Patent ID: 8719848
Filing Date: 2014-05-06
Classification: A63F,G06F,H04L

Abstract:
1. An information processing device offering various application programming interfaces (APIs) used for enabling application programs to implement various functions, the device comprising: a first storage unit configured to store therein, for each of the application programs, a web services description language (WSDL) file indicating API definition information of an API which is permitted to be used by an application program; a second storage unit configured to store therein developer information specifying a developer of the application program; a releasing unit configured to release, to the application program, a corresponding WSDL file; a reception unit configured to receive, through a web service, a request for use of a first API by a first application program; a first determination unit configured to determine whether or not the API definition information of the first API is indicated in a first WSDL file, of the WSDL files stored in the first storage unit, corresponding to the first application program, thereby determining whether or not the first application program is authorized for use of the first API; and a second determination unit configured to determine whether or not the first WSDL file is leaked, by using the developer information stored in the second storage unit when the first application program is determined as being unauthorized for use of the first API, wherein the second determination unit is further configured to determine that, in a case where the first application program is determined as being unauthorized for use of the first API and where the API definition information of the first API is indicated by a second WSDL file corresponding to another application program which is indicated by the developer information to be developed by a developer of the first application program, a probability that the first WSDL file is leaked is low; and to determine that, in a case where the first application program is unauthorized for use of the first API and where the API definition information of the first API is not indicated by the second WSDL file, a probability that the first WSDL file is leaked is high.