Virtual sandboxing for supplemental content

• US 9,032,066 B1
• Filed: 09/29/2009
• Issued: 05/12/2015
• Est. Priority Date: 09/29/2009
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Erdmann, David
• Primary Examiner(s): MACILWINEN, JOHN MOORE JAIN
• Application Number:
  US12/569,484
• Time in Patent Office: 2,051 Days
• Field of Search: 709/224
• US Class Current: 709/224
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: H04L 41/0681 Configuration of triggering conditions
• CPC Class Codes: H04L 43/08 Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
• CPC Class Codes: H04L 47/781 Centralised allocation of resources
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/16 Implementing security features at a particular protocol layer
• CPC Class Codes: H04L 67/303 Terminal profiles

Abstract

A virtual sandbox environment enables a publisher to enforce rules for supplemental content, such as third party advertising, displayed on a page or other grouping of content from the publisher. One or more rule sets can be applied or enforced in a number of ways, such as through active script on a page, as part of a browser or other such application or interface, or via a third party such as an anti-virus application or service. A rule set can specify behavior that is allowed or prohibited, in various circumstances, as well as actions to be taken in response to any unapproved or prohibited behavior. Rule sets can be cached by a client device such that any number of pages or other groupings of content can utilize the same rule set without reloading the set.

Claims

1. A computer-implemented method of managing behavior of supplemental content in an electronic environment, comprising:

under control of one or more computer systems configured with executable instructions,

receiving, at a resource provider, a request from a browser application, executing on a client device, to a content publisher;

in response to the request, providing to the client device a response including code for a page to be rendered by the browser application, the page including primary content corresponding to the request and an identifier for a rule set corresponding to the page, the rule set including rules defining at least one of allowed activities or prohibited activities for supplemental content displayed or executed on the page, the supplemental content originating from a source other than the content publisher,

wherein the identifier is configured to provide access to the rule set, the rule set managed by a source external to the client device, and

wherein behavior of the supplemental content loaded for the page is capable of being monitored to ensure that the behavior complies with the rules of the rule set corresponding to the page; and

performing, by the resource provider, one or more actions with respect to the supplemental content in response to detecting monitored behavior of the supplemental content that violates at least one of the rules in the rule set.

2. The computer-implemented method of claim 1, wherein the rule set further specifies the one or more actions to be taken when the monitored behavior of the supplemental content violates at least one rule of the rule set.

3. The computer-implemented method of claim 1, wherein the action to be performed with respect to the supplemental content is defined prior to receiving the request.

4. A computer-implemented method of managing behavior of supplemental content, comprising:

under control of one or more computer systems configured with executable instructions,

receiving, at a resource provider, a request for primary content; and

in response to the request, providing the primary content and an identifier for a rule set, the rule set including rules specifying at least one of allowed activities and or prohibited activities for supplemental content executed with the primary content, the supplemental content originating from an external provider other than a publisher of the primary content,

wherein the identifier is configured to enable access to the rule set, the rule set managed by a source external to a client device receiving the primary content,

wherein behavior of the supplemental content is capable of being monitored to ensure that the behavior complies with the rules of the rule set; and

wherein an action is to be performed by the resource provider with respect to the supplemental content when the supplemental content requests an activity that violates the rule set.

5. The computer-implemented method of claim 4, wherein the supplemental content further includes any content originating from a domain other than a domain of the publisher of the primary content.

6. The computer-implemented method of claim 4, wherein the identifier is passed with a call of an active client-side script executing in an application displaying the primary content, the active client-side script configured to apply the rule set to the supplemental content wherein the rule set is able to be enforced without modification of the application.

7. The computer-implemented method of claim 6, wherein the rule set is provided as a library capable of being accessed by the active client-side script executing in the application.

8. The computer-implemented method of claim 4, wherein the rule set is provided as a file capable of being cached on the client device receiving the primary content, and wherein code for displaying the primary content on the client device includes the identifier for the rule set.

9. The computer-implemented method of claim 4, wherein the rule set further specifies actions to be taken upon detection of at least one of the prohibited activities by the supplemental content.

10. The computer-implemented method of claim 9, wherein the action includes at least one of notifying one or more entities, logging information, stopping execution of a prohibited activity, limiting execution of the supplemental content, or shutting down an application executing the prohibited activity.

11. The computer-implemented method of claim 4, wherein the rule set is able to be associated with multiple instances of primary content from one or more publishers.

12. The computer-implemented method of claim 11, wherein a copy of the rule set is capable of being stored locally such that the rule set does not need to be reloaded for each instance of primary content to be displayed.

13. The computer-implemented method of claim 4, wherein the rule set is capable of being associated with any primary content served from a specified domain.

14. The computer-implemented method of claim 4, wherein the rule set includes a complete list of allowable activities.

15. The computer-implemented method of claim 4, further comprising:

generating the rule set at least in part by scanning the primary content to determine activities performed or not performed by the primary content.

16. A computer-implemented method of managing behavior of supplemental content, comprising:

under control of one or more computer systems configured with executable instructions,

monitoring, by a resource provider, behavior of primary content and supplemental content in at least one application, the primary content originating from a publisher and the supplemental content originating from a source other than the publisher;

determining at least one rule set associated with the primary content being executed or displayed in the at least one application, the rule set defining at least one of allowable or prohibited behavior of the supplemental content when executed or displayed via the primary content, wherein the rule set is configured to be managed by a source external to a client device, the client device configured to execute the at least one application; and

in response to detecting monitored behavior of the supplemental content that violates the rule set, performing, by the resource provider, at least one action with respect to the supplemental content.

17. The computer-implemented method of claim 16, wherein the at least one action includes at least one of notifying one or more entities, logging information, stopping execution of a prohibited activity, limiting execution of the supplemental content, or shutting down the application performing the prohibited activity.

18. A system for managing behavior of supplemental content, comprising:

a processor;

a memory device including instructions that, when executed by the processor, cause the processor to;

receive, at a resource provider, a request for primary content;

in response to the request, provide the primary content and an identifier for a rule set, the rule set including rules specifying at least one of allowed activities or prohibited activities for supplemental content executed with the primary content, the supplemental content originating from an external provider other than a publisher of the primary content,

wherein the identifier is configured to enable access to the rule set, the rule set managed by a source external to a client device receiving the primary content, and

wherein behavior of the supplemental content is capable of being monitored to ensure that the behavior complies with the rules of the rule set; and

perform, by the resource provider, at least one action with respect to the supplemental content in response to detecting any monitored behavior of the supplemental content that violates the rule set.

19. The system of claim 18, wherein the identifier is provided as a library capable of being accessed by an active client-side script executing in the application, or is passed with a call of an active client-side script executing in an application displaying the primary content, the active client-side script configured to apply the rule set to the supplemental content wherein the rule set is able to be enforced without modification of the application.

20. The system of claim 18, wherein the rule set further specifies the at least one action to be taken upon detection of at least some of the prohibited activities by the supplemental content, the at least one action including at least one of notifying one or more entities, logging information, stopping execution of a prohibited activity, limiting execution of the supplemental content, or shutting down an application executing the prohibited activity.

21. The system of claim 18, wherein the rule set is able to be associated with multiple instances of primary content from one or more publishers, and

wherein a copy of the rule set is capable of being stored locally by a client device such that the rule set does not need to be reloaded by the client device for each instance of primary content to be displayed.

22. A non-transitory computer-readable storage medium including instructions for managing behavior of supplemental content, the instructions when executed by a processor causing the processor to:

receive, at a resource provider, a request for primary content; and

in response to the request, provide the primary content and an identifier for a rule set, the rule set including rules specifying at least one of allowed activities or prohibited activities for supplemental content executed with the primary content, the supplemental content originating from an external provider other than a publisher of the primary content,

wherein the identifier is configured to enable access to the rule set, the rule set managed by a source external to a client device receiving the primary content,

wherein behavior of the supplemental content is capable of being monitored to ensure that the behavior complies with the rules of the rule set,

wherein at least one responsive action is designated to be performed by the resource provider with respect to the supplemental content in response to detecting monitored behavior of the supplemental content that violates the rule set.

23. A non-transitory computer-readable storage medium of claim 22, wherein the identifier is provided as a library capable of being accessed by an active client-side script executing in the application, or is passed with a call of an active client-side script executing in an application displaying the primary content, the active client-side script configured to apply the rule set to the supplemental content wherein the rule set is able to be enforced without modification of the application.

24. A non-transitory computer-readable storage medium of claim 22, wherein the rule set further specifies the at least one responsive action to be taken upon detection of at least some of the prohibited activities by the supplemental content, the at least one responsive action including at least one of notifying one or more entities, logging information, stopping execution of a prohibited activity, limiting execution of the supplemental content, or shutting down an application executing the prohibited activity.

25. A non-transitory computer-readable storage medium of claim 22, wherein the rule set is able to be associated with multiple instances of primary content from one or more publishers, and

wherein a copy of the rule set is capable of being stored locally by a client device such that the rule set does not need to be reloaded by the client device for each instance of primary content to be displayed.