Android application authorization installing method, scan code payment terminal, server and system

Abstract

The invention provides an Android application authorization installing method, a scan code payment terminal, a server and a system. A signature verification mechanism of the installing method is embedded into installation services of an Android system, and the method comprises the steps that an installation tool is applied to open an apk file; a verification file of the apk file is read and verified so as to be used for judging the integrity of the apk file, and if the verification is failed, the apk file is directly deleted; if the verification is successful, the system installation services obtain the signature information of the apk file; the signature information of the apk file is compared with the signature information of a device manufacturer, if the comparison result is in agreement, the apk file is installed, and if the comparison result is not in agreement, the apk file is deleted, wherein the signature information of the device manufacturer is fixed to the inside of the Android system in a built-in signature file list form. The Android application authorization installing method is used for preventing third-party software without authorization from being installed in an Android device in an apk form, and the security risk that an apk file bypasses the signature verification mechanism and is directly installed in the Android device in other apk installing methods is avoided.

Description

technical field [0001] The invention relates to the field of control systems for mobile payment terminals, in particular to an authorization installation method for Android applications. The invention also includes a scanning code payment terminal, an authorization server and an overall system applying the method. Background technique [0002] With the rise of mobile Internet technology and e-commerce, scanning code payment technology has been widely used in the field of mobile payment. The process of scanning code payment includes: the barcode information is formed on the screen of the smart phone or smart tablet. After the image recognition device recognizes the barcode information, the identification information is encrypted and sent to the settlement server through the mobile phone base station or through the router. After settlement, the settlement server will feed back the feedback information through the mobile phone base station or router, and finally complete the w...

AI Technical Summary

Problems solved by technology

The above authorization method and authorization system represent a common way to implement the signature verification mechanism at present, but this method has a Maginot line of defense risk, that is to say, if there is an apk installation method that bypasses the above installation authorization system, Directly call the Android system installation service to install the apk, so the risk cannot be avoided (although the above invention has effectively prevented most of the unauthorized installation), in fact this method also exists, because this authorization scheme runs at the application layer , still may be bypassed and directly call the system layer service for installation

Images