Method of encrypting data and files for browser

Abstract

The invention relates to a method of encrypting data and files for a browser. The method comprises the following steps that an encryption plug-in modifies a code for submitting data and/or uploading a file part in a page code, which returns to a user browser, of a Web website; when a user submits the data and/or uploads a file through the browser, the modified page code for submitting the data and/or uploading the file submits data to be submitted or the file data to be uploaded by the user to a local agent program of the user browser, the agent program calls a password module to encrypt the data to be submitted or the file data to be uploaded, and then the browser submits or uploads the encrypted data or the file data to the Web website, or the agent program submits or uploads the encrypted data or the file data to the Web website. According to the method, the submitted data and/or the uploaded file data can be encrypted without modifying the Web website and calling the plug-in of the browser.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a data and file encryption method for browsers. Background technique [0002] At present, file cloud storage is becoming more and more popular, and people are also worried about the security of files uploaded to cloud storage public platforms: confidential or personal privacy files stored on public platforms may be hacked or stolen from within And divulge, leak. The most effective way to protect files stored on public cloud storage platforms is to encrypt stored files. However, encryption by the system of the cloud storage platform is also untrustworthy, because it cannot prevent insiders or operating agencies from stealing private files. Therefore, the most effective protection method for cloud storage files is to encrypt the files by the uploader when the files are uploaded, such as encrypting the files with the key or password of the uploader. Many current clou...

AI Technical Summary

Problems solved by technology

[0005] First, due to security restrictions, the page code running in the browser, such as various script codes, cannot directly call the cryptographic module in the user's computing device where the browser is located to encrypt data, but must call a browser plug-in (some browser The browser is called a control, such as IE), and the password module is called through the browser plug-in

The problem of developing browser plug-ins is: (1) The page codes using plug-ins have poor adaptability. For example, the Plug-in of Firefox cannot be used for IE (Internet Explorer), and the ActiveX of IE cannot be used for Firefox; (2) If the uploaded file is realized through Form, the page script program cannot intercept the uploaded file data, it is impossible to call the plug-in to encrypt the uploaded file data; (3) If the uploaded file is read by a script program to read the local file, although the page script program can be used to encrypt the uploaded file data, but currently not all All browsers support scripts to read local files

Browser extensions are software components that can actively intervene in browser page codes, while browser plug-ins cannot actively intervene in browser page codes and can only be called by browser page codes

Images