JP5357927B2 - COMMUNICATION DEVICE, DATA ACCESS METHOD, AND DATA ACCESS PROGRAM - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To accurately refuse an access request from an unauthorized application. <P>SOLUTION: When an application approval code is received, an authentication information table is acquired from an authentication information management server. A certificate extraction part 105 extracts certificate information from a package manager 106 using the authentication information table. A verification processing part 107 performs verification of a client application 101 on the basis of the certificate information. When the client application 101 is verified as valid, a request ID generation part 108 generates a request ID for the client application 101 and a notification part 109 notifies the client application 101 of the request ID, the client application 101 being determined based on a package name and an activity name. <P>COPYRIGHT: (C)2013,JPO&amp;INPIT

Description

  The present invention relates to a communication apparatus that holds an application downloaded from an arbitrary site, a data access method using the application, and a data access program.

  Recent mobile phones can download various applications from the site. However, there are also malicious applications. If all applications are allowed to access each database (for example, a phone book) in a mobile phone, the possibility of personal information leaking to the outside increases, which is not preferable. For this purpose, a mechanism for verifying applications and allowing access to each database only for necessary applications is required.

  In Patent Document 1 (Japanese Patent Laid-Open No. 11-143840), signature verification is performed on a client object program, and after verification, the presence or absence of registration is checked using a management table to check for illegal programs.

JP-A-11-143840

  However, in the technique described in Patent Document 1, since the signature is verified and the suitability of the program is determined based on information registered in advance on the client terminal side, the program itself is illegal. If this happens, the function cannot be stopped. That is, if there is a program that has been obtained a certificate or the like through a legitimate procedure, it will be difficult to eliminate the installed program later.

  Therefore, the present invention provides a communication device, a data access method, and a data access program that can accurately reject an access request from an unauthorized application even if an application such as a program is misrepresented. Objective.

  In order to solve the above-described problem, the communication apparatus according to the present invention includes an application downloaded from an arbitrary site and certificate information for verifying the application when the application is downloaded on the OS. When a registration number assigned at the management source of the application is received from the application, the registration of the application is performed from the authentication information management server. An acquisition means for acquiring an authentication information table in which reply number designation information for specifying a reply destination of information with respect to the application number, the identifier of the application on the OS, and the application is identified; and the authentication information table acquired by the acquisition means The identifier corresponding to the accepted registration number is identified based on the database, and the certificate information is extracted from the package manager based on the identifier, and extracted by the certificate information extraction unit A verification unit for verifying the application based on the certificate information, and a permission for permitting access to data in the application when the verification unit verifies that the application is valid A generating unit configured to generate information; and a notification unit configured to notify the permission information generated by the generating unit to an application determined based on the identifier and the answer destination designation information according to the authentication information table.

  According to this invention, when the registration number is received from the application, an authentication information table in which the registration number, the identifier, and the response destination designation information are associated with each other is acquired from the authentication information management server, and the registration is performed based on the acquired authentication information table. The identifier corresponding to the number is specified. Then, certificate information is extracted based on the specified identifier, and application verification is performed based on the certificate information. Here, when verification that the application is valid is performed, permission information for permitting access in the application is generated, and the generated permission information is determined based on the extracted identifier and answer destination designation information. Notify the specified application.

  As a result, access to the database in which an unauthorized application spoofs another application is rejected. In other words, an unauthorized application that misrepresents another application cannot receive the permission information necessary for the database, and therefore cannot access the database, thus reliably preventing data leakage due to unauthorized activities. Can do.

  In addition, since the request ID is notified to the application based on the identifier acquired from the authentication information management server and the reply destination designation information, the application acquired using the proper procedure for the registration information itself is later illegal. If it is determined that the application is an application, the authentication information management server can rewrite the authentication information table so that permission information is not notified to such an unauthorized application. Access to the database by a simple application can be prevented.

  In the communication device of the present invention, the application transmits an access request and permission information to the access target, and the access target permits access from the application when the permission information matches. You may comprise.

  According to the present invention, the application transmits an access request and permission information to the access target, and the access target permits unauthorized access by permitting access from the application when the permission information matches. Access from the application can be prevented.

  In the communication device of the present invention, an expiration date is set for the permission information, and the access target determines whether or not access from the application is possible based on the expiration date of the permission information. Also good.

  According to the present invention, the permission information has an expiration date, and the access target can determine whether access from the application is possible based on the expiration date of the permission information. Can limit the risk of data loss.

  Further, in the communication device of the present invention, the expiration date of the permission information may be while the application is running.

  According to this invention, the expiration date of the permission information can be set while the application is running, so that the expiration date can be easily set and the risk of data leakage from the access target can be reduced. it can.

  Further, in the present invention, the registration number is an application approval code, the identifier is a package name, the answer destination designation information is an activity name, and the permission information is a request ID, each defined in Android. It may be a thing.

  The present invention can also be understood as an invention of a data access method and a data access program in addition to the above-described communication apparatus.

  That is, the data access method of the present invention includes an application downloaded from an arbitrary site, certificate information for verifying the application when the application is downloaded, and an identifier for identifying the application on the OS. In a data access method in a communication device comprising a package manager stored in association with the application manager, when receiving a registration number assigned by the management source of the application from the application, a registration number of the application from the authentication information management server, An acquisition step of acquiring an authentication information table in which an identifier of an application on the OS and response destination designation information for specifying an answer destination of information are associated with the application; and the acquisition step A certificate information extracting step of identifying an identifier corresponding to the accepted registration number based on the acquired authentication information table, and extracting certificate information from the package manager based on the identifier; and the certificate A verification step for verifying the application based on the certificate information extracted in the certificate information extraction step, and when the verification verifies that the application is valid, access to data in the application Generating step for generating permission information for permitting permission, and notifying step for notifying the permission information generated by the generating step to an application determined based on the identifier extracted according to the authentication information table and the reply destination specifying information And.

  The data access program of the present invention includes an application downloaded from an arbitrary site, certificate information for verifying the application when the application is downloaded, and an identifier for identifying the application on the OS. In the data access program using the package manager stored in association with the application, when the registration number assigned by the management source of the application is received from the application, the registration number of the application, on the OS is received from the authentication information management server. An acquisition module that acquires an authentication information table that associates an application identifier and response destination designation information for specifying an answer destination of information with respect to the application, and the acquisition module A certificate information extraction module for identifying an identifier corresponding to the accepted registration number based on the acquired authentication information table, and extracting certificate information from the package manager based on the identifier; and the certificate A verification module that verifies the application based on the certificate information extracted by the certificate information extraction module, and access to data in the application when the verification module verifies that the application is valid A generating module for generating permission information for permitting permission, and a notification module for notifying the permission information generated by the generating module to an application determined based on the identifier extracted in accordance with the authentication information table and the reply destination specifying information And Eteiru.

  According to the present invention, even if an unauthorized application is misrepresented as another application and an attempt is made to access the database, the access is denied. In other words, since an unauthorized application that is misrepresented as another application cannot receive a request ID required for the database, data leakage due to an unauthorized act in the database can be reliably prevented.

1 is a system diagram showing a system configuration of a communication system using a mobile phone 100 which is a communication device of the present embodiment. It is a block diagram which shows the function of the mobile telephone 100 of this embodiment. 2 is a hardware configuration diagram of a mobile phone 100. FIG. The specific example of the authentication information table memorize | stored in the authentication information management server 200 is shown. It is explanatory drawing which shows the list of the package information memorize | stored in OS. 5 is a flowchart showing access processing to a database such as an address book 110. 5 is a flowchart showing access processing to a database such as an address book 110.

  Embodiments of the present invention will be described with reference to the accompanying drawings. Where possible, the same parts are denoted by the same reference numerals, and redundant description is omitted.

  FIG. 1 is a system diagram showing a system configuration of a communication system using a mobile phone 100 which is a communication apparatus of the present embodiment. As shown in FIG. 1, the communication system includes a mobile phone 100 and an authentication information management server 200. When the mobile phone 100 tries to operate a downloaded application, the communication information is transmitted from the authentication information management server 200. An authentication information table is acquired, and the validity of the application can be determined using the authentication information table. The authentication information management server 200 is shown as unequal in FIG. 1, but there are many places for managing applications as will be described later. Therefore, it exists for each company (sales company or communication carrier) that manages applications.

  FIG. 2 is a block diagram showing functions of the mobile phone 100 of the present embodiment. As shown in FIG. 2, the mobile phone 100 includes a client application 101 (application), a secure processing unit 102, a package manager 106, and a secure address book 112. The secure processing unit 102 further includes a table acquisition unit 103 (acquisition unit), a storage unit 104, a certificate extraction unit 105 (certificate information extraction unit), a verification processing unit 107 (verification unit), and a request ID generation unit 108 (generation Means) and a notification unit 109 (notification means). The secure address book 112 includes an address book 110 and a request ID storage unit 111.

  The mobile phone 100 is realized by the hardware configuration shown in FIG. FIG. 3 is a hardware configuration diagram of the mobile phone 100. As shown in FIG. 3, the cellular phone 100 shown in FIG. 2 physically includes a CPU 11, a RAM 12 and a ROM 13 that are main storage devices, an input device 14 such as a keyboard and a mouse that are input devices, and an output such as a display. The computer system includes a device 15, a communication module 16 that is a data transmission / reception device such as a network card, an auxiliary storage device 17 such as a semiconductor memory, and the like. Each function described in FIG. 2 has the input device 14, the output device 15, and the communication module 16 under the control of the CPU 11 by reading predetermined computer software on the hardware such as the CPU 11 and the RAM 12 shown in FIG. 3. This is realized by reading and writing data in the RAM 12 and the auxiliary storage device 17. Hereinafter, each functional block will be described based on the functional blocks shown in FIG.

  The client application 101 is an application such as a program, and is an application downloaded via a network. In FIG. 2, for convenience, only three client applications 101a to 101c are described, but generally a plurality of client applications 101 can be downloaded and stored in the mobile phone 100. Hereinafter, one or all of the client applications 101a to 101c are referred to as the client application 101. The client application 101 has a function of accessing various databases such as an address book held in the mobile phone 100. The client application 101 is stored in the mobile phone 100 in a state stored in a memory or the like, and executes various functions by being processed by the CPU.

  When the secure processing unit 102 receives the access authentication request and the application approval code from the client application 101, the secure processing unit 102 determines whether the client application 101 is illegal according to the application approval code. This will be described in more detail below.

  Upon receiving the access authentication request, the application approval code, and the callback address from the client application 101, the table acquisition unit 103 stores the authentication information table of the client application 101 stored in the storage unit 104 based on the application approval code. It is determined whether authentication information related to the client application 101 is stored. If it is determined that it is not stored, the authentication information table is acquired from the authentication information management server 200. At that time, it is inquired whether the authentication information table stored in the authentication information management server 200 has been updated as compared with the authentication information table acquired last time. An authentication information table is acquired from 200.

  For example, the table acquisition unit 103 can acquire the authentication information table from the authentication information management server 200 by designating a file name indicating the authentication information table using an HTTP (Hyper Text Transfer Protocol) GET command. . Of course, the method is not limited to using HTTP or GET commands, and any acquisition method may be used as long as the information can be acquired via the Internet. The acquired authentication information table is updated and stored in the storage unit 104. In addition, when an answer that it has not been updated is obtained, the acquisition process is not performed. In this case, the authentication information table acquired last time remains stored in the storage unit 104. If the authentication information management server 200 has updated the information, it is determined whether or not authentication information related to the client application 101 is stored in the updated authentication information table based on the application approval code.

  In the above description, the table acquisition unit 103 does not acquire the authentication information table when the authentication information of the client application 101 is stored in the already stored authentication information table based on the application approval code. However, the present invention is not limited to this, and the authentication information management server 200 may be constantly inquired of whether or not there is an update. By performing such processing, an unauthorized application can be discovered at an early stage. The table acquisition unit 103 may change the acquisition source of the authentication information table for each client application 101. Since the company that manages the authentication information is different for each client application 101, the server storing the authentication information table is naturally different. The client application 101 is configured so that the access destination of the authentication information management server 200, an identifier indicating the access destination, and the like are described, and the access destination varies depending on the client application 101.

  FIG. 4 shows a specific example of the authentication information table stored in the authentication information management server 200. As shown in FIG. 4, the application approval code, package name, validity / invalidity of application approval, and activity name are stored in association with each other. The application approval code is a registration number of the client application 101 that has been paid out by the access control management source. The access control management source here refers to a place where an application creator authorizes an application, for example, an application sales management company or a communication carrier. The app approval valid / invalid is information indicating whether the app approval code is valid or invalid, and is switched by an operator of the authentication information management server 200 (for example, the operator of the sales management company described above). For example, if the client application 101 is found to be unauthorized and is detected after the application approval code is issued, the access of the client application 101 to the database can be restricted by invalidating the application approval code.

  The package name is an identifier of the application on the OS, and the activity name is information for specifying the screen of the application. In this embodiment, this activity name is used as address information (answer destination designation information) for returning authentication information.

  These terms are defined by Android, which is a platform for mobile terminals such as smartphones, defined by Google (registered trademark). Even when other platforms are used, the technology of the present embodiment can be applied if it has the same functions and information as described above.

  The storage unit 104 is a part that stores the authentication information table acquired by the table acquisition unit 103.

  The certificate extraction unit 105 refers to the authentication information table acquired by the table acquisition unit 103, specifies the package name corresponding to the application approval code, and uses this package name to obtain the certificate from the package manager 106. This is the part to be extracted.

  The package manager 106 is a management program provided in an OS (Operating System), and is a part that manages and stores downloaded certificate information of each application. The package manager 106 outputs a certificate corresponding to the package name to the certificate extraction unit 105 in response to a certificate extraction instruction from the certificate extraction unit 105. The package manager 106 stores package information (Packageinfo) for each downloaded application, and the package information includes a certificate.

  FIG. 5 is an explanatory diagram showing a list of package information stored in the OS. FIG. 5 shows that the package information indicated by Packageinfo is stored. Each holds a certificate for the application.

  The verification processing unit 107 is a part that verifies the certificate extracted by the certificate extraction unit 105 and determines the validity of the client application 101.

  The request ID generation unit 108 is a part that generates a request ID when the verification processing unit 107 determines that the client application 101 is valid. This request ID is permission information for permitting data access by the client application 101. The request ID generation unit 108 stores the generated request ID in the secure address book 112. The request ID may have an expiration date, and is valid while the client application 101 is running, for example. That is, each time the client application 101 is activated, a process ID is issued and a request ID is issued at the same time. When the client application 101 is terminated, these process ID and request ID become invalid. For example, while the client application 101 is running, a buffer area for storing a valid process ID and request ID is provided. When the client application 101 is terminated, the process ID and request ID are retrieved from the buffer area. By deleting, the client application 101 can be synchronized with the request ID. The setting of the expiration date of the request ID described above is not essential, and may not be set as long as an increase in data leakage risk can be allowed.

  Then, the secure address book 112 uses the request ID, and if the client application 101 is continuously activated after the request ID is issued within the expiration date, that is, the mobile phone by the client application 101 Access to various types of data held in 100 can be permitted.

  The notification unit 109 is a part that notifies the request ID generated by the request ID generation unit 108 to the client application 101 specified by the package name and activity name. That is, the notification unit 109 refers to the authentication information table and extracts the package name and activity name based on the application approval code. Then, the request ID is notified to the client application 101 specified based on the extracted package name and activity name.

  Further, the notification unit 109 transmits an application authentication request result (OK or NG) as a response to the application authentication request, using the callback address, to the client application 101 that has made the application authentication request. Note that the client application 101 to which the request ID is notified and the client application 101 to which the application authentication request result is transmitted are not necessarily the same. When the client application 101 tries to access by spoofing the application approval code, the package name and activity name are specified based on the application approval code. In this case, the correct client application 101 is specified based on the package name or activity name.

  For example, when the client application 101c in FIG. 2 is an unauthorized application, it is assumed that the client application 101a is misrepresented and the application approval code of the client application 101a is transmitted. However, the request ID necessary for accessing the database such as the address book 110 is transmitted to the client application 101a specified based on the activity name and package name corresponding to the application approval code. Therefore, the request ID is not transmitted to the misrepresented client application 101c.

  The address book 110 is a database held by the mobile phone 100, and is a portion that stores the addressee name, its telephone number, and mail address in association with each other. In the present embodiment, the address book is cited as an example of a database to be accessed as an example. However, the present invention is not limited to this, and e-mail data, telephone / email outgoing / incoming history, Setting value information can be considered as a database subject to access restrictions.

  The request ID storage unit 111 is a part that stores the request ID generated by the request ID generation unit 108. The address book 110 determines whether or not the access request from the client application 101 is appropriate based on the request ID stored in the request ID storage unit 111.

  In this way, access from an unauthorized client application 101 can be reliably prevented.

  Next, a data access processing method using the mobile phone 100 of this embodiment will be described. FIG. 6 is a flowchart showing processing of the mobile phone 100 of the present embodiment. First, when the client application 101 is activated, an activation signal to that effect is output to the secure processing unit 102, and then an authentication request including an application authorization code and a callback address is output to the secure processing unit 102 (S101). , S102).

  Then, based on the received application approval code, the table acquisition unit 103 determines whether or not there is application information corresponding to the application approval code from the authentication information table (S103). When it is determined that there is no application information, the table acquisition unit 103 determines whether the authentication information management server 200 has updated the authentication information table. An authentication information table is acquired from the authentication information management server 200 (S104, S105). Note that the authentication information management server 200 may always inquire about whether or not the authentication information table is updated without determining whether or not application information exists.

  The acquired authentication information table is stored in the storage unit 104 and updated (S107). If the authentication information table is not updated in the authentication information management server 200, the acquisition process is not performed. Thereafter, the certificate extraction unit 105 identifies the package name corresponding to the application approval code based on the authentication information table (S108), and performs certificate acquisition processing from the package manager 106 (S109, S110). The verification processing unit 107 performs verification processing based on the acquired certificate (S111). Then, the certificate verification result is displayed on the display unit (not shown) as a message (S112).

  Thereafter, a request ID is generated by the request ID generation unit 108 (S113). After the generation process, the client application 101 that requested the authentication is identified based on the callback address, and the authentication result is notified to the client application 101 by the notification unit 109 (S114). Further, the request ID generated by the request ID generation unit 108 is transmitted by the notification unit 109 to the client application 101 specified by the activity name and the package name (S115, S116). In the client application 101, the transmitted request ID is stored (S117).

  In this way, the request ID necessary for accessing various databases is transmitted to the client application 101 determined based on the package name and activity name corresponding to the application authorization code, and the client who has made an authentication request is not necessarily required. It is not sent to the application 101. Therefore, even if the client application 101 that made the authentication request is illegal, even if the authentication request is made by spoofing the application approval code, the request ID cannot be obtained. Therefore, the address book and various databases can be protected from unauthorized access by the client application 101.

  Even when an unauthorized client application 101c is originally approved and a certificate or an application approval code is issued, the authentication information management server 200 does not send an authentication management table including the application approval code. As described above, the authentication management table to be transmitted does not include the application authorization code or the activity name corresponding thereto, so that the unauthorized client application 101 can appropriately prevent access to the database such as the address book 110. can do.

  Here, processing when the client application 101 accesses a database such as the address book 110 will be described. FIG. 7 is a flowchart showing access processing for a database such as the address book 110.

  When the client application 101 makes an access request to the secure address book 112, the request ID held in advance is read, and the request ID is transmitted to the secure address book 112 together with the access request (S201). ).

  When the secure address book 112 receives an access request to the address book 110, the request ID stored in the request ID storage unit 111 is read and compared with the request ID received from the client application 101 (S202). Here, if they match, the access permission by the address book 110 is granted (S203), and if they do not match, error processing is performed (S204).

  In this way, a database such as an address book can determine whether access is possible based on the request ID for an access request from the client application 101, and rejects an access request from an unauthorized client application 101. be able to. Therefore, it is possible to reliably prevent data leakage due to the installation of the unauthorized client application 101.

  Next, functions and effects of the mobile phone 100 of this embodiment will be described. According to the mobile phone 100 of the present embodiment, when the table acquisition unit 103 receives the application approval code from the client application 101, the authentication information table in which the application approval code, the package name, and the activity name are associated from the authentication information management server 200. To get. Then, the certificate extraction unit 105 extracts a package name corresponding to the application approval code based on the acquired authentication information table. The certificate extraction unit 105 extracts certificate information from the package manager 106 based on the extracted package name, and the verification processing unit 107 verifies the client application 101 based on the certificate information. Here, if the verification that the client application 101 is valid is performed, the request ID generation unit 108 generates a request ID for the client application 101, and the notification unit 109 authenticates the generated request ID. The client application 101 that is a destination determined based on the package name and activity name extracted from the information table is notified.

  Thereby, for example, an unauthorized client application 101c can misrepresent that it is another client application 101a, and a database to be accessed can reject the access. That is, since an unauthorized client application 101c that has been misrepresented as another client application 101a cannot receive a request ID necessary for the database, data leakage due to an unauthorized act in the database can be reliably prevented.

  Further, in order to notify the client application 101 of the request ID based on the package name and activity name acquired from the authentication information management server 200, the client application 101 that has acquired the application approval code itself with a valid procedure When it is later determined that the client application 101 is an unauthorized client application, the authentication information management server 200 rewrites the authentication information table so that the request ID is not notified to the unauthorized client application 101. Even in this case, it is possible to prevent the unauthorized client application 101 from accessing the database.

  In the mobile phone 100 of the present embodiment, the client application 101 transmits an access request and a request ID to the secure address book 112 that is an access target, and the request IDs of the secure address book 112 match. When it is determined that the access from the client application 101 (for example, the client application 101a), the access from the unauthorized client application 101 (for example, the client application 101c) can be prevented.

  Further, in the mobile phone 100 of this embodiment, the request ID has an expiration date, and the secure address book 112 to be accessed can be accessed from the client application 101 based on the expiration date of the request ID. Can be determined, access to the access target can be restricted, and the risk of data leakage can be reduced.

  In the mobile phone 100 of the present embodiment, the expiration date of the request ID can be set while the client application 101 is running, so that the expiration date can be easily set and data leakage from the access target can be performed. Risk can be reduced.

  In addition to the above, as a method for managing the expiration date of the request ID, it may be determined whether the request ID matches or does not match by using a timer or the like to determine whether the request ID is within the expiration date. .

  In the above-described embodiment, the authentication request from the client application 101 is transmitted together with the application approval code. However, the present invention is not limited to this. For example, in addition to the authentication request and the application approval code, an activity name may be added and transmitted to the secure processing unit 102. When such a process is taken, the authentication information management server 200 does not need an authentication information table associated with the activity name, and the authentication information table shows the app authorization code, the package name, and the app validity / invalidity. It is only necessary to store them in association with each other.

  Note that the secure processing unit 102 in the communication device 100 described above can be realized as a program. For example, the secure processing unit 102 exists as a data access program, and includes a table acquisition module (acquisition module), a storage module, a certificate extraction module (certificate information extraction module), a verification processing module (verification module), A request ID generation module (generation module) and a notification module (notification module) may be included. Further, such a program may be stored in a CD-ROM, DVD, or other semiconductor memory, and may be installed in a communication device as necessary to realize the functions of the present embodiment.

100: mobile phone, 101: client application,
DESCRIPTION OF SYMBOLS 101a ... Client application, 101c ... Client application, 102 ... Secure processing part, 103 ... Table acquisition part, 104 ... Storage part, 105 ... Certificate extraction part, 106 ... Package manager, 107 ... Verification processing part, 108 ... Request ID generation 109: Notification unit, 110 ... Address book, 111 ... Request ID storage unit, 112 ... Secure address book, 200 ... Authentication information management server.

Claims (7)

With applications downloaded from any site,
In a communication apparatus comprising: a package manager that stores certificate information for verifying the application in association with an identifier for identifying the application on an OS when downloading the application;
When a registration number assigned by the management source of the application is received from the application, the authentication information management server specifies an application registration number, an application identifier on the OS, and an information reply destination for the application. An acquisition means for acquiring an authentication information table in which reply destination designation information is associated;
A certificate information extracting unit that identifies an identifier corresponding to the accepted registration number based on the authentication information table acquired by the acquiring unit, and extracts certificate information based on the identifier from the package manager; ,
Verification means for verifying the application based on the certificate information extracted by the certificate information extraction means;
When the verification unit verifies that the application is valid, a generation unit that generates permission information for permitting access to data in the application;
A communication device comprising: notification means for notifying the permission information generated by the generating means to an application determined based on the identifier extracted according to the authentication information table and the reply destination designation information. The application sends an access request and permission information to the access target,
The communication apparatus according to claim 1, wherein the access target permits access from the application when the permission information matches. The permission information has an expiration date,
The communication device according to claim 2 , wherein the access target determines whether or not access from the application is possible based on an expiration date of the permission information.   The communication apparatus according to claim 3, wherein the expiration date of the permission information is during the activation of the application. The registration number is the app authorization code,
The identifier is the package name,
The response destination designation information is the activity name,
The communication apparatus according to any one of claims 1 to 4, wherein the permission information is a request ID, each of which is specified in an android. With applications downloaded from any site,
In a data access method in a communication device, comprising: a package manager that stores certificate information for verifying an application in association with an identifier for identifying the application on an OS when downloading the application.
When a registration number assigned by the management source of the application is received from the application, the authentication information management server specifies an application registration number, an application identifier on the OS, and an information reply destination for the application. An acquisition step of acquiring an authentication information table in which reply destination designation information is associated;
A certificate information extraction step of identifying an identifier corresponding to the accepted registration number based on the authentication information table acquired in the acquisition step, and extracting certificate information from the package manager based on the identifier; ,
A verification step for verifying the application based on the certificate information extracted by the certificate information extraction step;
When the verification step verifies that the application is valid, a generation step for generating permission information for permitting access to data in the application;
A notification step of notifying the permission information generated in the generating step to an application determined based on the identifier extracted in accordance with the authentication information table and the reply destination designation information. With applications downloaded from any site,
In a data access program using a package manager that stores certificate information for verifying the application in association with an identifier for identifying the application on the OS when downloading the application,
When a registration number assigned by the management source of the application is received from the application, the authentication information management server specifies an application registration number, an application identifier on the OS, and an information reply destination for the application. An acquisition module for acquiring an authentication information table in which reply destination designation information is associated;
A certificate information extraction module that identifies an identifier corresponding to the accepted registration number based on the authentication information table acquired by the acquisition module, and extracts certificate information based on the identifier from the package manager; ,
A verification module for verifying the application based on the certificate information extracted by the certificate information extraction module;
When the verification module verifies that the application is valid, a generation module that generates permission information for permitting access to data in the application;
A data access program for causing a communication device to realize a notification module that notifies permission information generated by the generation module to an application determined based on an identifier extracted according to an authentication information table and reply destination designation information.

Images