Patent ID: 7415722

Claim:
A server computer protection apparatus comprising: request reception means for receiving, on behalf of a server computer, a data request sent from a client and destined for the server computer; measurement means for measuring the number of times the data request has been received by the server computer within a past specific period; comparison means for comparing the number of times the data request has been received by the server computer to a dynamic threshold value; and data request transmission means for: suspending the data request if the comparison indicates that the number of times the data request has been received is in excess of the threshold value, and sending the data request to the server computer if the comparison indicates that the number of times the data request has been received is not in excess of the threshold value; threshold value outputting means, comprising: suspension counting means for counting the number of times the data request has been suspended within a constant period; server response measurement means for measuring a server response time from a moment when the data request is sent to the server computer to a moment when a response is received from the server computer; time-out counting means for counting the number of times the server response time has exceeded a predetermined time within a past specific time and signaling an initialization when the number of times exceeds a predetermined number; threshold value counting means for: decreasing the threshold value by a specified subtraction ratio if the number of suspensions is not more than a predetermined value, increasing the threshold value by a specified addition ratio if the number of suspensions is in excess of the predetermined value, and setting the threshold value to an intermediate value between the threshold value and a minimum threshold value when an initialization is signaled; and threshold value initialization history holding means for holding a history of the threshold value when the threshold value is set to the intermediate value; wherein the addition ratio and the subtraction ratio are determined based on the history, and the data request transmission means controls the transmission of the received data request based on the threshold value.