Granted Patent B2

US 12,627,660 · App. 17/739,271 · Granted May 12, 2026

Inventor: Subramanian Krishnan (Bangalore, IN)

H04L63/0876H04L63/0236H04L63/20H04L67/02

Abstract

Claims (62)

1 . A method, comprising:

receiving, by a browser and from a first origin, preauthorization data identifying a plurality of other origins that are permitted to send instructions to the browser that cause the browser to access one or more resources at the first origin;

determining, by the browser, that data received from a second origin includes a first instruction to access a first resource at the first origin;

determining, by the browser, that the second origin is included among the plurality of other origins identified by the preauthorization data; and

accessing, by the browser and based at least in part on the second origin being included among the plurality of other origins, the first resource at the first origin based on the first instruction;

receiving, by the browser, additional data from a third origin, the additional data including a second instruction to access a second resource at the first origin;

determining, by the browser, that the third origin is unrepresented in the plurality of other origins identified in the preauthorization data;

in response to determining that the third origin is unrepresented in the plurality of other origins, sending, by the browser, a pre-access request to the first origin, the pre-access request including an indication of the third origin and the second instruction to access the second resource;

receiving, by the browser and from the first origin, an approval in response to the preaccess request; and

in response to receiving the approval, accessing, by the browser, the second resource at the first origin based on the second instruction.

2 . The method of claim 1 , further comprising:

in response to receiving the data from the second origin, determining that the preauthorization data for the first origin is unavailable at the browser;

causing the browser to download of the preauthorization data from the first origin; and

storing the preauthorization data in a memory of a computing device on which the browser is being accessed.

3 . The method of claim 1 , further comprising:

receiving, by the browser, a user input indicative of at least the first origin, receipt of the user input causing the browser to download the preauthorization data from the first origin.

4 . The method of claim 3 , further comprising:

receiving, by the browser, an additional user input indicative of a time period when the preauthorization data from the first origin is to be updated;

determining, by the browser, that time elapsed since previous download of the preauthorization data from the first origin satisfies the time period; and

in response to the time elapsed satisfying the time period, causing the browser to download updated preauthorization data from the first origin.

5 . The method of claim 1 , wherein the preauthorization data further identifies at least one Hypertext-Transfer-Protocol (HTTP) request method permitted to be used by at least one of the plurality of other origins to send instructions to the browser.

6 . The method of claim 1 , wherein the second origin is identified in the preauthorization data using a domain.

7 . The method of claim 1 , wherein the first origin is identified in the preauthorization data using a Uniform Resource Locator (URL).

8 . A system, comprising:

at least one processor; and

at least one computer-readable medium encoded with instructions which, when executed by the at least one processor, cause the system to:

receive, by a browser and from a first origin, preauthorization data identifying a plurality of other origins that are permitted to send instructions to the browser that cause the browser to access one or more resources at the first origin;

determine, by the browser, that data received from a second origin includes a first instruction to access a first resource at the first origin;

determine, by the browser, that the second origin is included among the plurality of other origins identified by the preauthorization data; and

access, by the browser and based at least in part on the second origin being included among the plurality of other origins, the first resource at the first origin based on the first instruction;

receive, by the browser, additional data from a third origin, the additional data including a second instruction to access a second resource at the first origin,

determine, by the browser, that the third origin is unrepresented in the plurality of other origins identified in the preauthorization data;

in response to determining that the third origin is unrepresented in the plurality of other origins, send, by the browser, a pre-access request to the first origin, the pre-access request including an indication of the third origin and the second instruction to access the second resource;

receive, by the browser and from the first origin, an approval in response to the preaccess request, and

in response to receiving the approval, access, by the browser, the second resource at the first origin based on the second instruction.

9 . The system of claim 8 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the system to:

in response to receiving the data from the second origin, determine that the preauthorization data for the first origin is unavailable at the browser;

cause the browser to download of the preauthorization data from the first origin; and

store the preauthorization data in a memory of the system on which the browser is being accessed.

10 . The system of claim 8 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the system to:

receive, by the browser, a user input indicative of at least the first origin, receipt of the user input causing the browser to download the preauthorization data from the first origin.

11 . The system of claim 10 , wherein the at least one computer-readable medium is further encoded with additional instructions which, when executed by the at least one processor, further cause the system to:

receive, by the browser, an additional user input indicative of a time period when the preauthorization data from the first origin is to be updated;

determine, by the browser, that time elapsed since previous download of the preauthorization data from the first origin satisfies the time period; and

in response to the time elapsed satisfying the time period, cause the browser to download updated preauthorization data from the first origin.

12 . The system of claim 8 , wherein the preauthorization data further identifies at least one Hypertext-Transfer-Protocol (HTTP) request method permitted to be used by at least one of the plurality of other origins to send instructions to the browser.

13 . The system of claim 8 , wherein the second origin is identified in the preauthorization data using a domain.

14 . The system of claim 8 , wherein the first origin is identified in the preauthorization data using a Uniform Resource Locator (URL).

15 . At least one non-transitory computer-readable medium encoded with instructions which, when executed by at least one processor of a system, cause the system to:

receive, by a browser and from a first origin, preauthorization data identifying a plurality of other origins that are permitted to send instructions to the browser that cause the browser to access one or more resources at the first origin;

determine, by the browser, that data received from a second origin includes a first instruction to access a first resource at the first origin;

determine, by the browser, that the second origin is included among the plurality of other origins identified by the preauthorization data;

access, by the browser and based at least in part on the second origin being included among the plurality of other origins, the first resource at the first origin based on the first instruction;

receive, by the browser, additional data from a third origin, the additional data including a second instruction to access a second resource at the first origin;

determine, by the browser, that the third origin is unrepresented in the plurality of other origins identified in the preauthorization data;

in response to determining that the third origin is unrepresented in the plurality of other origins, send, by the browser, a pre-access request to the first origin, the pre-access request including an indication of the third origin and the second instruction to access the second resource;

receive, by the browser and from the first origin, an approval response to the preaccess request; and

in response to receiving the approval, access, by the browser, the second resource at the first origin based on the second instruction.

16 . The at least one non-transitory computer-readable medium of claim 15 , further encoded with additional instructions which, when executed by the at least one processor, further cause the system to:

in response to receiving the data from the second origin, determine that the preauthorization data for the first origin is unavailable at the browser;

cause the browser to download of the preauthorization data from the first origin; and

store the preauthorization data in a memory of the system on which the browser is being accessed.

Assignments (3)

Continuity (1)

References Cited (16)