A frequency control method and system for open platform access, and frequency server

Abstract

The invention discloses an open platform access frequency control method and system and a frequency server. The method includes the steps of respectively detecting frequency statistics states of corresponding AppID (Application Identity), User ID and networking protocol (IP) according to the information of AppID, User ID and IP carried by an API (Application Programming Interface) call request after receiving a call request for the API of an open platform from a third party; and according to the frequency statistics state, refusing the API call request when the access frequency of at least one of the AppID, user ID and IP in unit time exceeds an access upper limit of respective corresponding unit time. According to the invention, frequency control to the open platform can be enhanced and malicious call of API can be prevented.

Description

Technical field [0001] The present invention relates to the field of Internet communication technology, and in particular to a frequency control method and system for open platform access, and a frequency server. Background technique [0002] In the Internet era, the services of the website are encapsulated into a series of computer-readable data interfaces and opened for use by third-party developers. This behavior is called Open Application Programming Interface (Open API), which provides open application programming interface (API). , Application Programming Interface) platform is called open platform. Through the open platform, the website can not only provide simple access to web pages, but also perform complex data interactions, transforming its web site into a development platform equivalent to the operating system. Third-party developers can develop rich and colorful applications based on these existing and public Web sites. [0003] Open platforms appearing in the Intern...

AI Technical Summary

Problems solved by technology

However, this frequency control does not take into account the adverse effects of malicious calls from third parties on normal access to open platforms

For example: Assuming that the API service can be called 10,000 times per minute, and each user (User) can call each application (App, Application) service 1,000 times, then under normal circumstances, when the User continues to call, the API service can at most Support 10 users / per minute; if a third party maliciously registers 10 applications and makes continuous calls, then obviously only 1 user / per minute is allowed in this case, which will cause other legitimate requests to access to fail

Images