Safe installation method used in mobile equipment and safe installation device used in mobile equipment

Abstract

The invention relates to a safe installation method used in mobile equipment and a safe installation device used in the mobile equipment. A telecom operator obtains application program unique data in the process of downloading an application program into the mobile equipment, and sends the application program unique data to an application program supplier. The application program supplier produces an installation token according to the application program unique data and a random number and sends the installation token to the telecom operator. The telecom operator transmits the installation token to the application program in the process of installing the application program into the mobile equipment. The telecom operator starts application program personalization after the installation is completed. The application program verifies the installation token, verifies whether the installation token is in accordance with the application program unique data, if the installation token is in accordance with the application program unique data, the application program generates an acknowledgement token by utilizing the random number provided by the program supplier and application program information and transmits the acknowledgement token to the application program supplier through the telecom operator. The program supplier verifies whether the random number in the acknowledgement token is in accordance with the random number which is used when the installation token is generated, if the random number in the acknowledgement token is in accordance with the random number which is used when the installation token is generated, the installation of the application program in the mobile equipment is completed.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and device for safely installing applications on mobile devices. Background technique [0002] As mobile payment technology gradually enters people's lives, more and more mobile devices support the download and installation of payment application software, allowing mobile devices to have payment functions. However, insufficient attention has been paid to how to ensure the security of payment applications. After all, mobile payment involves the interests of three parties. Telecom operators, payment application providers, and mobile device owners must pay attention to the download and installation of applications. Fully consider how to protect the interests of all parties from being damaged, that is, security issues. At present, the application installation method adopted in the field of mobile payment is basically a pre-installed method, that is, the payment applicati...

AI Technical Summary

Problems solved by technology

Similar problems exist when downloading other applications provided by the application provider, and the legitimate interests of the application provider are difficult to be guaranteed

Images