Secure communication in mobile digital pages

Patent metadata

Field	Value
Publication number	US-11166155-B2
Application number	US-201916466203-A
Country	US
Kind code	B2
Filing date	May 6, 2019
Priority date	May 6, 2019
Publication date	Nov 2, 2021
Grant date	Nov 2, 2021

Abstract

Secure communication in mobile digital pages is provided. The system receives an electronic document and validates the electronic document for storage in a cache server. The system receives a request for the electronic document and provides it to a viewer component on a client computing device. The viewer component loads the electronic document in an iframe. The viewer component executes a runtime component to receive, via a secure communication channel, a tag from the electronic document. The system receives the tag and selects a data value for transmission to the viewer component. The viewer components provides the data value to cause the runtime component to execute an action with the data value.

First claim

What is claimed is:

1. A system for secure communication in mobile digital pages, comprising:
a data processing system comprising at least one processor and memory;
a validation component executed by the data processing system to:
receive, from a third party developer device, an electronic document configured to interface with a runtime application programming interface;
validate the electronic document based on a validation policy;
store, responsive to validation of the electronic document, the electronic document on a cache server of the data processing system;

the cache server to receive, from a viewer component executed by a client computing device, a request to access the electronic document, and provide, responsive to the request, the electronic document to cause the viewer component to:
load, in an iframe, the electronic document for display via the client computing device;
execute, in the electronic document, a runtime component to identify a tag coded with a markup language in the electronic document; and
receive, from the runtime component via a secure communication channel, an indication of the tag;

the data processing system to:
receive, from the viewer component, the indication of the tag;
select, based on the indication of the tag, a data value;
transmit, to the viewer component executed by the client computing device, the data value to cause the viewer component to:
generate a prompt comprising the data value;
receive, responsive to the prompt, input from the client computing device; and
provide, via the secure communication channel and responsive to the input, the data value to the runtime component to cause the runtime component to execute an action with the data value via the electronic document.

2. The system of claim 1 , comprising the data processing system to:
parse the electronic document responsive to receipt of the electronic document from the third party developer device;
determine, based on parsing the electronic document, that JavaScript is absent from the electronic document; and
validate, responsive to the determination that JavaScript is absent from the electronic document, the electronic document for storage in the cache server of the data processing system.

3. The system of claim 1 , comprising the data processing system to:
receive a second electronic document;
detect a presence of JavaScript in the second electronic document responsive to receipt of the second electronic document;
determine, responsive to detection of the presence of the JavaScript in the second electronic document, not to validate the second electronic document and remove the second electronic document from storage in the cache server.

4. The system of claim 1 , comprising the data processing system to:
identify the markup language in the electronic document responsive to receipt of the electronic document from the third party developer device;
determine, based on a format of the markup language, that the electronic document is valid for secure communication in mobile digital pages; and
store, in the cache server, the electronic document responsive to validation of the electronic document for secure communication in mobile digital pages.

5. The system of claim 1 , wherein the cache server comprises a proxy server for a server of the third party developer device that provided the electronic document.

6. The system of claim 1 , comprising the cache server to:
intercept a request to access the electronic document;
perform a lookup in storage of the cache server to determine that the electronic document has been validated and stored in the cache server;
retrieve, from storage in the cache server, the electronic document instead of accessing a server of the third party developer device that provided the electronic document; and
transmit, from storage of the cache server, the electronic document to the viewer component executed by the client computing device.

7. The system of claim 1 , comprising the data processing system to:
receive, from the viewer component interfacing with the runtime component via the secure communication channel, the indication of the tag;
retrieve, responsive to the tag, the data value from an account associated with the client computing device stored on the data processing system; and
provide, to the viewer component, the data value to cause the viewer component to generate the prompt including the data value.

8. The system of claim 1 , comprising the data processing system to:
identify the data value responsive to receipt of the indication of the tag from the viewer component, the data value associated with the client computing device and stored on the data processing system; and
provide the data value to the viewer component to cause the viewer component to display, in an overlay, the prompt generated to include the data value.

9. The system of claim 1 , comprising the data processing system to:
identify a plurality of candidate data values responsive to receipt of the indication of the tag from the viewer component; and
provide the plurality of candidate data values for display in the prompt, wherein the prompt restricts access by the electronic document to at least one of the plurality of candidate data values.

10. The system of claim 1 , wherein the viewer component blocks access to the data value by the electronic document prior to the input from the client computing device.

11. The system of claim 1 , comprising the data processing system to:
search one or more electronic data sources associated with the client computing device to identify the data value responsive to the indication of the tag.

12. The system of claim 1 , wherein the input comprises an instruction from the client computing device to grant the electronic document access to the data value provided by the data processing system responsive to the indication of the tag.

13. The system of claim 1 , wherein the action comprises an electronic transaction using the data value.

14. A method of secure communication in mobile digital pages, comprising:
receiving, by a data processing system comprising at least one processor, from a third party developer device, an electronic document configured to interface with a runtime application programming interface;
validating, by the data processing system, the electronic document based on a validation policy;
storing, by the data processing system, responsive to validation of the electronic document, the electronic document on a cache server of the data processing system;
receiving, by the cache server from a viewer component executed by a client computing device, a request to access the electronic document, and provide, responsive to the request, the electronic document to cause the viewer component to:
load, in an iframe, the electronic document for display via the client computing device;
execute, in the electronic document, a runtime component to identify a tag coded with a markup language in the electronic document; and
receive, from the runtime component via a secure communication channel, an indication of the tag;

receiving, by the data processing system from the viewer component, the indication of the tag;
selecting, by the data processing system based on the indication of the tag, a data value;
transmitting, by the data processing system to the viewer component executed by the client computing device, the data value to cause the viewer component to:
generate a prompt comprising the data value;
receive, responsive to the prompt, input from the client computing device; and
provide, via the secure communication channel and res

Assignees

• Google Llc

Inventors

• Akkad Jay
• Rao Nikhil
• Gupta Anshul
• Wang David
• Baker Ian

Classifications

• G06Q40/02

  Banking, e.g. interest calculation or account maintenance (credit or loans G06Q40/03) · CPC title

• G06Q30/06

  Buying, selling or leasing transactions · CPC title

• G06Q10/10

  Office automation; Time management · CPC title

• G06F9/541

  via adapters, e.g. between incompatible applications · CPC title

• G06F9/54

  Interprogram communication · CPC title