Script File Package Hot Update Encryption and Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing hot update technologies for script file packages, such as Read Native, lack effective security and tamper-proofing measures, leading to potential crashes and invalid program information during updates, with little consideration for software copyright protection and integrity verification.
Innovation Solution
A method and device for hot updating script file packages that involve encrypting script files using an encryption feature vector, generating and verifying MD5 values, and adding digital watermarking to ensure integrity and authenticity, preventing tampering and ensuring only valid updates are loaded.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If all JS files are packaged into one bundle file during Read Native hot updating, then the hot update process is simplified and can be issued as a whole, but the bundle file becomes vulnerable to tampering and incompleteness, causing application crashes or distorted content
Solution Approach 1:
The patent segments the bundle file into multiple encrypted packages, each containing a portion of the JS files. This segmentation allows individual verification of each package's integrity through unique encryption keys and checksums, preventing tampering while maintaining the hot update functionality. The system divides the monolithic bundle into verifiable units that can be independently validated.
Solution Approach 2:
The patent implements preliminary encryption and checksum generation for each bundle file package before distribution. The encryption keys and integrity verification data are prepared in advance and embedded within each package, enabling the terminal to verify integrity before execution. This preliminary action ensures that any tampering or incompleteness is detected before the application runs.
2Speed
If the bundle file is not encrypted or verified, then the hot update can be loaded quickly without additional processing, but the application becomes vulnerable to crashes from incomplete files or tampered content
Solution Approach 1:
The patent implements self-verification through embedded checksums and encryption keys within each bundle package. Each package contains its own integrity verification data, allowing the terminal to autonomously verify completeness and detect tampering without external intervention. This self-service mechanism ensures security while minimizing additional processing overhead.
Solution Approach 2:
The patent replaces manual integrity checking with automated cryptographic verification. Instead of relying on file size checks or manual validation, the system uses encryption algorithms and checksum verification to automatically detect tampering and incompleteness. This substitution provides robust security while maintaining fast loading speeds through efficient cryptographic operations.
3Device complexity
If no copyright protection measures are implemented in the hot update system, then the implementation is simpler and faster, but software copyright cannot be protected and the application content can be distorted
Solution Approach 1:
The patent changes the state of the bundle files from plaintext to encrypted form using cryptographic algorithms. This parameter change (from unencrypted to encrypted) protects copyright by making the content unreadable without proper decryption keys. The encryption transforms the software content into a protected state that prevents unauthorized copying or modification while maintaining functionality when properly decrypted.
Data Source
AI summary
A hot updating method of script file package and a hot updating device of script file package are provided, which belongs to the technical field of hot updating. The hot updating method of script file package includes: receiving an update request of a terminal for an application program, where the update request carries a terminal identification; acquiring an initial script file packet of the application program, extracting an encryption feature vector of the initial script file packet, encrypting the initial script file packet according to the encryption feature vector, and generating an encrypted script file packet; calculating a first MD5 value of the encrypted script file packet; calculating an encrypted feature value of a combination of the terminal identification and the feature vector; and generating a hot update package, according to the encrypted script file package, the first MD5 value and the encrypted feature value, and sending the hot update package to the terminal.