Secure online communication through a widget on a web page
A client device requests a web page via a network, where the web page is identified by an identifier and references a widget. Following receipt of the requested web page, the client device requests the widget referenced by the requested web page and presents, within the requested web page, a presentation of the widget. Thereafter, in response to receiving user information within the presentation of the widget, the client device communicates the user information to a server via a secure connection between the widget on the client device and the server while maintaining user context at the client device in the requested web page, where the secure connection is initiated by the client device and employs a secure communication protocol implemented by the widget.
1. A program product, comprising:
a data processing system-readable storage device; and
server program code stored within the data processing system-readable storage device and executable by a server computer system, wherein the server program code is configured to cause the server computer system, responsive to receipt of a request for the widget, to return the widget to a client device and thereafter communicate information via a secure connection between the server computer system and the widget executing on the client device to capture, within a presentation of the widget, user information while maintaining user context at the client device in a particular web page in which the widget displays the presentation at the client device, wherein the server program code, in response to initiation of the secure connection by the client device, employs the secure connection to receive from the widget user information captured within the presentation of the widget.
2. The program product of claim 1 , wherein the user information includes at least one of a set including payment information, private information, personal information, and confidential information.
3. The program product of claim 1 , wherein the user information includes a user identifier.
4. The program product of claim 1 , wherein the server program code is further configured to cause the server computer system to serve the particular web page to the client device utilizing an insecure communication protocol.
5. The program product of claim 1 , wherein the server program code is further configured to cause the server computer system to confirm receipt of the user information via the widget on the client device while maintaining the user context.
6. The program product of claim 5 , wherein the server program code is further configured to cause the server computer system to confirm receipt of the user information by modifying the presentation of the widget presented at the client device.
7. The program product of claim 1 , wherein:
the server program code is further configured to cause the server computer system, responsive to receiving from the widget the user information captured within the presentation of the widget, to cause modification of the presentation of the widget to include a selectable element; and
the server program code is further configured to cause the server computer system, responsive to receiving from the widget an indication that the selectable element has been selected, to permit a download operation.
8. The program product of claim 1 , wherein:
the user information includes payment information; and
the server program code is further configured to cause the server computer system to complete a financial transaction utilizing the payment information.
9. The program product of claim 8 , wherein the financial transaction includes a user donation.
10. The program product of claim 1 , wherein the request for the widget comprises a secure request for the widget.
11. The program product of claim 1 , wherein the presentation of the widget comprises a dynamic presentation.
12. The program product of claim 1 , wherein the user information includes an indication that the user has selected a selectable element within the presentation of the widget that acknowledges a transaction is to be performed.
13. The program product of claim 1 , wherein the server program code is configured to cause the server computer system to maintain user context of the client device in the particular web page during updates to the presentation of the widget.
14. The program product of claim 1 , wherein the server program code is further configured to provide a link facilitating viral distribution of the widget.
15. A method of data processing, comprising:
a client device requesting a web page via a network, wherein the web page is identified by an identifier and references a widget;
following receipt of the requested web page, the client device requesting the widget referenced by the requested web page and presenting, within the requested web page, a presentation of the widget; and
thereafter, in response to receiving user information within the presentation of the widget, the client device communicating the user information to a server via a secure connection between the widget on the client device and the server while maintaining user context at the client device in the requested web page, wherein the secure connection is initiated by the client device and employs a secure communication protocol implemented by the widget.
16. The method of claim 15 , wherein the user information includes at least one of a set including payment information, private information, personal information, and confidential information.
17. The method of claim 15 , wherein communicating user information includes the client device transmitting a user identifier.
18. The method of claim 15 , wherein maintaining user context includes maintaining the user context in the web page such that the identifier is presented at the client device during communication of the information via the secure connection.
19. The method of claim 15 , and further comprising presenting confirmation of receipt of the user information by modifying the presentation of the widget presented at the client device in response to a confirmation message received from the server.
20. The method of claim 15 , and further comprising the browser receiving the web page from the server utilizing an insecure communication protocol.
21. The method of claim 15 , and further comprising:
in response to receiving from the server a confirmation message, the client device modifying the presentation of the widget to include a selectable element; and
in response to selection of the selectable element within the presentation of the widget, the client device requesting a download operation.
22. The method of claim 15 , wherein the user information includes payment information for a financial transaction.
23. The method of claim 22 , wherein the financial transaction includes a user donation.
24. The method of claim 15 , wherein the client device requesting the widget includes the client device requesting the widget utilizing a secure request.
25. The method of claim 15 , wherein presenting, within the requested web page, the presentation of the widget includes presenting, within the requested web page, a dynamic presentation of the widget.
26. The method of claim 15 , wherein the user information includes an indication that the user has selected a selectable element within the presentation of the widget that acknowledges a transaction is to be performed.
27. The method of claim 15 , wherein maintaining user context at the client device in the requested web page includes maintaining user context at the client device in the requested web page during updates to the presentation of the widget.
28. The method of claim 15 , wherein:
the server comprises a widget provider server; and
the method further comprises:
the client device receiving the requested web page from a customer server different from the widget provider server; and
the client device receiving the widget referenced by the requested web page from the widget provider server.
29. The method of claim 15 , wherein:
the server comprises a destination server; and
the method further comprises the client device receiving the widget referenced by the requested web page from a widget provider server different than the destination server.
30. The method of claim 15 , wherein maintaining user context at the client device in the requested web page includes the client device maintaining user context in the requested web page to prevent vulnerability to non-trusted access.