Trusted software authentication method

Abstract

The invention discloses a trusted software authentication method, which comprises the following steps that: each APP developer sends an APP developed by the APP developer to an authentication platform for registration and obtains an APPID number of the APP developer, and then sends the APPID number to an APP shopping mall for racking; meanwhile, when the APP shopping mall monitors that a new APP is put on shelf, the APPID of the new APP is added to a first white list; the client updates the first white list to a local second white list from the APP shopping mall; when the client side installs the APP and executes the APP for the first time, the APP program is interrupted through the hook, and then the APPID of the APP is obtained and compared with the APPID in the second white list; and if the APPID is in the second white list, continuing to execute the APP program. According to the method provided by the invention, the software downloaded to the local by the client is trusted; in the installation and execution process, trusted authentication can be carried out, it is ensured that the client is in a safe operation environment all the time in the whole cycle, and the safety of the client is ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of computer information security, and in particular to a trusted software authentication method. Background Art

[0002] The various applications (Application, referred to as APP) installed in the client come from a wide range of sources, including official and third-party ones. It is generally believed that applications downloaded from official sources are trustworthy and will not affect the security of the client; while applications downloaded from third parties are untrustworthy due to users' distrust of third-party application security detection mechanisms, which may affect the security of the client.

[0003] Different applications belong to different companies. If each application in the client is downloaded from the official website, it will be very cumbersome. Some small companies do not even have their own official website. The applications they develop can only be promoted to the market by relying on third-party application platforms. As a platform that brings together many applications, downloading applications from third-party application platforms will bring convenience to users, but at the same time it will bring security risks. Illegal intruders may use a certain application to invade the client where the application is located. That is, the execution of untrusted applications may affect the data security of the client.

[0004] In view of this, how to ensure that the applications downloaded to the local client are trustworthy, how to identify untrustworthy software, and how to prevent illegal intruders from invading the client through untrustworthy software have become issues of concern in the current field of information security technology. Summary of the invention

[0005] Purpose of the invention: In response to the problems raised in the background technology, the purpose of the present invention is to provide a trusted software authentication method. Through the method proposed by the present invention, it is ensured that the software downloaded to the local by the client is trusted; trusted authentication is also performed during the installation and execution process, ensuring that the client is always in a safe operating environment throughout the entire cycle, thereby ensuring the security of the client.

[0006] Technical solution: The present invention provides a trusted software authentication method, comprising the following steps:

[0007] (1) Each APP developer sends the APP they developed to the authentication platform for registration. The authentication platform issues each APP with its own APPID number based on the registration application. The APPID number is the unique identity of the APP;

[0008] (2) The authentication platform sends the APP with the APPID to the APP store for listing. At the same time, when the management system of the APP store detects that a new APP is being listed, it pulls the APPID of the listed APP and adds it to the first whitelist of the APP store.

[0009] (3) The client updates the first whitelist in step (2) from the APP store to the second whitelist in the local isolation area;

[0010] (4) After the client downloads the APP from the APP store, when installing the APP, the client uses the hook to interrupt the APP installation process, then obtains the APP ID of the downloaded APP and compares it with the APP ID in the second whitelist; if the APP ID is in the second whitelist, the client continues to execute the APP installation process and installs the APP in the APP installation area of ​​the local privacy zone; otherwise, the client closes the APP installation process;

[0011] (5) When the APP is executed for the first time, the execution program is interrupted by using the hook when the executable file is just launched, and then the APPID of the executed APP is compared with the APPID in the second whitelist. If the APPID of the executed APP is in the second whitelist, the APP continues to be executed; otherwise, the APP execution program is closed.

[0012] Furthermore, the APPID number is a hash value calculated using a hash function based on a Toeplitz matrix.

[0013] Furthermore, the specific process of the authentication platform issuing respective APPID numbers to each APP based on the registration application is as follows:

[0014] 1) The APP developer sends the APP program and a request to obtain the APPID to the authentication platform, where the APP program is the compiled target program, which includes the main framework program, resource program, and extended function program;

[0015] 2) The authentication platform obtains key u1 from the local key pool as a random number to generate the irreducible polynomial p1(x). After obtaining the irreducible polynomial, the authentication platform negotiates key u2 with the APP mall and generates a hash function based on the irreducible polynomial p1(x) and key u2. Use this hash function Calculate the hash value of the main framework program in the APP target program (main frame program), the hash value (Main framework program) is the APPID of the APP;

[0016] 3) The authentication platform sends the APPID to the APP;

[0017] 4) The APP developer binds the APPID to the APP program.

[0018] Furthermore, the specific process of the authentication platform sending the APP carrying the APPID to the APP mall for listing is as follows:

[0019] a) The authentication platform negotiates the key u3 with the APP mall;

[0020] b) The authentication platform uses the transmission key u3 to encrypt the APPID and APP program of the APP, i.e. the target program, and the encryption adopts the XOR operation;

[0021] c) The authentication platform will encrypt the ciphertext Send to APP store;

[0022] d) The APP store uses the transmission key u3 to decrypt the received ciphertext to obtain the APPID and APP target program of the APP, and then puts the APP on the shelves based on the APPID and APP target program of the APP.

[0023] Furthermore, when the management system of the APP mall detects that a new APP is being put on the shelves, the APPID of the put-on APP is pulled and added to the first whitelist list of the APP mall, which means:

[0024] The APP store will search for the APPID of the listed APP in the first whitelist. If the same APPID is found, the duplicated APP corresponding to the APPID will be removed from the shelves; if the same APPID is not found, the APPID of the listed APP will be pulled and added to the first whitelist of the APP store.

[0025] Furthermore, the specific process of the client updating the first whitelist in step (2) from the APP mall to the second whitelist in the local isolation area is as follows:

[0026] A) The APP store obtains a set of random numbers k1 from the local computer to generate an irreducible polynomial p2(x). After obtaining the irreducible polynomial, the string consisting of the coefficients of each term except the highest term in the irreducible polynomial p2(x) is recorded as str2;

[0027] B) The APP store negotiates keys with the client to obtain shared keys s and t respectively; the APP store generates a hash function using the irreducible polynomial p2(x) and the shared key s as the input random number Using this hash function Perform hash operation on the first whitelist to obtain the hash value The APP store uses the shared key t to hash the value First, the whitelist and string str2 are XOR-encrypted, and then the encrypted hash value is First, the whitelist and string str2 are sent to the client, i.e. Send to the client;

[0028] C) The client receives After that, the negotiated shared key t is used for decryption to obtain the hash value First whitelist and string str2; the client generates an n-order irreducible polynomial p2′(x) in GF(2) field with the coefficient of the highest term being 1 by matching each bit in string str2 to the coefficient of each term in the polynomial except the highest term; the client selects the irreducible polynomial p2′(x) and the shared key s as the input random number to generate the hash function Use this hash function Perform hash operation on the first whitelist to obtain the hash value

[0029] D) The client calculates the hash value The hash value obtained by decryption before Compare, if the hash values ​​are equal The client will then update the first whitelist obtained by decryption to the second whitelist in the local isolation area; otherwise, it will return to re-execute the whitelist update operation.

[0030] Further, the client includes sequentially setting a privacy zone, an isolation zone and a communication zone;

[0031] The communication area is used for communication between the client and the outside world;

[0032] The isolation area is used to perform encryption and decryption operations, execute hash calculations and authentication operations, and store a second whitelist;

[0033] The privacy area is used for the installation and operation of the APP.

[0034] Furthermore, the updating method of step (3) is real-time updating or scheduled updating.

[0035] Furthermore, when the updating method in step (3) is a scheduled update, then in step (4), after the installation program is interrupted by using a hook, the client will update the first whitelist list in the APP store to the second whitelist in the local isolation area in real time.

[0036] Furthermore, the second whitelist includes APPIDs of APPs pre-installed by the client.

[0037] The beneficial effects of the present invention are as follows: through the method proposed by the present invention, it is ensured that the software downloaded locally by the client is trustworthy; trusted authentication is also performed during the installation and execution process, ensuring that the client is always in a safe operating environment throughout the entire cycle, thereby ensuring the security of the client. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 A schematic diagram of the process of downloading an application by a client of the present invention;

[0039] Figure 2 It is a flow chart of the trusted software authentication method of the present invention;

[0040] Figure 3 This is a schematic diagram of the whitelist in the APP mall synchronized by the client of the present invention. DETAILED DESCRIPTION

[0041] The present invention will be further described below in conjunction with the accompanying drawings and embodiments:

[0042] As mentioned in the background technology, untrusted applications will pose security risks to the client. In view of this, how to ensure that the applications downloaded to the local client are trustworthy, how to identify untrusted software, and how to prevent illegal intruders from invading the client through untrusted software have become issues of concern in the current field of information security technology.

[0043] Based on the above problems, this application proposes a trusted software authentication method, which covers the time from the application leaving the factory to the application being installed and executed on the client, ensuring that the application is trustworthy throughout the entire cycle of downloading, installation, and running, thereby ensuring the security of the client.

[0044] The process of the client downloading the application in the present invention is as follows: Figure 1As shown, the participants of the present invention include multiple APP developers, authentication platforms, APP malls, and multiple clients; multiple APP developers include the first APP developer, the second APP developer, ..., the nth APP developer, and each developer can develop one or more APPs and put them on the APP mall. The demand of APP developers is to promote the APPs they develop into the market. The authentication platform is a trusted platform, which is a platform recognized by both developers and clients. It is used to issue APPID numbers to APPs. The APPID number is the fingerprint of the APP, indicating the unique identity of the APP in the entire network. The APP mall is used to put APPs on the shelves, and the APPs after being put on the shelves are in a state that can be obtained by the client. Multiple clients include the first client, the second client, ... and so on. These clients can obtain APPs from the APP mall and perform authentication during the installation and first execution of the APP to ensure that the downloaded APP is trustworthy. It can be understood that what is put on the APP mall here is actually the installation package file of the APP. For the sake of understanding, it is uniformly referred to as APP.

[0045] The trusted software authentication method proposed by the present invention comprises the following steps:

[0046] (1) Figure 2 As shown, each APP developer sends the APP they develop to the authentication platform for registration. The authentication platform issues each APP with its own APPID number based on the registration application. The APPID number is the fingerprint of the APP, indicating the unique identity of the APP in the entire network. The APPID number here can be a hash value calculated using a hash function based on the Toeplitz matrix.

[0047] The following takes the process of the authentication platform issuing the APPID number to the first APP developer's APP1 as an example to illustrate the process of the authentication platform issuing the respective APPID number to each APP based on the registration application:

[0048] 1) The first APP developer sends the APP1 program and the request to obtain the APPID to the authentication platform, where the APP1 program is the compiled target program, which includes the main framework program, resource program, and extended function program, etc. The main framework program is the main body of the target program, indicating the startup, basic functions, necessary parameters, and operation of necessary algorithms of the program; the resource program is the program content in the target program that is linked to the library resources, and is used to call the library resources to assist the complete operation of the target program; the extended function program is the program content in the target program that indicates other functions, optional parameters, optional algorithms, etc. in addition to the basic functions, and is used to assist the complete operation of the target program. The basis for extracting the main framework program from the target program is that the main framework program is the necessary program content for the target program to be successfully executed.

[0049] 2) The authentication platform generates an APPID for APP1: The authentication platform obtains a set of keys u1 from the local key pool as random numbers to generate an irreducible polynomial p1(x). After obtaining the irreducible polynomial, the authentication platform negotiates with the APP mall for the key u2 and generates a hash function based on the irreducible polynomial p1(x) and the key u2. Use this hash function Calculate the hash value of the main framework program in the APP1 target program to obtain (main frame program), the hash value (Main frame program) is the APPID of APP1;

[0050] 3) The authentication platform sends the APPID to APP1;

[0051] 4) The first APP developer binds the APPID to the program of APP1, that is, the target program of APP1.

[0052] (2) The authentication platform sends the APP with the APPID to the APP store for listing. At the same time, when the management system of the APP store detects that a new APP is being listed, it pulls the APPID of the listed APP and adds it to the first whitelist of the APP store.

[0053] The APP store is the carrier of the APP. The listed APPs can be downloaded by clients. All clients connected to the APP store (for example, all-in-one machines, servers, etc. that need to download APPs) download APPs from the APP store.

[0054] Here, the authentication platform and the APP store can be deployed in the same local area network, and the interaction between the two is only carried out in the local area network. It can be considered that the process of the authentication platform sending the APP to the APP store is safe. Alternatively, the authentication platform negotiates the transmission key with the APP store and uses encrypted transmission to ensure the security of the APP transmission process.

[0055] The authentication platform negotiates the transmission key with the APP store, and uses encrypted transmission to send the APP carrying the APPID to the APP store for listing. The specific process is as follows:

[0056] a) The authentication platform negotiates the key u3 with the APP mall;

[0057] b) The authentication platform uses the transmission key u3 to encrypt the APPID and the APP program, i.e. the target program, using an XOR operation for encryption;

[0058] c) The authentication platform will encrypt the ciphertext [ (main framework program), target program]⊕u3 sent to APP mall;

[0059] d) The APP store uses the transmission key u3 to decrypt the received ciphertext (Main framework program) is the APPID of the APP and the target program of the APP, and then the APP is put on the shelf based on the APPID of the APP and the target program of the APP; wherein, putting the APP on the shelf based on the APPID of the APP and the target program of the APP means: first, the APP mall applies to the authentication platform for obtaining the irreducible polynomial p1(x); after receiving the application, the authentication platform negotiates the key u4 with the APP mall, and then records the string composed of the coefficients of each term except the highest term in the irreducible polynomial p1(x) as str1, and uses the key u4 to encrypt the string str1 and send it to the APP mall; the APP mall uses the key u4 to decrypt to obtain str1′, and then corresponds each bit in the string str1′ to the coefficient of each term except the highest term in the polynomial, and generates an n-order irreducible polynomial p1′(x) with the highest term coefficient of 1 in the GF(2) field; then select the irreducible polynomial p1′(x) and the negotiated key u2 to generate a hash function Use this hash function Calculate the hash value of the main framework program in the decrypted APP target program The calculated hash value The hash value obtained by decryption before Compare, if the hash values ​​are equal The APP store will then put the APP on the shelves.

[0060] Next, when the management system of the APP store detects that a new APP is being put on the shelves, it pulls the APPID of the APP on the shelves and adds it to the first whitelist list of the APP store:

[0061] The APP store will search for the APPID of the listed APP in the first whitelist. If the same APPID is found, it means that the APP has been listed before and this is a duplicate listing. The duplicated APP corresponding to the APPID will be removed from the shelves. If the same APPID is not found, it means that the APP has not been listed before. The APPID of the listed APP will be pulled and added to the first whitelist of the APP store.

[0062] (3) The client updates the first whitelist in step (2) from the APP store to the local area. Specifically, the APPID list in the first whitelist is updated to the second whitelist in the local isolation area.

[0063] like Figure 3As shown, the client in this application includes a privacy zone, an isolation zone and a communication zone set in sequence; wherein, the communication zone is used for communication between the client and the outside world, and neither the isolation zone nor the privacy zone directly communicates with the outside world, and both need to communicate with the outside world through the communication zone. The isolation zone is used to perform encryption and decryption operations, perform hash calculations and authentication operations, and store the second white list and compare the APPID in the white list; since the outside world only communicates with the communication zone and cannot directly communicate with the isolation zone, the structure of the isolation zone is a black box to the outside world, and the outside world cannot know the specific content in the black box. In addition to the APPID list synchronized from the first white list of the APP mall, the second white list in the isolation zone also has the APPID of the APP pre-installed by the client system. The privacy zone is provided with an APP installation area and a running area for the installation and operation of the APP. The installation area is used to install the APP, and the running area is used to run the APP, which is the execution area of ​​the APP.

[0064] The process of generating the APPID of the APP pre-installed by the client system is consistent with the process of generating the APPID for APP1 by the above-mentioned authentication platform, and will not be repeated here.

[0065] The process of synchronizing the first whitelist from the APP store to the quarantine area is quantum safe. Specifically, it can be sent in an encrypted and authenticated manner. The authentication means that the first whitelist is completely synchronized to the local computer and has not been tampered with during the synchronization process, which effectively prevents bad users from tampering with the whitelist and adding relevant indicator codes of untrusted software outside the APP store into the whitelist.

[0066] The client updates the first whitelist in step (2) from the APP store to the second whitelist in the local isolation area. The specific process is as follows:

[0067] A) The APP store obtains a set of random numbers k1 from the local computer to generate an irreducible polynomial p2(x). After obtaining the irreducible polynomial, the string consisting of the coefficients of each term except the highest term in the irreducible polynomial p2(x) is recorded as str2;

[0068] B) The APP store negotiates keys with the client to obtain shared keys s and t respectively; the APP store generates a hash function using the irreducible polynomial p2(x) and the shared key s as the input random number Using this hash function Perform hash operation on the first whitelist to obtain the hash value The APP store uses the shared key t to hash the value First, the whitelist and string str2 are XOR-encrypted, and then the encrypted hash value is First, the whitelist and string str2 are sent to the client, i.e. Send to the client;

[0069] C) The client receives After that, the negotiated shared key t is used for decryption to obtain the hash value First whitelist and string str2; the client generates an n-order irreducible polynomial p2′(x) in GF(2) field with the coefficient of the highest term being 1 by matching each bit in string str2 to the coefficient of each term in the polynomial except the highest term; the client selects the irreducible polynomial p2′(x) and the shared key s as the input random number to generate the hash function Use this hash function Perform hash operation on the first whitelist to obtain the hash value

[0070] D) The client calculates the hash value The hash value obtained by decryption before Compare, if the hash values ​​are equal The client will then update the first whitelist obtained by decryption to the second whitelist in the local isolation area; otherwise, it will return to re-execute the whitelist update operation.

[0071] The updating method is real-time updating or scheduled updating.

[0072] (4) After the client downloads the APP from the APP store, when installing the APP, the client uses the hook to interrupt the APP installation program, then obtains the APPID of the downloaded APP and compares it with the APPID in the second whitelist. The comparison process is performed in the client isolation area; if the APPID is in the second whitelist, the APP installation program continues to be executed and the APP is installed in the APP installation area of ​​the local privacy zone; otherwise, the APP installation program is closed; it is worth noting that when the update method of step (3) is a scheduled update, after the installation program is interrupted by using the hook, the client will update the first whitelist list from the APP store to the second whitelist in the local isolation area in real time to prevent the second whitelist from being updated in time, resulting in APP installation failure;

[0073] (5) When the APP is executed for the first time, the execution program is interrupted by using a hook as soon as the executable file is pulled up, and then the APPID of the executed APP is compared with the APPID in the second whitelist. The comparison process is performed in the client isolation area. If the APPID of the executed APP is in the second whitelist, the APP continues to run; otherwise, the APP execution program is closed. This step is because some software may be built-in to the system. The APPID of such software is calculated at the factory and the APPID is added to the second whitelist in the isolation area. The executed software may not only be software downloaded from the APP store, but may also be software that comes with the system. Therefore, a comparison operation must also be performed in the first execution step to ensure that the entire process of the software is trustworthy.

[0074] It can be seen that the method proposed in the present invention ensures that the software downloaded locally by the client is trustworthy; trusted authentication is also performed during the installation and execution process, ensuring that the client is always in a safe operating environment throughout the entire cycle, thereby ensuring the security of the client.

Claims

1. A trusted software authentication method, characterized in that: The following steps are involved: (1) Each APP developer sends the APP they developed to the authentication platform for registration. The authentication platform issues each APP with its own APPID number based on the registration application. The APPID number is the unique identity of the APP; (2) The authentication platform sends the APP with the APPID to the APP store for listing. At the same time, when the management system of the APP store detects that a new APP is being listed, it pulls the APPID of the listed APP and adds it to the first whitelist of the APP store. (3) The client updates the first whitelist in step (2) from the APP store to the second whitelist in the local isolation area; (4) After the client downloads the APP from the APP store, when installing the APP, the client uses the hook to interrupt the APP installation process, then obtains the APP ID of the downloaded APP and compares it with the APP ID in the second whitelist; if the APP ID is in the second whitelist, the client continues to execute the APP installation process and installs the APP in the APP installation area of ​​the local privacy zone; Otherwise, close the APP installation program; (5) When the APP is executed for the first time, the execution program is interrupted by using a hook when the executable file is just launched, and then the APPID of the executed APP is compared with the APPID in the second whitelist. If the APPID of the executed APP is in the second whitelist, the APP continues to run; Otherwise, close the APP execution program.

2. A trusted software authentication method according to claim 1, characterized in that: The APPID number is a hash value calculated using a hash function based on a Toeplitz matrix.

3. A trusted software authentication method according to claim 1, characterized in that: The specific process of the authentication platform issuing each APP's respective APPID number based on the registration application is as follows: 1) The APP developer sends the APP program and a request to obtain the APPID to the authentication platform, where the APP program is the compiled target program, which includes the main framework program, resource program, and extended function program; 2) The authentication platform obtains key u1 from the local key pool as a random number to generate the irreducible polynomial p1(x). After obtaining the irreducible polynomial, the authentication platform negotiates key u2 with the APP mall and generates a hash function h based on the irreducible polynomial p1(x) and key u2. p1,u2 , using the hash function h p1,u2 Calculate the hash value of the main framework program in the APP target program to get h p1,u2 (main frame program), the hash value h p1,u2 (Main framework program) is the APPID of the APP; 3) The authentication platform sends the APPID to the APP; 4) The APP developer binds the APPID to the APP program.

4. A trusted software authentication method according to claim 3, characterized in that: The specific process of the authentication platform sending the APP carrying the APPID to the APP mall for listing is as follows: a) The authentication platform negotiates the key u3 with the APP mall; b) The authentication platform uses the transmission key u3 to encrypt the APPID and APP program of the APP, i.e. the target program, and the encryption adopts the XOR operation; c) The authentication platform will encrypt the ciphertext [h p1,u2 (main framework program), target program]⊕u3 sent to APP mall; d) The APP store uses the transmission key u3 to decrypt the received ciphertext to obtain the APPID and APP target program of the APP, and then puts the APP on the shelves based on the APPID and APP target program of the APP.

5. A trusted software authentication method according to claim 1, characterized in that: When the management system of the APP mall detects that a new APP is being put on the shelves, the APP ID of the APP that is put on the shelves is pulled and added to the first whitelist list of the APP mall, which means: The APP store will search the APPID of the listed APP in the first whitelist. If the same APPID is found, the duplicated APP corresponding to the APPID will be removed from the shelves. If the same APPID is not found, the APPID of the listed APP is pulled and added to the first whitelist list of the APP mall.

6. A trusted software authentication method according to claim 1, characterized in that: The specific process of the client updating the first whitelist in step (2) from the APP mall to the second whitelist in the local isolation area is as follows: A) The APP store obtains a set of random numbers k1 from the local computer to generate an irreducible polynomial p2(x). After obtaining the irreducible polynomial, the string consisting of the coefficients of each term except the highest term in the irreducible polynomial p2(x) is recorded as str2; B) The APP store negotiates keys with the client to obtain shared keys s and t respectively; the APP store generates a hash function using the irreducible polynomial p2(x) and the shared key s as the input random number Using this hash function Perform hash operation on the first whitelist to obtain the hash value (First whitelist); APP Mall uses the shared key t to hash the value (first whitelist), the first whitelist and the string str2 are XOR-encrypted, and then the encrypted hash value is (first whitelist), the first whitelist and the string str2 are sent to the client, that is Send to the client; C) The client receives After that, the negotiated shared key t is used for decryption to obtain the hash value First whitelist and string str2; The client generates an irreducible polynomial p2′(x) of order n with the coefficient of the highest term being 1 in the GF(2) field by matching each bit in the string str2 to the coefficient of each term in the polynomial except the highest term. The client selects the irreducible polynomial p2′(x) and the shared key s as the input random number to generate the hash function. Use this hash function Perform hash operation on the first whitelist to obtain the hash value D) The client calculates the hash value The hash value obtained by decryption before Compare, if the hash values ​​are equal The client will then update the first whitelist obtained by decryption to the second whitelist in the local isolation area; otherwise, it will return to re-execute the whitelist update operation.

7. A trusted software authentication method according to claim 1, characterized in that: The client includes a privacy zone, an isolation zone and a communication zone set in sequence; The communication area is used for communication between the client and the outside world; The isolation area is used to perform encryption and decryption operations, execute hash calculations and authentication operations, and store a second whitelist; The privacy area is used for the installation and operation of the APP.

8. A trusted software authentication method according to claim 1, characterized in that: The updating method of step (3) is real-time updating or scheduled updating.

9. A trusted software authentication method according to claim 8, characterized in that: When the updating method in step (3) is scheduled updating, then in step (4), after the installation program is interrupted by using the hook, the client will update the first whitelist list in the APP store to the second whitelist in the local isolation area in real time.

10. A trusted software authentication method according to claim 1, characterized in that: The second whitelist includes the APPIDs of the APPs pre-installed by the client.

Images