Method and system for securing a third party communication with a hosting web page
AssigneeSizmek Technologies Ltd.
InventorEfraeim Cohen
Life of this patent
Estimating the term…
Abstract
A method and system for securing hosting web pages from malicious third party modules. The method includes uploading a third party module to a hosting web page; validating a proxy API call received from the third party module, wherein the proxy API call includes at least a payload parameter provided by the third party module; generating an engine API call including at least the payload parameter; validating the engine API call; and executing the payload parameter if the engine API call is validated.
Claims12
A computer system including a processor coupled to a memory and configured to generate a secure agent for securing a hosting web page from a malicious at least one third party module, comprising:
- a sand-box proxy configured to proxy between the at least one third party module and the hosting web page;
- a sand-box engine configured to execute a validated script of the at least one third party module over the hosting web page, wherein the sand-box engine is further configured to:
- upload the third party module to the hosting web page;
- validate a proxy application programming interface (API) call received from the third party module, wherein the proxy API call includes at least an executable script provided by the third party module;
- generate an engine API call to include at least the script of a validated proxy call;
- and
- send the engine API call to the sand-box engine.
A publisher server, comprising:
- a network interface for communicating with a plurality of vendor servers for receiving third party modules;
- a processor;
- and
- a memory coupled to the processor and configured to store at least instructions that when executed by the processor, configure the publisher server to:
- render hosting web pages, wherein each of the rendered hosting web pages includes at least one of the received third party modules that is being denied from a direct access to application programming interfaces (APIs) of the hosting web page;
- validate a proxy AP call received from the at least one third party module, wherein the proxy API call includes at least a payload parameter provided by the third party module;
- generate an engine API call including at least the payload parameter;
- validate the engine API call;
- and
- execute the payload parameter if the engine API call is validated.
Dependencies are inferred from the claim text.