IP Library Granted Patent US 12,045,863
Granted Patent B2
US 12,045,863 · App. 14/069,583 · Granted Jul 23, 2024

Content management systems, methods, and media using an application level firewall

Inventors: David Luttrell, Jr. (Philadelphia, PA); Alan Murray (New York, NY); Christopher L Chapman (New York, NY)
Assignee: Integral Ad Science, Inc.
G06Q30/0277G06Q30/02
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,045,863
App. No.
14/069,583
Granted
Jul 23, 2024
Kind
B2
Abstract

Content management systems, methods, and media using an application level firewall are provided. In accordance with some embodiments of the disclosed subject matter, the system for managing advertisement adjacencies comprises: a firewall component in an application layer comprising a processor and a memory, wherein the firewall component is configured to operate in an advertisement call stack of the application layer and wherein the processor is programmed to: receive an advertisement call for publishing an advertisement in an advertisement server on a web page, wherein a verification tag is inserted in the advertisement call that redirects the advertisement call to the firewall component prior to transmission to the advertisement server; determine whether the web page associated with the advertisement call contains objectionable content; and, in response to determining that the web page does not contain objectionable content, transmit the advertisement call to the advertisement server for publishing the advertisement on the web page.

Claims (70)

1. A system for managing advertisement adjacencies, the system comprising:

a firewall component comprising a memory and a hardware processor, wherein the firewall component is positioned between an advertisement network that one or more advertisement calls originated and a creative server that publishes one or more corresponding content items to a web page and is configured to operate in an advertisement call stack of an application layer and wherein the hardware processor of the firewall component, when executing computer-executable instructions stored in the memory, is configured to perform operations including:

receiving, by the firewall component, a redirected first call for publishing content on a first web page on a publisher device prior to transmission to the creative server, wherein the redirected first call includes redirection instructions that direct the redirected first call for publishing content on the first web page on the publisher device to the firewall component and one or more first parameters for the content;

determining, by the firewall component, a first sitelet that the first web page belongs from a rating database that divides pages into sitelets of pre-defined groups;

determining, by the firewall component, a first sitelet score associated with the first sitelet from the rating database;

determining, by the firewall component, whether the first web page associated with the redirected first call meets the one or more parameters for the content based at least in part on the first sitelet score;

in response to determining that the first web page meets the one or more parameters for the content based at least in part on the first sitelet score, transmitting, by the firewall component, the redirected first call to the creative server for publishing the content on the first web page;

receiving, by the firewall component, a redirected second call for publishing content on a second web page on the publisher device prior to transmission to the creative server, wherein the redirected second call includes redirection instructions within the redirected second call that direct the redirected second call for publishing content on the second web page on the publisher device to the firewall component and one or more first parameters for the content;

determining, by the firewall component, a second sitelet that the second web page belongs from the rating database that divides the pages into the sitelets of pre-defined groups;

determining, by the firewall component, a second sitelet score associated with the second sitelet from the rating database;

determining, by the firewall component, whether the second web page associated with the second redirected call meets the one or more parameters for the content based at least in part on the second sitelet score; and

in response to determining that the web page does not meet the one or more parameters for content based at least in part on the second sitelet score, redirecting, by the firewall component, the redirected second call to the advertisement network, wherein the redirected second call is modified to include an indication that the redirected second call was redirected due to not meeting the one or more parameters for content based at least in part on the second sitelet score.

2. The system of claim 1 , wherein the content is advertisement content, the one or more first parameters includes one or more advertisement parameters, and the redirected first call is an advertisement call.

3. The system of claim 2 , wherein code is placed in the advertisement call that redirects the advertisement call to an advertisement firewall component prior to transmission to an advertisement server that retrieves the advertisement for publication on the first web page.

4. The system of claim 2 , wherein the one or more advertisement parameters include at least one of: a brand threshold value, an objectionable content threshold value, an advertisement network identification parameter, a publisher identification parameter, an advertiser identification parameter, an advertisement campaign parameter, an advertisement placement parameter, a referring URL parameter, a reporting parameter, a content parameter, an advertisement type parameter, a network guidelines parameter, a log information parameter, a targeting parameter, a firewall behavior parameter, and a tracking parameter.

5. The system of claim 2 , wherein the hardware processor is further configured to perform operations including:

comparing, by the firewall component, the one or more advertisement parameters with the first sitelet score; and

determining, by the firewall component, whether to transmit the advertisement call based at least in part on the comparison.

6. The system of claim 2 , wherein the hardware processor is further configured to perform operations including allowing, by the firewall component, an impression of the advertisement associated with the advertisement call to be used by another advertiser for publication in response to determining that the first web page does not meet the one or more advertisement parameters.

7. The system of claim 2 , wherein the hardware processor is further configured to perform operations including transmitting, by the firewall component, the advertisement call to the advertisement network in response to determining that the first web page does not meet the one or more advertisement parameters.

8. A method for managing advertisement adjacencies, the method comprising:

receiving, using a firewall component positioned between an advertisement network that one or more advertisement calls originated and a creative server that publishes one or more corresponding content items to a web page and is configured to operate in an advertisement call stack of an application layer, wherein the firewall component includes a computing device, a redirected first call for publishing content on a first web page on a publisher device prior to transmission to the creative server, wherein the redirected first call includes redirection instructions that direct the redirected first call for publishing content on the first web page on the publisher device to the firewall component and one or more first parameters for the content;

determining, using the computing device, a first sitelet that the first web page belongs from a rating database that divides pages into sitelets of pre-defined groups;

determining, using the computing device, a first sitelet score associated with the first sitelet from the rating database;

determining, using the computing device, whether the first web page associated with the redirected first call meets the one or more parameters for the content based at least in part on the first sitelet score;

in response to determining that the web page meets the one or more parameters for the content based at least in part on the first sitelet score, transmitting, using the computing device, the redirected first call to the content network for publishing the content on the first web page;

receiving, using the computing device, a redirected second call for publishing content on a second web page on the publisher device prior to transmission to the creative server, wherein the redirected second call includes redirection instructions within the redirected second call that direct the redirected second call for publishing content on the second web page on the publisher device to the firewall component and one or more first parameters for the content;

determining, using the computing device, a second sitelet that the second web page belongs from the rating database that divides the pages into the sitelets of pre-defined groups;

determining, using the computing device, a second sitelet score associated with the second sitelet from the rating database;

determining, using the computing device, whether the second web page associated with the redirected second call meets the one or more parameters for the content based at least in part on the second sitelet score; and

in response to determining that the web page does not meet the one or more parameters for content based at least in part on the second sitelet score, redirecting, using the computing device, the redirected second call to the advertisement network, wherein the redirected second call is modified to include an indication that the redirected second call was redirected due to not meeting the one or more parameters for content based at least in part on the second sitelet score.

9. The method of claim 8 , wherein the content is advertisement content, the one or more first parameters includes one or more advertisement parameters, and the redirected first call is an advertisement call.

10. The method of claim 9 , wherein code is placed in the advertisement call that redirects the advertisement call to an advertisement firewall component prior to transmission to an advertisement server that retrieves the advertisement for publication on the first web page.

11. The method of claim 9 , wherein the one or more advertisement parameters include at least one of: a brand threshold value, an objectionable content threshold value, an advertisement network identification parameter, a publisher identification parameter, an advertiser identification parameter, an advertisement campaign parameter, an advertisement placement parameter, a referring URL parameter, a reporting parameter, a content parameter, an advertisement type parameter, a network guidelines parameter, a log information parameter, a targeting parameter, a firewall behavior parameter, and a tracking parameter.

12. The method of claim 9 , further comprising:

comparing the one or more advertisement parameters with the first sitelet score; and

determining whether to transmit the advertisement call based at least in part on the comparison.

13. The method of claim 9 , further comprising allowing an impression of the advertisement associated with the advertisement call to be used by another advertiser for publication in response to determining that the first web page does not meet the one or more advertisement parameters.

14. The method of claim 9 , further comprising transmitting the advertisement call to the advertisement network in response to determining that the first web page does not meet the one or more advertisement parameters.

15. A system for managing advertisement adjacencies, the system comprising:

a firewall component comprising a memory and a hardware processor, wherein the firewall component is positioned between an advertisement network that one or more advertisement calls originated and a creative server that publishes one or more corresponding content items to a web page and is configured to operate in an advertisement call stack of an application layer and wherein the hardware processor of the firewall component, when executing computer-executable instructions stored in the memory, is configured to perform operations including:

receiving, by the firewall component, a redirected call for publishing content on a web page on a publisher device prior to transmission to the creative server, wherein the redirected call includes redirection instructions that direct the redirected call for publishing content on the web page on the publisher device to the firewall component and one or more parameters for the content;

determining, by the firewall component, a sitelet that the web page belongs from a rating database that divides pages into sitelets of pre-defined groups;

determining, by the firewall component, determine a sitelet score associated with the sitelet from the rating database;

determining, by the firewall component, whether the web page associated with the redirected call meets the one or more parameters for the content based at least in part on the sitelet score;

determining, by the firewall component, whether to transmit the redirected call based at least in part on the determination of whether the web page meets the one or more parameters for the content; and

in response to determining that the web page does not meet the one or more parameters for content based at least in part on the sitelet score or in response to determining that the redirected call does not meet the one or more parameters for the content, redirecting, by the firewall component, the redirected call to the advertisement network, wherein the redirected call is further modified to include an indication that the redirected call was redirected due to not meeting the one or more parameters for content.

16. The system of claim 15 wherein the content is advertisement content, the one or more parameters includes one or more advertisement parameters, and the redirected first call is an advertisement call.

17. The system of claim 16 , wherein the one or more advertisement parameters include at least one of: a brand threshold value, an objectionable content threshold value, an advertisement network identification parameter, a publisher identification parameter, an advertiser identification parameter, an advertisement campaign parameter, an advertisement placement parameter, a referring URL parameter, a reporting parameter, a content parameter, an advertisement type parameter, a network guidelines parameter, a log information parameter, a targeting parameter, a firewall behavior parameter, and a tracking parameter.

18. The system of claim 16 , wherein the hardware processor is further configured to perform operations including:

comparing, by the firewall component, the one or more advertisement parameters with the sitelet score; and

determining, by the firewall component, whether to transmit the advertisement call based at least in part on the comparison.

19. The system of claim 16 , wherein the hardware processor is further configured to perform operations including transmitting the advertisement call to an advertisement server for providing the advertisement to the web page in response to determining that the web page meets the one or more advertisement parameters.

20. The system of claim 16 , wherein the hardware processor is further configured to perform operations including transmitting the advertisement call to the advertisement network in response to determining that the web page does not meet the one or more advertisement parameters.

21. The system of claim 16 , wherein code is placed in the advertisement call that redirects the advertisement call to an advertisement firewall component prior to transmission to an advertisement server that retrieves the advertisement for publication on the web page.

22. A method for managing advertisement adjacencies, the method comprising:

receiving, using a firewall component positioned between an advertisement network that one or more advertisement calls originated and a creative server that publishes one or more corresponding content items to a web page and is configured to operate in an advertisement call stack of an application layer, wherein the firewall component includes a computing device, a redirected call for publishing content on a web page on a publisher device prior to transmission to the creative server, wherein the redirected call includes redirection instructions that direct the redirected call for publishing content on the web page on the publisher device to the firewall component and one or more parameters for the content;

determining, using the computing device, a sitelet that the web page belongs from a rating database that divides pages into sitelets of pre-defined groups;

determining, using the computing device, a sitelet score associated with the sitelet from the rating database;

determining, using the computing device, whether the web page associated with the redirected call meets the one or more parameters for the content based at least in part on the sitelet score;

determining, using the computing device, whether to transmit the redirected call based at least in part on the determination of whether the web page meets the one or more parameters for the content; and

in response to determining that the web page does not meet the one or more parameters for content based at least in part on the sitelet score or in response to determining that the call does not meet the one or more parameters for the content, redirecting, using the computing device, the redirected call to the advertisement network, wherein the redirected call is further modified to include an indication that the redirected call was redirected due to not meeting the one or more parameters for content.

23. The method of claim 22 , wherein the content is advertisement content, the one or more parameters includes one or more advertisement parameters, and the redirected first call is an advertisement call.

24. The method of claim 23 , wherein the one or more advertisement parameters include at least one of: a brand threshold value, an objectionable content threshold value, an advertisement network identification parameter, a publisher identification parameter, an advertiser identification parameter, an advertisement campaign parameter, an advertisement placement parameter, a referring URL parameter, a reporting parameter, a content parameter, an advertisement type parameter, a network guidelines parameter, a log information parameter, a targeting parameter, a firewall behavior parameter, and a tracking parameter.

25. The method of claim 23 , further comprising:

comparing the one or more advertisement parameters with the sitelet score; and

determining whether to transmit the advertisement call based at least in part on the comparison.

26. The method of claim 23 , further comprising transmitting the advertisement call to an advertisement server for providing the advertisement to the web page in response to determining that the web page meets the one or more advertisement parameters.

27. The method of claim 23 , further comprising transmitting the advertisement call to the advertisement network in response to determining that the web page does not meet the one or more advertisement parameters.

28. The method of claim 23 , wherein code is placed in the advertisement call that redirects the advertisement call to an advertisement firewall component prior to transmission to an advertisement server that retrieves the advertisement for publication on the web page.

Assignments (10)
RELEASE OF SECURITY INTEREST Recorded Jan 23, 2026
From: PNC BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
To: INTEGRAL AD SCIENCE, INC.
Reel/Frame 073560/0357 →
PATENT SECURITY AGREEMENT Recorded Jan 9, 2026
From: INTEGRAL AD SCIENCE, INC.
To: ROYAL BANK OF CANADA, AS ADMINISTRATIVE AGENT
Reel/Frame 074280/0900 →
RELEASE OF SECURITY INTEREST IN PATENT COLLATERAL, RECORDED ON SEPTEMBER 29, 2021 AT REEL/FRAME 57673/0653 Recorded Jan 9, 2026
From: PNC BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
To: INTEGRAL AD SCIENCE, INC.
Reel/Frame 074280/0981 →
PATENT SECURITY AGREEMENT Recorded Sep 29, 2021
From: INTEGRAL AD SCIENCE, INC.
To: PNC BANK, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
Reel/Frame 057673/0653 →
RELEASE OF SECURITY INTEREST IN PATENT COLLATERAL AT REEL/FRAME NO. 46594/0001 Recorded Sep 29, 2021
From: GOLDMAN SACHS BDC, INC., AS COLLATERAL AGENT
To: INTEGRAL AD SCIENCE, INC.
Reel/Frame 057673/0706 →
PATENT SECURITY AGREEMENT Recorded Jul 20, 2018
From: INTEGRAL AD SCIENCE, INC.
To: GOLDMAN SACHS BDC, INC., AS COLLATERAL AGENT
Reel/Frame 046594/0001 →
TERMINATION AND RELEASE OF INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Jul 20, 2018
From: SILICON VALLEY BANK
To: INTEGRAL AD SCIENCE, INC.
Reel/Frame 046615/0943 →
CHANGE OF NAME Recorded May 25, 2018
From: ADSAFE MEDIA, LTD.
To: INTEGRAL AD SCIENCE, INC.
Reel/Frame 046245/0517 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 18, 2018
From: LUTTRELL, DAVID, JR.; MURRAY, ALAN; CHAPMAN, CHRISTOPHER L.
To: ADSAFE MEDIA, LTD.
Reel/Frame 045847/0952 →
SECURITY INTEREST Recorded Jul 24, 2017
From: INTEGRAL AD SCIENCE, INC.
To: SILICON VALLEY BANK
Reel/Frame 043305/0443 →
Continuity (3)
Continuation 12869655 · Aug 26, 2010
Provisional Application 61237536 · Aug 27, 2009
Related Publication 20140058851A1 · Feb 27, 2014