An authorized installation method of an Android application, a scanning code payment terminal, a server and a system

Abstract

The invention provides an authorized installation method for an Android application, a code scanning payment terminal, a server and a system. The signature verification mechanism of the installation method is embedded in the installation service of the Android system, including: the application installation tool opens the apk file; the verification file of the apk file is read for verification, for judging the integrity of the apk file, verification If it fails, delete the apk file directly; if the verification passes, the system installation service obtains the signature information of the apk; compares the signature information of the apk file with the signature information of the device manufacturer, and the signature information of the device manufacturer is listed in the list of built-in signature files The form is solidified into the Android system. If the comparison results are consistent, the apk file will be installed, and if the comparison results are inconsistent, the apk file will be deleted. The invention is used to prevent unauthorized third-party software from being installed in the Android device in the form of apk, and also avoids the potential safety hazard that the APK bypasses the signature verification mechanism and is directly installed in the Android device in other apk installation methods.

Description

technical field [0001] The invention relates to the field of control systems of mobile payment terminals, in particular to a method for authorized installation of Android applications, and the invention also includes a code-scanning payment terminal, an authorization server and an overall system applying the method. Background technique [0002] With the rise of mobile Internet technology and e-commerce, code scanning payment technology has been widely used in the field of mobile payment. The process of scanning code payment includes: barcode information is formed on the screen of a smart phone or a smart tablet. After the image recognition device recognizes the barcode information, it encrypts the recognition information and sends it to the settlement server through the mobile phone base station or router. After settlement, the settlement server feeds back the feedback information through the mobile phone base station or router, and finally completes the entire process of ...

AI Technical Summary

Problems solved by technology

The above authorization method and authorization system represent a common way to implement the signature verification mechanism at present, but this method has a Maginot line of defense risk, that is to say, if there is an apk installation method that bypasses the above installation authorization system, Directly call the Android system installation service to install the apk, so the risk cannot be avoided (although the above invention has effectively prevented most of the unauthorized installation), in fact this method also exists, because this authorization scheme runs at the application layer , still may be bypassed and directly call the system layer service for installation

Images