Account management method and system based on browser plug-in, electronic equipment and medium

Abstract

The invention discloses an account management method and system based on a browser plug-in, electronic equipment and a medium, and the account management method comprises the steps: obtaining the account information of an enterprise, and storing the account information in a database of the account management system; and then account use application information of the enterprise employee is obtained, and if the account use application information passes, the corresponding account information is sent to the browser plug-in account corresponding to the enterprise employee from the database. Compared with the prior art, the method and the system have the following effects: a plurality of platform accounts in an enterprise are managed in a unified manner through the browser plug-in, so that enterprise employees can automatically log in the platform through the browser plug-in under the condition that the enterprise employees do not know platform account information so as to carry out related work processing; therefore, the efficiency and safety of enterprise account management are improved.

Description

Technical Field

[0001] The present invention relates to the field of browser technology, and in particular to an account management method, system, electronic device and medium based on browser plug-in. Background Art

[0002] With the development of the information age, in the process of employees' work, companies often need to register or purchase accounts on multiple different platforms for employees to use in order to meet the office needs of employees.

[0003] At present, the current plan is generally to directly send the platform's account and password directly to employees, and employees log in to the platform directly using the account and password information. However, by directly sending the account number, employees can directly obtain the account number and password, which may lead to the risk of account information leakage and cause certain economic losses to the company. Summary of the invention

[0004] The purpose of the present invention is to provide an account management method, system, electronic device and medium based on a browser plug-in to solve the problem of account leakage risk when enterprise employees use their account and password to log in to a work platform in the related technology.

[0005] In order to achieve the above object, the present invention provides the following technical solutions: A first aspect: The present invention provides an account management method based on a browser plug-in, comprising: obtaining the account information of an enterprise and saving the account information in a database of an account management system; obtaining the account usage application information of an enterprise employee, and if the account usage application information is approved, sending the corresponding account information from the database to the browser plug-in account corresponding to the enterprise employee.

[0006] Preferably, before obtaining the account information of the enterprise, the method further includes: constructing the browser plug-in, and generating a corresponding browser plug-in account for all users of the enterprise according to the browser plug-in.

[0007] Preferably, the account management method further comprises: obtaining request information of the enterprise employee logging into the corresponding platform through the browser plug-in, and logging into the corresponding platform according to the request information.

[0008] Preferably, the account information includes: enterprise platform account information and third-party platform account information.

[0009] Preferably, the account information of the enterprise is obtained and saved in a database for storage, including: obtaining the account information address of the enterprise, and obtaining the account information of the enterprise according to the account information address of the enterprise; pre-processing the account information of the enterprise, and saving it in the database of the account management system.

[0010] Preferably, the pre-processing of the account information of the enterprise and then saving it in the database of the account management system includes: encrypting the account information and saving the encrypted account information in the database of the account management system.

[0011] Preferably, the obtaining of the enterprise employee's account use application information, and if the account use application information is approved, sending the corresponding account information from the database to the browser plug-in account corresponding to the enterprise employee, includes: Obtaining the account usage application information of the enterprise employee on the office system; if the account usage application information is approved in the office system, the corresponding account information is sent from the database of the account management system to the browser plug-in account corresponding to the enterprise employee.

[0012] In a second aspect, the present invention further provides an account management system based on a browser plug-in, comprising: An account information acquisition module is used to acquire the account information of an enterprise and save the account information in a database of an account management system; The account information sending module is used to obtain the account usage application information of the enterprise employee. If the account usage application information is approved, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee.

[0013] A third aspect: The present invention also provides a computer electronic device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of any one of the above-mentioned browser plug-in-based account management methods when executing the computer program.

[0014] A fourth aspect: The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of any one of the above-mentioned browser plug-in-based account management methods are implemented.

[0015] The present invention provides a browser plug-in-based account management method, system, electronic device and medium, which obtains the account information of the enterprise and saves the account information in the database of the account management system; then obtains the account use application information of the enterprise employee, and if the account use application information is passed, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee. Compared with the prior art, the present invention has the following effects: the present invention manages multiple platform accounts in the enterprise in a unified manner through the form of a browser plug-in, so that the enterprise employees can automatically log in to the platform through the form of a browser plug-in without knowing the platform account information, so as to carry out related work processing, thereby improving the efficiency and security of enterprise account management. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 It is a flowchart of an account management method based on a browser plug-in according to an embodiment of the present invention; Figure 2 is a schematic diagram of the page layout of the browser plug-in according to an embodiment of the present invention; Figure 3 It is a structural diagram of an account management system based on a browser plug-in according to an embodiment of the present invention; Figure 4 It is a structural schematic diagram of a computer electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0017] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0018] It should be noted that when an element is referred to as being "fixed to" another element, it may be directly on the other element or there may be a central element. When an element is considered to be "connected to" another element, it may be directly connected to the other element or there may be a central element at the same time. In contrast, when an element is referred to as being "directly on" another element, there is no intermediate element. The terms "vertical", "horizontal", "left", "right" and similar expressions used herein are for illustrative purposes only.

[0019] In the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0020] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0021] The terms used in one or more embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit one or more embodiments of the present invention. The singular forms "a", "said" and "the" used in one or more embodiments of the present invention are also intended to include plural forms, unless the context clearly indicates other meanings.

[0022] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein in the specification of the template are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The term "and / or" used herein includes any and all combinations of one or more of the associated listed items.

[0023] It should be understood that, although the terms first, second, etc. may be used to describe various information in one or more embodiments of the present invention, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of one or more embodiments of the present invention, the first may also be referred to as the second, and similarly, the second may also be referred to as the first. Depending on the context, the word "if" as used herein may be interpreted as "when..." or "when...".

[0024] Please refer to Figure 1 , an account management method based on a browser plug-in provided by an embodiment of the present invention comprises the following steps: S10. Obtain the account information of the enterprise, and save the account information in the database of the account management system.

[0025] It is understandable that when a company registers or purchases a platform account, it generally saves the account information such as the user name and password in the form of a notepad or other document. In this embodiment, it is first necessary to obtain the storage address of the account information, and then obtain the account information based on the account information storage address, and save the account information to the database of the account management system.

[0026] It should be noted that, in this embodiment, the account information of the enterprise includes all platform account information of the enterprise, including the enterprise's own platform account information and third-party platform account information.

[0027] S20. Obtaining the account usage application information of the enterprise employee. If the account usage application information is approved, sending the corresponding account information from the database to the browser plug-in account corresponding to the enterprise employee.

[0028] Specifically, it is understandable that when corporate employees need to use an account on a certain platform, they generally need to submit account application information in the office system. Only after the application information is approved will the corresponding account information be issued to the employee for use.

[0029] In this embodiment, the account management system and the office system can communicate in real time. When the account usage application information submitted by the enterprise employee is reviewed and approved in the office system, the office system will send the corresponding information to the account management system. The account management system can send the corresponding account information in the database to the browser plug-in account corresponding to the enterprise employee based on the account usage application information of the enterprise employee.

[0030] The present invention provides an account management method based on a browser plug-in, which obtains the account information of an enterprise and saves the account information in a database of an account management system; then obtains the account use application information of an enterprise employee, and if the account use application information is passed, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee. Compared with the prior art, the present invention has the following effects: the present invention manages multiple platform accounts in an enterprise in a unified manner through a browser plug-in, so that enterprise employees can automatically log in to the platform through a browser plug-in without knowing the platform account information, so as to perform related work processing, thereby improving the efficiency and security of enterprise account management.

[0031] In some optional embodiments, before obtaining the account information of the enterprise, the method further includes: constructing the browser plug-in, and generating a corresponding browser plug-in account for all users of the enterprise based on the browser plug-in.

[0032] It should be noted that browser plug-ins are a type of small software application installed on a web browser. According to the requirements of different browsers, they access the browser's API through certain code writing. They can achieve functions such as blocking ads, managing passwords, translating web content, and adjusting the browser's appearance.

[0033] In this embodiment, the browser plug-in is mainly developed and designed based on technology stacks such as JavaScript, HTML / CSS, WebExtension API, and HTTPS / TLS.

[0034] Exemplarily, the browser plug-in is mainly divided into the following modules: 1. Content Script: Used to interact with the web page DOM (Document Object Model), detect the structure of the login page to automatically fill in the form, and simulate a user clicking the login button.

[0035] 2. Background Script: Responsible for communicating with the third-party platform account management system, obtaining the user's authorized account, password and MFA information, and handling the global status management of the plug-in.

[0036] 3. Plug-in pop-up page (Popup): This plug-in provides a simple and easy-to-use user interface, provides users with an entry to log in to the plug-in management system, allows users to view and select third-party platforms and accounts to log in, and displays various verification codes required for MFA.

[0037] In this embodiment, an example is given by taking an enterprise employee logging into a third-party platform, as follows: 1. Detect page: The plug-in first detects whether the current page is the login page of the third-party platform it manages through the content script. If so, the current page DOM structure will be sent to the trained AI robot for analysis. The AI ​​will output the positioning methods of key elements such as the account input box, password input box, login button, and display password button in the current page according to the pre-trained habits for the plug-in to use.

[0038] 2. Get account information: The plug-in communicates with the management system interface through the background script to obtain the third-party platform account and password corresponding to the currently logged-in user.

[0039] 3. Form filling: The plug-in locates the username and password input boxes through the AI ​​robot, and automatically fills the obtained account and password information into the corresponding input boxes.

[0040] 4. Simulated login: After filling in the account and password, the plug-in simulates the user clicking the login button and automatically completes the login operation.

[0041] 5. Automatic verification: A considerable number of third-party platforms require users to perform security verification when logging in. The verification content generally includes text verification codes, graphic verification codes, sliding verification codes, click verification codes, math problem verification codes, etc. We have conducted a large amount of model training for these types of verification codes, and trained a verification code AI robot with an accuracy rate of over 98%. The plug-in sends the image to the AI ​​robot by taking a screenshot. The robot will spend a small amount of time to recognize the verification code and send the recognition result to the management background. The plug-in obtains the corresponding result from the management background through the request interface and simulates the user for verification according to different verification code types. Specifically, text verification code: the plug-in will simulate the user's input operation to complete the verification code filling; graphic verification code: the graphic verification code is generally filled with the text in the picture, so the logic of the plug-in filling is similar to that of the text verification code; sliding verification code: the AI ​​robot will identify the original position of the sliding block and the coordinate value of the filling position. The plug-in will simulate the user's mouse operation based on these two coordinate values ​​to complete the verification; click verification code: the same AI robot will convey the coordinate information of the location to be clicked to the plug-in in sequence based on the recognition of the picture. The plug-in will simulate the click based on this information to complete the verification; number problem verification code: the AI ​​robot will solve the math problem in the screenshot. After getting the result, the plug-in will simulate the user input operation to complete the result filling.

[0042] It should be noted that if the third-party platform supports MFA (multi-factor) authentication, the account administrator will use the OTP / email address / mobile phone number prepared by the company in advance to bind the account and enter the binding information into the account management background.

[0043] Secondly, during the login process, if MFA verification is required, the plug-in will obtain the relevant MFA verification code from the management system through the interface and automatically fill in the MFA information. Take the account bound to an email address for MFA authentication as an example. The account administrator will enter the account and password into the management system, and the email address bound to the account will also be entered into the management backend as an additional information of the account. When the user logs in to this account, the third-party platform will send a verification code to the bound email address. At this time, our management system will monitor the emails received by this email address and identify the verification code in the email through code logic. If the code logic cannot identify it, it will be assisted by AI tools for identification. The identified verification code will be stored in the database of the management system. When the plug-in needs this verification code to log in, it will obtain this verification code through the interface.

[0044] In addition, in order for the browser plug-in to log in to the platform client securely, the browser plug-in in this example also takes the following security measures: 1. Password obfuscation: In order to prevent malicious users from obtaining passwords through browser debugging tools, the plug-in first fills in a fake password when filling in the form, and replaces it with the real password when the form is actually submitted. Technical details: The plug-in obtains the encrypted third-party platform account password through an interface request. The plug-in decrypts the encrypted password through a predefined decryption key. After decryption, the real password is stored in the memory of the user's computer. When filling in the form, the length of the real password is first obtained, and a random password with the same length is randomly generated and filled into the user form. At this time, even if the user obtains the form content through some technical means, the password he gets is a fake password and cannot log in. When the simulated user clicks the submit button, the plug-in listens to the submit element event, takes out the real password from the memory, and replaces the original fake password to achieve a successful login. Because the action of submitting the form is very fast, usually completed within 0.1 seconds, it is almost impossible for users to obtain the real password.

[0045] 2. Disable browser password management tools: Generally speaking, commonly used browsers have the function of automatically saving passwords by default. In order to prevent the browser from automatically saving passwords, the plug-in will temporarily disable the browser's password saving function when it detects that the user is accessing a managed third-party platform to prevent the browser from automatically saving the user's account password; Technical details: The background script monitors the URL of the website opened by the user in real time, and matches this URL with the URL of the managed third-party platform. If a match is found, the browser's password saving function will be temporarily disabled. This operation is implemented through the API provided by the browser.

[0046] 3. Disable developer tools: The plug-in disables all ways to open developer tools by monitoring user operations. If a user attempts to open the developer tools (F12 key or right-click menu, etc.), the current automatic login process will be terminated immediately and the relevant page will be closed to prevent malicious code injection or debugging attacks. Function implementation principle: 1. Disable function shortcuts such as F12 and ctrl+shift+i. 2. Monitor the size of the current visible window in real time through the background script. If the visible window size does not match the user's screen size, it is determined that the user has opened the developer tools. 3. Frequently execute a specific code through the background script and determine the execution time of the script. If the execution time changes to a certain extent, it means that the user has opened the developer tools.

[0047] In some optional embodiments, the account management method further includes: obtaining request information for the enterprise employee to log in to the corresponding platform through the browser plug-in, and logging in to the corresponding platform according to the request information.

[0048] Specifically, Figure 2As shown, after enterprise employees log in to their browser plug-in accounts, they can see the platform account information that has been applied for and approved on the browser plug-in page. Enterprise employees only need to click the Log In Now button, and the browser plug-in can obtain the corresponding account information from the database of the account management system to complete the login to the platform page or the platform client.

[0049] In some optional embodiments, the step of obtaining the account information of the enterprise and saving the account information to a database for storage includes the following steps: S11. Obtain the account information address of the enterprise, and obtain the account information of the enterprise according to the account information address of the enterprise.

[0050] Specifically, the enterprise manager can import the enterprise's account information address into the backend of the account management system so that the account management system can obtain the enterprise's account information.

[0051] S12: Pre-process the account information of the enterprise and save it in the database of the account management system.

[0052] Specifically, it can be understood that after the account information is obtained, the account information can be pre-processed before being saved. For example, the account information can be encrypted and then the encrypted account information can be saved in the database of the account management system.

[0053] In some optional embodiments, the step of obtaining the account usage application information of the enterprise employee and, if the account usage application information is approved, sending the corresponding account information from the database to the browser plug-in account corresponding to the enterprise employee includes the following steps: S21. Obtaining the account usage application information of the enterprise employees on the office system.

[0054] S22. If the account usage application information is approved in the office system, the corresponding account information is sent from the database of the account management system to the browser plug-in account corresponding to the enterprise employee.

[0055] It is understandable that in an enterprise, when an enterprise employee needs to use an account of a certain platform (such as a third-party platform account), it is generally necessary to apply for account use on the enterprise's internal office system. Since the account management system and the office system in this application can communicate in real time, the account management system can obtain the corresponding account use application information. When the office system passes the review, the corresponding account information can be sent to the employee's corresponding browser plug-in account so that the user can log in to the platform.

[0056] See also Figure 3The embodiment of the present invention further provides an account management system 200 based on a browser plug-in, comprising: The account information acquisition module 201 is used to acquire the account information of the enterprise and save the account information into the database of the account management system; The account information sending module 202 is used to obtain the account usage application information of the enterprise employee. If the account usage application information is approved, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee.

[0057] See also Figure 4 An embodiment of the present invention further provides a computer electronic device 400, including a memory 403 and a processor 402, wherein the memory 403 stores a computer program, and when the processor executes the computer program, the steps of the browser plug-in-based account management method described in any one of the above are implemented.

[0058] Specifically, the electronic device 400 includes: a transceiver 401, a bus interface and a processor 402. The processor 402 is used to obtain the account information of the enterprise and save the account information in the database of the account management system; obtain the account usage application information of the enterprise employees. If the account usage application information is approved, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee.

[0059] In the embodiment of the present invention, the electronic device 400 further includes a memory 403. Figure 4 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 402 and memory represented by memory 403. The bus architecture may also link various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 401 may be a plurality of components, i.e., including a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium. The processor 402 is responsible for managing the bus architecture and general processing, and the memory 403 may store data used by the processor 402 when performing operations.

[0060] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of any one of the above-mentioned browser plug-in-based account management methods are implemented.

[0061] In this embodiment, the computer readable storage medium may be a non-volatile storage medium or a volatile storage medium. For example, the computer storage medium may include but is not limited to: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0062] In all examples shown and described herein, any specific values ​​should be interpreted as merely exemplary and not as limiting, and thus other examples of the exemplary embodiments may have different values.

[0063] It should be noted that similar reference numerals and letters denote similar items in the following drawings, and therefore, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0064] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can also be implemented in other ways. The device embodiments described above are merely schematic. For example, the flowcharts and structure diagrams in the accompanying drawings show the possible architecture, functions and operations of the devices, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in an alternative implementation, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the structure diagram and / or the flow diagram, and the combination of boxes in the structure diagram and / or the flow diagram, can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0065] In addition, the functional modules or units in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0066] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a terminal device (which can be a smart phone, a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application.

[0067] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. An account management method based on a browser plug-in, characterized in that: include: Obtaining the account information of the enterprise and saving the account information in the database of the account management system; The account usage application information of the enterprise employee is obtained. If the account usage application information is approved, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee.

2. The account management method according to claim 1, characterized in that: Before obtaining the account information of the enterprise, the method further includes: Construct the browser plug-in, and generate a corresponding browser plug-in account for all users of the enterprise according to the browser plug-in.

3. The account management method according to claim 1 or 2, characterized in that: The account management method further includes: Request information for the enterprise employee to log in to the corresponding platform through the browser plug-in is obtained, and the corresponding platform is logged in according to the request information.

4. The account management method according to claim 1, characterized in that: The account information includes: enterprise platform account information and third-party platform account information.

5. The account management method according to claim 1, characterized in that: The obtaining of the enterprise's account information and saving the account information to a database for storage includes: Obtaining the account information address of the enterprise, and obtaining the account information of the enterprise according to the account information address of the enterprise; The account information of the enterprise is pre-processed and then saved in the database of the account management system.

6. The account management method according to claim 5, characterized in that: The pre-processing of the enterprise's account information and the storage of the pre-processed account information in the database of the account management system include: The account information is encrypted and stored in a database of the account management system.

7. The account management method according to claim 1, characterized in that: The obtaining of the enterprise employee's account use application information, and if the account use application information is approved, sending the corresponding account information from the database to the browser plug-in account corresponding to the enterprise employee, includes: Obtain the account application information of enterprise employees on the office system; If the account usage application information is approved in the office system, the corresponding account information will be sent from the database of the account management system to the browser plug-in account corresponding to the enterprise employee.

8. An account management system based on a browser plug-in, characterized in that: include: An account information acquisition module is used to acquire the account information of an enterprise and save the account information in a database of an account management system; The account information sending module is used to obtain the account usage application information of the enterprise employee. If the account usage application information is approved, the corresponding account information is sent from the database to the browser plug-in account corresponding to the enterprise employee.

9. A computer electronic device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the browser plug-in-based account management method described in any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the browser plug-in-based account management method described in any one of claims 1 to 7 are implemented.

Images