IP Library › Patent Application 17012503
Patent Application
App. No. 17/012,503

METHOD AND SYSTEM TO RATE LIMIT ACCESS TO DATA ENDPOINTS WITH POTENTIAL PRIVACY RISK

Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US None
App. No.
17/012,503
Abstract

A method, system, and computer program product for rate limiting access to data endpoints which includes a processor configured to monitor network traffic between one or more devices on a first network and a second network. The processor may receive a first data endpoint request from one of the one or more devices and compare the first data endpoint request to a ledger of one or more data endpoints. The ledger may have a rate limit associated with the one or more data endpoints which defines a threshold number of requests allowed for the one or more data endpoints. In response to the first data endpoint request matching one or more of the data endpoints on the ledger, the processor may block the first data endpoint request if the data endpoint request exceeds the threshold number of requests allowed for the matching data endpoint on the ledger.

Claims (55)

1 . A method for rate limiting access to data endpoints, the method comprising:

monitoring network traffic between one or more devices on a first network and a second network;

receiving a first data endpoint request from one of the one or more devices;

comparing the first data endpoint request to a ledger of one or more data endpoints, the ledger having a rate limit associated with the one or more data endpoints, the rate limit defining a threshold number of requests allowed for the one or more data endpoints;

in response to the first data endpoint request matching one or more of the data endpoints on the ledger, comparing the first data endpoint request to the rate limit associated with the matching data endpoint on the ledger; and

blocking the first data endpoint request if the data endpoint request exceeds the threshold number of requests allowed for the matching data endpoint on the ledger.

2 . The method according to claim 1 , comprising:

allowing the data endpoint request if the data endpoint request does not exceed the threshold number of requests allowed for the matching data endpoint on the ledger.

3 . The method according to claim 1 , wherein the one or more data endpoints on the ledger are data endpoints that are a privacy risk to the one or more devices on the first network.

4 . The method according to claim 1 , wherein the ledger includes a mapping of one or more triggering domains associated with each of the one or more data endpoints.

5 . The method according to claim 4 , comprising:

receiving a second data endpoint request, the second data endpoint being a request for a triggering domain of the one or more data endpoints;

activating a temporary rate limit for the one or more data endpoints associated with the triggering domain.

6 . The method according to claim 5 , comprising:

disabling the temporary rate limit for the one or more data endpoints associated with the triggering domain after a threshold period of time.

7 . The method according to claim 5 , comprising:

receiving a third data endpoint request, the third data endpoint request being for the same domain as the second data endpoint request; and

extending the temporary rate limit for the one or more data endpoints associated with the triggering domain.

8 . A system for rate limiting access to data endpoints, the system comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the instructions comprising:

monitoring network traffic between one or more devices on a first network and a second network;

receiving a first data endpoint request from one of the one or more devices;

comparing the first data endpoint request to a ledger of one or more data endpoints, the ledger having a rate limit associated with the one or more data endpoints, the rate limit defining a threshold number of requests allowed for the one or more data endpoints;

in response to the first data endpoint request matching one or more of the data endpoints on the ledger, comparing the first data endpoint request to the rate limit associated with the matching data endpoint on the ledger; and

blocking the first data endpoint request if the data endpoint request exceeds the threshold number of requests allowed for the matching data endpoint on the ledger.

9 . The system according to claim 8 , comprising:

allowing the data endpoint request if the data endpoint request does not exceed the threshold number of requests allowed for the matching data endpoint on the ledger.

10 . The system according to claim 8 , wherein the one or more data endpoints on the ledger are data endpoints that are a privacy risk to the one or more devices on the first network.

11 . The system according to claim 8 , wherein the ledger includes a mapping of one or more triggering domains associated with each of the one or more data endpoints.

12 . The system according to claim 11 , comprising:

receiving a second data endpoint request, the second data endpoint being a request for a triggering domain of the one or more data endpoints;

activating a temporary rate limit for the one or more data endpoints associated with the triggering domain.

13 . The system according to claim 12 , comprising:

disabling the temporary rate limit for the one or more data endpoints associated with the triggering domain after a threshold period of time.

14 . The system according to claim 12 , comprising:

receiving a third data endpoint request, the third data endpoint request being for the same domain as the second data endpoint request; and

extending the temporary rate limit for the one or more data endpoints associated with the triggering domain.

15 . A computer program product for rate limiting access to data endpoints, the computer program product comprising:

a computer-readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method, comprising:

monitoring network traffic between one or more devices on a first network and a second network;

receiving a first data endpoint request from one of the one or more devices;

comparing the first data endpoint request to a ledger of one or more data endpoints, the ledger having a rate limit associated with the one or more data endpoints, the rate limit defining a threshold number of requests allowed for the one or more data endpoints;

in response to the first data endpoint request matching one or more of the data endpoints on the ledger, comparing the first data endpoint request to the rate limit associated with the matching data endpoint on the ledger; and

blocking the first data endpoint request if the data endpoint request exceeds the threshold number of requests allowed for the matching data endpoint on the ledger.

16 . The computer program product according to claim 15 , comprising:

allowing the data endpoint request if the data endpoint request does not exceed the threshold number of requests allowed for the matching data endpoint on the ledger.

17 . The computer program product according to claim 15 , wherein the one or more data endpoints on the ledger are data endpoints that are a privacy risk to the one or more devices on the first network.

18 . The computer program product according to claim 15 , wherein the ledger includes a mapping of one or more triggering domains associated with each of the one or more data endpoints.

19 . The system according to claim 18 , comprising:

receiving a second data endpoint request, the second data endpoint being a request for a triggering domain of the one or more data endpoints;

activating a temporary rate limit for the one or more data endpoints associated with the triggering domain.

20 . The system according to claim 19 , comprising:

disabling the temporary rate limit for the one or more data endpoints associated with the triggering domain after a threshold period of time;

receiving a third data endpoint request, the third data endpoint request being for the same domain as the second data endpoint request; and

extending the temporary rate limit for the one or more data endpoints associated with the triggering domain.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 28, 2021
From: STOKES, RICHARD
To: WINSTON PRIVACY
Reel/Frame 057946/0774 →