Patent ID: 8683201
Filing Date: 2014-03-25
Classification: G06F

Abstract:
1. A computer-implemented method comprising: storing, in an authentication server system, a URL identifying a web page, resulting in a stored URL; providing a browser-side script to be placed on the web page; upon opening of the web page in a browser, triggering, by the browser-side script, execution of a server-side script at the authentication server system; creating on the web page, by the server-side script, a secure zone comprising an inline frame, which is controlled by the authentication server system during a session that is associated with the inline frame; retrieving, by the authentication server system, a referrer address from the session of the inline frame using an HTTP_REFERER variable; comparing, by the authentication server system, the referrer address to the stored URL; delivering, by the authentication server system, web content to, or via the secure zone, upon finding a match between the referrer address and the stored URL; storing an identifier of the session, by the authentication server system, upon finding the match between the referrer address and the stored URL; receiving an indication, at the authentication server system, of an interaction of a user with the web content delivered; authenticating, by the authentication server system, responsively to the indication, using the stored identifier of the session, that the interaction occurred in the session; and performing, by the authentication server system, responsively to the authenticating, at least one step selected from the group consisting of: modifying at least a portion of the web content delivered to or via the secure zone, presenting information to the secure zone, and presenting information in a window of the browser opened via the secure zone.