Automatic signature method, device, system, equipment and medium

Abstract

The invention relates to the technical field of data security, and discloses an automatic signature method, device, system, equipment and medium, and the method comprises the steps: obtaining a locally created current configuration file in response to an application program signature instruction sent by a user side, and sending the current configuration file to the user side, the user side obtains the unique identification code of the equipment based on the current configuration file; receiving an equipment unique identification code sent by the user side, and obtaining a current description file from the business server based on the equipment unique identification code; obtaining an initial application program installation package and a digital certificate file corresponding to the application program signature instruction, and signing the initial application program installation package based on the current description file and the digital certificate file to obtain a signed application program installation package; and sending the signature application program installation package to the user side. Any user side belonging to the interior of the enterprise can initiate the automatic signature process, and the signature efficiency of the installation package is improved.

Description

Technical Field

[0001] The present application relates to the technical field of digital certificates for data security, and in particular to automatic signature methods, devices, systems, equipment and media. Background Art

[0002] The main ways to sign applications on mobile terminals with iOS (i.e., mobile operating system developed by Apple) are App Store Distribution Signing (App Store is Apple's application store) and Enterprise Signing. Enterprise Signing is a method for distributing applications within an enterprise without relying on the App Store. Applications signed with an enterprise distribution certificate, such as applications related to financial services, can be installed and run on the enterprise's devices.

[0003] However, when using the enterprise signature method to sign applications distributed within the enterprise, there are the following defects:

[0004] 1) Signed devices are restricted, that is, enterprise-signed applications can only be installed and run on enterprise-authorized devices; moreover, users need to manually trust enterprise certificates, and the number of devices is limited;

[0005] 2) Reliance on an enterprise developer account, that is, in order to perform enterprise signing, you need to have a valid enterprise developer account, which means you need to manage and maintain the account and bear the responsibilities and costs associated with it.

[0006] 3) Enterprise signatures have security risks, that is, enterprise-signed applications are not uploaded to a third party for review, which poses certain security risks; and malicious users may abuse enterprise signatures to distribute malware and bypass the company's security policies. Summary of the invention

[0007] The present application provides an automatic signing method, apparatus, system, device and medium to solve the technical problem that when using enterprise signing to sign internally distributed applications, the enterprise-signed applications can only be installed and run on devices authorized by the enterprise, the signing devices are restricted, and the signing efficiency is low.

[0008] In a first aspect, an automatic signature method is provided, which is applied to a distribution server, and the automatic signature method includes:

[0009] In response to an application signing instruction sent by a user terminal, obtaining a current configuration file created locally, and sending the current configuration file to the user terminal, so that the user terminal obtains a device unique identification code based on the current configuration file;

[0010] Receiving the unique device identification code sent by the user terminal, and acquiring a current description file from a service server based on the unique device identification code;

[0011] Acquire an initial application installation package and a digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0012] The signed application installation package is sent to the user terminal.

[0013] In a second aspect, an automatic signature method is provided, which is applied to an automatic signature system, wherein the automatic signature system includes a distribution server, a user terminal and a service server, wherein both the user terminal and the service server are connected to the distribution server in communication; the automatic signature method includes:

[0014] The user terminal generates an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and sends the application signing instruction to the distribution server;

[0015] The distribution server obtains a locally created current configuration file according to the application signing instruction sent by the user terminal, and sends the current configuration file to the user terminal;

[0016] The user terminal obtains a unique device identification code based on the current configuration file and sends the code to the distribution server;

[0017] The distribution server receives the device unique identification code sent by the user terminal, and sends the device unique identification code to the service server;

[0018] The service server generates a current description file locally based on the unique identification code of the device, and sends the current description file to the distribution server;

[0019] The distribution server obtains an initial application installation package and a digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0020] The distribution server sends the signed application installation package to the user terminal.

[0021] In a third aspect, an automatic signature device is provided, which is configured on a distribution server, and the automatic signature device includes:

[0022] an identification code acquisition unit, configured to acquire a locally created current configuration file in response to an application signing instruction sent by a user terminal, and send the current configuration file to the user terminal, so that the user terminal acquires a unique device identification code based on the current configuration file;

[0023] A description file acquisition unit, configured to receive the device unique identification code sent by the user terminal, and acquire a current description file from a service server based on the device unique identification code;

[0024] an automatic signing unit, configured to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and to sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0025] The installation package sending unit is used to send the signed application installation package to the user terminal.

[0026] In a fourth aspect, an automatic signature system is provided, which includes a distribution server, a user terminal and a business server, wherein the user terminal and the business server are both in communication connection with the distribution server;

[0027] The user terminal is used to generate an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and send the application signing instruction to the distribution server;

[0028] The distribution server is used to obtain a current configuration file created locally according to the application signing instruction sent by the user terminal, and send the current configuration file to the user terminal;

[0029] The user terminal is further used to obtain a unique device identification code based on the current configuration file and send the code to the distribution server;

[0030] The distribution server is further configured to receive the device unique identification code sent by the user terminal, and send the device unique identification code to the service server;

[0031] The business server is used to generate a current description file locally based on the unique identification code of the device, and send the current description file to the distribution server;

[0032] The distribution server is further configured to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and to sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0033] The distribution server is also used to send the signed application installation package to the user terminal.

[0034] In a fifth aspect, a computer device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the automatic signature method in the first aspect are implemented, or the steps of the automatic signature method in the second aspect are implemented.

[0035] In a sixth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the automatic signature method in the first aspect or the steps of the automatic signature method in the second aspect are implemented.

[0036] In the scheme implemented by the above-mentioned automatic signing method, apparatus, system, device and medium, it is possible to respond to the application signing instruction sent by the user terminal, obtain the current configuration file created locally, and send the current configuration file to the user terminal, so that the user terminal obtains the device unique identification code based on the current configuration file; receive the device unique identification code sent by the user terminal, and obtain the current description file from the business server based on the device unique identification code; obtain the initial application installation package and digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and digital certificate file to obtain the signed application installation package; send the signed application installation package to the user terminal. In this application, a request for an application that needs to be corporate signed can be initiated on any user terminal. The distribution server only needs to obtain the device unique identification code of the user terminal to quickly obtain the corresponding current description file and digital certificate file from the business server to sign the initial application installation package, thereby achieving more flexible signature and application distribution and improving signature and application distribution efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments of the present application will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0038] Figure 1This is a schematic diagram of an application environment of an automatic signature method in an embodiment of the present application;

[0039] Figure 2 This is a flow chart of an automatic signature method in one embodiment of the present application;

[0040] Figure 3 This is a schematic diagram of a sub-process of an automatic signature method in an embodiment of the present application;

[0041] Figure 4 This is a flow chart of an automatic signature method in another embodiment of the present application;

[0042] Figure 5 This is a schematic diagram of the structure of an automatic signature device in one embodiment of the present application;

[0043] Figure 6 This is a schematic diagram of the structure of an automatic signature system in one embodiment of the present application;

[0044] Figure 7 is a structural schematic diagram of a computer device in one embodiment of the present application;

[0045] Figure 8 It is another structural schematic diagram of a computer device in one embodiment of the present application. DETAILED DESCRIPTION

[0046] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0047] The automatic signature method provided in the embodiment of the present application can be applied in Figure 1In the application environment, the user terminal 12 and the business server 13 both communicate with the distribution server 11 through the network. The distribution server 11 can respond to the application signing instruction sent by the user terminal, obtain the current configuration file created locally, and send the current configuration file to the user terminal, so that the user terminal obtains the device unique identification code based on the current configuration file; receives the device unique identification code sent by the user terminal, and obtains the current description file from the business server based on the device unique identification code; obtains the initial application installation package and digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package; sends the signed application installation package to the user terminal. In the present application, after the distribution server obtains the current description file from the business server based on the device unique identification code of the user terminal, it can automatically sign the initial application installation package in combination with the digital certificate file stored locally. There is no need to require that the user terminal is the signature device designated by the distribution server. Any user terminal within the enterprise can initiate the above-mentioned automatic signing process, which improves the signing efficiency of the installation package.

[0048] The user end may be, but is not limited to, various personal computers, laptops, smart phones, tablet computers, and portable wearable devices. The server end (such as the distribution server in the above example) may be implemented with an independent server or a server cluster consisting of multiple servers. The present application is described in detail below through specific embodiments.

[0049] See also Figure 2 As shown, Figure 2 A flowchart of an automatic signature method provided in an embodiment of the present application is provided. The automatic signature method is applied to a distribution server, and the distribution server is deployed in an automatic signature system. The automatic signature system also includes a user terminal and a service server. The user terminal and the service server communicate with the distribution server through a network. The automatic signature method includes the following steps:

[0050] S110. In response to an application signing instruction sent by a user terminal, obtain a current configuration file created locally, and send the current configuration file to the user terminal, so that the user terminal obtains a device unique identification code based on the current configuration file.

[0051] In this embodiment, when the distribution server receives an application signing instruction sent from at least one user terminal, it can first obtain the current configuration file created locally on the server, and then the configuration is sent by the distribution server to other terminals such as the user terminal, and then it can be automatically installed and used to obtain the unique device identification code of the other terminal. Moreover, after the current configuration file is installed on the user terminal, the detailed information of the current configuration file and the requested permissions can be visually prompted on the user terminal. It can be seen that the above process is triggered by the application signing instruction sent by the user terminal, and the distribution server can respond to the application signing instruction in a timely manner and provide corresponding feedback on the current configuration file.

[0052] In one embodiment, step S110 includes:

[0053] A current configuration file that is created locally in real time or in advance is obtained; wherein the current configuration file includes a first preset instruction for obtaining a unique identification code of a device, and the file format of the current configuration file is a first preset file format.

[0054] In this embodiment, the current configuration file can be created in real time or in advance in the distribution server, and the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is a first preset file format (such as XML format, where XML stands for Extensible Markup Language). When the current configuration file is created in real time in the distribution server, the distribution server can generate the current configuration file in a targeted manner based on actual needs; when the current configuration file is created in advance in the distribution server, it can be avoided that the distribution server receives application signature instructions sent by multiple user terminals at the same time, which takes a lot of time to generate the current configuration file.

[0055] S120: Receive the device unique identification code sent by the user terminal, and obtain a current description file from a service server based on the device unique identification code.

[0056] In this embodiment, after the user terminal receives the current configuration file, the current configuration file can be automatically installed locally. After the current configuration file is automatically installed locally on the user terminal, the instruction to automatically obtain the unique device identifier in the current configuration file can automatically obtain the unique device identifier of the user terminal (which can be represented by UDID, and the full name of UDID is Unique Device Identifier), and then the user terminal sends the obtained unique device identifier to the distribution server. After the distribution server receives the unique device identifier corresponding to the user terminal, it does not obtain the description file locally, but the distribution server sends the unique device identifier to the business server. In the business server, the unique device identifier can be registered in the business server using a registration tool that is pre-deployed and has a registration function, and then the business server generates a current description file for the unique device identifier. It should be noted that the description files generated by the business server for different unique device identifiers sent by different user terminals are different (that is, the description files are different due to the differences in the unique device identifiers).

[0057] S130. Obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package.

[0058] In this embodiment, when the user terminal interacts with the distribution server, the user terminal can first access the Web page corresponding to the distribution server, and select an application installation package from the list of application installation packages to be signed provided by the Web page as the initial application installation package to be signed (the above user operation of the user terminal selecting an application installation package from the list of application installation packages to be signed corresponds to triggering the generation of an application signing instruction). The distribution server can obtain the corresponding initial application installation package based on the application signing instruction, and after the distribution server obtains the current description file sent by the business server, it also signs the initial application installation package in combination with the digital certificate file stored locally to obtain the signed application installation package. It can be seen that when the above process distributes the signed application installation package to the user terminal within the enterprise, there is no need to require that the user terminal is the signature device designated by the distribution server, and any user terminal within the enterprise can initiate the above automatic signing process.

[0059] In one embodiment, before step S110 or step S130, the method further includes:

[0060] The digital certificate file sent by the developer terminal is received and stored in a preset storage space; wherein the digital certificate file is obtained by the developer terminal from the business server based on a certificate signature request file.

[0061] In this embodiment, the digital certificate file stored in the distribution server comes from the developer terminal. That is, the developer terminal first sends a certificate signing request file (i.e., CSR file, the full name of CSR is Certificate Signing Request) to the business server, and then the business server feedbacks the digital certificate file (which at least includes a private key, a public key, and a digital certificate) to the developer terminal after obtaining the certificate signing request file. Finally, the developer terminal sends the digital certificate file to the distribution server and stores it in the preset storage space of the distribution server. Afterwards, when the distribution server needs to use the digital certificate file for digital signature, it can obtain the digital certificate file from the preset storage space and use it specifically.

[0062] In one embodiment, if Figure 3 As shown, step S130 includes:

[0063] S131, obtaining the current description file and the current application identifier corresponding to the current description file;

[0064] S132. Obtain the current application identifier, the current description file, and the digital certificate file based on a second preset instruction, and sign the initial application installation package to obtain the signed application installation package.

[0065] In this embodiment, when the initial application installation package is signed in the distribution server, the specific process is to first obtain the current description file and the current application identifier corresponding to the current description file (the current application identifier can be represented by Bundle Identifier) ​​from the local, and then obtain the current application identifier, the current description file and the digital certificate file (specifically, the private key, public key and digital certificate therein) based on the second preset instruction (the instruction is used to obtain the relevant initial file in the automatic signing process) and automatically sign the initial application installation package, so as to finally obtain the signed application installation package that has completed the automatic signing. It should be noted that the above process is described based on the process of automatically signing an initial application installation package in the distribution server. When the distribution server needs to automatically sign multiple initial application installation packages respectively, the specific process is the same as the process of automatically signing an initial application installation package, which can achieve rapid batch automatic signing and distribution (more specifically, such as distribution of internal enterprise applications, internal testing and other scenarios).

[0066] S140: Send the signed application installation package to the user terminal.

[0067] In this embodiment, when the signed application installation package is obtained in the distribution server, it is sent to the user terminal in a timely manner. After that, after the user terminal has installed the signed application installation package and used the corresponding application, it can send update / change requirements or user feedback information to the distribution server in a timely manner, so that the distribution server can update / change the application corresponding to the signed application installation package, and the user can obtain the latest version of the application in a timely manner.

[0068] To summarize, in this application, when the distribution server obtains the current description file from the business server based on the user's device unique identification code, it can automatically sign the initial application installation package in combination with the locally stored digital certificate file. There is no need to require the user to be the signing device designated by the distribution server. Any user within the enterprise can initiate the above-mentioned automatic signing process, thereby improving the signing efficiency of the installation package.

[0069] See also Figure 4 As shown, Figure 4 A flowchart of another automatic signature method provided in an embodiment of the present application is provided. The automatic signature method is applied to an automatic signature system. The automatic signature system includes a distribution server, a user terminal and a service server. The user terminal and the service server are both connected to the distribution server in communication. The automatic signature method includes the following steps:

[0070] S210. The user terminal generates an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and sends the application signing instruction to the distribution server.

[0071] In this embodiment, when the user terminal interacts with the distribution server, the user terminal can first access the web page corresponding to the distribution server (the above-mentioned user terminal successfully logs in to access the web page, which triggers the generation of an automatic signing instruction), and selects an application installation package from the list of application installation packages to be signed provided by the web page as the initial application installation package to be signed (the above-mentioned user operation of the user terminal to select an application installation package from the list of application installation packages to be signed triggers the generation of an application signing instruction corresponding to the automatic signing instruction). After the user terminal sends the application signing instruction to the server, the process of completely and automatically encrypting the initial application installation package is started.

[0072] In one embodiment, the automatic signature system further includes a developer terminal, and the developer terminal is communicatively connected to both the distribution server and the business server; before step S210, the following is further included:

[0073] If the developer terminal detects a certificate acquisition instruction, it acquires a certificate signing request file corresponding to the certificate acquisition instruction, and sends the certificate signing request file to the business server;

[0074] The developer terminal receives an initial digital certificate file sent by the business server and corresponding to the certificate signing request file;

[0075] The developer terminal obtains the private key, public key and digital certificate in the initial digital certificate file based on a preset data export strategy, and forms the digital certificate file;

[0076] The developer terminal sends the digital certificate file to the distribution server.

[0077] In this embodiment, the digital certificate file stored in the distribution server comes from the developer terminal. That is, the developer terminal first sends a certificate signing request file (i.e., CSR file, the full name of CSR is Certificate Signing Request) to the business server, and then the business server feedbacks the initial digital certificate file (which at least includes a private key, a public key, and a digital certificate) to the developer terminal after obtaining the certificate signing request file. Then, the local data export strategy with data export function obtains the private key, public key, and digital certificate in the initial digital certificate file and forms a digital certificate file. Finally, the developer terminal sends the digital certificate file to the distribution server and stores it in the preset storage space in the distribution server. Afterwards, when the distribution server needs to use the digital certificate file for digital signature, it can obtain the digital certificate file from the preset storage space and use it specifically.

[0078] S220: The distribution server obtains a current configuration file created locally according to the application signing instruction sent by the user terminal, and sends the current configuration file to the user terminal.

[0079] In this embodiment, when the distribution server receives an application signing instruction sent from at least one user terminal, it can first obtain the current configuration file created locally on the server, and then the configuration is sent by the distribution server to other terminals such as the user terminal, and then it can be automatically installed and used to obtain the unique device identification code of the other terminal. Moreover, after the current configuration file is installed on the user terminal, the detailed information of the current configuration file and the requested permissions can be visually prompted on the user terminal. It can be seen that the above process is triggered by the application signing instruction sent by the user terminal, and the distribution server can respond to the application signing instruction in a timely manner and provide corresponding feedback on the current configuration file.

[0080] Wherein, step S220 is specifically implemented as follows: obtaining a current configuration file that is created locally in real time or in advance; wherein the current configuration file includes a first preset instruction for obtaining a unique identification code of the device, and the file format of the current configuration file is a first preset file format.

[0081] In the distribution server, the current configuration file can be created in real time or in advance, and the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is the first preset file format (such as XML format, where XML stands for Extensible Markup Language). When the current configuration file is created in real time in the distribution server, the distribution server can generate the current configuration file in a targeted manner based on actual needs; when the current configuration file is created in advance in the distribution server, it can avoid the distribution server receiving application signature instructions sent by multiple user terminals at the same time, which takes a lot of time to generate the current configuration file.

[0082] S230: The user terminal obtains a unique device identification code based on the current configuration file, and sends the code to the distribution server.

[0083] In this embodiment, since the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is the first preset file format, after the user terminal obtains the current configuration file and completes the automatic installation, the first preset instruction therein can be automatically executed to automatically obtain the unique device identification code of the user terminal (which can be represented by UDID, and the full name of UDID is Unique Device Identifier), and then the user terminal sends the obtained unique device identification code to the distribution server.

[0084] S240: The distribution server receives the device unique identification code sent by the user terminal, and sends the device unique identification code to the service server.

[0085] In this embodiment, after the distribution server receives the unique device identification code corresponding to the user terminal, the description file is not obtained locally, but the distribution server sends the unique device identification code to the service server.

[0086] S250: The business server generates a current description file locally based on the unique identification code of the device, and sends the current description file to the distribution server.

[0087] In this embodiment, the service server can first register the device unique identification code in the service server using a registration tool that is pre-deployed and has a registration function, and then the service server generates a current description file for the device unique identification code. It should be noted that the description files generated by the service server for different device unique identification codes sent by different user terminals are different (that is, the description files are different due to the differences in the device unique identification codes).

[0088] S260: The distribution server obtains an initial application installation package and a digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package.

[0089] In this embodiment, the distribution server can obtain the corresponding initial application installation package based on the application signing instruction, and after the distribution server obtains the current description file sent by the business server, it also signs the initial application installation package in combination with the digital certificate file stored locally to obtain the signed application installation package. It can be seen that when the above process distributes the signed application installation package to the user terminal within the enterprise, it is not necessary to require the user terminal to be the signature device designated by the distribution server, and any user terminal within the enterprise can initiate the above automatic signing process.

[0090] In one embodiment, step S260 includes:

[0091] Acquire the current description file and the current application identifier corresponding to the current description file;

[0092] The current application identifier, the current description file and the digital certificate file are obtained based on the second preset instruction, and the initial application installation package is signed to obtain the signed application installation package.

[0093] In this embodiment, when the initial application installation package is signed in the distribution server, the specific process is to first obtain the current description file and the current application identifier corresponding to the current description file (the current application identifier can be represented by Bundle Identifier) ​​from the local, and then obtain the current application identifier, the current description file and the digital certificate file (specifically, the private key, public key and digital certificate therein) based on the second preset instruction (the instruction is used to obtain the relevant initial file in the automatic signing process) and automatically sign the initial application installation package, so as to finally obtain the signed application installation package that has completed the automatic signing. It should be noted that the above process is described based on the process of automatically signing an initial application installation package in the distribution server. When the distribution server needs to automatically sign multiple initial application installation packages respectively, the specific process is the same as the process of automatically signing an initial application installation package, which can achieve rapid batch automatic signing and distribution (more specifically, such as distribution of internal enterprise applications, internal testing and other scenarios).

[0094] S270: The distribution server sends the signed application installation package to the user terminal.

[0095] In this embodiment, when the signed application installation package is obtained in the distribution server, it is sent to the user terminal in a timely manner. After that, after the user terminal has installed the signed application installation package and used the corresponding application, it can send update / change requirements or user feedback information to the distribution server in a timely manner, so that the distribution server can update / change the application corresponding to the signed application installation package, and the user can obtain the latest version of the application in a timely manner.

[0096] To summarize, in this application, when the distribution server obtains the current description file from the business server based on the user's device unique identification code, it can automatically sign the initial application installation package in combination with the locally stored digital certificate file. There is no need to require the user to be the signing device designated by the distribution server. Any user within the enterprise can initiate the above-mentioned automatic signing process, thereby improving the signing efficiency of the installation package.

[0097] It should be understood that the size of the serial numbers of the steps in the above embodiments does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0098] In one embodiment, an automatic signature device is provided. Figure 5 As shown, Figure 5FIG. 1 is a schematic diagram of a structure of an automatic signature device in an embodiment of the present application. The automatic signature device corresponds one-to-one with the automatic signature method applied to the distribution server in the above embodiment. Figure 5 As shown, the automatic signature device 100 includes an identification code acquisition unit 110, a description file acquisition unit 120, an automatic signature unit 130, and an installation package sending unit 140. The functional modules are described in detail as follows:

[0099] The identification code acquisition unit 110 is used to obtain a locally created current configuration file in response to an application signing instruction sent by the user terminal, and send the current configuration file to the user terminal, so that the user terminal obtains a device unique identification code based on the current configuration file.

[0100] In this embodiment, when the distribution server receives an application signing instruction sent from at least one user terminal, it can first obtain the current configuration file created locally on the server, and then the configuration is sent by the distribution server to other terminals such as the user terminal, and then it can be automatically installed and used to obtain the unique device identification code of the other terminal. Moreover, after the current configuration file is installed on the user terminal, the detailed information of the current configuration file and the requested permissions can be visually prompted on the user terminal. It can be seen that the above process is triggered by the application signing instruction sent by the user terminal, and the distribution server can respond to the application signing instruction in a timely manner and provide corresponding feedback on the current configuration file.

[0101] In one embodiment, the identification code acquisition unit 110 is specifically used to:

[0102] A current configuration file that is created locally in real time or in advance is obtained; wherein the current configuration file includes a first preset instruction for obtaining a unique identification code of a device, and the file format of the current configuration file is a first preset file format.

[0103] In this embodiment, the current configuration file can be created in real time or in advance in the distribution server, and the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is a first preset file format (such as XML format, where XML stands for Extensible Markup Language). When the current configuration file is created in real time in the distribution server, the distribution server can generate the current configuration file in a targeted manner based on actual needs; when the current configuration file is created in advance in the distribution server, it can be avoided that the distribution server receives application signature instructions sent by multiple user terminals at the same time, which takes a lot of time to generate the current configuration file.

[0104] The description file acquisition unit 120 is used to receive the device unique identification code sent by the user terminal, and acquire the current description file from the service server based on the device unique identification code.

[0105] In this embodiment, after the user terminal receives the current configuration file, the current configuration file can be automatically installed locally. After the current configuration file is automatically installed locally on the user terminal, the instruction to automatically obtain the unique device identifier in the current configuration file can automatically obtain the unique device identifier of the user terminal (which can be represented by UDID, and the full name of UDID is Unique Device Identifier), and then the user terminal sends the obtained unique device identifier to the distribution server. After the distribution server receives the unique device identifier corresponding to the user terminal, it does not obtain the description file locally, but the distribution server sends the unique device identifier to the business server. In the business server, the unique device identifier can be registered in the business server using a registration tool that is pre-deployed and has a registration function, and then the business server generates a current description file for the unique device identifier. It should be noted that the description files generated by the business server for different unique device identifiers sent by different user terminals are different (that is, the description files are different due to the differences in the unique device identifiers).

[0106] The automatic signing unit 130 is used to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and to sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package.

[0107] In this embodiment, when the user terminal interacts with the distribution server, the user terminal can first access the Web page corresponding to the distribution server, and select an application installation package from the list of application installation packages to be signed provided by the Web page as the initial application installation package to be signed (the above user operation of the user terminal selecting an application installation package from the list of application installation packages to be signed corresponds to triggering the generation of an application signing instruction). The distribution server can obtain the corresponding initial application installation package based on the application signing instruction, and after the distribution server obtains the current description file sent by the business server, it also signs the initial application installation package in combination with the digital certificate file stored locally to obtain the signed application installation package. It can be seen that when the above process distributes the signed application installation package to the user terminal within the enterprise, there is no need to require that the user terminal is the signature device designated by the distribution server, and any user terminal within the enterprise can initiate the above automatic signing process.

[0108] In one embodiment, the automatic signature device 100 further includes:

[0109] The digital certificate file receiving unit is used to receive the digital certificate file sent by the developer terminal and store it in a preset storage space; wherein the digital certificate file is obtained by the developer terminal from the business server based on the certificate signature request file.

[0110] In this embodiment, the digital certificate file stored in the distribution server comes from the developer terminal. That is, the developer terminal first sends a certificate signing request file (i.e., CSR file, the full name of CSR is Certificate Signing Request) to the business server, and then the business server feedbacks the digital certificate file (which at least includes a private key, a public key, and a digital certificate) to the developer terminal after obtaining the certificate signing request file. Finally, the developer terminal sends the digital certificate file to the distribution server and stores it in the preset storage space of the distribution server. Afterwards, when the distribution server needs to use the digital certificate file for digital signature, it can obtain the digital certificate file from the preset storage space and use it specifically.

[0111] In one embodiment, the automatic signature unit 130 is specifically used for:

[0112] Acquire the current description file and the current application identifier corresponding to the current description file;

[0113] The current application identifier, the current description file and the digital certificate file are obtained based on the second preset instruction, and the initial application installation package is signed to obtain the signed application installation package.

[0114] In this embodiment, when the initial application installation package is signed in the distribution server, the specific process is to first obtain the current description file and the current application identifier corresponding to the current description file (the current application identifier can be represented by Bundle Identifier) ​​from the local, and then obtain the current application identifier, the current description file and the digital certificate file (specifically, the private key, public key and digital certificate therein) based on the second preset instruction (the instruction is used to obtain the relevant initial file in the automatic signing process) and automatically sign the initial application installation package, so as to finally obtain the signed application installation package that has completed the automatic signing. It should be noted that the above process is described based on the process of automatically signing an initial application installation package in the distribution server. When the distribution server needs to automatically sign multiple initial application installation packages respectively, the specific process is the same as the process of automatically signing an initial application installation package, which can achieve rapid batch automatic signing and distribution (more specifically, such as distribution of internal enterprise applications, internal testing and other scenarios).

[0115] The installation package sending unit 140 is used to send the signed application installation package to the user terminal.

[0116] In this embodiment, when the signed application installation package is obtained in the distribution server, it is sent to the user terminal in a timely manner. After that, after the user terminal has installed the signed application installation package and used the corresponding application, it can send update / change requirements or user feedback information to the distribution server in a timely manner, so that the distribution server can update / change the application corresponding to the signed application installation package, and the user can obtain the latest version of the application in a timely manner.

[0117] The present application provides an automatic signing device. When the distribution server obtains the current description file from the business server based on the unique device identification code of the user terminal, the initial application installation package can be automatically signed in combination with the locally stored digital certificate file. There is no need to require the user terminal to be the signing device designated by the distribution server. Any user terminal within the enterprise can initiate the above-mentioned automatic signing process, thereby improving the signing efficiency of the installation package.

[0118] In one embodiment, an automatic signature system is provided. Figure 6 As shown, Figure 6 FIG. 1 is a schematic diagram of a structure of an automatic signature system in an embodiment of the present application. The automatic signature system corresponds one-to-one with the automatic signature method used in the automatic signature system in the above embodiment. Figure 6As shown, the automatic signature system 10 includes a distribution server 11 , a user terminal 12 and a business server 13 , and both the user terminal 12 and the business server 13 are communicatively connected to the distribution server 11 .

[0119] The user terminal 12 is used to generate an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and send the application signing instruction to the distribution server.

[0120] In this embodiment, when the user terminal interacts with the distribution server, the user terminal can first access the web page corresponding to the distribution server (the above-mentioned user terminal successfully logs in to access the web page, which triggers the generation of an automatic signing instruction), and selects an application installation package from the list of application installation packages to be signed provided by the web page as the initial application installation package to be signed (the above-mentioned user operation of the user terminal to select an application installation package from the list of application installation packages to be signed triggers the generation of an application signing instruction corresponding to the automatic signing instruction). After the user terminal sends the application signing instruction to the server, the process of completely and automatically encrypting the initial application installation package is started.

[0121] In one embodiment, if Figure 6 As shown, the automatic signature system 10 further includes a developer terminal 14, and the developer terminal 14 is communicatively connected with both the distribution server 11 and the business server 13;

[0122] The developer terminal 14 is configured to obtain a certificate signing request file corresponding to the certificate signing request file if a certificate acquiring instruction is detected, and send the certificate signing request file to the business server;

[0123] The developer terminal 14 is further configured to receive an initial digital certificate file sent by the business server and corresponding to the certificate signing request file;

[0124] Based on a preset data export strategy, the private key, the public key and the digital certificate in the initial digital certificate file are obtained, and the digital certificate file is formed;

[0125] The digital certificate file is sent to the distribution server.

[0126] In this embodiment, the digital certificate file stored in the distribution server comes from the developer terminal. That is, the developer terminal first sends a certificate signing request file (i.e., CSR file, the full name of CSR is Certificate Signing Request) to the business server, and then the business server feedbacks the initial digital certificate file (which at least includes a private key, a public key, and a digital certificate) to the developer terminal after obtaining the certificate signing request file. Then, the local data export strategy with data export function obtains the private key, public key, and digital certificate in the initial digital certificate file and forms a digital certificate file. Finally, the developer terminal sends the digital certificate file to the distribution server and stores it in the preset storage space in the distribution server. Afterwards, when the distribution server needs to use the digital certificate file for digital signature, it can obtain the digital certificate file from the preset storage space and use it specifically.

[0127] The distribution server 11 is used to obtain a current configuration file created locally according to the application signing instruction sent by the user terminal, and send the current configuration file to the user terminal.

[0128] In this embodiment, when the distribution server receives an application signing instruction sent from at least one user terminal, it can first obtain the current configuration file created locally on the server, and then the configuration is sent by the distribution server to other terminals such as the user terminal, and then it can be automatically installed and used to obtain the unique device identification code of the other terminal. Moreover, after the current configuration file is installed on the user terminal, the detailed information of the current configuration file and the requested permissions can be visually prompted on the user terminal. It can be seen that the above process is triggered by the application signing instruction sent by the user terminal, and the distribution server can respond to the application signing instruction in a timely manner and provide corresponding feedback on the current configuration file.

[0129] Among them, the specific process of the distribution server 11 when obtaining the current configuration file created locally is as follows: obtain the current configuration file created locally in real time or in advance; wherein, the current configuration file includes a first preset instruction for obtaining a unique identification code of the device, and the file format of the current configuration file is a first preset file format.

[0130] In the distribution server, the current configuration file can be created in real time or in advance, and the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is the first preset file format (such as XML format, where XML stands for Extensible Markup Language). When the current configuration file is created in real time in the distribution server, the distribution server can generate the current configuration file in a targeted manner based on actual needs; when the current configuration file is created in advance in the distribution server, it can avoid the distribution server receiving application signature instructions sent by multiple user terminals at the same time, which takes a lot of time to generate the current configuration file.

[0131] The user terminal 12 is further configured to obtain a unique device identification code based on the current configuration file and send the unique device identification code to the distribution server.

[0132] In this embodiment, since the current configuration file includes a first preset instruction for obtaining a unique device identification code, and the file format of the current configuration file is the first preset file format, after the user terminal obtains the current configuration file and completes the automatic installation, the first preset instruction therein can be automatically executed to automatically obtain the unique device identification code of the user terminal (which can be represented by UDID, and the full name of UDID is Unique Device Identifier), and then the user terminal sends the obtained unique device identification code to the distribution server.

[0133] The distribution server 11 is further configured to receive the device unique identification code sent by the user terminal, and send the device unique identification code to the service server.

[0134] In this embodiment, after the distribution server receives the unique device identification code corresponding to the user terminal, the description file is not obtained locally, but the distribution server sends the unique device identification code to the service server.

[0135] The business server 13 is used to generate a current description file locally based on the unique identification code of the device, and send the current description file to the distribution server.

[0136] In this embodiment, the service server can first register the device unique identification code in the service server using a registration tool that is pre-deployed and has a registration function, and then the service server generates a current description file for the device unique identification code. It should be noted that the description files generated by the service server for different device unique identification codes sent by different user terminals are different (that is, the description files are different due to the differences in the device unique identification codes).

[0137] The distribution server 11 is also used to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and to sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package.

[0138] In this embodiment, the distribution server can obtain the corresponding initial application installation package based on the application signing instruction, and after the distribution server obtains the current description file sent by the business server, it also signs the initial application installation package in combination with the digital certificate file stored locally to obtain the signed application installation package. It can be seen that when the above process distributes the signed application installation package to the user terminal within the enterprise, it is not necessary to require the user terminal to be the signature device designated by the distribution server, and any user terminal within the enterprise can initiate the above automatic signing process.

[0139] In one embodiment, the distribution server 11 is specifically used for:

[0140] Acquire the current description file and the current application identifier corresponding to the current description file;

[0141] The current application identifier, the current description file and the digital certificate file are obtained based on the second preset instruction, and the initial application installation package is signed to obtain the signed application installation package.

[0142] In this embodiment, when the initial application installation package is signed in the distribution server, the specific process is to first obtain the current description file and the current application identifier corresponding to the current description file (the current application identifier can be represented by Bundle Identifier) ​​from the local, and then obtain the current application identifier, the current description file and the digital certificate file (specifically, the private key, public key and digital certificate therein) based on the second preset instruction (the instruction is used to obtain the relevant initial file in the automatic signing process) and automatically sign the initial application installation package, so as to finally obtain the signed application installation package that has completed the automatic signing. It should be noted that the above process is described based on the process of automatically signing an initial application installation package in the distribution server. When the distribution server needs to automatically sign multiple initial application installation packages respectively, the specific process is the same as the process of automatically signing an initial application installation package, which can achieve rapid batch automatic signing and distribution (more specifically, such as distribution of internal enterprise applications, internal testing and other scenarios).

[0143] The distribution server 11 is also used to send the signed application installation package to the user terminal.

[0144] In this embodiment, when the signed application installation package is obtained in the distribution server, it is sent to the user terminal in a timely manner. After that, after the user terminal has installed the signed application installation package and used the corresponding application, it can send update / change requirements or user feedback information to the distribution server in a timely manner, so that the distribution server can update / change the application corresponding to the signed application installation package, and the user can obtain the latest version of the application in a timely manner.

[0145] To summarize, in this application, when the distribution server obtains the current description file from the business server based on the user's device unique identification code, it can automatically sign the initial application installation package in combination with the locally stored digital certificate file. There is no need to require the user to be the signing device designated by the distribution server. Any user within the enterprise can initiate the above-mentioned automatic signing process, thereby improving the signing efficiency of the installation package.

[0146] In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as follows: Figure 7 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile and / or volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external client via a network connection. When the computer program is executed by the processor, it implements a function or step on the server side of an automatic signature method.

[0147] In one embodiment, a computer device is provided. The computer device may be a client, and its internal structure diagram may be as follows: Figure 8 As shown. The computer device includes a processor, a memory, a network interface, a display screen and an input device connected via a system bus. The processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to communicate with an external server via a network connection. When the computer program is executed by the processor, the functions or steps on the client side of an automatic signature method are implemented.

[0148] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0149] In response to an application signing instruction sent by a user terminal, obtaining a current configuration file created locally, and sending the current configuration file to the user terminal, so that the user terminal obtains a device unique identification code based on the current configuration file;

[0150] Receiving the unique device identification code sent by the user terminal, and acquiring a current description file from a service server based on the unique device identification code;

[0151] Acquire an initial application installation package and a digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0152] The signed application installation package is sent to the user terminal.

[0153] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program:

[0154] The user terminal generates an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and sends the application signing instruction to the distribution server;

[0155] The distribution server obtains the current configuration file created locally according to the application signing instruction sent by the user terminal, and sends the current configuration file to the user terminal;

[0156] The user end obtains the device unique identification code based on the current configuration file and sends it to the distribution server;

[0157] The distribution server receives the unique device identification code sent by the user terminal, and sends the unique device identification code to the service server;

[0158] The business server generates a current description file locally based on the device unique identification code and sends it to the distribution server;

[0159] The distribution server obtains the initial application installation package and the digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0160] The distribution server sends the signed application installation package to the user.

[0161] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0162] In response to the application signing instruction sent by the user terminal, obtain a current configuration file created locally, and send the current configuration file to the user terminal, so that the user terminal obtains a unique device identification code based on the current configuration file;

[0163] Receive the unique device identification code sent by the user terminal, and obtain the current description file from the service server based on the unique device identification code;

[0164] Obtaining an initial application installation package and a digital certificate file corresponding to the application signing instruction, and signing the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0165] Send the signed application installation package to the user.

[0166] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0167] The user terminal generates an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and sends the application signing instruction to the distribution server;

[0168] The distribution server obtains the current configuration file created locally according to the application signing instruction sent by the user terminal, and sends the current configuration file to the user terminal;

[0169] The user end obtains the device unique identification code based on the current configuration file and sends it to the distribution server;

[0170] The distribution server receives the unique device identification code sent by the user terminal, and sends the unique device identification code to the service server;

[0171] The business server generates a current description file locally based on the device unique identification code and sends it to the distribution server;

[0172] The distribution server obtains the initial application installation package and the digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package;

[0173] The distribution server sends the signed application installation package to the user.

[0174] It should be noted that the above functions or steps that can be implemented by the computer-readable storage medium or computer device can refer to the relevant descriptions on the server side and the client side in the aforementioned method embodiment. To avoid repetition, they will not be described one by one here.

[0175] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0176] Those skilled in the art can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example. In actual applications, the above-mentioned functions can be distributed and completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above.

[0177] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. An automatic signature method, applied to a distribution server, characterized in that: include: In response to an application signing instruction sent by a user terminal, obtaining a current configuration file created locally, and sending the current configuration file to the user terminal, so that the user terminal obtains a device unique identification code based on the current configuration file; Receiving the unique device identification code sent by the user terminal, and acquiring a current description file from a service server based on the unique device identification code; Acquire an initial application installation package and a digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package; The signed application installation package is sent to the user terminal.

2. The method according to claim 1, characterized in that Before the step of obtaining a locally created current configuration file in response to the application signing instruction sent by the user terminal, and sending the current configuration file to the user terminal so that the user terminal obtains a device unique identification code based on the current configuration file, the method further includes: The digital certificate file sent by the developer terminal is received and stored in a preset storage space; wherein the digital certificate file is obtained by the developer terminal from the business server based on a certificate signature request file.

3. The method according to claim 1, characterized in that The method of obtaining the currently created configuration file locally includes: A current configuration file that is created locally in real time or in advance is obtained; wherein the current configuration file includes a first preset instruction for obtaining a unique identification code of a device, and the file format of the current configuration file is a first preset file format.

4. The method according to claim 1, characterized in that The step of signing the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package includes: Acquire the current description file and the current application identifier corresponding to the current description file; The current application identifier, the current description file and the digital certificate file are obtained based on the second preset instruction, and the initial application installation package is signed to obtain the signed application installation package.

5. An automatic signature method, applied to an automatic signature system, characterized in that: The automatic signature system includes a distribution server, a user terminal and a service server, wherein the user terminal and the service server are both connected to the distribution server for communication; the automatic signature method includes: The user terminal generates an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and sends the application signing instruction to the distribution server; The distribution server obtains a locally created current configuration file according to the application signing instruction sent by the user terminal, and sends the current configuration file to the user terminal; The user terminal obtains a unique device identification code based on the current configuration file and sends the code to the distribution server; The distribution server receives the device unique identification code sent by the user terminal, and sends the device unique identification code to the service server; The service server generates a current description file locally based on the unique identification code of the device, and sends the current description file to the distribution server; The distribution server obtains an initial application installation package and a digital certificate file corresponding to the application signing instruction, and signs the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package; The distribution server sends the signed application installation package to the user terminal.

6. The method according to claim 5, characterized in that The automatic signature system further includes a developer terminal, which is communicatively connected to both the distribution server and the business server; Before the step of generating, in response to the automatic signature instruction, an application signature instruction corresponding to the automatic signature instruction and sending the application signature instruction to the distribution server, the method further includes: If the developer terminal detects a certificate acquisition instruction, it acquires a certificate signing request file corresponding to the certificate acquisition instruction, and sends the certificate signing request file to the business server; The developer terminal receives an initial digital certificate file sent by the business server and corresponding to the certificate signing request file; The developer terminal obtains the private key, public key and digital certificate in the initial digital certificate file based on a preset data export strategy, and forms the digital certificate file; The developer terminal sends the digital certificate file to the distribution server.

7. An automatic signature device, configured on a distribution server, characterized in that: include: an identification code acquisition unit, configured to acquire a locally created current configuration file in response to an application signing instruction sent by a user terminal, and send the current configuration file to the user terminal, so that the user terminal acquires a unique device identification code based on the current configuration file; A description file acquisition unit, configured to receive the device unique identification code sent by the user terminal, and acquire a current description file from a service server based on the device unique identification code; an automatic signing unit, configured to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and to sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package; The installation package sending unit is used to send the signed application installation package to the user terminal.

8. An automatic signature system, characterized in that: It includes a distribution server, a user terminal and a service server, wherein the user terminal and the service server are both connected to the distribution server for communication; The user terminal is used to generate an application signing instruction corresponding to the automatic signing instruction in response to the automatic signing instruction, and send the application signing instruction to the distribution server; The distribution server is used to obtain a current configuration file created locally according to the application signing instruction sent by the user terminal, and send the current configuration file to the user terminal; The user terminal is further used to obtain a unique device identification code based on the current configuration file and send the code to the distribution server; The distribution server is further configured to receive the device unique identification code sent by the user terminal, and send the device unique identification code to the service server; The business server is used to generate a current description file locally based on the unique identification code of the device, and send the current description file to the distribution server; The distribution server is further used to obtain an initial application installation package and a digital certificate file corresponding to the application signing instruction, and sign the initial application installation package based on the current description file and the digital certificate file to obtain a signed application installation package; The distribution server is also used to send the signed application installation package to the user terminal.

9. A computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the automatic signature method according to any one of claims 1 to 4 are implemented, or the steps of the automatic signature method according to any one of claims 5 to 6 are implemented.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the steps of the automatic signature method according to any one of claims 1 to 4 are implemented, or the steps of the automatic signature method according to any one of claims 5 to 6 are implemented.

Images