Browser-based secure certificate invocation method, apparatus, device, and storage medium

Abstract

The application relates to a browser-based security certificate calling method, device, equipment and storage medium. The application relates to the technical field of information security, and the method comprises the following steps: acquiring the browser type of a current browser for calling a security certificate and the operating system type of a terminal to which the current browser belongs; determining a target plug-in for calling the security certificate according to the browser type and the operating system type; and controlling the current browser to call the security certificate based on the target plug-in. Through the above method, the security certificate can be called in different browsers and operating systems, and the security of e-commerce transactions is greatly guaranteed.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of information security, and in particular to a browser-based security certificate calling method, device, equipment and storage medium. BACKGROUND

[0002] A security certificate is a tool for uniquely confirming the identity of a secure e-commerce transaction party. For example, in the financial field, a security certificate can be a high-level security tool (such as a U disk) provided by a financial institution for a client to handle online financial service business. It can encrypt, decrypt and digitally sign online data to ensure the confidentiality, authenticity, integrity and non-repudiation of online transactions. Therefore, the security certificate plays an indispensable role in the transaction process of online banking.

[0003] However, the current web security certificate can only be called by a fixed type of browser, such as the control of the Internet Explorer (IE) browser under the Microsoft Windows system, thereby realizing the protection of e-commerce transactions. With different types of browsers entering the market, the previous security certificate calling method cannot adapt to the increasing types of browsers. Therefore, how to normally call the security certificate for different browser types has become a problem to be solved. SUMMARY

[0004] Therefore, it is necessary to provide a browser-based security certificate calling method, device, equipment and storage medium capable of calling security certificates for different browser types in view of the above technical problems.

[0005] In a first aspect, the present application provides a browser-based security certificate calling method. The method comprises:

[0006] obtaining the browser type of a current browser calling a security certificate and the operating system type of a terminal to which the current browser belongs;

[0007] determining a target plug-in for calling the security certificate according to the browser type and the operating system type;

[0008] controlling the current browser to call the security certificate based on the target plug-in.

[0009] In one embodiment, determining the target plug-in for calling the security certificate according to the browser type and the operating system type comprises:

[0010] determining whether the current browser is a system browser of the operating system according to the browser type and the operating system type;

[0011] if so, determining whether the current browser is compatible with an open integration platform corresponding to the operating system type;

[0012] According to the judgment result, the target plug-in calling the security certificate is determined.

[0013] In one embodiment, according to the judgment result, the target plug-in calling the security certificate is determined, comprising:

[0014] If the current browser is compatible with the open integration platform corresponding to the operating system type, the target plug-in calling the security certificate is determined as the security control of the open integration platform.

[0015] In one embodiment, if the operating system is a Microsoft Windows system and the current browser is an IE browser of the Windows system, the open integration platform is an ActiveX platform, and the security control is an ActiveX security control.

[0016] In one embodiment, according to the judgment result, the target plug-in calling the security certificate is determined, comprising:

[0017] If the current browser is not compatible with the open integration platform corresponding to the operating system type, the target plug-in calling the security certificate is determined as a browser auxiliary script file provided by the security certificate.

[0018] In one embodiment, if the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0019] In one embodiment, based on the target plug-in, the current browser is controlled to call the security certificate, comprising:

[0020] After loading the extension plug-in of the security certificate in the current browser, the current browser is controlled to call the security certificate based on the target plug-in.

[0021] In one embodiment, the method further comprises:

[0022] If the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined as a browser extension plug-in.

[0023] In one embodiment, the browser extension plug-in is a Netscape plug-in application programming interface (NPAPI) plug-in.

[0024] In one embodiment, the browser type of the current browser calling the security certificate and the operating system type of the terminal to which the current browser belongs are obtained, comprising:

[0025] The attribute information of the current browser calling the security certificate is obtained.

[0026] According to the attribute information, a browser type of the current browser and an operating system type of a terminal to which the current browser belongs are parsed.

[0027] In a second aspect, the present application provides a browser-based security certificate calling device. The device comprises:

[0028] An information obtaining module is configured to obtain a browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs;

[0029] A plug-in determining module is configured to determine a target plug-in calling the security certificate according to the browser type and the operating system type;

[0030] A certificate calling module is configured to control the current browser to call the security certificate based on the target plug-in.

[0031] In a third aspect, the present application provides a computer device. The computer device comprises a memory and a processor. The memory stores a computer program. When the processor executes the computer program, the following steps are implemented:

[0032] A browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs are obtained;

[0033] A target plug-in calling the security certificate is determined according to the browser type and the operating system type;

[0034] The current browser is controlled to call the security certificate based on the target plug-in.

[0035] In a fourth aspect, the present application provides a computer readable storage medium. The computer readable storage medium stores a computer program. When the computer program is executed by a processor, the following steps are implemented:

[0036] A browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs are obtained;

[0037] A target plug-in calling the security certificate is determined according to the browser type and the operating system type;

[0038] The current browser is controlled to call the security certificate based on the target plug-in.

[0039] In a fifth aspect, the present application provides a computer program product. The computer program product comprises a computer program. When the computer program is executed by a processor, the following steps are implemented:

[0040] A browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs are obtained;

[0041] determining the target plug-in of calling the security certificate according to the browser type and the operating system type;

[0042] controlling the current browser to call the security certificate based on the target plug-in.

[0043] The browser-based security certificate calling method, device, equipment and storage medium. By obtaining the browser type of the current browser and the operating system type of the terminal to which the current browser belongs, different plug-ins of security certificates are called according to the obtained different browser types of the current browser and the operating system types of the current browser, so as to realize calling the security certificate by using the plug-in. This method can call the security certificate when facing different browsers and operating system types, greatly ensuring the security of electronic commerce transactions. BRIEF DESCRIPTION OF DRAWINGS

[0044] Figure 1 An application environment diagram of the browser-based security certificate calling method in one embodiment;

[0045] Figure 2 A flowchart of the browser-based security certificate calling method in one embodiment;

[0046] Figure 3 A flowchart of the method of determining the target plug-in in one embodiment;

[0047] Figure 4 A flowchart of the method of determining the browser and operating system type in one embodiment;

[0048] Figure 5 A flowchart of the browser-based security certificate calling method in another embodiment;

[0049] Figure 6 A structural block diagram of the browser-based security certificate calling device in one embodiment;

[0050] Figure 7 A structural block diagram of the browser-based security certificate calling device in another embodiment;

[0051] Figure 8 A structural block diagram of the browser-based security certificate calling device in another embodiment;

[0052] Figure 9 An internal structure diagram of the computer equipment in one embodiment. DETAILED DESCRIPTION

[0053] In order to make the purposes, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not intended to limit the present application.

[0054] The browser-based security certificate calling method provided by the embodiments of the present application can be applied to an application environment as shown in Figure 1 In an embodiment, a computer device is provided, which can be a server, and an internal structure diagram of the computer device can be as shown in Figure 1 The computer device includes a processor, a memory and a network interface connected through a system bus. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for running the operating system and the computer program in the non-volatile storage medium. The database of the computer device is configured to store data required for related processing. The network interface of the computer device is configured to communicate with an external terminal through a network connection. The computer program is executed by the processor to implement the browser-based security certificate calling method shown in any of the embodiments described below.

[0055] The browser-based security certificate calling method, device, equipment and storage medium provided by the embodiments of the present application acquire a browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs; determine a target plug-in calling the security certificate according to the browser type and the operating system type; and control the current browser to call the security certificate based on the target plug-in.

[0056] In an embodiment, as shown in Figure 2 A browser-based security certificate calling method is provided, which is described below by taking the computer device in Figure 1 as an example, including the following steps:

[0057] S201, acquire a browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs.

[0058] The security certificate is a tool for uniquely identifying the identity of a secure e-commerce transaction party. In the financial field, the security certificate can be a high-level security tool provided by a financial institution for users to handle online financial service business. It is a USB interface hardware device that has a single-chip microcomputer or smart card chip and has a certain storage space to store the user's private key and digital certificate, such as a U-shield. The browser type is the type of browser used by the user when performing online financial service business. For example, the browser type can include: IE browser, edge browser, and 360 browser, etc. The operating system type of the terminal to which the front browser belongs is the operating system type of the terminal used by the user when performing e-commerce transactions. For example, the operating system type can include: Windows 7, Windows 10, and UC, etc.

[0059] Optionally, when it is detected that the browser has a security certificate calling requirement, the attribute information of the current browser calling the security certificate is obtained, and then the browser type of the current browser is found from the type field of the attribute information, and the configuration attribute information of the computer device is also obtained, and then the operating system type of the terminal to which the current browser belongs is found from the operating system field of the configuration attribute information. The browser type and the operating system type can also be determined by establishing a browser and operating system judgment model. Specifically, when the user handles online financial service business, the relevant information of the browser and the operating system is sent to the browser and operating system judgment model, and the browser and operating system judgment model can output the browser type and the operating system type used by the current user when handling online financial service business according to the information.

[0060] Generally, the combination type of the browser and the operating system is divided into three types, namely, Windows operating system+IE browser, Windows operating system+Edge browser, and other operating systems (such as Kylin, UC, etc.) + other system browsers (such as 360 browser, Qihoo 360 browser, etc.).

[0061] S202, determining a target plug-in for calling the security certificate according to the browser type and the operating system type.

[0062] The target plug-in is a plug-in in the browser page for calling the security certificate.

[0063] Optionally, different browser and operating system combination types need to use different target plug-ins to call security certificates. A relationship mapping table can be constructed in advance according to the correspondence between the browser and operating system combination type and the target plug-in. When the current browser type and operating system type are determined, the target plug-in corresponding to the current browser type and operating system type can be found according to the table lookup mode, so as to determine the different target plug-ins required to call security certificates according to the browser and operating system combination type. A target plug-in determination model can also be trained. When the browser type and operating system type are determined, the browser type and operating system type information is input into the target plug-in determination model, and the target plug-in determination model can output the target plug-in for calling security certificates.

[0064] In S203, the current browser is controlled to call security certificates based on the target plug-in.

[0065] Optionally, the target plug-in can be inserted into the browser interface first, and then the browser is controlled to call security certificates based on the target plug-in to verify the identity of the user performing the electronic commerce transaction. If the verification is successful, the electronic commerce transaction can be performed, thereby ensuring the security of the electronic commerce transaction.

[0066] Optionally, there are many ways to call security certificates based on the target plug-in. The code of the target plug-in can be inserted into the browser page. Specifically, the calling address of the target plug-in is inserted into the browser HTML5 code information. When the browser is running, the target plug-in can be loaded according to the inserted calling address, so as to call security certificates by the target plug-in. The code of the target plug-in can also be directly inserted into the browser HTML5 code information. At this time, the inserted target plug-in can be directly used without loading, and the purpose of calling security certificates by the target plug-in can also be achieved.

[0067] The method in the above embodiment first determines the operating system and browser combination type used by the user by obtaining the browser type of the current browser and the operating system type of the terminal to which the current browser belongs. Then, the target plug-in corresponding to the different operating system and browser combination type is determined, and the security certificate is called based on the target plug-in. This method can call security certificates based on different operating systems and browser types based on different target plug-ins, thereby greatly ensuring the security of electronic commerce transactions.

[0068] The above embodiment describes the method of calling security certificates as a whole. In this embodiment, as shown in Figure 3 the details of how to determine the target plug-in according to the different operating system and browser combination type are described. The specific method includes:

[0069] S301, determining whether the current browser is a system browser of the operating system according to the browser type and the operating system type.

[0070] Optionally, generally, each manufacturer will equip the developed operating system with a corresponding system browser when developing the operating system, and some manufacturers do not equip the developed operating system with a corresponding system browser when developing the operating system. Therefore, the embodiment makes corresponding content analysis according to these different situations. Optionally, the system browsers corresponding to different versions of operating systems developed by the same manufacturer can be the same or different.

[0071] For example, the system browser corresponding to Windows 8 and later versions of the operating system is the IE browser; the system browser corresponding to Windows 10 and later versions of the operating system is the edge browser; and the operating system of the United Credit version does not have a corresponding system browser. The operating system usually uses 360 browser or Qianxin browser.

[0072] Optionally, the embodiment determines whether the browser is the browser type matched with the operating system according to the determined browser type and operating system type. Specifically, a mapping relationship table between the operating system and the corresponding system browser of the operating system can be constructed in advance for each type of operating system. After the current browser type and operating system type are determined, it is determined whether the current browser exists the system browser by table lookup. If not, it indicates that the current browser is not the system browser of the operating system. If yes, it is further determined whether the current browser is the system browser of the operating system.

[0073] S302, if yes, determining whether the current browser is compatible with the open integration platform corresponding to the operating system type.

[0074] The open integration platform can increase the function of the software system or use the resource of the software system by publicly providing the application programming interface or function of the software system without changing the source code of the software system. Since different browsers correspond to different operating systems, different operating systems correspond to different open integration platforms, for example, the open integration platform corresponding to the Windows operating system is the ActiveX platform. Therefore, it is necessary to determine the compatibility of the current browser and the open integration platform corresponding to the operating system type.

[0075] Optionally, when it is determined that the current browser type is the browser type matched with the operating system (i.e., the system browser), it is further determined whether the current browser type is compatible with the open integration platform corresponding to the operating system type, so as to further operate according to the determination result.

[0076] For example, the method for judging whether the current browser type is compatible with the open integration platform corresponding to the system type can be that the attribute information of the open integration platform records the compatible browser types, the current browser type is compared with the compatible browser types recorded in the attribute information of the open integration platform, and then it is judged whether the current browser type is compatible with the open integration platform corresponding to the system type. The programming language of the current browser type can also be compared with the programming language of the open integration platform corresponding to the system type. If the programming languages are consistent, it is determined that the current browser type is compatible with the open integration platform corresponding to the system type. If the programming languages are inconsistent, it is determined that the current browser type is not compatible with the open integration platform corresponding to the system type.

[0077] S303, according to the judgment result, determining the target plug-in for calling the security certificate.

[0078] Optionally, if the current browser is compatible with the open integration platform corresponding to the system type, the target plug-in for calling the security certificate is determined to be the security control of the open integration platform.

[0079] Specifically, for each open integration platform, there is a self-provided security control that can be called. In the case that the current browser is compatible with the open integration platform corresponding to the system type, the security control of the integration platform can be used as the target plug-in for calling the security certificate. For example, if the system is Microsoft Windows system and the current browser is IE browser of Windows system, the open integration platform is ActiveX platform, and the security control is ActiveX security control.

[0080] For example, when it is determined that the current user is using Windows system and IE browser combination, since the IE browser is compatible with the open integration platform (i.e. ActiveX platform) corresponding to the Windows system, the target plug-in is the plug-in of the ActiveX platform, i.e. ActiveX security control.

[0081] If the current browser is not compatible with the open integration platform corresponding to the system type, the target plug-in for calling the security certificate is determined to be the browser auxiliary script file provided by the security certificate.

[0082] Specifically, in the case that the current browser is incompatible with the open integration platform corresponding to the operating system type, the security control provided by the open integration platform cannot be used as the target plug-in for calling the security certificate, and the browser auxiliary script file provided by the security certificate needs to be used as the target plug-in for calling the security certificate. For example, if the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0083] For example, when it is determined that the current user is using a combination of a Windows system and an edge browser, since the edge browser is incompatible with the open integration platform (i.e., the ActiveX platform) corresponding to the Windows system, the security certificate cannot be called by inserting the ActiveX security control, and the edge auxiliary JavaScript script file needs to be inserted into the edge browser, i.e., the target plug-in at this time is the edge auxiliary JavaScript script file.

[0084] Specifically, when it is determined that the current user is using a combination of a Windows system and an edge browser, since the edge browser belongs to the system browser of the Windows system, and the edge browser is compatible with the ActiveX platform of the Windows system, it is determined that the target plug-in is the ActiveX security control, and the security certificate is called based on the ActiveX security control; when it is determined that the current user is using a combination of a Windows system and an edge browser, since the edge browser belongs to the system browser of the Windows system, but the edge browser is incompatible with the ActiveX platform of the Windows system, it is determined that the target plug-in is the edge auxiliary JavaScript script file, and the security certificate is called based on the edge auxiliary JavaScript script file.

[0085] The above embodiment describes that when the current browser is the system browser of the operating system, according to the compatibility relationship between the current browser type and the open integration platform corresponding to the operating type, in the case that the current browser type and the open integration platform corresponding to the operating type are compatible, the security control of the open integration platform is determined as the target plug-in, and in the case that the current browser type and the open integration platform corresponding to the operating type are incompatible, the browser auxiliary script file provided by the security certificate is determined as the target plug-in, so that the security certificate can be called regardless of whether the current browser type and the open integration platform corresponding to the operating type are compatible, and the security of the electronic commerce transaction is greatly guaranteed.

[0086] Optionally, based on the above embodiment, if the target plug-in is a browser auxiliary script file provided by the security certificate, this embodiment controls the current browser to call the security certificate based on the target plug-in, including: after loading the extension plug-in of the security certificate in the current browser, controlling the current browser to call the security certificate based on the target plug-in.

[0087] Specifically, when the target plug-in is a browser auxiliary script file provided by the security certificate, the auxiliary script file cannot directly call the security certificate in the current browser. It is necessary to first load the extension plug-in of the security certificate in the current browser, and then control the current browser to call the security certificate based on the target plug-in.

[0088] Optionally, determine whether the current browser has loaded the extension plug-in of the security certificate provider. If the current browser has loaded the extension plug-in of the security certificate provider, you can directly control the current browser to call the security certificate based on the target plug-in; if the current browser has not loaded the extension plug-in of the security certificate provider, you need to download the extension plug-in of the security certificate provider, and then control the current browser to call the security certificate based on the target plug-in.

[0089] Optionally, based on the above embodiment, if the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined to be a browser extension plug-in.

[0090] The browser extension plug-in is a Netscape Plug-in Application Programming Interface (NPAPI) plug-in.

[0091] Optionally, contrary to the above embodiment, if the current browser is not the system browser of the operating system, the target plug-in is determined to be a Netscape Plug-in Application Programming Interface (NPAPI) plug-in.

[0092] For example, if the current browser type is 360 Browser and the current operating system is Tongxin, and 360 Browser is not a supporting browser for the Tongxin system, the target plug-in can be determined to be a Netscape Plug-in Application Programming Interface NPAPI plug-in, and the security certificate can be called based on this plug-in.

[0093] The above two embodiments illustrate how to determine different target plug-ins according to different browser and operating system types, thereby calling security certificates. Figure 4 As shown, this embodiment describes in detail how to determine the browser type and operating system type before determining the target plug-in. The specific method includes:

[0094] S401, obtaining attribute information of the current browser that calls the security certificate.

[0095] The attribute information is related to the browser, such as version, type, corresponding operating system and other information.

[0096] Optionally, the manner of obtaining the attribute information of the current browser calling the security certificate can be to view the browser source code information (such as HTML5 code information of the current browser) in the browsing page of the current browser calling the security certificate, and extract the attribute information of the current browser from a preset field of the browser source code information.

[0097] For example, the userAgent attribute string under the navigator directory in the HTML5 code information of the browser, i.e., window.navigator.userAgent, can be obtained as the attribute information of the current browser. The navigator is a high-level directory, the userAgent is a secondary directory, and the userAgent directory contains an attribute string capable of representing the browser type and the operating system type.

[0098] S402, according to the attribute information, parsing the browser type of the current browser, and the operating system type of the terminal to which the current browser belongs.

[0099] Optionally, the attribute string capable of representing the browser type and the operating system type is parsed to determine the browser type and the operating system type currently used by the user.

[0100] Optionally, the parsing method can be to extract the information representing the browser type and the operating system type in the attribute string of the browser type and the operating system type according to a preset rule, and convert it into visual information. The parsing method can also be to train a parsing model, input the attribute string capable of representing the browser type and the operating system type into the parsing model, and the parsing model can output the browser type and the operating system type currently used by the user.

[0101] The above embodiments can quickly and accurately determine the operating system type and the browser type according to the attribute information of the browser, so that different target plug-ins can be inserted according to different browser types and operating system types in the subsequent steps, the security certificate is called, and the security certificate can be successfully called regardless of the browser type and the operating system type, thereby maximizing the security of the electronic commerce transaction.

[0102] In order to more comprehensively show the present scheme, the present embodiment gives an optional manner of a browser-based security certificate calling method, as shown in Figure 5

[0103] S501, obtaining attribute information of a current browser calling a security certificate.

[0104] ​S502, parsing the browser type of the current browser and the operating system type of the terminal to which the current browser belongs according to the attribute information.

[0105] S503, determining whether the current browser is the system browser of the operating system according to the browser type and the operating system type, if yes, performing S504, and if no, performing S508.

[0106] S504, judging whether the current browser is compatible with the open integration platform corresponding to the operating system type, if yes, performing S505, and if no, performing S506.

[0107] S505, determining that the target plug-in for calling the security certificate is the security control of the open integration platform, and controlling the current browser to call the security certificate based on the target plug-in.

[0108] For example, if the operating system is the Microsoft Windows system and the current browser is the IE browser of the Windows system, the open integration platform is the ActiveX platform, and the security control is the ActiveX security control.

[0109] S506, determining that the target plug-in for calling the security certificate is the browser auxiliary script file provided by the security certificate.

[0110] For example, if the operating system is the Windows system and the current browser is the edge browser of the Windows system, the browser auxiliary script file is the edge auxiliary JavaScript script file.

[0111] S507, after loading the extended plug-in of the security certificate in the current browser, controlling the current browser to call the security certificate based on the target plug-in.

[0112] S508, determining that the target plug-in of the security certificate is the browser extended plug-in, and controlling the current browser to call the security certificate based on the target plug-in.

[0113] The specific process of S501-S508 can refer to the description of the method embodiment, and the implementation principle and technical effects are similar, which will not be repeated here.

[0114] It should be understood that although the steps in the flowcharts involved in the above embodiments are shown in sequence according to the arrows, the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, the execution of the steps is not strictly limited in sequence, and the steps can be executed in other orders. Moreover, at least some of the steps in the flowcharts involved in the above embodiments can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of the steps or stages is not necessarily sequential, but can be alternately executed with other steps or steps or stages in other steps.

[0115] Based on the same inventive concept, the embodiments of the present application also provide a browser-based security certificate calling device for implementing the above-mentioned browser-based security certificate calling method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more browser-based security certificate calling device embodiments provided below can refer to the limitations of the browser-based security certificate calling method in the above text, which will not be repeated here.

[0116] In one embodiment, as shown in Figure 6 a browser-based security certificate calling device 6 is provided, comprising: an information acquisition module 60, a plug-in determination module 61, and a certificate calling module 62, wherein:

[0117] The information acquisition module 60 is configured to acquire the browser type of the current browser calling the security certificate and the operating system type of the terminal to which the current browser belongs.

[0118] The plug-in determination module 61 is configured to determine the target plug-in calling the security certificate according to the browser type and the operating system type.

[0119] The certificate calling module 62 is configured to control the current browser to call the security certificate based on the target plug-in.

[0120] In another embodiment, as shown in Figure 7 the plug-in determination module 61 in the above embodiment comprises:

[0121] The first judgment unit 610 is configured to determine whether the current browser is the system browser of the operating system according to the browser type and the operating system type.

[0122] The second judgment unit 611 is configured to judge whether the current browser is compatible with the open integration platform corresponding to the operating system type if yes.

[0123] The plug-in determining unit 612 is configured to determine the target plug-in of the security certificate according to the judgment result.

[0124] In another embodiment, the plug-in determining unit 612 in the above Figure 7 is further configured to:

[0125] If the current browser is compatible with the open integration platform corresponding to the type of the operating system, the target plug-in of the security certificate is determined as the security control of the open integration platform.

[0126] In another embodiment, if the operating system is a Microsoft Windows system and the current browser is an IE browser of the Windows system, the open integration platform is an ActiveX platform, and the security control is an ActiveX security control.

[0127] In another embodiment, the plug-in determining unit 612 in the above Figure 7 is further configured to:

[0128] If the current browser is not compatible with the open integration platform corresponding to the type of the operating system, the target plug-in of the security certificate is determined as a browser auxiliary script file provided by the security certificate.

[0129] In another embodiment, if the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0130] In another embodiment, the certificate calling module 62 in the above Figure 6 is further configured to:

[0131] After loading the extension plug-in of the security certificate in the current browser, the security certificate is controlled to be called based on the target plug-in.

[0132] In another embodiment, the plug-in determining unit 612 in the above Figure 7 is further configured to:

[0133] If the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined as a browser extension plug-in.

[0134] In another embodiment, the browser extension plug-in is a Netscape plug-in application programming interface (NPAPI) plug-in.

[0135] In another embodiment, as shown in the information acquisition module 60 in the above Figure 8 further includes: Figure 6

[0136] ​The information acquisition unit 600 is configured to acquire attribute information of a current browser that invokes a security certificate.

[0137] The type determination unit 601 is configured to parse, according to the attribute information, a browser type of the current browser and an operating system type of a terminal to which the current browser belongs.

[0138] The above-mentioned modules in the browser-based security certificate invocation apparatus can be realized by software, hardware, or a combination thereof. The above-mentioned modules can be embedded in or independent of a processor in a computer device in a hardware form, or stored in a memory in a computer device in a software form, so as to be invoked and executed by the processor to perform operations corresponding to the above-mentioned modules.

[0139] In one embodiment, a computer device is provided, which can be a terminal, and an internal structure diagram of the computer device can be as shown in FIG. 6. Figure 9 The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit, and an input device. The processor, the memory, and the input / output interface are connected through a system bus, and the communication interface, the display unit, and the input device are connected to the system bus through the input / output interface. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for running of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is configured to exchange information between the processor and external devices. The communication interface of the computer device is configured to perform wired or wireless communication with external terminals, and the wireless communication can be achieved through WIFI, mobile cellular network, NFC (near field communication), or other technologies. The computer program is executed by the processor to implement a browser-based security certificate invocation method. The display unit of the computer device is configured to form a visually visible picture, which can be a display screen, a projection device, or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen. The input device of the computer device can be a touch layer overlaid on the display screen, or can be a key, a trackball, or a touchpad arranged on the shell of the computer device, or can be an external keyboard, a touchpad, a mouse, or the like.

[0140] Those skilled in the art can understand that Figure 9 the structure shown in FIG. 6 is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. Specifically, the computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0141] In one embodiment, a computer device is provided, comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0142] obtaining a browser type of a current browser calling the security certificate, and an operating system type of a terminal to which the current browser belongs;

[0143] determining a target plug-in calling the security certificate according to the browser type and the operating system type;

[0144] controlling the current browser to call the security certificate based on the target plug-in.

[0145] In one embodiment, the processor further implements the following steps when executing the computer program:

[0146] determining whether the current browser is a system browser of the operating system according to the browser type and the operating system type;

[0147] if yes, determining whether the current browser is compatible with an open integration platform corresponding to the operating system type;

[0148] determining the target plug-in calling the security certificate according to the determination result.

[0149] In one embodiment, the processor further implements the following steps when executing the computer program:

[0150] if the current browser is compatible with the open integration platform corresponding to the operating system type, determining that the target plug-in calling the security certificate is a security control of the open integration platform.

[0151] In one embodiment, the processor further implements the following steps when executing the computer program:

[0152] if the operating system is a Microsoft Windows system and the current browser is an IE browser of the Windows system, the open integration platform is an ActiveX platform, and the security control is an ActiveX security control.

[0153] In one embodiment, the processor further implements the following steps when executing the computer program:

[0154] if the current browser is not compatible with the open integration platform corresponding to the operating system type, determining that the target plug-in calling the security certificate is a browser auxiliary script file provided by the security certificate.

[0155] In one embodiment, the processor further implements the following steps when executing the computer program:

[0156] If the operating system is a Windows system and the current browser is the edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0157] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0158] After loading the extension plug-in of the security certificate in the current browser, the target plug-in of the security certificate is determined based on the target plug-in.

[0159] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0160] If the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined as the browser extension plug-in.

[0161] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0162] The browser extension plug-in is a Netscape plug-in application programming interface (NPAPI) plug-in.

[0163] In one embodiment, the processor, when executing the computer program, also implements the following steps:

[0164] Obtain attribute information of the current browser calling the security certificate;

[0165] According to the attribute information, the browser type of the current browser and the operating system type of the terminal to which the current browser belongs are parsed.

[0166] In one embodiment, a computer readable storage medium is provided, and the computer readable storage medium stores a computer program. The computer program is executed by the processor to implement the following steps:

[0167] Obtain the browser type of the current browser calling the security certificate and the operating system type of the terminal to which the current browser belongs;

[0168] According to the browser type and the operating system type, determine the target plug-in calling the security certificate;

[0169] Based on the target plug-in, control the current browser to call the security certificate.

[0170] In one embodiment, the computer program is executed by the processor to implement the following steps:

[0171] According to the browser type and the operating system type, determine whether the current browser is the system browser of the operating system;

[0172] If yes, it is judged whether the current browser is compatible with the open integration platform corresponding to the operating system type;

[0173] According to the judgment result, the target plug-in calling the security certificate is determined.

[0174] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0175] If the current browser is compatible with the open integration platform corresponding to the operating system type, the target plug-in calling the security certificate is determined to be the security control of the open integration platform.

[0176] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0177] If the operating system is a Microsoft Windows system and the current browser is an IE browser of the Windows system, the open integration platform is an ActiveX platform, and the security control is an ActiveX security control.

[0178] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0179] If the current browser is not compatible with the open integration platform corresponding to the operating system type, the target plug-in calling the security certificate is determined to be a browser auxiliary script file provided by the security certificate.

[0180] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0181] If the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0182] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0183] After loading the extension plug-in of the security certificate in the current browser, the security certificate is controlled to be called by the current browser based on the target plug-in.

[0184] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0185] If the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined to be a browser extension plug-in.

[0186] In one embodiment, the computer program is further implemented when executed by the processor to implement the following steps:

[0187] The browser extension plug-in is a Netscape Plugin Application Programming Interface (NPAPI) plug-in.

[0188] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0189] Get the attribute information of the current browser that calls the security certificate;

[0190] According to the attribute information, the browser type of the current browser and the operating system type of the terminal to which the current browser belongs are parsed.

[0191] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0192] Obtain the browser type of the current browser that calls the security certificate, as well as the operating system type of the terminal to which the current browser belongs;

[0193] Determine the target plug-in that calls the security certificate based on the browser type and operating system type;

[0194] Based on the target plug-in, control the current browser to call the security certificate.

[0195] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0196] Based on the browser type and operating system type, determine whether the current browser is the system browser of the operating system;

[0197] If so, determine whether the current browser is compatible with the open integration platform corresponding to the operating system type;

[0198] Based on the judgment result, the target plug-in for calling the security certificate is determined.

[0199] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0200] If the current browser is compatible with the open integration platform corresponding to the operating system type, the target plug-in for calling the security certificate is determined to be a security control of the open integration platform.

[0201] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0202] If the operating system is Microsoft Windows and the current browser is IE browser of Windows, the open integration platform is ActiveX platform and the security control is ActiveX security control.

[0203] In one embodiment, when the computer program is executed by a processor, the following steps are further implemented:

[0204] If the current browser is not compatible with the open integration platform corresponding to the operating system type, the target plug-in calling the security certificate is determined as the browser auxiliary script file provided by the security certificate.

[0205] In one embodiment, the computer program, when executed by the processor, further implements the following steps:

[0206] If the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

[0207] In one embodiment, the computer program, when executed by the processor, further implements the following steps:

[0208] After loading the extension plug-in of the security certificate in the current browser, the current browser is controlled to call the security certificate based on the target plug-in.

[0209] In one embodiment, the computer program, when executed by the processor, further implements the following steps:

[0210] If the current browser is not the system browser of the operating system, the target plug-in of the security certificate is determined as the browser extension plug-in.

[0211] In one embodiment, the computer program, when executed by the processor, further implements the following steps:

[0212] The browser extension plug-in is a Netscape plug-in application programming interface (NPAPI) plug-in.

[0213] In one embodiment, the computer program, when executed by the processor, further implements the following steps:

[0214] Obtain attribute information of the current browser calling the security certificate;

[0215] According to the attribute information, the browser type of the current browser and the operating system type of the terminal to which the current browser belongs are parsed

[0216] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0217] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.

[0218] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A browser-based secure certificate invocation method, characterized by, The method comprises: acquiring a browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs; determining whether the current browser is a system browser of the operating system according to the browser type and the operating system type; if the current browser is not the system browser of the operating system, determining that a target plug-in of the security certificate is a browser extension plug-in; if yes, judging whether the current browser is compatible with an open integration platform corresponding to the operating system type; if the current browser is compatible with the open integration platform corresponding to the operating system type, determining that a target plug-in of the security certificate is a security control of the open integration platform; if the current browser is not compatible with the open integration platform corresponding to the operating system type, determining that the target plug-in of the security certificate is a browser auxiliary script file provided by the security certificate; controlling the current browser to call the security certificate based on the target plug-in.

2. The method of claim 1, wherein, If the operating system is a Microsoft Windows system and the current browser is an IE browser of the Windows system, the open integration platform is an ActiveX platform, and the security control is an ActiveX security control.

3. The method of claim 1, wherein, If the operating system is a Windows system and the current browser is an edge browser of the Windows system, the browser auxiliary script file is an edge auxiliary JavaScript script file.

4. The method according to claim 2 or 3, characterized in that, The controlling the current browser to call the security certificate based on the target plug-in comprises: after loading the extension plug-in of the security certificate in the current browser, controlling the current browser to call the security certificate based on the target plug-in.

5. The method of claim 4, wherein, The browser extension plug-in is a Netscape plug-in application programming interface (NPAPI) plug-in.

6. The method of claim 1, wherein, The acquiring the browser type of the current browser calling the security certificate and the operating system type of the terminal to which the current browser belongs comprises: acquiring attribute information of the current browser calling the security certificate; according to the attribute information, analyzing the browser type of the current browser and the operating system type of the terminal to which the current browser belongs.

7. A browser-based secure credential calling apparatus, characterized by, The device comprises: an information acquisition module, configured to acquire a browser type of a current browser calling a security certificate and an operating system type of a terminal to which the current browser belongs; a plug-in determination module, configured to determine a target plug-in of the security certificate according to the browser type and the operating system type; a certificate calling module, configured to control the current browser to call the security certificate based on the target plug-in; the plug-in determination module comprises: a first judgment unit, configured to determine whether the current browser is a system browser of the operating system according to the browser type and the operating system type; a second judgment unit, configured to, if yes, judge whether the current browser is compatible with an open integration platform corresponding to the operating system type; a plug-in determination unit, configured to determine the target plug-in of the security certificate according to a judgment result; The plug-in determining unit is further specific to determine that the target plug-in calling the security certificate is a security control of the open integration platform if the current browser is compatible with the open integration platform corresponding to the operating system type. The plug-in determining unit is further specific to determine that the target plug-in calling the security certificate is a browser auxiliary script file provided by the security certificate if the current browser is not compatible with the open integration platform corresponding to the operating system type. The plug-in determining unit is further specific to determine that the target plug-in of the security certificate is a browser extension plug-in if the current browser is not a system browser of the operating system.

8. A computer device comprising a memory and a processor, the memory storing a computer program, characterized in that, The processor executes the computer program to implement the steps of the method in any one of claims 1 to 6.

9. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.

10. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 6.

Images