APK (Android Package) downloading method and system based on Android system

An Android system, Android technology, applied in the direction of program loading/starting, computer security devices, software deployment, etc., can solve problems such as the inability to eliminate terminal impact, and achieve the effect of simplifying the update and upgrading process, reducing workload, and ensuring legality

CN105787357AActive Publication Date: 2016-07-20FUJIAN LANDI COMML EQUIP CO LTD
3 Cites 22 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2016-07-20

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides an APK (Android Package) downloading method and system based on the Android system. The method comprises steps as follows: APKs containing credit-granted application list files are signed, the signed APKs are obtained, and each credit-granted application list file comprises package names of each credit-granted APK and a corresponding public key certificate; a terminal acquires the signed APKs; the legality of the signed APKs is verified, and the credit-granted application list files are stored after verification is passed; one APK is acquired, and the legality of the APK is verified; if the verification isn't passed, whether a package head of the APK and the corresponding public key certificate are stored in the credit-granted application list files is judged; if yes, the legality of the APK is verified by continuously using an Android signature mechanism. The credit-granted application list files are added, the credit-granted APK downloading and installing process is simplified, and the updating and upgrading process of the credit-granted APKs is further simplified; influence of application update and upgrade to normal work of the terminal is reduced.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention relates to the field of signature authentication, in particular to an APK download method and system based on an Android system. Background technique

[0002] Android Android system is an open source operating system based on Linux architecture developed by Google, and the installation programs on it are all in APK (Android Package) format.

[0003] In the field of financial payment, the acquiring institution (such as the banking system) generally purchases the intelligent terminal equipment (POS machine) of the payment terminal manufacturer (such as each POS machine manufacturer), and the acquiring system centrally manages the payment terminal, including parameter downloading , Key downloading, accepting, processing or forwarding transaction requests from payment terminals, and returning transaction result information to payment terminals, is a centralized management and transaction processing system. The acquiring system will install i...

Examples

Embodiment 1

[0088] Please refer to Figure 1-Figure 3 , the present embodiment provides a method for downloading APK based on the Android system, the method may specifically include:

[0089] S1: The acquirer signs the original APK file containing the trusted application list file, and obtains the signed APK;

[0090] As shown in the table below, the trusted application list file includes the authorized application list file version, creation time, number of authorized APK lists, package names of each authorized APK in a single authorized APK list, and corresponding public key certificates. The trusted application list file is placed in the original APK file, and the file path is assets / trustedapp.list; the APK storing the trusted application list file has a special package name: com.acquirer.trustedapplist; it is used to distinguish ordinary APKs.

[0091]

[0092]

[0093] For example, a specific credit application list file is:

[0094] TrustedApp-Version: 1

[0095] CreateTim...

Embodiment 2

[0141] Please refer to Figure 4 , the present embodiment provides an Android system APK download system based on Embodiment 1, comprising:

[0142] The first signature module 1 is used to sign the APK containing the trusted application list file to obtain the signed APK. The trusted application list file includes the package name and corresponding public key certificate of each trusted APK; the specific trusted application list file Including authorized application list file version, creation time, number of authorized APK lists, package names of each authorized APK in a single authorized APK list, and corresponding public key certificates;

[0143] Specifically, see Figure 5 , the first signature module 1 includes:

[0144] The first generating unit 11 is used for the acquirer to generate the working public key certificate of the acquiring institution, and issue the public key corresponding to the working public key certificate of the acquiring institution to different ma...