Sensitive data protection during user interface automation testing systems and methods

Patent metadata

Field	Value
Publication number	US-9501657-B2
Application number	US-201514860612-A
Country	US
Kind code	B2
Filing date	Sep 21, 2015
Priority date	Dec 3, 2013
Publication date	Nov 22, 2016
Grant date	Nov 22, 2016

Abstract

There is provided systems and method for sensitive data protection during user interface automation testing. A user may transmit sensitive data to the test website framework, where the sensitive data is encrypted as a data key. The encrypted data key is set by an administrator of the test website and given to the user. The user may enter the key, where the test website framework application utilizes a conversion kit to decrypt the encrypted data key for use in the website user interface automation test. However, the encrypted data key is pulled into a version control system and/or viewed in test results so that the sensitive data remains hidden from view. In various embodiments, the encrypted data key may be entered into a web element, such as a password field, where the password field displays only the encrypted data key during test results.

First claim

What is claimed is:

1. A method comprising:
receiving, from a client device, data entered to a field of a test website user interface (UI) by a user of the test website UI;
encrypting at least a portion of the data using an encryption algorithm to generate cipher text of the data;
entering the cipher text in a test data file for a test session by the user using the test website UI;
generating a cipher mapping file for the cipher text in the test data file; and
storing the cipher mapping file with the encryption algorithm.

2. The method of claim 1 , wherein the cipher text is visible in the data file.

3. The method of claim 1 , wherein the data is entered into a web element prior to entering the cipher text in the test data file.

4. The method of claim 1 , wherein the test data file is stored by a version control system.

5. The method of claim 1 , wherein the cipher mapping file includes a key-value pair list corresponding to a plurality of data keys and a plurality of matching cipher text.

6. The method of claim 5 , wherein the cipher mapping file is used to determine the cipher text in the test data file by a system administrator or test executor during testing of the test website UI.

7. The method of claim 1 , wherein the at least the portion of the data comprises one of a user name, a password, and a user sensitive data.

8. The method of claim 1 , wherein the encryption algorithm corresponds to an RSA algorithm.

9. The method of claim 1 , wherein the test data file is used for a website user interface automation test.

10. A method comprising:
receiving a data file for a website user interface (UI) automation test, wherein the data file includes cipher text corresponding to data entered to a field of the website UI during a test session and encrypted on entry to the field;
determining the cipher text using a cipher mapping file for the data file, wherein an encryption algorithm corresponding to the cipher text is stored with the cipher mapping file;
decrypt the cipher text using the encryption algorithm to obtain the data; and
execute the website UI automation test using the data.

11. The method of claim 10 , wherein the cipher text is readable in the data file, and wherein the data is obscured in the data file by the cipher text.

12. The method of claim 10 , wherein the field comprises a web element of the website UI.

13. The method of claim 10 , wherein the data file is stored by a version control system.

14. The method of claim 10 , wherein the cipher mapping file include a key-value pair list corresponding to a plurality of data keys and a plurality of matching cipher text.

15. The method of claim 14 , wherein the cipher mapping file is used to determine the cipher text in the data file by a system administrator or test executor during testing of the test website UI.

16. The method of claim 10 , wherein the data comprises one of a user name, a password, and a user sensitive data.

17. The method of claim 10 , wherein the data is encrypted using an RSA algorithm.

18. The method of claim 10 , wherein the data file is used for a website user interface automation test.

19. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:
receiving a data file for a website user interface (UI) automation test, wherein the data file includes cipher text corresponding to data entered to a field of the website UI during a test session and encrypted on entry to the field;
determining the cipher text using a cipher mapping file for the data file, wherein an encryption algorithm corresponding to the cipher text is stored with the cipher mapping file;
decrypting the cipher text using the encryption algorithm to obtain the data; and
executing the website UI automation test using the data.

20. The non-transitory computer readable medium of claim 19 , wherein the cipher text is visible in the data file, wherein the cipher mapping file include a key-value pair list corresponding to a plurality of data keys and a plurality of matching cipher text, and wherein the cipher mapping file is used to determine the cipher text.

Assignees

• Paypal Inc

Inventors

• Wu Junlong
• Han Jun

Classifications

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F11/2221

  to test input/output devices or peripheral units · CPC title

• H04L63/0457

  wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption (cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065) · CPC title

• G06F2221/033

  Test or assess software · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title