Patent ID: 8386784

Claim:
Apparatus for securely submitting a request from a client to a server, the apparatus comprising: a request pre-submitting component configured to send a request with a unique identifier to the server; and a request confirmation component containing a key inaccessible to other components, where said request confirmation component resides in a hidden I frame in a browser having a same-origin policy and the request confirmation component is arranged in a domain different from the other components, so that the key in the request confirmation component is inaccessible to the other components; wherein said request pre-submitting component is further configured to send an alarm message containing said unique identifier and a request description of the request to the request confirmation component; wherein said request confirmation component is configured to pop up a request confirmation window, on which the request description is displayed, in response to the alarm message; and wherein said request confirmation component is further configured to generate a request confirmation message associated with the request by using at least the key and the unique identifier and to send the request confirmation message to the server in response to confirmation of legality of the request.