Key generation method, browser, terminal and storage medium

Abstract

This invention provides a key generation method, a browser, a terminal, and a storage medium, relating to the field of computer technology. The method, applied to a browser, includes: upon browser startup, obtaining first and second initial strings embedded in the browser; performing preliminary encryption on the first and second initial strings respectively to obtain first and second intermediate strings; encrypting the first and second intermediate strings respectively based on system information of the target user's terminal with the browser installed, to obtain first and second target strings; and determining the key corresponding to the target user's terminal by using one of the first and second target strings as ciphertext and the other as plaintext. In this invention, by further encrypting the initially encrypted strings based on the system information of the specific terminal with the browser installed, different keys are obtained. User data from different terminals can be encrypted and decrypted using different keys, improving user data security.

Description

Technical Field

[0001] This invention relates to the field of computer technology, and in particular to a key generation method, a browser, a terminal, and a storage medium. Background Technology

[0002] Currently, computers often use encryption technology to protect important information. Appropriate encryption techniques can better safeguard this information. The encryption process typically uses a key to encrypt the plaintext data, transforming it into ciphertext. The decryption process uses the same key to decrypt the ciphertext, restoring it to its original plaintext form.

[0003] Typically, browser-encrypted data is stored on the user's terminal where the browser is installed. The encryption key can be protected using various methods, but once the key is found, the encrypted data can be decrypted. Current technology uses software-defined keys for encryption, requiring only the same key for all browser users. Once this key is obtained, all encrypted data from all browser users can be cracked, resulting in low user data security. Summary of the Invention

[0004] In view of the above problems, embodiments of the present invention are proposed to provide a key generation method that overcomes or at least partially solves the above problems, so as to solve the problem of low data security when encrypting different user data with the same key.

[0005] Accordingly, embodiments of the present invention also provide a browser, a terminal, and a storage medium to ensure the implementation and application of the above methods.

[0006] To address the aforementioned problems, this invention discloses a key generation method applied to a browser, comprising:

[0007] When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings permanently stored in the browser;

[0008] The first initial string is initially encrypted to obtain a first intermediate string, and the second initial string is initially encrypted to obtain a second intermediate string;

[0009] Based on the system information of the target user terminal with the browser installed, the first intermediate string is encrypted to obtain the first target string, and based on the system information of the target user terminal, the second intermediate string is encrypted to obtain the second target string;

[0010] One of the first target string and the second target string is used as ciphertext, and the other of the first target string and the second target string is used as plaintext to determine the key corresponding to the target user terminal.

[0011] Optionally, the step of encrypting the first intermediate string to obtain a first target string based on the system information of the target user terminal with the browser installed, and encrypting the second intermediate string to obtain a second target string based on the system information of the target user terminal, includes:

[0012] The first intermediate string and the system information of the target user terminal are arranged according to the first preset arrangement to obtain the first target string, and the second intermediate string and the system information of the target user terminal are arranged according to the second preset arrangement to obtain the second target string.

[0013] Optionally, the preliminary encryption of the first initial string to obtain a first intermediate string, and the preliminary encryption of the second initial string to obtain a second intermediate string, include:

[0014] The first initial string is initially encrypted using a preset random combination algorithm to obtain a first intermediate string, and the second initial string is initially encrypted using the same random combination algorithm to obtain a second intermediate string.

[0015] Optionally, the system information includes at least one of the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

[0016] This invention also discloses a browser, comprising:

[0017] The acquisition module is used to acquire a first initial string and a second initial string when the browser starts, wherein the first initial string and the second initial string are a pair of strings embedded in the browser;

[0018] The first encryption module is used to perform preliminary encryption on the first initial string to obtain a first intermediate string, and to perform preliminary encryption on the second initial string to obtain a second intermediate string;

[0019] The second encryption module is used to encrypt the first intermediate string according to the system information of the target user terminal with the browser installed, to obtain the first target string, and to encrypt the second intermediate string according to the system information of the target user terminal, to obtain the second target string.

[0020] The determining module is used to determine the key corresponding to the target user terminal by taking one of the first target string and the second target string as ciphertext and the other of the first target string and the second target string as plaintext.

[0021] Optionally, the second encryption module includes:

[0022] The first encryption submodule is used to arrange the first intermediate string and the system information of the target user terminal according to a first preset arrangement to obtain a first target string, and to arrange the second intermediate string and the system information of the target user terminal according to a second preset arrangement to obtain a second target string.

[0023] Optionally, the first encryption module includes:

[0024] The first encryption submodule is used to perform preliminary encryption on the first initial string using a preset random combination algorithm to obtain a first intermediate string, and to perform preliminary encryption on the second initial string using the same random combination algorithm to obtain a second intermediate string.

[0025] Optionally, the system information includes at least one of the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

[0026] This invention also discloses a terminal equipped with a browser. The terminal includes a memory and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by one or more processors. The one or more programs contain instructions for performing the following operations:

[0027] When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings permanently stored in the browser;

[0028] The first initial string is initially encrypted to obtain a first intermediate string, and the second initial string is initially encrypted to obtain a second intermediate string;

[0029] Based on the system information of the terminal, the first intermediate string is encrypted to obtain the first target string, and based on the system information of the terminal, the second intermediate string is encrypted to obtain the second target string;

[0030] One of the first target string and the second target string is used as ciphertext, and the other of the first target string and the second target string is used as plaintext to determine the key corresponding to the target user terminal.

[0031] This invention also discloses a readable storage medium, which, when the instructions in the storage medium are executed by the processor of a terminal with the browser installed, enables the terminal to execute one or more of the key generation methods described in this invention.

[0032] The embodiments of the present invention have the following advantages:

[0033] In this embodiment of the invention, firstly, upon browser startup, a first initial string and a second initial string embedded in the browser can be obtained. The first initial string can be initially encrypted to obtain a first intermediate string, and the second initial string can also be initially encrypted to obtain a second intermediate string. Then, based on the system information of the target user's terminal with the browser installed, the first intermediate string can be encrypted to obtain a first target string, and the second intermediate string can be encrypted based on the target user's terminal's system information to obtain a second target string. Afterwards, one of the first and second target strings can be used as ciphertext, and the other as plaintext, to determine the key corresponding to the target user's terminal. In this embodiment of the invention, the initially encrypted strings can be re-encrypted based on the system information of a specific user terminal with the browser installed. Since the system information of different user terminals is different, the keys obtained after re-encryption are also different. Therefore, browser user data from different user terminals can be encrypted and decrypted using different keys, improving the security of browser user data. Attached Figure Description

[0034] Figure 1 This is a flowchart illustrating the steps of an embodiment of the key generation method of the present invention;

[0035] Figure 2 This is a schematic diagram illustrating a specific process for generating a key according to the present invention;

[0036] Figure 3 This is a structural block diagram of a browser embodiment of the present invention;

[0037] Figure 4 This is a structural block diagram of a terminal for generating keys, according to an exemplary embodiment. Detailed Implementation

[0038] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0039] In the process of developing this invention, the inventors discovered that the problem with the existing technology is that there is only one key for all browser users. Once one user terminal is cracked, all user data can be cracked, which is extremely detrimental to protecting user privacy.

[0040] One of the core concepts of this invention is that it can combine some system information of a specific user terminal with a browser installed to generate a key related to that specific system information. Since the system information of different user terminals is different, the generated keys are also different, thereby avoiding the use of the same key to encrypt different browser user data and better protecting the security of browser user data.

[0041] Reference Figure 1 The diagram illustrates a flowchart of an embodiment of a key generation method according to the present invention, which may specifically include the following steps:

[0042] Step 101: When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings embedded in the browser.

[0043] In this embodiment of the invention, the key generation method can be applied to the encryption of user data in a browser. The browser has two strings stored in it, namely a first initial string A and a second initial string B. These two strings are the same for all browser users.

[0044] Step 102: Perform preliminary encryption on the first initial string to obtain the first intermediate string, and perform preliminary encryption on the second initial string to obtain the second intermediate string.

[0045] Optionally, this step can be implemented in the following ways:

[0046] The first initial string is initially encrypted using a preset random combination algorithm to obtain a first intermediate string, and the second initial string is initially encrypted using the same random combination algorithm to obtain a second intermediate string.

[0047] Among them, reference Figure 2 By using a preset random combination algorithm, the first initial string A and the second initial string B can be shuffled to obtain the first intermediate string A' and the second intermediate string B', thereby achieving preliminary encryption.

[0048] Optionally, the random combination algorithm may include the AES128 algorithm, and this embodiment of the invention does not specifically limit it.

[0049] Step 103: Based on the system information of the target user terminal with the browser installed, encrypt the first intermediate string to obtain the first target string, and based on the system information of the target user terminal, encrypt the second intermediate string to obtain the second target string.

[0050] In this step, the browser can obtain system information of the target user terminal. Optionally, the system information includes at least one of the target user terminal's Central Processing Unit (CPU) serial number, graphics card serial number, Media Access Control Address (MAC) physical address, and user directory. For a target user terminal with a browser installed, the user directory is the browser's user directory.

[0051] Optionally, this step can be implemented in the following ways:

[0052] The first intermediate string and the system information of the target user terminal are arranged according to the first preset arrangement to obtain the first target string, and the second intermediate string and the system information of the target user terminal are arranged according to the second preset arrangement to obtain the second target string.

[0053] In one optional implementation, the first preset arrangement can be the first intermediate string A', the CPU serial number of the target user terminal, the graphics card serial number of the target user terminal, the physical address of the target user terminal, and the browser user directory of the target user terminal arranged in sequence to obtain the first target string A.

[0054] In one optional implementation, the second preset arrangement can be the second intermediate string B', the CPU serial number of the target user terminal, the graphics card serial number of the target user terminal, the physical address of the target user terminal, and the browser user directory of the target user terminal arranged in sequence to obtain the second target string B.

[0055] In practical applications, the CPU serial number, GPU serial number, and physical address of different user terminals are almost always different. Therefore, in some embodiments, using only one of these three pieces of system information in the arrangement can increase the difficulty of cracking the key. Of course, any two of these three pieces of system information can be used in the arrangement, or any one or two of these three pieces of system information can be used, plus the browser user directory. It is understandable that the more system information involved in the arrangement, the greater the difficulty of cracking the key.

[0056] For example, the first preset arrangement can be a first intermediate string A' and the target user terminal's central processing unit serial number arranged sequentially to obtain the first target string A'. The second preset arrangement can be a second intermediate string B' and the target user terminal's graphics card serial number arranged sequentially to obtain the second target string B'.

[0057] For example, the first preset arrangement can also be a sequence of the first intermediate string A', the physical address of the target user terminal, and the browser user directory of the target user terminal, to obtain the first target string A'. The second preset arrangement can also be a sequence of the second intermediate string B', the physical address of the target user terminal, and the browser user directory of the target user terminal, to obtain the second target string B'.

[0058] It should be noted that the embodiments of the present invention do not impose specific limitations on the order of intermediate strings, central processing unit serial number, graphics card serial number, physical address, and user directory.

[0059] The first target string "A" and the second target string "B" are both generated based on the system information of the target user terminal, and therefore they are different for different user terminals.

[0060] Step 104: Use one of the first target string and the second target string as ciphertext, and the other of the first target string and the second target string as plaintext, to determine the key corresponding to the target user terminal.

[0061] In this step, the first target string "A" can be used as ciphertext and the second target string "B" as plaintext, or the first target string "A" can be used as plaintext and the second target string "B" as ciphertext. An encryption algorithm is then used to calculate the encrypted text C, which serves as the key unique to the target user terminal. For different user terminals, the key C is a different string, thus avoiding the use of the same key to encrypt different user data and better protecting user data security.

[0062] Key C can be generated when the browser starts and stored in memory. When the browser accesses data subsequently, it retrieves key C from memory for encryption. In this embodiment of the invention, key C does not need to be permanently stored in the browser. When the browser is closed, the memory is released, and key C in memory is also released, eliminating the need for it to be permanently stored on the target user's terminal. Thus, key C can be released from memory when the browser is closed, further reducing the risk of key C being stolen.

[0063] The encrypted text obtained by using the first target string "A" as ciphertext and the second target string "B" as plaintext is different from the encrypted text obtained by using the first target string "A" as plaintext and the second target string "B" as ciphertext.

[0064] In this embodiment of the invention, firstly, upon browser startup, a first initial string and a second initial string embedded in the browser can be obtained. The first initial string can be initially encrypted to obtain a first intermediate string, and the second initial string can also be initially encrypted to obtain a second intermediate string. Then, based on the system information of the target user's terminal with the browser installed, the first intermediate string can be encrypted to obtain a first target string, and the second intermediate string can be encrypted based on the target user's terminal's system information to obtain a second target string. Afterwards, one of the first and second target strings can be used as ciphertext, and the other as plaintext, to determine the key corresponding to the target user's terminal. In this embodiment of the invention, the initially encrypted strings can be re-encrypted based on the system information of a specific user terminal with the browser installed. Since the system information of different user terminals is different, the keys obtained after re-encryption are also different. Therefore, browser user data from different user terminals can be encrypted and decrypted using different keys, improving the security of browser user data.

[0065] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0066] Reference Figure 3 The diagram illustrates a structural block diagram of a browser embodiment of the present invention. The browser 300 may specifically include the following modules:

[0067] The acquisition module 301 is used to acquire a first initial string and a second initial string when the browser starts, wherein the first initial string and the second initial string are a pair of strings embedded in the browser;

[0068] The first encryption module 302 is used to perform preliminary encryption on the first initial string to obtain a first intermediate string, and to perform preliminary encryption on the second initial string to obtain a second intermediate string;

[0069] The second encryption module 303 is used to encrypt the first intermediate string according to the system information of the target user terminal with the browser installed, to obtain the first target string, and to encrypt the second intermediate string according to the system information of the target user terminal, to obtain the second target string;

[0070] The determining module 304 is used to determine the key corresponding to the target user terminal by taking one of the first target string and the second target string as ciphertext and the other of the first target string and the second target string as plaintext.

[0071] Optionally, the second encryption module includes:

[0072] The first encryption submodule is used to arrange the first intermediate string and the system information of the target user terminal according to a first preset arrangement to obtain a first target string, and to arrange the second intermediate string and the system information of the target user terminal according to a second preset arrangement to obtain a second target string.

[0073] Optionally, the first encryption module includes:

[0074] The first encryption submodule is used to perform preliminary encryption on the first initial string using a preset random combination algorithm to obtain a first intermediate string, and to perform preliminary encryption on the second initial string using the same random combination algorithm to obtain a second intermediate string.

[0075] Optionally, the system information includes at least one of the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

[0076] In this embodiment of the invention, firstly, when the browser starts, it can acquire a first initial string and a second initial string embedded in the browser through an acquisition module. Then, a first encryption module can perform preliminary encryption on the first initial string to obtain a first intermediate string, and similarly, perform preliminary encryption on the second initial string to obtain a second intermediate string. Next, a second encryption module can encrypt the first intermediate string based on the system information of the target user's terminal with the browser installed, to obtain a first target string, and similarly, encrypt the second intermediate string based on the system information of the target user's terminal, to obtain a second target string. Afterwards, a determination module can use one of the first and second target strings as ciphertext and the other as plaintext to determine the key corresponding to the target user's terminal. In this embodiment of the invention, the pre-encrypted strings can be re-encrypted based on the system information of a specific user terminal with the browser installed. Since the system information of different user terminals is different, the keys obtained after re-encryption are also different. This allows browser user data from different user terminals to be encrypted and decrypted using different keys, improving the security of browser user data.

[0077] As the browser implementation is basically similar to the method implementation, it is described in a simpler way. For relevant details, please refer to the description of the method implementation.

[0078] Figure 4 This is a structural block diagram of a terminal 400 for generating a key, according to an exemplary embodiment.

[0079] Reference Figure 4 Terminal 400 may include one or more of the following components: processing component 402, memory 404, power supply component 406, multimedia component 408, audio component 410, input / output (I / O) interface 412, sensor component 414, and communication component 416.

[0080] Processing component 402 typically controls the overall operation of terminal 400, such as operations associated with display, telephone calls, data communication, camera operation, and recording. Processing component 402 may include one or more processors 420 to execute instructions to complete all or part of the steps of the methods described above. Furthermore, processing component 402 may include one or more modules to facilitate interaction between processing component 402 and other components. For example, processing component 402 may include a multimedia module to facilitate interaction between multimedia component 408 and processing component 402.

[0081] Memory 404 is configured to store various types of data to support operation on terminal 400. Examples of this data include instructions for any application or method operating on terminal 400, contact data, phonebook data, messages, pictures, videos, etc. Memory 404 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk.

[0082] Power supply component 406 provides power to various components of terminal 400. Power supply component 406 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to terminal 400.

[0083] Multimedia component 408 includes a screen that provides an output interface between the terminal 400 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touchscreen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touches, swipes, and gestures on the touch panel. The touch sensors may sense not only the boundaries of the touch or swipe action but also the duration and pressure associated with the touch or swipe operation. In some embodiments, multimedia component 408 includes a front-facing camera and / or a rear-facing camera. When the terminal 400 is in an operating mode, such as a shooting mode or a video mode, the front-facing camera and / or the rear-facing camera may receive external multimedia data. Each front-facing camera and rear-facing camera may be a fixed optical lens system or have focal length and optical zoom capabilities.

[0084] Audio component 410 is configured to output and / or input audio signals. For example, audio component 410 includes a microphone (MIC) configured to receive external audio signals when terminal 400 is in an operating mode, such as call mode, recording mode, and voice recognition mode. The received audio signals may be further stored in memory 404 or transmitted via communication component 416. In some embodiments, audio component 410 also includes a speaker for outputting audio signals.

[0085] I / O interface 412 provides an interface between processing component 402 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to, home buttons, volume buttons, power buttons, and lock buttons.

[0086] Sensor assembly 414 includes one or more sensors for providing state assessments of various aspects of terminal 400. For example, sensor assembly 414 may detect the on / off state of terminal 400, the relative positioning of components such as the display and keypad of terminal 400, changes in the position of terminal 400 or a component of terminal 400, the presence or absence of user contact with terminal 400, the orientation or acceleration / deceleration of terminal 400, and temperature changes of terminal 400. Sensor assembly 414 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. Sensor assembly 414 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, sensor assembly 414 may also include an accelerometer, a gyroscope, a magnetometer, a pressure sensor, or a temperature sensor.

[0087] Communication component 416 is configured to facilitate wired or wireless communication between terminal 400 and other devices. Terminal 400 can access wireless networks based on communication standards, such as WiFi, 2G, or 3G, or combinations thereof. In one exemplary embodiment, communication component 416 receives broadcast signals or broadcast-related information from an external broadcast management system via a broadcast channel. In one exemplary embodiment, communication component 416 also includes a near-field communication (NFC) module to facilitate short-range communication. For example, the NFC module may be implemented based on radio frequency identification (RFID) technology, Infrared Data Association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

[0088] In an exemplary embodiment, terminal 400 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field-programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the methods described above.

[0089] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 404 including instructions, which can be executed by a processor 420 of a terminal 400 to perform the above-described method. For example, the non-transitory computer-readable storage medium may be a ROM, random access memory (RAM), CD-ROM, magnetic tape, floppy disk, and optical data storage device, etc.

[0090] A non-transitory computer-readable storage medium, when instructions in the storage medium are executed by a processor of a terminal equipped with a browser, enables the terminal to perform a key generation method, the method comprising:

[0091] When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings permanently stored in the browser;

[0092] The first initial string is initially encrypted to obtain a first intermediate string, and the second initial string is initially encrypted to obtain a second intermediate string;

[0093] Based on the system information of the target user terminal with the browser installed, the first intermediate string is encrypted to obtain the first target string, and based on the system information of the target user terminal, the second intermediate string is encrypted to obtain the second target string;

[0094] One of the first target string and the second target string is used as ciphertext, and the other of the first target string and the second target string is used as plaintext to determine the key corresponding to the target user terminal.

[0095] Optionally, the step of encrypting the first intermediate string to obtain a first target string based on the system information of the target user terminal with the browser installed, and encrypting the second intermediate string to obtain a second target string based on the system information of the target user terminal, includes:

[0096] The first intermediate string and the system information of the target user terminal are arranged according to the first preset arrangement to obtain the first target string, and the second intermediate string and the system information of the target user terminal are arranged according to the second preset arrangement to obtain the second target string.

[0097] Optionally, the preliminary encryption of the first initial string to obtain a first intermediate string, and the preliminary encryption of the second initial string to obtain a second intermediate string, include:

[0098] The first initial string is initially encrypted using a preset random combination algorithm to obtain a first intermediate string, and the second initial string is initially encrypted using the same random combination algorithm to obtain a second intermediate string.

[0099] Optionally, the system information includes at least one of the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

[0100] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0101] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0102] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0103] These computer program instructions may also be stored in a computer-readable storage medium capable of directing a computer or other programmable data processing terminal device to operate in a predictive manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0104] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0105] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0106] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0107] The present invention has provided a detailed description of a key generation method, a browser, a terminal, and a storage medium. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, those skilled in the art will recognize that there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A key generation method, characterized in that, Applied to browsers, including: When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings permanently stored in the browser; The first initial string is initially encrypted to obtain a first intermediate string, and the second initial string is initially encrypted to obtain a second intermediate string; Based on the system information of the target user terminal with the browser installed, the first intermediate string is encrypted to obtain the first target string, and based on the system information of the target user terminal, the second intermediate string is encrypted to obtain the second target string; One of the first target string and the second target string is used as ciphertext, and the other of the first target string and the second target string is used as plaintext to determine the key corresponding to the target user terminal.

2. The method according to claim 1, characterized in that, The step of encrypting the first intermediate string to obtain a first target string based on the system information of the target user terminal with the browser installed, and encrypting the second intermediate string to obtain a second target string based on the system information of the target user terminal, includes: The first intermediate string and the system information of the target user terminal are arranged according to the first preset arrangement to obtain the first target string, and the second intermediate string and the system information of the target user terminal are arranged according to the second preset arrangement to obtain the second target string.

3. The method according to claim 1, characterized in that, The preliminary encryption of the first initial string to obtain a first intermediate string, and the preliminary encryption of the second initial string to obtain a second intermediate string, include: The first initial string is initially encrypted using a preset random combination algorithm to obtain a first intermediate string, and the second initial string is initially encrypted using the same random combination algorithm to obtain a second intermediate string.

4. The method according to any one of claims 1-3, characterized in that, The system information includes at least one of the following: the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

5. A browser, characterized in that, include: The acquisition module is used to acquire a first initial string and a second initial string when the browser starts, wherein the first initial string and the second initial string are a pair of strings embedded in the browser; The first encryption module is used to perform preliminary encryption on the first initial string to obtain a first intermediate string, and to perform preliminary encryption on the second initial string to obtain a second intermediate string; The second encryption module is used to encrypt the first intermediate string according to the system information of the target user terminal with the browser installed, to obtain the first target string, and to encrypt the second intermediate string according to the system information of the target user terminal, to obtain the second target string. The determining module is used to determine the key corresponding to the target user terminal by taking one of the first target string and the second target string as ciphertext and the other of the first target string and the second target string as plaintext.

6. The browser according to claim 5, characterized in that, The second encryption module includes: The first encryption submodule is used to arrange the first intermediate string and the system information of the target user terminal according to a first preset arrangement to obtain a first target string, and to arrange the second intermediate string and the system information of the target user terminal according to a second preset arrangement to obtain a second target string.

7. The browser according to claim 5, characterized in that, The first encryption module includes: The first encryption submodule is used to perform preliminary encryption on the first initial string using a preset random combination algorithm to obtain a first intermediate string, and to perform preliminary encryption on the second initial string using the same random combination algorithm to obtain a second intermediate string.

8. The browser according to any one of claims 5-7, characterized in that, The system information includes at least one of the following: the target user terminal's central processing unit serial number, graphics card serial number, physical address, and user directory.

9. A terminal, characterized in that, The terminal, equipped with a browser, includes a memory storing one or more programs configured to be executed by one or more processors. These programs contain instructions for performing the following operations: When the browser starts, it obtains a first initial string and a second initial string, wherein the first initial string and the second initial string are a pair of strings permanently stored in the browser; The first initial string is initially encrypted to obtain a first intermediate string, and the second initial string is initially encrypted to obtain a second intermediate string; Based on the system information of the terminal, the first intermediate string is encrypted to obtain the first target string, and based on the system information of the terminal, the second intermediate string is encrypted to obtain the second target string; One of the first target string and the second target string is used as ciphertext, and the other of the first target string and the second target string is used as plaintext to determine the key corresponding to the target user terminal.

10. A readable storage medium, characterized in that, When the instructions in the storage medium are executed by the processor of a terminal with a browser installed, the terminal is able to perform the key generation method as described in any one of claims 1-4.

Images