Domestic intelligent application management platform and method based on security control

Abstract

The invention relates to a localized intelligent application management platform and method based on security control, and the platform comprises a client and a management background, a user accesses an application mall interface through the client, and achieves the interaction with the management background, and the management background is mainly used for the distribution and monitoring of applications, and achieves the application management of cross-operating systems. According to the invention, the problem of cross-platform application management, especially the problem of compatibility in a domestic desktop terminal environment, is solved, an application mall compatible with domestic desktop terminals and traditional operating system applications is created by integrating a security management and control mechanism and a full-life-cycle application management platform, the security and compliance of the applications are ensured, and the application shopping mall is suitable for being popularized and applied. Therefore, the intelligence and automation level of application management is improved, and the management efficiency and safety guarantee capability of domestic application ecology are optimized.

Description

Technical Field

[0001] The present invention relates to the field of application management, and in particular to a domestically produced intelligent application management platform and method based on security control. Background Art

[0002] With the rapid development of my country's information technology industry, domestic operating systems have gradually been applied in various industries. As an important part of promoting the localization process, the promotion of domestic desktop terminals has become a national strategic task. Especially in the context of ensuring information security and achieving independent and controllable technology, the application of domestic desktop terminals has become the core of industry development. However, in the actual promotion process, domestic desktop terminals face many challenges, especially in terms of application software compatibility, security and management efficiency. At present, most desktop application management platforms can already support basic office and development applications, but it is usually difficult to support compatible operation in multiple operating system environments, and it is difficult to achieve unified management and intelligent upgrades of different operating system versions and different terminal devices, which limits its promotion and application in diversified operating system environments. In addition, there is a lack of strict security review mechanisms, which leads to some applications with vulnerabilities or malicious codes entering the system, increasing the security risks of the system, which has caused certain constraints on the promotion of domestic applications.

[0003] The application management platforms that come with existing operating systems often have problems such as low intelligence, poor operating system compatibility, and insufficient security. In terms of application lifecycle management, although some domestic desktop terminal application malls have achieved certain application listing and management functions, there is still a lot of room for improvement in intelligent and automated application updates and version control; traditional application management platforms lack compatibility with domestic operating system platforms and lack cross-platform compatibility, making it difficult for application operators to list and update applications between different operating systems; in addition, the existing platforms have relatively weak security and compliance control measures for applications, and there is a risk of spreading malicious software and unauthorized applications. Therefore, researching a safe domestic ecological application mall, providing cross-platform support, ensuring application security, and improving the intelligence and automation of application management have become technical problems that need to be solved urgently. Summary of the invention

[0004] In order to solve the above problems, the purpose of the present invention is to provide a domestically produced intelligent application management platform and method based on security control, which, through the collaborative work of the server and the client, covers the full life cycle management of applications from creation, review, release to update and delisting, provides an efficient application management, release and maintenance mechanism, simplifies the application operation process, and improves management efficiency.

[0005] To achieve the above object, the present invention adopts the following technical solutions:

[0006] A domestically produced intelligent application management platform based on security control, including a client and a management backend. Users access the application store interface through the client to interact with the management backend. The management backend is mainly used for application distribution and monitoring to achieve cross-operating system application management.

[0007] The management backend includes three modules: application management module, client configuration module and application control module. The application management module supports the full life cycle management of applications, from application creation, package management based on system architecture to application listing, and ensures application quality through a fully automatic review process. It also provides an application log tracking function, which can view application flow, classification, and download volume in real time, and provide visual statistical data to help operators make accurate decisions;

[0008] The client configuration module allows operators to configure the navigation, classification and topic structure of the client, including the homepage layout, classification structure and topic display, to improve user experience and application discovery efficiency;

[0009] The application management and control module is responsible for controlling the distribution, installation, and uninstallation permissions of applications. It formulates application distribution strategies and sets installation and uninstallation rules based on terminal information collection.

[0010] Furthermore, the client includes an application recommendation module, a full classification module, an application installation module, an application update module, and an application uninstallation module;

[0011] The litigation application recommendation module provides application collection display based on application popularity, latest listing, download ranking, and topic factors, recommends popular applications and topic content, and helps users quickly discover popular applications and topic content;

[0012] The All Categories module comprehensively displays software categories and provides category search functions, allowing users to quickly find the applications they need; the Download Management module supports matching different operating systems and device architectures to ensure compatibility and efficient downloading;

[0013] The application installation module provides a quick installation function for the installation package downloaded by the user, automatically selecting the appropriate installation method according to the client operating system to ensure that the user can complete the application installation process conveniently;

[0014] The application update module automatically detects the latest version of the application installed on the client and pushes the upgrade package to ensure that users always use the latest application version;

[0015] The application uninstall module provides a convenient and quick uninstall entry to help users manage terminal storage space; the application virtualization module provides a client interface for Windows operating system and domestic operating system to ensure the compatibility and smooth interaction of the application store between different operating systems.

[0016] A management method for a domestic intelligent application management platform based on security control, comprising the following steps:

[0017] S1: In the management background, when operators submit applications, they first need to fill in the basic information of the application, including the application name, version number, application category, supported operating systems, architecture information, and also need to upload the application package file, screenshots, descriptions and other related resources.

[0018] S2: After the application creation request is submitted, the system reviews the submitted application to ensure that it complies with the platform's submission specifications and software security specifications;

[0019] S3: The application listing process refers to the process of the application store distributing the application to users. After the review is passed, the operator will list the application on the application store. The application will be labeled according to the functional classification, operating system, and architecture to facilitate user search and download. At the same time, the operator also needs to set the application distribution strategy and set the terminal IP with installation and uninstallation permissions to prevent the spread of malicious software. After the application is reviewed and listed, the terminal user can download it according to their actual needs.

[0020] S4: Monitor and manage application updates. Operation personnel submit new application information, including new application packages, version numbers, and descriptions of function updates. If the new application updates meet store standards and pass review and testing, managers push the new versions to the store and update the version number, description, and other information on the application interface. The platform will also automatically notify users of updates to ensure that end users can obtain the latest application versions in a timely manner. Users can decide whether locally installed applications need to be upgraded based on the application version upgrade information sent by the application management service.

[0021] S5: After being put on the shelves, the application will enter the continuous monitoring stage. The operation staff will monitor the download volume, uninstall volume, user evaluation, and application failure feedback data of the application through the background system, and analyze the market performance and user experience of the application. If the application is found to have security problems, performance problems, or behavior that does not comply with platform regulations, the operation staff will intervene, remove the application in time, and require the application provider to repair it.

[0022] S6: When an app no ​​longer meets the store's standards or the developer requests to terminate the release, the operator can remove the app from the store. After removal, the platform will stop downloading the app and retain or delete related data as needed. When the operator removes the app, the platform notifies users that the app will no longer be updated or supported, ensuring that users have enough time to migrate;

[0023] S7: The client uses the control to perform the full life cycle management process of application query, download, installation, update, and uninstall, and reports the application usage to the platform.

[0024] Furthermore, S2 is specifically:

[0025] S21: First, perform software component analysis on the application package to check whether the file format and structure of the application package meet the store standards, and ensure that the application package is intact, complete, and contains all necessary files and resources;

[0026] S22; In addition, the platform conducts multi-level security scans on applications, including malicious code detection and risk analysis of dependent libraries. Through security scanning, the platform can detect possible security vulnerabilities or malicious behaviors in applications and prevent harmful applications from entering the store in a timely manner;

[0027] S23: After passing the security check, the platform will automatically digitally sign the software to ensure the integrity of the application and prevent tampering.

[0028] Furthermore, S23 is as follows: first, the server calculates the hash value of the application package, and then uses the server private key to encrypt the calculated hash value to generate a digital signature, and the digital signature data is bound to the application package in .sig format; only the application encrypted with the digital signature can push the application-related information to the server database for subsequent listing and downloading. Applications that do not meet the above requirements will be rejected and the corresponding reasons will be given.

[0029] Furthermore, S7 is specifically:

[0030] S71: When the user installs the client control in the application store, the platform will automatically detect the operating system type and architecture of the user's device and provide a matching client installation package based on the detection results;

[0031] S72: The user opens the client and accesses the application store interface. The application store provides multiple search portals, including home page recommendations, special topic recommendations, and all classification modules. The user searches by keywords, browses the recommendation list, or filters by category to find the target application;

[0032] S73: The user selects the application he wants to install in the application store. The platform automatically provides the corresponding installation package and the bound digital signature file according to the operating system and architecture of the user's client. After the download is complete, the platform automatically performs a signature verification operation to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with;

[0033] S74: When the user performs the installation operation, the client control will automatically call the corresponding installation command according to the operating system and architecture of the client device; during the installation process, the client control will monitor the installation process to ensure the smooth progress of the installation process. If an abnormality occurs, it can be rolled back in time and the user will be prompted;

[0034] S75: The user checks the update status of the installed application through the application update module of the application store. The platform will regularly detect and push the latest version of the application update notification. The user can choose whether to update the application according to their needs. During the update process, the client control will automatically download and execute the installation package of the corresponding version for overwriting and installation according to the system architecture and update strategy. After the update is completed, the client control will automatically verify whether the application is successfully updated and prompt the user for the update status;

[0035] S76: If the user decides to uninstall an application, the uninstallation operation is performed through the uninstallation module of the application store. The client control will first retrieve the applications installed on the client host through system commands or registry information, and list the applications that can be uninstalled. After the user selects the application to be uninstalled, the control automatically calls the corresponding uninstallation command according to the operating system type, and ensures that all related files and registration information are cleaned up during the uninstallation process to avoid residual. After the uninstallation is completed, the client control will check to ensure that the application is completely uninstalled and related resources are released.

[0036] Furthermore, after the download is complete, a signature verification operation will be automatically performed to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with. Specifically, the client calculates the hash value of the downloaded application package, and uses the server public key provided by the platform to decrypt the digital signature to obtain the original hash value. The client compares the decrypted hash value with the hash value calculated by itself; if the two are consistent, it means that the downloaded application package has not been tampered with during transmission and is indeed from the server publisher. The signature verification is successful and the user can continue to install the application; otherwise, the client will believe that the application package has been tampered with or is unreliable, and prompt the user that the application package may be from an unknown source to prevent the installation of malicious software.

[0037] The present invention has the following beneficial effects:

[0038] 1. The present invention covers the whole life cycle management of applications from creation, review, release to update and delisting through the collaborative work of the server and the client, provides an efficient application management, release and maintenance mechanism, simplifies the operation process of applications, and improves management efficiency;

[0039] 2. The present invention uses client control technology to achieve compatible support for multiple operating systems, including domestic operating systems (such as Tongxin, Kylin) and Windows operating systems, to ensure the stable and smooth operation of the application mall in different terminal environments, and to promote the construction and development of the domestic operating system application ecosystem;

[0040] 3. The present invention integrates a fully automatic shelf security detection mechanism, digital signature technology and application distribution management and control to ensure the data integrity and security of application packages during upload, download and installation, effectively prevent the spread of malicious software and non-compliant applications, and protect the terminal security of users. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 This is a system architecture diagram of the present invention;

[0042] Figure 2 A schematic diagram of a process for managing a backend application lifecycle in an embodiment of the present invention;

[0043] Figure 3 A schematic diagram of an application review process in an embodiment of the present invention;

[0044] Figure 4 The figure is a schematic diagram of the client application life cycle in one embodiment of the present invention. DETAILED DESCRIPTION

[0045] The present invention is further described in detail below with reference to the accompanying drawings and specific embodiments:

[0046] A domestically produced intelligent application management platform based on security control, including a client and a management backend. Users access the application store interface through the client to interact with the management backend. The management backend is mainly used for application distribution and monitoring to achieve cross-operating system application management.

[0047] The management backend includes three modules: application management module, client configuration module and application control module. The application management module supports the full life cycle management of applications, from application creation, package management based on system architecture to application listing, and ensures application quality through a fully automatic review process. It also provides an application log tracking function, which can view application flow, classification, and download volume in real time, and provide visual statistical data to help operators make accurate decisions;

[0048] The client configuration module allows operators to configure the navigation, classification and topic structure of the client, including the homepage layout, classification structure and topic display, to improve user experience and application discovery efficiency;

[0049] The application management and control module is responsible for controlling the distribution, installation, and uninstallation permissions of applications. It formulates application distribution strategies and sets installation and uninstallation rules based on terminal information collection.

[0050] In this embodiment, the client includes an application recommendation module, a full classification module, an application installation module, an application update module and an application uninstallation module;

[0051] The litigation application recommendation module provides application collection display based on application popularity, latest listing, download ranking, and topic factors, recommends popular applications and topic content, and helps users quickly discover popular applications and topic content;

[0052] The All Categories module comprehensively displays software categories and provides category search functions, allowing users to quickly find the applications they need; the Download Management module supports matching different operating systems and device architectures to ensure compatibility and efficient downloading;

[0053] The application installation module provides a quick installation function for the installation package downloaded by the user, automatically selecting the appropriate installation method according to the client operating system to ensure that the user can complete the application installation process conveniently;

[0054] The application update module automatically detects the latest version of the application installed on the client and pushes the upgrade package to ensure that users always use the latest application version;

[0055] The application uninstall module provides a convenient and quick uninstall entry to help users manage terminal storage space; the application virtualization module provides a client interface for the Windows operating system and domestic operating systems (such as Kylin and Tongxin) to ensure the compatibility and smooth interaction of the application store between different operating systems.

[0056] In this embodiment, a management method for a localized intelligent application management platform based on security control is also provided, comprising the following steps:

[0057] S1: In the management background, when operators submit applications, they first need to fill in the basic information of the application, including the application name, version number, application category, supported operating systems, architecture information, and also need to upload the application package file, screenshots, descriptions and other related resources.

[0058] S2: After the application creation request is submitted, the system reviews the submitted application to ensure that it complies with the platform's submission specifications and software security specifications;

[0059] S3: The application listing process refers to the process of the application store distributing the application to users. After the review is passed, the operator will list the application on the application store. The application will be labeled according to the functional classification, operating system, and architecture to facilitate user search and download. At the same time, the operator also needs to set the application distribution strategy and set the terminal IP with installation and uninstallation permissions to prevent the spread of malicious software. After the application is reviewed and listed, the terminal user can download it according to their actual needs.

[0060] S4: Monitor and manage application updates. Operation personnel submit new application information, including new application packages, version numbers, and descriptions of function updates. If the new application updates meet store standards and pass review and testing, managers push the new versions to the store and update the version number, description, and other information on the application interface. The platform will also automatically notify users of updates to ensure that end users can obtain the latest application versions in a timely manner. Users can decide whether locally installed applications need to be upgraded based on the application version upgrade information sent by the application management service.

[0061] S5: After being put on the shelves, the application will enter the continuous monitoring stage. The operation staff will monitor the download volume, uninstall volume, user evaluation, and application failure feedback data of the application through the background system, and analyze the market performance and user experience of the application. If the application is found to have security problems, performance problems, or behavior that does not comply with platform regulations, the operation staff will intervene, remove the application in time, and require the application provider to repair it.

[0062] S6: When an app no ​​longer meets the store's standards or the developer requests to terminate the release, the operator can remove the app from the store. After removal, the platform will stop downloading the app and retain or delete related data as needed. When the operator removes the app, the platform notifies users that the app will no longer be updated or supported, ensuring that users have enough time to migrate;

[0063] S7: The client uses the control to perform the full life cycle management process of application query, download, installation, update, and uninstall, and reports the application usage to the platform.

[0064] In this embodiment, S2 is specifically:

[0065] S21: First, perform software component analysis on the application package to check whether the file format and structure of the application package meet the store standards, and ensure that the application package is intact, complete, and contains all necessary files and resources;

[0066] S22; In addition, the platform conducts multi-level security scans on applications, including malicious code detection and risk analysis of dependent libraries. Through security scanning, the platform can detect possible security vulnerabilities or malicious behaviors in applications and prevent harmful applications from entering the store in a timely manner;

[0067] S23: After passing the security check, the platform will automatically digitally sign the software to ensure the integrity of the application and prevent tampering.

[0068] In this embodiment, S23 is specifically as follows: first, the server calculates the hash value of the application package, and then uses the server private key to encrypt the calculated hash value to generate a digital signature, and the digital signature data is bound to the application package in .sig format; only applications that have been digitally signed and encrypted can push application-related information to the server database for subsequent listing and downloading. Applications that do not meet the above requirements will be rejected and the corresponding reasons will be given.

[0069] In this embodiment, S7 is specifically:

[0070] S71: When the user installs the client control of the application store, the platform will automatically detect the operating system type and architecture (such as x86, ARM, etc.) of the user's device, and provide a matching client installation package based on the detection results; for example, a deb package is provided for the domestic Kirin system, and an exe package is provided for the Windows system. After the client control is successfully installed, the user can access the functions of the application store through the client.

[0071] S72: The user opens the client and accesses the application store interface. The application store provides multiple search portals, including home page recommendations, special topic recommendations, and all classification modules. The user searches by keywords, browses the recommendation list, or filters by category to find the target application;

[0072] S73: The user selects the application he wants to install in the application store. The platform automatically provides the corresponding installation package and the bound digital signature file according to the operating system and architecture of the user's client. After the download is complete, the platform automatically performs a signature verification operation to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with;

[0073] S74: When the user performs the installation operation, the client control will automatically call the corresponding installation command according to the operating system and architecture of the client device; for example, the dpkg command is used on the domestic system, and the system command is used on Windows to execute the installation script and install the application to the specified directory. During the installation process, the client control will monitor the installation process to ensure the smooth progress of the installation process. If an abnormality occurs, it can be rolled back in time and the user will be prompted;

[0074] S75: The user checks the update status of the installed application through the application update module of the application store. The platform will regularly detect and push the latest version of the application update notification. The user can choose whether to update the application according to their needs. During the update process, the client control will automatically download and execute the installation package of the corresponding version for overwriting and installation according to the system architecture and update strategy. After the update is completed, the client control will automatically verify whether the application is successfully updated and prompt the user for the update status;

[0075] S76: If the user decides to uninstall an application, the uninstallation operation is performed through the uninstallation module of the application store. The client control will first retrieve the applications installed on the client host through system commands or registry information, and list the applications that can be uninstalled. After the user selects the application to be uninstalled, the control automatically calls the corresponding uninstallation command according to the operating system type, and ensures that all related files and registration information are cleaned up during the uninstallation process to avoid residual. After the uninstallation is completed, the client control will check to ensure that the application is completely uninstalled and related resources are released.

[0076] In this embodiment, a signature verification operation is automatically performed after the download is complete to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with. Specifically, the client calculates the hash value of the downloaded application package and uses the server public key provided by the platform to decrypt the digital signature to obtain the original hash value. The client compares the decrypted hash value with the hash value calculated by itself; if the two are consistent, it means that the downloaded application package has not been tampered with during the transmission process and is indeed from the server publisher. The signature verification is passed and the user can continue to install the application; otherwise, the client will believe that the application package has been tampered with or is unreliable, and prompt the user that the application package may be from an unknown source to prevent the installation of malicious software.

[0077] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0078] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0079] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0080] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0081] The above is only a preferred embodiment of the present invention, and does not limit the present invention in other forms. Any technician familiar with the profession may use the above disclosed technical content to change or modify it into an equivalent embodiment with equivalent changes. However, any simple modification, equivalent change and modification made to the above embodiment according to the technical essence of the present invention without departing from the technical solution of the present invention still belongs to the protection scope of the technical solution of the present invention.

Claims

1. A domestic intelligent application management platform based on security control, characterized in that: It includes a client and a management backend. Users access the application store interface through the client to interact with the management backend. The management backend is mainly used for application distribution and monitoring to achieve cross-operating system application management. The management backend includes three modules: application management module, client configuration module and application control module. The application management module supports the full life cycle management of applications, from application creation, package management based on system architecture to application listing, and ensures application quality through a fully automatic review process. It also provides an application log tracking function, which can view application flow, classification, and download volume in real time, and provide visual statistical data to help operators make accurate decisions; The client configuration module allows operators to configure the navigation, classification and topic structure of the client, including the homepage layout, classification structure and topic display, to improve user experience and application discovery efficiency; The application management and control module is responsible for controlling the distribution, installation, and uninstallation permissions of applications. It formulates application distribution strategies and sets installation and uninstallation rules based on terminal information collection.

2. According to a domestic intelligent application management platform based on security control as described in claim 1, it is characterized in that: The client includes an application recommendation module, a full classification module, an application installation module, an application update module and an application uninstallation module; The litigation application recommendation module provides application collection display based on application popularity, latest listing, download ranking, and topic factors, recommends popular applications and topic content, and helps users quickly discover popular applications and topic content; The All Categories module comprehensively displays software categories and provides category search functions, allowing users to quickly find the applications they need; the Download Management module supports matching different operating systems and device architectures to ensure compatibility and efficient downloading; The application installation module provides a quick installation function for the installation package downloaded by the user, automatically selecting the appropriate installation method according to the client operating system to ensure that the user can complete the application installation process conveniently; The application update module automatically detects the latest version of the application installed on the client and pushes the upgrade package to ensure that users always use the latest application version; The application uninstallation module provides a convenient and quick uninstallation entry to help users manage terminal storage space; The application virtualization module provides client interfaces for Windows operating systems and domestic operating systems, ensuring the compatibility and smooth interaction of application stores between different operating systems.

3. A management method for a localized intelligent application management platform based on security control according to any one of claims 1-2, characterized in that: The following steps are involved: S1: In the management background, when operators submit applications, they first need to fill in the basic information of the application, including the application name, version number, application category, supported operating systems, architecture information, and also need to upload the application package file, screenshots, descriptions and other related resources. S2: After the application creation request is submitted, the system reviews the submitted application to ensure that it complies with the platform's submission specifications and software security specifications; S3: The application listing process refers to the process of the application store distributing the application to users. After the review is passed, the operator will list the application on the application store. The application will be labeled according to the functional classification, operating system, and architecture to facilitate user search and download. At the same time, the operator also needs to set the application distribution strategy and set the terminal IP with installation and uninstallation permissions to prevent the spread of malicious software. After the application is reviewed and listed, the terminal user can download it according to their actual needs. S4: Monitor and manage application updates. Operation personnel submit new application information, including new application packages, version numbers, and descriptions of function updates. If the new application updates meet store standards and pass review and testing, managers push the new versions to the store and update the version number, description, and other information on the application interface. The platform will also automatically notify users of updates to ensure that end users can obtain the latest application versions in a timely manner. Users can decide whether locally installed applications need to be upgraded based on the application version upgrade information sent by the application management service. S5: After the application is launched, it will enter the continuous monitoring stage. The operation staff will monitor the download volume, uninstall volume, user evaluation, and application failure feedback data of the application through the background system to analyze the market performance and user experience of the application. If an app is found to have security issues, performance issues, or behavior that does not comply with platform regulations, operators will intervene, remove the app in a timely manner, and require the app provider to fix it; S6: When an app no ​​longer meets the store's standards or the developer requests to terminate the release, the operator can remove the app from the store. After removal, the platform will stop downloading the app and retain or delete related data as needed. When the operator removes the app, the platform notifies users that the app will no longer be updated or supported, ensuring that users have enough time to migrate; S7: The client uses the control to perform the full life cycle management process of application query, download, installation, update, and uninstall, and reports the application usage to the platform.

4. The management method according to claim 3, characterized in that: The S2 is specifically: S21: First, perform software component analysis on the application package to check whether the file format and structure of the application package meet the store standards, and ensure that the application package is intact, complete, and contains all necessary files and resources; S22； In addition, the platform conducts multi-level security scans on applications, including malicious code detection and risk analysis of dependent libraries. Through security scanning, the platform can detect possible security vulnerabilities or malicious behaviors in applications and prevent harmful applications from entering the store in a timely manner; S23: After passing the security check, the platform will automatically digitally sign the software to ensure the integrity of the application and prevent tampering.

5. The management method according to claim 4, characterized in that: The specific step S23 is as follows: first, the server calculates the hash value of the application package, and then uses the server private key to encrypt the calculated hash value to generate a digital signature, and the digital signature data is bound to the application package in the .sig format; only applications that have been digitally signed and encrypted can push application-related information to the server database for subsequent listing and downloading. Applications that do not meet the above requirements will be rejected and the corresponding reasons will be given.

6. The management method according to claim 3, characterized in that: The S7 is specifically: S71: When the user installs the client control in the application store, the platform will automatically detect the operating system type and architecture of the user's device and provide a matching client installation package based on the detection results; S72: The user opens the client and accesses the application store interface. The application store provides multiple search portals, including home page recommendations, special topic recommendations, and all classification modules. The user searches by keywords, browses the recommendation list, or filters by category to find the target application; S73: The user selects the application he wants to install in the application store. The platform automatically provides the corresponding installation package and the bound digital signature file according to the operating system and architecture of the user's client. After the download is complete, the platform automatically performs a signature verification operation to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with; S74: When the user performs the installation operation, the client control will automatically call the corresponding installation command according to the operating system and architecture of the client device; during the installation process, the client control will monitor the installation process to ensure the smooth progress of the installation process. If an abnormality occurs, it can be rolled back in time and the user will be prompted; S75: The user checks the update status of the installed application through the application update module of the application store. The platform will regularly detect and push the latest version of the application update notification. The user can choose whether to update the application according to their needs. During the update process, the client control will automatically download and execute the installation package of the corresponding version for overwriting and installation according to the system architecture and update strategy. After the update is completed, the client control will automatically verify whether the application is successfully updated and prompt the user for the update status; S76: If the user decides to uninstall an application, the uninstallation operation is performed through the uninstallation module of the application store. The client control will first retrieve the applications installed on the client host through system commands or registry information, and list the applications that can be uninstalled. After the user selects the application to be uninstalled, the control automatically calls the corresponding uninstallation command according to the operating system type, and ensures that all related files and registration information are cleaned up during the uninstallation process to avoid residual. After the uninstallation is completed, the client control will check to ensure that the application is completely uninstalled and related resources are released.

7. The management method according to claim 6, characterized in that: After the download is completed, the signature verification operation will be automatically performed to verify the digital signature and integrity of the downloaded file to ensure that the downloaded application version has not been tampered with. Specifically, the client calculates the hash value of the downloaded application package, and uses the server public key provided by the platform to decrypt the digital signature to obtain the original hash value. The client compares the decrypted hash value with the hash value calculated by itself; if the two are consistent, it means that the downloaded application package has not been tampered with during the transmission process and is indeed from the server publisher. The signature verification is passed and the user can continue to install the application; otherwise, the client will believe that the application package has been tampered with or is unreliable, and prompt the user that the application package may be of unknown origin to prevent the installation of malicious software.

Images