File Authentication via Feature String Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current APK authentication methods rely heavily on manual processes and are prone to missing counterfeit files, posing a risk to user information security and service provider interests.
Innovation Solution
A file authentication method and apparatus that extracts file digest data, generates a feature character string, and determines file information from a feature database to authenticate files, identifying genuine or counterfeit applications by matching the feature character string with stored information, including certificate feature values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual authentication is used to determine APK authenticity, then authentication personnel can review reported applications, but the process is prone to missing counterfeit files and lacks reliability
Solution Approach 1:
The patent replaces manual mechanical authentication processes with automated computational systems. Specifically, it uses hash value calculation, feature string generation, and database matching algorithms to automatically authenticate APK files, eliminating human error and subjectivity in the authentication process.
Solution Approach 2:
The system enables self-service authentication where the APK file itself provides authentication evidence through its inherent features (hash values, certificates, permissions). The authentication process queries the file's own characteristics rather than relying on external manual review, making the system self-sufficient and scalable.
2Productivity
If manual authentication processes are used, then human reviewers can evaluate reported applications, but the process is time-consuming and has low productivity
Solution Approach 1:
The patent performs preliminary extraction of authentication features (hash values, certificates, permissions) from APK files during the authentication process itself. By pre-calculating and storing these features in a database, the system enables rapid comparison and matching operations, significantly reducing authentication time and increasing throughput.
Solution Approach 2:
The system creates standardized feature representations (hash values, feature strings) that copy essential authentication information from the original APK files. These copied features can be rapidly compared against database entries without handling the full APK files, enabling high-speed batch authentication processing.
3Object-affected harmful factors
If manual review processes are employed, then authentication can be performed on reported applications, but the risk of missing counterfeit files creates security vulnerabilities
Solution Approach 1:
The patent transforms the authentication process from subjective manual evaluation to objective parameter-based comparison. It extracts specific parameters (hash values, certificate validity, permission sets) and compares them against database records, ensuring consistent and accurate detection of counterfeit files without human error.
Solution Approach 2:
The system implements feedback through database storage of authentication results and feature data. Each authenticated APK's features are stored and used for future comparisons, creating a growing reference database that improves detection accuracy over time and provides continuous feedback on authentication patterns.
Data Source
AI summary
A file authentication method and apparatus are provided in the embodiments of this application. File digest data is extracted from a file that includes an installation package of an application. The file digest data identifies file information of the file. A feature character string of the file is generated based on the file digest data. File information of a target file is determined from a feature database based on the feature character string of the file. The target file matches the feature character string of the file, the feature database stores at least file information and feature character strings of a plurality of genuine files, and the file information of the target file and the file information of the plurality of genuine files include at least a certificate feature value. The file is authenticated according to the file information of the target file and the file information of the file.