IP Library › Granted Patent US 11,968,231
Granted Patent B2
US 11,968,231 · App. 17/393,504 · Granted Apr 23, 2024

Intelligent request routing within service mesh

Inventors: Sudheesh S. Kairali (Kozhikode, IN); Sarbajit K. Rakshit (Kolkata, IN)
Assignee: International Business Machines Corporation
H04L63/18H04L45/306H04L63/0263H04L63/102H04L63/1408H04L67/535
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,968,231
App. No.
17/393,504
Granted
Apr 23, 2024
Kind
B2
Abstract

A processor may identify one or more predicted microservice chains for each of one or more user profiles. The one or more predicted microservice chains may be selected based on historical information. The one or more user profiles may each be associated with a respective user of a user device. The processor may analyze user specific information. The user specific information may be associated with the user device. The processor may determine, based on the user specific information, if the user device causes network intrusion. The processor may perform, based on the determination, an action for the user device.

Claims (55)

1. A system for intelligent request routing to address network intrusion within service mesh, the system comprising:

a memory; and

a processor in communication with the memory, the processor being configured to perform operations comprising:

identifying one or more predicted microservice chains for each of one or more user profiles, wherein the one or more predicted microservice chains are selected based on historical information, and wherein the one or more user profiles are each associated with a respective user of a user device;

analyzing user specific information, wherein the user specific information is associated with the user device;

determining, based on the user specific information, if the user device causes network intrusion;

automatically generating, based on the user device causing network intrusion, one or more temporary secured microservice chains and routing requests from the user device to the one or more temporary secured microservice chains;

determining if the user device has caused errors above an error threshold within a specific time period; and

automatically applying, based on the user device causing errors above the error threshold, a rate limit to the user device.

2. The system of claim 1 , wherein determining if the user device causes network intrusion comprises:

identifying that the user device does not cause network intrusion detection; and

allowing requests from the user device to move to an original chain.

3. The system of claim 1 , wherein the processor is further configured to perform operations comprising:

analyzing interactions of the user device in the one or more temporary secured microservice chains;

identifying that the user device has not caused errors above an error threshold within a specific time period;

generating, automatically, a routing request to an original microservice chain; and

routing activities of the user device to the original microservice chain.

4. The system of claim 1 , wherein the one or more temporary secured microservice chains are a new version for each of the microservices participating in a network.

5. The system of claim 4 , wherein the processor is further configured to perform operations comprising:

generating one or more request routing rules, wherein the one or more request routing rules ensure that activity from the user device is routed to the one or more temporary secured microservice chains.

6. A computer-implemented method for intelligent request routing to address network intrusion within service mesh, the method comprising:

identifying, by a processor, one or more predicted microservice chains for each of one or more user profiles, wherein the one or more predicted microservice chains are selected based on historical information, and wherein the one or more user profiles are each associated with a respective user of a user device;

analyzing user specific information, wherein the user specific information is associated with the user device;

determining, based on the user specific information, if the user device causes network intrusion;

automatically generating, based on the user device causing network intrusion, one or more temporary secured microservice chains and routing requests from the user device to the one or more temporary secured microservice chains;

determining if the user device has caused errors above an error threshold within a specific time period; and

automatically applying, based on the user device causing errors above the error threshold, a rate limit to the user device.

7. The method of claim 6 , wherein determining if the user device causes network intrusion comprises:

identifying that the user device does not cause network intrusion detection; and

allowing requests from the user device to move to an original chain.

8. The method of claim 6 , further comprising:

analyzing interactions of the user device in the one or more temporary secured microservice chains;

identifying that the user device has not caused errors above an error threshold within a specific time period;

generating, automatically, a routing request to an original microservice chain; and

routing activities of the user device to the original microservice chain.

9. The method of claim 6 , wherein the one or more temporary secured micro service chains are a new version for each of the microservices participating in a network.

10. The method of claim 9 , further comprising:

generating one or more request routing rules, wherein the one or more request routing rules ensure that activity from the user device is routed to the one or more temporary secured microservice chains.

11. A computer program product for intelligent request routing to address network intrusion within service mesh comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform operations, the operations comprising:

identifying one or more predicted microservice chains for each of one or more user profiles, wherein the one or more predicted microservice chains are selected based on historical information, and wherein the one or more user profiles are each associated with a respective user of a user device;

analyzing user specific information, wherein the user specific information is associated with the user device;

determining, based on the user specific information, if the user device causes network intrusion;

automatically generating, based on the user device causing network intrusion, one or more temporary secured microservice chains and routing requests from the user device to the one or more temporary secured microservice chains;

determining if the user device has caused errors above an error threshold within a specific time period; and

automatically applying, based on the user device causing errors above the error threshold, a rate limit to the user device.

12. The computer program product of claim 11 , wherein determining if the user device causes network intrusion comprises:

identifying that the user device does not cause network intrusion detection; and

allowing requests from the user device to move to an original chain.

13. The computer program product of claim 11 , wherein the processor is further configured to perform operations comprising:

analyzing interactions of the user device in the one or more temporary secured microservice chains;

identifying that the user device has not caused errors above an error threshold within a specific time period;

generating, automatically, a routing request to an original microservice chain; and

routing activities of the user device to the original microservice chain.

14. The computer program product of claim 11 , wherein the one or more temporary secured microservice chains are a new version for each of the microservices participating in a network, and wherein the processor is further configured to perform operations comprising:

generating one or more request routing rules, wherein the one or more request routing rules ensure that activity form the user device is routed to the one or more temporary secured microservice chains.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 4, 2021
From: KAIRALI, SUDHEESH S.; RAKSHIT, SARBAJIT K.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 057074/0742 →
Continuity (1)
Related Publication 20230039426A1 · Feb 9, 2023
Cited By (2)
US 12,556,622 US 12,737,177