TWM574269U - System of certificate processing operated for transmission method selected based on customer environment - Google Patents

Abstract

A system for selecting a data transfer method according to a customer environment for performing a voucher operation, which selects a job execution mode according to an environment identification message transmitted by the client through the portal server, and guides the client to connect to the credential server according to the job execution mode. The credential server executes the voucher processing job according to the voucher job instruction to generate the voucher job result, and the voucher job result is sent to the client, so that the client can obtain the voucher job result technical means, and the external server can surely return the voucher job result. The client, and achieve the technical effect of reducing the workload of the developer of the web server.

Description

A system for selecting data transfer methods based on customer environment for voucher operations

A credential management system, in particular, a system for selecting a data transfer method according to a customer environment for performing a voucher operation.

An electronic voucher, also known as a digital voucher, is an identity recognition mechanism for computer systems. An electronic voucher is a file or group of computer files that record the identity of the owner and a set of public passwords. The owner of the electronic voucher can authenticate himself to the computer system to access or use a particular computer service.

In the early days, due to the lack of network security, the computer services that need to be accessed or used through electronic vouchers are mostly provided in the form of webpages attached to the security plug-in components, meaning that when users access or use these services, It is through the browser to perform related services such as voucher application, renewal and inquiry to the remote server.

Nowadays, due to the increasing importance of network security in recent years, browsers have become more and more stringent in terms of security requirements and checks for web pages and plug-in components operating on them. The restrictions have increased dramatically and the support has decreased, resulting in a smooth browser in the past. The number of new applications, extensions, inquiries, and other related operations performed on the above-mentioned documents has increased due to a large number of operational failures, which has caused problems for users. In order to solve the above problems, there is currently a solution for separating the voucher job into an external server. This solution is to allow the transaction to be executed by the client to the service server, and the voucher job is connected by the client. Execute to an external server.

However, there are many operating systems running on the client (for example, on computers and various operating systems running on mobile devices), and the browsers used by the clients (including native web browsers or programs on computers or mobile devices) There are more browsers embedded in the application of the computer or mobile device. There may be some differences in settings between different operating systems and different browsers. For example, some operating systems or browsers exist. There are also some browsers that have the ability to transfer data across domains. The difference between these operating systems and the settings on the browser may cause the external server to fail to transmit the results of the voucher job back to the client, which may result in the transaction of the client on the service server not being completed.

In summary, it can be seen that there have been long-standing differences in the settings of different operating systems and different browsers in the prior art, which may cause the external server to fail to transmit the result of the voucher job back to the client. Therefore, it is necessary to propose an improved technical means. To solve this problem.

In view of the fact that prior art different operating system and differences in settings on different browsers may cause the external server to fail to transmit the result of the voucher job back to the client, the author discloses a method of selecting a data transfer method for the voucher operation according to the customer environment. System, where:

The system disclosed in the present invention for selecting a data delivery method for a voucher operation according to a customer environment includes at least: a web server; a client for logging into a web server and executing a webpage program transmitted by the web server, and the webpage program The operating environment used by the client is detected to obtain an environment identification message corresponding to the working environment; the portal server is configured to receive the voucher operation command and the environment identification message transmitted by the webpage program through the client, and select according to the environment identification message. a job execution mode; the credential server is configured to provide an entry server to guide the client connection according to the job execution mode, and to execute a corresponding credential processing job according to the voucher job instruction to generate a voucher job result, and transmit the voucher job result to the client To enable the web application to obtain the results of the voucher job.

The system disclosed in the present application is as above, and the difference from the prior art is that the author selects the job execution mode according to the environment identification message transmitted by the portal server according to the webpage program executed on the client, and guides the client according to the job execution mode. After connecting to the credential server, the credential server executes the credential processing job according to the credential job instruction to generate the voucher job result, and the voucher job result is sent to the client, so that the webpage program obtains the voucher job result, thereby solving the problem of the prior art. And can achieve the technical effect of reducing the workload of the developer of the web server.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and the embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

The creation can detect the environment identification message of the client, and select the manner in which the client connects to the credential server according to the detected environment identification message, so that the client obtains the result of the voucher job transmitted by the credential server.

The following is a description of the system operation of the creation of the voucher operation by selecting the data transfer method according to the customer environment in the "1st picture". As shown in "FIG. 1", the system of the present creation includes a client 110, a web server 120, an portal server 130, and a credential server 150. The client 110, the web server 120, the portal server 130, and the credential server 150 may all be computing devices.

The computing device proposed by the present invention includes, but is not limited to, one or more processors, one or more memory modules, and components such as bus bars connecting different components (including memory modules and processors). The plurality of components, the computing device can load and execute the operating system to cause the operating system to run on the computing device, and the computing device can also execute the application installed in the operating system.

The bus of the computing device proposed by the present application may include one or more types, for example, including a data bus, an address bus, a control bus, and an expansion bus ( Expansion bus), and / or local bus and other types of bus. Busbars for computing devices include, but are not limited to, side-by-side industry standard architecture (ISA) busses, peripheral component interconnect (PCI) busses, video electronic standards associations (VESA) local busses, and tandem universal sequence busses (USB), Fast Peripheral Component Interconnect (PCI-E) bus, etc.

The processor of the computing device proposed by the present invention is coupled to the bus bar. The processor includes a register group or a scratchpad space, and the scratchpad group or the scratchpad space can be completely disposed on the processing chip as a processor, or all or part of the processing chip is disposed outside the processing chip. And coupled to the processor via a dedicated electrical connection and/or via a bus bar. The processor can be a processing unit, a microprocessor, or any suitable processing element. If the computing device is a multi-processor device, that is, the computing device includes multiple processors, the computing device includes the same or similar processors and is coupled and communicated through the bus.

The processor of the computing device can be coupled to the chip set or electrically connected to the chip set through the bus bar. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and a peripheral input/output (I/O) controller, that is, the memory controller and the peripheral output controller can be included in In an integrated circuit, two or more integrated circuits can also be used. The chipset typically provides input and memory management functions, as well as providing a plurality of general purpose and/or dedicated registers, timers, etc., wherein the general purpose and/or dedicated registers and timers are coupled or One or more processors electrically coupled to the chip set are accessed or used.

The processor of the computing device can also access the data stored in the memory module and the large-capacity storage area of the computing device through the memory controller. The above memory module includes any type of volatile memory and/or non-volatile memory (NVRAM) memory, such as static random access memory (SRAM), dynamic random access. Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The mass storage area described above may include any type of storage device or storage medium, such as a hard disk drive, a compact disc, a tape drive, a flash drive (flash memory), a solid state disk (SSD), or any Other storage devices, etc. That is to say, the memory controller can access data in the static random access memory, the dynamic random access memory, the flash memory, the hard disk drive, and the solid state hard disk.

The processor of the computing device can also communicate with the peripheral device or interface such as the peripheral output device, the peripheral input device, the communication interface, and the GPS receiver through the peripheral output/input bus through the peripheral output/input controller. The peripheral input device can be any type of input device, such as a keyboard, a mouse, a trackball, a trackpad, a rocker, etc.; the peripheral output device can be any type of output device, such as a display, a printer, etc.; peripheral input device It can also be the same device as the peripheral output device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface, and the wireless communication interface can include a wireless local area network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), 3G/4G mobile communication network or the like. The interface of the wireless data transmission protocol, the wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL data machine, a cable (data) data machine, and the like. The processor can periodically poll various peripheral devices and interfaces to enable the computing device to perform input and output of data, as well as to communicate with another computing device having the elements described above.

The client 110 is a computing device that can provide a user to select and execute the application 111, including but not limited to a computer, a smart phone, a tablet, a personal digital assistant, a navigation device, a multimedia player, an e-book reader, a game console, and an electronic device. Dictionary, etc. The application 111 proposed by the present application has a web browsing function, such as a web browser or a web browser embedded in a computer application software or a mobile application, but this creation does not limit.

The client 110 is responsible for connecting to the web server 120 via a communication interface using a wired network or a wireless network, thereby receiving data or signals transmitted by the web server 120, and/or transmitting data or signals to the web server 120. Among them, the wired network proposed by the present invention includes but is not limited to Ethernet, and the wireless network includes but is not limited to WiFi, Bluetooth, 3G/4G telephone network, and the like.

In some embodiments, the client 110 can also connect to the portal server 130 through a communication interface using a wired or wireless network, and can receive data or signals transmitted by the portal server 130, and can also transmit data or signals to the portal. Server 130. The client 110 can directly establish a connection with the portal server 130 or establish a connection with the portal server 130 through a redirect of the web server 120.

The client 110 is responsible for logging into the web server 120. In more detail, after the client 110 executes the application 111, the application 111 can connect to the web server 120 through the client 110 and transmit the login data to the web server 120 to log in to the web server 120. The login information includes, but is not limited to, an account password of the user corresponding to the web server 120 of the client 110.

The client 110 is also responsible for receiving the result of the voucher job transmitted by the credential server 150, and the application 111 executed by the client 110 stores the voucher job result received by the client 110 in the local storage area corresponding to the web server 120. (Local Storage).

The client 110 is also responsible for receiving the webpage program 121 transmitted by the web server 120 and executing the received webpage program 121 by the application 111 executed by the client 110. The webpage program 121 proposed by the present application includes an HTML syntax that can be decoded by the application 111 and/or a script or a program code executable by the application 111.

The webpage program 121 can cause the application 111 executed by the client 110 to detect the working environment used by the client 110 to obtain the environment identification message corresponding to the working environment used by the client 110. The working environment mentioned in the present application may be the operating system of the client 110, the browsing program of the webpage program 121, or both the operating system and the browsing program; the environment identification message proposed by the creation may be the operating system. Identifying data and/or browsing program identification data. The browsing program can be the application itself (such as a browser program) or a sub-program included in the application (such as a browsing component embedded in the application). That is, after being executed by the application 111, the application 111 can detect the operating system of the client 110 to obtain the operating system identification data and/or detect the browsing program of the execution web program 121 to obtain the browser identification. Information and the acquired operating system identification data and/or browser identification data as environmental identification information. The operating system identification data includes the name or code of the operating system, and the version information, and the browsing program identification data includes the name of the browsing program, the version information, and the like.

The webpage program 121 is also responsible for causing the application 111 executed by the client 110 to generate a voucher job instruction, and transmitting the generated voucher job command and the acquired environment identification data to the portal server 130.

The web server 120 can provide one or more client 110 connections through the communication interface to receive the data or signals transmitted by the connected client 110 and/or to transmit data or signals to the connected client 110. The web server 120 can provide the client 110 with a wired network or a wireless network connection.

The web server 120 is responsible for receiving the login data transmitted by the application 111 executed by the client 110 through the communication interface, verifying the received login data, and being responsible for the login data after the login data is verified. The application 111 logs into the web server 120.

The web server 120 is also responsible for transmitting the web page program 121 to the application 111 on the client 110 that successfully logs into the web server 120.

The portal server 130 is responsible for providing the client 110 with a wired or wireless network connection through the communication interface, thereby receiving data or signals transmitted by the client 110, and/or transmitting data or signals to the client 110. For example, the portal server 130 can receive the credential job instruction and the environment identification message transmitted by the application 111 executed by the client 110, but the creation is not limited thereto.

The portal server 130 is also responsible for selecting a job execution mode based on the received environment identification message and for directing the client 110 to connect to the credential server 150 in accordance with the selected job execution mode. The job execution mode selected by the portal server 130 may be a method using an embedded webpage (iFrame), that is, the portal server 130 may transmit a webpage including an embedded webpage (iFrame) to the client 110, so that the client 110 The executed application 111 is connected to the credential server 150 via the embedded web page; the selected job mode of the portal server 130 can also be a redirected manner, that is, the application executed by the client 110 by the portal server 130. The connection of the program 111 is forwarded to the credential server 150, causing the credential server 150 to establish a connection with the client 110.

The credential server 150 is responsible for providing the client 110 with the communication interface to connect in the manner in which the job execution mode selected by the portal server 130 is selected. That is, the credential server 150 can connect to the client 110 via an embedded web page or redirected.

The credential server 150 is also responsible for receiving credential job instructions through the communication interface. Wherein, when the credential server 150 is connected to the client 110 by means of an embedded webpage, the credential server 150 can receive the credential job instruction transmitted by the client 110; and when the credential server 150 transmits the redirection to the client When the terminal 110 is connected, the credential server can receive the credential job instruction transmitted by the portal server 130.

The credential server 150 is also responsible for executing the corresponding credential processing job in accordance with the received credential job instruction and generating a corresponding credential job result. For example, the credential server 150 may perform a voucher processing job such as a voucher application, a deadline extension, a password change, etc. according to the voucher job instruction.

The credential server 150 is also responsible for transmitting the resulting credential job results to the client 110 via the communication interface. The credential server can transmit the generated credential job result to the client 110 via the function of the postMessage in the HTML 5 specification.

Next, the operation of the creation is explained by an embodiment, and please refer to the flowchart of the method for selecting the data transfer method according to the customer environment to perform the voucher operation according to the "2nd drawing". In this embodiment, the client 110 is a computer, and the application 111 is a web browser. However, the present invention is not limited thereto. For example, the client 110 and the application 111 may also be mobile devices such as mobile phones and executed on the mobile device. A mobile application containing a browser on a mobile device, or a computer and an application software including a browser on a computer.

When a user operates the application 111 on the client 110 to connect to the web server 120, the web server 120 can request the application 111 to provide the login information, so that the application 111 displays the web page for inputting the login data to provide user input. Login information. In the present embodiment, it is assumed that the login data is an account number and password registered in advance on the web server 120.

After the user operation client 110 inputs the account and password previously registered on the web server 120 in the application 111, the application 111 can transmit the login data to the web server 120. If the transmitted login data is not verified by the web server 120, the web server 120 may request the application 111 to provide the login data again; and if the login data is verified by the web server 120, the web server 120 may apply the application. The program 111 logs into the web server 120 (step 210) and can transfer the web page program 121 to the application 111. In the present embodiment, it is assumed that the web page program 121 contains a script conforming to the HTML 5 specification.

After the application 111 of the client 110 receives the webpage program 121 transmitted by the web server 120, the received webpage program 121 can be executed (step 220). In this embodiment, if the webpage program 121 is included in the webpage indicating successful login, the application 111 may execute when successfully logging in to the web server 120, that is, when loading a webpage indicating successful login to the webpage server 120. The webpage program 121; and if the webpage program 121 is included in the transaction webpage, the application 111 may download the transaction webpage by the webpage server 120, or when the user operates the client 110 to select a component in the transaction webpage for transaction. , execute the webpage program 121.

After the application 111 of the client 110 executes the webpage program transmitted by the web server 120, the webpage program 121 can detect the working environment used by the client 110, thereby obtaining an environment identification message corresponding to the working environment of the client 110 ( Step 230). In this embodiment, it is assumed that the webpage program 121 can detect the operating system of the client 110 and generate an environment identification message including the acquired operating system information.

After the webpage program 121 executed by the application 111 of the client 110 obtains the environment identification message corresponding to the working environment of the client 110, the webpage program 121 can transmit the credential job instruction and the obtained environment identification message to the client 110. The portal server 130 (step 250). In this embodiment, it is assumed that the webpage program 121 can be connected to the portal server 130 by opening a new window or a new page, and transmitting the environment identification message to the portal server 130 when connecting.

After the webpage program 121 executed by the application 111 of the client 110 transmits the environment identification message to the portal server 130 (step 250), the portal server 130 can select the job execution mode according to the environment identification message transmitted by the webpage program 121. The application 111 of the client 110 is then directed to the credential server 150 in accordance with the selected job execution mode (step 260). In this embodiment, it is assumed that the portal server 130 can select to redirect to the credential server 150 when the environment identification message indicates that the operating system of the client 110 is a specific operating system, so that the application 111 and the credential server of the client 110 The device 150 is connected and can transmit the voucher job instruction to the credential server 150 when redirecting; and the portal server 130 can select to include the iFrame when the environment identification message indicates that the operating system of the client 110 is not the predetermined operating system. The webpage is transmitted to the client 110, so that the application 111 of the client 110 can connect to the credential server 150 through the iFrame in the received webpage, and can transmit the credential job instruction when connecting to the credential server 150. The credential server 150 is provided.

After the application server 111 of the portal server 130 directs the client 110 is connected to the credential server 150 (step 260), and the application 111 of the client 110 transmits the credential job instruction to the credential server 150, the credential server 150 can The corresponding credential processing job is executed according to the credential job instruction transmitted by the application 111 of the client 110, and the corresponding credential job result is generated after the credential processing job is executed (step 270).

Thereafter, the credential server 150 can transmit the generated credential job result to the client 110, so that the webpage program 121 executed by the application 111 of the client 110 can obtain the credential job result generated by the credential server 150 (step 280). . In this embodiment, it is assumed that the credential server 150 can transmit the result of the credential job to the application 111 executed by the client 110 through the function of the postMessage, and the application 111 can store the result of the credential job in the corresponding to the web server 120. In the local storage area, it is used when waiting for the application 111 to conduct transactions.

In this way, the portal server 130 can select the connection mode of the client 110 and the credential server 150 according to the execution environment of the client 110, so that the credential server 150 can smoothly transmit the credential job result of the client 110 to the client. End 110 is used.

In summary, it can be seen that the difference between the present creation and the prior art is that the portal server selects the job execution mode according to the environment identification message transmitted by the webpage program executed on the client, and guides the client connection according to the job execution mode. After the credential server, the credential server executes the credential processing job according to the credential job instruction to generate the voucher job result, and the voucher job result is sent to the client, so that the webpage program can obtain the result of the credential job result, by means of a technical means Resolving the differences in the settings of different operating systems and different browsers in the prior art may result in the problem that the external server cannot transmit the result of the voucher job back to the client, thereby achieving the technical effect of reducing the workload of the developer of the web server.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

110‧‧‧Client

111‧‧‧Application

120‧‧‧Web server

121‧‧‧Web program

130‧‧‧Entry server

150‧‧‧Voucher server

Step 210‧‧‧Client login web server

Step 220‧‧‧ The client executes the webpage program transmitted by the web server

Step 230‧‧‧ The client detects the working environment used by the client to obtain the environment identification message corresponding to the working environment

Step 250‧‧‧ The client transmits the voucher job command and the environment identification message to the portal server

Step 260‧‧‧ The portal server selects the job execution mode according to the environment identification message, and guides the client to connect to the credential server according to the job execution mode

Step 270‧‧ The credential server executes the corresponding credential processing job according to the credential job instruction and generates the credential job result

Step 280‧‧ The certificate server transmits the result of the voucher job to the client, so that the application obtains the result of the voucher operation

The first picture is the system architecture diagram of the document selection method based on the customer environment to select the document delivery method. The second figure is a flow chart of the method for selecting the data delivery method according to the customer environment for the voucher operation.

Claims (10)

A system for selecting a data delivery method for a voucher operation according to a customer environment, the system comprising: at least: a web server; a client for logging in to the web server and detecting a working environment used by the client Obtaining an environment identification message corresponding to the working environment; an portal server for receiving the environment identification message transmitted by the client, and selecting a job execution mode according to the environment identification message; and a credential server, Providing the portal server to connect with the client according to the manner in which the client performs the boot mode according to the job execution mode, and executing a corresponding one of the voucher processing operations according to one of the voucher job instructions generated by the client to generate a The result of the voucher job, and the result of the voucher job is transmitted to the client, so that the client obtains the result of the voucher job. The system for selecting a data transfer method according to the customer environment to perform a voucher operation according to the first aspect of the patent application, wherein the portal server selects an embedded webpage (iFrame) or a redirect according to the job execution mode. The client is connected to the credential server. For example, in the system for selecting a data transfer method according to the customer environment to perform a voucher operation, the voucher server is further configured to receive, by the client, the embedded server when the portal server selects to use the embedded webpage. The voucher job command is transmitted, and when the portal server selects to use the redirect, the voucher job command transmitted by the portal server is received. The system for selecting a data transfer method according to the customer environment to perform a voucher operation according to the first aspect of the patent application, wherein the credential server transmits the voucher job result to the client through a postMessage function. The system for selecting a data transfer method according to the customer environment to perform a voucher operation according to the first aspect of the patent application, wherein the client is further configured to store the voucher job result in a local storage area corresponding to the web server (Local Storage). The system for selecting a data transfer method according to the customer environment to perform a voucher operation according to the first aspect of the patent application, wherein the client detects the operating system of the client and/or detects the execution of the webpage program in the client. Browse the program to get the environment identification message. The system for selecting a data transfer method according to the customer environment to perform a voucher operation, wherein the client is further configured to provide input and login information, and transmit the login data to the web server, the webpage The server is further configured to verify the login data, and after the login data is verified, the client is logged into the web server according to the login data. The system for selecting a data transfer method according to the customer environment to perform a voucher operation according to the first aspect of the patent application, wherein the web server is further configured to transmit a webpage program to the client for execution, so that the client detects the obtained Environmental identification message. For example, in the system of claim 8, the method for selecting a data transfer method according to the customer environment for performing a voucher operation, wherein the client is downloaded by the web server when loading a webpage indicating successful login to the web server The web page program is executed when a web page is traded, or when a component in the transaction web page is clicked. For example, the system for selecting a data transfer method according to the customer environment to perform the voucher operation according to the customer environment, wherein the voucher processing operation is a voucher application, a deadline extension, or a password change.