Local API call method without pre-building a secure session

Abstract

The invention relates to a local API calling method dispense with preset of secure session. A browser submits a local API calling request to a local agent program of a user computer in a network communication mode. The local API calling method is one of the following methods: A, a pull calling method: the local agent program acquires input parameter data required for calling a local API from a Web information system, calling the local API, and feeding back the output result of the called local API to the browser; B, a push calling method: when the request comprises the input parameter data required for calling the local API, the local agent program calls the local API by utilizing the input parameter data provided by the browser, submits the output result of the called local API to the Web information system, and feeds back the result fed back by the Web information system to the browser; C, a calling method integrating pushing and pulling: fulfilling calling treatment according to the pull calling method and the push calling method in sequence. The local API calling method has the advantages that manual interference of a user is eliminated, and password calculation of the Web information system is avoided.

Description

technical field [0001] The invention belongs to the field of Web information technology, in particular to a local API calling method that does not need to pre-build a secure session between a Web information system and a local API calling agent. Background technique [0002] When a user uses a browser to access a Web information system (or application system), it is often necessary to call a local API of the user's computing device, such as a dynamic library, a COM component, and a system API. However, for security reasons, various browsers prohibit direct calls to native APIs. In order to solve this problem, some browsers allow calling the local API of the user's computing device through a security plug-in or control (digitally signed plug-in or control, such as Mozilla Plug-in, IE ActiveX). The problems with plug-ins or controls are: (1) Not all browsers or browsers running on all user platforms support plug-ins or controls; (2) Web information system developers need to d...

AI Technical Summary

Problems solved by technology

The problems with plug-ins or controls are: (1) Not all browsers or browsers running on all user platforms support plug-ins or controls; (2) Web information system developers need to develop corresponding browsers or user platforms. Plug-ins or controls (because the mechanism and execution code of plug-ins or controls of different browsers or browsers running on different user platforms will be different)

But the problem with Native Client technology is: (1) only suitable for Google browser; (2) the execution of the called local API is limited

But the problem with the solution in the patent application 201410268827.0 is that before calling the local API, a secure session must be constructed between the local agent program and the Web information system in advance, and the calling of the local API by the Web browser may be sporadic and accidental. In some cases, it is cumbersome to pre-establish a secure session; moreover, in the process of building a secure session or in the process of using a secure session, manual intervention by the user may be required, or the Web information system may be required to perform cryptographic calculations. From the user's point of view, of course It is hoped that the manual intervention is as little as possible and there is no manual intervention as much as possible. From the perspective of Web information systems, not all Web information systems have the function of cryptographic operations.

Images