SECURELY RENDERING ONLINE ADS IN A HOST PAGE

• US 20120084641A1
• Filed: 09/30/2010
• Published: 04/05/2012
• Est. Priority Date: 09/30/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Chung, Wook Jin, Garuda, Gupta, Low, Spencer Wong, Estes, Chad Steven, Kumar, Rahul Sudhir, Winter, William, Millet, David Immanuel, Kwan, Tomoko, Hiatt, Philip Edward
• Granted Patent: US 9,558,289 B2
• Time in Patent Office: Days
• US Class Current: 715/240
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: G06Q 30/0241 Advertisements

Abstract

One or more techniques and/or systems are disclosed for rendering online ads on a webpage. A first inter-frame communication channel is created, which comprises a first communication channel between a first cross-domain frame and a host page, such as the webpage. The first cross-domain frame comprises content from a domain that is different than that of the host page domain. A second inter-frame communication channel is created comprising a second communication channel between the first cross-domain frame and a second cross-domain frame in the host page.

Claims

1. A computer-based method for rendering online ads on a webpage, the method comprising:

creating a first inter-frame communication channel comprising a first communication channel between a first cross-domain frame and a host page, where the first cross-domain frame comprises content from a domain than a domain of the host page; and

creating a second inter-frame communication channel comprising a second communication channel between the first cross-domain frame and a second cross-domain frame in the host page, using a computer-based processor.

2. The method of claim 1, comprising creating host ad space in the host webpage to accommodate an initial size of the first cross-domain frame.

3. The method of claim 1, comprising at least one of creating the first cross domain frame and creating one or more second cross-domain frames in the host webpage, where the second cross-domain frame comprises content from a different domain than the domain of the host page.

4. The method of claim 3, creating one or more second cross-domain frames comprising content from the first cross-domain frame requesting the creation of the second cross-domain frame using the first inter-frame communication channel.

5. The method of claim 1, comprising allowing merely white-listed data to travel over at least one of the first and second communication channels.

6. The method of claim 1, comprising validating a source of data traveling over at least one of the first and second communication channels prior to allowing the data to cross to the host page.

7. The method of claim 3, creating a first cross-domain frame in the host webpage comprising planting a token in at least one of the first cross-domain frame and the second cross-domain frame that is used for communicating across at least one of the first and second communication channels.

8. The method of claim 1, comprising one or more of:

serializing a communication to the host page across at least one of the first and second communication channels; and

treating a communication to the host page across at least one of the first and second communication channels as a non-executable string.

9. The method of claim 1, creating a second inter-frame communication channel comprising one or more of:

creating a communications channel that passes data from the first cross-domain frame to the host page to the second cross-domain frame; and

creating the first cross-domain frame and the second cross-domain frame where both the first and second cross-domain frames comprise content from a same domain.

10. The method of claim 1, comprising the first and second cross-domain frames synchronizing with each other to provide coordinated rendering of one or more online ads.

11. The method of claim 1, comprising securing at least one of the first and second inter-frame communication channels comprising using a list of allowed functionalities for content inside at least one of the first and second cross-domain frames.

12. The method of claim 11, using a list of allowed functionalities comprising using one or more of:

one or more frame display properties;

one or more frame utilities; and

one or more frame user interface functionalities.

13. The method of claim 8, comprising, in response to a request originating from the first or second cross-domain frame, one or more of:

resizing a cross-domain frame within the host page;

moving a cross-domain frame within the host page;

spawning a child cross-domain frame within the host page;

synchronizing content between two or more cross-domain frames;

broadcast a message to one or more cross-domain frames; and

closing a cross-domain frame.

14. A system for coordinating online ad content on a host page, the system comprising:

a processor configured to process data for the system;

a frame-host communication channel creation component operably coupled with the processor, and configured to create a frame-host communication channel between the host page and a first cross-domain frame hosted in the host page; and

a frame-frame communication channel creation component operably coupled with the processor, and configured to create a frame-frame communication channel between the first cross-domain frame and a second cross-domain frame hosted in the host page.

15. The system of claim 14, comprising a frame creation component configured to create a cross-domain frame in the host page, where the cross domain frame comprises content from a first domain and the host page comprises content from a second domain.

16. The system of claim 14, the first cross-domain frame comprising one or more of:

the frame-host communication channel creation component, configured to be activated by content in the first cross-domain frame; and

the frame-frame communication channel creation component, configured to be activated by content in the first cross-domain frame.

17. The system of claim 14, comprising a security component configured to filter requests across the frame-host communication channel originating from inside a cross-domain frame in the host page, the security component comprising one or more of:

a white-list comparison component configured to allow merely white-listed data to travel over the frame-host communication channel;

a validation component configured to validate a source of data traveling over the frame-host communication channel prior to allowing the data to cross to the host page;

a token utilization component configured to perform one or more of;

plant a token in a cross-domain frame created in the host page; and

merely allow data comprising the token to travel over the frame-host communication channel; and

a serialization component configured to perform one or more of;

serialize a communication to the host page across the frame-host communication channel; and

configure a communication to the host page across the frame-host communication channel as a non-executable string.

18. The system of claim 14, the frame-frame communication channel configured to perform one or more of:

pass communications from the first cross-domain frame to the second cross-domain frame through the host page; and

pass communications from the first cross-domain frame to the second cross-domain frame in a same domain, where content from the first cross-domain frame and content from the second cross-domain frame are comprised in the same domain.

19. The system of claim 14, where the first and second cross-domain frames comprise content from a same domain, the frame-frame communication channel creation component configured to:

pass a reference for the content from the second cross-domain frame to the first cross-domain frame; and

pass a reference for the content from the first cross-domain frame to the second cross-domain frame.

20. A computer-based method for rendering online ads on a webpage, the method comprising:

creating host ad space in the host webpage to accommodate an initial size of a first cross-domain frame;

creating the first cross-domain frame in a host webpage, where the first cross-domain frame comprises content from a different domain than the domain of the host page;

creating a first inter-frame communication channel comprising a first communication channel between the first cross-domain frame and the host page;

creating one or more second cross-domain frames in the host page, where the second cross-domain frame comprises content from a different domain than the domain of the host page;

creating a second inter-frame communication channel comprising a second communication channel between the first cross-domain frame and the second cross-domain frame in the host page, using a computer-based processor, comprising one or more of;

creating a communications channel that passes communications from the first cross-domain frame to the host page to the second cross-domain frame; and

creating the first cross-domain frame and the second cross-domain frame where both the first and second cross-domain frames comprise content from a same domain; and

securing at least one of the first and second inter-frame communication channels comprising using a list of allowed functionalities for content inside at least one of the first and second cross-domain frames.