Realization method for performing quadruple shared signature verification on Android system

A joint signature and implementation method technology, applied in the field of information security, can solve the problems of increasing the risk of economic loss and privacy leakage

Active Publication Date: 2016-09-21
NANJING UNIV OF POSTS & TELECOMM
View PDF3 Cites 25 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

With the popularity of the Android system and the increasing number of individual developers, security attacks against the Android platform are emerging in an endless stream, increasing the risk of economic losses and privacy leaks

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Realization method for performing quadruple shared signature verification on Android system
  • Realization method for performing quadruple shared signature verification on Android system
  • Realization method for performing quadruple shared signature verification on Android system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0041] Such as figure 1 As shown, the present invention provides a kind of realization method that Android system is carried out quadruple joint signature verification, and this method comprises the following steps:

[0042] Step 1: Use getPackageInfo to extract the signature at the Java layer, and then obtain the reserved information on the server for comparison. The hash algorithm used is a custom algorithm similar to MD5, which can extract a 32-bit hexadecimal abstract from the signature object. Among them, the salting and encryption operations described above are operations performed after the 32-bit digest obtained in the previous step is passed into the dynamic link library, and salting refers to correlating the original 32-bit digest with a random n-bit random number Link, the encryption uses the improved MD5 algorithm. The salted and encrypted digest needs to be passed back to the Java layer for comparison with the server-side value.

[0043] Step 2: Compare the sig...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a realization method for performing quadruple shared signature verification on an Android system. The method comprises the following steps of 1, obtaining signature information of a current application program by using an Android API (Application Program Interface), extracting the signature information out of an abstract by using a hashing algorithm, then, transmitting the signature information into a dynamic link library for salting and encryption, and next performing comparison with the signature information in a network position; 2, reading the signature of an APK (Android Package) hidden inside the application by using a reflection function, and performing signature checking with the signature information obtained by using the Android API; 3, performing comparison on the signature information obtained by a getPackageInfo method and the signature information stored in the dynamic link library by a reflection mechanism in Jni, performing repeated verification again on the abstract information of the dynamic link library, and if the information in the dynamic link library is changed, reminding a user to download the application again from proper channels; and 4, compiling a binary executable file by using an NDK (Native Development Kit), and performing comparison with hash stored in bianry by using the reserved APK in the system.

Description

technical field [0001] The invention relates to a method for realizing quadruple joint signature verification on an Android system, and belongs to the technical field of information security. Background technique [0002] With the popularity of smart phones and the development of mobile Internet technology, mobile phones have become an indispensable part of people's daily life. Among the numerous smart phone operating systems, the Android system has a large market share due to its open source, freedom, and free features. With the popularity of the Android system and the increasing number of individual developers, security attacks against the Android platform are emerging in an endless stream, increasing the risk of economic losses and privacy leaks. Therefore, how to write secure applications on the Android platform has become a research direction for Android developers today. [0003] The Android system is an open platform, which means that users can install installation ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/44
CPCG06F21/44
Inventor 陈丹伟刘畅
Owner NANJING UNIV OF POSTS & TELECOMM
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products