Prioritization of third party access to an online commerce site

• US 8,108,518 B2
• Filed: 10/25/2007
• Issued: 01/31/2012
• Est. Priority Date: 12/18/2001
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Leahy, Scott, Cohen, Alon
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): SALL, EL HADJI MALICK
• Application Number:
  US11/924,362
• Publication Number:
  US 20080046279A1
• Time in Patent Office: 1,559 Days
• Field of Search: 709/219, 709/225, 709/238, 709/245, 709/200, 725/110, 719/328, 719/329, 718/105, 705/14.51
• US Class Current: 709/225
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/10015 Access to distributed or replicated servers, e.g. using brokers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Providing prioritization of user online access to an online commerce site. Third party applications using API function calls to access an online commerce site are restricted to specific services by an access rule. An access rule defines which API server on the online commerce site a specific third party application may access when using a specific API function call. In this way, the operator of the online commerce site may prioritize server access per service level agreements based on a specific third party application and API function call.

Claims

1. A method comprising:

providing a plurality of servers to provide access to services of an online commerce site, the plurality of servers including application programming interface (API) servers for servicing API calls received from a client;

receiving a service request from the client via an API call at the online commerce site, the service request comprising a request for at least one of the services of the online commerce site;

identifying, by use of a processor, a first API server of the plurality of servers to which to direct the client for service by the online commerce site based on the service request in the API call;

obtaining an access rule for directing the client to the first API server for processing corresponding to the requested service in the service request, the obtained access rule being based on an identity of the client; and

replying to the service request with the access rule.

2. The method of claim 1 wherein the requested service is to perform a function to facilitate the online commerce.

3. The method of claim 1 wherein the requested service is to retrieve information regarding items that are available for transaction via the online commerce site.

4. The method of claim 1 wherein the access rule includes a URL that addresses the first API server.

5. The method of claim 1 wherein the access rule includes a reference to a CallName function.

6. The method of claim 1 wherein the service request includes an application ID to identify the access rule being returned.

7. The method of claim 1 wherein the service request includes a developer ID to identify the access rule being returned.

8. The method of claim 1 wherein the service request includes a session certificate in order to validate the client making the request.

9. The method of claim 1 wherein the access rule is to direct the client to the first API server in order to provide the client with a predetermined level of service associated with the first API server.

10. The method of claim 1 wherein the access rule includes a URL that addresses the first API server;

and the first API server performing the requested service.

11. A non-transitory machine-readable storage medium having executable instructions to cause a machine to:

provide access to a plurality of servers implementing services of an online commerce site, the plurality of servers including application programming interface (API) servers for servicing API calls received from a client;

receive a service request from the client via an API call at the online commerce site, the service request comprising a request for at least one of the services of the online commerce site;

identify a first API server of the plurality of servers to which to direct the client for service by the online commerce site based on the service request in the API call;

obtain an access rule for directing the client to the first API server for processing corresponding to the requested service in the service request, the obtained access rule being based on an identity of the client; and

reply to the service request with the access rule.

12. The non-transitory machine-readable storage medium of claim 11 wherein the requested service is to perform a function to facilitate the online commerce.

13. The non-transitory machine-readable storage medium of claim 11 wherein the requested service is to retrieve information regarding items that are available for transaction via the online commerce site.

14. The non-transitory machine-readable storage medium of claim 11 wherein the access rule includes a URL that addresses the first API server.

15. The non-transitory machine-readable storage medium of claim 11 wherein the access rule includes a reference to a CallName function.

16. The non-transitory machine-readable storage medium of claim 11 wherein the service request includes an application ID to identify the client.

17. The non-transitory machine-readable storage medium of claim 11 wherein the service request includes a developer ID to identify the client.

18. The non-transitory machine-readable storage medium of claim 11 wherein the service request includes a session certificate to identify the client.

19. The non-transitory machine-readable storage medium of claim 11 wherein the access rule is to direct the client to the first API server in order to provide the client with a predetermined level of service associated with the first API server.

20. A non-transitory machine-readable storage medium having executable instructions to cause a machine to:

request an access rule from a server via an application programming interface (API) call, the server being one of a plurality of servers to provide access to services of an online commerce site, the plurality of servers including API servers for servicing API calls received from a client, the request comprising a service request for one of the services of the online commerce site;

receive the access rule, the access rule including a uniform resource locator (URL) of a first API server of the plurality of servers, the first API server corresponding to the requested service in the service request, the received access rule being based on an identity of the client; and

use the URL of the first API server to request processing corresponding to the requested service in the service request.

21. The non-transitory machine-readable storage medium of claim 20 being further configured to store the access rule in a data store.

22. The non-transitory machine-readable storage medium of claim 21 being further configured to obtain the URL from the access rule stored in the data store.

23. The non-transitory machine-readable storage medium of claim 20 wherein the request being periodically scheduled.

24. The non-transitory machine-readable storage medium of claim 20 wherein the first API server is an online commerce auction server.

25. The non-transitory machine-readable storage medium of claim 20 wherein the access rule includes a URL that addresses the first API server;

and the first API server performing the requested service.