Granted Patent B2

US 11,038,890 · App. 16/664,874 · Granted Jun 15, 2021

Abstract

Claims (46)

1. A method for controlling an access to a custom browser function, the method comprising:

sending, by a processor, a request to a third party website;

receiving, by the processor, in response to the sending, a hypertext markup language code and a browser script;

rendering, by the processor, the hypertext markup language code;

detecting, by the processor, that the browser script is trying to access the custom browser function, wherein the custom browser function comprises a script, wherein the script comprises a javascript object that is not created by a manufacturer of a browser embedded in a system of the processor, and wherein the script includes a function call to check an access control list;

comparing, before allowing the browser script to access the custom browser function, by the processor, in response to the detecting, one or more parameters associated with the custom browser function to a corresponding one or more parameters in the access control list to control the access of the custom browser function, wherein the one or more parameters comprise at least one of: a domain, a path and an object; and

terminating, by the processor, in response to the comparing, the custom browser function when no match of the one or more parameters is found in the corresponding one or more parameters in the access control list.

2. The method of claim 1 , wherein the browser script comprises a javascript object.

3. The method of claim 1 , wherein the script is outside of a European Computer Manufacturers Association standard.

4. The method of claim 1 , wherein the access control list is defined by a service provider and received by the system of the processor.

5. The method of claim 1 , further comprising:

displaying, by the processor, an error message when the custom browser function is terminated.

6. The method of claim 1 , further comprising:

rendering, by the processor, the third party website in an incomplete form when the custom browser function is terminated.

7. The method of claim 1 , wherein the processor is part of a set top box.

8. The method of claim 1 , wherein the processor is part of a video game console.

9. The method of claim 1 , wherein the processor is part of a television.

10. A non-transitory computer-readable storage device storing a plurality of instructions which, when executed by a processor, cause the processor to perform operations for controlling an access to a custom browser function, the operations comprising:

sending a request to a third party website;

receiving, in response to the sending, a hypertext markup language code and a browser script;

rendering the hypertext markup language code;

detecting that the browser script is trying to access the custom browser function, wherein the custom browser function comprises a script, wherein the script comprises a javascript object that is not created by a manufacturer of a browser embedded in a system of the processor, and wherein the script includes a function call to check an access control list;

comparing, before allowing the browser script to access the custom browser function, in response to the detecting, one or more parameters associated with the custom browser function to a corresponding one or more parameters in the access control list to control the access of the custom browser function, wherein the one or more parameters comprise at least one of: a domain, a path and an object; and

terminating, in response to the comparing, the custom browser function when no match of the one or more parameters is found in the corresponding one or more parameters in the access control list.

11. The non-transitory computer-readable storage device of claim 10 , wherein the browser script comprises a javascript object.

12. The non-transitory computer-readable storage device of claim 10 , wherein the script is outside of a European Computer Manufacturers Association standard.

13. The non-transitory computer-readable storage device of claim 10 , wherein the access control list is defined by a service provider and received by the system of the processor.

14. The non-transitory computer-readable storage device of claim 10 , wherein the operations further comprise:

displaying an error message when the custom browser function is terminated.

15. The non-transitory computer-readable storage device of claim 10 , wherein the operations further comprise:

rendering the third party website in an incomplete form when the custom browser function is terminated.

16. An apparatus for controlling an access to a custom browser function, the apparatus comprising:

a hardware processor; and

a computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising:

sending a request to a third party website;

receiving, in response to the sending, a hypertext markup language code and a browser script;

rendering the hypertext markup language code;

detecting that the browser script is trying to access the custom browser function, wherein the custom browser function comprises a script, wherein the script comprises a javascript object that is not created by a manufacturer of a browser embedded in a system of the processor, and wherein the script includes a function call to check an access control list;

comparing, before allowing the browser script to access the custom browser function, in response to the detecting, one or more parameters associated with the custom browser function to a corresponding one or more parameters in the access control list to control the access of the custom browser function, wherein the one or more parameters comprise at least one of: a domain, a path and an object; and

terminating, in response to the comparing, the custom browser function when no match of the one or more parameters is found in the corresponding one or more parameters in the access control list.

17. The apparatus of claim 16 , wherein the browser script comprises a javascript object.

18. The apparatus of claim 16 , wherein the script is outside of a European Computer Manufacturers Association standard.

19. The apparatus of claim 16 , wherein the operations further comprise:

displaying an error message when the custom browser function is terminated.

20. The apparatus of claim 16 , wherein the operations further comprise:

rendering the third party website in an incomplete form when the custom browser function is terminated.

Assignments (6)