Prioritization of third party access to an online commerce site

• US 8,239,533 B2
• Filed: 11/30/2011
• Issued: 08/07/2012
• Est. Priority Date: 12/18/2001
• Status: Expired due to Term

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Leahy, Scott, Cohen, Alon
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): SALL, EL HADJI MALICK
• Application Number:
  US13/307,625
• Publication Number:
  US 20120079114A1
• Time in Patent Office: 251 Days
• Field of Search: 709/219, 709/225, 709/238, 709/245, 709/200, 719/328, 719/329, 718/105, 705/14.51
• US Class Current: 709/225
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/10015 Access to distributed or replicated servers, e.g. using brokers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Providing prioritization of user online access to an online commerce site. Third party applications using API function calls to access an online commerce site are restricted to specific services by an access rule. An access rule defines which API server on the online commerce site a specific third party application may access when using a specific API function call. In this way, the operator of the online commerce site may prioritize server access per service level agreements based on a specific third party application and API function call.

Claims

1. A method comprising:

providing a plurality of servers to provide access to services of an online commerce site, the plurality of servers including application programming interface (API) servers for servicing API service requests, the plurality of servers including interfaces responsive to particular access rules for a service request;

receiving a service request from a requesting party at the online commerce site, the service request comprising a request for at least one of the services of the online commerce site and a certificate;

validating the service request using the certificate, wherein validating include determining whether the requesting API service requests is to an appropriate API server, wherein the appropriate API server determines whether a third party application has exceeded a predefined maximum rate usage level;

identifying, by use of a processor, a first service corresponding to the service request and identifying an API server of the plurality of servers for handling the first service;

obtaining an access rule enabling processing of the service request by the first service, the access rule being based on an identity of the requesting party and the certificate; and

redirecting the service request with the access rule for processing of the service request by the first service, wherein the first service is a premium service on the API server.

2. The method as claimed in claim 1 wherein the certificate is a session certificate.

3. The method of claim 1 wherein the plurality of servers includes servers that provide different levels of service.

4. The method of claim 1 wherein the online commerce site is a network-based auction site.

5. The method of claim 1 wherein the identifying further includes searching a database table for a record containing an identifier to reply to the requesting party.

6. The method of claim 1 wherein the identifier for the first service is a URL.

7. A non-transitory machine-readable storage medium having executable instructions to cause a machine to:

receive a service request from a requesting party at an online commerce site, the online commerce site providing a plurality of servers to provide access to services of the online commerce site, the plurality of servers including application programming interface (API) servers for servicing API service requests, the plurality of servers including interfaces responsive to particular access rules for the service request, the service request comprising a request for at least one of the services of the online commerce site and a certificate;

validate the service request using the certificate, wherein validating include determining whether the requesting API service requests is to an appropriate API server, wherein the appropriate API server determines whether a third party application has exceeded a predefined maximum rate usage level;

identify, by use of a processor, a first service corresponding to the service request and identify an API server of the plurality of servers for handling the first service;

obtain an access rule enabling processing of the service request by the first service, the access rule being based on an identity of the requesting party and the certificate; and

redirect the service request with the access rule for processing of the service request by the first service, wherein the first service is a premium service on the API server.

8. The machine-readable storage medium as claimed in claim 7 wherein the certificate is a session certificate.

9. The machine-readable storage medium as claimed in claim 7 wherein the plurality of servers include servers that provide different levels of service.

10. The machine-readable storage medium as claimed in claim 7 wherein the online commerce site is a network-based auction site.

11. The machine-readable storage medium as claimed in claim 7 wherein the identifying further includes searching a database table for a record containing an identifier to reply to the requesting party.

12. The machine-readable storage medium as claimed in claim 7 wherein the identifier for the first service is a URL.

13. A system comprising:

a plurality of servers to provide access to services of an online commerce site, the plurality of servers including application programming interface (API) servers for servicing API service requests, the plurality of servers including interfaces responsive to particular access rules for a service request; and

a service request processor to receive a service request from a requesting party at the online commerce site, the service request comprising a request for at least one of the services of the online commerce site and a certificate;

to validate the service request using the certificate, wherein validating include determining whether the requesting API service requests is to an appropriate API server, wherein the appropriate API server determines whether a third party application has exceeded a predefined maximum rate usage level;

to identify a first service corresponding to the service request and to identify an API server of the plurality of servers for handling the first service;

to obtain an access rule enabling processing of the service request by the first service, the access rule being based on an identity of the requesting party and the certificate; and

to redirect the service request with the access rule for processing of the service request by the first service, wherein the first service is a premium service on the API server.

14. The system as claimed in claim 13 wherein the certificate is a session certificate.

15. A method comprising:

providing a plurality of services at an online commerce site, the plurality of services including application programming interfaces (APIs) for servicing API service requests, the plurality of services including interfaces responsive to particular access rules for a service request;

receiving a service request from a requesting party, the service request comprising a request for at least one of the services of the online commerce site and a certificate;

validating the service request using the certificate, wherein validating include determining whether the requesting API service requests is to an appropriate API server (par.

     34), wherein the appropriate API server determines whether a third party application has exceeded a predefined maximum rate usage level;

identifying, by use of a processor, a first service corresponding to the service request and identifying an API for handling the first service;

obtaining an access rule enabling processing of the service request by the first service, the access rule being based on an identity of the requesting party and the certificate; and

redirecting the service request with the access rule for processing of the service request by the first service wherein the first service is a premium service on the API server.

16. The method as claimed in claim 15 wherein the certificate is a session certificate.