Patent ID: 8505106

Claim:
A computer-implemented method for authenticating a request submitted through a third party content provider, comprising: under the control of one or more computer systems configured with executable instructions, providing a trusted script to a third party content provider, the trusted script enabling creation of a trusted window inaccessible to the third party content provider; with the trusted script, creating the trusted window on at least one Web page associated with the third party content provider and displayed on a client computing device; receiving, via the created trusted window, a message generated by the trusted script; in response to the message, validating the third party content provider; when the third party content provider is valid, passing a trust token to the third party content provider through the created trusted window; and providing the trust token to the client computing device; and when a request is submitted through the at least one Web page, with the trusted script, associating the trust token passed to the third party content provider with the request; validating the trust token associated with the request by comparing a value of the trust token submitted with the request with a value of the trust token provided to the client computing device; and when the validation is successful, processing the request.