Service signature method and device compatible with Android application

Abstract

The invention relates to a service signature method compatible with Android application. The service signature method compatible with Android application comprises the steps of S1 making a list of all of application program software package data files except developer signatures and finishing service signature operation compatible with the Android application; S2 performing verification on the service signatures compatible with the Android application by using a service self identification certificate or a certificate public key. The service signature method compatible with the Android application performs digital signature on the same Android application program package, does not conflict with a developer signature of an application program and can reserve user data when different release versions type application programs obtained through multi-party re-signature are updated and installed. In addition, service-side signature data are stored in catalogues related to service-side domain names and service names, different service-side signature data are not interfered, different service signatures are not influenced, and the problem that signature file names of a traditional application signature mechanism are easily bumped is fundamentally solved. The invention further discloses a service signature device compatible with the Android application.

Description

technical field [0001] The present invention relates to the field of computer technology, in particular to a service signature method and device compatible with Android applications. Background technique [0002] Digital signature is an information security technology based on message digest operation and asymmetric encryption operation to ensure the integrity, authentication and non-repudiation of information transmission. Digital signature technology has been widely used in social life, and the digital signature of Android applications is a typical application scenario of the above technology. [0003] Specifically, the operation process of Android application digital signature at this stage is: use the digest algorithm to calculate each information file in the Android application package except the META-INF directory into a fixed-length hash value, and combine the hash value and the corresponding The file names are sequentially stored in the META-INF / MANIFEST.MF file; co...

AI Technical Summary

Problems solved by technology

[0004] (1) For the same Android application package, the dual-signature and single-signature packages will be considered by the Android operating system to be released by different developers, which will cause two release versions of the same program to be unable to share Preserve user data when updates are installed;

[0005] (2) Using the traditional application package developer signature mechanism, if multiple signers use the default key alias name, such as CERT, the digital signature of the original signer will be replaced during the second signature

In addition, due to the naming rules of .SF files and .RSA files when signing traditional Android applications, the first eight characters of the key alias are capitalized, resulting in a relatively small namespace for signature file names, which is prone to collisions

[0006] Furthermore, the same Android application is often released in multiple different channels, but the above-mentioned defects of the traditional application package developer’s signature mechanism will cause the multi-channel and different versions of the same application to be unable to retain user data on the user’s mobile phone It is also easy to cause the developer or channel provider's digital signature to be unintentionally stripped, which will eventually lead to confusion in Android application management and a decline in user experience.

Images