Android program start verification method and device

Abstract

The invention discloses a method and device for verifying the start of an Android program. The method includes the following steps: S1. Installing an APK file package and generating an application program; S2. Setting a verification unit for verifying the application program. The verification unit is also used to manage the access authority for the application program; S3. Detect the activation signal of the application program, start the verification unit and verify the application program, and start the application program if the verification is passed. The device is used to execute the corresponding method. The present invention is to verify the installed Android program again after the APK is installed, and through the verification of the integrity of the program, the security of the program after the installation is completed is improved, and Android programs caused by factors such as Trojan horses or bad connections are avoided. The loss of users caused by the modification can improve the safety of users.

Description

technical field [0001] The invention relates to a method and device for verifying the startup of an Android program, belonging to the field of mobile phone software security. Background technique [0002] As the installer APK file package of the Android system, it mainly consists of Assets storing application resources, library file Lib referenced by the application, signature file Meta-inf, resource file Res, configuration file AndroidManifest.xml, and compiled code Classes. dex and the compiled binary resource file Resources.arsc. [0003] In the process of verifying the APK file package, the method adopted in the prior art is to verify based on the signature file Meta-inf in the APK file package. This verification method is due to utilizing the signature file to verify the APK file package. Overall verification, for the case where the APK file package has been illegally tampered with but the signature file has not changed, the verification can still pass, resulting in a ...

AI Technical Summary

Problems solved by technology

[0003] In the process of verifying the APK file package, the method adopted in the prior art is to verify based on the signature file Meta-inf in the APK file package. This verification method is due to utilizing the signature file to verify the APK file package. Overall verification, for the case where the APK file package is illegally tampered with but the signature file has not changed, the verification can still pass, resulting in a decrease in the security of the verification

The popularity of Android has made it the target of many malicious software attacks. Android Trojan horses, rootkits, and application-layer privilege escalation attacks are constantly emerging. Among them, APK is the attack entry point for most vulnerabilities. The security of APK It is very important, and most of the existing main security protection methods are mainly for the protection of APK, but there is no more protection for the verified Android program itself, so there are some illegal connections or other Trojan programs that cause the original Normal Android programs are incorrectly modified and cause harm to users using the modified programs

Images