Method for non-national secret browser to access national secret website and national secret website access system

Abstract

The present application relates to a method for a non-national secret browser to access a national secret website and a national secret website access system, and relates to the field of computer information technology. The system includes a browser plug-in module, a browser plug-in service module, and a service proxy module: the browser plug-in module is connected to the browser plug-in service module in communication; the browser plug-in service module is connected to the proxy service module in communication. In the process of accessing the target website, the information associated with the target website is obtained through the browser plug-in module, and the browser plug-in service module is used to monitor the corresponding port based on the information associated with the target website to determine the relevant data and generate the website type result, and then the service proxy module establishes a local access channel with the target website according to the website type indicated by the website type. This process automatically identifies and matches the access method of the target website, and realizes the secure access of the non-national secret browser to the national secret website.

Description

Technical Field

[0001] The present application relates to the field of computer information technology, and in particular to a method and system for a non-national secret browser to access a national secret website. Background Art

[0002] The National Cryptography Browser is a browser developed based on the national commercial cryptographic algorithm standards specified by the National Cryptography Administration. It is used to access websites encrypted with the National Cryptography Protocol.

[0003] In the relevant technology, most modern browsers (such as Chrome, Firefox, Edge, etc.) support the HTTPS protocol, and the national secret website usually uses HTTPS to protect network communications. However, the national secret algorithm used by the national secret website is not supported by the above browsers, which makes the browser unable to correctly parse the encrypted content of the national secret website.

[0004] However, the configuration and acquisition methods of the National Confidentiality Browser are relatively complicated, which often results in users having access to the National Confidentiality Website but encountering inconveniences in the process of using the National Confidentiality Browser, making it more difficult to handle business based on the National Confidentiality Website. Summary of the invention

[0005] This application is about a method for a non-national secret browser to access a national secret website and a national secret website access system, which can automatically identify and match the access method of the target website, and realize the safe access of the non-national secret browser to the national secret website. The technical solution is as follows:

[0006] On the one hand, a method for a non-national secret browser to access a national secret website is provided, and the method is applied to a national secret website access system, and the national secret website access system includes a browser plug-in module, a browser plug-in service module and a service proxy module:

[0007] The browser plug-in module is connected to the browser plug-in service module for communication;

[0008] The browser plug-in service module is connected to the proxy service module for communication;

[0009] The method includes:

[0010] The browser plug-in module obtains the target website domain name and target uniform resource locator (URL) data of the target website; and sends the target website domain name and target URL data to the browser plug-in service module;

[0011] The browser plug-in service module receives the target website domain name and the target URL; in response to receiving the target website domain name and the target URL, starts monitoring the target port under the target address and obtains monitoring process data; determines the website type result based on the monitoring process data, the website type result is used to indicate whether the target website is a national secret website, and sends the website type result to the service proxy module;

[0012] The service proxy module receives the website type result, and in response to the website type result indicating that the website type is a national secret website, configures a national secret suite proxy program, which is used to establish a national secret access channel between the local and target websites.

[0013] In an optional embodiment, after receiving the website type result, the service agent module includes:

[0014] In response to the website type result indicating that the website type is a non-national secret website, the service agent module configures a non-national secret suite agent program, and the non-national secret suite agent program is used to establish a non-national secret access channel between the local and the target website.

[0015] In an optional embodiment, the national secret website access system further includes a website storage module;

[0016] The website storage module is in communication connection with the browser plug-in service module, and the website storage module is used to store a website list, wherein the website list includes a national secret website list, and the national secret website list includes a national secret website domain name corresponding to at least one national secret website;

[0017] After the browser plug-in module obtains the target website domain name and target uniform resource locator system URL data of the target website, it includes:

[0018] The website storage module sends the website list to the browser plug-in service module;

[0019] The browser plug-in service module receives a website list; synchronizes the website list to the browser plug-in module; matches the target website domain name of the target website with the national secret website domain name in the website list and the national secret website list; in response to a successful match, generates a national secret access channel configuration instruction, and the national secret website channel configuration instruction is used to instruct the service agent module to configure the national secret suite agent program; sends the national secret channel configuration instruction to the service agent module; in response to a match failure, starts listening to the target port under the target address.

[0020] In an optional embodiment, the website list further includes a list of non-national secret websites, and the list of non-national secret websites includes a non-national secret website domain name corresponding to at least one non-national secret website;

[0021] The method also includes:

[0022] The browser plug-in service module matches the target website domain name of the target website with the non-national secret website domain name in the website list and the non-national secret website list; in response to a successful match, a non-national secret access channel configuration instruction is generated, and the non-national secret website channel configuration instruction is used to instruct the service agent module to configure the non-national secret suite agent program; and the non-national secret channel configuration instruction is sent to the service agent module.

[0023] In an optional embodiment, the method further comprises:

[0024] The browser plug-in module configures the agent CA certificate.

[0025] In an optional embodiment, the browser plug-in service module, in response to receiving the target website domain name and the target URL, starts monitoring the target port under the target address and obtains monitoring process data, including:

[0026] The browser plug-in service module determines the target address and target port in response to receiving the target domain name and target URL, wherein the target address is a loopback address; monitors the target port under the target address; determines the target IP corresponding to the target website domain name; executes the Secure Sockets Layer (SSL) handshake process between the target port and the target domain name based on the target website domain name and the target IP; and obtains the monitoring process data through the SSL handshake process.

[0027] In an optional embodiment, the browser plug-in server module obtains the monitoring process data through the SSL handshake process, including:

[0028] The browser plug-in server module sends a client new session creation message to the target website domain name through the target port; receives the target website domain name through the target port to feedback the server new session creation message; and obtains the monitoring process data from the server new session creation message.

[0029] In an optional embodiment, the monitoring process data includes a protocol version number;

[0030] The browser plug-in service module determines the website type results based on the monitoring process data, including:

[0031] Determines the site type result based on the protocol version number.

[0032] In an optional embodiment, after the browser plug-in service module generates a national secret access channel configuration instruction or a non-national secret access channel configuration instruction, it includes:

[0033] Update the website list based on the national secret access channel configuration instructions and non-national secret access channel configuration instructions;

[0034] The updated website list is synchronized to the browser plug-in module and the website storage module.

[0035] On the other hand, a national secret website access system is provided, which includes a browser plug-in module, a browser plug-in server module and a proxy service module;

[0036] The browser plug-in module is connected to the browser plug-in service module for communication;

[0037] The browser plug-in service module is connected to the proxy service module for communication;

[0038] The national secret website access system is used to execute the method of using any non-national secret browser to access the national secret website as mentioned above.

[0039] The beneficial effects of the technical solution provided by this application include at least:

[0040] In the process of accessing the target website, the browser plug-in module obtains information related to the target website, and the browser plug-in service module monitors the corresponding port based on the information related to the target website to determine the relevant data and the website type result, and then the service proxy module establishes a local access channel with the target website according to the website type indicated by the website type. This process automatically identifies and matches the access method of the target website, and realizes the safe access of non-national secret browsers to national secret websites. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0042] Figure 1 A structural block diagram of a national secret website access system provided by an exemplary embodiment of the present application is shown.

[0043] Figure 2 A flowchart of a method for a non-national security browser to access a national security website provided by an exemplary embodiment of the present application is shown.

[0044] Figure 3 A structural block diagram of another national secret website access system provided by an exemplary embodiment of the present application is shown.

[0045] Figure 4 A schematic diagram of a process for generating configuration instructions based on a website list provided by an exemplary embodiment of the present application is shown.

[0046] Figure 5A schematic diagram of a process for generating website type results provided by an exemplary embodiment of the present application is shown. DETAILED DESCRIPTION

[0047] In order to make the objectives, technical solutions and advantages of the present application more clear, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

[0048] Figure 1 A structural block diagram of a national secret website access system provided by an exemplary embodiment of the present application is shown. Please refer to Figure 1 The system includes a browser plug-in module 110, a browser plug-in service module 120 and a service proxy module 130: the browser plug-in module 110 is connected to the browser plug-in service module 120 for communication; the browser plug-in service module is connected to the proxy service module for communication.

[0049] In the embodiment of the present application, the browser plug-in module, the browser plug-in service module and the proxy service module can be implemented as different program parts within the same software, or can be implemented as different software with a linkage relationship.

[0050] Figure 2 A flowchart of a method for a non-national secret browser to access a national secret website provided by an exemplary embodiment of the present application is shown, and the method is applied to Figure 1 Taking the national secret website access system shown in the figure as an example, the method includes:

[0051] Step 201, the browser plug-in module obtains the target website domain name and target URL data of the target website.

[0052] It should be noted that, in the embodiment of the present application, the browser plug-in module obtains the target website domain name and URL data of the target website through the browser kernel.

[0053] Step 202: The browser plug-in module sends the target website domain name and target URL data to the browser plug-in service module.

[0054] In the embodiment of the present application, the browser plug-in module and the plug-in service module are implemented as different browser plug-in service systems that are independent of each other.

[0055] Optionally, the browser plug-in module and the browser plug-in service module will be packaged into the same software product and perform different functions.

[0056] Step 203: The browser plug-in service module receives the target website domain name and target URL.

[0057] Step 204, in response to receiving the target website domain name and the target URL, the browser plug-in service module starts monitoring the target port under the target address and obtains monitoring process data.

[0058] In an embodiment of the present application, the monitoring process is started based on the response of the browser plug-in service module.

[0059] In the embodiment of the present application, the monitoring process data is used to indicate the actions generated corresponding to the target website domain name and the target URL during the monitoring process.

[0060] Step 205: The browser plug-in service module determines the website type result based on the monitoring process data.

[0061] In the embodiment of the present application, the website type result is used to indicate whether the target website is a national secret website, and the website type result is sent to the service agent module.

[0062] Step 206: The browser plug-in service module sends the website type result to the service proxy module.

[0063] Step 207: The service agent module receives the website type result.

[0064] Step 208, the service agent module configures the national encryption suite agent program in response to the website type result indicating that the website type is a national encryption website.

[0065] In the embodiment of the present application, the service proxy module is also a functional module of the packaged software. When the website type result indicates that the website type is a national secret website, the service proxy module is configured with a corresponding national secret suite proxy program, which is used to execute the national secret suite proxy process. Optionally, after the national secret suite proxy program is started, it will enable the browser to log in to the website in the form of a proxy.

[0066] It should be noted that in various embodiments of the present application, the national secret website access system is implemented as an application program independent of the browser. In an example, the national secret website access system establishes a connection with the browser in an independent form to obtain the target website and target URL.

[0067] Figure 3 A structural block diagram of another national secret website access system provided by an exemplary embodiment of the present application is shown. Please refer to Figure 2On the basis that the system includes a browser plug-in module 110, a browser plug-in service module 120 and a service proxy module 130, the system also includes a website storage module 140. The website storage module 140 is in communication with the browser plug-in service module 120, and the website storage module is used to store a website list, the website list includes a national secret website list, and the national secret website list includes a national secret website domain name corresponding to at least one national secret website. Optionally, the website list also includes a non-national secret website list, and the non-national secret website list includes a non-national secret website domain name corresponding to at least one non-national secret website.

[0068] It should be noted that, in the embodiment of the present application, the website storage module is implemented as a program with database support. Optionally, the application or plug-in interface corresponding to the website storage module can display a list interface, which is used to display a list corresponding to the national secret website.

[0069] Figure 4 A schematic diagram of a process for generating a configuration instruction based on a website list provided by an exemplary embodiment of the present application is shown. The method is applied to Figure 3 Taking the system shown in FIG. 1 as an example, the method includes:

[0070] Step 401: The website storage module sends a website list to the browser plug-in service module.

[0071] In an embodiment of the present application, the website list may be a list including national secret websites, or a list including non-national secret websites. The website list includes website identifiers, website domain names, and website information. The website list may be presented to the user in a visual form.

[0072] Step 402: The browser plug-in service module receives a website list.

[0073] Step 403: The browser plug-in service module synchronizes the website list with the browser plug-in module.

[0074] Step 404, the browser plug-in service module matches the target website domain name of the target website with the national secret website domain name in the website list and the national secret website list.

[0075] Step 405: In response to a successful match, the browser plug-in service module generates a national secret access channel configuration instruction.

[0076] In an embodiment of the present application, the national encryption website channel configuration instruction is used to instruct the service agent module to configure the national encryption suite agent program.

[0077] Step 406: In response to the match failure, the browser plug-in service module starts monitoring the target port under the target address.

[0078] Step 407, in response to the matching failure, the browser plug-in service module matches the target website domain name of the target website with the non-national secret website domain name in the website list and the non-national secret website list.

[0079] Step 408, in response to a successful match, generating a non-national secret access channel configuration instruction.

[0080] In an embodiment of the present application, the non-national secret website channel configuration instruction is used to instruct the service agent module to configure the non-national secret suite agent program.

[0081] That is, step 406, step 407 and step 408 are parallel schemes. In some examples of the embodiments of the present application, after failure, the browser plug-in service module can directly start monitoring to enter the process of monitoring and determining the type of website. In other embodiments of the present application, after failure, it will be compared with another non-national secret website list to further confirm whether the website is a registered non-national secret website.

[0082] When the match fails, the monitoring process shown in step 406 is executed.

[0083] Figure 5 A schematic diagram of a process for generating website type results provided by an exemplary embodiment of the present application is shown, and the process is applied to Figure 1 or Figure 3 Taking the browser plug-in service module in the system shown as an example, the process includes:

[0084] Step 501, in response to receiving a target domain name and a target URL, determining a target address and a target port.

[0085] In the embodiment of the present application, the target address is a loopback address. In one example, the loopback address is 127.0.0.1:18080.

[0086] Step 502: monitor the target port under the target address.

[0087] Step 503, determine the target IP corresponding to the target website domain name.

[0088] Step 504, executing a secure socket layer SSL handshake process of the target port and the target domain name based on the target website domain name and the target IP.

[0089] Step 505: Obtain monitoring process data through the SSL handshake process.

[0090] In an embodiment of the present application, the process includes: sending a client new session creation message to a target website domain name through a target port; receiving a server new session creation message from the target website domain name through a target port; and obtaining monitoring process data from the server new session creation message. In one example, the process includes: sending a client hello message, waiting for the server to return a server hello message, and after receiving the server hello message, determining the specific type of the protocol version number.

[0091] Step 506, determining the website type result based on the protocol version number.

[0092] In an example, if the version protocol number is 1.1, the website type is determined to be a national secret website type; if the version protocol number is not 1.1, the website type is determined to be a non-national secret website type.

[0093] In summary, the method provided by the embodiment of the present application, in the process of accessing the target website, obtains information associated with the target website through the browser plug-in module, and monitors the corresponding port based on the information associated with the target website through the browser plug-in service module to determine the relevant data and the website type result, and then establishes a local access channel with the target website through the website type indicated by the service proxy module. This process automatically identifies and matches the access method of the target website, and realizes the secure access of non-national secret browsers to national secret websites.

[0094] The above are only optional embodiments of the present application and are not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. A method for using a non-national secret browser to access a national secret website, characterized in that: The method is applied to a national secret website access system, which includes a browser plug-in module, a browser plug-in service module and a service proxy module: The browser plug-in module is communicatively connected with the browser plug-in service module; The browser plug-in service module is communicatively connected with the service proxy module; The method comprises: The browser plug-in module obtains the target website domain name and target uniform resource locator system url data of the target website; sends the target website domain name and the target url data to the browser plug-in service module; The browser plug-in service module receives the target website domain name and the target URL; in response to receiving the target website domain name and the target URL, starts monitoring the target port under the target address to obtain monitoring process data; determines a website type result based on the monitoring process data, the website type result is used to indicate whether the target website is a national secret website, and sends the website type result to the service proxy module; The service proxy module receives the website type result, and in response to the website type result indicating that the website type is a national secret website, configures a national secret suite proxy program, wherein the national secret suite proxy program is used to establish a local national secret access channel with the target website; The service agent module configures a non-national secret suite agent program in response to the website type result indicating that the website type is a non-national secret website, wherein the non-national secret suite agent program is used to establish a non-national secret access channel between the local and the target website; The national secret website access system also includes a website storage module; The website storage module is in communication with the browser plug-in service module, and the website storage module is used to store a website list, wherein the website list includes a national secret website list, and the national secret website list includes a national secret website domain name corresponding to at least one national secret website; After the browser plug-in module obtains the target website domain name and target uniform resource locator system url data of the target website, it includes: The website storage module sends the website list to the browser plug-in service module; The browser plug-in service module receives the website list; synchronizes the website list to the browser plug-in module; matches the target website domain name of the target website with the national secret website domain name in the national secret website list in the website list; in response to a successful match, generates a national secret access channel configuration instruction, and the national secret access channel configuration instruction is used to instruct the service agent module to configure the national secret suite agent program; sends the national secret access channel configuration instruction to the service agent module; in response to a failed match, starts listening to the target port under the target address.

2. The method for accessing a national secret website using a non-national secret browser according to claim 1, characterized in that: The website list also includes a list of non-national secret websites, and the list of non-national secret websites includes a non-national secret website domain name corresponding to at least one non-national secret website; The method further comprises: The browser plug-in service module matches the target website domain name of the target website with the non-national secret website domain name in the non-national secret website list in the website list; in response to a successful match, generates a non-national secret access channel configuration instruction, and the non-national secret access channel configuration instruction is used to instruct the service agent module to configure the non-national secret suite agent program; and sends the non-national secret access channel configuration instruction to the service agent module.

3. The method for accessing a national secret website using a non-national secret browser according to claim 1, characterized in that: The method further comprises: The browser plug-in module configures the agent CA certificate.

4. The method for accessing a national secret website using a non-national secret browser according to claim 1, characterized in that: In response to receiving the target website domain name and the target URL, the browser plug-in service module starts monitoring the target port under the target address and obtains monitoring process data, including: The browser plug-in service module determines the target address and the target port in response to receiving the target website domain name and the target URL, wherein the target address is a loopback address; monitors the target port under the target address; determines the target IP corresponding to the target website domain name; executes the Secure Sockets Layer (SSL) handshake process between the target port and the target website domain name based on the target website domain name and the target IP; and obtains the monitoring process data through the SSL handshake process.

5. The method for using a non-national secret browser to access a national secret website according to claim 4, characterized in that: The browser plug-in server module obtains the monitoring process data through the SSL handshake process, including: The browser plug-in server module sends a client new session creation message to the target website domain name through the target port; receives the target website domain name through the target port and feeds back a server new session creation message; and obtains the monitoring process data from the server new session creation message.

6. The method for using a non-national secret browser to access a national secret website according to claim 2, characterized in that: The monitoring process data includes a protocol version number; The browser plug-in service module determines the website type result based on the monitoring process data, including: The website type result is determined based on the protocol version number.

7. The method for accessing a national secret website using a non-national secret browser according to claim 2, characterized in that: After the browser plug-in service module generates a national secret access channel configuration instruction or a non-national secret access channel configuration instruction, it includes: Based on the national secret access channel configuration instruction and the non-national secret access channel configuration instruction, updating the website list; The updated website list is synchronized to the browser plug-in module and the website storage module.

8. A national secret website access system, characterized in that: The national secret website access system includes a browser plug-in module, a browser plug-in server module, a service proxy module and a website storage module; The browser plug-in module is communicatively connected with the browser plug-in service module; The browser plug-in service module is communicatively connected with the service proxy module; The website storage module is in communication with the browser plug-in service module, and the website storage module is used to store a website list, wherein the website list includes a national secret website list, and the national secret website list includes a national secret website domain name corresponding to at least one national secret website; The national secret website access system is used to execute the method of using a non-national secret browser to access a national secret website as described in any one of claims 1 to 7.

Images