System and method for embedding first party widgets in third-party applications

    公开(公告)号:US10178097B2

    公开(公告)日:2019-01-08

    申请号:US15842739

    申请日:2017-12-14

    Applicant: Google Inc.

    Abstract: Methods and systems for providing a third party application with access to files stored on a server are disclosed. A method may include receiving, from a browser at a client device, a request for a file stored on the server, wherein the request is received via a web page provided by the third party application and rendered by the browser, the web page comprising an embedded user interface (UI) component associated with the server to access the file stored on the server, wherein the request includes a document identifier associated with the file, an application identifier of the third-party application, and an origin identifier, wherein the origin identifier is associated with the web page provided by the third party application and rendered by the browser. The method may further include authenticating the application identifier at the server, wherein authenticating the application identifier comprises determining whether the application identifier references a valid application, and based on the document identifier, the authenticated application identifier and the origin identifier, granting access to the file for the third party application via the embedded UI component.

    SYSTEM AND METHOD FOR EMBEDDING FIRST PARTY WIDGETS IN THIRD-PARTY APPLICATIONS
    4.
    发明申请
    SYSTEM AND METHOD FOR EMBEDDING FIRST PARTY WIDGETS IN THIRD-PARTY APPLICATIONS 有权
    在第三方应用中嵌入第一方信息的系统和方法

    公开(公告)号:US20150200952A1

    公开(公告)日:2015-07-16

    申请号:US14668965

    申请日:2015-03-25

    Applicant: Google Inc.

    Abstract: Methods and systems provide embeddable user interface widgets to third-party applications so that the widgets can be securely embedded in, and securely used from within, the third-party applications. An embeddable widget may be authorized to access a first-party cloud storage system from a third-party application based on the cloud storage system authenticating a request received from the widget. The authentication may be based on an application identifier, an origin identifier, and/or one or more document identifiers received from the third-party application through the embedded widget. The disclosed methods and systems may significantly mitigate security concerns caused by embedding software in third-party sites, such as clickjacking.

    Abstract translation: 方法和系统向第三方应用程序提供可嵌入的用户界面小部件,以便小部件可以安全地嵌入第三方应用程序中并安全地从第三方应用程序中使用。 可以授权可嵌入的小组件从基于云存储系统的第三方应用访问第一方云存储系统,以验证从小部件接收到的请求。 认证可以基于通过嵌入的小部件从第三方应用接收到的应用标识符,源标识符和/或一个或多个文档标识符。 所公开的方法和系统可以显着地减轻由在第三方站点中嵌入软件所引起的安全问题,例如点击劫持。

    System and method for embedding first party widgets in third-party applications
    5.
    发明授权
    System and method for embedding first party widgets in third-party applications 有权
    在第三方应用程序中嵌入第一方小部件的系统和方法

    公开(公告)号:US08997180B2

    公开(公告)日:2015-03-31

    申请号:US13841663

    申请日:2013-03-15

    Applicant: Google Inc.

    Abstract: Methods and systems provide embeddable user interface widgets to third-party applications so that the widgets can be securely embedded in, and securely used from within, the third-party applications. An embeddable widget may be authorized to access a first-party cloud storage system from a third-party application based on the cloud storage system authenticating a request received from the widget. The authentication may be based on an application identifier, an origin identifier, and/or one or more document identifiers received from the third-party application through the embedded widget. The disclosed methods and systems may significantly mitigate security concerns caused by embedding software in third-party sites, such as clickjacking.

    Abstract translation: 方法和系统向第三方应用程序提供可嵌入的用户界面小部件,以便小部件可以安全地嵌入第三方应用程序中并安全地从第三方应用程序中使用。 可以授权可嵌入的小组件从基于云存储系统的第三方应用访问第一方云存储系统,以验证从小部件接收到的请求。 认证可以基于通过嵌入的小部件从第三方应用接收到的应用标识符,源标识符和/或一个或多个文档标识符。 所公开的方法和系统可以显着地减轻由在第三方站点中嵌入软件所引起的安全问题,例如点击劫持。

Patent Agency Ranking