Electrical computers and digital processing systems: multicomput – Computer-to-computer session/connection establishing
Reexamination Certificate
2000-11-28
2004-12-14
Coulter, Kenneth R. (Department: 2141)
Electrical computers and digital processing systems: multicomput
Computer-to-computer session/connection establishing
C709S229000, C709S224000
Reexamination Certificate
active
06832255
ABSTRACT:
The present invention relates to a method and apparatus for controlling access to one or more servers in a network, and more particularly relates to a method and apparatus that controls the admission of new users to the one or more servers such that users already accessing server resources will receive priority service over new users attempting to access a server.
In a computer network, such as the Internet which represents a vast number of computers linked to each other worldwide, information exchange such as e-mail may occur between various computers linked through the Internet using a set of protocols such as the transmission control protocol/Internet protocol (TCP/IP). A “client” may typically be a web browser running on a computer. A client typically communicates with a “server”. A server may uniquely distinguish clients using an IP address and possibly other identifiers. Other examples of clients include proxy servers and web robots. Information on the Internet may be made available to the public through “servers”. Servers are computers which make available files or documents they hold. The worldwide web (www) is a method of accessing this information from the servers and allows a user to navigate the resources of the Internet by displaying or downloading pages of information that are stored at the servers. Clients communicate with servers using the hypertext transfer protocol (HTTP). In the Internet the HTTP protocol is generally transmitted over TCP/IP.
Usage of the Internet and the worldwide web is increasing at a very rapid rate and more and more new users are being connected to the Internet and www. As its growth continues, the www will provide a rapidly growing number of commercial services, with applications ranging from information retrieval for text, images or multi media through to purchasing, for example, ticket and item sales. As such, there is a need to improve the reliability of the web so as to make it a suitable medium for high volume, business critical applications.
During periods of high use of a web server, even in situations such as overload of the server wherein the load of requests to the web server exceeds the capabilities of the server, the server still allows requests from new users. These capabilities include the physical capacity of the CPU, the memory and the network. Continuing to allow requests from new users tends to degrade the performance perceived by users that are already accessing the server system and which is evidenced through long delays or inability to service information requests. For example users already accessing web pages on a server may experience poor performance as they navigate through links to pages on that same server. The performance as perceived by already accessing users is assessed in terms of maintaining throughput, response time levels and system stability rather than by increasing the overall throughput of the web server.
The present invention seeks to address this problem by providing a system that allows a server to accept or deny access by new users to that server in preference to those already accessing the server. Such a decision for accepting or rejecting the admission of new users is based on certain performance parameters, such as the setting of the congestion level at the server.
Accordingly, the present invention provides a method of controlling access to a server by a client to a server in a network, said method comprising the steps of:
monitoring resource usage of said server; allowing a connection of said client to pass to said server where said connection forms part of an active session wherein said connection forms part of said active session if at least one previous connection from said client has been passed to said server within a predetermined time interval, and
allowing or rejecting a new connection of another client to pass to said server according to an admission control scheme.
The step of allowing or rejecting may be based on resource usage of said server. The method may include searching for an active session of said client and admitting the clients connection to pass to said server if there is an active session for said client.
The method may include determining a congestion level from monitoring the resource use on said server. The congestion level may be represented by a whole number between zero and c
max
where zero indicates that the server is operating normally and c
max
is the maximum congestion level. The congestion level may be used to calculate an admission interval which represents the time after which a new session for a new connection can begin.
A new connection may be admitted after the admission interval expires. Periodically, a determination is made on whether the resource usage is high, and if it is high the congestion level is increased. The method may include checking whether a client has had a connection attempt rejected within a predetermined period.
The present invention also provides an interface unit for controlling access to a server by a client in a network, said interface unit comprising:
means for monitoring resource usage of said server;
admission means for allowing a connection of said client to pass to said server where said connection forms part of an active session wherein said connection forms part of said active session if at least one previous connection from said client has been passed to said server within a predetermined time interval,
said admission means further rejecting or allowing a new connection of another client to pass to said server according to an admission control scheme.
The admission means further rejecting or allowing said new connection may be based on said resource usage of the server. The monitoring means may be in the form of a storage means, such as a database that maintains information about previous sessions, a list of active sessions and routinely polls said server to obtain resource information on that server. The interface unit may be linked to the computer network through an external port and be linked to the server through an internal port. The interface unit may be a computing processor and the admission means may be a control unit for rejecting or admitting a new connection to said server.
REFERENCES:
patent: 6324570 (2001-11-01), Tonchev et al.
patent: 6490624 (2002-12-01), Sampson et al.
patent: 6606661 (2003-08-01), Agrawal et al.
patent: 2003/0099197 (2003-05-01), Yokota et al.
patent: 2004064346 (2004-02-01), None
Castro Maurice David
Rumsewicz Michael Peter
Coulter Kenneth R.
Nixon & Vanderhye,. P.C.
Royal Melbourne Institute of Technology
LandOfFree
Access control method and apparatus does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Access control method and apparatus, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Access control method and apparatus will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3309267