CLIENT SESSION BLOCKING METHOD AND APPARATUS OF WEB APPLICATION SERVER

• US 20180124204A1
• Filed: 10/31/2017
• Published: 05/03/2018
• Est. Priority Date: 10/31/2016
• Status: Active Grant

• Current Assignee: Samsung SDS (China) Co., Ltd. (Samsung Group)
• Original Assignee: Samsung SDS (China) Co., Ltd. (Samsung Group)
• Inventors: LEE, Ju Ho
• Granted Patent: US 10,701,178 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70

Abstract

Provided is a client session blocking method performed by a client session blocking apparatus. The method comprises receiving a first request of a client for a service from a web server, performing a first determination regarding whether a session of the client for the service is valid, in response to the first determination indicating that the session is valid, performing a second determination regarding whether a number of consecutive calls for the service is equal to or greater than a predetermined threshold number of calls for the service and in response to the second determination indicating that the number of the consecutive calls is equal to or greater than the predetermined threshold number, blocking the session of the client for the service.

Claims

1. A client session blocking method performed by a client session blocking apparatus, the method comprising:

receiving a first request of a client for a service from a web server;

performing a first determination regarding whether a session of the client for the service is valid;

in response to the first determination indicating that the session is valid, performing a second determination regarding whether a number of consecutive calls for the service is equal to or greater than a predetermined threshold number of calls for the service; and

in response to the second determination indicating that the number of the consecutive calls is equal to or greater than the predetermined threshold number, blocking the session of the client for the service.

2. The method of claim 1, wherein the performing of the second determination comprises:

determining whether the first request was received within a predetermined time range after a time at which a second request for the service was received;

in response to determining that the first request was received within the predetermined time range, identifying the predetermined threshold number; and

performing the second determination based on the identified predetermined threshold number.

3. The method of claim 2 further comprises:

in response to the determining that the first request was received within the predetermined time range, recording a reception time of the first request; and

increasing the number of the consecutive calls.

4. The method of claim 2 further comprises:

in response to the determining that the first request was not received within the predetermined time range, recording a reception time of the first request; and

initializing a record of the number of the consecutive calls.

5. The method of claim 1, further comprising providing the client with a result indicating the blocking of the session of the client for the service.

6. The method of claim 5, wherein the service comprises a service executable by one of a first application and a second application,

wherein the blocking of the session of the client for the service comprises blocking a session of the first application when the session of the client for the service is the session of the first application, and

wherein the providing of the result indicating the blocking the session of the client for the service comprises providing information about the second application to the client in response to the blocking of the session of the first application.

7. The method of claim 1, further comprising:

in response to the second determination indicating that the number of the consecutive calls is less than the predetermined threshold number, calculating a difference between the number of the consecutive calls and the predetermined threshold number; and

changing the predetermined threshold number when the calculated difference is within a predetermined range.

8. The method of claim 1, wherein the receiving of the first request further comprises determining a type of a network from which the first request was received, and

wherein the performing of the second determination comprises:

determining the predetermined threshold number based on the determined type of the network;

performing the second determination based on a first threshold number in response to determining that the type of the network is a first type; and

performing the second determination based on a second threshold number in response to determining that the type of the network is a second type.

9. The method of claim 1, wherein the receiving of the first request further comprises determining whether a type of a network from which the first request was received is an intranet or an Internet, and

wherein the performing of the second determination comprises:

in response to determining that the type of the network is the Internet, determining a first threshold number corresponding to the intranet;

generating a second threshold number based on the determined first threshold number, wherein the second threshold number is smaller than the first threshold number by a predetermined value; and

performing the second determination based on the second threshold number.

10. A client session blocking apparatus comprising:

one or more processors;

a network interface;

a memory configured to load a computer program to be executed by the processors; and

a storage which stores the computer program,

wherein the computer program comprises instructions to perform;

an operation of receiving a first request of a client for a service from a web server;

an operation of performing a first determination regarding whether a session of the client for the service is valid;

an operation of performing a second determination regarding whether a number of consecutive calls for the service is equal to or greater than a predetermined threshold number in response to the first determination indicating that the session is valid; and

an operation of blocking the session of the client for the service in response to the second determination indicating that the number of the consecutive calls is equal to or greater than the predetermined threshold number.

11. A non-transitory computer-readable medium configured to store a computer program which, when executed, causes a computing apparatus to:

receive a first request of a client for a service from a web server;

perform a first determination regarding whether a session of the client for the service is valid;

in response to the first determination indicating that the session is valid, perform a second determination regarding whether a number of consecutive calls for the service is equal to or greater than a predetermined threshold number; and

in response to the second determination indicating that the number of the consecutive calls is equal to or greater than the predetermined threshold number, block the session of the client for the service.