# US 12,216,801 B2 · Cryptographically secure dynamic third party resources

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,216,801 B2
- Document ID: US12216801B2
- Status: Granted
- Kind: B2
- Application number: 18/360,244
- Filed: 2023-07-27
- Published: 2023-11-30
- Granted: 2025-02-04
- Earliest claimed: 2019-08-05
- Assignees: Visa International Service Association
- Applicants: Visa International Service Association
- Inventors: James Donaldson; Bartlomiej Prokop
- Web page: https://patentgrep.com/patent/US12216801B2

## CPC

- G06F 21/629: {to features or functions of an application}
- G06F 9/5077: {Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455)}
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F 21/54: by adding security routines or objects to programs
- G06F 21/602: {Providing cryptographic facilities or services}
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system for providing updatable secure content resource. A content server may pay a content resource on the content author for an access by a requester. The content server receives a session request call from the requester prior to accessing the content resource. In response to the session request, the content server generates a session for the requester. The content server generates a payload that includes a location identifying the content resource on the content author and embeds the embedded cryptographic content. The content server transmits the generated payload to the requester. A resource server may receive an authentication access request in response to the embedded cryptographic content. In response to authenticating the authentication access request, the resource server provides the access to the requester.

## Claims

### Claim 1

A computer-implemented method comprising:
sending, by a requester, a request via a first communication protocol, for accessing a content resource;
receiving, by the requester, a session at a content server to access the content resource for the requester;
receiving, by the requester, a payload from the content server;
identifying the content resource on a resource server, wherein the payload comprises a cryptographic content embedded in the payload, wherein the embedded cryptographic content is accessible via the content server;
sending, by the requester, an authentication access request, via a second communication protocol, in response to executing the identified cryptographic content, wherein the second communication protocol is different from the first communication protocol; and
receiving, by the requester, access to the content resource based on authenticating the authentication access request.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, wherein the session comprises a server-to-server request call.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, wherein the payload comprises a first data field identifying a location at a resource provider and a second data field for the cryptographic content.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein the content resource comprises computer software library executable files.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein the session comprises a timed application stack or a web token.

### Claim 6 (depends on 3)

The computer-implemented method of claim 3, wherein the location comprises a uniform resource locator (URL) or a uniform resource identifier (URI).

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, wherein the second communication protocol comprises a subresource integrity (SRI) via a web browser.

### Claim 8 (depends on 1)

The computer-implemented method of claim 1, wherein sending the request comprising sending an authentication in the request.

### Claim 9 (depends on 1)

The computer-implemented method of claim 1, wherein sending the request comprises sending the request via a first channel.

### Claim 10

A computer-implemented method comprising:
receiving, by a content server, a request, via a first communication protocol, from a requester for accessing a content resource;
generating, by the content server, a session at the content server to access the content resource for the requester;
generating, by the content server, a payload identifying the content resource on a resource server;
embedding, by the content server, a cryptographic content in the payload, wherein the embedded cryptographic content is accessible via the content server;
transmitting, by the content server, the generated payload to the requester; and
in response to authenticating an authentication access request, provide access to the content resource on the content server.

### Claim 11 (depends on 10)

The computer-implemented method of claim 10, wherein the session comprises a server-to-server request call.

### Claim 12 (depends on 10)

The computer-implemented method of claim 10, wherein the payload comprises a first data field identifying a location at a resource provider and a second data field for the cryptographic content.

### Claim 13 (depends on 10)

The computer-implemented method of claim 10, wherein the content resource comprises computer software library executable files.

### Claim 14 (depends on 10)

The computer-implemented method of claim 10, wherein the session comprises a timed application stack or a web token.

### Claim 15 (depends on 12)

The computer-implemented method of claim 12, wherein the location comprises a uniform resource locator (URL) or a uniform resource identifier (URI).

### Claim 16 (depends on 10)

The computer-implemented method of claim 10, wherein the second communication protocol comprises a subresource integrity (SRI) via a web browser.

### Claim 17 (depends on 10)

The computer-implemented method of claim 10 comprising, modifying, by the content resource, the resource in response to session parameters.

### Claim 18 (depends on 10)

The computer-implemented method of claim 10 comprising, modifying, by the content server, the resource based on a session parameter.

### Claim 19 (depends on 10)

The computer-implemented method of claim 10 comprising, providing, by the content server, a separate server to provide the resource.

### Claim 20 (depends on 10)

The computer-implemented method of claim 10, wherein receiving the request comprises receiving the request via a first channel.
