Re-signature method and device for application authentication, equipment and storage medium

Abstract

The invention discloses a re-signature method and device for application authentication, equipment and a storage medium. The re-signature method for application authentication comprises the steps that an application market certificate and a to-be-published application program are acquired; performing signature verification on the application program to be published; and when the signature verification is passed, adopting the application market certificate to re-sign the application program to be published so as to obtain a re-signed application program. According to the application, before the signed to-be-issued application program is put on a shelf, the to-be-issued application program is verified, and the application market certificate is adopted to sign after verification is passed, so that a developer can be prevented from directly installing the application program on equipment by bypassing an application ecology of an issuer, and the application efficiency is improved. The controllability of the application ecology of the release version system is ensured, and then the safety of the application ecology of the release version system can be improved.

Description

Technical Field

[0001] The present application relates to the field of system security technology, and in particular to a re-signature method, device, equipment and storage medium for application authentication. Background Art

[0002] Application security refers to the ability to protect computer applications from various security vulnerabilities and attacks, ensuring that applications and their data can run without being attacked. Application security is also an important part of system security. Therefore, when installing applications, authentication of applications, including the integrity and legitimacy of the source of the application, can ensure that the application software is not illegally executed by third-party attackers to implant viruses or tamper with the operating logic, thereby ensuring the security of the application installation process.

[0003] At present, the common way to ensure application security is to digitally sign the application data package. The private key and certificate used for digital signature will be configured in the openharmony code. Then, on any openharmony distribution system, as long as the application is signed with the private key provided in the community code, it can pass the verification and be successfully installed. In other words, any application developed by anyone can bypass the publisher's application ecosystem and be directly installed on the device, which makes the application ecosystem of the distribution system uncontrollable, thus affecting the security of the application ecosystem of the distribution system.

[0004] Therefore the prior art still needs to be improved and enhanced. Summary of the invention

[0005] The technical problem to be solved by the present application is to provide a re-signature method, device, equipment and storage medium for application authentication in view of the deficiencies in the prior art.

[0006] In order to solve the above technical problems, the first aspect of the present application provides a re-signature method for application authentication, wherein the re-signature method for application authentication specifically includes:

[0007] Obtain an application market certificate and an application to be released, wherein the application to be released is an application signed by a developer key pair and an application certificate corresponding to the application to be released;

[0008] Performing signature verification on the application to be released;

[0009] When the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application.

[0010] The re-signing method for application authentication, wherein the generation process of the application market certificate is:

[0011] The digital twin platform uses the intermediate certificate and the private key corresponding to the application market to issue the application market certificate, wherein the intermediate certificate is issued based on the root certificate self-signed by the digital twin platform.

[0012] The re-signing method for application authentication, wherein when the signature verification passes, the application market certificate is used to re-sign the application to be released to obtain the re-signed application, specifically comprising:

[0013] When the signature verification passes, the application to be released is reviewed;

[0014] If the review is passed, the application to be released is re-signed using the private key in the application market key pair and the application market certificate to obtain a re-signed application.

[0015] The re-signing method for application authentication, wherein the process of obtaining the application to be released specifically includes:

[0016] Issue application certificates to developers through the digital twin platform, and issue profile authorization files using the preset profile key pair and profile signature certificate based on the application information of the application to be released;

[0017] The application package data of the application to be released and the profile authorization file are signed based on the application certificate to obtain the application to be released.

[0018] The re-signing method for application authentication, wherein the application information of the application to be released is based on the application information, and the use of a preset profile key pair and a profile signature certificate to issue a profile authorization file specifically includes:

[0019] Obtaining a profile private key in the profile key pair;

[0020] Performing a profile file signing on the application information based on the profile private key to obtain signed application information;

[0021] The signed application information and the profile signature certificate are packaged into p7b format to obtain a profile authorization file.

[0022] The re-signing method for application authentication, wherein when the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application, and the method further includes:

[0023] The re-signed application is published to an application market, and when an electronic device installs the re-signed application, the application market certificate of the re-signed application is verified to verify the source of the re-signed application.

[0024] The re-signing method for application authentication, wherein the re-signing method for application authentication further includes:

[0025] When the verification fails, it is prompted that the application to be released is abnormal.

[0026] A second aspect of the present application provides a re-signature device for application authentication, wherein the re-signature device for application authentication specifically includes:

[0027] An acquisition module, used to acquire an application market certificate and an application to be released, wherein the application to be released is an application signed by a developer key pair and an application certificate corresponding to the application to be released;

[0028] A verification module, used for performing signature verification on the application to be released;

[0029] The re-signing module is used to re-sign the application to be released using the application market certificate to obtain a re-signed application when the signature verification passes.

[0030] The re-signing device for application authentication, wherein the generation process of the application market certificate is:

[0031] The digital twin platform uses the intermediate certificate and the private key corresponding to the application market to issue the application market certificate, wherein the intermediate certificate is issued based on the root certificate self-signed by the digital twin platform.

[0032] The re-signature device for application authentication, wherein the re-signature module specifically includes:

[0033] An audit unit, used for auditing the application to be released when the signature verification passes;

[0034] The signature unit is used to re-sign the application to be released using the private key in the application market key pair and the application market certificate if the application passes the review, so as to obtain a re-signed application.

[0035] The re-signing device for application authentication, wherein the acquisition process of the application to be released specifically includes:

[0036] Issue application certificates to developers through the digital twin platform, and issue profile authorization files using the preset profile key pair and profile signature certificate based on the application information of the application to be released;

[0037] The application package data of the application to be released and the profile authorization file are signed based on the application certificate to obtain the application to be released.

[0038] The re-signing device for application authentication, wherein the application information of the application to be released is based on the application information, and the use of a preset profile key pair and a profile signature certificate to issue a profile authorization file specifically includes:

[0039] Obtaining a profile private key in the profile key pair;

[0040] Performing a profile file signing on the application information based on the profile private key to obtain signed application information;

[0041] The signed application information and the profile signature certificate are packaged into p7b format to obtain a profile authorization file.

[0042] The re-signature device for application authentication, wherein the re-signature module is further used for:

[0043] The re-signed application is published to an application market, and when an electronic device installs the re-signed application, the application market certificate of the re-signed application is verified to verify the source of the re-signed application.

[0044] The re-signature device for application authentication, wherein the re-signature device for application authentication further comprises a prompt module;

[0045] The prompt module is used to prompt that the application to be released is abnormal when the verification fails.

[0046] A third aspect of the present application provides a computer-readable storage medium, which stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps in any of the above-described re-signing methods for application authentication.

[0047] A fourth aspect of the present application provides a terminal device, comprising: a processor and a memory;

[0048] The memory stores a computer-readable program executable by the processor;

[0049] When the processor executes the computer-readable program, the processor implements the steps in any of the above-described re-signing methods for application authentication.

[0050] Beneficial effect: Compared with the prior art, the present application provides a re-signing method, apparatus, device and storage medium for application authentication, wherein the re-signing method for application authentication includes obtaining an application market certificate and an application to be released; performing signature verification on the application to be released; when the signature verification passes, re-signing the application to be released using the application market certificate to obtain a re-signed application. Before putting the signed application to be released on the shelf, the present application will verify the application to be released, and will use the application market certificate to sign it after the verification passes, so as to prevent developers from bypassing the publisher's application ecosystem and installing it directly on the device, thereby ensuring the controllability of the application ecosystem of the distribution system, and thus improving the security of the application ecosystem of the distribution system. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0052] Figure 1 A flowchart of a re-signing method for application authentication provided in an embodiment of the present application.

[0053] Figure 2 An example flowchart of a re-signing method for application authentication provided in an embodiment of the present application.

[0054] Figure 3 A functional block diagram of a re-signature device for application authentication provided in an embodiment of the present application.

[0055] Figure 4 A functional block diagram of a terminal device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0056] The embodiments of the present application provide a re-signing method, device, equipment and storage medium for application authentication. In order to make the purpose, technical solution and effect of the present application clearer and more specific, the present application is further described in detail with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described here are only used to explain the present application and are not used to limit the present application.

[0057] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present application refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0058] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as those generally understood by those skilled in the art to which this application belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have meanings consistent with those in the context of the prior art, and will not be interpreted with idealized or overly formal meanings unless specifically defined as here.

[0059] It should be understood that the sequence numbers and sizes of the steps in this embodiment do not mean the order of execution. The execution order of each process is determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0060] After research, it was found that application security refers to the ability to protect computer applications from various security vulnerabilities and attacks, which can ensure that applications and their data can run without being attacked. Application security is also an important part of system security. Therefore, when installing applications, authentication of applications, including the integrity and legitimacy of the source of the application, can ensure that the application software is not illegally executed by third-party attackers to implant viruses or tamper with the running logic, thereby ensuring the security of the application installation process.

[0061] At present, the common way to ensure application security is to digitally sign the application data package. The private key and certificate used for digital signature will be configured in the openharmony code. Then, on any openharmony distribution system, as long as the application is signed with the private key provided in the community code, it can pass the verification and be successfully installed. In other words, any application developed by anyone can bypass the publisher's application ecosystem and be directly installed on the device, which makes the application ecosystem of the distribution system uncontrollable, thus affecting the security of the application ecosystem of the distribution system.

[0062] In order to solve the above problems, in an embodiment of the present application, an application market certificate and an application to be released are obtained; a signature verification is performed on the application to be released; when the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application. Before putting the signed application to be released on the shelf, the present application will verify the application to be released, and after the verification passes, it will be signed using the application market certificate. This can prevent developers from bypassing the publisher's application ecosystem and installing it directly on the device, ensuring the controllability of the application ecosystem of the distribution system, and thus improving the security of the application ecosystem of the distribution system.

[0063] The application content is further explained below through the description of embodiments in conjunction with the accompanying drawings.

[0064] This embodiment provides a re-signing method for application authentication, such as Figure 1 As shown, applied to a digital twin platform, the method includes:

[0065] S10. Obtain the application market certificate and the application to be released.

[0066] Specifically, the application market certificate is a digital certificate issued by the digital twin platform for the application to be released, and is used to re-sign the application to be released. That is to say, the digital twin platform will issue an application market certificate for the application to be released, and use the application market certificate as the source basis of the application to be released. The source of the application to be released is verified by verifying the application market certificate, so that only applications from the application market can be installed by electronic devices.

[0067] Exemplarily, the process of generating the application market certificate is as follows:

[0068] The application market certificate is issued using the intermediate certificate and the private key corresponding to the application market, wherein the intermediate certificate is issued based on the root certificate self-signed by the digital twin platform.

[0069] Specifically, the private key corresponding to the application market is the private key in the application market key pair generated by the digital twin platform for the application to be released. That is to say, the digital twin platform will generate an application market key pair for the application to be released, and use the private key in the application market key pair to issue the application market certificate for the application to be released. The root certificate is issued by the digital twin platform itself, and the intermediate certificate is issued by the root certificate. The digital twin platform uses the intermediate certificate to issue digital certificates. In other words, the digital twin platform will pre-issue the root certificate and the intermediate certificate, and then use the intermediate certificate to issue the digital certificate when it needs to issue the digital certificate.

[0070] The application to be released is an application to be released to the application market, and the development end digitally signs the application to be released, and the digital signature is performed using the developer key pair and the application certificate corresponding to the application to be released. In other words, the development end will use the developer key pair and the application certificate corresponding to the application to be released to sign the application to be released, and upload the application to be released to the digital twin platform, so as to issue an application market certificate for the application to be released through the digital twin platform, and use the application market certificate to re-sign the application to be released.

[0071] For example, Figure 2 As shown, the process of obtaining the application to be released specifically includes:

[0072] H10. Issue application certificates to developers;

[0073] H20. Based on the application information of the application to be released, a profile authorization file is issued using a preset profile key pair and profile signature certificate;

[0074] H30. Sign the application package data of the application to be released and the profile authorization file based on the application certificate to obtain the application to be released.

[0075] Specifically, in step H10, the application certificate is a digital certificate used to sign the application, that is, the application to be released is obtained by digitally signing based on the application certificate. The application certificate is issued by the digital twin platform based on the public key in the developer key pair, where the developer key pair can be generated by the developer itself or generated by the digital twin platform for the developer.

[0076] For example, the specific process of issuing an application certificate for the developer may be:

[0077] Receive application certificate generation request from the developer;

[0078] When the application certificate generation request carries a csr file, issuing an application certificate to the development end based on the csr file;

[0079] When the application certificate generation request does not carry a csr file, a developer key pair is generated for the developer, and an application certificate is issued to the developer based on the developer key pair.

[0080] Specifically, the application certificate generation request may include the configuration information of the application to be released, which may include the csr file, the application package name of the application to be released, and version information. The csr file is a certificate request file, which is used to request the digital twin platform to issue an application certificate based on the public key in the key pair specified by the developer. The version information is used to reflect the version type of the application to be released, where the version information can be a debug version or a release version.

[0081] The application certificate generation request is generated by the digital twin platform for the developer. Specifically, the digital twin platform sets a login interface, and the developer logs in to the digital twin platform through the login interface and schedules the issuance page of the digital twin platform to upload the locally stored configuration information to the digital twin platform through the issuance page; after receiving the configuration information, the digital twin platform generates an application certificate generation request for the developer. That is to say, when the developer logs in to the digital twin platform through the login interface, the digital twin platform receives the configuration information uploaded by the developer through the issuance page, and when receiving the configuration information, it automatically generates an application certificate generation request, and issues an application certificate for the developer based on the application certificate generation request.

[0082] Further, when the application certificate generation request carries a csr file, the public key in the key pair specified by the developer carried in the csr file is read, and the application certificate is issued for the application to be released based on the public key in the key pair specified by the developer. When the application certificate generation request does not carry a csr file, a developer key pair is generated for the developer, wherein the developer key pair can be randomly generated for the developer, or can be generated based on the key information input by the developer, for example, the developer inputs the key information on the digital twin platform, and then the digital twin platform generates a developer key pair for the developer based on the key information. After the developer key pair is generated for the developer, the public key in the developer key pair is used to issue an application certificate for the application to be released, and a key pair storage file is generated based on the key pair, and the key pair storage file is fed back to the developer so that the developer stores the key pair, wherein the key pair storage file can be in p12 format.

[0083] Further, in step H20, the application information may include the application package name and version information, etc., wherein the application information may be obtained by parsing the application certificate generation request. Thus, when issuing the application certificate and the profile authorization file for the application to be released based on the application certificate generation request, the application information may be obtained by directly parsing the application certificate generation request without the need to communicate with the development end. This may, on the one hand, reduce the time spent on communication and improve the efficiency of application signing; on the other hand, it may also avoid the problem of signing failure or signing error caused by communication abnormalities.

[0084] The profile key pair and profile signing certificate are preset and used to issue profile authorization files for applications to be released. The profile key pair is used as the key information of the profile authorization file to encrypt the profile authorization file. Among them, the profile key pair can be randomly generated or generated according to preset conditions, for example, the generation method of the profile key pair is given in advance, or the key information that the profile key pair needs to include is given in advance. The profile signing certificate is used by the digital twin platform to issue a profile signing certificate using an intermediate certificate pair.

[0085] Exemplarily, the issuing of a profile authorization file based on the application information using a preset profile key pair and a profile signature certificate specifically includes:

[0086] Get the profile private key in the profile key pair;

[0087] Performing a profile file signing on the application information based on the profile private key to obtain signed application information;

[0088] Package the signed application information and profile signing certificate into p7b format to obtain the profile authorization file.

[0089] Specifically, the profile authorization file includes signed application information and the profile signing certificate. The signed application information is obtained by signing the application information based on the profile private key, so that the profile authorization file includes the information content included in the application information. For example, if the application information includes the application package name, then the profile authorization file includes the application package name.

[0090] Further, in step H30, after obtaining the application certificate and profile authorization file generated by the digital twin platform for the application to be released, a hap package can be generated based on the developer key pair stored therein and the application certificate for the application package data of the signed application and the profile authorization file.

[0091] S20: Perform signature verification on the application to be released.

[0092] Specifically, the signature verification is used to verify the application certificate and the authorization file, that is, the signature verification is used to verify the application certificate and the profile authorization file to determine the security of the application.

[0093] S30. When the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application.

[0094] Specifically, if the signature verification passes, it means that the security of the application to be released meets the requirements, and the application to be released can be released to the application market. To this end, when the signature verification passes, the digital twin platform uses the application market certificate to re-sign the application to be released, so as to use the application market certificate as the data source of the application to be released. Among them, when the application market certificate is used to re-sign the application to be released, the application market key pair corresponding to the application market will be obtained, and the private key in the application market key pair and the application market certificate will be used to re-sign the application to be released.

[0095] Exemplarily, when the signature verification passes, re-signing the application to be released using the application market certificate to obtain the re-signed application specifically includes:

[0096] When the signature verification passes, the application to be released is reviewed;

[0097] If the review is passed, the application to be released is re-signed using the private key in the application market key pair and the application market certificate to obtain a re-signed application.

[0098] Specifically, when the signature verification is passed, the application to be released can be reviewed, wherein the review can be conducted according to preset review conditions, and the preset review conditions may include content compliance, etc. In addition, when reviewing the application to be released, the application to be released can be tested to avoid bugs in the application to be released that are more severe than the preset requirements.

[0099] Furthermore, if the review is passed, the private key in the application market key pair and the application market certificate are used to re-sign the application to be released, and the re-signed application is put on the application market for users to download and install. On the contrary, if the review is not passed, it is prompted that the application to be released is abnormal, and the application to be released is refused to be re-signed.

[0100] Further, when the signature verification passes, the application market certificate is used to re-sign the application to be released to obtain a re-signed application, and the method further includes:

[0101] The re-signed application is published to an application market, and when an electronic device installs the re-signed application, the application market certificate of the re-signed application is verified to verify the source of the re-signed application.

[0102] Specifically, after obtaining the re-signed application, the re-signed application will be published to the application market so that users can download the re-signed application. In addition, since the re-signed application is signed twice, once with the digital signature of the application certificate and once with the digital signature of the application market certificate, when the electronic device installs the re-signed application, it will verify the digital signature of the application market certificate and the digital signature of the application certificate respectively, so as to verify the data source, data credibility and data security of the re-signed application respectively. This can prevent developers from bypassing the issuer's application ecosystem and directly installing the application on the electronic device, thereby improving the controllability of the issuer's application ecosystem. On the other hand, it can prevent third-party attackers from maliciously tampering with the application, thereby improving the security of the application.

[0103] In summary, this embodiment provides a re-signing method for application authentication, which obtains an application market certificate and an application to be released through a digital twin platform set between the development end and the electronic device; performs a signature verification on the application to be released; when the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application. In this way, the digital twin platform can be used to re-sign the application to be released to standardize the data source of the application listed on the application market, so that the publisher's application ecology can be in a controllable state, and it can also prevent third-party attackers from maliciously tampering with the application, thereby improving the security of the application.

[0104] Based on the above-mentioned re-signing method for application authentication, the embodiment of the present application provides a re-signing device for application authentication, such as Figure 3 As shown, the re-signature device for application authentication specifically includes:

[0105] The acquisition module 100 is used to acquire an application market certificate and an application to be released, wherein the application to be released is an application signed by a developer key pair and an application certificate corresponding to the application to be released;

[0106] Verification module 200, used for performing signature verification on the application to be released;

[0107] The re-signing module 300 is used to re-sign the application to be released using the application market certificate to obtain a re-signed application when the signature verification passes.

[0108] The re-signing device for application authentication, wherein the generation process of the application market certificate is:

[0109] The digital twin platform uses the intermediate certificate and the private key corresponding to the application market to issue the application market certificate, wherein the intermediate certificate is issued based on the root certificate self-signed by the digital twin platform.

[0110] The re-signature device for application authentication, wherein the re-signature module specifically includes:

[0111] An audit unit, used for auditing the application to be released when the signature verification passes;

[0112] The signature unit is used to re-sign the application to be released using the private key in the application market key pair and the application market certificate if the application passes the review, so as to obtain a re-signed application.

[0113] The re-signing device for application authentication, wherein the acquisition process of the application to be released specifically includes:

[0114] Issue application certificates to developers through the digital twin platform, and issue profile authorization files using the preset profile key pair and profile signature certificate based on the application information of the application to be released;

[0115] The application package data of the application to be released and the profile authorization file are signed based on the application certificate to obtain the application to be released.

[0116] The re-signing device for application authentication, wherein the application information of the application to be released is based on the application information, and the use of a preset profile key pair and a profile signature certificate to issue a profile authorization file specifically includes:

[0117] Obtaining a profile private key in the profile key pair;

[0118] Performing a profile file signing on the application information based on the profile private key to obtain signed application information;

[0119] The signed application information and the profile signature certificate are packaged into p7b format to obtain a profile authorization file.

[0120] The re-signature device for application authentication, wherein the re-signature module is further used for:

[0121] The re-signed application is published to an application market, and when an electronic device installs the re-signed application, the application market certificate of the re-signed application is verified to verify the source of the re-signed application.

[0122] The re-signature device for application authentication, wherein the re-signature device for application authentication further comprises a prompt module;

[0123] The prompt module is used to prompt that the application to be released is abnormal when the verification fails.

[0124] Based on the above-mentioned re-signature method for application authentication, an embodiment of the present application provides a computer-readable storage medium, which stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps in the re-signature method for application authentication as described in the above-mentioned embodiment.

[0125] Based on the above re-signing method for application authentication, the present application also provides a terminal device, such as Figure 4 As shown, it includes at least one processor 20, a display screen 21, and a memory 22, and may also include a communication interface 23 and a bus 24. The processor 20, the display screen 21, the memory 22, and the communication interface 23 may communicate with each other through the bus 24. The display screen 21 is configured to display a preset user guide interface in the initial setting mode. The communication interface 23 may transmit information. The processor 20 may call the logic instructions in the memory 22 to execute the method in the above embodiment.

[0126] In addition, the logic instructions in the memory 22 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product.

[0127] The memory 22 is a computer-readable storage medium that can be configured to store software programs, computer executable programs, such as program instructions or modules corresponding to the methods in the embodiments of the present disclosure. The processor 20 executes functional applications and data processing by running the software programs, instructions or modules stored in the memory 22, that is, implementing the methods in the above embodiments.

[0128] The memory 22 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal device, etc. In addition, the memory 22 may include a high-speed random access memory and may also include a non-volatile memory. For example, a variety of media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk, may also be a transient storage medium.

[0129] In addition, the specific process of loading and executing the multiple instruction processors in the above-mentioned storage medium and the terminal device has been described in detail in the above-mentioned method, and will not be described one by one here.

[0130] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A re-signature method for application authentication, characterized in that: Applied to the digital twin platform, the re-signing method for application authentication specifically includes: Obtain an application market certificate and an application to be released, wherein the application to be released is an application signed by a developer key pair and an application certificate corresponding to the application to be released; Performing signature verification on the application to be released; When the signature verification passes, the application to be released is re-signed using the application market certificate to obtain a re-signed application.

2. The re-signing method for application authentication according to claim 1, characterized in that: The generation process of the application market certificate is as follows: The digital twin platform uses the intermediate certificate and the private key corresponding to the application market to issue the application market certificate, wherein the intermediate certificate is issued based on the root certificate self-signed by the digital twin platform.

3. The re-signing method for application authentication according to claim 1, characterized in that: When the signature verification passes, re-signing the application to be released using the application market certificate to obtain the re-signed application specifically includes: When the signature verification passes, the application to be released is reviewed; If the review is passed, the application to be released is re-signed using the private key in the application market key pair and the application market certificate to obtain a re-signed application.

4. The re-signing method for application authentication according to claim 1, characterized in that: The process of obtaining the application to be released specifically includes: Issue application certificates to developers through the digital twin platform, and issue profile authorization files using the preset profile key pair and profile signing certificate based on the application information of the application to be released; The application package data of the application to be released and the profile authorization file are signed based on the application certificate to obtain the application to be released.

5. The re-signing method for application authentication according to claim 4, characterized in that: The step of issuing a profile authorization file based on the application information of the application to be released using a preset profile key pair and a profile signing certificate specifically includes: Obtaining a profile private key from the profile key pair; Performing a profile file signing on the application information based on the profile private key to obtain signed application information; The signed application information and the profile signing certificate are packaged into a p7b format to obtain a profile authorization file.

6. The re-signing method for application authentication according to claim 1, characterized in that: When the signature verification passes, the application market certificate is used to re-sign the application to be released to obtain a re-signed application, and the method further includes: The re-signed application is published to an application market, and when an electronic device installs the re-signed application, the application market certificate of the re-signed application is verified to verify the source of the re-signed application.

7. The re-signing method for application authentication according to claim 1, characterized in that: The re-signing method for application authentication also includes: When the verification fails, it is prompted that the application to be released is abnormal.

8. A re-signature device for application authentication, characterized in that: The re-signature device for application authentication specifically includes: An acquisition module, used to acquire an application market certificate and an application to be released, wherein the application to be released is an application signed by a developer key pair and an application certificate corresponding to the application to be released; A verification module, used for performing signature verification on the application to be released; The re-signing module is used to re-sign the application to be released using the application market certificate to obtain a re-signed application when the signature verification passes.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps in the re-signature method for application authentication as described in any one of claims 1-8.

10. A terminal device, characterized in that: include: Processor and memory; The memory stores a computer-readable program executable by the processor; When the processor executes the computer-readable program, the processor implements the steps in the re-signing method for application authentication as described in any one of claims 1-8.

Images