Third-party-secured zones on web pages

1. A computer-implemented method comprising:

storing, in an authentication server system, a URL identifying a web page, resulting in a stored URL;

providing a browser-side script to be placed on the web page;

upon opening of the web page in a browser, triggering, by the browser-side script, execution of a server-side script at the authentication server system;

creating on the web page, by the server-side script, a secure zone comprising an inline frame, which is controlled by the authentication server system during a session that is associated with the inline frame;

retrieving, by the authentication server system, a referrer address from the session of the inline frame using an HTTP_REFERER variable;

comparing, by the authentication server system, the referrer address to the stored URL;

delivering, by the authentication server system, web content to, or via the secure zone, upon finding a match between the referrer address and the stored URL;

storing an identifier of the session, by the authentication server system, upon finding the match between the referrer address and the stored URL;

receiving an indication, at the authentication server system, of an interaction of a user with the web content delivered;

authenticating, by the authentication server system, responsively to the indication, using the stored identifier of the session, that the interaction occurred in the session; and

performing, by the authentication server system, responsively to the authenticating, at least one step selected from the group consisting of: modifying at least a portion of the web content delivered to or via the secure zone, presenting information to the secure zone, and presenting information in a window of the browser opened via the secure zone.

2. The method according to claim 1 , wherein the web content comprises a seal media object, and wherein delivering the web content comprises presenting the seal media object in or via the inline frame.

3. The method according to claim 2 , wherein storing the URL further comprises associating the URL with verification information, in the authentication server system, the method further comprising:

storing an identifier of the session, by the authentication server system, upon finding the match between the referrer address and the stored URL, resulting in a stored identifier;

receiving an indication at the authentication server system that at least a portion of the seal media object has been activated by a user requesting the verification information;

authenticating, responsively to the indication by the authentication server system, using the stored identifier of the session, that the seal media object has been activated in the session; and

presenting, responsively to the authenticating by the authentication server system, the verification information to the user, in or via the inline frame.

4. The method according to claim 1 , wherein the URL comprises a first URL, wherein the at least one web page comprises a first web page, wherein storing the URL comprises storing the first URL and a second URL identifying a second web page, and wherein providing the browser-side script comprises providing a same browser-side script to be placed on the first web page and on the second web page.

5. The method according to claim 1 , wherein the secure zone comprises an HTML IFrame, and wherein creating the secure zone comprises creating the HTML IFrame on the web page.

6. The method according to claim 1 , wherein the identifier of the session comprises a random key, and wherein storing the identifier of the session comprises storing the random key in an object that represents the session.

7. The method according to claim 1 , wherein storing the identifier of the session comprises retrieving a session ID from an object that represents the session.

8. The method according to claim 1 , wherein storing the URL comprises assigning an entity ID to an entity associated with the URL, and wherein storing the identifier of the session comprises storing the entity ID.

9. The method according to claim 8 , wherein the method does not comprise communicating the entity ID to the browser.

10. The method according to claim 1 , wherein storing the identifier of the session comprises retrieving and storing an IP address of the browser.

11. The method according to claim 1 , wherein the web content comprises login controls, the method further comprising:

receiving, at the authentication server, login information entered by a user using the login controls;

authenticating the login information by the authentication server system; and

delivering, by the authentication server system, restricted-access web content to or via the secure zone.

12. The method according to claim 1 ,

wherein the URL comprises a first URL,

wherein the at least one web page comprises a first web page, the secure zone comprises a first inline frame,

wherein the web content comprises first web content comprising transmission controls,

wherein storing the URL comprises storing the first URL and a second URL, which identifies a second web page,

wherein creating further comprises creating, on the second web page, a second inline frame, and

wherein delivering the web content further comprises delivering, to or via the second inline frame, second web content comprising receipt controls, and further comprising:

sending, via the authentication server system, by a first user of the first website, using the transmission controls, information to a second user of the second website; and

receiving the information by the second user, using the receipt controls.

13. The method according to claim 1 , wherein the web content comprises streaming content, and wherein delivering the web content comprises leaving the secure zone open while delivering the streaming content.

14. An apparatus comprising:

an interface for communicating with a browser over a network;

a memory, configured to store a URL identifying a web page having thereon a browser-side script, wherein the memory is configured to store the URL in association with verification information; and

a processor, configured to execute a server-side script triggered by the browser-side script upon opening of the web page in the browser, which server-side script causes the processor to:

create on the web page a secure zone comprising an inline frame, which is controlled by the processor during a session that is associated with the inline frame, wherein the processor is configured to retrieve a referrer address from the session of the inline frame using an HTTP_REFERER variable;

compare the referrer address with the stored URL;

upon finding a match between the referrer address and the stored URL, deliver web content to, or via the secure zone, wherein the web content comprises a seal media object, and wherein the processor is configured to present the seal media object in or via the inline frame;

store, upon finding the match between the referrer address and the stored URL, an identifier of the session in the memory;

receive an indication that at least a portion of the seal media object has been activated by a user requesting the verification information;

authenticate, responsively to the indication, using the stored identifier of the session, that the seal media object has been activated in the session; and

present, responsively to authenticating, the verification information to the user, in or via the secure zone.

15. The apparatus according to claim 14 , wherein the URL comprises a first URL, wherein the web page comprises a first web page, and wherein the memory is configured to store the first URL, and to store a second URL identifying at least a second web page having thereon a same browser-side script as is on the first web page.

16. The apparatus according to claim 14 , wherein the processor is configured to, upon finding the match between the referrer address and the stored URL, store an identifier of the session in the memory.

17. The apparatus according to claim 16 , wherein the processor is configured to:

receive an indication of an interaction of a user with the web content delivered to or via the secure zone;

authenticate, responsively to the indication, using the stored identifier of the session, that the interaction occurred in the session; and

perform, responsively to the authenticating, at least one action selected from the group consisting of: modifying at least a portion the web content delivered to or via the secure zone, presenting information in the secure zone, and presenting information in a window of the browser opened via the secure zone.

18. The apparatus according to claim 14 , wherein the URL comprises a first URL, the web page comprises a first web page, and the secure zone comprises a first inline frame, wherein the web content comprises first web content comprising transmission controls, wherein the memory is configured to store a second URL identifying a second web page having the browser-side script thereon, and wherein the processor is configured to:

create, on the second web page, a second secure zone including a second inline frame;

deliver, to or via the second inline frame, second web content comprising receipt controls;

receive information sent by a first user of the first website, responsively to use by the first user of the transmission controls; and

transmit the information to a second user of the second website, responsively to use by the second user of the receipt controls.

19. A non-transitory tangible computer-readable medium comprising program instructions which program instructions, when read by a computer, cause the computer to:

store a URL identifying a web page having a browser-side script thereon, resulting in a stored URL;

execute a server-side script triggered by the browser-side script upon opening of the web page in a browser, the server-side script causes the computer to create a secure zone comprising an inline frame on the web page, wherein the inline frame is controlled by the computer during a session associated with the inline frame,

retrieve a referrer address from the session of the inline frame using an HTTP_REFERER variable;

compare the referrer address with the stored URL;

deliver web content to or via the secure zone, upon finding a match between the referrer address and the stored URL, wherein the web content comprises a seal media object, and wherein the instructions, when read by the computer, cause the computer to present the seal media object in or via the inline frame;

store the URL in association with verification information;

store, upon finding the match between the referrer address and the stored URL, an identifier of the session;

receive an indication that at least a portion of the seal media object has been activated by a user requesting the verification information;

authenticate, responsively to the indication, using the stored identifier, that the seal media object has been activated in the session; and

present, responsively to authenticating, the verification information to the user, in or via the secure zone.