Sensitive data protection during user interface automation testing systems and methods

• US 9,152,812 B2
• Filed: 12/03/2013
• Issued: 10/06/2015
• Est. Priority Date: 12/03/2013
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Inventors: Wu, Junlong, Han, Jun
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US14/095,297
• Publication Number:
  US 20150154415A1
• Time in Patent Office: 672 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/2221 to test input/output devices or peripheral units
• CPC Class Codes: G06F 11/3684 for test design, e.g. generating new test cases
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

There is provided systems and method for sensitive data protection during user interface automation testing. A user may transmit sensitive data to the test website framework, where the sensitive data is encrypted as a data key. The encrypted data key is set by an administrator of the test website and given to the user. The user may enter the key, where the test website framework application utilizes a conversion kit to decrypt the encrypted data key for use in the website user interface automation test. However, the encrypted data key is pulled into a version control system and/or viewed in test results so that the sensitive data remains hidden from view. In various embodiments, the encrypted data key may be entered into a web element, such as a password field, where the password field displays only the encrypted data key during test results.

Claims

1. A system comprising:

a non-transitory memory storing user account information, wherein the user account information comprises encrypted user information; and

one or more hardware processors in communication with the non-transitory memory and configured to;

receive a data file including a first encrypted data key, wherein the first encrypted data key is logged in the data file, and wherein the data file is a test data file for a website user interface automation test;

determine a first cipher text corresponding to the first encrypted data key using a conversion kit, wherein the conversion kit includes a cipher mapping file and an encryption algorithm; and

decrypt the first cipher text using the encryption algorithm to obtain a first data.

2. The system of claim 1, wherein the first encrypted data key is visible in the data file.

3. The system of claim 1, wherein the first encrypted data key is entered into a web element prior to logging the first encrypted data key in the data file.

4. The system of claim 1, wherein the data file is stored by a version control system.

5. The system of claim 1, wherein the cipher mapping file include a key-value pair list corresponding to a plurality of encrypted data keys and a plurality of matching cipher text.

6. The system of claim 5, wherein the cipher mapping file determines the first cipher text.

7. The system of claim 1, wherein the first data corresponds to one of a user name, a password, and a user sensitive data.

8. The system of claim 1, wherein the encryption algorithm corresponds to an RSA algorithm.

9. A method comprising:

receiving a data file including a first encrypted data key, wherein the first encrypted data key is logged in the data file, and wherein the data file is a test data file for a website user interface automation test;

determining a first cipher text corresponding to the first encrypted data key using a conversion kit, wherein the conversion kit includes a cipher mapping file and an encryption algorithm; and

decrypting, using one or more hardware processors of a website server, the first cipher text using the encryption algorithm to obtain a first data.

10. The method of claim 9, wherein the first encrypted data key is visible in the data file.

11. The method of claim 9, wherein the first encrypted data key is entered into a web element prior to logging the first encrypted data key in the data file.

12. The method of claim 9, wherein the test data file is stored by a version control system.

13. The method of claim 9, wherein the cipher mapping file include a key-value pair list corresponding to a plurality of encrypted data keys and a plurality of matching cipher text.

14. The method of claim 13, wherein the cipher mapping file determines the first cipher text.

15. The method of claim 9, wherein the first data corresponds to one of a user name, a password, and a user sensitive data.

16. The method of claim 9, wherein the encryption algorithm corresponds to an RSA algorithm.

17. A non-transitory computer readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:

receiving a data file including a first encrypted data key, wherein the first encrypted data key is logged in the data file, and wherein the data file is a test data file for a website user interface automation test;

determining a first cipher text corresponding to the first encrypted data key using a conversion kit, wherein the conversion kit includes a cipher mapping file and an encryption algorithm; and

decrypting the first cipher text using the encryption algorithm to obtain a first data.

18. The non-transitory computer readable medium of claim 17, wherein the first encrypted data key is visible in the data file, and wherein the cipher mapping file include a key-value pair list corresponding to a plurality of encrypted data keys and a plurality of matching cipher text, and wherein the cipher mapping file determines the first cipher text.