CQFramework
Security Framework Solution (Security Framework)
A web security framework capable of integrating organically with various systems. (Web Integration Security Framework)
CQFramework is a framework that enables integration between a web browser and native libraries or executable programs on a local PC system without using ActiveX.
Basic security features such as encryption and digital signatures are supported through a built-in security library within CQFramework.
Additionally, it allows seamless integration with external devices (e.g., USB drives, security tokens) when needed.
Support for Diverse Integration Formats and Protocols
CQFramework includes a built-in localhost communication feature to interface with web browsers, supporting both HTTP and HTTPS protocols.
The API for integrating with CQFramework is provided in JavaScript, and CQFramework is available in two formats-EXE and JAR-making it adaptable to various environments.
CQFramework Architecture & System Components
CQFrameworkSVC is installed on the user's computer as an executable program (EXE/JAR) and acts as the main module that processes requests received from web browsers.
Depending on the runtime environment, the SVC module can be divided into SVC and AGT (Agent) modules.
CQFrameworkAPI is a JavaScript module applied to web applications that enables necessary actions through localhost communication with CQFrameworkSVC.
It invokes built-in functionalities or external integration interfaces via CQFrameworkSVC and receives results.
CQFrameworkCrypto is a module providing built-in security-related functions and supports DLL or JAR formats.
It supports symmetric key algorithms (SEED/AES) and hash algorithms (SHA 128/256/384), and asymmetric key algorithm (RSA) is also supported in the JAR format. If necessary, it can retrieve the MAC address of the installed computer.
Core technologies of CQFramework optimized for secure PKI environments.
Support for Various Browsers
The system operates through a localhost method via a JavaScript-based integration API, making it compatible with various browsers such as Chrome, MS Edge, and Whale.
Supports HTTP/HTTPS communication
If security is not required, communicators can be integrated via HTTP, while HTTPS is supported for environments that require security. For HTTPS, an SSL certificate can be registered through the installation program to ensure compliance with browser security policies.
Checks Running Status and Launching
The API is provided to check if the CQFrameworkSVC module is running. If it is not running, it can be launched using a Custom URL Scheme (RFC 4395).
Cross-Origin Resource Sharing support
It supports preventing CORS issues that may arise when switching to localhost communication on a webpage executed through the customer’s website.
Built-in Basic Security Features
The CQFrameworkCrypto module supports basic encryption and hashing algorithms. The Java version also supports the asymmetric encryption algorithm RSA.
Support for Service Separation
In the EXE format, the system can be divided into a service and an agent, where the service handles communication, and the agent performs external integration or UI-related functions.
Support for External Module Integration
If integration with DLL/JAR/EXE or other external modules is required, it can be customized to integrate the desired external modules.
Support Environment
