Android Client Certification via Local Service Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the Android system, malicious client applications can tamper with and re-sign application packages, making it difficult to distinguish between legitimate and pirated applications, which threatens developer interests and system security.
Innovation Solution
A method involving a local service unit that encrypts client application packages, establishes binder communication, searches for certification information files, and uses encryption algorithms to verify the authenticity of client applications, ensuring only certified applications can run and access services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Android signature mechanism is used for application certification, then application authenticity can be verified, but the signature information can be easily removed and applications can be cracked and re-signed
Solution Approach 1:
The patent applies preliminary action by embedding certification information directly into the application package before distribution. The local service unit performs certification checks before allowing the application to run, preventing cracked applications from executing in the first place rather than relying solely on post-installation signature verification.
Solution Approach 2:
The patent introduces a local service unit as an intermediary between the application package and the Android system. This service unit acts as a mediator that intercepts and verifies application certification information, providing an additional layer of security that goes beyond the standard Android signature mechanism.
2Reliability
If local service program is deployed to provide encryption and remote call functions, then application protection is enhanced, but malicious applications can misuse the service to perform harmful operations on cloud server
Solution Approach 1:
The patent implements feedback by having the local service unit continuously monitor and verify application certification status. The service unit checks certification information whenever applications attempt to use protected functions, and can terminate services for malicious applications. This creates a closed-loop system that detects and responds to malicious behavior in real-time.
Solution Approach 2:
The patent applies self-service by enabling the local service unit to autonomously verify application certification information and make decisions about service access. The service unit independently checks certification data, determines whether applications are legitimate or malicious, and controls access to protected functions without requiring external intervention.
3Reliability
If certification verification is performed by local service unit, then malicious applications can be blocked, but additional certification checks increase system complexity
Solution Approach 1:
The patent merges the certification verification function with the existing local service unit that provides encryption and remote call capabilities. By combining multiple security and service functions into a single integrated component, the patent avoids creating separate complex verification systems while still achieving comprehensive security checks.
Data Source
AI summary
The present invention provides a method for certifying an Android client application by a local service program. In the method, a client application is signed to generate a certification information file; when the client application is run in an Android system, the certification information file is certified by a local service program, and the client application can normally use services provided by the local service program as long as the certification is successful. By the method provided by the present invention, a tampered client application is unable to acquire functions of a local service program, so that legitimate software is distinguished from malicious software, and the security of both the Android system and the network is ensured.