Application Download via Segmented HTTPS and HTTP Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing application download methods over HTTP channels are prone to data hijacking and tampering, leading to instability and excessive traffic consumption due to repeated downloads until verification succeeds.
Innovation Solution
The method involves downloading download description information using an HTTPS channel, followed by downloading the application package using an HTTP channel, with optional verification and secondary downloads via HTTPS if initial verification fails.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If HTTP channel is used for downloading application packages, then data transmission is simple and fast, but data security and stability deteriorate due to easy tampering and hijacking
Solution Approach 1:
The patent segments the download process into two distinct parts: first downloading metadata (XML file) via HTTPS channel to obtain verification information and download URLs, then downloading the actual application package via HTTP channel. This segmentation allows different security requirements to be applied to different data types, maintaining both speed and stability.
Solution Approach 2:
The patent performs preliminary verification by first downloading metadata through the secure HTTPS channel to obtain verification information (such as MD5 hash values) before downloading the application package. This preliminary action enables subsequent verification of the downloaded package, ensuring integrity without requiring the entire download process to use the slower HTTPS protocol.
2Reliability
If cyclic downloading with verification is performed to ensure stability, then download reliability improves, but traffic data consumption increases significantly
Solution Approach 1:
The patent divides the download process into metadata download (via HTTPS) and package download (via HTTP) segments. The metadata contains verification information that enables single-verification acceptance of the package, eliminating the need for multiple cyclic downloads and reducing traffic consumption while maintaining reliability.
Solution Approach 2:
The patent introduces metadata (XML file) as an intermediary that carries verification information. This intermediary enables verification of the application package without requiring re-downloads, thus reducing traffic data consumption while ensuring download stability through cryptographic verification of the package integrity.
3Reliability
If HTTPS channel is used for downloading application packages, then data security improves, but data transmission efficiency and speed deteriorate due to encryption overhead
Solution Approach 1:
The patent segments the download process to apply HTTPS protocol only to the metadata download phase (which is small in size and contains critical verification information) and uses HTTP protocol for the large application package download. This segmentation maintains security for the critical verification data while preserving transmission speed for the bulk data transfer.
Solution Approach 2:
The patent applies different quality levels of security to different parts of the download process: high security (HTTPS with encryption) is applied locally to the metadata transmission where security is most critical, while standard security (HTTP) is used for the application package where speed is more important. This local quality approach optimizes the balance between security and speed.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments of the present application provide an application download method and device, wherein the method specifically includes: downloading download description information of an application by using an HTTPS channel, wherein the download description information includes download address information; and downloading a first application package corresponding to the download address information by using an HTTP channel. The embodiments of the present application can reduce traffic data required for downloading an application.