Cross-domain communications between browser windows

• US 10,366,446 B2
• Filed: 05/18/2015
• Issued: 07/30/2019
• Est. Priority Date: 04/22/2011
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Chandi, Hendi, Agrawal, Ashish, Kapila, Dhanvi H., Sinha, Vineesh
• Primary Examiner(s): Hong, Stephen S
• Assistant Examiner(s): Robinson, Marshon L
• Application Number:
  US14/715,250
• Publication Number:
  US 20150248723A1
• Time in Patent Office: 1,534 Days
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 30/0253 During e-commerce, i.e. online transactions
• CPC Class Codes: G06Q 30/0641 Shopping interfaces
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality

Abstract

A computer process enables a target window associated with a first domain to receive a message from a child window associated with a second domain. The message is passed using an iframe that is created within the target window. The process may, for example, be used to relay information entered by a user into the child window to the target window.

Claims

1. A system, comprising:

a first server that operates in a first domain and hosts a web page, the web page including functionality for performing a checkout transaction with a first entity, the web page including a display element that is selectable by a user, when the page is loaded in a target window of a browser, to initiate a payment transaction in support of the checkout transaction using an account with a second entity, the target window corresponding to the first domain;

wherein the web page includes (1) script coding that is responsive to user selection of the display element in the target window by opening a child window that provides functionality for the user to interact with a second server to execute a payment transaction using the account with the second entity, the second server operating in a second domain different from the first domain and hosting content for accessing the account with the second entity and performing payment transactions, the child window corresponding to the second domain, and (2) script coding that creates a bridge iframe configured to pass a message from the child window to the target window, the bridge iframe thereby supporting cross-domain communications between windows;

wherein the child window is configured to place a call to a message passing function of the bridge iframe, the call including the message, and the message passing function is responsive to the call by passing the message to the target window.

2. The system of claim 1, wherein the second server hosts an interactive log-in screen that enables the user to log into the account using the child window.

3. The system of claim 1, wherein the child window is configured to pass to the target window, via the bridge iframe, address information entered by the user into the child window.

4. The system of claim 1, wherein the child window is configured to pass to the target window a message that causes the target window to close.

5. The system of claim 1, wherein the child window is configured to pass to the target window a message that causes an iframe of the target window to close.

6. The system of claim 1, wherein the message passing function of the bridge iframe uses uniform resource locator polling to pass the message to the target window.

7. The system of claim 1, wherein the child window is a pop-up window.

8. The system of claim 1, wherein the web page further includes an event listener that listens for a message posting event generated by the bridge iframe.

21. The system of claim 1, wherein the message passing function of the bridge iframe is configured to append the message to a uniform resource locator fragment of the target window, and the target window is configured to poll a value of the uniform resource located to detect a change in the value.

22. The system of claim 1, wherein the message passing function uses either a postMessage process or a uniform resource locator polling process to pass the message to the target window, depending upon a capability of a browser used to display the web page.

9. A first server that operates in a first domain and hosts an electronic page that includes functionality for a user to perform a checkout transaction with a first entity using an account of the user with a second entity, the page comprising:

a display element that is capable of being activated by the user when the page is loaded in a target window of a browser, the target window corresponding to the first domain;

script coding that is responsive to user activation of the display element in the target window by opening a child window that provides functionality for the user to interact with a second server in a second domain to execute a payment transaction using the account with the second entity, the second window corresponding to the second domain, and

script coding that creates an iframe configured to pass a message from the child window to the target window, the iframe thereby supporting cross-domain communications between windows;

wherein the child window is configured to place a call to a message passing function of the iframe, the call including the message, and the message passing function is responsive to the call by passing the message to the target window.

10. The first server of claim 9, wherein the child window is configured to pass to the target window, via the iframe, address information entered by the user into the child window.

11. The first server of claim 9, wherein the child window is configured to pass to the target window a message that causes the target window to close.

12. The first server of claim 9, wherein the child window is configured to pass to the target window a message that causes an iframe of the target window to close.

13. The first server of claim 9, wherein the message passing function of the iframe uses uniform resource locator polling to pass the message to the target window.

14. The first server of claim 9, wherein the child window is a pop-up window.

15. The first server of claim 9, wherein the page further includes an event listener that listens for a message posting event generated by the iframe.

16. A non-transitory computer-readable medium having stored therein executable code that instructs a user computing device to implement a process comprising:

displaying a document in a first browser window associated with a first domain, the document associated with a first entity and including functionality for performing a transaction with the first entity, the document including a display element that is selectable by a user to initiate a payment process using an account with a second entity;

generating a second browser window in response to user selection of the display element of the document, the second browser window being associated with a second domain and second entity, the second browser window providing functionality for the user to use the account with the second entity to make a payment in support of the transaction;

loading the second window with content retrieved from a server in the second domain, said content providing functionality for the user to log into the account; and

generating an iframe that is configured to relay a message from the second browser window to the first browser window, the iframe thereby supporting cross-domain communications between browser windows;

wherein the second browser window is configured to place a call to a message passing function of the iframe, and the message passing function is responsive to the call by passing the message to the first browser window.

17. The computer-readable medium of claim 16, wherein the second window is a child of the first window.

18. The computer-readable medium of claim 16, wherein the second window is configured to pass to the first window, via the iframe, address information entered by the user into the second window.

19. The computer-readable medium of claim 16, wherein the message passing function of the iframe uses uniform resource locator polling to pass the message to the first browser window.

20. The computer-readable medium of claim 16, wherein the document further includes an event listener that listens for a message posting event generated by the iframe.