Enables web-based banking applications to access local USB key hardware (containing digital certificates) for cryptographic signing operations, which browsers cannot do directly without native messaging support

User visits the SRCB supply chain finance platform → the platform's web page sends an external message to the extension requesting a connection → the extension connects to the local native messaging host application → the native app interfaces with the USB key hardware → signing requests are relayed through the extension to the native host → signed results are returned to the web platform

Target users: Users of Shanghai Rural Commercial Bank's supply chain finance platform / Enterprise users performing digital certificate signing operations with USB keys

Cannot verify the native host application (not included in the extension package) — the actual USB key interface logic lives outside the extension
Cannot confirm specific banking platform login requirements without accessing the destination service

Monetization

No paid features detected

No evidence of paid features, payment APIs, subscription logic, billing checks, or upgrade prompts in the extension source code. The extension is a simple native messaging bridge with no feature gating. The 'pro' keyword hit in verified_contents.json is part of a base64-encoded hash string, not related to paid features.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension itself has no login UI or authentication logic. However, it is a bridge for the Shanghai Rural Commercial Bank (SRCB) supply chain finance platform (srcb.com/shrcb.com). The bank's web platform requires user authentication to access banking services and perform digital signing operations. The extension only enables communication between the banking web app and a native USB key host; actual user login occurs on the destination banking service.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

developer.srcb

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access