TW202029036A - System for using embedded browser module to manage certificate and method thereof - Google Patents

Abstract

A system for using an embedded browser module to manage a certificate and a method thereof are provided. By embedding a browser module in an application, calling a safety control component included in the application by the browser module when a certificate management operation is selected, providing inputting a code for a smartcard by the safety control component, and executing the certificate management operation with the smart card by the safety control component after the safety control component determines user identity is verified based on the code, the system and the method can avoid browser restriction while preserving web service for managing certificate, and can achieve the effect of modifying webpage on server to be revised without updating application.

Description

System and method for managing certificate by embedded browser module

A certificate management system and method, in particular, refers to a system and method for managing certificates with an embedded browser module.

Electronic certificates, also known as digital certificates, are an identification mechanism used in computer systems. An electronic certificate is a computer file or a set of computer files, which records the owner's identity information and a set of public passwords. The owner of an electronic certificate can authenticate himself to the computer system to access or use a specific computer service.

In the early days, because network security was not as important as it is today, computer services that need to be accessed or used through electronic certificates are mostly provided in the form of webpages with security plug-ins, which means that when users access or use these services, It uses a browser to perform related services such as certificate application, renewal, and query to the remote server.

Nowadays, due to the increasing importance of network security in recent years, browsers have become more stringent in their security requirements and checks for web pages and plug-in components that operate on them. The restrictions have increased significantly and the support has decreased, resulting in smooth browsers in the past. The operation failure rate of new voucher application, renewal, query and other related operations performed on the Internet has greatly increased, which has caused confusion to users.

In summary, it can be seen that in the prior art, the problem of providing credential management through web services is limited by browsers for a long time. Therefore, it is necessary to propose improved technical means to solve this problem.

In view of the problem that the prior art provides certificate management through web services is restricted by browsers, the present invention discloses a system and method for managing certificates using an embedded browser module, in which:

The system for managing certificates with an embedded browser module disclosed in the present invention at least includes a smart card and a computing device, and the computing device provides a smart card connection for executing application programs. The application also includes: a browser module, used to provide selected certificate management operations; a security control component, used to provide input smart card passwords, and used to determine the user identity based on the smart card password to execute the certificate through the smart card Manage jobs.

The method for managing certificates with an embedded browser module disclosed in the present invention is applied to a computing device, and the steps at least include: the computing device executes an application program including a security control component and a browser module; connecting the computing device and a smart card; The browser module calls the security control component when the certificate management operation is selected; the security control component provides the input of the smart card password; the security control component determines that the user identity is verified according to the smart card password, and then executes the certificate management operation through the smart card.

The system and method disclosed in the present invention are as above. The difference between the present invention and the prior art is that the present invention embeds the browser module through the application program. When the certificate management operation is selected, the browser module calls the security control component of the application program so that The security control component judges that the user's identity is verified based on the entered smart card password, and then executes the certificate management operation through the smart card to solve the problems of the previous technology, and can be achieved by modifying the webpage on the server to modify the version without updating the application The technical effect of the program.

The following will describe the features and implementation of the present invention in detail with the drawings and embodiments. The content is sufficient to enable anyone familiar with the relevant art to easily and fully understand the technical means used by the present invention to solve the technical problems and implement them accordingly. The achievable effect of the present invention.

The present invention can embed a browser module and a security control component in an application program, so that the application program can call the security control component through the browser module to perform certificate management operations through a smart card (Smart Card).

Hereinafter, the system architecture diagram of the embedded browser module management certificate mentioned in the “Figure 1” of the present invention is used to illustrate the operation of the system of the present invention. As shown in "Figure 1", the system of the present invention includes a computing device 100 and a smart card 101.

The smart card 101 may be a contact chip card or an inductive chip card, and the present invention is not particularly limited.

The smart card 101 includes transmission management components, processing components, storage components, etc. (not shown in the figure). The transmission management components can receive data or signals transmitted by the computing device 100, and can also transmit data or signals to the computing device 100. For example, receiving operation instructions transmitted by the computing device 100; the processing element can execute the chip operating system (COS) stored in the storage element, and can provide the chip operating system to execute the operation instructions received by the transmission management element; storage; The component can store data required by the chip operating system when it is running, and can provide memory space required by the chip operating system to run on the smart card 101 and execute operation commands. In more detail, after the chip operating system is executed, the processing element can use the processing element to execute the corresponding operation in the memory space provided by the storage element according to the operation instruction received by the transmission management element to generate the corresponding operation result. The transmission management element may transmit the operation result generated by the operating system using the processing element back to the computing device 100.

The computing device 100 includes, but is not limited to, one or more processors, one or more memory modules, and components such as a bus connecting different components (including memory modules and processors). Through the included multiple components, the computing device 100 can load and execute the operating system, so that the operating system runs on the computing device.

The bus of the computing device 100 may include one or more types, for example, including a data bus, an address bus, a control bus, an expansion bus, And/or local bus (local bus) and other types of bus. The bus of computing equipment includes, but is not limited to, parallel industry standard architecture (ISA) bus, peripheral component interconnect (PCI) bus, Video Electronics Standards Association (VESA) local bus, and serial universal serial bus (USB), PCI-E bus, etc.

The processor of the computing device 100 is coupled to the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip, or all or part of it can be set outside the processing chip and connected via a dedicated electrical connection And/or coupled to the processor via the bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device 100 is a multi-processor device, that is, the computing device 100 includes multiple processors, the processors included in the computing device 100 are all the same or similar, and they are coupled and communicated through a bus.

The processor of the computing device 100 may be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (IC), including a memory controller and a peripheral input/output (I/O) controller, that is to say, the memory controller and the peripheral input/output controller can be included in In an integrated circuit, two or more integrated circuits can also be used. Chipsets usually provide I/O and memory management functions, as well as multiple general and/or dedicated registers, timers, etc., among which the above-mentioned general and/or dedicated registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device 100 can also access the data in the memory module and the mass storage area installed on the computing device 100 through the memory controller. The above-mentioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The aforementioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, tape drives, flash drives (flash memory), solid state disks (Solid State Disk, SSD), or any Other storage devices, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor of the computing device 100 can also communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O bus through the peripheral I/O controller. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc., the peripheral output device can be any type of output device, such as a display, a printer, etc., a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include a mobile communication network that supports Wi-Fi, Zigbee and other wireless local area networks, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G, etc. The wired communication interface can be Ethernet equipment, asynchronous transmission mode (ATM) equipment, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data, and can also communicate with another computing device having the above-described components.

The computing device 100 provides a smart card 101 connection. Among them, the computing device 100 may include or be connected to a card reader (not shown in the figure). If the smart card 101 is a contact chip card, the smart card 101 can be inserted into a card reader to contact the reader to connect to the computing device 100; if the smart card 101 is a contact chip card, the smart card 101 can be close to the card reader The computer is connected to the computing device 100 by sensing with the card reader.

The computing device 100 is responsible for executing the application program 110 through the processor. The processor of the computing device 100 can run an operating system (not shown in the figure), and the application 110 is installed in the operating system.

The application program 110 is responsible for performing certificate management operations through the smart card 101. Among them, the application program 110 further includes a browser module 111 and a security control component 112.

The browser module 111 is connected to the server 400 and is responsible for downloading the user operation interface from the server 400.

The browser module 111 is also responsible for performing operations such as selection of credential management operations, password change operations, or online card unlocking operations in the downloaded user operation interface. Wherein, the certificate management operation may be a certificate update operation, a certificate management operation, a certificate download operation, a certificate storage operation, a certificate export operation, or a certificate import operation, etc., but the present invention is not limited to the above.

In some embodiments, the browser module 111 may also select the browser installed in the computing device 100 when selecting the certificate management operation in the user operation interface, so as to provide the security control component 112 for certificate management. It is used during operations (such as certificate export operations or certificate import operations, etc.), but the present invention is not limited to this.

The browser module 111 can call the security control component 112 when the credential management operation is selected.

The browser module 111 may also display an input interface for inputting the original password and the new password when the password change operation is selected, so as to provide for inputting the original password and the new password, and can call the security control component 112.

The browser module 111 can also provide the website password to log in to the server 400 when the online card unlocking operation is selected, and send the website password to the server 400 for verification, and receive the verification result returned by the server 400, and can After the received verification result indicates that the website password has been verified by the server, a new password is provided and the security control component 112 is called.

The security control component 112 is responsible for providing the smart card password to verify the user's identity when the browser module 111 selects the certificate management operation, and is used to determine that the user's identity is verified, and then execute the selected certificate management operation through the smart card 101 .

In more detail, when the certificate management operation selected by the browser module 111 is a certificate update operation or a certificate management operation, the security control component 112 can download the target certificate from the server 400, and can use the card reader of the computing device 100 (Figure Not shown in) the downloaded target certificate is sent to the smart card 101 for storage; when the certificate management operation is a certificate download operation, the security control component 112 can determine whether the target certificate to be downloaded is applied for on the computing device 100, if the target certificate is Apply on the computing device 100, the security control component 112 can download the target certificate from the server 400, and can send the target certificate to the smart card 101 for storage through the card reader of the computing device 100; when the certificate management operation is certificate storage or certificate During the export operation, the security control component 112 can read the target certificate from the smart card 101 through the card reader of the computing device 100, and can save the read target certificate as a certificate file or import the read target certificate Specify a browser; when the certificate management operation is a certificate import operation, the security control component 112 can read the target certificate from a specific browser, and can send the read target certificate to the card reader of the computing device 100 Smart card 101 storage. Generally speaking, the above-mentioned designated browser and the designated browser are selected by the browser module 111 when the user selects the certificate management operation, but the invention is not limited to this.

The security control component 112 can also send the original password input provided by the browser module 111 to the smart card 101 through the card reader of the computing device 100 when the browser module 111 selects the password change operation, and receive the smart card 101 to judge the browsing The browser module 111 provides the judgment result of whether the input original password is correct, and when the judgment result returned by the smart card 101 indicates that the original password is correct, the new password provided by the browser module 111 is sent to the smart card through the card reader. The card 101 enables the smart card 101 to replace the original password with a new password.

The security control component 112 can also use the card reader of the computing device 100 to read the target certificate from the smart card 101 when the browser module 111 selects the online card unlocking operation, and obtain the target certificate from the server 400 according to the obtained target certificate. After the communication data corresponding to the certificate, generate the authentication code and use the communication data to send the generated authentication code. The communication data can be an email account or a mobile phone number. The present invention is not limited to this. Any data that can provide the authentication code to the user of the target certificate can be used as the communication data of the present invention.

The security control component 112 can also determine whether the entered authentication code provided by the browser module 111 is correct, and after judging that the entered authentication code provided by the browser module 111 is correct, the browser module can be read through the card reader of the computing device 100 The new password provided by 111 is sent to the smart card 101 so that the smart card 101 replaces the original password with the new password.

Next, an embodiment is used to explain the operating system and method of the present invention, and please refer to "Figure 2" for the flow chart of the method for managing certificates with the embedded browser module mentioned in the present invention. In this embodiment, it is assumed that the computing device 100 is a computer and the application program 110 is a certificate management program, but the invention is not limited to this.

First, the user needs to install and execute the application program 110 on the computing device 100 (step 202). After the application program 110 is executed, the browser module 111 of the application program 110 can connect to the server 400 through the HTTP protocol. The user operates the web page of the interface, and displays the downloaded web page to provide the user for operation.

If the smart card 101 is a contact chip card, the user also needs to connect the computing device 100 and the smart card 101 (step 210), but the timing of the user connecting the computing device 100 and the smart card 101 is not particularly limited. For example, use The user can connect the computing device 100 and the smart card 101 (step 210) before operating the computing device 100 to execute the application 110 (step 202); the user can also display the browser module 111 of the application 110 connected to the server 400 After the downloaded web page, connect the computing device 100 and the smart card 101 (step 210). In other words, the computing device 100 executes the application program 110 (step 202) and connects the computing device 100 with the smart card 101 (step 210), there is no prioritized relationship. In addition, it should be particularly noted that if the smart card 101 is an inductive chip card, the user may not connect the computing device 100 and the smart card 101 at this time, that is, the smart card 101 does not need to be close to the computing device 100 at this time.

After the browser module 111 of the application 110 displays the webpage downloaded by the server 400, the browser module 111 can provide the user to choose the operation to be performed, that is, to provide the user to choose a certificate management operation and password Change operation or online card release operation.

If the user selects certificate management operations such as certificate update operation, certificate management operation, certificate download operation, certificate storage operation, certificate export operation, or certificate import operation, the browser module 111 of the application 110 can perform the certificate management operation When selected by the user, the security control component 112 of the application 110 is called (step 220).

After the security control component 112 of the application program 110 is called by the browser module 111 of the application program 110, the security control component 112 can provide the user to input the smart card password (step 230). In this embodiment, the security control component 112 can generate and display a dialog box, and prompt the user to enter the smart card password in the dialog box.

After the security control component 112 of the application program 110 obtains the smart card password input by the user, the security control component 112 can determine whether the user identity is verified according to the smart card password input by the user (step 240). In this embodiment, the security control component 112 can transmit the smart card password to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can determine whether the smart card password sent by the security control component 112 is correct, if not , The smart card 101 can generate a verification result indicating that the user's identity has not been verified. If the smart card 101 determines that the smart card password sent by the security control component 112 is correct, the smart card 101 can generate a verification that the user's identity is verified result. After the smart card 101 generates a verification result, it can transmit the generated verification result back to the computing device 100. The security control component 112 can receive the verification result generated by the smart card 101 through the card reader of the computing device 100, and can be based on the received verification result. The obtained verification result determines whether the user's identity is verified.

If the security control component 112 of the application 110 determines that the user's identity is not verified, the security control component 112 can provide the smart card password again (step 230) or terminate execution to refuse the certificate management operation; and if the application 110 is secured The control component 112 determines that the user's identity is verified, and the security control component 112 can perform a certificate management operation through the smart card 101 (step 250). In this embodiment, when the certificate management operation selected by the user through the browser module 111 of the application 110 is a certificate update operation or a certificate management operation, the security control component 112 can download the target certificate from the server 400, and can use The card reader of the computing device 100 transmits the operation command for storing the certificate and the downloaded target certificate to the smart card 101. The smart card 101 can receive the operation command and the target certificate transmitted by the computing device 100, and can be based on the received operation Command to store the received target certificate; when the certificate management operation selected by the user is a certificate download operation, the security control component 112 can determine whether the target certificate that the user wants to download to the smart card 101 is applied for on the computing device 100, If the target certificate is not applied for on the computing device 100, the security control component 112 may not perform the certificate download operation, that is, not transmit the target certificate to the smart card 101, and if the target certificate is applied for on the computing device 100, the security control The component 112 can download the target certificate from the server 400, and can send the operation instruction for storing the certificate and the downloaded target certificate to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the information sent by the computing device 100 The operation command and the target certificate, and the received target certificate can be stored according to the received operation command; when the certificate management operation selected by the user is a certificate storage operation, the security control component 112 can generate an operation command to read the certificate , And send the generated operation instruction to the smart card 101 through the card reader of the computing device 100. After receiving the operation instruction, the smart card 101 can read the target certificate according to the received operation instruction, and can read The target certificate sent out is returned to the computing device 100, and the security control component 112 can receive the target certificate returned by the smart card 101 through the card reader of the computing device 100, and can provide the user with options for storing the target certificate and inputting the target certificate. Save the file name, and can convert the format of the received target certificate into a certificate file, and store it in the storage path selected by the user with the file name entered by the user; when the user selects the certificate management operation When exporting the certificate, the security control component 112 can generate an operation command to read the certificate, and transmit the generated operation command to the smart card 101 through the card reader of the computing device 100. The smart card 101 receives the operation command , The target certificate can be read according to the received operation command, and the read target certificate can be transmitted back to the computing device 100, and the security control component 112 can receive the return from the smart card 101 through the card reader of the computing device 100 The target certificate can be provided for the user to select a browser installed in the computing device 100 as the designated browser, and the received target certificate can be imported into the designated browser; when the user selects the certificate management operation During the certificate import operation, the security control component 112 can provide the user with a special feature to be installed in the computing device 100. The browser and target certificate can be determined, and the target certificate can be read from the specific browser selected by the user, and the operation command for storing the certificate and the downloaded target certificate can be sent to the wisdom through the card reader of the computing device 100 The card 101 and the smart card 101 can receive the operation command and the target certificate sent by the computing device 100, and can store the received target certificate according to the received operation command.

In this way, through the present invention, it is possible to avoid browser restrictions on security control components, and at the same time, it is possible to update the certificate operation function provided by the application 110 at any time without changing the operation of using the webpage to provide the certificate, that is, only update The webpage of the server 400 can update the application 110 without requiring the user to update the application 110.

In the above-mentioned embodiment, after the computing device 100 executes the application program 110 (step 202), and the browser module 111 of the application program 110 displays the webpage downloaded by the server 400, if the user passes through the browser module 111 If you select the password change operation, the browser module 111 can download the password change interface to the server 400 and display the downloaded password change interface to provide the user with the original password and the new password. The browser module 111 can also be used After the user completes the input of the original password and the new password, it calls the security control component 112 of the application 110. After the security control component 112 is called by the browser module 111, the smart card 101 can determine whether the original password entered by the user is correct. That is, through the card reader of the computing device 100, the original password entered by the user and the operation command for checking the password are sent to the smart card 101. The smart card 101 can receive the operation command and the original password sent by the computing device 100, and can follow The received operation instruction determines whether the received original password is correct, and can generate a determination result and transmit the generated determination result back to the computing device 100.

The security control component 112 of the application program 110 can store the new password entered by the user in the smart card 101 when the smart card 101 determines that the original password is correct. In this embodiment, the security control component 112 can receive the judgment result returned by the smart card 101 through the card reader of the computing device 100. If the judgment result indicates that the original password is incorrect, the security control component 112 can stop continuing to perform the password change operation , And if the judgment result indicates that the original password is correct, the security control component 112 can send the new password and the operation instructions for changing the password to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the instructions sent by the computing device 100 Operation instructions and new passwords, and can update the original password to the new password according to the received operation instructions.

In addition, after the computing device 100 executes the application 110 (step 202), and the browser module 111 of the application 110 displays the webpage downloaded by the server 400, if the user selects the online solution through the browser module 111 Card operation, the browser module 111 can call the security control component 112 of the application 110. After the security control component 112 is called by the browser module 111, the target certificate can be read by the smart card 101, and an email account can be obtained from the server 400 according to the read target certificate, and an authentication code can be generated and sent to the email account number.

After the browser module 111 of the application program 110 calls the security control component 112 of the application program 110, the server 400 can download the authentication code input interface and display the downloaded authentication code input interface to provide the user to input the authentication code. After the user completes the input of the authentication code, the security control component 112 can determine whether the authentication code entered by the user is correct, and can use the password downloaded by the browser module 111 when judging that the authentication code entered by the user is correct The update interface allows the user to enter a new password and store the new password in the smart card 101. In this embodiment, the security control component 112 can transmit the new password and the card unlocking operation instruction to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the operation instruction and the new operation instruction transmitted by the computing device 100. Password, and can update the original password to a new password according to the received operation instruction, and unlock the smart card 101.

In addition, the browser module 111 can also download the password input interface to the server 400 when the online card unlocking operation is selected by the user, and display the downloaded password input interface to provide the user with a website password to log in to the server 400. The browser module 111 may also send the website password entered by the user to the server 400 for verification after the user completes the input of the website password, and receive the verification result returned by the server 400. When the verification result received by the browser module 111 indicates that the website password has not been verified by the server 400, the browser module 111 may display the password input interface again to provide the user to re-enter the website password to log in to the server 400; and When the verification result received by the browser module 111 indicates that the website password is verified by the server 400, the browser module 111 can download the password update interface to the server 400 and display the downloaded password update interface to provide the user with Enter a new password. The browser module 111 can also call the security control component 112 when the verification result indicates that the website password is verified by the server 400. After the security control component 112 is called by the browser module 111, it can obtain the user through the browser module. 111, the new password and the card unlocking operation instruction can be sent to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the operation instruction and the new password sent by the computing device 100. And the new password can be stored according to the received operation instruction, so as to update the original password to the new password, and unlock the smart card 101.

To sum up, it can be seen that the difference between the present invention and the prior art is that the browser module is embedded through the application program. When the certificate management operation is selected, the browser module calls the security control component of the application program, so that the security control component According to the entered smart card password, it is determined that the user’s identity is verified, and then the smart card is used to perform the technical means of certificate management. This technical means can solve the problem that the prior art provides certificate management through web services is restricted by the browser , And then achieve the technical effect of modifying the webpage on the server without updating the application.

Furthermore, the method of managing certificates with embedded browser modules of the present invention can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner in a computer system or distributed in different components. Several interconnected computer systems are implemented in a decentralized manner.

Although the embodiments of the present invention are disclosed as above, the content described is not intended to directly limit the scope of patent protection of the present invention. Anyone with ordinary knowledge in the technical field to which the present invention belongs, without departing from the spirit and scope of the present invention, makes some modifications in the form and details of the implementation of the present invention, all belong to the patent protection of the present invention range. The scope of patent protection of the present invention shall still be determined by the scope of the attached patent application.

100: Computing device 101: Smart card 110: Application program 111: Browser module 112: Security control component 400: Server Step 202: Computing device executes the application program, the application program includes security control component and browser module Step 210: Connect the computing device and the smart card Step 220: The browser module calls the security control component when the certificate management operation is selected. Step 230: The security control component provides the input of the smart card password. Step 240: The security control component determines whether the user is based on the smart card password. Pass verification step 250: The security control component performs certificate management operations through the smart card

Figure 1 is a system architecture diagram of the embedded browser module management certificate according to the present invention. Figure 2 is a flow chart of the method for managing credentials with an embedded browser module according to the present invention.

Step 202: The computing device executes the application, and the application includes security components and browser modules

Step 210: Connect the computing device and smart card

Step 220: The browser module calls the security control component when the certificate management operation is selected

Step 230: The security component provides the smart card password

Step 240: The security control component determines whether the user's identity is verified according to the smart card password

Step 250: The security control component performs certificate management operations through the smart card

Claims (10)

A method for managing certificates with an embedded browser module is applied to a computing device. The method includes at least the following steps: the computing device executes an application program, the application program includes a security control component and a browser module; connection The computing device and a smart card; the browser module calls the security control component when a credential management task is selected; the security control component provides input of a smart card password; and the security control component judges based on the smart card password After the user's identity is verified, the certificate management operation is performed through the smart card. As described in item 1 of the scope of patent application, the method for managing certificates with an embedded browser module, wherein the security control component executes the certificate management operation method through the smart card as follows: During a certificate update operation or certificate management operation, a server downloads a target certificate and installs the target certificate to the smart card; when the certificate management operation is a certificate download operation, the security control component determines whether the target certificate is in the calculation Apply on the device, and install the target certificate to the smart card when the target certificate is applied on the computing device; the security control component is read by the smart card when the certificate management operation is certificate storage or certificate export operation The target certificate and save the target certificate as a certificate file or import the target certificate into a designated browser; when the certificate management operation is a certificate import operation, the security control component reads the target certificate by a specific browser and Steps of installing the target certificate to the smart card. As described in the first item of the scope of patent application, the method for managing certificates with an embedded browser module, wherein the method further includes that the browser module is selected in the password change operation after the computing device executes the steps of the application program At the time, input an original password and a new password, and call the security control component. After the security control component judges that the original password is correct through the smart card, the step of storing the new password in the smart card is provided. As described in item 1 of the scope of patent application, the method for managing certificates with an embedded browser module, wherein the method further includes that the browser module is unlocked online after the steps of the application program are executed by the computing device When selecting, call the security control component, the security control component reads the target certificate by the smart card, and obtains a communication data from the server according to the target certificate, uses the communication data to send an authentication code, and browses through The browser module provides the steps to input the authentication code, and after judging that the authentication code is correct, provide the steps of inputting a new password through the browser module, and storing the new password in the smart card. As described in item 1 of the scope of patent application, the method for managing certificates with an embedded browser module, wherein the method further includes that the browser module is unlocked online after the steps of the application program are executed by the computing device When selecting, provide to enter a website password and send the website password to the server for verification. When the website password passes the verification server, the browser module provides to enter a new password and calls the security control component. The step of storing the new password into the smart card by the control component. A system for managing certificates using an embedded browser module. The system at least includes: a smart card; and a computing device that provides the smart card connection for executing an application program, the application program further comprising: a browser module Group for selecting a certificate management operation; and a security control component for inputting a smart card password, and for judging the user identity based on the smart card password to perform the certificate management through the smart card operation. For example, the embedded browser module management certificate system described in item 6 of the scope of patent application, wherein the security control component downloads a target certificate from a server when the certificate management operation is a certificate update operation or a certificate management operation And install the target certificate to the smart card; when the certificate management operation is a certificate download operation, the security control component determines whether the target certificate is applied for on the computing device, and installs when the target certificate is applied for on the computing device The target certificate to the smart card; when the security control component is the certificate storage or certificate export operation, the smart card reads the target certificate and saves the target certificate as a certificate file or the target certificate Import a designated browser; when the security control component is a certificate import operation, a specific browser reads the target certificate and installs the target certificate to the smart card. For example, the system for managing certificates with an embedded browser module described in item 6 of the scope of patent application, wherein the browser module is used to provide input of an original password and a new password when the password change operation is selected, and Call the security control component, and the security control component is used to determine that the original password is correct through the smart card, and then store the new password in the smart card. As described in item 6 of the scope of patent application, the embedded browser module is used to call the security control component when the online card unlocking operation is selected. The security control component is more Used to read the target certificate by the smart card, and after obtaining a communication data from the server according to the target certificate, use the communication data to send an authentication code, and provide input of the authentication code through the browser module, and After judging that the authentication code is correct, provide a new password through the browser module, and store the new password in the smart card. As described in item 6 of the scope of patent application, an embedded browser module is used to manage certificates, where the browser module is used to input a website password when the online card unlocking operation is selected and send the website The password is verified by the server, and when the website password passes the verification server, a new password is provided and the security control component is called, and the security control component is further used to store the new password in the smart card.

Images