Rendering online content via secured URL
Exemplary embodiments are directed to a method for allowing a user at a first client device to provide access to restricted content on a content provider server to a user at a second client device without providing identifying information of the second client device or the user to the content provider. The second client device receives, in a messaging app, a message from the first client device comprising a link to a content item at a content provider and an identifier of a private/public key pair on the second client device. Second client device displays the link in the user interface of the messaging app and receives a user selection of the link. Second client device generates generating a digital signature for the link using the private key of the private/public key pair and sends the link and the digital signature to the content provider. The content item is then received from the content provider and displayed on the second client device.
1. A computer-implemented method comprising:
receiving, in a messaging app on a receiving client device, a message from a sending user in an encrypted E2E messaging session, the message comprising a link to a content item at a third-party content provider and an identifier identifying a private/public key encryption pair on the receiving client device, the public key of the pair having been previously sent to the sending user as part of the E2E messaging session;
displaying the link in the user interface of the messaging app;
receiving a user selection of the link in the user interface of the messaging app;
retrieving, at the receiving client device, the private key of the private key/public key encryption pair identified by the identifier;
generating a digital signature for the link using the private key;
including the digital signature as an argument in the link;
sending the link to the third-party content provider;
receiving the content item from the third-party content provider; and
displaying the content item on the receiving client device.
2. The method of claim 1 wherein the digital signature comprises an encryption of the link using the private key.
3. The method of claim 1 ;
wherein the digital signature is applied to an iteration count indicating the number of times the content item has been provided by the third-party content provider.
4. The method of claim 1 wherein the content item is displayed in an app on the receiving client device associated with the third-party content provider.
5. The method of claim 1 wherein the content item is displayed in the user interface of the messaging app on the receiving client device.
6. The method of claim 1 wherein the message further comprises a rendering schema and further wherein the link is rendered in the user interface of the messaging app in accordance with the rendering schema.
7. The method of claim 6 wherein the rendering schema identifies a template and further comprises arguments to the template for displaying the link in the user interface of the messaging app.
8. A system comprising:
a processor; and
a memory containing instructions that, when executed, cause the processor to:
receive, in a messaging app on a receiving client device, a message from a sending user in an encrypted E2E messaging session, the message comprising a link to a content item at a third-party content provider and an identifier identifying a private/public key encryption pair on the receiving client device, the public key of the pair having been previously sent to the sending user as part of the E2E messaging session;
display the link in the user interface of the messaging app;
receive a user selection of the link in the user interface of the messaging app;
retrieve, at the receiving client device, the private key of the private key/public key encryption pair identified by the identifier;
generate a digital signature for the link using the private key;
include the digital signature as an argument in the link;
send the link and the digital signature to the third-party content provider;
receive the content item from the third-party content provider; and
display the content item on the receiving client device.
9. The system of claim 8 wherein the digital signature comprises an encryption of the link using the private key.
10. The system of claim 8
wherein the digital signature is applied to an iteration count indicating the number of times the content item has been provided by the third-party content provider.
11. The system of claim 8 wherein the content item is displayed in an app on the receiving client device associated with the third-party content provider.
12. The system of claim 8 wherein the content item is displayed in the user interface of the messaging app on the receiving client device.
13. The system of claim 8 wherein the message further comprises a rendering schema and further wherein the link is rendered in the user interface of the messaging app in accordance with the rendering schema.
14. The system of claim 13 wherein the rendering schema identifies a template and further comprises arguments to the template for displaying the link in the user interface of the messaging app.
15. A non-transitory computer-readable storage medium containing instructions that, when executed by processor, cause the processor to:
receive, in a messaging app on a receiving client device, a message from a sending user in an encrypted E2E messaging session, the message comprising a link to a content item at a third-party content provider and an identifier identifying a private/public key encryption pair on the receiving client device, the public key of the pair having been previously sent to the sending user as part of the E2E messaging session;
display the link in the user interface of the messaging app;
receive a user selection of the link in the user interface of the messaging app;
retrieve, at the receiving client device, the private key of the private key/public key encryption pair identified by the identifier;
generate a digital signature for the link using the private key;
include the digital signature as an argument in the link;
send the link to the third-party content provider;
receive the content item from the third-party content provider; and
display the content item on the receiving client device.
16. The medium of claim 15 wherein the digital signature comprises an encryption of the link using the private key.
17. The medium of claim 15
wherein the digital signature is applied to an iteration count indicating the number of times the content item has been provided by the third-party content provider.
18. The medium of claim 15 wherein the content item is displayed in an app on the receiving client device associated with the third-party content provider.
19. The medium of claim 15 wherein the content item is displayed in the user interface of the messaging app on the receiving client device.
20. The medium of claim 15 wherein:
the message further comprises a rendering schema;
the link is rendered in the user interface of the messaging app in accordance with the rendering schema; and
the rendering schema identifies a template and further comprises arguments to the template for displaying the link in the user interface of the messaging app.