Patent ID: 9258274
Filing Date: 2016-02-09
CPC Classification: H04L

Claim Text:
1. An API call filtering system that filters API calls received, via a network, from user devices that are network-connected and running endpoint app software and/or hardware, to secure an API service that accepts API call requests and provides API call responses thereto, wherein the API service is secured against excessive request iterations from a set of rogue user devices while allowing for ordinary volumes of requests of the user devices, wherein one or more boundaries between what is deemed to be an ordinary volume of requests and what is deemed to be excessive request iterations are determined by predetermined criteria, the API call filtering system comprising: memory for storing data; a processor that executes program code; program code for handling requests from user devices, the requests being requests received via a network interface from the user devices; program code for determining a unique endpoint identifier (“UEID”) for a received request, and wherein the UEID is specific to a requesting user device that made the received request, wherein the UEID of the received request is determined, at least in part, from a personalized application programming interface (“API”) processing of the received request; storage for a plurality of references to user devices, the references being to their corresponding unique endpoint identifiers (“UEIDs”); program code for verifying with the requesting user device that it is the user device associated with the UEID included in the request from the requesting user device; and filter controller program code for dropping, filtering and/or forwarding requests wherein the filter controller program code operates, at least in part, by recognizing the UEIDs of the requests, wherein forwarding a request comprises sending a modified API call to the API service, wherein the modified API call is based on a received API call received from a requesting user device and wherein the modified API call is modified to conform to an expected API call format of the API service at least by omitting the UEID in the modified API call.