Server computer protection apparatus and method for controlling data transfer by the same

• US 7,415,722 B2
• Filed: 01/29/2003
• Issued: 08/19/2008
• Est. Priority Date: 01/30/2002
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Digital Solutions Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Tateoka, Masamichi
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Gelagay; Shewaye
• Application Number:
  US10/352,904
• Publication Number:
  US 20030145236A1
• Time in Patent Office: 2,029 Days
• Field of Search: 726/12
• US Class Current: 726/12
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers

Abstract

A threshold value outputting section has a server response measurement sub-section, a time-out counting sub-section, a suspension counting sub-section, and a threshold value counting sub-section, to variably set dynamically a threshold value of the number of times of the data request based on a condition of data requests suspended in the data request transmission section, a condition of a response sent from a server computer, etc. and then output this threshold value.

Claims

1. A server computer protection apparatus comprising:

request reception means for receiving, on behalf of a server computer, a data request sent from a client and destined for the server computer;

measurement means for measuring the number of times the data request has been received by the server computer within a past specific period;

comparison means for comparing the number of times the data request has been received by the server computer to a dynamic threshold value; and

data request transmission means for;

suspending the data request if the comparison indicates that the number of times the data request has been received is in excess of the threshold value, and

sending the data request to the server computer if the comparison indicates that the number of times the data request has been received is not in excess of the threshold value;

threshold value outputting means, comprising;

suspension counting means for counting the number of times the data request has been suspended within a constant period;

server response measurement means for measuring a server response time from a moment when the data request is sent to the server computer to a moment when a response is received from the server computer;

time-out counting means for counting the number of times the server response time has exceeded a predetermined time within a past specific time and signaling an initialization when the number of times exceeds a predetermined number;

threshold value counting means for;

decreasing the threshold value by a specified subtraction ratio if the number of suspensions is not more than a predetermined value,

increasing the threshold value by a specified addition ratio if the number of suspensions is in excess of the predetermined value, and

setting the threshold value to an intermediate value between the threshold value and a minimum threshold value when an initialization is signaled; and

threshold value initialization history holding means for holding a history of the threshold value when the threshold value is set to the intermediate value;

wherein the addition ratio and the subtraction ratio are determined based on the history, and

the data request transmission means controls the transmission of the received data request based on the threshold value.

2. The server computer protection apparatus according to claim 1, wherein the data request transmission means includes means for attempting again to send the suspended data requests to the server computer after different time lapses thereof have elapsed.

3. A data transfer method comprising the steps of:

receiving a data request sent from a client and destined for a server;

measuring the number of times the data request has been received by the server computer within a past specific period;

comparing the number of times the data request has been received to a dynamic threshold value; and

suspending the data request if the comparison indicates that the number of times the data request has been received is in excess of the threshold value;

sending the data request to the server computer if the comparison indicates that the number of times the data request has been received is not in excess of the threshold value;

counting the number of times the data request has been suspended within a constant period;

measuring a server response time from a moment when the data request is sent to the server computer to a moment when a response is received from the server computer;

signaling an initialization when the server response time has exceeded a predetermined response period more than a predetermined number of times within a past specific time;

decreasing the threshold value by a specified subtraction ratio if the number of suspensions is not more than a predetermined value;

increasing the threshold value by a specified addition ratio if the number of suspensions is in excess of the predetermined value;

setting the threshold value to an intermediate value between the threshold value and a minimum threshold value when an initialization is signaled;

controlling the transmission of the received data request based on the threshold value; and

holding a history of the threshold value when an initialization is signaled, wherein the addition ratio and the subtraction ratio are determined based on the history.

4. The data transfer method of claim 3, further including attempting again to send the suspended data requests to the server computer after different time lapses thereof have elapsed.