This is something worthy doing. Let's call it self-decrypting HTML page.
It is a publicly accessible, encrypted HTML page, that can be hosted in any website, but can only be decrypted by authorized persons who know the key. JavaScript can be used to perform encryption and decryption locally at the browser. Thus what is transmitted on the net and stays at the public website is the encrypted information, which guarantees the confidentiality of the information. Some symmetric key algorithm is preferred.
A self-decrypting HTML page generator is needed to convert the to-be-protected information to a self-decrypting HTML page.
It is noted that a United States Patent 7003800 has been filed on "Self-decrypting web site pages". It seems it talks about a method pertinent to a web site.
A self-decrypting email utility performs the similar task, which uses RC4 as the cipher. Here is the JavaScript code for RC4.
Compared with another web-based confidential information system, i.e., some information is hosted on a HTTPS server and is protected by some authentication method, self-decrypting HTML page does not require an authentication method, thus no need for user management. All needed to access the confidential information is the URL of the self-decrypting HTML page and the key.
Will Google App Engine be a good platform for this? Will it be possible to use Google AdSense to generate revenue from this application?
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment