WO2015180635A1 - 网银类网站的访问方法及浏览器 - Google Patents
网银类网站的访问方法及浏览器 Download PDFInfo
- Publication number
- WO2015180635A1 WO2015180635A1 PCT/CN2015/079876 CN2015079876W WO2015180635A1 WO 2015180635 A1 WO2015180635 A1 WO 2015180635A1 CN 2015079876 W CN2015079876 W CN 2015079876W WO 2015180635 A1 WO2015180635 A1 WO 2015180635A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- online banking
- browser
- website
- information
- banking website
- Prior art date
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/08—Payment architectures
- G06Q20/10—Payment architectures specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
- G06Q20/108—Remote banking, e.g. home banking
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/61—Installation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
- G06F9/44521—Dynamic linking or loading; Link editing at or after load time, e.g. Java class loading
- G06F9/44526—Plug-ins; Add-ons
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F19/00—Complete banking systems; Coded card-freed arrangements adapted for dispensing or receiving monies or the like and posting such transactions to existing accounts, e.g. automatic teller machines
- G07F19/20—Automatic teller machines [ATMs]
- G07F19/206—Software aspects at ATMs
Definitions
- the access to the online banking website through the browser is an important part of the current Internet commerce or financial services, and the browser user accesses the online banking website, thereby performing operations such as transferring funds, depositing, buying foreign exchange, etc., and these operations involving funds
- the requirements for network security are higher than those for general non-Internet banking websites.
- the online banking website will develop corresponding security controls based on its own website architecture and security system. These security controls are stored on the online banking server. When the user conducts the operations such as transfer, deposit, and purchase of foreign exchange through the browser on the online banking website, and needs to log in to the online banking, the online banking server will feedback the installation information of the security control to the browser side to prompt the user to browse. These security controls are installed on the device to facilitate data input or output operations, thereby enabling secure interaction between the client (ie, the browser side) and the online banking server.
- the banking system also uses different security controls, such as controls that control login security, security controls that verify digital signatures when paying, and even different operating systems for different users. Corresponding security controls and anti-phishing plugins, to name a few.
- security controls such as controls that control login security, security controls that verify digital signatures when paying, and even different operating systems for different users.
- Corresponding security controls and anti-phishing plugins to name a few.
- the space of each bank's online banking website is incompatible with each other. When using the online banking service of a bank for the first time or using online banking in a new user environment, it will always encounter automatic during the operation of the browser. Pop-up security Control installation tips. Some browsers (such as IE) can't directly install security controls. Instead, users need to click the yellow bar notification at the top of the screen to allow the installation to complete the security control installation.
- the technical problem to be solved by the present invention is to provide an access method and a browser for an online banking website, by requesting a webpage requesting information of a page URL on the browser side, and then jumping to the online banking website before the browser page is forwarded.
- the browser downloads and installs the security controls related to the online banking website, thereby solving the need to additionally download and install security controls when operating the online banking website, and to refresh the page or restart the browser after the installation is completed, which is inconvenient to operate. problem.
- the present invention discloses an access method for an online banking website, which includes: detecting a webpage request information of a webpage URL on a browser side; and determining, by a browser, that the webpage of the webpage is a webpage configuration file of the browser.
- the website information of the online banking website wherein the online banking website configuration file includes the website information of the online banking website and the corresponding security plug-in information; the browser initiates downloading of the corresponding security plug-in on the online banking website according to the corresponding security plug-in information; And install the downloaded security plugin on the browser side and access the online banking website by using the installed security plugin.
- the invention also discloses a browser suitable for accessing an online banking website.
- the browser includes a storage module, a monitoring module, a control module, a download module, and a mounting module.
- the storage module stores the online banking website configuration file, wherein the online banking website configuration file includes the website information of the online banking website and the corresponding security plug-in information.
- the monitoring module is configured to detect webpage request information of a page URL.
- the control module is coupled to the storage module and the monitoring module, and is configured to access the online banking website according to the website information and the detection result of the monitoring module, and determine whether the page URL is the website information of the online banking website in the online banking website configuration file. .
- the downloading module is coupled to the control module, and is configured to initiate downloading of the corresponding security plug-in on the online banking website according to the judgment result of the control module and the corresponding security plug-in information in the storage module.
- the installation module is coupled to the download module and the control module for executing the installation program of the security plug-in, so that the control module can access the online banking website through the installed security plug-in.
- the present invention also discloses a computer program comprising computer readable code, when the computer readable code is run on a terminal device, causing the terminal device to perform an access method of an online banking website as described in any one of the above .
- the invention also discloses a computer readable medium in which a computer program as described above is stored.
- the access method and browser of the online banking website of the present invention intercepts the webpage request information of the online banking website before sending it to the corresponding online banking server, and intercepts on the browser side, and jumps to the online banking website in the current page of the browser.
- the download and installation operation of the security control of the online banking website is performed in advance, so that the browser can directly access the online banking website according to the installed security control after completing the page jump. Since the download and installation of the security control is completed before entering the online banking website, when accessing the online banking website, there is no need to perform a complicated download and install procedure, and there is no need to perform a refresh page or restart the browser. operating.
- FIG. 1 is a block diagram of a browser according to an embodiment of the present invention.
- FIGS. 2 and 3 are flowcharts of an embodiment of a first method of the present invention
- Figure 5 is a flow chart of an embodiment of some methods of the present invention.
- Figure 7 shows schematically a block diagram of a terminal device for carrying out the method according to the invention.
- Fig. 8 schematically shows a storage unit for holding or carrying program code implementing the method according to the invention.
- first device if a first device is coupled to a second device, the first device can be directly electrically coupled to the second device, or electrically coupled indirectly through other devices or coupling means. Connected to the second device.
- the browser 10 disclosed in the embodiment of the present invention is applicable to accessing an online banking website.
- the online banking website may be a different online banking website or other website information that has login information on the browsing page.
- a website such as a shopping website or other website that involves a user account login, wherein the browser 10 interacts with the corresponding online banking server of the online banking website via the Internet.
- the browser 10 disclosed in this embodiment includes a storage module 110, a control module 120, a monitoring module 130, a downloading module 140, and an installation module 150.
- the storage module 110 stores an online banking website configuration file.
- the online banking website configuration file may optionally record the online banking corresponding to the online banking website. The name, the online banking website, the online banking logo, the identification information to determine whether the corresponding security plug-in information has been installed, the acquisition path of the security plug-in, the corresponding backup of the security plug-in that has been installed on the browser side, and one of the above combinations.
- the control module 120 is coupled to the storage module 110 and the monitoring module 130, wherein the monitoring module 130 is configured to detect webpage request information of a page URL, and the webpage of the page is associated with an online banking website, which may be the current page of the browser 10.
- the control module 120 is configured to receive the detection result of the monitoring module 130. If the monitoring module 130 detects the webpage request information of the page URL, the control module 120 further determines, according to the online banking website configuration file, whether the webpage of the webpage is the online banking category in the online banking website configuration file.
- the website information of the website if yes, the control module 120 accesses the corresponding online banking website according to the website information. If not, the control module 120 controls the current page of the browser 10 to jump to the target page corresponding to the website address.
- the downloading module 140 is coupled to the control module 120 and the storage module 110, respectively, for initiating downloading of the corresponding security plug-in on the online banking website according to the judgment result of the control module 120 and the security plug-in information in the online banking website configuration file.
- the control module 120 determines that the page URL is the online banking in the online banking website configuration file.
- the URL information of the class website the downloading module 140 executes the downloading process of the security plug-in on the browser side.
- the installation module 150 is coupled to the download module 140 and the control module 130 for executing a corresponding installation program after the security plug-in is downloaded, so that the control module 130 can access the corresponding online banking website through the installed security plug-in.
- control module 130 loads the online banking webpage corresponding to the webpage of the above page on the browser 10, and then visits the online banking webpage, wherein the online banking webpage can be loaded in a separate webpage process. Take it or do it in a sandbox to ensure safety.
- the control module 120 before the installation module 150 executes the installation program, the control module 120 is further configured to check whether the current installation environment is safe. If so, the installation module 150 performs an operation of installing the downloaded security plug-in. If not, the control module 120 pops up a corresponding warning window on the installation page of the browser, and is used as a user interface for updating the security level of the installation environment, so that the user can perform related operations of the browser 10 in a secure environment. And to ensure the security of the online banking website. Similarly, in another embodiment of the present invention, the control module 120 is further configured to perform a security scan on the page URL, and display the scan result on the current page of the browser 10, so that the user can decide whether to continue to go according to the scan result. The page URL is accessed to improve the security of access to the page URL.
- control module 120 performs the encryption process on the user information of the visited online banking website, and then saves the encrypted information in the storage module 110, and accesses the same again in the browser.
- the saved encrypted information is decrypted and filled by the control module 120, and then the accessed online banking website is logged according to the decrypted and filled encrypted information, thereby simplifying the operation procedure of logging in to the online banking website.
- the control module 120 writes the website information and the corresponding security plug-in information into the online banking website configuration file, and reads from the storage module 110 when accessing the same online banking website again.
- the online banking website configuration file is obtained.
- the control module 120 Before the reading or writing operation of the online banking website configuration file, the control module 120 first performs a signature operation process on the reading or writing operation to facilitate the permission of the reading or writing operation.
- the monitoring module 130 actively detects the updated version of the security plug-in to the online banking server of the online banking website at a predetermined frequency, for example, when the browser is started, or immediately after a predetermined number of days.
- the update message is sent to the download module 140 through the control module 120, so that the online banking server downloads the updated version of the security plug-in, so that the installation module 150 can replace the updated version of the security plug-in.
- the installed security plug-in allows the control module 120 to access the online banking website with the latest version of the security plug-in; otherwise, if not, the download module 140 does not need to perform the download operation of the security plug-in.
- the method used in the access to the online banking website of the present invention is further illustrated by some method embodiments.
- the access method of the online banking website disclosed in the first method embodiment of the present invention includes the following step:
- Step S110 detecting webpage request information of a page URL on the browser side
- Step S120 The browser determines that the page URL is the website information of the online banking website in the online banking website configuration file of the browser;
- Step S130 the browser initiates downloading of the corresponding security plug-in on the online banking website according to the corresponding security plug-in information
- step S140 the downloaded security plug-in is installed on the browser side, and the online banking website is accessed by using the installed security plug-in.
- the webpage The request information may be generated by the user directly inputting the login URL of the online banking website on the current page of the browser 10 or by performing a page jump by the search engine.
- the browser 10 detects that the current page has webpage request information by the monitoring module 130 before jumping to the corresponding webpage according to the page URL (step S110), and transmits the detection result to the control module 120.
- the control module 120 parses the content of the page URL on the one hand, and reads the web address information of the online banking website recorded in the online banking website configuration file from the storage module 110 on the other hand, and compares whether the two are the same, if yes, browse
- the device 10 determines that the page URL of the webpage requesting information on the current page is the webpage information of the online banking website recorded in the configuration file (step S120), and performs subsequent downloading and security control operations; otherwise, if not, browsing The device 10 determines that the page URL is not related to the online banking website, so as to jump from the current page to the corresponding target page according to the content of the page URL.
- the webpage request information of the page web address is detected, the webpage request information is first intercepted by the detecting module of the browser 10, and sent to the control module 120 to perform a judging process.
- the detailed operation flow may be, but is not limited to, the current page of the browser 10.
- the webpage request information is sent to the online banking website (step S111), wherein the webpage request information is initiated by popping up a confirmation window corresponding to the webpage information of the online banking website on the current page of the browser 10, and then triggering through the confirmation window. , for example, triggered by the user clicking on the confirmation window, but not limited to the above.
- step S112 the webpage request information is intercepted (step S112), and then the webpage URL in the webpage request information is sent to the control module 120 for comparison and The judgment program (step S113).
- the URL information of the online banking website recorded in the configuration file may be the URL information of one or a certain specific online banking website, or may cover all current URL information of online banking websites. Therefore, as shown in FIG. 1 and FIG.
- the browser and the browser are 10
- the browser 10 compares the page URLs according to the website information of the plurality of different online banking websites recorded in the online banking website configuration file, so as to determine whether the page URL matches multiple One of the web site information of the different online banking websites (step S121); if yes, the browser 10 determines that the page web address is the web address information of the corresponding online banking website (step S122); and if not, the browser 10 determines the page URL It is the URL information of the non-e-banking website (step S123).
- the browser 10 when the browser 10 determines that the page URL is the web address information of the online banking website, the browser 10 further loads the page with the browser 10.
- the corresponding online banking page of the website the loading operation may be performed in a separate webpage process, or the online banking webpage may be separately loaded in the sandbox, so as to facilitate the operation of the online banking webpage in the sandbox, thereby ensuring security during operation. Sex.
- the currently accessed page URL is selectively scanned for security, and the scanning result is displayed on the browser 10 to determine whether the currently accessed online banking webpage is secure.
- the browser 10 initiates downloading of the corresponding security plug-in to the online banking website through the download module 140 according to the corresponding security plug-in information in the online banking website configuration file (step S130), and the currently downloaded security plug-in may be the latest on the online banking server.
- the version of the security plugin or the full security plugin For the downloading program of the security plug-in, the prompting window may be popped up on the current page of the browser 10, and then the downloading program may be triggered by executing the instruction to confirm the downloading through the prompting window; or may be automatically executed by the downloading module 140 of the browser 10. .
- the control module 120 of the browser compares the identification information with the version of the security plug-in information, the code length, the version information of the related file or related registry information, and the like.
- the download module 140 of the browser 10 stops executing the download process of the security plug-in; otherwise, if not installed, the browser 10 follows the acquisition path of the security plug-in recorded in the online banking website configuration table.
- the corresponding online banking server downloads the corresponding security plugin, such as the latest version of the security plugin. That is, when the security control on the browser side is the same as the security control of the online banking server, the browser 10 stops the downloading process of the security control; and when the security control on the browser side is different from the security control of the online banking server, the browser 10 That is, download the latest security controls in the online banking server to replace the local security controls.
- the user information of the visited online banking website is encrypted and saved on the browser side, and when the same online banking website is accessed again through the browser, the saved encrypted information is first decrypted on the browser side. Fill, and then based on the decrypted and populated encrypted information, allows users to log in directly on the browser and use the visited online banking website. At the same time, it is also possible to selectively display the online banking name and the online banking logo corresponding to the visited online banking website on one of the function options on the browser, so that the user can directly log in to the online banking website next time.
- the security controls on the Internet banking server may be updated at any time. Therefore, in some method embodiments of the present invention, the download security is installed on the browser side. After the plug-in, the browser will actively detect the updated version of the security plug-in to the online banking server of the visited online banking website at a predetermined frequency, for example, every time the browser connects to the Internet, or every time it detects that it is about to jump. When the webpage of the online banking website is requested to request information.
- the browser detects that there is a newer version of the security plugin on the online banking server, the browser actively downloads the updated version of the security plugin from the online banking server, and replaces the installed security plugin with the updated version of the security plugin, so that the browser side
- the security plugin is always in the state of the latest version of the security plugin to avoid possible attacks by the Trojan virus or other malware on the client.
- the browser does not detect a newer version of the security plugin, it means that the security plugin installed on the current browser side is already the latest version of the security plugin, so the browser does not work.
- the second method embodiment disclosed in the present invention is substantially the same as the method for accessing the online banking website in the first method embodiment, and the difference between the two is that the online banking class disclosed in the first method embodiment
- the webpage request information is generated by the user directly inputting the login URL of the online banking website on the current page of the browser 10 or by performing a page jump by the search engine.
- the webpage request information is determined by the browser according to the current webpage environment to determine whether the webpage request information is initiated. Therefore, in the access method of the online banking website disclosed in the second method embodiment of the present invention, the operation of detecting the webpage request information of the page URL on the browser side includes:
- Step S210 Detect and determine whether the website information of the online banking website is logged on the current page of the browser.
- the browser it is detected on the current page of the browser whether there is a website information of the login online banking website, for example, when the current page on the browser side is a page of a shopping website or other pages having an online payment function, on these pages for convenience
- the user selects the payment method, and usually displays one or more online banking names or online banking online banking logos (logo), which are used as logins for logging in to the corresponding online banking websites. Therefore, the corresponding website information of the online banking websites is set in these entries.
- the browser judges based on the presence or absence of these entries.
- the browser matches one of the page URLs of the plurality of different online banking websites according to the website URL in the online banking website configuration file. If yes, the browser determines that the current page has the URL information of the login online banking website; if not, the browser determines that the current page has nothing to do with the login information of the online banking website. Therefore, after the browser completes the above-mentioned judging operation, one of the following steps is performed according to the judgment result.
- Step S220 if yes, the browser default webpage request information is initiated on the current page, and the page URL is obtained from the webpage information.
- step S230 if not, the browser side does not operate.
- the browser when the browser determines that the current page has the web address information of the login online banking website, the browser actively considers that there is one or more webpage request information corresponding to the webpage information of the online banking website on the current page, and from these web addresses Get the corresponding page URL in the message. Then, subsequent operations of downloading and installing the security controls are performed. Since the downloading and installing operations of the security control are substantially the same as those of the foregoing embodiment, details are not described herein again.
- the browser determines that the current page has nothing to do with the website information of the login online banking website, it means that there is no need or motivation to log in to the online banking website on the current page, and the browser does not need to perform the download and installation operation of the security control. .
- the user may have the need to log in to the online banking website, and the security controls associated with the online banking websites are downloaded to the browser in advance. Side, and complete the installer. Therefore, when the user enters the login page of the online banking website through the portal of the online banking website on the current page, the login operation of the online banking website can be immediately performed in a secure environment, thereby omitting the operation of manually downloading and installing the security control, and There is no need to perform an operation to refresh the page.
- the access method of the online banking website disclosed in the present invention completes the installation of the security plug-in on the browser side before the browser jumps from the current page to the operation page of the online banking website. So when the page When jumping to the operation page of the online banking website or the online banking website, the security control installation prompt can be prevented from automatically popping up on the operation page and affecting the use of the network operation page. At the same time, during the operation, there is no need to refresh the page to make the installed security control work normally, so as to avoid the problem of invalidation of the form jumped from other websites, so the operation of the browser is quite flexible. Convenience.
- the various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof.
- a microprocessor or digital signal processor may be used in practice to implement some or all of the functionality of some or all of the components in a browser in accordance with embodiments of the present invention.
- the invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein.
- a program implementing the invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, provided on a carrier signal, or provided in any other form.
- FIG. 7 shows a terminal device, such as a PC, a mobile phone, or the like, that can implement an access method of an online banking website according to the present invention.
- the terminal device conventionally includes a processor 710 and a computer program product or computer readable medium in the form of a memory 720.
- Memory 720 can be an electronic memory such as a flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), EPROM, hard disk, or ROM.
- Memory 720 has a memory space 730 for program code 731 for performing any of the method steps described above.
- storage space 730 for program code may include various program code 731 for implementing various steps in the above methods, respectively.
- the program code can be read from or written to one or more computer program products.
- Such computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards or floppy disks.
- Such a computer program product is typically a portable or fixed storage unit as described with reference to FIG.
- the storage unit may have a storage section, a storage space, and the like arranged similarly to the storage 720 in the terminal device of FIG.
- the program code can be compressed, for example, in an appropriate form.
- the storage unit includes computer readable code 731', i.e., code readable by a processor, such as 710, that when executed by the terminal device causes the terminal device to perform the methods described above Each step.
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Software Systems (AREA)
- Accounting & Taxation (AREA)
- Theoretical Computer Science (AREA)
- Finance (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Development Economics (AREA)
- Economics (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Information Transfer Between Computers (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
一种网银类网站的访问方法及浏览器,此浏览器适用于访问网银类网站,并且在浏览器的存储模块(110)中保存有网银网站配置文件。访问方法包括在浏览器侧检测到一页面网址的网页请求信息(S110),通过浏览器判断出页面网址为网银网站配置文件中的网银类网站的网址信息(S120),浏览器依据对应的安全插件信息,发起对网银类网站上对应的安全插件的下载(S130),在浏览器侧安装下载的安全插件,并通过使用安装的安全插件访问网银类网站(S140)。安全插件的下载与安装程序在网页请求信息传送至网银服务器之前被浏览器预先完成,因此当用户在浏览器上登录网银服务器时,无需手动下载与安装安全插件,并能确保登录网银服务器时的安全性。
Description
本发明涉及浏览器技术领域,具体涉及一种网银类网站的访问方法及浏览器。
由于互联网的兴起,给银行整体运营和经营带来了很多的便利条件。由于有了互联网的存在,相较于传统银行主要依靠实体据点来拓展自己的经营业务和领域,目前大多数银行通过网上银行的运营模式,使整体的业务范围扩大许多。网上银行实际上给客户提供随时、随地,以任何方式、任何地点与任何时间的金融服务。这种通过网银网站提供无时间性与地域性的服务方式大大满足了客户的要求,使其发展势头非常迅猛。
其中,通过浏览器对于网银网站的访问是目前的互联网商务或者是金融服务的一个重要环节,浏览器用户通过访问网银网站,从而进行转账、存款、买汇等等操作,而这些涉及资金的操作对于网络安全的要求比一般非网银网站的访问要求更高。
为了保证网银网站可以被正常且安全的使用,网银网站都会基于本身的网站架构与安全体系,开发出相应的安全控件,这些安全控件保存于网银服务器上。当用户通过浏览器在网银网站上进行转账、存款、买汇等涉及隐私与安全性的操作,而需要登录网银时,网银服务器会向浏览器侧反馈安全控件的安装信息,来提示用户在浏览器上安装这些安全控件,以便于进行数据的输入或者输出操作,从而实现在用户端(也就是浏览器侧)和网银服务器之间的安全交互。
但是目前在浏览器的使用上,经常会面临到的问题在于,不同的网银网站在浏览器上所适用的安全控件不同,以实际例子来说,建行和招行的网银网站使用的安全控件就存在有相当大的差异性。同时,由于网银网站的便利性,许多用户同时持有多个不同网银网站的帐号;或是在具有多个网银服务器的入口信息的购物类网站上有资金支付的需求时,这些用户通过浏览器登录各个网银网站时,都要执行一次相应的安全控件的安装操作后,才能够正常的使用网银网站所提供的各项功能,这样就给浏览器用户带来了很繁琐的操作,才能够保证各个网银网站皆能安全使用。
同时,针对每一类型的金融服务,银行***也采用了不同的安全控件,比如有控制登录输入安全的控件、有针对支付时验证数字签名的安全控件,甚至针对不同用户的不同操作***还有相对应的安全控件与反钓鱼插件等等,不一而足。而且每个银行的网银网站的空间之间互不兼容,对于第一次使用某银行的网银服务时或者在新的用户端环境中使用网银时,总会在浏览器的操作过程中遇到自动弹出的安全
控件安装提示。有些浏览器(例如IE)并不能直接进行安全控件的安装,而是需要用户点击屏幕上方的黄色条状通知来允许安装后,才能顺利完成安全控件的安装操作。并且,很多网银网站在安全控件的安装操作结束后,还需要用户刷新页面后才能继续使用,如果用户是U盾客户,还要根据U盾品牌的不同下载并安装不同的控件,而且往往安装完控件后还要求用户重启浏览器以使安全控件生效。而往往这种时候从其他网站跳转过来的表单可能会失效,导致需要重新生成订单号等,非常麻烦。
发明内容
本发明所要解决的技术问题在于提供一种网银类网站的访问方法及浏览器,通过在浏览器侧检测页面网址的网页请求信息,进而在浏览器上的页面跳转至网银网站前,预先在浏览器上下载与安装与网银网站相关的安全控件,从而解决了在操作网银网站时需要另外下载与安装安全控件,以及在安装完成后还要刷新页面或重新启动浏览器所带来操作不便的问题。
为了解决上述问题,本发明揭示了一种网银类网站的访问方法,包括:在浏览器侧检测到一页面网址的网页请求信息;通过浏览器判断出页面网址为浏览器的网银网站配置文件中的网银类网站的网址信息,其中网银网站配置文件包括网银类网站的网址信息和其对应的安全插件信息;浏览器依据对应的安全插件信息,发起对网银类网站上对应的安全插件的下载;以及在浏览器侧安装下载的安全插件,并通过使用安装的安全插件访问网银类网站。
本发明还揭示了一种浏览器,适用于访问网银类网站。浏览器包括存储模块、监测模块、控制模块、下载模块以及安装模块。存储模块保存有网银网站配置文件,其中网银网站配置文件包括网银类网站的网址信息和其对应的安全插件信息。监测模块用以检测一页面网址的网页请求信息。控制模块耦接于存储模块与监测模块,用以根据网址信息访问网银类网站以及用以接收监测模块的检测结果,并且据以判断页面网址是否为网银网站配置文件中的网银类网站的网址信息。下载模块耦接于控制模块,用以根据控制模块的判断结果以及存储模块中的对应的安全插件信息,发起对网银类网站上对应的安全插件的下载。安装模块耦接于下载模块与控制模块,用以执行安全插件的安装程序,使控制模块可以通过安装的安全插件访问网银类网站。
本发明还揭示了一种计算机程序,包括计算机可读代码,当所述计算机可读代码在终端设备上运行时,导致所述终端设备执行如上中的任一个所述的网银类网站的访问方法。
本发明还揭示了一种计算机可读介质,其中存储了如上所述的计算机程序。
与现有技术相比,本发明可以获得包括以下技术效果:
本发明的网银类网站的访问方法及浏览器,在网银类网站的网页请求信息发送至相应的网银服务器前,在浏览器侧进行拦截,并且在浏览器的当前面页跳转至网银网站的页面前,预先进行此网银网站的安全控件的下载与安装操作,让浏览器在完成页面跳转后,可以直接的依据所安装的安全控件访问网银网站。由于安全控件的下载与安装操作是在进入网银网站之前就已完成的,因此在访问网银网站时,就不需要进行繁锁的下载与安装程序,也就不需要执行刷新页面或重启浏览器的操作。并且,对于安全控件的下载与安装操作是在浏览器侧自动完成,因此当用户在多个不同的网银网站之间进行操作时,也就不用各别的完成安全控件的下载与安装,从而具有相当大的便利性,并且大幅提升网银网站使用时的安全性。
上述说明仅是本发明技术方案的概述,为了能够更清楚了解本发明的技术手段,而可依照说明书的内容予以实施,并且为了让本发明的上述和其它目的、特征和优点能够更明显易懂,以下特举本发明的具体实施方式。
通过阅读下文优选实施方式的详细描述,各种其他的优点和益处对于本领域普通技术人员将变得清楚明了。附图仅用于示出优选实施方式的目的,而并不认为是对本发明的限制。而且在整个附图中,用相同的参考符号表示相同的部件。在附图中:
图1是本发明实施例的浏览器的方块示意图;
图2和图3是本发明第一方法实施例的流程图;
图4是本发明另一方法实施例的流程图;
图5是本发明某些方法实施例的流程图;
图6是本发明第二方法实施例的流程图;
图7示意性地示出了用于执行根据本发明的方法的终端设备的框图;以及
图8示意性地示出了用于保持或者携带实现根据本发明的方法的程序代码的存储单元。
以下将配合附图及实施例来详细说明本发明的实施方式,藉此对本发明如何应用技术手段来解决技术问题并达成技术功效的实现过程能充分理解并据以实施。
如在说明书及权利要求当中使用了某些词汇来指称特定组件。本领域技术人员应可理解,硬件制造商可能会用不同名词来称呼同一个组件。本说明书及权利要求并不以名称的差异来作为区分组件的方式,而是以组件在功能上的差异来作为区分的准则。如在通篇说明书及权利要求当中所提及的“包含”为一开放式用语,故应解
释成“包含但不限定于”。“大致”是指在可接收的误差范围内,本领域技术人员能够在一定误差范围内解决所述技术问题,基本达到所述技术效果。此外,“耦接”或“电性连接”一词在此包含任何直接及间接的电性耦接手段。因此,若文中描述一第一装置耦接于一第二装置,则代表所述第一装置可直接电性耦接于所述第二装置,或通过其它装置或耦接手段间接地电性耦接至所述第二装置。说明书后续描述为实施本发明的较佳实施方式,然所述描述乃以说明本发明的一般原则为目的,并非用以限定本发明的范围。本发明的保护范围当视所附权利要求所界定者为准。
还需要说明的是,术语“包括”、“包含”或者其任何其它变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法、商品或者***不仅包括那些要素,而且还包括没有明确列出的其它要素,或者是还包括为这种过程、方法、商品或者***所固有的要素。在没有更多限制的情况下,由语句“包括一个......”限定的要素,并不排除在包括所述要素的过程、方法、商品或者***中还存在另外的相同要素。
实施例描述
如图1所示,本发明实施例所揭露的浏览器10适用于访问网银类网站,此网银类网站可以是不同的网银网站或是那些在浏览页面上具有登录这些网银网站的网址信息的其他网站,例如购物网站或其他涉及用户帐号登录的网站等,其中浏览器10通过互联网与网银网站相应的网银服务器进行信息交互。
本实施例所揭露的浏览器10包括存储模块110、控制模块120、监测模块130、下载模块140以及安装模块150。存储模块110保存有网银网站配置文件,此网银网站配置文件中除了至少记载有网银类网站的网址信息和其对应的安全插件信息外,还可以选择性的记载与所述网银类网站相应的网银名称、网银网址、网银徽标、用以确定对应的安全插件信息是否已经安装的标识信息、安全插件的获取路径、在浏览器侧已经安装过的安全插件的对应备份以及上述的组合其中之一。
控制模块120分别耦接于存储模块110与监测模块130,其中监测模块130用以检测一页面网址的网页请求信息,此页面网址与网银类网站相关联,其可以是浏览器10上当前页面的网址、即将跳转的目标页面的网址、或是显示于当前页面上与网银类网站的页面相关联的网址信息等。控制模块120即用以接收监测模块130的检测结果,若监测模块130检测到页面网址的网页请求信息,控制模块120进一步根据网银网站配置文件判断此页面网址是否为网银网站配置文件中的网银类网站的网址信息,若是,控制模块120即根据网址信息访问相应的网银类网站,若否,控制模块120控制浏览器10的当前页面跳转至与此网页网址相应的目标页面。
下载模块140分别耦接于控制模块120和存储模块110,用以根据控制模块120的判断结果以及网银网站配置文件中的安全插件信息,发起对网银类网站上对应的安全插件的下载,其中当控制模块120判断页面网址为网银网站配置文件中的网银
类网站的所述网址信息,下载模块140在浏览器侧执行安全插件的下载程序。安装模块150耦接于下载模块140与控制模块130,用以在安全插件下载后执行相应的安装程序,使控制模块130可以通过已安装的安全插件访问对应的网银类网站。并且,对于网银类网站的访问,控制模块130是在浏览器10上加载与上述页面网址相应的网银网页,然后前往此网银网页进行访问,其中网银网页的加载方式可以是在独立的网页进程中进行或是在沙盒中进行,以确保安全。
此外,在本发明的某些实施例中,在上述安装模块150执行安装程序前,控制模块120还用以检查当前的安装环境是否安全,若是,安装模块150执行安装下载的安全插件的操作,若否,控制模块120在浏览器的安装页面上弹出对应的警示窗口,用以作为安装环境的安全级别进行更新作业的用户界面,让用户可以在安全的环境下进行浏览器10的相关操作,并且确保操作网银类网站时的安全性。同样地,在本发明的另一实施例中,控制模块120还用以对页面网址进行安全扫描,并且在浏览器10的当前页面上显示扫描结果,让用户可以根据扫描结果决定是否继续前往此页面网址进行访问,从而提高页面网址的访问操作的安全性。
进一步地,在本发明的一些实施例中,控制模块120对访问过的网银类网站的用户信息,先进行加密程序后,再将加密信息保存于存储模块110中,并且在浏览器再次访问相同的网银类网站时,通过控制模块120对保存的加密信息进行解密与填充,然后根据解密与填充后的加密信息登录访问过的网银类网站,从而简化登录网银类网站的操作程序。
同时,对于已经访问过的网银类网站,控制模块120会将其网址信息和对应的安全插件信息写入网银网站配置文件中,并且在再次访问相同的网银类网站时,从存储模块110中读取网银网站配置文件,其中在网银网站配置文件的读取或写入操作前,控制模块120先对读取或写入操作进行签名运算处理,以便于取得读取或写入操作的权限。
承上,对于已经访问过的网银类网站,监测模块130会以预定频率主动地至网银类网站的网银服务器检测是否有更新版本的安全插件,例如在浏览器开启时立即执行或者是相隔预定天数后执行,并且当检测到有更新版本的安全插件时,通过控制模块120传送更新讯息至下载模块140,从而至网银服务器下载更新版本的安全插件,让安装模块150能以更新版本的安全插件替代已安装的安全插件,让控制模块120能以最新版本的安全插件访问网银类网站;反之,若否,下载模块140不需进行安全插件的下载操作。
以下通过一些方法实施例对本发明在访问网银类网站时所使用的方法做进一步说明。
如图2所示,本发明第一方法实施例所揭露的网银类网站的访问方法包括以下
步骤:
步骤S110,在浏览器侧检测到一页面网址的网页请求信息;
步骤S120,通过浏览器判断出页面网址为浏览器的网银网站配置文件中的网银类网站的网址信息;
步骤S130,浏览器依据对应的安全插件信息,发起对网银类网站上对应的安全插件的下载;以及
步骤S140,在浏览器侧安装下载的安全插件,并通过使用安装的安全插件访问网银类网站。
请参照图1和图2,在本发明第一方法实施例所揭露的网银类网站的访问方法中,首先,在浏览器侧检测当前页面上是否有某一页面网址的网页请求信息,此网页请求信息可以是通过用户在浏览器10的当前页面上直接输入网银网站的登录网址或者是通过搜索引擎执行页面跳转而产生的。此时,浏览器10在根据页面网址跳转至相应的网页前,通过监测模块130检测到当前页面上具有网页请求信息(步骤S110),并且将检测结果传送至控制模块120。此时,控制模块120一方面解析页面网址的内容,另一方面从存储模块110中读取网银网站配置文件中所记载的网银类网站的网址信息,并且比对两者是否相同,若是,浏览器10判断在当前页面上发起网页请求信息的页面网址就是配置文件中所记载的网银类网站的网址信息(步骤S120),并且据以执行后续下载与安全控件的操作;反之,若否,浏览器10判断此页面网址与网银类网站无关,从而根据页面网址的内容从当前页面跳转至相应的目标页面。
因此,在上述操作中,当检测到页面网址的网页请求信息时,此网页请求信息会先被浏览器10的检测模块拦截,并且发送至控制模块120进行判断程序。如图1至图3所示,也就是说,在步骤S110中,若页面网址就是网银类网站的网址信息时,其详细的操作流程可以是但并不局限于:在浏览器10的当前页面上向网银类网站发起网页请求信息(步骤S111),其中网页请求信息的发起方式可以是在浏览器10的当前页面上弹出与网银类网站的网址信息对应的确认窗口,然后通过确认窗口来触发,例如通过用户在确认窗口上进行点击来触发,但并不以所述为限。并且,在请求发起的同时,即被浏览器10的监测模块130检测到,并且对网页请求信息进行拦截(步骤S112),然后将网页请求信息中的网页网址发送到控制模块120进行比对与判断程序(步骤S113)。
此外,在页面网址的比对与判断上,由于配置文件中所记载的网银类网站的网址信息,可以是一个或者是某几个特定网银类网站的网址信息,也可以是涵盖了当前所有的网银类网站的网址信息。因此,如图1和图4所示,在本发明的另一方法实施例中,若配置文件中记载了多个网银类网站的网址信息,则在上述与浏览器
10判断页面网址的相关操作中,浏览器10即根据网银网站配置文件中所记载的多个不同的网银类网站的网址信息对页面网址进行比对,以便于决定此页面网址是否匹配于多个不同的网银类网站的网址信息的其中之一(步骤S121);若是,浏览器10判断出页面网址为相应的网银类网站的网址信息(步骤S122);以及若否,浏览器10判断页面网址为非网银类网站的网址信息(步骤S123)。
承上,在本发明第一方法实施例所揭露的网银类网站的访问方法中,当浏览器10判断出页面网址为网银类网站的网址信息后,进一步地,在浏览器10上加载与页面网址相应的网银网页,此加载操作可以是在一个独立的网页进程中进行,也可以在沙箱中单独加载网银网页,以便于在沙箱中进行网银网页的相关操作,从而确保操作时的安全性。此外,在本发明的其他实施例中,在网银网页加载后,选择性地对当前访问的页面网址进行安全扫描,并且在浏览器10上显示扫描结果,以确定当前访问的网银网页是否安全。
接着,浏览器10依据网银网站配置文件中对应的安全插件信息,通过下载模块140对网银类网站发起对应的安全插件的下载(步骤S130),并且当前所下载的安全插件可以是网银服务器上最新版本的安全插件或者是全部的安全插件。其中,对于安全插件的下载程序,可以是在浏览器10的当前页面上弹出提示窗口,然后通过提示窗口执行确认下载的指令来触发下载程序;或者是由浏览器10的下载模块140自动地执行。
可以理解的是,在某些情况下,对于已访问过的网银类网站,在浏览器侧已经安装过相应的安全插件,因此,若在上述的下载程序中再次下载这些已安装过的安全插件,除了造成下载程序相当耗时外,还会占用到浏览器的其他资源。因此,如图1和图5所示,在本发明的某些方法实施例中,会先根据网银网站配置文件中所记载的标识信息来确认当前即将下载的安全插件是否已安装(S131),例如通过浏览器的控制模块120比对标识信息与此安全插件信息的版本、代码长度、相关文件的版本信息或相关的注册表信息等。若比对结果为已安装,浏览器10的下载模块140即停止执行安全插件的下载程序;反之,若尚未安装,浏览器10即依据网银网站配置表中所记载的安全插件的获取路径,从相应的网银服务器下载对应的安全插件,例如最新版本的安全插件。也就是说,当浏览器侧的安全控件与网银服务器的安全控件相同时,浏览器10停止安全控件的下载程序;并且当浏览器侧的安全控件与网银服务器的安全控件不同时,浏览器10即下载网银服务器中最新的安全控件替代本地的安全控件。
请参照图1和图2,当安全插件下载完成后,通过浏览器10的安装模块150在浏览器侧安装下载的安全插件,并通过控制模块120使用安装的安全插件访问网银类网站(S140)。值得说明的是,在本实施例中,在安装下载的安全插件的操作前
还可以选择性的先检查浏览器10当前的安装环境是否安全,若是,即执行下载的安全插件的安装操作;反之,若检查结果是有安全疑虑的,则在浏览器10的当前页面上弹出对应的警示窗口,并且通过警示窗口或其他与***安全性有关的修复窗口对当前安装环境的安全级别进行更新作业,例如进行安全方面的升级或者补救措施,然后再进行安全控件的安装程序。
此外,在本发明的其中一方法实施例中,对于已经访问过的网银类网站,会在浏览器侧将那些访问过的网址信息和安全插件信息写入网银网站配置文件中,其中对于网银网站配置文件的读取或写入操作,首先对读取或写入操作进行签名运算处理,然后再开放读取或写入操作的权限,这样就可以保证网银网站配置文件的完整性和不被恶意修改。
并且,对于访问过的网银类网站的用户信息,在浏览器侧会进行加密保存,并且在通过浏览器再次访问相同的网银类网站时,会先在浏览器侧对保存的加密信息进行解密与填充,然后根据解密与填充后的加密信息,让用户可以直接在浏览器上进行登录并且使用已访问过的网银类网站。同时,还可以选择性的在浏览器上的其中一功能选项上显示与访问过的网银类网站相应的网银名称和网银徽标,以方便用户下次直接进行网银网站的登录使用。
同时,由于技术的发展和木马病毒的杀伤力越来越强,因此在网银服务器端的安全控件可能随时会有更新,因此在本发明的一些方法实施例中,在浏览器侧安装了下载的安全插件后,浏览器会以预定频率主动地至已访问过的网银类网站的网银服务器检测是否有更新版本的安全插件,例如在每次浏览器连接互联网时,或是在每次检测到即将跳转的网银类网站的网页请求信息时。若浏览器检测到网银服务器上有更新版本的安全插件时,浏览器主动地从网银服务器上下载更新版本的安全插件,并且以更新版本的安全插件替代已安装的安全插件,使浏览器侧的安全插件随时保持在最新版本的安全插件的状态,以避免木马病毒或其他恶意软件对客户端发起可能的攻击。反之,若浏览器未检测到更新版本的安全插件,表示当前浏览器侧所安装的安全插件已经是最新版本的安全插件,因此浏览器不动作。
承上,由于在浏览器侧对于安全插件的版本的检测与更新是在浏览器的后台进行的,因此在检测与更新过程中,对于用户正常操作计算器***或通过浏览器执行访问网站的操作,不会造成干扰。这种更新不需要登录网银页面,在浏览器侧就可以完成更新,并且不需要用户手动执行,因此具有相当大的便利性。
如图6所示,本发明所揭露的第二方法实施例与第一方法实施例在网银类网站的访问方法上大致相同,两者间的差异在于,第一方法实施例所揭露的网银类网站的访问方法中,网页请求信息是通过用户在浏览器10的当前页面上直接输入网银网站的登录网址或者是通过搜索引擎执行页面跳转而产生的。而在第二方法实施例
中,网页请求信息是由浏览器根据当前的网页环境来判断网页请求信息是否发起。因此,在本发明第二方法实施例所揭露的网银类网站的访问方法中,在浏览器侧检测到页面网址的网页请求信息的操作包括:
步骤S210,在浏览器的当前页面上检测并判断是否具有登录网银类网站的网址信息。
也就是在浏览器的当前页面上检测是否具有登录网银类网站的网址信息,例如,当浏览器侧的当前页面为购物网站的页面或者是其他具有网上支付功能的页面,在这些页面上为了方便用户选择支付方式,通常会显示有一个或多个网银名称或网银网银徽标(logo),用以作为登录相应网银网站的入口,因此在这些入口中皆设置有相应的网银网站的网址信息。浏览器即依据这些入口的存在与否来进行判断。
此外,在判断的过程中,浏览器根据网银网站配置文件比对网址信息中的页面网址是否匹配于多个不同的网银类网站的页面网址的其中之一。若是,浏览器判断当前页面上具有登录网银类网站的网址信息;若否,浏览器即判断当前页面与登录网银类网站的网址信息无关。因此,在浏览器完成上述的判断操作后,依据判断结果执行以下步骤的其中之一。
步骤S220,若是,浏览器默认网页请求信息在当前页面上发起,并且从网址信息中获取页面网址。
步骤S230,若否,浏览器侧不动作。
其中,当浏览器判断当前页面上具有登录网银类网站的网址信息后,浏览器就主动的认为当前页面上存在有一个或多个与网银网站的网址信息相应的网页请求信息,并且从这些网址信息内获取对应的页面网址。然后,接着执行后续下载与安装安全控件的操作。由于安全控件的下载与安装操作与上述实施例大致相同,在此不再赘述。
反之,当浏览器判断当前页面与登录网银类网站的网址信息无关时,也就表示在当前页面上没有登录网银类网站的需求或动机,浏览器也就不需要执行安全控件的下载与安装操作。
在本发明的第二方法实施例中,在浏览器侧判断用户在浏览器的操作过程中,可能有登录网银网站的使用需求,而预先将与这些网银网站相关联的安全控件下载至浏览器侧,并且完成安装程序。因此,当用户通过当前页面上的网银网站的入口进入网银网站的登录页面时,就可以立即的在安全的环境下进行网银网站的登录操作,从而省略了手动下载与安装安全控件的操作,并且不用执行刷新页面的操作。
基于上述,本发明所揭露的网银类网站的访问方法,在浏览器从当前页面跳转至网银类网站的操作页面前,在浏览器侧即已完成安全插件的安装。因此,当页面
跳转至网银网站或网银类网站的操作页面时,可避免安全控件安装提示在操作页面上自动弹出而影响网操作页面的使用。同时,在操作过程中,不需要再进行页面的刷新即可让已安装的安全控件正常使用,从而避免从其他网站跳转过来的表单失效的问题发生,因此在浏览器的操作上相当灵活、方便。
上述说明示出并描述了本发明的若干优选实施例,但如前所述,应当理解本发明并非局限于本文所披露的形式,不应看作是对其他实施例的排除,而可用于各种其他组合、修改和环境,并能够在本文所述发明构想范围内,通过上述教导或相关领域的技术或知识进行改动。而本领域人员所进行的改动和变化不脱离本发明的精神和范围,则都应在本发明所附权利要求的保护范围内。
本发明的各个部件实施例可以以硬件实现,或者以在一个或者多个处理器上运行的软件模块实现,或者以它们的组合实现。本领域的技术人员应当理解,可以在实践中使用微处理器或者数字信号处理器(DSP)来实现根据本发明实施例的浏览器中的一些或者全部部件的一些或者全部功能。本发明还可以实现为用于执行这里所描述的方法的一部分或者全部的设备或者装置程序(例如,计算机程序和计算机程序产品)。这样的实现本发明的程序可以存储在计算机可读介质上,或者可以具有一个或者多个信号的形式。这样的信号可以从因特网网站上下载得到,或者在载体信号上提供,或者以任何其他形式提供。
例如,图7示出了可以实现根据本发明的网银类网站的访问方法的终端设备,例如PC、手机等。该终端设备传统上包括处理器710和以存储器720形式的计算机程序产品或者计算机可读介质。存储器720可以是诸如闪存、EEPROM(电可擦除可编程只读存储器)、EPROM、硬盘或者ROM之类的电子存储器。存储器720具有用于执行上述方法中的任何方法步骤的程序代码731的存储空间730。例如,用于程序代码的存储空间730可以包括分别用于实现上面的方法中的各种步骤的各个程序代码731。这些程序代码可以从一个或者多个计算机程序产品中读出或者写入到这一个或者多个计算机程序产品中。这些计算机程序产品包括诸如硬盘,紧致盘(CD)、存储卡或者软盘之类的程序代码载体。这样的计算机程序产品通常为如参考图8所述的便携式或者固定存储单元。该存储单元可以具有与图7的终端设备中的存储器720类似布置的存储段、存储空间等。程序代码可以例如以适当形式进行压缩。通常,存储单元包括计算机可读代码731’,即可以由例如诸如710之类的处理器读取的代码,这些代码当由终端设备上运行时,导致该终端设备执行上面所描述的方法中的各个步骤。
本文中所称的“一个实施例”、“实施例”或者“一个或者多个实施例”意味着,结合实施例描述的特定特征、结构或者特性包括在本发明的至少一个实施例中。此外,请注意,这里“在一个实施例中”的词语例子不一定全指同一个实施例。
在此处所提供的说明书中,说明了大量具体细节。然而,能够理解,本发明的实施例可以在没有这些具体细节的情况下被实践。在一些实例中,并未详细示出公知的方法、结构和技术,以便不模糊对本说明书的理解。
应该注意的是上述实施例对本发明进行说明而不是对本发明进行限制,并且本领域技术人员在不脱离所附权利要求的范围的情况下可设计出替换实施例。在权利要求中,不应将位于括号之间的任何参考符号构造成对权利要求的限制。单词“包含”不排除存在未列在权利要求中的元件或步骤。位于元件之前的单词“一”或“一个”不排除存在多个这样的元件。本发明可以借助于包括有若干不同元件的硬件以及借助于适当编程的计算机来实现。在列举了若干装置的单元权利要求中,这些装置中的若干个可以是通过同一个硬件项来具体体现。单词第一、第二、以及第三等的使用不表示任何顺序。可将这些单词解释为名称。
此外,还应当注意,本说明书中使用的语言主要是为了可读性和教导的目的而选择的,而不是为了解释或者限定本发明的主题而选择的。因此,在不偏离所附权利要求书的范围和精神的情况下,对于本技术领域的普通技术人员来说许多修改和变更都是显而易见的。对于本发明的范围,对本发明所做的公开是说明性的,而非限制性的,本发明的范围由所附权利要求书限定。
Claims (30)
- 一种网银类网站的访问方法,包括:在浏览器侧检测到一页面网址的网页请求信息;通过浏览器判断出所述页面网址为所述浏览器的网银网站配置文件中的网银类网站的网址信息,其中所述网银网站配置文件包括所述网银类网站的网址信息和其对应的安全插件信息;所述浏览器依据所述安全插件信息,发起对所述网银类网站上对应的安全插件的下载;以及在所述浏览器侧安装下载的所述安全插件,并通过使用安装的所述安全插件访问所述网银类网站。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,所述网银网站配置文件还包括与所述网银类网站相应的网银名称、网银网址、网银徽标、用以确定所述安全插件信息是否已经安装的标识信息、所述安全插件的获取路径以及所述浏览器侧已经安装过的安全插件的对应备份。
- 如权利要求2所述的网银类网站的访问方法,其特征在于,在所述浏览器侧安装下载的所述安全插件的操作后,还包括:在所述浏览器的一功能选项上显示与访问过的所述网银类网站相应的所述网银名称和所述网银徽标。
- 如权利要求2所述的网银类网站的访问方法,其特征在于,在所述浏览器依据所述安全插件信息,发起对所述网银类网站上对应的所述安全插件的下载的操作中,包括:根据所述标识信息确认所述安全插件是否已安装;若是,所述浏览器停止执行所述安全插件的下载程序;以及若否,所述浏览器依据所述安全插件的获取路径进行所述安全插件的下载程序。
- 如权利要求4所述的网银类网站的访问方法,其特征在于,在根据所述标识信息确认所述安全插件是否已安装的操作中,所述浏览器比对所述标识信息和所述安全插件信息的版本、代码长度、相关文件的版本信息或相关的注册表信息。
- 如权利要求4所述的网银类网站的访问方法,其特征在于,所述浏览器侧依据所述安全插件的获取路径进行所述安全插件的下载程序的操作包括:在所述浏览器的当前页面上弹出提示窗口;以及通过所述提示窗口触发所述下载程序。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器 侧检测到所述页面网址的所述网页请求信息的操作前,还包括:在所述浏览器的当前页面上弹出与所述网址信息对应的确认窗口;以及通过所述确认窗口触发所述网页请求信息。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器侧检测到所述页面网址的所述网页请求信息的操作包括:在所述浏览器的当前页面上向所述网银类网站发起所述网页请求信息;所述浏览器检测到所述网页请求信息,并且拦截所述网页请求信息;以及发送所述网页请求信息中的所述网页网址至所述浏览器的控制模块进行判断程序。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,还包括:在所述浏览器侧对访问过的所述网银类网站的用户信息进行加密保存;在所述浏览器再次访问所述网银类网站时,在所述浏览器侧对保存的加密信息进行解密与填充;以及根据解密与填充后的加密信息通过所述浏览器登录访问过的所述网银类网站。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器侧安装下载的所述安全插件,并通过使用安装的所述安全插件访问所述网银类网站的操作后,还包括:在所述浏览器侧将访问过的所述网银类网站的网址信息和其对应的安全插件信息写入所述网银网站配置文件中;以及通过所述浏览器判断出所述页面网址为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息的操作还包括:通过所述浏览器的控制模块读取所述网银网站配置文件;其中在所述网银网站配置文件的读取或写入操作前,先对所述读取或写入操作进行签名运算处理,然后再开放所述读取或写入操作的权限。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器侧安装下载的所述安全插件,并通过使用安装的所述安全插件访问所述网银类网站的操作前,还包括:检查所述浏览器当前的安装环境是否安全;若是,执行安装下载的所述安全插件的操作;若否,在所述浏览器的安装页面上弹出对应的警示窗口;以及通过所述警示窗口对所述安装环境的安全级别进行更新作业。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在通过所述浏览器判断出所述页面网址为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息的操作以及所述浏览器依据所述安全插件信息,发起对所述网银类网站上对应的所述安全插件的下载的操作之间,还包括:对所述页面网址进行安全扫描;以及在所述浏览器的当前页面上显示扫描结果。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在通过所述浏览器判断出所述页面网址为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息的操作以及所述浏览器依据所述安全插件信息,发起对所述网银类网站上对应的所述安全插件的下载的操作之间,还包括:在所述浏览器上加载与所述页面网址相应的网银网页,其中所述网银网页的加载是在独立的网页进程中进行或是在沙箱中进行。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,通过所述浏览器判断出所述页面网址为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息的操作包括:在所述浏览器的当前页面上判断所述页面网址是否为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息;若是,在所述浏览器侧执行所述安全插件的下载程序;以及若否,所述浏览器从当前页面跳转至与所述网页网址相应的目标页面。
- 如权利要求14所述的网银类网站的访问方法,其特征在于,通过所述浏览器判断出所述页面网址为所述浏览器的所述网银网站配置文件中的所述网银类网站的所述网址信息的操作包括:所述浏览器根据所存储的所述网银网站配置文件比对所述页面网址是否匹配于所述网银网站配置文件中所记载的多个不同的网银类网站的网址信息的其中之一;若是,所述浏览器判断出所述页面网址为相应的所述网银类网站的所述网址信息;以及若否,所述浏览器判断所述页面网址为非网银类网站的网址信息。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器侧检测到所述页面网址的所述网页请求信息的操作包括:在所述浏览器的当前页面上检测并判断是否具有登录所述网银类网站的所述网址信息;若是,所述浏览器默认所述网页请求信息在所述当前页面上发起,并且从所述网址信息中获取所述页面网址;以及若否,所述浏览器不动作。
- 如权利要求16所述的网银类网站的访问方法,其特征在于,在所述浏览器侧的所述当前页面上检测并判断是否具有登录所述网银类网站的所述网址信息的操作包括:所述浏览器根据所述网银网站配置文件比对所述网址信息中的页面网址是否匹配于多个不同的网银类网站的页面网址的其中之一;若是,所述浏览器判断所述当前页面上具有登录所述网银类网站的所述网址信息;以及若否,所述浏览器判断所述当前页面与登录所述网银类网站的所述网址信息无关。
- 如权利要求1所述的网银类网站的访问方法,其特征在于,在所述浏览器依据所述对应的安全插件信息,发起对所述网银类网站上对应的安全插件的下载的操作中,所述浏览器当前下载的所述安全插件为最新的安全插件。
- 如权利要求1所述的网银类网站的访问方法,在所述浏览器侧安装下载的所述安全插件,并通过使用安装的所述安全插件访问所述网银类网站的操作后,还包括:所述浏览器以预定频率主动地至所述网银类网站的网银服务器检测是否有更新版本的安全插件;若是,所述浏览器从所述网银服务器下载所述更新版本的安全插件,并且以所述更新版本的安全插件替代已安装的所述安全插件;以及若否,所述浏览器不动作。
- 一种浏览器,适用于访问网银类网站,所述浏览器包括:存储模块,保存有网银网站配置文件,其中所述网银网站配置文件包括网银类网站的网址信息和其对应的安全插件信息;监测模块,用以检测一页面网址的网页请求信息;控制模块,分别耦接于所述存储模块与所述监测模块,用以根据所述网址信息访问所述网银类网站以及用以接收所述监测模块的检测结果,并且判断所述页面网址是否为所述网银网站配置文件中的所述网银类网站的所述网址信息;下载模块,分别耦接于所述控制模块与所述存储模块,用以根据所述控制模块的判断结果以及所述网银网站配置文件中的所述安全插件信息,发起对所述网银类网站上对应的安全插件的下载;以及安装模块,分别耦接于所述下载模块与所述控制模块,用以执行所述安全插件的安装程序,使所述控制模块可以通过安装的所述安全插件访问所述网银类网站。
- 如权利要求20所述的浏览器,其特征在于,所述网银网站配置文件还包括与所述网银类网站相应的网银名称、网银网址、网银徽标、用以确定所述安全插件信息是否已经安装的标识信息、所述安全插件的获取路径以及已经安装过的安全插件的对应备份。
- 如权利要求20所述的浏览器,其特征在于,所述控制模块还用以对访问 过的所述网银类网站的用户信息进行加密以及保存于所述存储模块中,并且在所述浏览器再次访问所述网银类网站时,所述控制模块对保存的加密信息进行解密与填充;以及根据解密与填充后的加密信息登录访问过的所述网银类网站。
- 如权利要求20所述的浏览器,其特征在于,所述控制模块还用以将访问过的所述网银类网站的网址信息和其对应的安全插件信息写入所述网银网站配置文件中、从存储模块中读取所述网银网站配置文件、以及在所述网银网站配置文件的读取或写入操作前,对所述读取或写入操作进行签名运算处理后,取得所述读取或写入操作的权限。
- 如权利要求20所述的浏览器,其特征在于,所述控制模块还用以检查当前的安装环境是否安全,若是,所述安装模块执行安装下载的所述安全插件的操作,若否,所述控制模块在所述浏览器的安装页面上弹出对应的警示窗口,用以作为所述安装环境的安全级别进行更新作业的用户界面。
- 如权利要求20所述的浏览器,其特征在于,所述控制模块还用以对所述页面网址进行安全扫描以及在所述浏览器的当前页面上显示扫描结果。
- 如权利要求20所述的浏览器,其特征在于,所述控制模块还用以在所述浏览器上加载与所述页面网址相应的网银网页,且所述网银网页的加载是在独立的网页进程中进行或是在沙盒中进行。
- 如权利要求20所述的浏览器,其特征在于,当所述控制模块判断所述页面网址为所述网银网站配置文件中的所述网银类网站的所述网址信息,所述下载模块在所述浏览器侧执行所述安全插件的下载程序;以及当所述控制模块判断所述页面网址并非所述网银网站配置文件中的所述网银类网站的所述网址信息,所述控制模块控制所述浏览器的当前页面跳转至与所述网页网址相应的目标页面。
- 如权利要求20所述的浏览器,其特征在于,所述监测模块还用以通过预定频率主动地至所述网银类网站的网银服务器检测是否有更新版本的安全插件,若是,所述下载模块从所述网银服务器下载所述更新版本的安全插件,使所述安装模块以所述更新版本的安全插件替代已安装的所述安全插件,若否,所述下载模块不动作。
- 一种计算机程序,包括计算机可读代码,当所述计算机可读代码在终端设备上运行时,导致所述终端设备执行根据权利要求1—19中的任一个所述的网银类网站的访问方法。
- 一种计算机可读介质,其中存储了如权利要求29所述的计算机程序。
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US15/314,824 US20170243182A1 (en) | 2014-05-30 | 2015-05-27 | Method of Visiting Online Banking Website and Browser |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201410239295.8A CN104021015A (zh) | 2014-05-30 | 2014-05-30 | 网银类网站的访问方法及浏览器 |
CN201410239295.8 | 2014-05-30 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2015180635A1 true WO2015180635A1 (zh) | 2015-12-03 |
Family
ID=51437787
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2015/079876 WO2015180635A1 (zh) | 2014-05-30 | 2015-05-27 | 网银类网站的访问方法及浏览器 |
Country Status (3)
Country | Link |
---|---|
US (1) | US20170243182A1 (zh) |
CN (1) | CN104021015A (zh) |
WO (1) | WO2015180635A1 (zh) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN112149097A (zh) * | 2020-09-22 | 2020-12-29 | 龙芯中科(合肥)技术有限公司 | 身份认证方法、装置、设备及存储介质 |
Families Citing this family (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN104021015A (zh) * | 2014-05-30 | 2014-09-03 | 北京奇虎科技有限公司 | 网银类网站的访问方法及浏览器 |
CN104394156B (zh) * | 2014-11-27 | 2018-06-22 | 北京国双科技有限公司 | 域名验证方法、装置及*** |
CN106126538B (zh) * | 2016-06-14 | 2020-09-29 | 百度在线网络技术(北京)有限公司 | 页面的转化处理方法及装置 |
CN106850563B (zh) * | 2016-12-28 | 2020-11-24 | 百富计算机技术(深圳)有限公司 | 访问支付终端的方法及装置 |
CN107465682B (zh) * | 2017-08-10 | 2019-11-19 | 深圳市华傲数据技术有限公司 | 爬虫登录目标网站的实现方法及*** |
CN109284458A (zh) * | 2018-09-28 | 2019-01-29 | 平安普惠企业管理有限公司 | 网页显示方法、装置、计算机设备及存储介质 |
CN111681104A (zh) * | 2020-06-08 | 2020-09-18 | 中国银行股份有限公司 | 互联网银行自助注册***及方法 |
CN112162795B (zh) * | 2020-10-09 | 2023-12-12 | 广州博冠信息科技有限公司 | 一种插件启动方法、装置、计算机设备和存储介质 |
CN113885965A (zh) * | 2021-10-19 | 2022-01-04 | 统信软件技术有限公司 | 一种浏览器中扩展程序的集成方法、计算设备及存储介质 |
CN114244826B (zh) * | 2022-01-18 | 2023-11-28 | 杭州盈高科技有限公司 | 网页标识信息的共享方法、装置、存储介质及处理器 |
US20230403300A1 (en) * | 2022-06-09 | 2023-12-14 | Palo Alto Networks, Inc. | Rendering contextual security information determined in-browser with web pages of cloud and saas vendors |
CN115208677B (zh) * | 2022-07-19 | 2024-01-30 | 光大科技有限公司 | 一种恶意网址识别方法及装置 |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2007016869A2 (en) * | 2005-08-07 | 2007-02-15 | Metaswarm (Hongkong) Ltd. | Systems and methods of enhanced e-commerce,virus detection and antiphishing |
CN103001960A (zh) * | 2012-11-30 | 2013-03-27 | 北京奇虎科技有限公司 | 浏览器和网上银行登录方法 |
CN103023894A (zh) * | 2012-11-30 | 2013-04-03 | 北京奇虎科技有限公司 | 一种进行网上银行登录的方法和浏览器 |
CN103336775A (zh) * | 2011-06-03 | 2013-10-02 | 北京奇虎科技有限公司 | 一种浏览器中插件扩展的提供方法和*** |
CN104021015A (zh) * | 2014-05-30 | 2014-09-03 | 北京奇虎科技有限公司 | 网银类网站的访问方法及浏览器 |
Family Cites Families (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20040083474A1 (en) * | 2001-10-18 | 2004-04-29 | Mckinlay Eric | System, method and computer program product for initiating a software download |
US7631190B2 (en) * | 2004-05-27 | 2009-12-08 | Silverbrook Research Pty Ltd | Use of variant and base keys with two entities |
US8095967B2 (en) * | 2006-07-27 | 2012-01-10 | White Sky, Inc. | Secure web site authentication using web site characteristics, secure user credentials and private browser |
US8700788B2 (en) * | 2006-08-18 | 2014-04-15 | Smarticon Technologies, Llc | Method and system for automatic login initiated upon a single action with encryption |
CN102469096B (zh) * | 2010-11-19 | 2015-03-25 | 奇智软件(北京)有限公司 | 一种浏览器网银安全加载方法 |
US20120173409A1 (en) * | 2010-12-30 | 2012-07-05 | Ebay Inc. | Real-time global fund transfers |
-
2014
- 2014-05-30 CN CN201410239295.8A patent/CN104021015A/zh active Pending
-
2015
- 2015-05-27 US US15/314,824 patent/US20170243182A1/en not_active Abandoned
- 2015-05-27 WO PCT/CN2015/079876 patent/WO2015180635A1/zh active Application Filing
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2007016869A2 (en) * | 2005-08-07 | 2007-02-15 | Metaswarm (Hongkong) Ltd. | Systems and methods of enhanced e-commerce,virus detection and antiphishing |
CN103336775A (zh) * | 2011-06-03 | 2013-10-02 | 北京奇虎科技有限公司 | 一种浏览器中插件扩展的提供方法和*** |
CN103001960A (zh) * | 2012-11-30 | 2013-03-27 | 北京奇虎科技有限公司 | 浏览器和网上银行登录方法 |
CN103023894A (zh) * | 2012-11-30 | 2013-04-03 | 北京奇虎科技有限公司 | 一种进行网上银行登录的方法和浏览器 |
CN104021015A (zh) * | 2014-05-30 | 2014-09-03 | 北京奇虎科技有限公司 | 网银类网站的访问方法及浏览器 |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN112149097A (zh) * | 2020-09-22 | 2020-12-29 | 龙芯中科(合肥)技术有限公司 | 身份认证方法、装置、设备及存储介质 |
CN112149097B (zh) * | 2020-09-22 | 2023-02-28 | 龙芯中科(合肥)技术有限公司 | 身份认证方法、装置、设备及存储介质 |
Also Published As
Publication number | Publication date |
---|---|
CN104021015A (zh) | 2014-09-03 |
US20170243182A1 (en) | 2017-08-24 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2015180635A1 (zh) | 网银类网站的访问方法及浏览器 | |
US11687653B2 (en) | Methods and apparatus for identifying and removing malicious applications | |
CN105940654B (zh) | 特权静态被托管的web应用 | |
US9832210B2 (en) | Multi-core browser and method for intercepting malicious network address in multi-core browser | |
US8489922B2 (en) | Networked recovery system | |
US8667487B1 (en) | Web browser extensions | |
US9215245B1 (en) | Exploration system and method for analyzing behavior of binary executable programs | |
US20240004948A1 (en) | Image based secure access to web page | |
WO2016086767A1 (zh) | 实现浏览器安全的方法、浏览器客户端和装置 | |
CN102999718B (zh) | 一种支付网页防修改方法和装置 | |
RU2697950C2 (ru) | Система и способ выявления скрытого поведения расширения браузера | |
CN106462476A (zh) | 将应用的功能扩展到另一应用的允许扩展的相容扩展点 | |
CN102932356A (zh) | 多核浏览器中恶意网址拦截方法和装置 | |
WO2014082491A1 (zh) | 一种进行网上银行登录的方法和浏览器 | |
CN103117893A (zh) | 一种网络访问行为的监控方法、装置和一种客户端设备 | |
US20130166655A1 (en) | Cross-platform software distribution | |
US9021596B2 (en) | Correcting workflow security vulnerabilities via static analysis and virtual patching | |
CN111177727A (zh) | 漏洞检测方法及装置 | |
US11082437B2 (en) | Network resources attack detection | |
US20150134534A1 (en) | Software Protection Method for Preventing Unauthorized Usage | |
US12039309B2 (en) | Information processing apparatus, method of activating an application and storage medium | |
US9965744B1 (en) | Automatic dynamic vetting of browser extensions and web applications | |
EP4360291A1 (en) | Cross-domain storage | |
CN110427745B (zh) | 验证码获取方法、装置、电子设备和计算机可读介质 | |
CN111200579A (zh) | 一种用户登录方法、客户端和*** |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 15799414 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 15314824 Country of ref document: US |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 15799414 Country of ref document: EP Kind code of ref document: A1 |