API Identification via Traffic Path Extraction and Dynamic Tree Matching

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Obtaining a complete and accurate API list is challenging due to the complexity of modern systems, where APIs are scattered across various systems and services, leading to high manual maintenance costs and potential security vulnerabilities.

Innovation Solution

An API identification method and apparatus that dynamically updates a request path tree based on historical API request paths, using a wildcard node for dynamic parameters, and automatically adds new API request paths to the API list, ensuring real-time and accurate maintenance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual methods are used to maintain the API list, then the accuracy and completeness of the API list can be ensured, but the maintenance cost and time consumption will be extremely high

Engineering Contradiction:

ImproveAPI list accuracyVSAvoidmaintenance time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The system automatically extracts API request paths from network traffic and maintains the API list without human intervention. The apparatus autonomously performs extraction, matching, and updating operations, making the maintenance process self-service and eliminating the need for manual effort while ensuring continuous accuracy.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical maintenance operations with an automated computing system. The apparatus uses computational methods to extract paths from traffic data, match them against the request path tree, and update the API list automatically, substituting human manual work with automated information processing.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If manual methods are used to maintain the API list, then the accuracy and completeness of the API list can be ensured, but the maintenance cost will be extremely high

Engineering Contradiction:

ImproveAPI list accuracyVSAvoidmaintenance cost

Core Design Contradiction:

Measurement precisionVSEase of manufacture

Solution Approach 1:

The system performs self-maintenance by automatically extracting API paths from network traffic and updating the API list without requiring human operators. This eliminates labor costs associated with manual maintenance while maintaining high accuracy through automated extraction and matching processes.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces expensive manual maintenance operations with automated computational processes. The apparatus uses algorithms to extract, match, and update API information automatically, reducing maintenance costs by eliminating the need for human labor while preserving data accuracy.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Loss of information

If the API list is updated frequently to reflect rapid system iteration, then the completeness of the API inventory is improved, but the complexity of maintaining the list increases

Engineering Contradiction:

ImproveAPI inventory completenessVSAvoidmaintenance complexity

Core Design Contradiction:

Loss of informationVSDevice complexity

Solution Approach 1:

The system continuously monitors network traffic and automatically updates the API list in real-time as new APIs are deployed. This continuous operation ensures the API inventory remains complete and current without requiring periodic manual interventions, simplifying the maintenance process despite rapid system iterations.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The apparatus uses feedback from network traffic to automatically detect and add new API paths. By continuously analyzing incoming requests and comparing them against the existing request path tree, the system self-corrects and updates the API list to maintain completeness without increasing maintenance complexity.

Inventive Principle:

Principle #23Feedback

4Reliability

If a detailed and specific API list is maintained, then the security verification accuracy is improved, but the time and resources required for maintenance increase

Engineering Contradiction:

Improvesecurity verification accuracyVSAvoidmaintenance efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system automatically maintains a detailed and accurate API list by extracting paths from actual network traffic, ensuring security verification accuracy without requiring manual effort. The automated extraction and matching processes maintain high reliability while eliminating the productivity loss associated with manual maintenance.

Inventive Principle:

Principle #25Self-service

Data Source

PatentEP4561018A1Application programing interface identification method and apparatus, medium, and electronic device

Publication Date: 2025.05.28 BEIJING ZITIAO NETWORK TECH CO LTD

Figure 1
Figure 2~3
Figure 4

AI summary

The present disclosure relates to an application programing interface identification method and apparatus (200), a medium, and an electronic device (600). The method includes: extracting a current API request path from current network traffic; and in response to a target path matching the current API request path existing in a request path tree and an API list not including the target path, adding the target path to the API list, a node belonging to a dynamic parameter in the request path tree is a wildcard node.