CN112035829A - Television terminal application control method, device, system, equipment and storage medium - Google Patents
Television terminal application control method, device, system, equipment and storage medium Download PDFInfo
- Publication number
- CN112035829A CN112035829A CN202010732974.4A CN202010732974A CN112035829A CN 112035829 A CN112035829 A CN 112035829A CN 202010732974 A CN202010732974 A CN 202010732974A CN 112035829 A CN112035829 A CN 112035829A
- Authority
- CN
- China
- Prior art keywords
- television terminal
- target application
- valid data
- data
- application
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
- H04N21/4431—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB characterized by the use of Application Program Interface [API] libraries
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Library & Information Science (AREA)
- Multimedia (AREA)
- Signal Processing (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
Abstract
The embodiment of the disclosure relates to a television terminal application control method, device, system, equipment and storage medium. One of the methods comprises: the method comprises the steps of obtaining effective data which are received in advance and stored and contain a first target application list and a second target application list, detecting whether an application which is currently operated by the television terminal comprises a first target application or not according to the first target application list, and closing other applications which do not belong to the first target application list and the second target application list in the television terminal under the condition that the application which is currently operated by the television terminal comprises the first target application. By the method, the application software in the first target application list and the second target application list is reserved in the foreground of the television terminal system, all the applications except the first target application list and the second target application list are closed, and the hidden danger that the third party service falsifies the application software data in the digital television terminal is fundamentally prevented.
Description
Technical Field
Embodiments of the present disclosure relate to the field of computer technologies, and in particular, to a television terminal application control method, a television terminal application control apparatus, a television terminal application control system, a television terminal, a television server, and a computer-readable storage medium.
Background
With the rapid development of computer technology and internet technology, in order to enable users to conveniently watch internet programs through digital television terminals, dedicated digital television terminal systems are generally developed to support the digital television terminals to connect to the internet.
At present, software platforms of digital television terminal systems are generally based on an android operating system, and due to the high customizability of the android operating system and the universal openness of a bottom layer interface, application software in the digital television terminal is easily invaded by third-party services, for example, the third-party services invade normal application software, and part of data of the application software is tampered, so that illegal contents are added in the application software, and subsequently, when the digital television terminal uses the application software to normally play internet programs, illegal contents such as characters, pictures, sounds and short videos can be popped out on a playing interface, and thus, the behavior of a safe playing principle of an operator can be damaged.
Therefore, in order to prevent third party services from tampering with application software data in the digital television terminal, a scheme for application control of the television terminal needs to be provided.
Disclosure of Invention
The embodiment of the disclosure provides a new technical scheme for application control of a television terminal.
According to a first aspect of the present description, there is provided a television terminal application control method, which is applied to a television terminal, including:
obtaining valid data which is received and stored in advance, wherein the valid data comprises: a first target application list and a second target application list;
detecting whether the currently running applications of the television terminal comprise a first target application or not according to the first target application list;
and under the condition that the application currently running by the television terminal comprises a first target application, closing other applications in the television terminal, wherein the other applications do not belong to the first target application list and the second target application list.
Optionally, receiving and storing valid data, comprising:
receiving an application control instruction sent by a television server, wherein the application control instruction comprises: a data field for representing effective data and a data field for representing effective data ordering;
extracting valid data from a data domain of the application control instruction, which characterizes the valid data;
extracting the ordering of the effective data from the data domain of the application control instruction which represents the ordering of the effective data;
splicing the effective data according to the sequence of the effective data;
and storing the spliced effective data.
Optionally, the valid data further includes: a digital signature of valid data;
before storing the spliced valid data, the method further comprises:
the digital signature of the effective data is subjected to signature release through a pre-generated private key to obtain a signature release value of the effective data;
carrying out hash operation on effective data except for the digital signature to obtain a hash value of the effective data;
and storing the valid data in the television terminal under the condition that the de-signing value is consistent with the hash value.
Optionally, the valid data further includes: applying a control time period;
before detecting whether the applications currently running on the television terminal comprise the first target application according to the first target application list, the method further comprises the following steps:
and detecting that the current moment is in the application control time period.
According to a second aspect of the present description, there is provided a television terminal application control method, applied to a television server, comprising:
obtaining valid data, wherein the valid data comprises: a first target application list and a second target application list;
generating an application control instruction according to the effective data and a pre-established application control instruction structure;
and sending the application control instruction to the television terminal, so that the television terminal detects whether the application currently running at the television terminal comprises a first target application according to a first target application list, and closing other applications in the television terminal under the condition that the application currently running at the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list.
Optionally, the application control instruction structure includes: the data fields of the valid data type, the valid data length, the valid data version, the valid data ordering and the valid data are respectively represented.
Optionally, before generating the application control instruction according to the valid data and a pre-created application control instruction structure, the method further includes:
carrying out digital signature on the valid data through a pre-generated private key;
adding a digital signature of the valid data to the valid data;
generating an application control instruction according to the effective data and a pre-established application control instruction structure, wherein the method comprises the following steps:
and generating an application control instruction according to the effective data carrying the digital signature and a pre-established application control instruction structure.
Optionally, sending the application control instruction to the television terminal includes:
and periodically sending the application control instruction to the television terminal.
Optionally, the valid data further includes: a control period is applied.
According to a third aspect of the present specification, there is also provided a television terminal application control apparatus, which is applied to a television terminal, including:
the device comprises an acquisition module, a storage module and a processing module, wherein the acquisition module is used for acquiring valid data which is received and stored in advance, and the valid data comprises: a first target application list and a second target application list;
the detection module is used for detecting whether the currently running applications of the television terminal comprise first target applications or not according to the first target application list;
the control module is configured to close other applications in the television terminal when the detection module detects that the currently running application of the television terminal includes a first target application, where the other applications are applications that do not belong to the first target application list and the second target application list.
According to a fourth aspect of the present specification, there is also provided a television terminal application control apparatus, which is applied to a television server, including:
an obtaining module, configured to obtain valid data, where the valid data includes: a first target application list and a second target application list;
the generating module is used for generating an application control instruction according to the effective data and a pre-established application control instruction structure;
and the sending module is used for sending the application control instruction to the television terminal, so that the television terminal detects whether the application currently running at the television terminal comprises a first target application according to a first target application list, and closes other applications in the television terminal under the condition that the application currently running at the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list.
According to a fifth aspect of the present specification, there is also provided a television terminal including the television terminal application control apparatus according to the third aspect of the present specification, or the apparatus includes:
a memory for storing executable commands;
and the processor is used for executing the television terminal application control method according to the first aspect of the specification under the control of the executable command.
According to a sixth aspect of the present specification, there is also provided a television server including the television terminal application control apparatus according to the fourth aspect of the present specification, or the television server includes:
a memory for storing executable commands;
a processor for executing the television terminal application control method according to the second aspect of the present specification under the control of the executable command.
According to a seventh aspect of the present specification, there is also provided a television terminal application control system, including a television server and a television terminal, where the television server sends an application control instruction carrying valid data to the television terminal, where the valid data includes: the television terminal closes other applications in the television terminal according to the valid data, wherein the other applications do not belong to the first target application list and the second target application list.
According to an eighth aspect of the present specification, there is also provided an embodiment of a readable storage medium, which stores executable instructions that, when executed by a processor, perform the television terminal application control method according to the first aspect of the present specification.
In one embodiment, by keeping the application software in the first target application and the second target application list in the foreground of the television terminal system, all the applications except the first target application and the second target application list are closed, thereby fundamentally preventing the hidden danger that the third party service tampers with the application software data in the digital television terminal, and simultaneously enhancing the operation safety and protecting the economic benefit of the cable television operator.
Other features of the present description and advantages thereof will become apparent from the following detailed description of exemplary embodiments thereof, which proceeds with reference to the accompanying drawings.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments of the specification and together with the description, serve to explain the principles of the specification.
Fig. 1 is a television terminal application control system provided by an embodiment of the present disclosure;
fig. 2 is a flowchart of a television terminal application control method provided by an embodiment of the present disclosure;
fig. 3 is a flowchart of another television terminal application control method provided by an embodiment of the present disclosure;
fig. 4 is another application control system for a television terminal provided by an embodiment of the present disclosure;
fig. 5 is a schematic block diagram of a television terminal application control apparatus provided in an embodiment of the present disclosure;
fig. 6 is a schematic block diagram of another television terminal application control apparatus provided by an embodiment of the present disclosure;
fig. 7 is a functional block diagram of a television terminal provided by an embodiment of the present disclosure;
fig. 8 is a schematic block diagram of a television server provided by an embodiment of the present disclosure.
Detailed Description
Various exemplary embodiments of the present specification will now be described in detail with reference to the accompanying drawings.
The following description of at least one exemplary embodiment is merely illustrative in nature and is in no way intended to limit the disclosure, its application, or uses.
It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, further discussion thereof is not required in subsequent figures.
< hardware configuration >
Fig. 1 is a television terminal application control system 1000 provided in the embodiment of the present disclosure, which includes a television server 1100 and a television terminal 1200, where the television server 1100 and the television terminal 1200 are connected and communicated with each other through a network 1300.
Television server 1100 may be a virtual machine or a physical machine. Television server 1100 may include processor 1110, memory 1120, interface device 1130, communication device 1140, output device 1150, input device 1160, etc. The processor 1110 may be a central processing unit CPU, a microprocessor MCU, or the like. The memory 1120 includes, for example, a ROM (read only memory), a RAM (random access memory), a nonvolatile memory such as a hard disk, and the like. The interface device 1130 includes, for example, a USB interface, a headphone interface, and the like. The communication device 1140 is capable of wired or wireless communication, for example. The output device 1150 is, for example, a liquid crystal display, a touch panel, or the like. Input devices 1160 may include, for example, a touch screen, a keyboard, and the like. A user can input/output voice information through the speaker and the microphone.
Although multiple devices are shown in fig. 1 for each television server 1100, the invention may relate to only some of the devices, for example, television server 1100 may relate to only memory 1120 and processor 1110.
The television terminal 1200 may be a virtual machine or a physical machine. The television terminal 1200 may include a processor 1210, a memory 1220, an interface device 1230, a communication device 1240, a display device 1250, an image pickup device 1260, an audio output device 1270, an audio pickup device 1280, and the like. The processor 1210 may be a central processing unit CPU, a microprocessor MCU, or the like. The memory 1220 includes, for example, a ROM (read only memory), a RAM (random access memory), a nonvolatile memory such as a hard disk, and the like. The interface device 1230 includes, for example, a USB interface, a headphone interface, and the like. The communication device 1240 can perform wired or wireless communication, for example. The display device 1250 is, for example, a liquid crystal display, a touch display, or the like. The audio output device 1270 is, for example, a speaker or the like. The audio pickup device 1280 is, for example, a microphone or the like. The image capturing device 1260 may include, for example, a camera or the like. A user can input/output voice information through the speaker and the microphone.
Memory 1220 is used to store computer program instructions for controlling processor 1210 to operate to perform a television terminal application control method according to any embodiment of the present invention, as applied to this embodiment. The skilled person can design the instructions according to the disclosed solution. How the instructions control the operation of the processor 1210 is well known in the art and will not be described in detail herein.
Although a plurality of devices are shown for each of the television terminals 1200 in fig. 1, the present invention may relate only to some of the devices, for example, the television terminal 1200 relates only to the memory 1220 and the processor 1210.
In the above description, the skilled person will be able to design instructions in accordance with the disclosed solution. How the instructions control the operation of the processor is well known in the art and will not be described in detail herein.
The following explains a television terminal application control method with reference to a television terminal application control system shown in fig. 1, specifically, the television server 1100 acquires valid data including a first target application list and a second target application list, generates an application control instruction according to the valid data and a pre-created application control instruction structure, and sends the application control instruction carrying the valid data to the television terminal 1200, after receiving the application control instruction sent by the television server 1100, the television terminal 1200 extracts valid data from a data domain representing the valid data of the application control instruction, extracts a sequence of the valid data from a data domain representing the sequence of the valid data of the application control instruction, splices the valid data according to the sequence of the valid data, stores the spliced valid data, and then, according to the first target application list, detecting whether the application currently running on the television terminal 1200 includes a first target application, and closing other applications in the television terminal 1200 when the application currently running on the television terminal 1200 includes the first target application, where the other applications are applications that do not belong to the first target application list and the second target application list.
< method examples >
The embodiment provides a television terminal application control method, as shown in fig. 2, the method includes the following steps:
s201: and acquiring valid data which is received and stored in advance.
In the embodiment of the present disclosure, the valid data refers to data for controlling the opening and closing of the installed application in the television terminal, that is, the television terminal may control the opening and closing of the installed application in the television terminal according to the valid data. The valid data can be a first target application list and a second target application list, and the television terminal can control the opening and closing of the installed applications in the television terminal according to the first target application list and the second target application list.
It should be noted that all the applications included in the first target application list are protected applications, that is, the third-party service is prevented from intruding into the first target application in the first target application list, and part of the data of the first target application is tampered, so that illegal contents are added into the first target application; the trusted application software is contained in the second target application list, that is, the second target application in the second target application list does not intrude into the first target application in the first target application list, and the partial data of the first target application is tampered, so that illegal contents are added into the first target application, wherein the first target application list and the second target application list can be set according to actual conditions.
In the disclosed embodiment, the valid data may be described in a JSON string, the JSON syntax following ECMA-404, for example, the valid data in the JSON string format is as follows:
wherein "appWhiteList" [ "string", "string", … ] refers to a second list of target applications, the second target application in the second list of target applications being "string"; "liveAppList" [ "string", "string", … ] refers to a first list of target applications, the first target application in the first list of target applications being "string".
It should be noted that the valid data in the JSON string format is a general frame, where "string" in "liveapp list" [ "string", "string", … ] is a general name of the first target application and does not specifically refer to a specific first target application, and in practical applications, the "string" character in the valid data in the JSON string format needs to be replaced by a name of the specific first target application, for example, if the name of the first target application is "com. Similarly, "string" in "appWhiteList" [ "string", "string", … ] is also a generic name of the second target application and does not specifically point to a specific second target application, and in practical applications, the "string" character in the valid data of this JSON string format needs to be replaced with the name of the specific second target application, e.g., the names of the second target applications are "com.
In addition, the valid data is transmitted to the television terminal by the television server in advance and is stored in the television terminal.
It should be noted that, the embodiment of the present disclosure provides an implementation manner for a television terminal to receive and store valid data, which is as follows:
the method comprises the steps that a television terminal receives an application control instruction which is sent by a television server and carries a data field representing effective data and a data field representing effective data sequencing, the effective data are extracted from the data field representing the effective data of the application control instruction, the sequencing of the effective data is extracted from the data field representing the effective data sequencing of the application control instruction, the effective data are spliced according to the sequencing of the effective data, and the spliced effective data are stored.
It should be noted here that, since the valid data stored in the television terminal is obtained from the television server, in the embodiment of the present disclosure, the application control instruction needs to include a data field storing the valid data, that is, a data field representing the valid data. In addition, since the maximum data load that can be carried by the data field representing valid data is limited, and valid data that needs to be stored may exceed the maximum data load that can be carried by the data field representing valid data, so that valid data can only be carried in segments, that is, valid data is divided into multiple segments, and each segment is added to a different data field, in the embodiment of the present disclosure, in order to restore valid data stored in a data field in segments, a data field storing an ordering of valid data, that is, a data field representing an ordering of valid data, needs to be included in the application control instruction. And after a plurality of sections of effective data are extracted from the data domain representing the effective data subsequently, the plurality of sections of effective data can be spliced according to the sequencing of the effective data, and the initial effective data is restored.
Therefore, in the embodiment of the present disclosure, the application control instruction is composed of a data field for representing valid data and a data field for representing valid data sorting, the valid data is stored in the data field for representing valid data, and the valid data sorting is stored in the data field for representing valid data sorting.
Further, since the valid data may be hijacked and tampered during transmission, in order to ensure that the valid data can be transmitted safely, in the embodiment of the present disclosure, the valid data is digitally signed by the television server, and then the valid data is securely transmitted by the television terminal through signature verification, specifically, first, the operator generates a public key and a private key for digital signature, stores the private key in the television server, stores the public key in the television terminal, and then, before sending the application control command to the television terminal, the television server digitally signs the valid data through the pre-generated private key, adds the digital signature of the valid data into the valid data, and then sends the application control command carrying the valid data with the digital signature to the television terminal, the television terminal carries out the signature removal on the digital signature of the effective data through a pre-generated private key to obtain a signature removal value of the effective data; carrying out hash operation on effective data except for the digital signature to obtain a hash value of the effective data; and storing the valid data in the television terminal under the condition that the de-signing value is consistent with the hash value.
It should be noted that, when the digital signature of the valid data is added to the valid data, specifically, when the digital signature of the valid data in the JSON string format is performed, a signature field, that is, a signature field, is generated in the valid data in the JSON string format, and the signature field is an empty string, and then, the digital signature of the valid data may be added to the signature field as follows:
wherein, the valid data in the JSON string format is a general framework, wherein "base64_ string" is a digital signature of the valid data in the JSON string format, and in practical applications, the "base64_ string" character in the valid data in the JSON string format needs to be replaced by a specific digital signature of the valid data, for example, the digital signature of the valid data is "RDQ3OEM3RDRDQzEwNjE3 ourcqqtmxmja 4REU2ODI1RTdEODM5NkI1 rujbnkvgrdferjbcmeii 3NzA MTUxNDAzNQ ═ and the JSON string format representing the digital signature in the valid data is" signature ": RDQ3OEM3 rdqzewnje3 umqazju 4REU2 odni 1 rtqjd 3 rdqznq NkI ═ rqrmjbcq NzA ═ RDQ.
In the embodiment of the disclosure, the signature field is transmitted by using BASE64 encoding, and the television terminal performs BASE64 decoding before visa digital signature.
It should be further noted that, the pre-generated private key digitally signs the valid data, specifically, SM3 with SM2 and OID 1.2.156.10197.1.501, see GB/T32918.2-2016, that is, hash operation is performed on the valid data by using SM3 algorithm to obtain a hash value, and then digital signature is performed on the hash value by using SM2 algorithm to obtain the digital signature of the valid data.
S202: and detecting whether the currently running applications of the television terminal comprise a first target application or not according to the first target application list.
S203: and closing other applications in the television terminal under the condition that the application currently running by the television terminal is detected to comprise a first target application, wherein the other applications do not belong to the first target application list and the second target application list.
Since the present invention aims to protect the first target application from being invaded into the first target application by the third party service and tamper part of data of the first target application by closing applications except the first target application and the second target application list in the process of running the first target application, thereby adding illegal contents into the first target application, in the embodiment of the present disclosure, it is necessary to detect whether the application currently running in the television terminal includes the first target application according to the first target application list, and in case that it is detected that the application currently running in the television terminal includes the first target application, close other applications in the television terminal, wherein the other applications are applications that do not belong to the first target application list and the second target application list, that is, only when the first target application is running, other applications in the television terminal are closed, and when the first target application is not operated, any application software in the television terminal is not closed.
By the method, the application software in the first target application list and the second target application list is reserved in the foreground of the television terminal system, all the applications except the first target application list and the second target application list are closed, the hidden danger that the third party service falsifies the application software data in the digital television terminal is fundamentally prevented, and meanwhile, the operation safety can be enhanced for a cable television operator, and the economic benefit of the cable television operator is protected.
In this disclosure, in order to reduce the operation load of the television terminal, an application control time period may be set, and only when it is detected that the current time is within the application control time period, it is detected whether the application currently running on the television terminal includes the first target application according to the first target application list, that is, only in the application control time period, steps S201 to S203 are performed.
It should be noted here that, since the application control time period is data for controlling the on and off of the installed application in the television terminal, in the embodiment of the present disclosure, the application control time period is added to the application control instruction and sent to the television terminal as part of the valid data as the first target application list and the second target application list, that is, the valid data includes the application control time period, as follows:
wherein "startTime" and "string" refer to the starting time of the application control time period, and the starting time of the application control time period is "string"; "string" means the end time of the application control period, which is "string".
It should be noted that the valid data in the JSON string format is a general frame, where "string" in "startTime" and "string" in "string" is a general start time of the application control time period, and does not specifically point to a specific start time, and in practical applications, the "string" character in the valid data in the JSON string format needs to be replaced by a specific start time, and if the start time of the application control time period is "20191001", the JSON string format in the valid data that indicates the start time of the application control time period is "startTime": 20191001 ". Similarly, "string" in "endTime": string "is a general end time of the application control time period, and does not specifically point to a specific end time, in practical applications, the" string "character in the valid data in the JSON string format needs to be replaced by the specific end time, for example, if the end time of the application control time period is" 20191007", the JSON string format in the valid data that indicates the end time of the application control time period is" endTime ": 20191007".
In addition, the embodiment of the present disclosure further provides a process executed by the television terminal application control method on the television server side, as shown in fig. 3, the specific steps are as follows:
s301: and acquiring valid data.
In the embodiment of the present disclosure, the valid data refers to data for controlling the opening and closing of the installed application in the television terminal, that is, the television terminal may control the opening and closing of the installed application in the television terminal according to the valid data. The valid data may be a first list of target applications and a second list of target applications.
S302: and generating an application control instruction according to the effective data and a pre-established application control instruction structure.
In the embodiment of the present disclosure, the application control instruction structure includes: a data field for representing the type of valid data, a data field for representing the length of valid data, a data field for representing the version of valid data, a data field for representing the ordering of valid data, and a data field for representing valid data, as shown in table 1:
| data field | Length of | Storing content |
| Data fields characterizing valid data types | 1 byte | Type of valid data |
| Data field characterizing effective data length | 1 byte | Length of valid data |
| Data fields characterizing valid data versions | 1 byte | Versions of valid data |
| Data fields characterizing valid data ordering | 1 byte | Ordering of valid data |
| Data fields characterizing valid data | N byte | Valid data |
TABLE 1
It should be noted that, for the data field characterizing the valid data ordering, the order of the valid data after segmentation can be represented by 0xab, where a is 4 bits high and represents the current segment number, b is 4 bits low and represents the maximum segment number, counting from 0, for example, the valid data is stored in six segments, and the ordering of the six segments of valid data is: 0x05, 0x15, 0x25, 0x35, 0x45, 0x55, then 0x05 represents valid data of the first segment, 0x15 represents valid data of the second segment, 0x25 represents valid data of the third segment, 0x35 represents valid data of the fourth segment, 0x45 represents valid data of the first segment, and 0x55 represents valid data of the sixth segment.
For a data field representing valid data, the valid data in the JSON string format is stored in the data field, and the valid data in the JSON string format is as follows:
wherein startTime: expressed in yyymmdd format; endTime: expressed in yyymmdd format; appWhiteList: supporting the segmented effective data packet; liveapplList: supporting the segmented effective data packet; signature: digital signature, represented by base64 string.
The above is a general template of valid data in JSON string format, and an example of valid data in JSON string format is given below, as follows:
s303: and sending the application control instruction to the television terminal.
After receiving an application control instruction sent by a television server, a television terminal detects whether an application currently running at the television terminal comprises a first target application according to a first target application list, and closes other applications in the television terminal under the condition that the application currently running at the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list.
Further, in this embodiment of the present disclosure, since the television terminal needs to set an application control time period in order to reduce the operation load of the television terminal, only when it is detected that the current time is within the application control time period, it is detected according to the first target application list whether the application currently running on the television terminal includes the first target application, that is, only in the application control time period, the steps S201 to S203 are performed, so that the valid data sent by the television server to the television terminal includes the application control time period.
Further, in practical applications, a situation may occur that a new television terminal has just accessed to the television server, and at this time, valid data is not stored in the television terminal, so in the embodiment of the present disclosure, the television server may periodically send the application control instruction to the television terminal, so as to ensure that the television terminal newly accessed to the television server can quickly start the television terminal application control method.
The above is a process executed by the television terminal application control method at the television server side according to the embodiment of the present disclosure.
Further, in this embodiment of the present disclosure, the television terminal and the television server may implement the television terminal application control method based on a data collection and storage system DCAS, specifically, as shown in fig. 4, the television server is provided with a DCAS front end, the television terminal is provided with a DCAS user end and an application management component, the DCAS front end obtains effective data, digitally signs the effective data through a pre-generated private key, adds a digital signature of the effective data into the effective data, generates an application control instruction according to the effective data carrying the digital signature and a pre-created application control instruction structure, and finally sends the application control instruction to the DCAS user end;
after receiving an application control instruction, a DCAS user side extracts effective data from a data domain representing the effective data of the application control instruction, extracts the sequence of the effective data from a data domain representing the sequence of the effective data of the application control instruction, splices the effective data according to the sequence of the effective data, and transmits the spliced effective data to an application management component;
the application management component receives the spliced effective data, carries out signature removal on the digital signature of the effective data through a pre-generated private key to obtain a signature removal value of the effective data, carries out hash operation on the effective data except the digital signature to obtain a hash value of the effective data, and stores the effective data in the television terminal under the condition that the signature removal value is consistent with the hash value.
Subsequently, the application management component detects whether the current time is within an application control time period, detects whether the application currently running by the television terminal includes a first target application according to the first target application list under the condition that the current time is within the application control time period, and closes other applications in the television terminal under the condition that the application currently running by the television terminal includes the first target application, wherein the other applications are applications not in the first target application list and the second target application list.
It should be noted here that the API interfaces of the application management component are as follows:
prototype: voidsettappWhiteList (DOMString data)
The following steps are described: and setting a second target application list in the application control instruction.
Parameters are as follows: the DOMString data-DOMString type, the second target application list data and the first target application list data are JSON character strings.
And returning: none.
It should be further noted that, the application management component should implement the following specific functions:
1. receiving a second target application list and first target application list data from a DCAS user side;
2. verifying the digital signature of the valid data by using an application management public key built in the management building component;
3. saving/updating the application control time period, the second target application list and the first target application list in the application list data to a local secure storage;
4. and detecting whether the application currently running by the television terminal comprises a first target application or not within an application control time period range, and forcibly closing other applications in the television terminal under the condition that the application currently running by the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list and are not allowed to be automatically started.
5. The application management component may perform exception handling for necessary system applications (e.g., if a forced shutdown would cause a system crash or severely impact normal use).
Further, in the embodiment of the present disclosure, the DCAS user may introduce a trusted execution environment TEE to enhance security, an application management public key generated by an operator is embedded in the trusted execution environment TEE, a signature verification operation on valid data in an application control instruction is directly completed in the trusted execution environment TEE, and an application on the REEs side of the terminal trusted execution environment is only responsible for transmitting a received application control instruction packet to an application on the TEEs side.
< apparatus embodiment >
Fig. 5 provides a television terminal application control apparatus 50 for the present embodiment, the apparatus is applied to a television terminal, and the apparatus 50 includes: an acquisition module 501, a detection module 502 and a control module 503.
An obtaining module 501, configured to obtain valid data received and stored in advance, where the valid data includes: a first target application list and a second target application list;
a detecting module 502, configured to detect, according to the first target application list, whether an application currently running in the television terminal includes a first target application;
a control module 503, configured to close other applications in the television terminal when the detection module 502 detects that the application currently running in the television terminal includes a first target application, where the other applications are applications that do not belong to the first target application list and the second target application list.
The apparatus 50 further comprises:
the receiving and storing module is used for receiving an application control instruction sent by a television server, wherein the application control instruction comprises: a data field for representing effective data and a data field for representing effective data ordering; extracting valid data from a data domain of the application control instruction, which characterizes the valid data; extracting the ordering of the effective data from the data domain of the application control instruction which represents the ordering of the effective data; splicing the effective data according to the sequence of the effective data; and storing the spliced effective data.
The valid data further includes: a digital signature of valid data; the device further comprises:
the signature verification module is used for performing signature release on the digital signature of the valid data through a pre-generated private key before the valid data after being stored and spliced by the storage module is received, so that a signature release value of the valid data is obtained; carrying out hash operation on effective data except for the digital signature to obtain a hash value of the effective data; and storing the valid data in the television terminal under the condition that the de-signing value is consistent with the hash value.
The valid data further includes: applying a control time period; the detecting module 502 is further configured to detect that the current time is within an application control time period before detecting whether the application currently running in the television terminal includes the first target application according to the first target application list.
Fig. 6 is another television terminal application control apparatus 60 provided in this embodiment, where the apparatus is applied to a television server, and the apparatus 60 includes: an acquisition module 601, a generation module 602 and a sending module 603.
An obtaining module 601, configured to obtain valid data, where the valid data includes: a first target application list and a second target application list;
a generating module 602, configured to generate an application control instruction according to the valid data and a pre-created application control instruction structure;
a sending module 603, configured to send the application control instruction to the television terminal, so that the television terminal detects, according to a first target application list, whether an application currently running at the television terminal includes a first target application, and closes other applications in the television terminal when it is detected that the application currently running at the television terminal includes the first target application, where the other applications are applications that do not belong to the first target application list and the second target application list.
The application control instruction structure comprises: the data fields of the valid data type, the valid data length, the valid data version, the valid data ordering and the valid data are respectively represented.
The apparatus 60 further comprises:
a signature module, configured to perform a digital signature on the valid data through a pre-generated private key before the generation module 602 generates an application control instruction according to the valid data and a pre-created application control instruction structure; adding a digital signature of the valid data to the valid data; the generating module 602 generates an application control instruction according to the valid data carrying the digital signature and a pre-created application control instruction structure.
The sending module 603 is specifically configured to send the application control instruction to the television terminal periodically.
The valid data further includes: a control period is applied.
< apparatus embodiment >
In this embodiment, there is also provided a television terminal as shown in fig. 7, where the television terminal 70 includes the television terminal application control apparatus 50 described in the apparatus embodiment of this specification; alternatively, the television terminal 70 includes:
a memory for storing executable commands.
A processor for executing the method described in any of the method embodiments of the present specification under the control of executable commands stored in the memory.
In one embodiment, any of the modules in the above apparatus embodiments may be implemented by a processor.
Similarly, in this embodiment, there is also provided a television server 80 as shown in fig. 8, where the television server 80 includes the television terminal application control device 60 described in the apparatus embodiment of this specification; alternatively, the television server 80 includes:
a memory for storing executable commands.
A processor for executing the method described in any of the method embodiments of the present specification under the control of executable commands stored in the memory.
In one embodiment, any of the modules in the above apparatus embodiments may be implemented by a processor.
< readable storage Medium embodiment >
The present embodiments provide a readable storage medium having stored therein an executable command, which when executed by a processor, performs the method described in any of the method embodiments of the present specification.
One or more embodiments of the present description may be a system, method, and/or computer program product. The computer program product may include a computer-readable storage medium having computer-readable program instructions embodied thereon for causing a processor to implement various aspects of the specification.
The computer readable storage medium may be a tangible device that can hold and store the instructions for use by the instruction execution device. The computer readable storage medium may be, for example, but not limited to, an electronic memory device, a magnetic memory device, an optical memory device, an electromagnetic memory device, a semiconductor memory device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a Static Random Access Memory (SRAM), a portable compact disc read-only memory (CD-ROM), a Digital Versatile Disc (DVD), a memory stick, a floppy disk, a mechanical coding device, such as punch cards or in-groove projection structures having instructions stored thereon, and any suitable combination of the foregoing. Computer-readable storage media as used herein is not to be construed as transitory signals per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide or other transmission medium (e.g., optical pulses through a fiber optic cable), or electrical signals transmitted through electrical wires.
The computer-readable program instructions described herein may be downloaded from a computer-readable storage medium to a respective computing/processing device, or to an external computer or external storage device via a network, such as the internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, fiber optic transmission, wireless transmission, routers, firewalls, switches, gateway computers and/or edge servers. The network adapter card or network interface in each computing/processing device receives computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in the respective computing/processing device.
The computer program instructions for carrying out operations for embodiments of the present disclosure may be assembly instructions, Instruction Set Architecture (ISA) instructions, machine related instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including an object oriented programming language such as Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The computer-readable program instructions may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). In some embodiments, an electronic circuit, such as a programmable logic circuit, a Field Programmable Gate Array (FPGA), or a Programmable Logic Array (PLA), can execute computer-readable program instructions to implement various aspects of the present description by utilizing state information of the computer-readable program instructions to personalize the electronic circuit.
Aspects of the present description are described herein with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the disclosure. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer-readable program instructions.
These computer-readable program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. These computer-readable program instructions may also be stored in a computer-readable storage medium that can direct a computer, programmable data processing apparatus, and/or other devices to function in a particular manner, such that the computer-readable medium storing the instructions comprises an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks.
The computer readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer, other programmable apparatus or other devices implement the functions/acts specified in the flowchart and/or block diagram block or blocks.
The flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present description. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of instructions, which comprises one or more executable instructions for implementing the specified logical function(s). In some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions. It is well known to those skilled in the art that implementation by hardware, implementation by software, and implementation by a combination of software and hardware are equivalent.
The foregoing description of the embodiments of the present specification has been presented for purposes of illustration and description, but is not intended to be exhaustive or limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen in order to best explain the principles of the embodiments, the practical application, or improvements made to the technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein. The scope of the application is defined by the appended claims.
Claims (15)
1. A television terminal application control method, which is applied to a television terminal, includes:
obtaining valid data which is received and stored in advance, wherein the valid data comprises: a first target application list and a second target application list;
detecting whether the currently running applications of the television terminal comprise a first target application or not according to the first target application list;
and under the condition that the application currently running by the television terminal comprises a first target application, closing other applications in the television terminal, wherein the other applications do not belong to the first target application list and the second target application list.
2. The method of claim 1, wherein receiving and storing valid data comprises:
receiving an application control instruction sent by a television server, wherein the application control instruction comprises: a data field for representing effective data and a data field for representing effective data ordering;
extracting valid data from a data domain of the application control instruction, which characterizes the valid data;
extracting the ordering of the effective data from the data domain of the application control instruction which represents the ordering of the effective data;
splicing the effective data according to the sequence of the effective data;
and storing the spliced effective data.
3. The method of claim 2, wherein the valid data further comprises: a digital signature of valid data;
before storing the spliced valid data, the method further comprises:
the digital signature of the effective data is subjected to signature release through a pre-generated private key to obtain a signature release value of the effective data;
carrying out hash operation on effective data except for the digital signature to obtain a hash value of the effective data;
and storing the valid data in the television terminal under the condition that the de-signing value is consistent with the hash value.
4. The method of claim 1, wherein the valid data further comprises: applying a control time period;
before detecting whether the applications currently running on the television terminal comprise the first target application according to the first target application list, the method further comprises the following steps:
and detecting that the current moment is in the application control time period.
5. A television terminal application control method, which is applied to a television server, includes:
obtaining valid data, wherein the valid data comprises: a first target application list and a second target application list;
generating an application control instruction according to the effective data and a pre-established application control instruction structure;
and sending the application control instruction to the television terminal, so that the television terminal detects whether the application currently running at the television terminal comprises a first target application according to a first target application list, and closing other applications in the television terminal under the condition that the application currently running at the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list.
6. The method of claim 5, wherein the application control instruction structure comprises: the data fields of the valid data type, the valid data length, the valid data version, the valid data ordering and the valid data are respectively represented.
7. The method of claim 5, wherein prior to generating application control instructions based on the valid data and a pre-created application control instruction structure, the method further comprises:
carrying out digital signature on the valid data through a pre-generated private key;
adding a digital signature of the valid data to the valid data;
generating an application control instruction according to the effective data and a pre-established application control instruction structure, wherein the method comprises the following steps:
and generating an application control instruction according to the effective data carrying the digital signature and a pre-established application control instruction structure.
8. The method of claim 5, wherein sending the application control instruction to the television terminal comprises:
and periodically sending the application control instruction to the television terminal.
9. The method according to any one of claims 5 to 8, wherein the valid data further comprises: a control period is applied.
10. A television terminal application control apparatus, which is applied to a television terminal, comprising:
the device comprises an acquisition module, a storage module and a processing module, wherein the acquisition module is used for acquiring valid data which is received and stored in advance, and the valid data comprises: a first target application list and a second target application list;
the detection module is used for detecting whether the currently running applications of the television terminal comprise first target applications or not according to the first target application list;
the control module is configured to close other applications in the television terminal when the detection module detects that the currently running application of the television terminal includes a first target application, where the other applications are applications that do not belong to the first target application list and the second target application list.
11. A television terminal application control apparatus, which is applied to a television server, comprising:
an obtaining module, configured to obtain valid data, where the valid data includes: a first target application list and a second target application list;
the generating module is used for generating an application control instruction according to the effective data and a pre-established application control instruction structure;
and the sending module is used for sending the application control instruction to the television terminal, so that the television terminal detects whether the application currently running at the television terminal comprises a first target application according to a first target application list, and closes other applications in the television terminal under the condition that the application currently running at the television terminal comprises the first target application, wherein the other applications are applications which do not belong to the first target application list and the second target application list.
12. A television terminal comprising the television terminal application control apparatus of claim 10, or the apparatus comprising:
a memory for storing executable commands;
a processor for executing the television terminal application control method of any one of claims 1 to 4 under control of the executable command.
13. A television server comprising the television terminal application control apparatus of claim 11, or the apparatus comprising:
a memory for storing executable commands;
a processor for executing the television terminal application control method of any one of claims 5 to 9 under control of the executable command.
14. A television terminal application control system comprises a television server and a television terminal, wherein the television server sends an application control instruction carrying effective data to the television terminal, and the effective data comprises: the television terminal closes other applications in the television terminal according to the valid data, wherein the other applications do not belong to the first target application list and the second target application list.
15. A computer readable storage medium storing executable instructions which, when executed by a processor, perform the television terminal application control method of any one of claims 1 to 9.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010732974.4A CN112035829A (en) | 2020-07-27 | 2020-07-27 | Television terminal application control method, device, system, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010732974.4A CN112035829A (en) | 2020-07-27 | 2020-07-27 | Television terminal application control method, device, system, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112035829A true CN112035829A (en) | 2020-12-04 |
Family
ID=73583217
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010732974.4A Pending CN112035829A (en) | 2020-07-27 | 2020-07-27 | Television terminal application control method, device, system, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112035829A (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140040978A1 (en) * | 2011-10-11 | 2014-02-06 | Citrix Systems, Inc. | Policy-Based Application Management |
| CN104281950A (en) * | 2013-07-11 | 2015-01-14 | 腾讯科技（深圳）有限公司 | Method and device for improving electronic payment safety |
| CN105786520A (en) * | 2016-03-17 | 2016-07-20 | 北京百纳威尔科技有限公司 | Method and device for managing applications of electronic equipment |
| CN106503555A (en) * | 2016-10-21 | 2017-03-15 | 维沃移动通信有限公司 | A kind of method for ensureing safety of payment and mobile terminal |
| CN107295410A (en) * | 2017-08-15 | 2017-10-24 | 四川长虹电器股份有限公司 | A kind of application method for managing security configured in intelligent television based on high in the clouds |
| CN109743609A (en) * | 2018-12-28 | 2019-05-10 | 深圳Tcl新技术有限公司 | Control method, system, terminal and the storage medium that television equipment is shown |
| CN110941825A (en) * | 2019-12-13 | 2020-03-31 | 支付宝(杭州)信息技术有限公司 | Application monitoring method and device |
-
2020
- 2020-07-27 CN CN202010732974.4A patent/CN112035829A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140040978A1 (en) * | 2011-10-11 | 2014-02-06 | Citrix Systems, Inc. | Policy-Based Application Management |
| CN104281950A (en) * | 2013-07-11 | 2015-01-14 | 腾讯科技（深圳）有限公司 | Method and device for improving electronic payment safety |
| CN105786520A (en) * | 2016-03-17 | 2016-07-20 | 北京百纳威尔科技有限公司 | Method and device for managing applications of electronic equipment |
| CN106503555A (en) * | 2016-10-21 | 2017-03-15 | 维沃移动通信有限公司 | A kind of method for ensureing safety of payment and mobile terminal |
| CN107295410A (en) * | 2017-08-15 | 2017-10-24 | 四川长虹电器股份有限公司 | A kind of application method for managing security configured in intelligent television based on high in the clouds |
| CN109743609A (en) * | 2018-12-28 | 2019-05-10 | 深圳Tcl新技术有限公司 | Control method, system, terminal and the storage medium that television equipment is shown |
| CN110941825A (en) * | 2019-12-13 | 2020-03-31 | 支付宝(杭州)信息技术有限公司 | Application monitoring method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP3416082A1 (en) | Method and apparatus for signing and verifying application installation package, and storage medium | |
| CN107301343B (en) | Safety data processing method and device and electronic equipment | |
| US20120150537A1 (en) | Filtering confidential information in voice and image data | |
| CN107111717A (en) | Safe boot policy on upgrading virtual machine | |
| CN105453102A (en) | Systems and methods for identifying private keys that have been compromised | |
| TWI516972B (en) | Method for applying safety verification, applying server, applying client and system | |
| US9607088B2 (en) | Method and apparatus for detecting multimedia content change, and resource propagation system | |
| CN109597727B (en) | Detection method, detection device, server and detection system of electronic equipment | |
| CN106789973B (en) | Page security detection method and terminal equipment | |
| US11282045B2 (en) | Methods, devices, and systems for verifying digital tickets at a client | |
| CN105808630B (en) | Android application auditing method and device | |
| CN108197469B (en) | Method and device for verifying application program, storage medium and electronic equipment | |
| CN112417485A (en) | Model training method, system and device based on trusted execution environment | |
| CN110545542B (en) | Main control key downloading method and device based on asymmetric encryption algorithm and computer equipment | |
| CN110324343B (en) | Information monitoring and broadcasting method and device, electronic equipment and storage medium | |
| CN114048506A (en) | Application control method, device, equipment and storage medium | |
| CN112035829A (en) | Television terminal application control method, device, system, equipment and storage medium | |
| CN110581863B (en) | Single sign-on method, device, equipment and medium for cloud platform | |
| CN116611087A (en) | Encryption method, device, equipment and storage medium for basic input/output system | |
| CN104951715A (en) | Information processing method and electronic equipment | |
| CN106648598B (en) | Method and apparatus for displaying display information of application | |
| EP3523745B1 (en) | Electronic device, method for controlling thereof and computer-readable recording medium | |
| CN107844983B (en) | Information anti-counterfeiting identification method and system | |
| CN116821941B (en) | Data encryption and decryption method, device, equipment and storage medium | |
| CN111984944B (en) | Source code processing method, related device and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |