SYSTEM AND METHOD OF EXTENDING A HOST WEBSITE

• US 20140298443A1
• Filed: 03/04/2014
• Published: 10/02/2014
• Est. Priority Date: 03/08/2013
• Status: Active Grant

• Current Assignee: StockTree Inc. (Stripe, Inc.)
• Original Assignee: StockTree Inc. (Stripe, Inc.)
• Inventors: Amaro, Brian
• Granted Patent: US 9,210,155 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

Some embodiments of the present disclosure provide a system for providing access control. The system may include an extension module for extending a host website; and a marketplace server that is configured to: receive a request to access the extension module from a browsing device, the browsing device is for maintaining a browsing session with the host website, and the extension module is for exchanging data with the host website; generate a first authorization token that is associated with the browsing session; and send, to the browsing device, the first authorization token. The extension module may be configured to receive a second authorization token from the browsing device. One of the extension module or the marketplace server may then be further configured to: verify that the second authorization token matches the first authorization token; and if verification is successful, the extension module can be allowed to exchange data with the host website and communicate with the browsing device.

Claims

1. A method of providing access control, the method comprising:

receiving a request to access an extension module from a browsing device, the browsing device is for maintaining a browsing session with a host website, and the extension module is for extending the host website by exchanging data with the host website;

generating a first authorization token that is associated with the browsing session;

sending, to the browsing device, the first authorization token;

receiving, at the extension module, a second authorization token from the browsing device;

verifying that the second authorization token matches the first authorization token; and

if verification is successful, allowing the extension module to exchange data with the host website and communicate with the browsing device.

2. The method of claim 1, further comprising:

sending, to the extension module, the first authorization token, and

wherein, the verifying is performed by the extension module.

3. The method of claim 1, further comprising:

receiving the second authorization token from the extension module; and

performing the verifying.

4. The method of claim 1, wherein when sending the first authorization token to the browsing device, the method further comprises:

sending, to the browsing device, a resource ocator for the extension module.

9. The method of claim 1, further comprising:

sending a user identifier to the extension module, wherein the user identifier is usable by the extension module to gain access to the data.

11. The method of claim 1, wherein the host website provides personal finance information, and wherein the data is selected from a group consisting of:

a portfolio, a watchlist, a list of debit transactions, a list of credit transactions, loan information, asset information and a list of historical transactions.

12. The method of claim 1, wherein the host website provides social media information, and wherein the data is selected from a group consisting of:

a name of a user, an email address of a user, a list of social media contacts, and one or more messages sent using the social media website.

13. The method of claim 1, wherein the host website provides news and opinion information, and wherein the data is selected from a group consisting of:

an article, a headline, a blog entry, and a review.

14. The method of claim 1, wherein the host website provides food information, and wherein the data is selected from a group consisting of:

an article, a food recipe, and a review.

15. The method of claim 1, wherein the host website provides fitness information, and wherein the data is selected from a group consisting of:

an article, a workout, a blog entry, and a review.

16. The method of claim 1, wherein the host website provides travel information, and wherein the data is selected from a group consisting of:

an article, a geographic location, a blog entry, and a review.

17. The method of claim 1, wherein the host website provides movie and television information, and wherein the data is selected from a group consisting of:

an article, information about a movie, information about a television show, information about an actor, and a review.

18. The method of claim 1, further comprising:

receiving, from the extension module, a request to access data from the host website;

determining if the extension module is authorized to access the requested data;

if the extension module is authorized to access the requested data, generating a first data token associated with the browsing session; and

sending the first data token and a host website locator to the extension module, the extension module is configured to transmit the first data token to the host website when accessing the data.

19. The method of claim 13, further comprising:

receiving a second data token from the host website;

verifying that the second data token matches the first data token; and

if verification is successful, sending a data descriptor for the data to the host website, and upon receiving the data descriptor, the host website transmits the data to the extension module.

20. The method of claim 1, further comprising:

receiving, from the extension module, a communication destined for the host website; and

relaying the communication to the host website.

21. The method of claim 15, wherein the communication comprises a request to access data from the host website, and the method further comprises:

determining if the extension module is authorized to access the requested data; and

if the extension module is authorized to access the data, relaying the request to the host website.

22. The method of claim 16, further comprising:

receiving the requested data from the host website; and

transmitting the requested data to the extension module.

24. The method of claim 1, further comprising:

receiving, from the host website, a communication destined for the extension module; and

relaying the request to the extension module.

28. A computer readable medium storing instructions which, when executed by a processor, causes the processor to perform the method of claim 1.

30. The system of claim 20, wherein the marketplace server is further configured to:

send, to the extension module, the first authorization token; and

wherein the extension module performs the verification.

31. The system of claim 30, wherein the marketplace server is further configured to:

receive the second authorization token from the extension module; and

perform the verification.

32. The system of claim 20, wherein when sending the first authorization token to the browsing device, the marketplace server is further configured to:

send, to the browsing device, a resource locator for the extension module.

37. The system of claim 20, wherein the marketplace server is further configured to:

send a user identifier to the extension module, wherein the user identifier is usable by the extension module to gain access to the data.

46. The system of claim 20, wherein the marketplace server is further configured to:

receive, from the extension module, a request to access data from the host website;

determine if the extension module is authorized to access the requested data;

if the extension module is authorized to access the requested data, generate a first data token associated with the browsing session; and

send the first data token and a host website locator to the extension module, the extension module is configured to transmit the first data token to the host website when accessing the data.

48. The system of claim 20, wherein the marketplace server is further configured to:

receive, from the extension module, a communication destined for the host website; and

relay the communication to the host website.

50. The system of claim 28, wherein the marketplace server is further configured to:

receive the requested data from the host website; and

transmit the requested data to the extension module.

52. The system of claim 20, wherein the marketplace server is further configured to:

receive, from the host website, a communication destined for the extension module; and

relay the request to the extension module.

5. (canceled)

6. (canceled)

7. (canceled)

8. (canceled)

10. (canceled)

23. (canceled)

25. (canceled)

47. The system of claim 25, wherein the marketplace server is further configured to:

receive a second data token from the host website;

verify that the second data token matches the first data token; and

if verification is successful, send a data descriptor for the data to the host website, and upon receiving the data descriptor, the host website transmits the data to the extension module.

26. (canceled)

27. (canceled)

49. The system of claim 27, wherein the communication comprises a request to access data from the host website, and the marketplace server is further configured to:

determine if the extension module is authorized to access the requested data; and

if the extension module is authorized to access the data, relay the request to the host website.

29. A system for providing access control, the system comprising:

an extension module for extending a host website; and

a marketplace server comprising a processor and a memory storing instructions which, when executed by the processor, causes the processor to;

receive a request to access the extension module from a browsing device, the browsing device is for maintaining a browsing session with the host website, and the extension module is for exchanging data with the host website;

generate a first authorization token that is associated with the browsing session; and

send, to the browsing device, the first authorization token;

wherein the extension module is configured to;

receive a second authorization token from the browsing device; and

wherein one of the extension module or the marketplace server is configured to;

verify that the second authorization token matches the first authorization token; and

if verification is successful, allow the extension module to exchange data with the host website and communicate with the browsing device.

33. (canceled)

34. (canceled)

35. (canceled)

36. (canceled)

38. (canceled)

39. (canceled)

40. (canceled)

41. (canceled)

42. (canceled)

43. (canceled)

44. (canceled)

45. (canceled)

51. (canceled)

53. (canceled)

54. (canceled)

55. (canceled)