Application Security Verification Algorithm

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The ANDROID platform lacks comprehensive security verification for application installation packages, making it difficult to detect and prevent malicious applications that mimic legitimate ones, potentially leading to user data breaches.

Innovation Solution

A method and device for verifying application security by determining a verification algorithm based on application information, using a correspondence relationship between algorithms and applications, and employing these algorithms to authenticate and integrity-check applications before installation or update, ensuring only trusted applications are installed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If simple verification (integrity check only) is performed on application installation packages, then the verification process is fast and simple, but security authenticity verification is insufficient and malicious applications cannot be detected

Engineering Contradiction:

Improvesecurity verification capabilityVSAvoidverification system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The verification system is segmented into two distinct components: integrity verification (checking if the application package is complete and unmodified) and authenticity verification (checking if the application is from a trusted source using digital signatures). This segmentation allows each verification type to be handled independently, improving security without overwhelming the system with a single monolithic verification process.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A third-party certificate authority (CA) is introduced as an intermediary to issue digital certificates to application developers. The verification algorithm uses these certificates to authenticate applications indirectly through trusted third-party validation, rather than requiring the device to directly verify every application's authenticity, thus managing complexity while enhancing security.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If no authenticity verification is performed on application installation packages, then the installation process is fast and straightforward, but malicious applications can be installed undetected causing user data breaches

Engineering Contradiction:

Improveapplication authenticity verificationVSAvoidverification time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Digital signatures and certificates are pre-applied to application packages during the development and distribution phase. This preliminary authentication allows the verification algorithm to quickly validate authenticity during installation without performing complex real-time analysis, thus reducing verification time while maintaining high reliability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The manual or complex security verification process is replaced with automated cryptographic verification using digital signatures and hash algorithms. This substitution enables fast, programmatic verification of application authenticity during installation, significantly reducing the time loss compared to manual security checks while maintaining high reliability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If comprehensive security verification algorithms are implemented for all applications, then malicious applications can be detected and prevented, but the verification process becomes complex and time-consuming

Engineering Contradiction:

Improvesecurity verification accuracyVSAvoidverification process simplicity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs different levels of verification based on application requirements: standard integrity verification for most applications, and enhanced authenticity verification with digital signatures for applications requiring higher security. This partial application of comprehensive verification maintains security accuracy where needed while preserving operational simplicity for routine installations.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The verification process dynamically adjusts its parameters based on the application type and security requirements. For example, it may use different hash algorithms (MD5, SHA-1, SHA-256) or different verification depths depending on the application, allowing the system to maintain high security accuracy when necessary while keeping the process simple and fast for standard applications.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS10621335B2Method and device for verifying security of application

Publication Date: 2020.04.14 BOE TECHNOLOGY GROUP CO LTD

AI summary

The present disclosure provides a method and device for verifying security of an application. The method comprises acquiring the application; determining a verification algorithm corresponding to the application according to application information of the application; and verifying the security of the application using the determined verification algorithm. The device comprises an application acquisition circuit configured to acquire the application; an algorithm determination circuit configured to determine a verification algorithm corresponding to the application according to application information of the application; and a security verification circuit configured to verify the security of the application using the determined verification algorithm.