Modifying Authentication for an Application Programming Interface
AssigneeShape Security, Inc.
InventorsJustin D. Call, Timothy D. Peacock
Life of this patent
Estimating the term…
Abstract
Application programming interfaces (APIs) can be unintentionally exposed and allow for potentially undesirable use of corporate resources. An API call filtering system configured to monitor API call requests received via an endpoint and API call responses received via a supporting service of an API or web service. The API call filtering system enables enterprises to improve their security posture by identifying, studying, reporting, and securing their APIs within their enterprise network.
Claims24
An application programming interface (API) call filtering system to filter API call requests received, via a network, from a device that is network-connected and configured to run endpoint application hardware and/or software, to secure an API service that accepts API call requests and provides API call responses thereto, the system comprising:
- at least one computing device configured to implement one or more services, wherein the one or more services are configured to:
- a) monitor, at an API filter, API call requests received from an endpoint application directed to a server configured to provide, at least in part, the API service;
- b) compile performance indicators of the API call requests;
- c) analyze the compiled performance indicators;
- and
- d) create at least one report based at least in part, on the analyzed performance indicators.
A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system, wherein the computer system is an application programming interface (API) wall, cause the computer system to at least:
- identify, at an API wall, API call requests for a web service, the API call requests transmitted from an endpoint to a server, wherein the server is a component of an enterprise network;
- identify, at the API wall, API call responses transmitted from the server;
- collect business intelligence related to the API call requests and the API call responses, the business intelligence including statistics and properties of the endpoint;
- compile a report, the report including statistics, analysis, and/or recommendations related to the API call request;
- create, via the API wall, a dashboard including information related to API use across the enterprise network;
- and
- provide, via the API wall, control mechanisms for modifying access to an API, limiting access to the API, creating access control lists (ACLs), and enforcing ACLs.
A computer-implemented method for filtering application programming interface (API) calls in a secured network environment, the computer-implemented method, comprising:
- under control of one or more computer systems configured with executable instructions,
- a) receiving, at a server in an enterprise network via an API call filter, an API call request from an endpoint, wherein the API call request is either an original API call request or a modified API call request;
- b) providing a secured API supporting service for the endpoint, wherein the secured API supporting service provides at least one API to access a business unit of the enterprise network;
- and
- c) transmitting, over the secured network environment, an API call response to the endpoint.
Dependencies are inferred from the claim text.