Integrity verification method and device, terminal equipment and verification server

Abstract

The invention is suitable for the technical field of terminals, and particularly relates to an integrity verification method and device, terminal equipment and a verification server. The method comprises the steps of obtaining a to-be-verified file sent by a file server and integrity verification information of the to-be-verified file, wherein the integrity verification information comprises root node signature information obtained by using a first signature private key to sign a target root node of a target Hash tree, child nodes related to the to-be-verified file in the target Hash tree and a first signature public key corresponding to the first signature private key, and the target hash tree is a hash tree constructed according to all files in the file server; verifying the root node signature information by using the first signature public key; and when the root node signature information passes verification, constructing a current root node corresponding to the target hash tree according to the to-be-verified file and the child nodes, and verifying the integrity of the to-be-verified file according to the current root node and the target root node, thereby solving the problem of large calculation amount caused by the need of respectively signing all files at present.

Description

technical field [0001] The present application belongs to the field of terminal technology, and in particular relates to an integrity verification method, device, terminal equipment, verification server and computer-readable storage medium. Background technique [0002] Integrity verification refers to the technical means of verifying the accuracy of files to detect whether files have been illegally tampered with. With the continuous development of network technology, files downloaded or applied by terminal devices are easily tampered with illegally. Therefore, how to verify the integrity of downloaded files or application files of terminal devices has become an urgent problem to be solved by those skilled in the art. [0003] In the prior art, it is possible to calculate hash values ​​for all files in advance, and sign and save each hash value, so as to verify the integrity of the files according to the saved signature results. This method of signing all files separately r...

AI Technical Summary

Problems solved by technology

[0004] The embodiment of the present application provides an integrity verification method, device, terminal equipment, verification server and computer-readable storage medium, which can solve the problem that all files need to be signed separately in the existing integrity verification, resulting in a large amount of calculation The problem

Images