Secure expandable advertisements using an API and cross-domain communications

• US 10,104,052 B2
• Filed: 04/22/2013
• Issued: 10/16/2018
• Est. Priority Date: 12/31/2009
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Smith, Francis, Joseph, Saji
• Primary Examiner(s): AGWUMEZIE, CHINEDU CHARLES
• Application Number:
  US13/867,630
• Publication Number:
  US 20130239196A1
• Time in Patent Office: 2,003 Days
• Field of Search: 705 50
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 30/0241 Advertisements
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system to present secure expandable advertisements using an API and cross-domain communication. A content publishing system that hosts a website can implement an expandable advertisement using IFRAMEs that are expanded upon receiving an API call from a third party rich media vendor that hosts the expandable advertisement when the content publishing system and the third party media vendor are of differing domains.

Claims

1. A method comprising:

presenting to a client machine, by one or more computer processors of a content publishing system, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;

receiving from the third party media vendor server an expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token;

authenticating the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion, or verifying the security token; and

issuing an instruction to a client machine to expand the inline frame.

2. The method of claim 1 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion parameters comprise at least one of dimension data or direction data indicating how to expand the inline frame.

3. The method of claim 1 wherein the security token is decided upon by the content publishing system.

4. The method of claim 1 wherein the token is transmitted to the third party media vendor server via the client machine.

5. The method of claim 1, wherein the third party media vendor server sends the expandable advertisement API call when the third party media vendor server detects a triggering event.

6. The method of claim 1, wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs at least one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

7. The method of claim 6, wherein the ancillary data is used by the expandable advertisement application to verify the API call.

8. A machine-readable storage device having embedded therein a set of instructions which, when executed by a machine, causes execution of operations comprising:

presenting to a client machine, by one or more computer processors of a content publishing system, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;

receiving from the third party media vendor server the expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token;

authenticating the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion, or verifying the security token; and

issuing an instruction to a client machine to expand the inline frame.

9. The machine-readable storage device of claim 8 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion parameters comprise at least one of dimension data or direction data indicating how to expand the inline frame.

10. The machine-readable storage device of claim 8 wherein the security token is decided upon by the content publishing system.

11. The machine-readable storage device of claim 8 wherein the token is transmitted to the third party media vendor server via the client machine.

12. The machine-readable storage device of claim 8, wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

13. The machine-readable storage device of claim 12 wherein the ancillary data is used by the expandable advertisement application to verify the API call.

14. A system comprising:

one or more computer processors configured to include;

a presentation module configured to present to a client machine, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;

a receiver module configured to receive from the third party media vendor server the expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token; and

an authentication module configured to authenticate the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion or verifying the security token,

the presentation module further configured to present, responsive to authentication of the API call, an instruction to a client machine to expand the inline frame.

15. The system of claim 14 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion comprises at least one of dimension data or direction data indicating how to expand the inline frame.

16. The system of claim 14 wherein the security token is decided upon by the content publishing system.

17. The system of claim 14 wherein the token is transmitted to the third party media vendor server via the client machine.

18. The system of claim 14, wherein the third party media vendor server sends the expandable advertisement API call when the third party media vendor server detects a triggering event.

19. The system of claim 14, wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs at least one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

20. The system of claim 19 wherein the ancillary data is used by the expandable advertisement application to verify the API call.