Prioritization of third party access to an online commerce site

• US 7,305,469 B2
• Filed: 12/18/2001
• Issued: 12/04/2007
• Est. Priority Date: 12/18/2001
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Cohen, Alon, Leahy, Scott
• Primary Examiner(s): Hu; Jinsong
• Application Number:
  US10/025,267
• Publication Number:
  US 20040133478A1
• Time in Patent Office: 2,177 Days
• Field of Search: 709/225, 709/238, 709/245, 725/110
• US Class Current: 709/225
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/10015 Access to distributed or replicated servers, e.g. using brokers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Providing prioritization of user online access to an online commerce site. Third party applications using API function calls to access an online commerce site are restricted to specific services by an access rule. An access rule defines which API server on the online commerce site a specific third party application may access when using a specific API function call. In this way, the operator of the online commerce site may prioritize server access per service level agreements based on a specific third party application and API function call.

Claims

1. A method to provide access to services of a network-based auction site that includes a plurality of servers, the method comprising:

receiving an access request from a client, the access request including an API function call;

identifying an API server of the plurality of servers to which to direct the client for service by the network-based auction site;

generating an access rule associated with the client, the API function call, and the API server; and

transmitting the access rule to the client.

2. The method of claim 1 wherein the API sewer of the plurality of sewers is identified based on the identity of the client.

3. The method of claim 1 wherein the plurality of sewers includes a second server that provides a service level different from that of the API server, and wherein the access rule is associated with the client based on a service level agreement between the client and the online commerce site.

4. The method of claim 1 further including searching a database table for a record containing an access rule to reply to the client.

5. The method of claim 1 wherein the access rule includes a URL.

8. The method of claim 1 wherein the access request includes an application identifier.

9. The method of claim 1 wherein the access request includes a developer identifier.

10. The method of claim 1 wherein the access request includes a session certificate.

6. A method to facilitate access to services on a network-based auction site, the method comprising:

receiving a service request from a client for access to a service on an API server supporting the network-based auction site, the service request including at least a portion of an access rule associated with the client, an API function call, and the API server, the access rule having been previously provided to the client by the network-based auction site; and

validating the service request based on the access rule.

7. The method of claim 6 wherein the validating includes validating the service request based on whether a URL in the access rule is associated with the API server.

11. The method of claim 6 wherein the access rule includes a CallName.

12. The method of claim 6 further including providing the access to the service.

13. The method of claim 6 wherein the API server is an online auction server.

14. A readable storage medium having executable instructions to cause a machine to:

receive a service access request from a client for access to a service on an API server supporting a network-based auction site, the service request including at least a portion of an access rule associated with the client, an API function call, and the API server, the access rule having been previously provided to the client by the network-based auction site; and

validate the service request based on the access rule.

15. The machine storage medium of claim 14 wherein the executable instructions being further operable to validate the service request based on whether a URL in the access rule is associated with the API server.

16. The machine storage medium of claim 14 wherein the service access request includes an application identifier.

17. The machine storage medium of claim 14 wherein the service access request includes a developer identifier.

18. The machine storage medium of claim 14 wherein the service access request includes a session certificate.

19. The machine storage medium of claim 14 wherein the access rule includes a CallName.

20. The machine storage medium of claim 14 wherein the executable instructions being further operable to provide the access to the service.

21. The machine storage medium of claim 14 wherein the API server is in communication with an online auction server.

22. A machine storage medium having executable instructions to cause a machine to:

receive an access request from a client for access to services of a network-based auction site that includes a plurality of servers, the access request including an API function call;

identify an API server of the plurality of servers to which to direct the client for service by the network-based auction site;

generate an access rule associated with the client, the API function call, and the API server; and

transmit the access rule to the client.