value, wherein;
the threshold value outputting means includes;
suspension counting means for counting the number of times the data request received by the request reception means has been suspended within a constant period;
server response measurement means for measuring a required time from a moment when the data request is sent from the data request transmission means to a moment when a response is received from the server computer which has received the data request;
time-out counting means for counting the number of times the required time measured by the server response measurement means has exceeded a predetermined time within a past specific time; and
threshold value counting means for receiving a count value of the suspension counting means for each specific time, subtracting the threshold value at a specified subtraction ratio if the count value is not more than a predetermined value and adding to the threshold value at a specified addition ratio if the count value of the suspension counting means is in excess of the predetermined value and a count value of the time-out counting means is not more than a predetermined value; and
the data request transmission means controls the transmission of the received data request based on a dynamic threshold value output from the threshold value counting means provided to the threshold value outputting means. - View Dependent Claims (4, 5, 6)
-
-
7. A data transfer controlling method comprising the steps of:
-
receiving a data request sent from a client on behalf of a server;
measuring the number of times the data request, destined for a server computer, received from the client has been received by the server computer within a past specific period;
comparing the measured number of times of the data request to a threshold value;
based on a result of the comparison, suspending the data request received or transferring the same to the request-destination server computer;
variably controlling the threshold value dynamically based on a suspension condition of the received data request and a condition of a response sent from the server when the data request is sent to the server; and
conducting data transfer control for suppressing within a variable range a rapid increase in an amount of the data requests received instead of the client to be transferred to the server computer.
-
Specification