Application security management method and device of IPTV system, IPTV equipment and storage medium

Abstract

The invention discloses an application security management method and device of an IPTV system, IPTV equipment and a storage medium, and relates to the technical field of IPTV. The method comprises the following steps: reading a first prefabricated table and a second prefabricated table stored in a file system, and importing signature keys in the first prefabricated table and the second prefabricated table into a preset signature list; wherein the first prefabricated table is used for storing a signature key corresponding to the first type of application, and the second prefabricated table is used for storing a signature key corresponding to the second type of application; and under the condition that the target application is installed, carrying out security verification on the target application by utilizing PackageManagerService and based on the signature key of the target application and the preset signature list. Therefore, different signatures are supported to obtain system permissions and perform application installation, and the convenience and practicability of application installation and upgrading are improved.

Description

Technical Field

[0001] The present application relates to the field of IPTV technology, and in particular to an application security management method, device, IPTV equipment and storage medium of an IPTV system. Background Art

[0002] Among the applications in the IPTV system, many third-party applications require system permissions when they are installed. Since these third-party applications use their own APK signatures, when these third-party applications are installed in the IPTV system, the installation will fail due to inconsistent signatures.

[0003] If these third-party applications are signed using the signature key of the IPTV system, these applications can be installed successfully and run normally. However, since the signatures of the third-party applications installed in the IPTV system have been changed, the third parties still use their own APK signatures when performing unified upgrades of their applications, these third-party applications cannot be upgraded online in a unified manner, which in turn makes it difficult for equipment manufacturers to maintain the system. Summary of the invention

[0004] The main purpose of this application is to provide an application security management method, device, IPTV device and storage medium for an IPTV system, so as to support different signatures to obtain system permissions and install applications, thereby improving the convenience and practicality of application installation and upgrade.

[0005] To achieve the above objectives, the present application provides an application security management method for an IPTV system, comprising: Reading a first pre-made table and a second pre-made table stored in a file system, and importing the signature keys in the first pre-made table and the second pre-made table into a preset signature list; wherein the first pre-made table is used to store signature keys corresponding to first-type applications, and the second pre-made table is used to store signature keys corresponding to second-type applications; When the target application is installed, the PackageManagerService service is used to perform security verification on the target application based on the signature key of the target application and the preset signature list.

[0006] Optionally, the use of the PackageManagerService service and based on the signature key of the target application and the preset signature list to perform security verification on the target application includes: using the PackageManagerService service to match the signature key of the target application with the signature key in the preset signature list; if there is a signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the target application verification is successful; if there is no signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the target application verification has failed.

[0007] Optionally, the method further includes: updating the first pre-made table when the IPTV system is updated; and dynamically updating the second pre-made table when a new application is added to the application mall or network management system of the IPTV system.

[0008] Optionally, when a new application is added to the application store or network management system of the IPTV system, the second prefabricated table is dynamically updated, including: obtaining a signature key of the new application, and comparing the signature key of the new application with the signature key in the preset signature list; if the signature key of the new application does not exist in the preset signature list, updating the signature key of the new application to the preset signature list, and updating the signature key of the new application to the second prefabricated table.

[0009] Optionally, updating the signature key of the new application to the second prefabricated table includes: adding a first control node and configuring the first control node using the SetParameterValues ​​command to update the signature key of the new application to the second prefabricated table through an interface corresponding to the first control node.

[0010] Optionally, the method further includes: adding a second control node, and configuring the second control node using a SetParameterValues ​​command, so as to delete the signature key to be deleted from the second prefabricated table through an interface corresponding to the second control node.

[0011] In addition, to achieve the above-mentioned purpose, the present application also provides an application security management device for an IPTV system, including: a reading module, used to read a first prefabricated table and a second prefabricated table stored in a file system, and import the signature keys in the first prefabricated table and the second prefabricated table into a preset signature list; wherein the first prefabricated table is used to store signature keys corresponding to first type applications, and the second prefabricated table is used to store signature keys corresponding to second type applications; a verification module, used to perform security verification on the target application by utilizing the PackageManagerService service and based on the signature key of the target application and the preset signature list when the target application is installed.

[0012] Optionally, the verification module is specifically used to: use the PackageManagerService service to match the signature key of the target application with the signature key in the preset signature list; if there is a signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the verification of the target application is successful; if there is no signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the verification of the target application has failed.

[0013] The present application also provides an IPTV device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the application security management method of the IPTV system as described in any one of the above is implemented.

[0014] The present application also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processing chip, the application security management method of the IPTV system as described above is implemented.

[0015] The application security management method of the IPTV system of the present application configures a first prefabricated table and a second prefabricated table in a file system, wherein the first prefabricated table is used to store signature keys corresponding to first-type applications, and the second prefabricated table is used to store signature keys corresponding to second-type applications; during the application process, the first prefabricated table and the second prefabricated table are first read and the signature keys in the first prefabricated table and the second prefabricated table are imported into a preset signature list; when installing a target application, the signature key of the target application is directly compared and verified with the signature key in the preset signature list; if the signature key of the target application exists in the preset signature list, the target application can be directly granted system permissions, so that the target application is successfully installed, thereby supporting different signatures to obtain system permissions and install applications, and improving the convenience and practicality of application installation and upgrade. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1It is one of the flow charts of the application security management method of the IPTV system in the embodiment of the present application; Figure 2 This is the second flow chart of the application security management method of the IPTV system in the embodiment of the present application; Figure 3 This is the third flow chart of the application security management method of the IPTV system of the embodiment of the present application; Figure 4 is a schematic diagram of an application security management device of an IPTV system according to an embodiment of the present application; Figure 5 An example of a physical structure diagram of an IPTV device is shown; In the figure, 400 is an application security management device of an IPTV system; 410 is a reading module; 420 is a verification module; 510 is a processor; 520 is a communication interface; 530 is a memory; and 540 is a communication bus.

[0017] The realization of the purpose, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0018] In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in this application. Obviously, the described embodiments are part of the embodiments of this application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0019] In the development of IPTV (Interactive Personality TV, Internet TV) systems, many applications are usually integrated into the IPTV system, such as launcher, EPG (electronic program guide), app store, voice, probe and other APK (application package). In order to ensure that these applications can access necessary system resources and perform key operations, they often need to use system-level permissions. Usually, this permission granting is achieved by binding the application with a private signature certificate provided by the device manufacturer. This process ensures that only authorized applications can obtain the required permissions and can be safely installed on the IPTV system.

[0020] However, the current method has a significant flaw: once applications are given a system signature of a specific device manufacturer, these applications cannot be upgraded online in a unified manner. This is because during each upgrade, the new version of the application package (APK) must carry the same signature information as the original installation in order to pass the security verification of the operating system kernel. When the application is upgraded in a unified manner, the new version of the application package (APK) still uses its own APK signature. Therefore, due to the problem of signature mismatch, the update process will be blocked, affecting the user experience and service quality.

[0021] Based on this, the embodiments of the present application provide an application security management method, apparatus, IPTV device and storage medium for an IPTV system, so that the IPTV system can support different signatures to obtain system permissions and install applications in a prefabricated manner, and also support self-upgrade of applications, thereby improving the convenience and practicality of application installation and upgrade, and improving user experience and service quality.

[0022] Figure 1 is one of the flow charts of the application security management method of the IPTV system in the embodiment of the present application. The application security management method of the IPTV system can be executed by the IPTV system, such as Figure 1 As shown, the application security management method of the IPTV system may include the following steps: Step 110: Read the first prefabricated table and the second prefabricated table stored in the file system, and import the signature keys in the first prefabricated table and the second prefabricated table into a preset signature list; wherein the first prefabricated table is used to store the signature keys corresponding to the first type of application, and the second prefabricated table is used to store the signature keys corresponding to the second type of application.

[0023] Step 120: When the target application is installed, the PackageManagerService service is used to perform security verification on the target application based on the signature key and the preset signature list of the target application.

[0024] In this embodiment, the application security management method of the IPTV system can be applied to an IPTV set-top box, and in particular, can be applied to an application scenario in which an IPTV set-top box is installed with an application. The disk of the IPTV set-top box is configured with a file system, and the IPTV set-top box can use the network management TR069 (Technical Report 069) as a key management module, that is, use the framework and mechanism of the TR069 protocol to manage and distribute the keys required for security operations such as encryption and authentication.

[0025] In this embodiment, the first prefabricated table is used to store the signature key corresponding to the first type of application. It should be noted that the first type of application can be a prefabricated application in the IPTV system. It is understandable that when the device developer develops the IPTV system, some non-uninstallable applications are usually pre-installed in the IPTV system, such as: application store, voice application, EPG, etc. These applications are prefabricated applications; the update of these prefabricated applications follows the update of the IPTV system. If the IPTV system is not updated, these prefabricated applications will not be updated. It can be seen that these prefabricated applications will not have a third-party application developer to perform online unified updates on the applications. Therefore, the embodiment of the present application stores the signature keys of these prefabricated applications in the first prefabricated table.

[0026] The first prefabricated table can be pre-set when the IPTV system is integrated, and the first prefabricated table can be set to be read-only by default. Since the first prefabricated table is prefabricated with the IPTV system, the signature key in the first prefabricated table can be updated as needed when the IPTV system is updated. For example, when the IPTV system is upgraded, the signature key of the EPG application in the first prefabricated table changes. At this time, the signature key of the EPG application in the first prefabricated table can be updated. For another example, when the IPTV system is upgraded, a new application is added, and the signature key of the new application can be updated to the first prefabricated table.

[0027] In this embodiment, the second prefabricated table is used to store the signature keys corresponding to the second type of applications. It should be noted that the second type of applications can be: other applications other than the prefabricated applications in the IPTV system, that is, applications that can be uninstalled in the IPTV system, such as some video applications, game applications, etc. These applications are uniformly upgraded and updated online by third-party application developers. Therefore, the embodiment of the present application stores the signature keys of these applications in the second prefabricated table.

[0028] The second prefabricated table can be empty initially. When a new application is added to the application store or IPTV system, the signature key of the new application can be updated to the second prefabricated table through the interface. In addition, other high-authority applications (such as application stores or key management systems) can call the second prefabricated table through the corresponding interface. If the IPTV system is restored to factory settings, the installed non-prefabricated applications and the second prefabricated table will be cleared at the same time, while the prefabricated applications and the first prefabricated table will not be affected by the IPTV system being restored to factory settings.

[0029] In this embodiment, both the first pre-made table and the second pre-made table can be stored in the file system of the IPTV device disk, thereby avoiding data loss caused by power failure or other failures of the IPTV device.

[0030] In actual application, the IPTV system may first read the first pre-table and the second pre-table from the file system, and import all signature keys in the first pre-table and the second pre-table into a preset signature list of the IPTV system.

[0031] Specifically, a string list can be added to the PackageManagerService service of the IPTV system, and the string list is the preset signature list, and the preset signature list is stored in the memory of the IPTV device. When the PackageManagerService service is initialized, the first pre-table and the second pre-table in the file system are read, and all the signature keys in the first pre-table and the second pre-table are loaded into the preset signature list for subsequent use. Therefore, at the beginning of the IPTV device startup, all the required signature keys can be loaded in the preset signature list.

[0032] It should be noted that PackageManagerService (PMS for short) is a core service in the Android operating system, which is responsible for managing application packages (APK files). The service has the following functions: installing and uninstalling applications, permission management, component enable / disable status, querying installed application information, verifying APK files, providing package-related information to the system and other applications, updating applications, etc.

[0033] Furthermore, when the preset signature list is loaded and the target application needs to be installed, the PackageManagerService service can be used to install the target application. When the PackageManagerService service is used to install the target application, the target application needs to be firstly security-verified based on the signature key of the target application and the preset signature list. If the security verification of the target application succeeds, the target application can continue to be installed in the IPTV system. If the security verification of the target application fails, the target application cannot continue to be installed.

[0034] It should be noted that the target application in the embodiments of the present application refers to: any application that needs to be installed in the IPTV system, or any application that needs to be installed in the IPTV system and requires system permissions. The target application is not specifically limited here.

[0035] Figure 2 This is a second flow chart of the application security management method of the IPTV system of the embodiment of the present application, such as Figure 2 As shown, in some implementations, step 120 utilizes the PackageManagerService service and performs security verification on the target application based on the signature key and the preset signature list of the target application, which may include the following steps: Step 210: Use the PackageManagerService service to match the signature key of the target application with the signature key in the preset signature list.

[0036] Step 220: If there is a signature key in the preset signature list that is the same as the signature key of the target application, it is determined that the target application verification is successful.

[0037] Step 230: If there is no signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the target application verification has failed.

[0038] In this embodiment, when an application needs to be installed in the IPTV system, the checkPackageSignatures method in the PackageManagerService service can be found first to verify the signature key of the target application. It should be noted that checkPackageSignatures is a method in the PackageManagerService service for checking the signature of an application.

[0039] During the verification process using checkPackageSignatures, the signature key of the target application is compared and matched with all the signature keys in the preset signature list. If the signature value of the signature key of the target application is the same as the signature value of a signature key in the preset signature list, it means that the target application is legal and can proceed with the subsequent installation process. At this time, it is determined that the verification of the target application is successful.

[0040] If the signature value of the signature key of the target application is different from the signature values ​​of all the signature keys in the preset signature list, it means that the target application is illegal and the subsequent installation process is rejected. At this time, it is determined that the target application verification has failed.

[0041] Therefore, when installing an application, the application's own signature key can be used for verification. If the verification is successful, the application is granted system permissions without having to use the IPTV system's signature key to change the application's signature. When a third-party application developer subsequently updates and upgrades the application online, it can directly use its signature key to update and upgrade the application, solving the problem of being unable to update and upgrade uniformly due to signature mismatch, improving the convenience and practicality of application installation and upgrades, and improving user experience and service quality.

[0042] In some implementations, the application security management method of the IPTV system may further include: updating the first pre-made table when the IPTV system is updated; and dynamically updating the second pre-made table when a new application is added to the application store or network management system of the IPTV system.

[0043] Specifically, since the first prefabricated table is released with the IPTV system, it does not involve a dynamic update process. When the IPTV system is updated, the IPTV system will generate a corresponding new first prefabricated table. When applying, it is only necessary to use the PackageManagerService service to load the first prefabricated table. In the embodiment of the present application, if the IPTV system version is updated, the new version will have a corresponding first prefabricated table, thereby avoiding the problem that the IPTV system version is changed, causing some first-type applications to be changed, and then causing the first prefabricated table to be unable to be updated in time.

[0044] As for the second pre-made table, the second pre-made table can dynamically increase or delete corresponding signature keys as the application store or the network management system adds or reduces applications, so that the application store and the network management system can install the newly added applications through the interface.

[0045] Figure 3 Flowchart 3 of the application security management method of the IPTV system of the embodiment of the present application, such as Figure 3 As shown, in some implementations, when a new application is added to the application store or the network management system of the IPTV system, dynamically updating the second pre-made table may include the following steps: Step 310: Obtain the signing key of the new application, and compare the signing key of the new application with the signing key in the preset signature list.

[0046] Step 320: If the signature key of the new application does not exist in the preset signature list, the signature key of the new application is updated to the preset signature list, and the signature key of the new application is updated to the second pre-made table.

[0047] In the embodiment of the present application, two interfaces can be extended in the IPTV system PackageManagerService service to implement the addition and deletion management of the signature keys in the second prefabricated table. The two interfaces can be respectively recorded as: addPackageSignatures (interface for adding signature keys) and delPackageSignatures (interface for deleting signature keys).

[0048] It should be noted that the addPackageSignatures interface and the delPackageSignatures interface are mainly provided for calling by the network management system or application store; when a signature key needs to be added, the network management system or application store calls the addPackageSignatures interface; when a signature key needs to be deleted, the network management system or application store calls the delPackageSignatures interface.

[0049] Furthermore, after adding a new application to the application store or official website system, you can first obtain the signature key of the new application and compare the signature key of the new application with all the signature keys in the preset signature list. If the signature key of the new application exists in the second prefabricated table, you do not need to add the signature key of the new application. If the signature key of the new application does not exist in the second prefabricated table, the signature key of the new application is added to the second prefabricated table by calling the addPackageSignatures interface, and the signature key of the new application is updated to the preset signature list.

[0050] In some embodiments, updating the signature key of the new application to the second prefabricated table may include: adding a first control node and configuring the first control node using the SetParameterValues ​​command to update the signature key of the new application to the second prefabricated table through an interface corresponding to the first control node.

[0051] Specifically, when the signature key of the new application needs to be updated to the second prefabricated table, the SetParameterValues ​​command can be used to add and configure the first control node. In this embodiment, the first control node can be recorded as: device.config.package.addPackageSignatures node. When the device.config.package.addPackageSignatures node is configured through the SetParameterValues ​​command, the signature key of the new application is used as the value of the first control node, and then the signature key of the new application is written into the second prefabricated table through the provided addPackageSignatures interface.

[0052] In some implementations, the application security management method of the IPTV system may further include: adding a second control node, and configuring the second control node using the SetParameterValues ​​command to delete the signature key to be deleted from the second pre-made table through an interface corresponding to the second control node.

[0053] Specifically, when a signature key in the second prefabricated table needs to be deleted, the SetParameterValues ​​command can be used to add and configure the second control node. In this embodiment, the second control node can be recorded as: device.config.package.delPackageSignatures node. When the device.config.package.delPackageSignatures node is configured through the SetParameterValues ​​command, the signature key to be deleted is used as the value of the second control node, and then the signature key to be deleted is deleted from the second prefabricated table through the provided delPackageSignatures interface. In this way, it is possible to remotely and dynamically add signature keys or delete signature keys from the second prefabricated table.

[0054] The application security management method of the IPTV system of the embodiment of the present application can support multiple different application signatures to obtain system permissions and install applications by pre-preparing the first pre-prepared table and the second pre-prepared table; and support subsequent version updates of the application. Secondly, through the remote dynamic signature key addition or deletion operation provided by the embodiment of the present application, the IPTV system can be supported to dynamically add new signature keys during operation, so as to achieve the purpose of supporting the installation of new applications without updating the IPTV system, thereby improving the convenience and practicality of application installation and upgrading, improving user experience and service quality, and reducing the upgrade frequency of the device system.

[0055] Based on the above embodiments, the embodiments of the present application also provide an application security management device for an IPTV system. Figure 4 Schematic diagram of an application security management device of an IPTV system according to an embodiment of the present application. Figure 4 As shown, the application security management device 400 of the IPTV system may include a reading module 410 and a verification module 420 .

[0056] Among them, the reading module 410 is used to read the first prefabricated table and the second prefabricated table stored in the file system, and import the signature keys in the first prefabricated table and the second prefabricated table into the preset signature list; wherein the first prefabricated table is used to store the signature keys corresponding to the first type of application, and the second prefabricated table is used to store the signature keys corresponding to the second type of application; the verification module 420 is used to perform security verification on the target application by utilizing the PackageManagerService service and based on the signature key and the preset signature list of the target application when the target application is installed.

[0057] Therefore, by configuring the first prefabricated table and the second prefabricated table in the file system, wherein the first prefabricated table is used to store the signature keys corresponding to the first type of application, and the second prefabricated table is used to store the signature keys corresponding to the second type of application; during the application process, the reading module 410 first reads the first prefabricated table and the second prefabricated table and imports the signature keys in the first prefabricated table and the second prefabricated table into the preset signature list. When installing the target application, the verification module 420 directly compares and verifies the signature key of the target application with the signature key in the preset signature list. If the signature key of the target application exists in the preset signature list, the target application can be directly granted system permissions, so that the target application can be successfully installed, thereby supporting different signatures to obtain system permissions and install applications, thereby improving the convenience and practicality of application installation and upgrade.

[0058] In some embodiments, the verification module is specifically used to: use the PackageManagerService service to match the signature key of the target application with the signature key in a preset signature list; if there is a signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the target application verification is successful; if there is no signature key in the preset signature list that is identical to the signature key of the target application, it is determined that the target application verification has failed.

[0059] In some embodiments, the application security management device 400 of the IPTV system may further include an update module (not shown in the figure), which is used to update the first pre-made table when the IPTV system is updated; and dynamically update the second pre-made table when new applications are added to the application store or network management system of the IPTV system.

[0060] In some embodiments, the update module is specifically used to: obtain the signing key of the new application, and compare the signing key of the new application with the signing key in a preset signature list; if the signing key of the new application does not exist in the preset signature list, update the signing key of the new application to the preset signature list, and update the signing key of the new application to the second prefabricated table.

[0061] In some implementations, the update module is further specifically used to: add a new first control node, and configure the first control node using the SetParameterValues ​​command to update the signature key of the new application to the second prefabricated table through the interface corresponding to the first control node.

[0062] In some implementations, the update module is further specifically used to: add a second control node, and configure the second control node using the SetParameterValues ​​command to delete the signature key to be deleted from the second pre-made table through the interface corresponding to the second control node.

[0063] It should be noted that for details not disclosed in the application security management device of the IPTV system of this embodiment, please refer to the details disclosed in the embodiment of the application security management method of the IPTV system in the embodiment of this specification, and will not be repeated here.

[0064] Figure 5 An example of a physical structure diagram of an IPTV device is shown below. Figure 5 As shown, the IPTV device may include: a processor 510, a communication interface 520, a memory 530 and a communication bus 540, wherein the processor 510, the communication interface 520 and the memory 530 complete mutual communication through the communication bus 540. The processor 510 may call the logic instructions in the memory 530 to execute the application security management method of the IPTV system, including: reading the first prefabricated table and the second prefabricated table stored in the file system, and importing the signature keys in the first prefabricated table and the second prefabricated table into the preset signature list; wherein the first prefabricated table is used to store the signature keys corresponding to the first type of application, and the second prefabricated table is used to store the signature keys corresponding to the second type of application; when the target application is installed, the target application is security verified by using the PackageManagerService service and based on the signature key and the preset signature list of the target application.

[0065] In addition, the logic instructions in the above-mentioned memory 530 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0066] On the basis of the above embodiments, on the other hand, the present invention also provides a computer program product, which includes a computer program, and the computer program can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the application security management method of the IPTV system provided by the above methods, including: reading the first prefabricated table and the second prefabricated table stored in the file system, and importing the signature keys in the first prefabricated table and the second prefabricated table into a preset signature list; wherein the first prefabricated table is used to store the signature key corresponding to the first type of application, and the second prefabricated table is used to store the signature key corresponding to the second type of application; when installing the target application, the PackageManagerService service is used to perform security verification on the target application based on the signature key and the preset signature list of the target application.

[0067] On the basis of the above embodiments, on another aspect, the present invention further provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to execute the application security management method of the IPTV system provided by the above methods, including: reading a first prefabricated table and a second prefabricated table stored in a file system, and importing the signature keys in the first prefabricated table and the second prefabricated table into a preset signature list; wherein the first prefabricated table is used to store signature keys corresponding to first type applications, and the second prefabricated table is used to store signature keys corresponding to second type applications; when installing a target application, utilizing the PackageManagerService service and based on the signature key and preset signature list of the target application, performing security verification on the target application.

[0068] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0069] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

Claims

1. An application security management method for an IPTV system, characterized in that: include: Reading a first pre-table and a second pre-table stored in a file system, and importing the signature keys in the first pre-table and the second pre-table into a preset signature list; wherein the first pre-table is used to store signature keys corresponding to first-type applications, and the second pre-table is used to store signature keys corresponding to second-type applications; When the target application is installed, the PackageManagerService service is used to perform security verification on the target application based on the signature key of the target application and the preset signature list.

2. The application security management method of the IPTV system according to claim 1, characterized in that: The using the PackageManagerService service and performing security verification on the target application based on the signature key of the target application and the preset signature list includes: Using the PackageManagerService service to match the signature key of the target application with the signature key in the preset signature list; If there is a signature key in the preset signature list that is the same as the signature key of the target application, it is determined that the target application is successfully verified; If the signature key identical to the signature key of the target application does not exist in the preset signature list, it is determined that the target application verification fails.

3. The application security management method of the IPTV system according to claim 1, characterized in that: The method further comprises: When the IPTV system is updated, updating the first preset table; When a new application is added to the application store or the network management system of the IPTV system, the second pre-made table is dynamically updated.

4. The application security management method of the IPTV system according to claim 3, characterized in that: When a new application is added to the application mall or the network management system of the IPTV system, dynamically updating the second pre-made table includes: Obtaining a signing key for a new application, and comparing the signing key for the new application with the signing keys in the preset signature list; If the signature key of the new application does not exist in the preset signature list, the signature key of the new application is updated to the preset signature list, and the signature key of the new application is updated to the second pre-made table.

5. The application security management method of the IPTV system according to claim 4, characterized in that: The updating of the signature key of the new application into the second prefabricated table includes: A first control node is added, and the first control node is configured using the SetParameterValues ​​command to update the signature key of the new application to the second prefabricated table through the interface corresponding to the first control node.

6. The application security management method of the IPTV system according to claim 1, characterized in that: The method further comprises: A second control node is added, and the SetParameterValues ​​command is used to configure the second control node, so as to delete the signature key to be deleted from the second pre-made table through the interface corresponding to the second control node.

7. An application security management device for an IPTV system, characterized in that: include: A reading module, configured to read a first pre-made table and a second pre-made table stored in a file system, and import the signature keys in the first pre-made table and the second pre-made table into a preset signature list; wherein the first pre-made table is used to store signature keys corresponding to first-type applications, and the second pre-made table is used to store signature keys corresponding to second-type applications; The verification module is used to perform security verification on the target application by using the PackageManagerService service and based on the signature key of the target application and the preset signature list when the target application is installed.

8. The application security management device of the IPTV system according to claim 7, characterized in that: The verification module is specifically used for: Using the PackageManagerService service to match the signature key of the target application with the signature key in the preset signature list; If there is a signature key in the preset signature list that is the same as the signature key of the target application, it is determined that the target application is successfully verified; If the signature key identical to the signature key of the target application does not exist in the preset signature list, it is determined that the target application verification fails.

9. An IPTV device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the application security management method of the IPTV system according to any one of claims 1 to 6 is implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by the processing chip, the application security management method of the IPTV system according to any one of claims 1 to 6 is implemented.

Images