TWI697802B - System and method for selecting data transmission mode according to client environment for certificate operation - Google Patents

Abstract

A system and a method for selecting a data transmission mode according to a client environment for a certificate operation are provided. By selecting a data transmission mode based on an environment message transmitted from a client by a portal, guiding the client connects to a certificate server based on the data transmission mode by the portal, executing a certificate operation based on a command transmitted from the client for generating a certificate result by the certificate server, and transmitting the certificate result from the certificate server to the client, the system and the method can make sure certificate server transmits certificate result to client, and can achieve the effect of reducing loading of develop of web server.

Description

System and method for selecting data transmission mode according to customer environment to perform certificate operation

A voucher management system and method, in particular, refers to a system and method that selects a data transmission method to perform voucher operations according to the customer environment.

Electronic certificates, also known as digital certificates, are an identification mechanism used in computer systems. An electronic certificate is a computer file or a set of computer files, which records the owner's identity information and a set of public passwords. The owner of an electronic certificate can authenticate himself to the computer system to access or use a specific computer service.

In the early days, because network security was not as important as it is today, computer services that need to be accessed or used through electronic certificates are mostly provided in the form of webpages with security plug-ins, which means that when users access or use these services, It uses a browser to perform related services such as certificate application, renewal, and query to the remote server.

Nowadays, due to the increasing importance of network security in recent years, browsers have become more stringent in their security requirements and checks for web pages and plug-in components that operate on them. Limitations have increased significantly and support has decreased. The failure rate of operations such as new application, renewal, and query of certificates that can be successfully executed on the browser in the past has greatly increased, which has caused confusion to users. In order to solve the above problems, there are solutions to separate the certificate operation to an external server for execution. This solution is to allow the transaction operation to be executed by the client connected to the business server, and the certificate operation is connected by the client Run on an external server.

However, because there are many operating systems running on the client (such as various operating systems running on computers and mobile devices), and the browsers used by the client (including native web browser programs or internal There are more browser programs embedded in applications on computers or mobile devices, and different operating systems and different browser programs may have some differences in settings. For example, some operating systems or browser programs have "prevent "Cross-site tracking" settings, and some browsers have settings that cannot pass data across domains. The differences in the settings between these operating systems and browser programs may cause the external server to fail to send the certificate operation result back to the client, which may cause the client to fail to complete the transaction on the business server.

In summary, it can be seen that there have been differences in the settings of different operating systems and different browsers in the prior art for a long time, which may cause the problem that the external server cannot transmit the certificate operation result back to the client. Therefore, it is necessary to propose improved technical means To solve this problem.

In view of the difference in the settings of different operating systems and different browser programs in the prior art, the external server may not be able to transmit the certificate operation result back to the client. The present invention discloses a method of selecting data transmission according to the client environment to perform the certificate operation. The system and method of the invention, wherein: the system for selecting the data transmission method according to the client environment to perform the certificate operation disclosed in the present invention includes at least: a web server; a client for logging in to the web server and executing the web page The web program sent by the server, the web program is used to detect the operating environment used by the client to obtain the environment identification information corresponding to the operating environment; the entry server is used to receive the certificate operation command sent by the web program through the client And environment identification information, and select the operation execution mode according to the environment identification information; the certificate server is used to provide the entrance server to guide the client connection according to the operation execution mode, and to execute the corresponding certificate processing operation according to the certificate operation command to generate Certificate operation result, and send the certificate operation result to the client, so that the web program can obtain the certificate operation result.

The method for selecting the data transmission method according to the client environment to perform the certificate operation disclosed in the present invention includes at least the steps of: the client logs into the web server; the client executes the web program sent by the web server; The operating environment used to obtain the environment identification information corresponding to the operating environment; the web program sends the certificate operation command and environment identification information to the portal server through the client; the portal server selects the operation execution mode according to the environment identification information, and according to the operation execution mode Guide the client to connect to the certificate server; the certificate server executes the corresponding certificate processing operation according to the certificate operation command to generate the certificate operation result; the certificate server sends the certificate operation result to the client so that the web program can obtain the certificate operation result.

The system and method disclosed in the present invention are as above. The difference with the prior art is that the present invention selects the operation execution mode according to the environment identification information sent by the webpage program executed on the client through the portal server, and guides the operation according to the operation execution mode After the client connects to the certificate server, the certificate server executes the certificate processing operation according to the certificate operation command to generate the certificate operation result, and sends the certificate operation result to the client, so that the web program obtains the certificate operation result, so as to solve the existing technology The problem, and can achieve the technical effect of reducing the workload of web server developers.

110: client

111: Application

120: web server

121: Web Program

130: Entry server

150: certificate server

Step 210: The client logs in to the web server

Step 220: The client executes the web program sent by the web server

Step 230: The client detects the operating environment used by the client to obtain the environment identification information corresponding to the operating environment

Step 250: The client sends the certificate operation command and environment identification message to the portal server

Step 260: The portal server selects the operation execution mode according to the environment identification information, and guides the client to connect to the certificate server according to the operation execution mode

Step 270: The certificate server executes the corresponding certificate processing operation according to the certificate operation command and generates the certificate operation result

Step 280: The certificate server sends the result of the certificate operation to the client, so that the application can obtain the result of the certificate operation

Figure 1 is a system architecture diagram of the present invention that selects the data transmission method according to the customer environment to perform the certificate operation.

Figure 2 is a flow chart of the method of selecting the data transfer method according to the customer environment for voucher operation according to the present invention.

The following will describe the features and implementation of the present invention in detail with the drawings and embodiments. The content is sufficient to enable anyone familiar with the relevant art to easily and fully understand the technical means used by the present invention to solve the technical problems and implement them accordingly. The achievable effect of the present invention.

The present invention can detect the environment identification information of the client, and select the way for the client to connect to the certificate server according to the detected environment identification information, so that the client obtains the certificate operation result sent by the certificate server.

In the following, the system architecture diagram of selecting the data transmission mode according to the customer environment mentioned in the present invention to perform the certificate operation as mentioned in the "Figure 1" is used to illustrate the system operation of the present invention. As shown in "Figure 1", the system of the present invention includes a client 110, a web server 120, a portal server 130, and a certificate server 150. Among them, the client 110, the web server 120, the portal server 130, and the certificate server 150 may all be computing devices.

The computing device mentioned in the present invention includes but is not limited to one or more processors, one or more memory modules, and components such as buses connecting different components (including memory modules and processors). Of multiple components, the computing device can load and execute the operating system, making the operating system The system runs on a computing device, and at the same time, the computing device can also execute applications installed in the operating system.

The bus of the computing device mentioned in the present invention may include one or more types, for example, including data bus, address bus, control bus, and extended function bus ( expansion bus), and/or local bus (local bus). The bus of computing equipment includes, but is not limited to, parallel industry standard architecture (ISA) bus, peripheral component interconnect (PCI) bus, Video Electronics Standards Association (VESA) local bus, and serial universal serial bus (USB), PCI-E bus, etc.

The processor of the computing device provided by the present invention is coupled with the bus. The processor contains a register group or register space. The register group or register space can be completely set on the processing chip used as the processor, or all or part of it can be set outside the processing chip And it is coupled to the processor via a dedicated electrical connection and/or via a bus. The processor may be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the processors included in the computing device are all the same or similar, and they are coupled and communicated through a bus.

The processor of the computing device can be coupled to the chipset or electrically connected to the chipset through a bus. The chipset is composed of one or more integrated circuits (IC), including a memory controller and a peripheral input/output (I/O) controller, that is, the memory controller and peripheral input/output controller can be included in In an integrated circuit, two or more integrated circuits can also be used. Chipsets usually provide I/O and memory management functions, as well as multiple general-purpose and/or special-purpose registers, timers, etc., among which the aforementioned general-purpose and/or special-purpose registers and timers can be coupled or One or more processors electrically connected to the chipset are accessed or used.

The processor of the computing device can also access the data in the memory module and mass storage area installed on the computing device through the memory controller. The aforementioned memory modules include any type of volatile memory (volatile memory) and/or non-volatile memory (NVRAM), such as static random access memory (SRAM), dynamic random access Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The aforementioned mass storage area can include any type of storage device or storage medium, such as hard disk drives, optical discs, tape drives, flash drives (flash memory), solid state disks (Solid State Disk, SSD), or any Other storage devices, etc. In other words, the memory controller can access data in static random access memory, dynamic random access memory, flash memory, hard disk drives, and solid state drives.

The processor of the computing device can also communicate with peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers and other peripheral devices or interfaces through the peripheral I/O bus through the peripheral I/O controller. The peripheral input device can be any type of input device, such as a keyboard, mouse, trackball, touchpad, joystick, etc.; the peripheral output device can be any type of output device, such as a display, a printer, etc.; a peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface. The wireless communication interface can include support for Wi-Fi, Zigbee and other wireless local area networks, Bluetooth, infrared, near field communication (NFC), 3G/4G mobile communication network or others The interface of wireless data transmission protocol, wired communication interface can be Ethernet equipment, asynchronous transfer mode (ATM) equipment, DSL modem, cable modem, etc. The processor can periodically poll various peripheral devices and interfaces, so that the computing device can input and output data, and can also communicate with another computing device having the above-described components.

The client 110 is a computing device that can provide users to select and execute the application 111, including but not limited to computers, smart phones, tablets, personal digital assistants, navigation devices, multimedia players, e-book readers, game consoles, and electronics Dictionaries etc. Among them, the application 111 mentioned in the present invention has a web browsing function, such as a web browser, or a browser embedded in a computer application software or a mobile application in the form of WebView, etc., but the present invention does not take this as limit.

The client 110 is responsible for connecting to the web server 120 using a wired network or a wireless network through a communication interface, so as to receive data or signals sent by the web server 120 and/or send data or signals to the web server 120. Among them, the wired network mentioned in the present invention includes but is not limited to the Ethernet network, and the wireless network includes but not limited to WiFi, Bluetooth, 3G/4G telephone network, etc.

In some embodiments, the client 110 can also connect to the portal server 130 through a communication interface using a wired or wireless network, and can receive data or signals sent by the portal server 130, and can also send data or signals to the portal Server 130. Wherein, the client 110 can directly establish a connection with the portal server 130, or establish a connection with the portal server 130 through a redirect of the web server 120.

The client 110 is responsible for logging into the web server 120. In more detail, after the client 110 executes the application 111, the application 111 can connect to the web server 120 and send the login data to the web server 120 to log in to the web server 120. The aforementioned login information includes, but is not limited to, the account password of the user of the client 110 corresponding to the web server 120, etc.

The client 110 is also responsible for receiving the certificate operation result sent by the certificate server 150, and the application 111 executed by the client 110 stores the certificate operation result received by the client 110 in the local storage area corresponding to the web server 120 (Local Storage).

The client 110 is also responsible for receiving the web program 121 sent by the web server 120 and the application 111 executed by the client 110 executes the received web program 121. The webpage program 121 mentioned in the present invention includes HTML grammar that can be decoded by the application 111 and/or a script or program code executable by the application 111.

The webpage program 121 can enable the application 111 executed by the client 110 to detect the operating environment used by the client 110 to obtain the environment identification information corresponding to the operating environment used by the client 110. The operating environment mentioned in the present invention can be the operating system of the client 110, or a browser program that executes the webpage program 121, or it can be both an operating system and a browser program; the environment identification information mentioned in the present invention can be an operating system The identification data and/or the identification data of the browsing program. The browsing program can be the application itself (such as a browser program) or a subprogram included in the application (such as a browsing component embedded in the application). That is, after the webpage program 121 is executed by the application program 111, the application program 111 can detect the operating system of the client 110 to obtain the operating system identification data and/or detect the browser running the webpage program 121 to obtain the browser program identification. Data, and use the obtained operating system identification data and/or browser identification data as environmental identification information. The above-mentioned operating system identification data includes data such as the name or code of the operating system, and version information; the above-mentioned browsing program identification data includes data such as the name and version information of the browser.

The webpage program 121 is also responsible for causing the application 111 executed by the client 110 to generate a certificate operation command, and send the generated certificate operation command and the obtained environment identification data to the portal server 130.

The web server 120 can provide one or more clients 110 to connect via a communication interface, so as to receive data or signals sent by the connected clients 110, and/or send data or signals to The connected client 110. Among them, the web server 120 can provide the client 110 to use a wired network or a wireless network connection.

The web server 120 is responsible for receiving the login information sent by the application 111 executed by the client 110 through the communication interface, and verifying the received login information, and is responsible for sending the login information according to the received login information after the login information is verified. The application 111 logs into the web server 120.

The web server 120 is also responsible for sending the web program 121 to the application 111 on the client 110 that has successfully logged in to the web server 120.

The portal server 130 is responsible for providing the client 110 with a wired or wireless network connection through a communication interface, so as to receive data or signals sent by the client 110 and/or send data or signals to the client 110. For example, the portal server 130 may receive the certificate operation command and the environment identification message sent by the application 111 executed by the client 110, but the invention is not limited to this.

The portal server 130 is also responsible for selecting the operation execution mode according to the received environment identification message, and is responsible for guiding the client 110 to connect to the certificate server 150 according to the selected operation execution mode. Wherein, the operation execution mode selected by the portal server 130 may be an embedded web page (iFrame), that is, the portal server 130 may send a web page containing an embedded web page (iFrame) to the client 110, so that the client 110 The running application 111 is based on connecting to the certificate server 150 through the embedded webpage; the operation mode selected by the portal server 130 can also be a redirection method, that is, the portal server 130 sends the application executed by the client 110 The connection of the program 111 is forwarded to the certificate server 150 so that the certificate server 150 establishes a connection with the client 110.

The certificate server 150 is responsible for providing the client 110 to connect in the operation execution mode selected by the portal server 130 through the communication interface. In other words, the certificate server 150 can connect to the client 110 through an embedded webpage or redirection.

The certificate server 150 is also responsible for receiving certificate operation commands through the communication interface. Wherein, when the certificate server 150 is connected to the client 110 through an embedded web page, the certificate server 150 can receive the certificate operation command sent by the client 110; and when the certificate server 150 communicates with the client 110 through a redirection method When the terminal 110 is connected, the certificate server can receive the certificate operation command sent by the portal server 130.

The certificate server 150 is also responsible for executing corresponding certificate processing operations according to the received certificate operation instructions, and generating corresponding certificate operation results. For example, the certificate server 150 can perform certificate processing operations such as certificate application, time limit extension, password change, etc. according to the certificate operation command.

The certificate server 150 is also responsible for sending the generated certificate operation result to the client 110 through the communication interface. The certificate server can send the generated certificate operation result to the client 110 through the postMessage function in the HTML 5 specification.

Next, an embodiment is used to explain the operating system and method of the present invention, and please refer to the flowchart of the method of selecting the data transmission method according to the customer environment in the present invention in "Figure 2" to perform the certificate operation. In this embodiment, it is assumed that the client 110 is a computer and the application 111 is a web browser, but the present invention is not limited to this. For example, the client 110 and the application 111 may also be mobile devices such as mobile phones and run on A mobile application containing a browser program on a mobile device, or it can be a computer and an application software containing a browser program running on the computer.

When a user operates the application 111 on the client 110 to connect to the web server 120, the web server 120 may request the application 111 to provide login information, so that the application 111 displays a web page for inputting the login information to provide user input Login information. In this embodiment, it is assumed that the login information is an account and password registered on the web server 120 in advance.

After the user operates the client 110 to input the account and password previously registered on the web server 120 into the application 111, the application 111 can send the login information to the web server 120. If the transmitted login information does not pass the verification of the web server 120, the web server 120 may request the application 111 to provide the login information again; and if the login information passes the verification of the web server 120, the web server 120 may apply The program 111 logs into the web server 120 (step 210), and the web program 121 can be sent to the application 111. In this embodiment, it is assumed that the webpage program 121 includes scripts that comply with HTML 5 specifications.

After the application 111 of the client 110 receives the web page program 121 sent by the web server 120, it can execute the received web page program 121 (step 220). In this embodiment, if the webpage program 121 is included in a webpage indicating a successful login, the application 111 can execute when successfully logging into the web server 120, that is, when loading a webpage indicating successful login to the web server 120 Web page program 121; if the page program 121 is included in the transaction page, the application program 111 can be used when the transaction page is downloaded from the web server 120, or when the user operates the client 110 to click on the component in the transaction page to perform the transaction , Run the web program 121.

After the application 111 of the client 110 executes the web program sent by the web server 120, the web program 121 can detect the operating environment used by the client 110 to obtain the environment identification information corresponding to the operating environment of the client 110 ( Step 230). In this embodiment, it is assumed that the webpage program 121 can detect the operating system of the client 110 and generate an environment identification message containing the obtained operating system information.

After the web program 121 executed by the application 111 of the client 110 obtains the environment identification information corresponding to the operating environment of the client 110, the web program 121 can send the certificate operation command and the obtained environment identification information to the client 110 through the client 110 The portal server 130 (step 250). In this In the embodiment, it is assumed that the webpage program 121 can connect to the portal server 130 by opening a new window or a new page, and send the environment identification message to the portal server 130 when connecting.

After the web program 121 executed by the application 111 of the client 110 transmits the environment identification information to the portal server 130 (step 250), the portal server 130 can select the operation execution mode according to the environment identification information sent by the web program 121. The application 111 of the client 110 is guided to connect to the certificate server 150 according to the selected operation execution mode (step 260). In this embodiment, it is assumed that the portal server 130 can choose to redirect to the certificate server 150 when the environment identification message indicates that the operating system of the client 110 is a specific operating system, so that the application 111 of the client 110 and the certificate server Server 150 is connected, and can send the certificate operation command to the certificate server 150 when redirecting; and the entry server 130 can choose to include the iFrame when the environment identification message indicates that the operating system of the client 110 is not a predetermined operating system The web page is sent to the client 110, so that the application 111 of the client 110 can connect to the certificate server 150 through the iFrame in the received web page, and can send the certificate operation command when connecting to the certificate server 150 To the certificate server 150.

After the portal server 130 guides the application 111 of the client 110 to connect to the certificate server 150 (step 260), and the application 111 of the client 110 sends the certificate operation command to the certificate server 150, the certificate server 150 can The corresponding certificate processing operation is executed according to the certificate operation command sent by the application program 111 of the client 110, and the corresponding certificate operation result is generated after the certificate processing operation is executed (step 270).

After that, the certificate server 150 may send the generated certificate operation result to the client 110, so that the web program 121 executed by the application 111 of the client 110 can obtain the certificate operation result generated by the certificate server 150 (step 280) . In this embodiment, it is assumed that the certificate server 150 can send the result of the certificate operation to the application program executed by the client 110 through the postMessage function. Formula 111, the application program 111 can store the result of the certificate operation in a local storage area corresponding to the web server 120, so as to wait for the application program 111 to use it when the transaction is performed.

In this way, through the present invention, the portal server 130 can select the connection mode of the client 110 and the certificate server 150 according to the execution environment of the client 110, so that the certificate server 150 can smoothly transmit the certificate operation result of the client 110 to the client Terminal 110 is used.

In summary, it can be seen that the difference between the present invention and the prior art is that the portal server selects the operation execution mode according to the environment identification information sent by the webpage program executed on the client, and guides the client connection according to the operation execution mode After reaching the certificate server, the certificate server executes the certificate processing operation according to the certificate operation command to generate the certificate operation result, and sends the certificate operation result to the client, so that the web program can obtain the result of the certificate operation. Solve the problem that the difference in the settings of different operating systems and different browsers in the prior art may cause the external server to fail to send the certificate operation result back to the client, thereby achieving the technical effect of reducing the workload of web server developers.

Furthermore, the method of the present invention for selecting the data transmission method according to the customer environment to perform the certificate operation can be implemented in hardware, software, or a combination of hardware and software, and can also be implemented in a centralized manner in a computer system or with different components Distributed in several interconnected computer systems.

Although the embodiments of the present invention are disclosed as above, the content described is not intended to directly limit the scope of patent protection of the present invention. Anyone with ordinary knowledge in the technical field to which the present invention belongs, without departing from the spirit and scope of the present invention, makes some modifications in the form and details of the implementation of the present invention, all belong to the patent protection of the present invention range. The scope of patent protection of the present invention shall still be determined by the scope of the attached patent application.

Step 210: The client logs in to the web server

Step 220: The client executes the web program sent by the web server

Step 230: The client detects the operating environment used by the client to obtain the environment identification information corresponding to the operating environment

Step 250: The client sends the certificate operation command and environment identification message to the portal server

Step 260: The portal server selects the operation execution mode according to the environment identification information, and guides the client to connect to the certificate server according to the operation execution mode

Step 270: The certificate server executes the corresponding certificate processing operation according to the certificate operation command and generates the certificate operation result

Step 280: The certificate server sends the result of the certificate operation to the client, so that the client can obtain the result of the certificate operation

Claims (8)

A method for selecting a data transmission method to perform a certificate operation according to a client environment. The method includes at least the following steps: a client logs in to a web server; the client executes a web program sent by the web server to detect the The client uses an operating environment and obtains an environment identification message corresponding to the operating environment; the client sends the environment identification message to a portal server; the portal server selects the client’s The connection is forwarded to a certificate server to connect the certificate server to the client, or choose to send a web page containing an embedded web page (iFrame) to the client, so that the client connects according to the embedded web page To the certificate server; the certificate server executes the corresponding certificate processing operation according to a certificate operation command generated by the client to generate a certificate operation result; and the certificate server sends the certificate operation result to the client so that The client obtains the result of the certificate operation. For example, the method of selecting the data transmission method according to the client environment to perform the certificate operation as described in the first item of the scope of patent application, wherein the certificate server sends the result of the certificate operation to the client by the certificate server through the postMessage function The result of the certificate operation is sent to the client. For example, the method of selecting the data transmission method to perform the certificate operation according to the client environment described in the first item of the scope of patent application, wherein the method further includes the client terminal obtaining the certificate operation result after the step of obtaining the certificate operation result Steps stored in the local storage corresponding to the web server. For example, the method of selecting the data transmission method according to the client environment to perform the certificate operation as described in the first item of the scope of patent application, wherein the client detects the operating environment used by the client to obtain the environment identification corresponding to the operating environment The message step is that the client detects the operating system of the client and/or detects the browser program that executes the web program to obtain the environmental identification information. A system that selects the data transmission method to perform the certificate operation according to the client environment. The system at least includes: a web server; a certificate server; a client for logging in to the web server and for detecting where the client is Use an operating environment to obtain an environment identification message corresponding to the operating environment; and an entry server to receive the environment identification message sent by the client, and select the client's identification message based on the environment identification message The connection is forwarded to the certificate server to connect the certificate server to the client, or choose to send a web page containing an embedded web page (iFrame) to the client, so that the client connects according to the embedded web page To the certificate server; wherein, the certificate server is further used to execute a corresponding certificate processing operation according to a certificate operation command generated by the client to generate a certificate operation result, and send the certificate operation result to the client To enable the client to obtain the result of the certificate operation. For example, the system that selects the data transmission method to perform the certificate operation according to the client environment as described in item 5 of the scope of patent application, wherein the certificate server transmits the result of the certificate operation to the client through the postMessage function. For example, the system for selecting the data transmission method to perform the certificate operation according to the client environment described in item 5 of the scope of patent application, wherein the client is further used to store the result of the certificate operation in the local storage area corresponding to the web server. As described in item 5 of the scope of patent application, the system that selects the data transfer method to perform the certificate operation according to the client's environment, where the client is to detect the operating system of the client and/or to detect the execution of the web program in the client Browse the program to obtain the environmental identification information.

Images