Prioritization of third party access to an online commerce site

• US 9,589,289 B2
• Filed: 03/31/2014
• Issued: 03/07/2017
• Est. Priority Date: 12/18/2001
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Leahy, Scott, Cohen, Alon
• Primary Examiner(s): Sall, El Hadji
• Application Number:
  US14/231,569
• Publication Number:
  US 20140215069A1
• Time in Patent Office: 1,072 Days
• Field of Search: 709/219, 709/225, 709/238, 709/245, 709/200, 718/105, 719/328, 719/329, 705/14.51
• US Class Current: 1/1
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0613 Third-party assisted
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/10015 Access to distributed or replicated servers, e.g. using brokers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1014 based on the content of a request
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Providing prioritization of user online access to an online commerce site. Third party applications using API function calls to access an online commerce site are restricted to specific services by an access rule. An access rule defines which API server on the online commerce site a specific third party application may access when using a specific API function call. In this way, the operator of the online commerce site may prioritize server access per service level agreements based on a specific third party application and API function call.

Claims

1. A method comprising:

requesting, by a machine having a memory and at least one processor, an access rule from a server, the server being one of a plurality of servers of a network-based site providing services, the plurality of servers including a plurality of application programming interface (API) servers configured to service API function calls received from a client, each API function call comprising a service request for a corresponding one of the services of the network-based site;

receiving the access rule, the access rule indicating a specific one of the plurality of API servers to be used for accessing one of the services of the network-based site; and

submitting an API function call for one of the services of the network-based site using the received access rule.

2. The method of claim 1, wherein the access rule comprises a uniform resource locator (URL) of the specific one of the plurality of API servers.

3. The method of claim 1, further comprising storing the access rule in a data store.

4. The method of claim 3, further comprising obtaining the access rule from the data store prior to submitting the API function call.

5. The method of claim 1, wherein subsequent requests for the access rule from the server are performed on a periodic basis.

6. The method of claim 1, wherein the network-based site comprises an online commerce site.

7. The method of claim 1, wherein the network-based site comprises a services-based site.

8. The method of claim 1, wherein the API function call comprises a request to transact an item, a request to retrieve information for an item, a request to retrieve a list of items a specific user is selling, or a request to search for items.

9. A system comprising:

a machine having a memory and at least one processor; and

an application on the machine and executable by the at least one processor, the application being configured to;

request an access rule from a server, the server being one of a plurality of servers of a network-based site providing services, the plurality of servers including a plurality of application programming interface (API) servers configured to service API function calls received from a client, each API function call comprising a service request for a corresponding one of the services of the network-based site;

receive the access rule, the access rule indicating a specific one of the plurality of API servers to be used for accessing one of the services of the network-based site; and

submit an API function call for one of the services of the network-based site using the received access rule.

10. The system of claim 9, wherein the access rule comprises a uniform resource locator (URL) of the specific one of the plurality of API servers.

11. The system of claim 9, wherein the application is further configured to store the access rule in a data store.

12. The system of claim 11, wherein the application is further configured to obtain the access rule from the data store prior to submitting the API function call.

13. The system of claim 9, wherein subsequent requests for the access rule from the server are performed on a periodic basis.

14. The system of claim 9, wherein the network-based site comprises an online commerce site.

15. The system of claim 9, wherein the network-based site comprises a services-based site.

16. The system of claim 9, wherein the API function call comprises a request to transact an item, a request to retrieve information for an n item, a request to retrieve a list of items a specific user is selling, or a request to search for items.

17. A non-transitory machine-readable storage medium, tangibly embodying a set of instructions that, when executed by at least one processor, causes the at least one processor to perform a set of operations comprising:

requesting, by a machine having a memory and at least one processor, an access rule from a server, the server being one of a plurality of servers of a network-based site providing services, the plurality of servers including a plurality of application programming interface (API) servers configured to service API function calls received from a client, each API function call comprising a service request for a corresponding one of the services of the network-based site;

receiving the access rule, the access rule indicating a specific one of the plurality of API servers to be used for accessing one of the services of the network-based site;

and submitting an API function call for one of the services of the network-based site using the received access rule.

18. The non-transitory machine-readable storage medium of claim 17, wherein the access rule comprises a uniform resource locator (URL) of the specific one of the plurality of API servers.

19. The non-transitory machine-readable storage medium of claim 17, wherein the set of operations further comprises storing the access rule in a data store.

20. The non-transitory machine-readable storage medium of claim 19, wherein the set of operations further comprises obtaining the access rule from the data store prior to submitting the API function call.