Security protection mechanism for intelligent measurement terminal APP and implementation method

Abstract

The invention relates to an intelligent measurement terminal APP application-oriented security protection mechanism and an implementation method, and relates to the technical field of intelligent measurement terminals. The method comprises the steps of obtaining a first digital certificate of a target application in response to an operation instruction for the target application in the intelligent measurement terminal; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; under the condition that the first certificate verification result shows that the first digital certificate is not tampered, comparing the specified installation terminal address with the current terminal address of the intelligent measurement terminal to obtain an address comparison result; under the condition that the address comparison result shows that comparison is consistent, verifying the target application to obtain a first application verification result of the target application; and when the first application verification result shows that the target application is not tampered, indicating the intelligent measurement terminal to run the target application. By adopting the method, the application running safety in the intelligent measurement terminal can be ensured.

Description

Technical Field

[0001] The present application relates to the technical field of intelligent measurement terminals, and in particular to a security protection mechanism and implementation method for intelligent measurement terminal APP applications. Background Art

[0002] ‌‌Smart measurement terminal is a kind of intelligent and digital power measurement and control equipment used in the construction of new power system distribution network. It is usually installed at the incoming line of meter box or smart meter box, and cooperates with smart meter, miniature circuit breaker, smart Bluetooth access control and various environmental sensors to form a complete smart power distribution solution.

[0003] Under the requirements of intelligence, convenience and integration, the functions and contents required by smart measurement terminals are becoming more and more abundant. Based on this, various applications will run in smart measurement terminals. Therefore, ensuring the security of the application is an urgent problem to be solved before the application runs. Summary of the invention

[0004] Based on this, it is necessary to provide a security protection mechanism for smart measurement terminal APP applications that can ensure the security of application operation in smart measurement terminals and its implementation method, device, computer equipment, computer-readable storage medium and computer program product in response to the above technical problems.

[0005] In a first aspect, the present application provides a security protection mechanism and implementation method for APP applications of smart measurement terminals, including: in response to an operation instruction for a target application in the smart measurement terminal, obtaining a first digital certificate used by the target application during the installation process; the first digital certificate includes a designated installation terminal address of the target application; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the smart measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verifying the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instructing the smart measurement terminal to run the target application.

[0006] In one of the embodiments, the method further includes: in response to an installation instruction for a target application, performing an online detection on the target application to obtain an online detection result of the target application; when the online detection result indicates that the target application is online, installing the target application in a smart measurement terminal to which a specified installation terminal address belongs.

[0007] In one of the embodiments, the method further includes: in response to the application development instruction, sending the application development requirements indicated by the application development instruction to the application developer; receiving the target application returned by the application developer; the target application is developed by the application developer based on the application development requirements.

[0008] In one of the embodiments, the method also includes: in response to an online instruction for the target application, obtaining a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by the application developer; the first application signature is obtained by the application developer after hashing the target application based on the hash algorithm in the second digital certificate; verifying the second digital certificate to obtain a second certificate verification result of the second digital certificate; verifying the target application based on the first application signature to obtain a second application verification result of the target application; and when both the second certificate verification result and the second application verification result indicate that they have not been tampered with, performing an online operation on the target application.

[0009] In one of the embodiments, a first digital certificate is verified to obtain a first certificate verification result of the first digital certificate, including: obtaining certificate basic information and a first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; when the basic information verification result indicates that the verification has passed, decrypting the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, performing hash processing on the first digital certificate to obtain a second certificate summary; and using the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0010] In one of the embodiments, a target application is verified to obtain a first application verification result of the target application, including: obtaining a second application signature of the target application, decrypting the second application signature to obtain a first digital summary; based on a hash algorithm in a first digital certificate, hashing an application installation package of the target application to obtain a second digital summary; and using a comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0011] In one of the embodiments, the target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

[0012] In one of the embodiments, when the address comparison result indicates that the comparison is inconsistent, it is prompted that the verification failed.

[0013] In one of the embodiments, when the first application verification result indicates that the target application has been tampered with, it is prompted that the application verification has failed.

[0014] In one embodiment, the application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

[0015] In the second aspect, the present application also provides a security protection mechanism and implementation device for smart measurement terminal APP applications, including: a digital certificate acquisition module, used to respond to an operation instruction for a target application in the smart measurement terminal, and obtain a first digital certificate used by the target application during the installation process; the first digital certificate includes a designated installation terminal address of the target application; a digital certificate verification module, used to verify the first digital certificate and obtain a first certificate verification result of the first digital certificate; a terminal address comparison module, used to compare the designated installation terminal address with the current terminal address of the smart measurement terminal when the first certificate verification result indicates that the first digital certificate has not been tampered with, and obtain an address comparison result; an application verification module, used to verify the target application when the address comparison result indicates that the comparison is consistent, and obtain a first application verification result of the target application; an application running module, used to instruct the smart measurement terminal to run the target application when the first application verification result indicates that the target application has not been tampered with.

[0016] In a third aspect, the present application also provides a computer device, including a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program: in response to an operation instruction for a target application in a smart measurement terminal, obtaining a first digital certificate used by the target application during the installation process; the first digital certificate includes a designated installation terminal address of the target application; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the smart measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verifying the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instructing the smart measurement terminal to run the target application.

[0017] In a fourth aspect, the present application further provides a computer-readable storage medium having a computer program stored thereon, which implements the following steps when the computer program is executed by a processor: in response to an operating instruction for a target application in a smart measurement terminal, obtaining a first digital certificate used by the target application during the installation process; the first digital certificate includes a designated installation terminal address of the target application; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the smart measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verifying the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instructing the smart measurement terminal to run the target application.

[0018] In a fifth aspect, the present application also provides a computer program product, including a computer program, which implements the following steps when executed by a processor: in response to an operating instruction for a target application in a smart measurement terminal, obtain a first digital certificate used by the target application during the installation process; the first digital certificate includes a designated installation terminal address of the target application; verify the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, compare the designated installation terminal address with the current terminal address of the smart measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verify the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instruct the smart measurement terminal to run the target application.

[0019] The above-mentioned security protection mechanism and implementation method, device, computer equipment, computer-readable storage medium and computer program product for smart measurement terminal APP applications, when receiving the running instruction for the target application in the smart measurement terminal, first obtains the first digital certificate used by the target application in the installation process. It can be understood that the digital certificate is a digital certificate that records the installation information of the target application, such as the designated installation terminal address of the target application. The technical solution of this application will first verify the first digital certificate, and then further perform terminal address verification when it is determined that the first digital certificate has not been tampered with. The terminal address verification is to ensure that the application is running in the correct smart measurement terminal, that is, the designated installation terminal address is compared with the current terminal address of the smart measurement terminal to obtain the address comparison result. When the address comparison result indicates that the comparison is consistent, the target application itself needs to be verified. When the first application verification result of the target application indicates that the target application has not been tampered with, the smart measurement terminal is instructed to run the target application. In this way, the security of the application running in the smart measurement terminal is ensured through digital certificate verification, terminal address verification and application verification. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present application or related technologies, the drawings required for use in the embodiments of the present application or related technical descriptions will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0021] FIG1 is an application environment diagram of a security protection mechanism and implementation method for an intelligent measurement terminal APP application in one embodiment;

[0022] FIG2 is a flow chart of a security protection mechanism and implementation method for an intelligent measurement terminal APP application in one embodiment;

[0023] FIG3 is a schematic diagram of a first digital certificate in one embodiment;

[0024] FIG4 is a schematic diagram of a process of installing an application in one embodiment;

[0025] FIG5 is a schematic diagram of a process flow of application development in one embodiment;

[0026] FIG6 is a schematic diagram of a verification process of a second digital certificate in one embodiment;

[0027] FIG7 is a schematic diagram of a verification process of a target application in one embodiment;

[0028] FIG8 is a schematic diagram of a verification process of a first digital certificate in one embodiment;

[0029] FIG9 is a schematic diagram of a verification process of a target application in another embodiment;

[0030] FIG10 is an application architecture diagram in a specific embodiment;

[0031] FIG11 is a structural block diagram of a security protection mechanism and implementation device for an intelligent measurement terminal APP application in one embodiment;

[0032] FIG. 12 is a diagram showing the internal structure of a security protection mechanism and its implementation for an intelligent measurement terminal APP application in one embodiment. DETAILED DESCRIPTION

[0033] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0034] The security protection mechanism and implementation method for the smart measurement terminal APP application provided in the embodiment of the present application can be applied in the application environment shown in Figure 1. Among them, the smart measurement terminal 102 communicates with the server 104 through the network. The data storage system can store the data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. In response to the running instruction for the target application in the smart measurement terminal 102, the first digital certificate used by the target application during the installation process is obtained; the first digital certificate includes the designated installation terminal address of the target application; the first digital certificate is verified to obtain the first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, the designated installation terminal address is compared with the current terminal address of the smart measurement terminal 102 to obtain the address comparison result; when the address comparison result indicates that the comparison is consistent, the target application is verified to obtain the first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, the smart measurement terminal is instructed to run the target application.

[0035] Among them, the smart measurement terminal 102 is a terminal device applied to the power grid, which can install, run, and uninstall applications locally in the terminal to perform terminal tasks. The server 104 is a server that manages the applications of the smart measurement terminal 102, and can be used for the protection, installation, operation, and uninstallation of different applications on the smart measurement terminal 102, and manages the applications on the smart measurement terminal 102 in a variety of ways. The server 104 can be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server that provides cloud computing services.

[0036] In one example, the server 104 may include a network-level platform server and a provincial-level platform server, wherein the network-level platform is a platform for application development and launch, and the provincial-level platform is a platform for application installation.

[0037] In an exemplary embodiment, as shown in FIG2 , a security protection mechanism and implementation method for smart measurement terminal APP applications are provided. The method is applied to the server 104 in FIG1 as an example for explanation, and includes the following steps:

[0038] Step S202 : in response to an operation instruction for a target application in the intelligent measurement terminal, obtaining a first digital certificate used by the target application during installation.

[0039] The target application includes but is not limited to basic business applications, extended business applications, message distribution applications, meter reading and scheduling applications, data center applications, monitoring applications, etc. The run instruction may be an instruction for instructing to run the target application. The digital certificate may refer to the installation certificate of the target application, which records the installation information of the target application. As shown in FIG3 , the first digital certificate may include the version information of the certificate, the serial number of the certificate, the issuing authority of the certificate, the validity period of the certificate, the signature of the certificate, the hash algorithm used for the signature of the certificate, the public key of the provincial platform, and the address of the designated installation terminal.

[0040] Exemplarily, when the server receives the running instruction for the target application initiated by the intelligent measurement terminal, it may first obtain the first digital certificate used by the target application during the installation process, so as to perform terminal address verification on the target application later.

[0041] Step S204: verify the first digital certificate to obtain a first certificate verification result of the first digital certificate.

[0042] The first certificate verification result is used to indicate whether the first digital certificate has been tampered with.

[0043] Illustratively, after acquiring the first digital certificate of the target application, the server may first perform an anti-tampering check on the first digital certificate to check whether the first digital certificate has been tampered with.

[0044] In one example, the server can verify the basic certificate information and certificate summary of the first digital certificate respectively to verify whether the first digital certificate has been tampered with. The basic certificate information refers to the version information of the certificate, the serial number of the certificate, the issuing organization of the certificate, and the validity period of the certificate.

[0045] Step S206, when the first certificate verification result indicates that the first digital certificate has not been tampered with, the designated installation terminal address is compared with the current terminal address of the intelligent measurement terminal to obtain an address comparison result.

[0046] The designated installation terminal address may refer to a pre-designated smart measurement terminal address, that is, the target application should be installed in the smart measurement terminal corresponding to the smart measurement terminal address. The current terminal address may refer to the terminal address of the current smart measurement terminal. By verifying the terminal address, it can be ensured that the application is running in the correct smart measurement terminal. The address comparison result is used to characterize the consistency between the designated installation terminal address and the current terminal address, including consistency and inconsistency.

[0047] For example, if the first certificate verification result indicates that the first digital certificate has not been tampered with, it means that the designated installation terminal address in the first digital certificate has not been tampered with either. At this time, the designated installation terminal address can be further compared with the current terminal address of the intelligent measurement terminal to see if they are consistent. If they are inconsistent, it will prompt that the certificate verification has failed and terminate the application running process.

[0048] Step S208 , when the address comparison result indicates that the comparison is consistent, verify the target application to obtain a first application verification result of the target application.

[0049] The first application verification result is used to indicate whether the target application has been tampered with.

[0050] For example, when the address comparison result indicates that the comparison is consistent, it means that the target application is applied to run in the correct intelligent measurement terminal. Before running the target application, it is necessary to verify the target application itself, that is, to verify whether the target application itself has been tampered with.

[0051] Step S210 , when the first application verification result indicates that the target application has not been tampered with, instruct the smart measurement terminal to run the target application.

[0052] Exemplarily, if the first application verification result indicates that the target application has not been tampered with, the intelligent measurement terminal may be instructed to run the target application. If the first application verification result indicates that the target application has been tampered with, the application verification fails and the application running process is terminated.

[0053] It should be noted that the first digital certificate verification, terminal address verification and target application verification can all be performed in the intelligent measurement terminal. The server in this embodiment can be a provincial platform server, that is, the provincial platform server sends the first digital certificate to the intelligent measurement terminal, and the intelligent measurement terminal starts a pre-configured trusted agent, which performs the first digital certificate verification, terminal address verification and target application verification. The trusted agent is an intermediate agent trusted by both the provincial platform server and the intelligent measurement terminal. The trusted agent encrypts the first certificate verification result, the address comparison result, and the first application verification result and sends them to the provincial platform server. After the provincial platform server uses its private key to decrypt them, it obtains various results. According to these results, it indicates whether the intelligent measurement terminal can run the target application.

[0054] In this embodiment, when the server receives the running instruction for the target application in the intelligent measurement terminal, it first obtains the first digital certificate used by the target application in the installation process. It can be understood that the digital certificate is a digital certificate that records the installation information of the target application, such as the designated installation terminal address of the target application. The technical solution of this application will first verify the first digital certificate. When it is determined that the first digital certificate has not been tampered with, the terminal address verification will be further performed. The terminal address verification is to ensure that the application is running in the correct intelligent measurement terminal, that is, the designated installation terminal address is compared with the current terminal address of the intelligent measurement terminal to obtain the address comparison result. When the address comparison result indicates that the comparison is consistent, the target application itself needs to be verified. When the first application verification result of the target application indicates that the target application has not been tampered with, the intelligent measurement terminal is instructed to run the target application. In this way, the security of the application running in the intelligent measurement terminal is ensured through digital certificate verification, terminal address verification and application verification.

[0055] In an exemplary embodiment, as shown in FIG4 , the process of installing the target application further includes:

[0056] Step S402: in response to the installation instruction for the target application, perform an online detection on the target application to obtain an online detection result of the target application.

[0057] The installation instruction may refer to an instruction for installing the target application. The online detection result is used to indicate whether the target application has been online.

[0058] Exemplarily, in response to the installation instruction for the target application, the network-level platform server first detects whether the target application has been launched, and can determine whether the target application has been launched through an online list or online information of the target application.

[0059] Step S404: when the online detection result indicates that the target application has been online, the target application is installed in the intelligent measurement terminal to which the designated installation terminal address belongs.

[0060] Exemplarily, when it is determined that the target application has been launched, the network-level platform server pushes the application installation package of the target application to the provincial platform server. The provincial platform server uses the hash algorithm in the original digital certificate to hash the application installation package to obtain a first digital summary, and then encrypts the first digital summary with the private key of the provincial platform server to obtain a second application signature. At this time, the hardware developer uploads the designated installation terminal address to the provincial platform server, and the provincial platform server adds the designated installation terminal address to the original digital certificate to obtain the first digital certificate, and sends the application installation package and the first digital certificate to the hardware developer. The hardware developer installs the target application in the designated intelligent measurement terminal according to the designated installation terminal address in the first digital certificate.

[0061] In this embodiment, the target application is tested online and installed according to the online test result, thereby improving the accuracy and security of the target application installation.

[0062] In an exemplary embodiment, as shown in FIG5 , the process of developing the target application further includes:

[0063] Step S502: In response to the application development instruction, the application development requirement indicated by the application development instruction is sent to the application developer.

[0064] The application development instructions may refer to instructions for developing a target application. The application development requirements may refer to the requirements information for developing a target application, including but not limited to development cycle, functional requirements, business requirements, performance requirements, etc. The application developer may refer to an organization or object that develops the application.

[0065] Exemplarily, the network-level platform server responds to an application development instruction for a target application, extracts application development requirements from the application development instruction, and sends the application development requirements to an application developer who is developing the application.

[0066] In one example, when the network-level platform server issues application development requirements, it also sends the second digital certificate used for application development to the application developer. The second digital certificate is the development credential of the target application and records the development information of the target application. As shown in FIG6 , the second digital certificate may include certificate version information, certificate serial number, certificate issuing agency, certificate validity period, certificate signature, hash algorithm used for certificate signature, and the public key of the application developer.

[0067] Step S504, receiving the target application returned by the application developer; the target application is developed by the application developer based on application development requirements.

[0068] Exemplarily, the application developer develops the application according to the application development requirements to obtain a target application.

[0069] In one example, after developing the target application, the application developer can perform hash processing on the application installation package of the target application using the hash algorithm in the second digital certificate to generate an application summary, and the application developer uses its private key to encrypt the application summary to obtain the first application signature. The application developer returns the target application, the first application signature, and the second digital certificate to the network-level platform server.

[0070] In one embodiment, the target application can be launched after the development is completed. That is, in response to the launch instruction for the target application, the second digital certificate used in the development process of the target application and the first application signature of the target application returned by the application developer are obtained; the first application signature is obtained by the application developer after performing hash processing on the target application based on the hash algorithm in the second digital certificate; the second digital certificate is verified to obtain the second certificate verification result of the second digital certificate; based on the first application signature, the target application is verified to obtain the second application verification result of the target application; if the second certificate verification result and the second application verification result both indicate that they have not been tampered with, the target application is launched.

[0071] The second certificate verification result includes the basic information verification result and the certificate signature verification result of the second digital certificate. The second application verification result is used to indicate whether the target application has been tampered with.

[0072] Exemplarily, when the network-level platform server receives the online instruction for the target application, it obtains the target application, the first application signature and the second digital certificate returned by the application developer. First, the second digital certificate is verified. As shown in FIG6 , the basic information of the second digital certificate, i.e., the version information of the certificate, the serial number of the certificate, the issuing agency of the certificate, and the validity period of the certificate are first verified to see whether they have been tampered with, and the basic information verification result of the second digital certificate is obtained. If the basic information verification result passes, it means that the basic information has not been tampered with, and the certificate signature of the second digital certificate is verified, that is, the hash algorithm in the second digital certificate is used to hash the second digital certificate to obtain the third certificate summary, and the certificate signature of the second digital certificate is decrypted using the public key of the network-level platform server to obtain the fourth certificate summary, and the comparison result between the third certificate summary and the fourth certificate summary is used as the certificate signature verification result of the second digital certificate. It can be understood that when the third certificate summary is consistent with the fourth certificate summary, the verification passes, indicating that the certificate signature of the second digital certificate has not been tampered with. Secondly, based on the first application signature, the target application is verified. As shown in Figure 7, the network-level platform server uses the hash algorithm in the second digital certificate to hash the application installation package of the target application to obtain the third digital summary. The network-level platform then uses the public key of the application developer to decrypt the first application signature to obtain the fourth digital summary. The third digital summary and the fourth digital summary are compared. If they are consistent, it means that the target application has passed the verification, that is, the target application has not been tampered with. If the second certificate verification result and the second application verification result both indicate that they have not been tampered with, the target application is put online.

[0073] In this embodiment, application development is performed according to application development requirements to ensure the accuracy of application development. When the application is launched, the digital certificate and the application itself are double-checked to ensure the security of the application, thereby ensuring the security of the application launch and the security of subsequent application installation and operation.

[0074] In one embodiment, a first digital certificate is verified to obtain a first certificate verification result of the first digital certificate, including: obtaining certificate basic information and a first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; when the basic information verification result indicates that the verification is passed, decrypting the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, performing hash processing on the first digital certificate to obtain a second certificate summary; and using the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0075] The basic information verification result is used to indicate whether the basic information of the first digital certificate has been tampered with, including verification passed and verification failed. If the verification is passed, it means that the basic information of the certificate has not been tampered with, otherwise it means that the basic information of the certificate has been tampered with. The first certificate verification result is used to indicate whether the first certificate summary is consistent with the second certificate summary.

[0076] Exemplarily, as shown in FIG8 , after the provincial platform server sends the first digital certificate of the target application to the trusted agent in the intelligent measurement terminal, the trusted agent can first verify the basic information of the certificate of the first digital certificate to obtain the basic information verification result. If the basic information verification passes, it means that the basic information of the certificate has not been tampered with. At this time, the public key of the provincial platform server is further used to decrypt the signature of the first certificate to obtain the first certificate summary. The hash algorithm in the first digital certificate is used to hash the first certificate to obtain the second certificate summary, and the two summaries are compared to see if they are consistent.

[0077] In this embodiment, the accuracy of the certificate verification result is ensured through double verification of the certificate basic information and the certificate signature, thereby ensuring the security of application operation.

[0078] In one embodiment, a target application is verified to obtain a first application verification result of the target application, including: obtaining a second application signature of the target application, decrypting the second application signature to obtain a first digital summary; based on a hash algorithm in the first digital certificate, hashing an application installation package of the target application to obtain a second digital summary; and using a comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0079] The first application verification result is used to indicate whether the first digital summary is consistent with the second digital summary.

[0080] Exemplarily, when the trusted agent passes the verification of the first digital certificate, it further verifies the target application. As shown in FIG9 , the trusted agent reads the second application signature and sends the second application signature to the security chip to request the security chip to decrypt the second application signature using the public key of the provincial platform to obtain the first digital summary, and then returns the first digital summary to the trusted agent. The trusted agent uses the hash algorithm in the first digital certificate to perform hash processing on the application installation package of the target application to obtain the second digital summary, and uses the comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0081] In this embodiment, a security chip is used to perform application signature decryption to ensure the security of application signature decryption, thereby ensuring the security of application operation.

[0082] In a specific embodiment, as shown in FIG10 , the server includes a network-level platform server and a provincial-level platform server, wherein the network-level platform is a platform for application development and launch, and the provincial-level platform is a platform for application installation. In response to the application development instruction, the network-level platform server sends the application development requirements and the second digital certificate to the application developer; and receives the target application, the first application signature of the target application, and the second digital certificate returned by the application developer. The network-level platform server sends the target application, the first application signature of the target application, and the second digital certificate to the application detection device, and instructs the application detection device to detect the target application, including the second digital certificate detection and the target application detection, that is, to verify the second digital certificate and obtain the second certificate verification result of the second digital certificate; based on the first application signature, the target application is verified to obtain the second application verification result of the target application. The second certificate verification result and the second application verification result are returned to the network-level platform server, and the network-level platform server performs the launch operation on the target application when it is determined that the second certificate verification result and the second application verification result are both verified and passed. After the launch is completed, the launched target application is pushed to the provincial-level platform server. The provincial platform server uses the hash algorithm in the original digital certificate to hash the application installation package of the target application to obtain the first digital summary, and then encrypts the first digital summary with the private key of the provincial platform server to obtain the second application signature. At this time, the hardware developer uploads the designated installation terminal address to the provincial platform server, and the provincial platform server adds the designated installation terminal address to the original digital certificate to obtain the first digital certificate, and sends the application installation package and the first digital certificate to the hardware developer. The hardware developer installs the target application in the designated intelligent measurement terminal according to the designated installation terminal address in the first digital certificate. In response to the running instruction for the target application in the intelligent measurement terminal, the provincial platform server obtains the first digital certificate used by the target application during the installation process; verifies the first digital certificate to obtain the first certificate verification result of the first digital certificate. When the first certificate verification result indicates that the first digital certificate has not been tampered with, the designated installation terminal address is compared with the current terminal address of the intelligent measurement terminal to obtain the address comparison result. When the address comparison result indicates that the comparison is consistent, the target application is verified to obtain the first application verification result of the target application. When the first application verification result indicates that the target application has not been tampered with, the intelligent measurement terminal is instructed to run the target application.

[0083] In this embodiment, when receiving the running instruction for the target application in the intelligent measurement terminal, the first digital certificate used by the target application in the installation process is first obtained. It can be understood that the digital certificate is a digital certificate that records the installation information of the target application, such as the designated installation terminal address of the target application. The technical solution of this application will first verify the first digital certificate. When it is determined that the first digital certificate has not been tampered with, the terminal address verification is further performed. The terminal address verification is to ensure that the application is running in the correct intelligent measurement terminal, that is, the designated installation terminal address is compared with the current terminal address of the intelligent measurement terminal to obtain the address comparison result. When the address comparison result indicates that the comparison is consistent, the target application itself needs to be verified. When the first application verification result of the target application indicates that the target application has not been tampered with, the intelligent measurement terminal is instructed to run the target application. In this way, the security of the application running in the intelligent measurement terminal is ensured through digital certificate verification, terminal address verification and application verification.

[0084] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments can include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0085] Based on the same inventive concept, the embodiment of the present application also provides a security protection mechanism and implementation device for smart measurement terminal APP applications for realizing the security protection mechanism and implementation method for smart measurement terminal APP applications involved above. The implementation solution provided by the device to solve the problem is similar to the implementation solution recorded in the above method, so the specific limitations in the embodiments of one or more security protection mechanisms and implementation devices for smart measurement terminal APP applications provided below can refer to the limitations of the security protection mechanism and implementation method for smart measurement terminal APP applications above, and will not be repeated here.

[0086] In an exemplary embodiment, as shown in FIG. 11 , a security protection mechanism and an implementation device for an APP application of an intelligent measurement terminal are provided, including: a digital certificate acquisition module 1102, for obtaining a first digital certificate used by the target application during the installation process in response to a running instruction for the target application in the intelligent measurement terminal; the first digital certificate includes a designated installation terminal address of the target application; a digital certificate verification module 1104, for verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; a terminal address comparison module 1106, for comparing the designated installation terminal address with the current terminal address of the intelligent measurement terminal to obtain an address comparison result when the first certificate verification result indicates that the first digital certificate has not been tampered with; an application verification module 1108, for verifying the target application to obtain a first application verification result of the target application when the address comparison result indicates that the comparison is consistent; and an application running module 1110, for instructing the intelligent measurement terminal to run the target application when the first application verification result indicates that the target application has not been tampered with.

[0087] In one of the embodiments, the device is also used to: in response to an installation instruction for a target application, perform an online detection on the target application to obtain an online detection result of the target application; when the online detection result indicates that the target application is online, install the target application in the smart measurement terminal to which the specified installation terminal address belongs.

[0088] In one of the embodiments, the device is also used to: respond to an application development instruction, send the application development requirements indicated by the application development instruction to the application developer; receive a target application returned by the application developer; the target application is obtained by the application developer through application development based on the application development requirements.

[0089] In one of the embodiments, the device is also used to: in response to an online instruction for a target application, obtain a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by an application developer; the first application signature is obtained by the application developer after hashing the target application based on the hash algorithm in the second digital certificate; verify the second digital certificate to obtain a second certificate verification result of the second digital certificate; verify the target application based on the first application signature to obtain a second application verification result of the target application; and when both the second certificate verification result and the second application verification result indicate that they have not been tampered with, perform an online operation on the target application.

[0090] In one of the embodiments, the digital certificate verification module 1104 is also used to: obtain the basic certificate information and the first certificate signature of the first digital certificate, perform information verification on the basic certificate information, and obtain a basic information verification result; when the basic information verification result indicates that the verification is passed, decrypt the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, perform hash processing on the first digital certificate to obtain a second certificate summary; and use the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0091] In one of the embodiments, the application verification module 1108 is also used to: obtain a second application signature of the target application, decrypt the second application signature to obtain a first digital summary; based on the hash algorithm in the first digital certificate, hash the application installation package of the target application to obtain a second digital summary; and use the comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0092] In one of the embodiments, the target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

[0093] In one of the embodiments, the device is further used to: when the address comparison result indicates that the comparison is inconsistent, indicate that the verification failed.

[0094] In one of the embodiments, the device is further used to: when the first application verification result indicates that the target application has been tampered with, indicate that the application verification has failed.

[0095] In one embodiment, the application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

[0096] Each module in the above-mentioned security protection mechanism and implementation device for smart measurement terminal APP applications can be implemented in whole or in part through software, hardware and their combination. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0097] In an exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be shown in FIG12. The computer device includes a processor, a memory, an input / output interface (Input / Output, referred to as I / O) and a communication interface. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store a security protection mechanism and implementation data for an intelligent measurement terminal APP application. The input / output interface of the computer device is used to exchange information between the processor and an external device. The communication interface of the computer device is used to communicate with an external terminal through a network connection. When the computer program is executed by the processor, a security protection mechanism and an implementation method for an intelligent measurement terminal APP application are implemented.

[0098] Those skilled in the art will understand that the structure shown in FIG. 12 is merely a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0099] In an exemplary embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and the processor implements the following steps when executing the computer program: in response to an operation instruction for a target application in an intelligent measurement terminal, obtaining a first digital certificate used by the target application during installation; the first digital certificate includes a designated installation terminal address of the target application; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the intelligent measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verifying the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instructing the intelligent measurement terminal to run the target application.

[0100] In one embodiment, when the processor executes the computer program, the following steps are also implemented: in response to the installation instruction for the target application, an online detection is performed on the target application to obtain an online detection result of the target application; when the online detection result indicates that the target application is online, the target application is installed in the smart measurement terminal to which the specified installation terminal address belongs.

[0101] In one embodiment, when the processor executes the computer program, the following steps are also implemented: in response to the application development instruction, the application development requirements indicated by the application development instruction are sent to the application developer; and the target application returned by the application developer is received; the target application is developed by the application developer based on the application development requirements.

[0102] In one embodiment, the processor also implements the following steps when executing the computer program: in response to an online instruction for a target application, obtaining a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by the application developer; the first application signature is obtained by the application developer after hashing the target application based on the hash algorithm in the second digital certificate; verifying the second digital certificate to obtain a second certificate verification result of the second digital certificate; verifying the target application based on the first application signature to obtain a second application verification result of the target application; and when both the second certificate verification result and the second application verification result indicate that they have not been tampered with, performing an online operation on the target application.

[0103] In one embodiment, when the processor executes the computer program, the following steps are also implemented: obtaining the certificate basic information and the first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; when the basic information verification result indicates that the verification is passed, decrypting the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, performing hash processing on the first digital certificate to obtain a second certificate summary; and using the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0104] In one embodiment, when the processor executes the computer program, the following steps are also implemented: obtaining a second application signature of the target application, decrypting the second application signature, and obtaining a first digital summary; based on the hash algorithm in the first digital certificate, hashing the application installation package of the target application to obtain a second digital summary; and using the comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0105] In one embodiment, the target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

[0106] In one embodiment, when the processor executes the computer program, the following steps are further implemented: when the address comparison result indicates that the comparison is inconsistent, a prompt indicating that the verification fails.

[0107] In one embodiment, when the processor executes the computer program, the following steps are further implemented: when the first application verification result indicates that the target application has been tampered with, prompting that the application verification has failed.

[0108] In one embodiment, the application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

[0109] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented: in response to an operation instruction for a target application in an intelligent measurement terminal, a first digital certificate used by the target application during installation is obtained; the first digital certificate includes a designated installation terminal address of the target application; the first digital certificate is verified to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, the designated installation terminal address is compared with the current terminal address of the intelligent measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, the target application is verified to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, the intelligent measurement terminal is instructed to run the target application.

[0110] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to the installation instruction for the target application, an online detection is performed on the target application to obtain an online detection result of the target application; when the online detection result indicates that the target application is online, the target application is installed in the smart measurement terminal to which the specified installation terminal address belongs.

[0111] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to the application development instruction, the application development requirements indicated by the application development instruction are sent to the application developer; and the target application returned by the application developer is received; the target application is developed by the application developer based on the application development requirements.

[0112] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to an online instruction for a target application, a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by the application developer are obtained; the first application signature is obtained by the application developer after hashing the target application based on the hash algorithm in the second digital certificate; the second digital certificate is verified to obtain a second certificate verification result of the second digital certificate; based on the first application signature, the target application is verified to obtain a second application verification result of the target application; when both the second certificate verification result and the second application verification result indicate that they have not been tampered with, the target application is put online.

[0113] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the certificate basic information and the first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; when the basic information verification result indicates that the verification is passed, decrypting the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, performing hash processing on the first digital certificate to obtain a second certificate summary; and using the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0114] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining a second application signature of the target application, decrypting the second application signature, and obtaining a first digital summary; based on the hash algorithm in the first digital certificate, hashing the application installation package of the target application to obtain a second digital summary; and using the comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0115] In one embodiment, the target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

[0116] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when the address comparison result indicates that the comparison is inconsistent, a prompt indicating that the verification fails.

[0117] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when the first application verification result indicates that the target application has been tampered with, prompting that the application verification has failed.

[0118] In one embodiment, the application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

[0119] In one embodiment, a computer program product is provided, including a computer program, which implements the following steps when executed by a processor: in response to an operation instruction for a target application in an intelligent measurement terminal, obtaining a first digital certificate used by the target application during installation; the first digital certificate includes a designated installation terminal address of the target application; verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; when the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the intelligent measurement terminal to obtain an address comparison result; when the address comparison result indicates that the comparison is consistent, verifying the target application to obtain a first application verification result of the target application; when the first application verification result indicates that the target application has not been tampered with, instructing the intelligent measurement terminal to run the target application.

[0120] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to the installation instruction for the target application, an online detection is performed on the target application to obtain an online detection result of the target application; when the online detection result indicates that the target application is online, the target application is installed in the smart measurement terminal to which the specified installation terminal address belongs.

[0121] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to the application development instruction, the application development requirements indicated by the application development instruction are sent to the application developer; and the target application returned by the application developer is received; the target application is developed by the application developer based on the application development requirements.

[0122] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: in response to an online instruction for a target application, a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by the application developer are obtained; the first application signature is obtained by the application developer after hashing the target application based on the hash algorithm in the second digital certificate; the second digital certificate is verified to obtain a second certificate verification result of the second digital certificate; based on the first application signature, the target application is verified to obtain a second application verification result of the target application; when both the second certificate verification result and the second application verification result indicate that they have not been tampered with, the target application is put online.

[0123] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining the certificate basic information and the first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; when the basic information verification result indicates that the verification is passed, decrypting the first certificate signature to obtain a first certificate summary; based on the hash algorithm in the first digital certificate, performing hash processing on the first digital certificate to obtain a second certificate summary; and using the comparison result between the first certificate summary and the second certificate summary as the first certificate verification result of the first digital certificate.

[0124] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: obtaining a second application signature of the target application, decrypting the second application signature, and obtaining a first digital summary; based on the hash algorithm in the first digital certificate, hashing the application installation package of the target application to obtain a second digital summary; and using the comparison result between the first digital summary and the second digital summary as the first application verification result of the target application.

[0125] In one embodiment, the target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

[0126] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when the address comparison result indicates that the comparison is inconsistent, a prompt indicating that the verification fails.

[0127] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: when the first application verification result indicates that the target application has been tampered with, prompting that the application verification has failed.

[0128] In one embodiment, the application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

[0129] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant regulations.

[0130] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, an artificial intelligence (AI) processor, etc., but are not limited to this.

[0131] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0132] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A security protection mechanism and implementation method for smart measurement terminal APP applications, characterized in that: The method comprises: In response to a running instruction for a target application in the intelligent measurement terminal, a first digital certificate used by the target application during installation is obtained; the first digital certificate includes a designated installation terminal address of the target application; Verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate; When the first certificate verification result indicates that the first digital certificate has not been tampered with, comparing the designated installation terminal address with the current terminal address of the intelligent measurement terminal to obtain an address comparison result; If the address comparison result indicates that the comparison is consistent, verify the target application to obtain a first application verification result of the target application; When the first application verification result indicates that the target application has not been tampered with, the intelligent measurement terminal is instructed to run the target application.

2. The method according to claim 1, characterized in that The method further comprises: In response to an installation instruction for a target application, performing an online detection on the target application to obtain an online detection result of the target application; When the online detection result indicates that the target application has been online, the target application is installed in the intelligent measurement terminal to which the designated installation terminal address belongs.

3. The method according to claim 1, characterized in that The method further comprises: In response to the application development instruction, sending the application development requirements indicated by the application development instruction to the application developer; A target application returned by the application developer is received; the target application is developed by the application developer based on the application development requirements.

4. The method according to claim 3, characterized in that The method further comprises: In response to an online instruction for the target application, obtaining a second digital certificate used in the process of developing the target application and a first application signature of the target application returned by the application developer; the first application signature is obtained by the application developer after performing hash processing on the target application based on a hash algorithm in the second digital certificate; Verifying the second digital certificate to obtain a second certificate verification result of the second digital certificate; Based on the first application signature, verify the target application to obtain a second application verification result of the target application; When the second certificate verification result and the second application verification result both indicate that the target application has not been tampered with, an online operation is performed on the target application.

5. The method according to claim 1, characterized in that The verifying the first digital certificate to obtain a first certificate verification result of the first digital certificate includes: Obtaining the certificate basic information and the first certificate signature of the first digital certificate, performing information verification on the certificate basic information, and obtaining a basic information verification result; If the basic information verification result indicates that the verification is passed, decrypting the first certificate signature to obtain a first certificate summary; Based on the hash algorithm in the first digital certificate, perform hash processing on the first digital certificate to obtain a second certificate summary; A comparison result between the first certificate digest and the second certificate digest is used as a first certificate verification result of the first digital certificate.

6. The method according to claim 1, characterized in that The verifying the target application to obtain a first application verification result of the target application includes: Obtaining a second application signature of the target application, decrypting the second application signature, and obtaining a first digital summary; Based on the hash algorithm in the first digital certificate, hash the application installation package of the target application to obtain a second digital summary; A comparison result between the first digital digest and the second digital digest is used as a first application verification result of the target application.

7. The method according to claim 1, characterized in that The target application includes at least one of a basic business application, an extended business application, a message distribution application, a meter reading and scheduling application, a data center application, and a monitoring application.

8. The method according to claim 1, characterized in that The method further comprises: When the address comparison result indicates that the comparison is inconsistent, it is prompted that the verification fails.

9. The method according to claim 1, characterized in that: The method further comprises: When the first application verification result indicates that the target application has been tampered with, it is prompted that the application verification has failed.

10. The method according to claim 3, characterized in that The application development requirements include at least one of development cycle, functional requirements, business requirements, and performance requirements.

Images