Open platform access frequency control method and system and frequency server

Abstract

The invention discloses an open platform access frequency control method and system and a frequency server. The method includes the steps of respectively detecting frequency statistics states of corresponding AppID (Application Identity), User ID and networking protocol (IP) according to the information of AppID, User ID and IP carried by an API (Application Programming Interface) call request after receiving a call request for the API of an open platform from a third party; and according to the frequency statistics state, refusing the API call request when the access frequency of at least one of the AppID, user ID and IP in unit time exceeds an access upper limit of respective corresponding unit time. According to the invention, frequency control to the open platform can be enhanced and malicious call of API can be prevented.

Description

technical field [0001] The invention relates to the technical field of Internet communication, in particular to a frequency control method and system for open platform access, and a frequency server. Background technique [0002] In the Internet era, the service of the website is packaged into a series of data interfaces that are easily recognizable by the computer and opened up for use by third-party developers. This behavior is called an open application programming interface (Open API). , Application Programming Interface) platform is called an open platform. Through the open platform, the website can not only provide simple access to web pages, but also perform complex data interaction, transforming its web site into a development platform equivalent to the operating system. Third-party developers can develop rich and colorful applications based on these existing and public Web sites. [0003] The open platforms appearing in the Internet include Weibo open platform, So...

AI Technical Summary

Problems solved by technology

However, this frequency control does not take into account the adverse effects of malicious calls from third parties on normal access to open platforms

For example: Assuming that the API service can be called 10,000 times per minute, and each user (User) can call each application (App, Application) service 1,000 times, then under normal circumstances, when the User continues to call, the API service can at most Support 10 users / per minute; if a third party maliciously registers 10 applications and makes continuous calls, then obviously only 1 user / per minute is allowed in this case, which will cause other legitimate requests to access to fail

Images