Cloud server, application program audit certification and management system and method

Abstract

The invention provides an application program verification, certification and management system comprising a cloud server and a mobile terminal; the cloud server is used for verifying an application program, acquiring suspicious behavior data of the application program in the verification process, recording the suspicious behavior data to obtain a verification result of the application program and generating a verification description file according to the verification result, wherein the verification description file includes certification data and the verification result of the application program; and the mobile terminal is used for downloading the verification description file of a specified application program from the cloud server and using a corresponding management strategy to carry out safety control on the specified application program according to the verification description file. The system has a reasonable multi-strategy management mechanism, can bring a better real-time safety protection effect and has good compatibility. The invention further provides a cloud server and an application program verification, certification and management method.

Description

technical field [0001] The present invention relates to the technical field of mobile communication, in particular to a cloud server, and an application verification and authentication and management system and method. Background technique [0002] With the development of software and mobile communication technologies, the systems of mobile communication devices (such as mobile phones) are also constantly updated. At present, the systems of most mobile communication devices require strict signature authentication for the installation and use of application programs. Specifically, some of these systems (for example, the Symbian system) introduce a strict signature authentication system, and applications that use system capabilities with limited access need to be signed by the developer and the publisher to be unrestricted in any other Install on the specified version of the system. After the application installation package is signed by the developer, and then signed by the...

AI Technical Summary

Problems solved by technology

Other system applications (such as Android system) can be installed and used only by signing. It can be considered that the signature of this system application can only indicate the identity of the developer, and sometimes the identity of the developer cannot be indicated, such as using the SDK (SoftwareDevelopment Kit, software development kit) comes with a debug certificate or other certificates that cannot indicate the identity of the developer

[0003] The disadvantages of the existing technology are: (1) The certification result is single, there are only two results of approval and disapproval, and it is the approval of information that is generally applicable to all applications, and there is no approval for the characteristics of the application

(2) The mobile terminal has a single processing strategy for the application, and there is no multi-policy management mechanism, and there is no targeted implementation of multi-policy management for the current application review status

(3) Poor compatibility, the authentication result is not independent, the authentication result and signature data need to be saved in the application installation package before authentication, after the application is authenticated, the file where the authentication object is located will be modified and a new installation package file will be generated

The format of the pre-certification and post-certification applications has changed substantially, and two types of applications have been formed, which are prone to compatibility problems

Images