Secure expandable advertisements using an API and cross-domain communications

Patent metadata

Field	Value
Publication number	US-10104052-B2
Application number	US-201313867630-A
Country	US
Kind code	B2
Filing date	Apr 22, 2013
Priority date	Dec 31, 2009
Publication date	Oct 16, 2018
Grant date	Oct 16, 2018

Abstract

A system to present secure expandable advertisements using an API and cross-domain communication. A content publishing system that hosts a website can implement an expandable advertisement using IFRAMEs that are expanded upon receiving an API call from a third party rich media vendor that hosts the expandable advertisement when the content publishing system and the third party media vendor are of differing domains.

First claim

What is claimed is:

1. A method comprising:
presenting to a client machine, by one or more computer processors of a content publishing system, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;
receiving from the third party media vendor server an expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token;
authenticating the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion, or verifying the security token; and
issuing an instruction to a client machine to expand the inline frame.

2. The method of claim 1 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion parameters comprise at least one of dimension data or direction data indicating how to expand the inline frame.

3. The method of claim 1 wherein the security token is decided upon by the content publishing system.

4. The method of claim 1 wherein the token is transmitted to the third party media vendor server via the client machine.

5. The method of claim 1 , wherein the third party media vendor server sends the expandable advertisement API call when the third party media vendor server detects a triggering event.

6. The method of claim 1 , wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs at least one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

7. The method of claim 6 , wherein the ancillary data is used by the expandable advertisement application to verify the API call.

8. A machine-readable storage device having embedded therein a set of instructions which, when executed by a machine, causes execution of operations comprising:
presenting to a client machine, by one or more computer processors of a content publishing system, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;
receiving from the third party media vendor server the expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token;
authenticating the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion, or verifying the security token; and
issuing an instruction to a client machine to expand the inline frame.

9. The machine-readable storage device of claim 8 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion parameters comprise at least one of dimension data or direction data indicating how to expand the inline frame.

10. The machine-readable storage device of claim 8 wherein the security token is decided upon by the content publishing system.

11. The machine-readable storage device of claim 8 wherein the token is transmitted to the third party media vendor server via the client machine.

12. The machine-readable storage device of claim 8 , wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

13. The machine-readable storage device of claim 12 wherein the ancillary data is used by the expandable advertisement application to verify the API call.

14. A system comprising:
one or more computer processors configured to include:
a presentation module configured to present to a client machine, a webpage with an inline frame comprising an expandable advertisement that references advertising content hosted on a third party media vendor server, and a security token, wherein the domains of the third party media vendor server and the content publishing system are different;
a receiver module configured to receive from the third party media vendor server the expandable advertisement API call to expand or collapse the expandable advertisement, the API call comprising expansion parameters and the security token; and
an authentication module configured to authenticate the API call by at least one of comparing the expansion parameters to predetermined values indicating inline frame expansion or verifying the security token,
the presentation module further configured to present, responsive to authentication of the API call, an instruction to a client machine to expand the inline frame.

15. The system of claim 14 wherein the expandable advertisement API call invokes functionality of an expandable advertisement application and the expansion comprises at least one of dimension data or direction data indicating how to expand the inline frame.

16. The system of claim 14 wherein the security token is decided upon by the content publishing system.

17. The system of claim 14 wherein the token is transmitted to the third party media vendor server via the client machine.

18. The system of claim 14 , wherein the third party media vendor server sends the expandable advertisement API call when the third party media vendor server detects a triggering event.

19. The system of claim 14 , wherein the expandable advertisement API call invokes functionality of an expandable advertisement application, and the third party media vendor server performs at least one of capturing, sharing or deciding upon, ancillary data relating to a third party advertisement campaign and to the expandable advertisement.

20. The system of claim 19 wherein the ancillary data is used by the expandable advertisement application to verify the API call.

Assignees

• Paypal Inc

Inventors

• Smith Francis
• Joseph Saji

Classifications

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L29/06

  Electricity · mapped topic

• G06Q10/00

  Administration; Management · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06Q30/0241 Primary

  Advertisements · CPC title