US 11,381,601 B2Granted

Customizable dynamic GraphQL API management platform

AssigneeInternational Business Machines Corporation

InventorsKrithika Prakash, Moshe Morris Emanuel Matsa

Life of this patent

Estimating the term…

Loading patent…

Abstract

Application programming interface (API) management is provided. The API management comprises defining a number of GraphQL policies and integrating the GraphQL policies into an API assembly, wherein the GraphQL policies number among other API policies at an API gateway. When a query is received from a client, the GraphQL policies are enforced on the query at the API gateway, and the query is modified if it does not comply with the GraphQL policies. The query is then sent to a GraphQL backend server. A response to the query is received from the GraphQL backend server, and the GraphQL policies are enforced on the response at the API gateway, and the response is modified if it does not comply with the GraphQL policies. The response is then sent to the client.

Claims20

Dependent claims

A method of application programming interface (API) management, the method comprising:

defining, by a number of processors, a number of GraphQL policies;
integrating, by the number of processors, the GraphQL policies into an API assembly, wherein the GraphQL policies number among other API policies at an API gateway;
receiving, by the number of processors, a query from a client, wherein the query is formatted according to a source API associated with the client;
enforcing, by the number of processors, the GraphQL policies on the query at the API gateway and modifying the query if it does not comply with the GraphQL policies;
transforming the query into a format according to a target API associated with a GraphQL backend server to generate a transformed query;
sending, by the number of processors, the transformed query to the GraphQL backend server;
receiving, by the number of processors, from the GraphQL backend server a response to the transformed query;
enforcing, by the number of processors, the GraphQL policies on the response at the API gateway and modifying the response if it does not comply with the GraphQL policies;
and
sending, by the number of processors, the response to the client.

7 more elements

A computer program product for application programming interface (API) management, the computer program product comprising:

a non-volatile computer readable storage medium having program instructions embodied therewith, the program instructions executable by a number of processors to cause the computer to perform the steps of:
defining a number of GraphQL policies;
integrating the GraphQL policies into an API assembly, wherein the GraphQL policies number among other API policies at an API gateway;
receiving a query from a client, wherein the query is formatted according to a source API associated with the client;
enforcing the GraphQL policies on the query at the API gateway and modifying the query if it does not comply with the GraphQL policies;
transforming the query into a format according to a target API associated with a GraphQL backend server to generate a transformed query;
sending the transformed query to the GraphQL backend server;
receiving from the GraphQL backend server a response to the transformed query;
enforcing the GraphQL policies on the response at the API gateway and modifying the response if it does not comply with the GraphQL policies;
and
sending the response to the client.

8 more elements

A system for textual masking for application programming interface (API) management, the system comprising:

a bus system;
a storage device connected to the bus system, wherein the storage device stores program instructions;
and
a number of processors connected to the bus system, wherein the number of processors execute the program instructions to:
define a number of GraphQL policies;
integrate the GraphQL policies into an API assembly, wherein the GraphQL policies number among other API policies at an API gateway;
receive a query from a client, wherein the query is formatted according to a source API associated with the client;
transform the query into a format according to a target API associated with a GraphQL backend server to generate a transformed query;
enforce the GraphQL policies on the query at the API gateway and modifying the query if it does not comply with the GraphQL policies;
send the transformed query to the GraphQL backend server;
receive from the GraphQL backend server a response to the transformed query;
enforce the GraphQL policies on the response at the API gateway and modifying the response if it does not comply with the GraphQL policies;
and
send the response to the client.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/743,192Filed 15 Jan 2020
Published: US 2021/0218773 A115 Jul 2021
Granted: 5 Jul 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L 12/66
Data switching networks: arrangements for connecting between networks having differing types of switching systems, e.g. gateways
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 67/5682
Storing data temporarily at an intermediate stage, e.g. caching: policies or rules for updating, deleting or replacing the stored data