WO2016188231A1

WO2016188231A1 - Verification method and apparatus

Info

Publication number: WO2016188231A1
Application number: PCT/CN2016/078486
Authority: WO
Inventors: 刘浩
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-10-19
Filing date: 2016-04-05
Publication date: 2016-12-01
Also published as: CN106599619A

Abstract

A verification method and apparatus. The method comprises: acquiring an application program from a first server (101); acquiring, according to the application program, verification information about the application program by means of a second server (102); and installing, according to the verification information, the application program on a terminal (103).

Description

Verification method and device

Technical field

This application relates to, but is not limited to, communication technology.

Background technique

With the rapid development of communication technology, end users can obtain many applications through the Internet and install them in the terminal for use.

Generally, the end user can select an application with a security identifier to download through the application store. The application with the security identifier is verified by a digital certificate authority (CA), and the developer is authenticated and issued. The application for the certificate, that is, the application with the security identity is a secure application.

However, an application downloaded by a terminal user from a non-app store channel or an application store without a security identifier may be a non-secure application, and the non-secure application may arbitrarily transmit the information stored in the terminal device, thereby causing the terminal device to Less secure.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

This document provides a verification method and device to improve the security of the terminal device.

A verification method that includes:

Obtain an application from the first server;

Acquiring the verification information of the application by using the second server according to the application;

The application is installed to the terminal according to the verification information.

Optionally, before the obtaining, by the second server, the verification information of the application, according to the application, the method further includes:

Determining whether the terminal is connected to the network;

If yes, executing, according to the application, obtaining, by the second server, verification information of the application;

If not, it is determined whether the application is installed.

Optionally, the determining whether to install the application includes:

If it is determined that the application is installed, the application is closed while the network permissions of the application are closed.

Optionally, after the installing the application and simultaneously closing the network permission of the application, the method further includes:

Determining that the terminal is connected to a network;

Obtaining an unverified application, the unverified application including at least the application;

Sending prompt information to the terminal, the prompt information being used to prompt whether to verify the unverified application;

If the unverified application is verified, the verification information of the application is acquired by the second server according to the application.

Optionally, the verification information includes:

A public key corresponding to the application, the public key being used to install the application to a terminal.

A verification device comprising:

a first obtaining module, configured to: acquire an application from the first server;

a second obtaining module, configured to: obtain, according to the application, verification information of the application by using a second server;

The processing module is configured to: install the application to the terminal according to the verification information.

Optionally, the processing module is further configured to: determine whether the terminal is connected to the network; if yes, notify the second obtaining module to execute, according to the application, the verification information of the application by using the second server If not, then determine if the application is installed.

Optionally, the processing module is further configured to: if it is determined to install the application, close the network permission of the application while installing the application.

Optionally, the processing module is further configured to: determine that the terminal is connected to a network; acquire an unverified application, the unverified application includes at least the application; send prompt information to the terminal, The prompt information is used to prompt whether to verify the unverified application; if the unverified application is verified, notifying the second obtaining module to execute, according to the application, acquiring the Application verification information.

Optionally, the verification information includes:

A computer readable storage medium storing computer executable instructions for performing the method of any of the above.

Compared with the related art, the embodiment of the present invention includes acquiring an application from a first server, acquiring, according to the application, verification information of the application by using a second server, and installing the application according to the verification information. To the terminal. The security verification of the application by the third party is implemented, thereby ensuring that the application for installing the terminal is safe and reliable, thereby improving the security of the terminal device.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a schematic flow chart of an embodiment of a verification method according to the present invention;

2 is a schematic flow chart of an embodiment of a verification method according to the present invention;

FIG. 3 is a schematic structural diagram of an embodiment of a verification apparatus according to the present invention.

Embodiments of the invention

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

The verification method provided by the embodiment of the present invention may be applied to acquire an application from a first server, And when you are ready to install the app. The verification method provided in this embodiment may be performed by a verification device, which may be integrated in a terminal device or may be separately configured, where the terminal device may be a mobile terminal, a portable android device (Pad) or a computer. The verification device can be implemented in software and/or hardware. The verification method and apparatus provided in this embodiment will be described in detail below.

FIG. 1 is a schematic flowchart of an embodiment of a verification method according to the present invention. As shown in FIG. 1 , the verification method provided by the present invention includes:

Step 101: Obtain an application from the first server.

This embodiment can acquire an application through any channel.

Step 102: Acquire, according to the application, verification information of the application by using a second server.

The second server in this embodiment may be a server disposed in the cloud, where the second server is not the same server as the first server.

The verification information is information about the reliability and security of the application, and the verification information may include, for example, developer information for developing the application, a public key to install the application, or at least an application name. One or a combination thereof.

Step 103: Install the application to the terminal according to the verification information.

For example, the authentication information obtained by a third party, that is, a server that does not issue the application, and the verification information includes information about the reliability and security of the application, and the security of the application can be determined through The public key included in the verification information can be installed to the terminal.

In this embodiment, the application is acquired from the first server; according to the application, the verification information of the application is acquired by the second server; and the application is installed to the terminal according to the verification information. . The security verification of the application by the third party is implemented, thereby ensuring that the application for installing the terminal is safe and reliable, thereby improving the security of the terminal device.

On the basis of the foregoing embodiment, before the obtaining, by the second server, the verification information of the application, the method further includes:

Determining whether the terminal is connected to the network;

If not, it is determined whether the application is installed.

For example, the terminal may send a prompt message to install the application.

If it is determined that the application is installed, the network permission of the application is closed while the application is installed, or the terminal is connected to the network, and the second server is executed according to the application. Obtain verification information for the application.

On the basis of the foregoing embodiment, after the installation of the application program and the closing of the network permission of the application program, the method further includes:

Connecting the terminal to a network;

The verification information in this embodiment may include:

For example, on the terminal side, taking the Android system as an example, the application installation needs to obtain the NetworkInfo object through the Connectivity Manager object, and then, through the State, determine whether the network is available. If the network connection is not available, the user is prompted to cancel the installation or cancel the application network function to continue the installation. If the user chooses to cancel the application network function to continue the installation, the Package Manager Service cancels the extracted android.permission.INTERNET when the application is installed, restricts the application access network function to prevent leakage of data, and records the unverified application information. Implement Receiver to obtain CONNECTIVITY_ACTION. After judging that the network connection is available, query whether there are still unchecked applications, and prompt the user to verify these applications. User selects verification application After that, the system obtains the application developer and the application name, and obtains the corresponding public key through the system specified cloud. Signify the application against the public key. After the verification is successful, the user is prompted to apply the developer and the application name, and the application network permission is activated. If the verification fails, the user is prompted to uninstall the application. If the network connection is available, go directly to the public key for verification process.

2 is a schematic flowchart of a second embodiment of the verification method of the present invention. As shown in FIG. 2, the verification method provided by the embodiment of the present invention includes:

Step 201: Obtain an application from the first server.

This embodiment can acquire an application through any channel.

Step 202: Determine whether the terminal is connected to a network.

If no, step 203 is performed; if yes, step 208 is performed.

Step 203: Determine whether the application is installed.

If yes, go to step 204. If no, cancel the installation of the application.

Step 204: Close the network permission of the application while installing the application.

In the scenario where the network is not connected, the application is closed while the network permissions of the application are closed.

Step 205: Determine that the terminal is connected to a network.

Step 206: Acquire an unverified application.

In this embodiment, the unverified application is an application that has been installed at the terminal but has not been verified. The unverified application includes at least the application, and the unverified application may further include an application that has not been previously verified.

Step 207: Determine whether to verify the unverified application.

Sending prompt information to the terminal, the prompt information is used to prompt whether to verify the unverified application. If it is determined that the unverified application is verified, step 208 is performed, and if it is determined that the unverified application is not verified, the unverified application is uninstalled.

Step 208: Acquire, according to the application, verification information of the application by using a second server.

The verification information is information about the reliability and security of the application, for example, the test The license information may include at least one or a combination of developer information for developing the application, a public key to install the application, or an application name.

Step 209: Determine, according to the verification information, whether the verification is successful. If yes, execute step 210. If the verification fails, cancel the installation according to the verification information and prompt the user.

Matching the verification information (for example, a public key) with the application. If the matching is successful, the verification is successful, and the application can be installed. If the matching fails, the installation is cancelled and the user is prompted.

Step 210: Install the application to the terminal.

In this embodiment, the security verification of the application by the third party is implemented, thereby ensuring that the application installed to the terminal is safe and reliable, thereby improving the security of the terminal device.

The embodiment of the invention further provides a computer readable storage medium storing computer executable instructions for executing the above verification method.

FIG. 3 is a schematic structural diagram of an embodiment of a verification apparatus according to the present invention. As shown in FIG. 3, the verification apparatus provided by the embodiment of the present invention includes: a first acquisition module 31, a second acquisition module 32, and a processing module 33. among them,

The first obtaining module 31 is configured to: acquire an application from the first server;

The second obtaining module 32 is configured to: obtain, according to the application, the verification information of the application by using the second server;

The processing module 33 is configured to: install the application to the terminal according to the verification information.

On the basis of the foregoing embodiment, the processing module 33 is further configured to: determine whether the terminal is connected to the network; if yes, notify the second obtaining module 32 to execute, according to the application, acquire the device through the second server. Describe the verification information of the application; if not, determine whether to install the application Use the program.

On the basis of the foregoing embodiment, the processing module 33 is further configured to: if it is determined to install the application, close the network permission of the application while installing the application.

On the basis of the foregoing embodiment, the processing module 33 is further configured to: determine that the terminal is connected to a network; acquire an unverified application, the unverified application includes at least the application; and send the terminal to the terminal a prompting information, the prompting information is used to prompt whether to verify the unverified application; if the unverified application is verified, the second obtaining module 32 is notified to execute according to the application, The second server acquires verification information of the application.

Based on the foregoing embodiment, the verification information includes:

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When the device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Although the embodiments disclosed herein are as above, the description is merely for facilitating understanding of the present invention. The embodiments employed are not intended to limit the invention. Any modification and variation in the form and details of the embodiments may be made by those skilled in the art without departing from the spirit and scope of the invention. The scope defined by the appended claims shall prevail.

Industrial applicability

Through the embodiment of the invention, the security verification of the application program by the third party is implemented, thereby ensuring that the application program for installing the terminal is safe and reliable, thereby improving the security of the terminal device.

Claims

A verification method that includes:

Obtain an application from the first server;

Acquiring the verification information of the application by using the second server according to the application;

The application is installed to the terminal according to the verification information.
The method of claim 1, wherein the obtaining, according to the application, the verification information of the application by the second server, further comprises:

Determining whether the terminal is connected to the network;

If yes, executing, according to the application, obtaining, by the second server, verification information of the application;

If not, it is determined whether the application is installed.
The method of claim 2, wherein the determining whether to install the application comprises:

If it is determined that the application is installed, the application is closed while the network permissions of the application are closed.
The method according to claim 3, wherein after the installing the application and simultaneously closing the network permission of the application, the method further comprises:

Determining that the terminal is connected to a network;

Obtaining an unverified application, the unverified application including at least the application;

Sending prompt information to the terminal, the prompt information being used to prompt whether to verify the unverified application;

If the unverified application is verified, the verification information of the application is acquired by the second server according to the application.
The method of any one of claims 1 to 4, wherein the verification information comprises:

A public key corresponding to the application, the public key being used to install the application to a terminal.
A verification device comprising:

a first obtaining module, configured to: acquire an application from the first server;

a second obtaining module, configured to: obtain, according to the application, verification information of the application by using a second server;

The processing module is configured to: install the application to the terminal according to the verification information.
The device according to claim 6, wherein the processing module is further configured to: determine whether the terminal is connected to a network; if yes, notify the second obtaining module to perform obtaining by the second server according to the application The verification information of the application; if not, determining whether to install the application.
The apparatus according to claim 7, wherein the processing module is further configured to: if it is determined to install the application, close the network permission of the application while installing the application.
The apparatus according to claim 8, wherein the processing module is further configured to: determine that the terminal is connected to a network; acquire an unverified application, the unverified application at least including the application; The terminal sends a prompt message, where the prompt information is used to prompt whether to verify the unverified application; if the unverified application is verified, the second obtaining module is notified to execute according to the application, The verification information of the application is obtained by the second server.
The apparatus of any one of claims 6-9, wherein the verification information comprises:

A public key corresponding to the application, the public key being used to install the application to a terminal.