TWM580295U - System for managing certificate with embedded browser module and computing equipment - Google Patents

Abstract

A system and computing device for managing credentials by using an embedded browser module, by embedding a browser module in an application, the browser module calls the security component of the application when the credential management job is selected, so that the security module The control component determines the user's identity after passing the verification according to the entered smart card password, and the technical means of performing the voucher management operation through the smart card can deviate from the browser limitation and maintain the servo in the case of maintaining the voucher management by the web service. Modifying the webpage on the device can be modified without updating the technical features of the application.

Description

System and computing device for managing credentials by embedded browser module

A credential management system and computing device, in particular, a system and a computing device for managing credentials by an embedded browser module.

An electronic voucher, also known as a digital voucher, is an identity recognition mechanism for computer systems. An electronic voucher is a file or group of computer files that record the identity of the owner and a set of public passwords. The owner of the electronic voucher can authenticate himself to the computer system to access or use a particular computer service.

In the early days, due to the lack of network security, the computer services that need to be accessed or used through electronic vouchers are mostly provided in the form of webpages attached to the security plug-in components, meaning that when users access or use these services, It is through the browser to perform related services such as voucher application, renewal and inquiry to the remote server.

Nowadays, due to the increasing importance of network security in recent years, browsers have become more and more stringent in terms of security requirements and checks for web pages and plug-in components operating on them. The restrictions have increased dramatically and the support has decreased, resulting in a smooth browser in the past. The number of new applications, extensions, inquiries, and other related operations performed on the above-mentioned documents has increased due to a large number of operational failures, which has caused problems for users.

In summary, it can be seen that in the prior art, there has been a problem that the credential management by the web service has been restricted by the browser for a long time, and therefore it is necessary to propose an improved technical means to solve this problem.

In view of the prior art problem that the credential management by the web service is limited by the browser, the present invention discloses a system and a computing device for managing credentials by using an embedded browser module, wherein: the embedded browser disclosed in the present application The system for managing the credentials of the module includes at least: a smart card and a computing device, and the computing device provides a smart card connection for executing the application. The application program further includes: a browser module for providing a selection credential management operation; a security control component for providing an input smart card password, and for judging the user identity according to the smart card password, and executing the credential through the smart card after verifying Manage jobs.

The computing device disclosed by the present invention is an embedded browser module management voucher computing device, which at least comprises: a browser module for providing a selection credential management operation; a security control component for providing an input smart card password, and for The smart card password determines that the user's identity has passed the verification, and the voucher management operation is performed through the smart card.

The system and computing device disclosed in the present application is different from the prior art in that the author embeds a browser module through an application, and the browser module calls the security control component of the application when the credential management job is selected. The security control component judges the user identity according to the entered smart card password, and then performs the credential management operation through the smart card, thereby solving the prior art In the problem, and can be achieved on the server to modify the web page can be modified without the need to update the technical skills of the application.

100‧‧‧ Computing equipment

101‧‧‧Smart Card

110‧‧‧Application

111‧‧‧Browser Module

112‧‧‧Security components

180‧‧‧ peripheral input device

190‧‧‧ processor

400‧‧‧Server

Step 202‧‧‧ The computing device executes the application, and the application includes the security component and the browser module

Step 210‧‧‧Connect computing devices and smart cards

Step 220‧‧‧The browser module calls the security component when the credential management job is selected

Step 230‧‧‧ Security components provide input smart card password

Step 240‧‧‧ The security component determines whether the user identity has passed the verification based on the smart card password

Step 250‧‧‧ Security components perform voucher management operations through smart cards

The first figure is the system architecture diagram of the embedded browser module management certificate proposed by the author.

Figure 2 is a flow chart of the method for managing credentials by embedded browser module.

The features and implementations of the present invention will be described in detail below in conjunction with the drawings and the embodiments, which are sufficient to enable any skilled person to fully understand the technical means to which the present invention solves the technical problems and implement them accordingly. The achievable effect of this creation.

The author can embed the browser module and the security control component in the application executed on the computing device, so that the application can call the security control component through the smart card to perform the credential management operation through the browser module.

The following is a description of the system architecture diagram of the embedded browser module management voucher proposed in the "Picture 1" of this book to illustrate the operation of the authoring system. As shown in "FIG. 1", the system of the present creation includes a computing device 100 and a smart card 101.

The smart card 101 may be a contact wafer card or an inductive wafer card, and the creation is not particularly limited.

The smart card 101 includes a transmission management component, a processing component, a storage component, and the like (none of which are shown), wherein the transmission management component can receive the data or signal transmitted by the computing device 100, or To transmit data or signals to the computing device 100, for example, to receive job instructions transmitted by the computing device 100; the processing component can execute a Chip Operating System (COS) stored in the storage component and can provide a wafer operating system to perform transmission The job instruction received by the management component; the storage component can store the data required for the operation of the wafer operating system, and can provide the memory space required for the wafer operating system to run on the smart card 101 and execute the job instruction. In more detail, after the wafer operating system is executed, the processing component can be used to perform a corresponding job in the memory space provided by the storage component according to the job instruction received by the transmission management component to generate a corresponding job result. The transfer management component can communicate the results of the job generated by the operating system using the processing component back to computing device 100.

Computing device 100 includes, but is not limited to, one or more processors, one or more memory modules, and components such as bus bars that connect different components, including memory modules and processors. Through the various components included, computing device 100 can load and execute the operating system to cause the operating system to operate on the computing device.

The bus bar of computing device 100 can include one or more types, including, for example, a data bus, an address bus, a control bus, an expansion bus, and an expansion bus. And/or a type of bus such as a local bus. Busbars for computing devices include, but are not limited to, side-by-side industry standard architecture (ISA) busses, peripheral component interconnect (PCI) busses, video electronic standards associations (VESA) local busses, and tandem universal sequence busses (USB), Fast Peripheral Component Interconnect (PCI-E) bus, etc.

The processor of computing device 100 is coupled to the busbar. The processor includes a register group or a scratchpad space, and the scratchpad group or scratchpad space can be completely disposed on the processing wafer, or all or part of the processor is disposed outside the processing chip and via a dedicated electrical connection. And/or via confluence The row is coupled to the processor. The processor can be a processing unit, a microprocessor, or any suitable processing element. If the computing device 100 is a multi-processor device, that is, the computing device 100 includes multiple processors, the computing device 100 includes processors that are the same or similar and are coupled and communicated through the bus.

The processor of computing device 100 can be coupled to the chip set or electrically coupled to the wafer set via the bus bar. The chipset is composed of one or more integrated circuits (ICs), including a memory controller and a peripheral input/output (I/O) controller, that is, the memory controller and the peripheral output controller can be included in In an integrated circuit, two or more integrated circuits can also be used. The chipset typically provides input and memory management functions, as well as providing a plurality of general purpose and/or dedicated registers, timers, etc., wherein the general purpose and/or dedicated registers and timers are coupled or One or more processors electrically coupled to the chip set are accessed or used.

The processor of the computing device 100 can also access the memory modules installed in the computing device 100 and the data in the mass storage area through the memory controller. The above memory module includes any type of volatile memory and/or non-volatile memory (NVRAM) memory, such as static random access memory (SRAM), dynamic random access. Memory (DRAM), flash memory (Flash), read-only memory (ROM), etc. The mass storage area described above may include any type of storage device or storage medium, such as a hard disk drive, a compact disc, a tape drive, a flash drive (flash memory), a solid state disk (SSD), or any Other storage devices, etc. That is to say, the memory controller can access data in the static random access memory, the dynamic random access memory, the flash memory, the hard disk drive, and the solid state hard disk.

The processor of the computing device 100 can also communicate with peripheral devices or interfaces such as peripheral output devices, peripheral input devices, communication interfaces, and GPS receivers through the peripheral output/input bus via the peripheral output/input controller. The peripheral input device can be any type of input device, such as a keyboard, a mouse, The trackball, the touchpad, the rocker, etc., the peripheral output device can be any type of output device, such as a display, a printer, etc., and the peripheral input device and the peripheral output device can also be the same device, such as a touch screen. The communication interface can include a wireless communication interface and/or a wired communication interface, and the wireless communication interface can include a wireless communication network such as Wi-Fi, Zigbee, Bluetooth, infrared, near field communication (NFC), 3G/4G/5G, etc. The interface of the road or other wireless data transmission protocol, the wired communication interface can be an Ethernet device, an asynchronous transfer mode (ATM) device, a DSL data machine, a cable (data) data machine, and the like. The processor can periodically poll various peripheral devices and interfaces to enable the computing device to perform input and output of data, as well as to communicate with another computing device having the elements described above.

Computing device 100 provides a smart card 101 connection. The computing device 100 can include or connect to a card reader (not shown). If the smart card 101 is a contact chip card, the smart card 101 can be inserted into the card reader to connect with the card reader to connect to the computing device 100; and if the smart card 101 is an inductive chip card, the smart card 101 can be close to the card reader. The machine is coupled to the computing device 100 in response to sensing with the card reader.

Computing device 100 is responsible for executing application 110 through processor 190. The processor 190 of the computing device 100 can run a working system (not shown), and the application 110 is installed in the operating system.

The application 110 is responsible for executing the credential management job through the smart card 101. The application 110 further includes a browser module 111 and a security control component 112.

The browser module 111 is connected to the server 400 and is responsible for downloading the user operation interface by the server 400.

The browser module 111 is also responsible for providing an execution job for selecting a voucher management job, a password change job, or an online card removal job among the downloaded user operation interfaces. Among them, the certificate tube The job can be a voucher update job, a voucher management job, a voucher download job, a voucher save job, a voucher remittance job, or a voucher remittance job, but the present creation is not limited to the above.

In some embodiments, the browser module 111 can also select a browser installed in the computing device 100 when the credential management job is selected in the user operation interface, so as to provide the security control component 112 for credential management. Use when working (such as voucher remittance or voucher import), but this creation is not limited to this.

The browser module 111 can call the security component 112 when the credential management job is selected.

The browser module 111 can also display an input interface for inputting the original password and the new password when the password change job is selected, thereby providing the input original password and the new password, and can call the security control unit 112.

The browser module 111 can also provide the website password input to the login server 400 when the online unpacking operation is selected, and transmit the website password to the server 400 for verification, and receive the verification result returned by the server 400, and can After the received verification result indicates that the website password has been verified by the server, a new password is entered, and the security control element 112 is called.

The security control component 112 is responsible for providing the input smart card password through the peripheral input device 180 of the computing device 100 to verify the user identity when the browser module 111 selects the credential management operation, and to determine the user identity after passing the verification, through the wisdom The card 101 executes the selected credential management job.

In more detail, when the credential management job selected by the browser module 111 is a credential update job or a credential management job, the security control component 112 can download the target credential by the server 400 and can pass through the card reader of the computing device 100 (Fig. The downloaded target voucher is transmitted to the smart card 101 for storage; when the voucher management job is a voucher downloading operation, the security control component 112 can determine the target to be downloaded. Whether the certificate is applied on the computing device 100, if the target certificate is applied on the computing device 100, the security component 112 can download the target credentials by the server 400, and can transmit the target credentials to the wisdom through the card reader of the computing device 100. The card 101 is stored; when the voucher management job is a voucher storage or voucher remittance operation, the security control component 112 can read the target voucher from the smart card 101 through the card reader of the computing device 100, and can store the read target voucher. The voucher file or the read target document is imported into the designated browser; when the voucher management job is a voucher import job, the security control component 112 can read the target voucher from the specific browser and can pass through the computing device 100 The card reader transmits the read target certificate to the smart card 101 for storage. Generally, the specified browser and the specific browser are selected by the browser module 111 when providing the user to select a credential management operation, but the creation is not limited thereto.

The security control component 112 can also transmit the original password provided by the browser module 111 to the smart card 101 through the card reader of the computing device 100 when the browser module 111 selects the password change operation, and receive the smart card 101 to determine the browsing. The module 111 provides a determination result as to whether the input original password is correct, and when the judgment result returned by the smart card 101 indicates that the original password is correct, the new password provided by the browser module 111 is transmitted to the wisdom through the card reader. The card 101 causes the smart card 101 to replace the original password with a new password.

The security control component 112 can also read the target credential by the smart card 101 through the card reader of the computing device 100 when the browser module 111 selects the line unblocking operation, and obtains the target by the server 400 according to the obtained target credential. After the corresponding communication data of the voucher, an authentication code is generated and the generated authentication code is transmitted using the communication data. The communication data may be an email account or a mobile phone number. This creation is not limited to this. Any data that can provide the authentication code to the user of the target certificate can be used as the communication material of the creation.

The security control component 112 can also determine whether the authentication code provided by the browser module 111 is correct, and can pass through the computing device 100 after determining that the authentication code provided by the browser module 111 is correct. The card reader transmits the new password provided by the browser module 111 to the smart card 101, so that the smart card 101 replaces the original password with a new password.

Next, an embodiment is used to illustrate the operation of the present creation, and please refer to the flowchart of the method for managing credentials by the embedded browser module in the "Picture 2". In this embodiment, it is assumed that the computing device 100 is a computer, and the application 110 is a credential management program, but the creation is not limited thereto.

First, the user needs to install and execute the application 110 on the computing device 100 (step 202). After the application 110 is executed, the browser module 111 of the application 110 can be connected to the server 400 via the HTTP protocol to download and include The user operates the webpage of the interface and displays the downloaded webpage to provide the user with an operation.

If the smart card 101 is a contact chip card, the user also needs to connect the computing device 100 and the smart card 101 (step 210), but the timing of the user connecting the computing device 100 and the smart card 101 is not particularly limited, for example, The computing device 100 and the smart card 101 can be connected before the application computing device 100 executes the application 110 (step 202) (step 210); the user can also display the connection to the server 400 by the browser module 111 of the application 110. After the downloaded web page, the computing device 100 and the smart card 101 are connected (step 210). That is, computing device 100 executes application 110 (step 202) and has no prioritized relationship with connected computing device 100 and smart card 101 (step 210). In addition, it should be particularly noted that if the smart card 101 is an inductive chip card, the user may not connect the computing device 100 and the smart card 101 at this time, that is, the fashion card 101 does not need to be close to the computing device 100.

After the browser module 111 of the application 110 displays the webpage downloaded to the server 400, the browser module 111 can provide a user to select a job to be performed, that is, provide the user to select a credential management job and password. Change the job, or cancel the card online.

If the user selects a voucher management job such as a voucher update job, a voucher management job, a voucher download job, a voucher storage job, a voucher remittance job, or a voucher import job, the browser module 111 of the application 110 can perform the voucher management job. When selected by the user, the security component 112 of the application 110 is called (step 220).

After the security component 112 of the application 110 is called by the browser module 111 of the application 110, the security component 112 can provide the user with the smart card password (step 230). In this embodiment, the security component 112 can generate and display a dialog box and prompt the user to enter the smart card password in the dialog box.

After the security component 112 of the application 110 obtains the smart card password input by the user, the security component 112 can determine whether the user identity has passed the verification according to the smart card password input by the user (step 240). In this embodiment, the security control component 112 can transmit the smart card password to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can determine whether the smart card password sent by the security component 112 is correct, and if not The smart card 101 can generate a verification result indicating that the user identity has not passed the verification, and if the smart card 101 determines that the smart card password transmitted by the security control component 112 is correct, the smart card 101 can generate verification that the user identity passes the verification. result. After the verification result is generated, the smart card 101 can transmit the generated verification result back to the computing device 100. The security control component 112 can receive the verification result generated by the smart card 101 through the card reader of the computing device 100, and can receive the verification result according to the received The verification result obtained determines whether the user identity has passed the verification.

If the security component 112 of the application 110 determines that the user identity has not passed the verification, the security component 112 may again provide the input smart card password (step 230) or end the execution to reject the voucher management operation; The control component 112 determines that the user identity has passed the verification, and the security component 112 can perform the credential management operation through the smart card 101 (step 250). In this embodiment, When the user selects the credential management job selected by the browser module 111 of the application 110 as a credential update job or a credential management job, the security control component 112 can download the target credential by the server 400 and can read the card through the computing device 100. The machine transmits the job instruction for storing the certificate and the downloaded target certificate to the smart card 101, and the smart card 101 can receive the job instruction and the target certificate transmitted by the computing device 100, and can store the received according to the received job instruction. The target credential; when the credential management job selected by the user is a credential download job, the security control component 112 can determine whether the target credential that the user wants to download to the smart card 101 is applied on the computing device 100, if the target credential is not in the calculation When the device 100 applies, the security component 112 will not perform the voucher download operation, that is, the target voucher is not transmitted to the smart card 101, and if the target voucher is applied on the computing device 100, the security component 112 can be served by the server. 400 downloading the target credential, and the work instruction for storing the credential can be read by the card reader of the computing device 100 The downloaded target certificate is transmitted to the smart card 101, and the smart card 101 can receive the job instruction and the target certificate transmitted by the computing device 100, and can store the received target document according to the received job instruction; when the user selects When the voucher management job is a voucher storage job, the security control component 112 can generate a job instruction to read the voucher, and transmit the generated job instruction to the smart card 101 through the card reader of the computing device 100, and the smart card 101 receives the After the job instruction, the target certificate can be read according to the received job instruction, and the read target certificate can be transmitted back to the computing device 100, and the security control component 112 can receive the smart card 101 through the card reader of the computing device 100. The returned target voucher, and can provide the storage path of the user to select the target voucher and the storage file name of the input target voucher, and can convert the format of the received target voucher into a voucher file, and then store the input by the user. The file name is stored in the storage path selected by the user; when the user selects the voucher management job as a voucher When the job security control element 112 may generate instructions for reading job credentials, via the card reader and the computing device 100 transmits the generated job command to the smart card 101, smart card 101 after receiving the job instructions, may The target voucher is read in accordance with the received job instruction, and the read target voucher can be transmitted back to the computing device 100. The security control component 112 can receive the target returned by the smart card 101 through the card reader of the computing device 100. Credentials, and can provide a browser selected by the user to be installed in the computing device 100 as the designated browser, and can import the received target document into the specified browser; when the user selects the credential management job as a credential During the import operation, the security control component 112 can provide a specific browser and target credentials that the user selects to install in the computing device 100, and can read the target credentials from a specific browser selected by the user, and can pass through The card reader of the computing device 100 transmits the job instruction for storing the voucher and the downloaded target voucher to the smart card 101, and the smart card 101 can receive the job instruction and the target voucher transmitted by the computing device 100, and can be based on the received job. The instruction stores the received target certificate.

In this way, through the creation, the browser can be prevented from restricting the security control components, and the credential job function provided by the application 110 can be updated at any time without changing the use of the webpage to provide the voucher operation, that is, as long as the update is performed. The web page of the server 400 can update the application 110 without requiring the user to update the application 110.

In the above embodiment, the computing device 100 executes the application 110 (step 202), and the browser module 111 of the application 110 displays the webpage downloaded to the server 400, and then the user accesses the browser module. 111, the password change operation is selected, the browser module 111 can download the password change interface to the server 400, and display the downloaded password change interface to provide the user to input the original password and the new password, and the browser module 111 can also be used. After the input of the original password and the new password is completed, the security control component 112 of the application 110 is called. After the security control component 112 is called by the browser module 111, the smart card 101 can be used to determine whether the original password input by the user is correct. That is, the original password input by the user and the operation command for checking the password are transmitted to the smart card 101 through the card reader of the computing device 100, and the smart card 101 is used. The job instruction transmitted by the computing device 100 and the original password may be received, and the received original password may be determined to be correct according to the received job instruction, and the determination result may be generated and the generated determination result may be transmitted back to the computing device 100. .

The security control component 112 of the application 110 can store the new password entered by the user into the smart card 101 when the smart card 101 determines that the original password is correct. In this embodiment, the security control component 112 can receive the determination result returned by the smart card 101 through the card reader of the computing device 100. If the determination result indicates that the original password is incorrect, the security control component 112 can stop performing the password change operation. If the result of the determination indicates that the original password is correct, the security control component 112 can transmit the new password and the job password change command to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the data transmitted by the computing device 100. The job instruction and the new password, and the original password can be updated to the new password according to the received job instruction.

In addition, after the computing device 100 executes the application 110 (step 202), and the browser module 111 of the application 110 displays the webpage downloaded to the server 400, the user selects the online solution through the browser module 111. The card module 111 can call the security component 112 of the application 110. After the security control component 112 is called by the browser module 111, the target certificate can be read by the smart card 101, and the email account is obtained by the server 400 according to the read target certificate, and the authentication code can be generated and sent to the email. account number.

After the browser module 111 of the application 110 calls the security control component 112 of the application 110, the authentication code input interface can be downloaded by the server 400, and the downloaded authentication code input interface is displayed to provide the user input authentication code. After the user completes the input of the authentication code, the security control component 112 can determine whether the authentication code input by the user is correct, and can use the password downloaded by the browser module 111 when determining that the authentication code input by the user is correct. The update interface provides the user with a new password and saves Save the new password to the smart card 101. In this embodiment, the security control component 112 can transmit the new password and the card unlocking job instruction to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the job instruction transmitted by the computing device 100 and the new The password can be updated to a new password according to the received job instruction, and the smart card 101 is unlocked.

In addition, the browser module 111 can also download the password input interface to the server 400 when the online unlocking operation is selected by the user, and display the downloaded password input interface to provide the website password of the user inputting the login server 400. The browser module 111 can also transmit the website password input by the user to the server 400 after the user completes the input of the website password, and receive the verification result returned by the server 400. When the verification result received by the browser module 111 indicates that the website password is not verified by the server 400, the browser module 111 may display the password input interface again to provide the user with the website password of the login server 400 again; When the verification result received by the browser module 111 indicates that the website password is verified by the server 400, the browser module 111 can download the password update interface to the server 400, and display the downloaded password update interface to provide the user. Enter a new password. The browser module 111 can also call the security control component 112 when the verification result indicates that the website password is verified by the server 400. After the security component 112 is called by the browser module 111, the browser module can obtain the user through the browser module. 111, the new password is input, and the new password and the card unlocking job instruction can be transmitted to the smart card 101 through the card reader of the computing device 100, and the smart card 101 can receive the job instruction and the new password transmitted by the computing device 100. And the new password can be stored according to the received job instruction, so that the original password is updated to the new password, and the locked state of the smart card 101 is released.

In summary, it can be seen that the difference between the present creation and the prior art is that the browser module is embedded in the application module, and the browser module calls the security control component of the application when the credential management job is selected, so that the security control component Judging the user's identity by the entered smart card password After that, the technical means of performing the credential management operation through the smart card can solve the problem that the prior art has the browser limitation by providing the credential management through the web service, thereby realizing that the webpage can be modified on the server without being modified. Update the technical power of the app.

Furthermore, the method of managing credentials by the embedded browser module of the present invention can be implemented in a centralized manner in a computer system or in a distributed manner in which different components are interspersed among several interconnected computer systems.

Although the embodiments disclosed in the present disclosure are as above, the contents are not intended to directly limit the scope of the patent protection of the present invention. Anyone who has the usual knowledge in the technical field of this creation, without any departure from the spirit and scope disclosed in this creation, makes some modifications to the form and details of the implementation of this creation, which are the patent protection of this creation. range. The scope of patent protection of this creation must be determined by the scope of the attached patent application.

Claims (10)

A computing device for managing credentials by an embedded browser module, the computing device providing a smart card connection, the computing device comprising at least: a peripheral input device; a processor coupled to the peripheral input device; and an application Executing by the processor, further comprising: a browser module for providing a selection of a voucher management operation; and a security control component for providing a smart card password for inputting and determining for use according to the smart card password After the identity is verified, the credential management operation is performed through the smart card. For example, in the system of claim 1, the embedded browser module manages the voucher, wherein the security control component downloads a target voucher from a server when the voucher management job is a voucher update job or a voucher management job. And installing the target credential to the smart card; the security control component determines whether the target credential is applied on the computing device when the credential management job is a credential downloading operation, and installs when the target credential is applied on the computing device The target certificate is sent to the smart card; when the credential management operation is a voucher storage or a voucher remittance operation, the smart card reads the target voucher and stores the target voucher as a voucher file or the target voucher Importing the specified browser; the security control component reads the target credential and installs the target credential to the smart card when the credential management job is a voucher import job. The system for managing credentials by using an embedded browser module according to the first aspect of the patent application, wherein the browser module is further configured to provide an original password and a new password when the password change operation is selected, and The security component is called to use the smart card to determine that the original password is correct, and then store the new password into the smart card. The system for managing credentials by using an embedded browser module as described in claim 1, wherein the browser module is further configured to call the security control component when the online unlocking operation is selected, and the security control component is further After the target document is read by the smart card, and a communication data is obtained by the server according to the target certificate, an authentication code is sent by using the communication data, and the authentication code is input through the browser module, and After determining that the authentication code is correct, a new password is input through the browser module, and the new password is stored in the smart card. The system for managing credentials by using an embedded browser module according to the first aspect of the patent application, wherein the browser module is further configured to provide a website password and transmit the website when the online card cancellation operation is selected. The password is verified by the server, and when the website password passes the verification server, a new password is input, and the security control component is called, and the security control component is further used to store the new password into the smart card. A system for managing credentials by using an embedded browser module, the system comprising: at least one smart card; and a computing device providing the smart card connection for executing an application, the application further comprising: a browser module a group for providing a selection of a voucher management operation; and a security control component for providing a smart card password for inputting, and for determining that the user identity is verified according to the smart card password, and performing the credential management through the smart card operation. The system for managing credentials by using an embedded browser module as described in claim 6 wherein the security control component downloads a target credential by a server when the credential management job is a credential update job or a credential management job. And installing the target credential to the smart card; the security control component determines whether the target credential is applied on the computing device when the credential management job is a credential downloading operation, and When the target certificate is applied on the computing device, the target certificate is installed to the smart card; when the security management component is the voucher storage or voucher remittance operation, the smart card reads the target voucher and the The target voucher is stored as a voucher file or the target voucher is imported into the specified browser; when the voucher management job is a voucher import job, the target voucher is read by a specific browser and the target voucher is installed to the Smart card. The system for managing credentials by using an embedded browser module as described in claim 6, wherein the browser module is further configured to input an original password and a new password when the password change operation is selected, and The security component is called to use the smart card to determine that the original password is correct, and then store the new password into the smart card. The system for managing credentials by using an embedded browser module according to claim 6 of the patent application, wherein the browser module is further configured to call the security control component when the online unlocking operation is selected, and the security control component is further After the target document is read by the smart card, and a communication data is obtained by the server according to the target certificate, an authentication code is sent by using the communication data, and the authentication code is input through the browser module, and After determining that the authentication code is correct, a new password is input through the browser module, and the new password is stored in the smart card. The system for managing credentials by using an embedded browser module according to claim 6 of the patent application, wherein the browser module is further configured to provide a website password and transmit the website when the online card cancellation operation is selected. The password is verified by the server, and when the website password passes the verification server, a new password is input, and the security control component is called, and the security control component is further used to store the new password into the smart card.