WAAP API Hash Verification for Integrated Client Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing integrated web security solutions fail to comprehensively protect web environments against API attacks, such as hacking and data breaches, while imposing a burden on individuals and companies due to the need for multiple single-function security measures, and there is a growing demand for integrated web security solutions that include API protection, bot mitigation, and DDoS defense.
Innovation Solution
A WAAP-based security system that includes a service provider and a hash verification tool, which registers, stores, and verifies APIs using identifiers and hashes, performs security handshakes, and manages sessions to ensure secure API communication, providing additional functions like bot mitigation and DDoS defense.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple single-function security solutions are introduced to protect against API attacks, then security coverage is improved, but system complexity and implementation burden increase
Solution Approach 1:
The patent combines multiple security functions (API security, bot mitigation, DDoS defense, and web application firewall) into a single integrated WAAP platform. This consolidation maintains comprehensive security coverage while reducing system complexity by eliminating the need to deploy and manage multiple separate security solutions.
Solution Approach 2:
The WAAP platform is designed as a universal security solution that performs multiple security functions simultaneously. It can protect against various API attacks, mitigate bot threats, defend against DDoS attacks, and provide web application firewall capabilities all through one system, thereby improving security coverage without increasing implementation burden.
2Reliability
If comprehensive API security protection is implemented, then security against API attacks is improved, but cost and implementation burden increase
Solution Approach 1:
The patent integrates API security protection with other security functions (bot mitigation, DDoS defense, WAF) into a unified WAAP platform. This merging approach provides comprehensive API security protection while reducing implementation burden by allowing deployment through a single integrated system rather than multiple separate solutions.
Solution Approach 2:
The system performs preliminary security verification of APIs through hash comparison before allowing execution. The WAAP platform pre-registers APIs and stores their hash values, enabling automated verification that prevents unauthorized or malicious API execution without requiring complex real-time analysis during runtime.
3Reliability
If hash verification is performed for every API request, then API authenticity is improved, but processing time increases
Solution Approach 1:
The system performs the computationally intensive hash calculation and verification setup in advance during API registration. The WAAP platform pre-calculates and stores hash values of legitimate APIs, so that during runtime, verification only requires comparing incoming API hashes against pre-stored values, significantly reducing processing time while maintaining authenticity verification.
Solution Approach 2:
Instead of performing complex verification operations on every API request, the system creates hash copies of the original APIs during registration and stores these copies for rapid comparison. This copying approach allows fast verification by comparing simple hash values rather than analyzing complete API code or structures in real-time.
Data Source
AI summary
Disclosed is a security method for client application programming interface (API) security that is performed by a security device including a service provider and a hash verification tool. The security method may comprise: registering, by the service provider, the API in the hash verification tool; storing, by the hash verification tool, the API, an identifier (ID) of the API, and a hash; and transmitting, by the hash verification tool, the ID and the hash to the service provider.