Method of using cryptographic equipment by JAVASCRIPT

Abstract

The invention relates to a Method of using cryptographic equipment by JAVASCRIPT. The method comprises the following steps: step 1) of accessing the HTTPS (Hyper Text Transfer Protocol) service of the cryptographic equipment by the applied WEB page JavaScript script through an SRC (Source) attribute of a <script> tag by an HTTPS protocol, and putting the parameter data into an URL (Uniform Resource Locator) link; step 2) of requiring a caller to verify the identity after acquiring the parameters in the URL required by the HTTPS by the HTTPS service of the cryptographic equipment, after the identity verification is passed, operating the cryptographic equipment according to the parameters; step 3) of returning an operating result of the cryptographic equipment by means of balling back a JavaScript function in the WEB page after the operation is finished; acquiring the operating result in the JavaScript callback function by the applied WEB page, and then processing the operating result according to an own business process. The method of using the cryptographic equipment by JAVASCRIPT provided by the invention has the advantages of being free from a browser plug-in, cross-platform, flexible in deployment, high in security, convenient, supporting very long data and saving cost and the like.

Description

technical field [0001] The invention relates to the technical field of using cryptographic devices in Internet WEB applications, and in particular to cross-platform technology of multiple different core browsers, WEB page script cross-domain access technology, and browser plug-in technology. Background technique [0002] Cryptographic devices refer to devices that use cryptographic algorithms to generate, store, and calculate passwords. Common ones include encryption cards, encryption machines, smart cryptographic keys (also known as USB-keys, U-shields), operating system certificate storage areas, and encryption services. Algorithms such as my country's national secret standard SM1 / SM2 require hardware implementation. Cryptographic devices generally provide an application interface (API), through which the cryptographic device can be operated, but the API of the cryptographic device is generally a C / C++ interface. [0003] Invoking a password device generally requires auth...

AI Technical Summary

Problems solved by technology

It is necessary to develop plug-ins and corresponding scripts for the browser core. Due to the variety of browser cores, each plug-in technology has a lot of learning and development costs, and the browser is still developing, and the plug-in technology is often updated, such as Google browser. Different versions of the server support different plug-in technologies, and the maintenance cost will be relatively high

[0013] 2. Affect the stability of the application system

Because the plug-in method is to expand the function by loading the plug-in, the plug-in will often cause the browser to be unstable and crash. crashed

[0014] 3. Security issues

Plug-ins are closely integrated with browsers, can access browser internal data, hijack browser functions, affect all websites, and are easily exploited by malicious plug-ins, thus facing great security risks

Many browsers currently restrict the use of plug-ins

[0015] 4. Complicated to use

This is mainly reflected in the installation of plug-ins. Because plug-ins will affect the stability of the browser and bring security risks, all browsers have a policy of restricting plug-ins. There are constant warning prompts. In order to install plug-ins through security interception, sometimes it is necessary to manually set the browser, which is a big trouble for many users who are not familiar with browsers.

Images