Signature method and system suitable for Android intelligent POS machine application

Abstract

The invention discloses a signature method suitable for an Android intelligent POS machine application. The method comprises the following steps of receiving a shelving request of any application, calling a signature dynamic library for the application on the premise of not changing a native signature, performing secondary signature reinforcement on the application by adopting a signature certificate of a CA signature, writing an applicable related terminal model into signature data, encrypting the signature data, and shelving the application in an application store, after the terminal downloads the application through the application store, sequentially verifying the public key certificate, the signature data, the terminal model and the native signature, and after all verification processes are passed, installing the application in the terminal. According to the method, the security of the terminal application is improved through secondary signature reinforcement, and meanwhile, the application is signed for the second time in combination with the matched related terminal model, so that the terminal can judge the compatibility of the application and the terminal at the initial stage of signature verification, and the user experience is further improved.

Description

technical field [0001] The invention relates to the technical field of terminal application management, in particular to a signature method and system suitable for Android smart POS machine applications. Background technique [0002] Mobile terminals, such as smart POS, have become the main acquiring tool in the existing acquiring system. The applications used in smart terminals, because the applications are publicly released on the network, have been tampered with, injected with Trojan horses and advertisements, and acquired users. Information seriously affects the security of the financial industry. [0003] In order to solve this problem, existing applications are usually set with native signatures. The server-side system maintenance personnel put the applications with native signatures on the application market, and the terminal downloads and installs the applications from the application store, and verifies the original signatures of the applications. , to install the ...

AI Technical Summary

Problems solved by technology

[0004] First, the security performance of applications with only native signatures is still poor, and it is difficult for users to ensure the security of application sources

[0005] Second, Android terminals are now severely fragmented. Android manufacturers in the market are pushing their own ROMs. The same application is compatible with different terminal models, and the experience is very poor. These features can only be found after installing the application. adaptation

Images