Patent ID: 11928532
Assignee: IDEATEC CO., LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 0:
1. A gateway device for integrally processing APIs with a security function that integrally manages API calls and response information between a client device and a plurality of API servers, the gateway device comprising:
a setting unit configured to provide a work interface for setting a work scenario for an API service so that API-related work of a service, which is configured to use a plurality of API calls and response information, is set and used as a user-defined API service, and
receive setting information about performing combination of a plurality of APIs constituting the API service from the client device through the work interface;
a registering unit configured to register the setting information as work scenario information for the API service;
an integrally-performing unit configured to, when receiving request information for a pre-registered API service from the client device, in linkage with the registering unit, extract the work scenario information corresponding to the request information,
perform combination and execution of a plurality of APIs included in the work scenario information in parallel or in series in accordance with an API execution type set in advance in the work scenario information,
create a service execution result, based on response information received from each of a plurality of API servers respectively corresponding to the plurality of APIs in accordance with the performance, and
transmit the service execution result to the client device; and
a security-processing unit configured to, in linkage with the integrally-performing unit, create log information about API server call and response for each of a plurality of APIs according to the work scenario information and then create connection pattern information based on a plurality of items of log information corresponding to the work scenario information, and apply the created connection pattern information and the work scenario information to a preset learning model that has learned correlation between work scenario information, connection pattern information, and whether the connection pattern information is normal, thereby determining whether there is a problem,
wherein the security-processing unit determines that there is a problem when an estimated result of abnormality obtained by applying the created connection pattern information and the work scenario information to the learning model is a preset reference value or more, creates and transmits notification information to a preset terminal when there is a problem, and
wherein the registering unit matches and stores the work scenario information received from the client device with pre-stored user information corresponding to the client device when registering the work scenario information; the gateway device further includes a managing unit configured to check a connection right of the client device, when receiving request information from the client device, by comparing user authentication information according to the request information and user authentication information included in the pre-stored user information corresponding to the client device with each other in accordance with at least one of a connection location of the client device, a user right according to user authentication information, and a connection path pattern, based on preset rule information; and the integrally-performing unit creates the service execution result when the client device is authenticated in linkage with the managing unit.