Chrome browser cannot natively communicate with USB hardware security tokens (中银E盾) for digital certificate operations. This extension enables BOC web banking to invoke certificate selection and transaction signing functions on the user's USB token via native messaging.

User logs into BOC web banking → Initiates a transaction requiring certificate signing → BOC web page sends external message to extension → Extension connects to native host (中银E盾 driver) via chrome.runtime.connectNative() → Passes crypto operation to USB token → Returns signed result back to BOC web page

Target users: Bank of China (中国银行) online banking customers / Users who use 中银E盾 (CFCA USB security token) for banking authentication and transaction signing in Chrome

Cannot inspect the native messaging host application (中银E盾 driver) which is a separate installable component
The extension has minimal source code (145 lines) - it is purely a message relay with no complex logic

Monetization

No paid features detected

No evidence of any payment, subscription, billing, upgrade prompts, or premium feature gating in the extension source. The extension is a free utility bridge for BOC banking customers. It contains no payment platforms, no license checks, and no feature gating logic.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension itself has no login UI, but its sole purpose is to facilitate certificate signing and transaction operations on the Bank of China (BOC) web banking platform. Users must be logged into BOC online banking to trigger the extension's functionality. The 'session' references in eventPage.js are native messaging connection/session tracking, not user authentication sessions.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access