CN101854624A - Dynamic loading software authentication method, monitoring method and device for mobile terminal - Google Patents

Dynamic loading software authentication method, monitoring method and device for mobile terminal Download PDF

Info

Publication number
CN101854624A
CN101854624A CN200910048717A CN200910048717A CN101854624A CN 101854624 A CN101854624 A CN 101854624A CN 200910048717 A CN200910048717 A CN 200910048717A CN 200910048717 A CN200910048717 A CN 200910048717A CN 101854624 A CN101854624 A CN 101854624A
Authority
CN
China
Prior art keywords
api
dynamic load
access grade
api access
load software
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN200910048717A
Other languages
Chinese (zh)
Inventor
方加元
叶文虎
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Leadcore Technology Co Ltd
Original Assignee
Leadcore Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Leadcore Technology Co Ltd filed Critical Leadcore Technology Co Ltd
Priority to CN200910048717A priority Critical patent/CN101854624A/en
Publication of CN101854624A publication Critical patent/CN101854624A/en
Pending legal-status Critical Current

Links

Images

Abstract

The invention relates to a dynamic loading software authentication method, a monitoring method and a monitoring device for a mobile terminal so as to control an access control strategy in a more flexible mode. The authentication method comprises the following steps of: digitally signing dynamic loading software and entitling the software with an API access rank value by a terminal platform provider, wherein the API access rank value corresponds to an API access range in the mobile terminal; on the side of the mobile terminal, acquiring the dynamic loading software after the digital signature; when the dynamic loading software is installed, authenticating the digital signature of the dynamic loading software and storing the identifier of the authenticated dynamic loading software and the API access rank value; and when the dynamic loading software runs at the mobile terminal, acquiring the API access rank value of the dynamic loading software, and monitoring the access of the dynamic loading software to the API in the mobile terminal according to an API access configuration table, wherein the API access configuration table comprises the API access rank value set by each API in the mobile terminal and can be updated in a mode such as firmware upgrade.

Description

Dynamic loading software authentication method, method for supervising and the device of portable terminal
Technical field
The present invention relates to the software platform of portable terminal, particularly relate to dynamic loading software authentication method, method for supervising and the device of portable terminal.
Background technology
Along with the intelligent development of mobile phone, present smart mobile phone allows the user that various dynamic load softwares are installed on the software platform of mobile phone, so that abundant expanded function to be provided.Cause damage for fear of the system's operation of the dynamic load software of dangerous or malice, use digital signature to come various dynamic load softwares are controlled traditionally mobile phone.Traditional dynamic load software installation and operation flow process downloads to portable terminal this locality behind the dynamic load software process digital signature S1 and installs as shown in Figure 1, and its digital signature of mobile phone terminal system verification S2 then installs S3 if the verification passes during installation.
There are some shortcomings in this traditional method for protecting software.At first, this method can't embody the mobile phone terminal system develops colony to different third parties authorization control strategy, all third parties develop whole API (Application Programming Interface that colony can both use terminal platform, application programming interface) exploitation dynamic load software, like this, if the relatively poor exploitation colony of exploitation qualification uses the crucial API of terminal, its software might damage total system, use operation or the like such as crashing or influencing other important service, thereby influence terminal use's experience; Secondly, if traditional method for protecting software need increase the API Access control strategy, its main method is to increase detection of code by the respective modules at API to realize, perhaps whether open to the outside world and realize by api interface, this method need be carried out fairly large transformation to original module, can't smooth upgrade; Moreover, using traditional method for protecting software, can't upgrade mobile phone terminal API Access control strategy dynamically, in a single day terminal is sold, and its protection strategy will be maintained fixed, and can't dynamically adjust.
Summary of the invention
Technical problem to be solved by this invention provides a kind of checking and method for supervising of dynamic load software of the terminal of flexible movement more, provides different monitoring strategies with the dynamic load software at the reliable grade of difference.
The present invention proposes a kind of verification method of dynamic load software of portable terminal, may further comprise the steps: set a plurality of API Access grade points of portable terminal, the API scope difference in the portable terminal that different API Access grade points has the right to visit.Dynamic load software is added API Access grade point field,, issue this dynamic load software then to give an API Access grade point.On the other hand, create and issue an API Access grade allocation list, this API Access grade allocation list comprises each API in the portable terminal and corresponding setting API Access grade point thereof, and wherein this API Access grade point and this API Access grade allocation list are in order to as the foundation of mobile terminal monitored dynamic load software to the visit of API.
In one embodiment of this invention, set the anti-grade point of asking of above-mentioned a plurality of API according to developer's qualification of dynamic load software.
In one embodiment of this invention, the API Access grade point is high more, and the API scope in the portable terminal of having the right to visit is big more, and the high API Access grade point API scope of having the right to visit, and comprises the API scope that low API Access grade point has the right to visit.
In one embodiment of this invention, dynamic load software is added API Access grade point field and comprise that also the dynamic load software to comprising this API Access grade point carries out digital signature afterwards.
In one embodiment of this invention, above-mentioned verification method also comprises, to the renewal of portable terminal issue to this API Access grade allocation list.In one embodiment, by the firmware upgrade bag to portable terminal issue renewal to this API Access grade allocation list.
In one embodiment of this invention, above-mentioned verification method also comprises, to developer's issue of dynamic load software renewal to this API Access grade allocation list, dynamic load software can be according to upgrading of the API Access grade allocation list after upgrading or exploitation thus.
The present invention proposes a kind of method for supervising of dynamic load software of portable terminal in addition, may further comprise the steps: obtain dynamic load software, this dynamic load software comprises an API Access grade point, the API Access scope in the corresponding portable terminal of this API Access grade point.When this dynamic load software is installed, preserve sign and this API Access grade point of dynamic load software.When dynamic load software during in running of mobile terminal, obtain the API Access grade point of this dynamic load software, monitor the visit of this dynamic load software to the API in the portable terminal according to an API Access grade allocation list, wherein this API Access grade allocation list comprises each API and the corresponding setting API Access grade point thereof in the portable terminal.
In one embodiment of this invention, when the API Access grade point of this dynamic load software is greater than or equal to this setting API Access grade point, allow this API of this dynamic load softward interview, when the API Access grade point of this dynamic load software is lower than this setting API Access grade point, sounds a warning or stop moving this dynamic load software.
In one embodiment of this invention, when this dynamic load software is installed, also comprises dynamic load software carried out digital signature authentication, and checking by the time preserve sign and this API Access grade point of dynamic load software.
In one embodiment of this invention, above-mentioned method for supervising also comprises: receive the renewal to this API Access grade allocation list.In one embodiment, by the firmware upgrade bag this API Access grade allocation list is upgraded.
The present invention also proposes a kind of supervising device of dynamic load software of portable terminal, comprises database and monitoring unit.When this database is installed at the dynamic load software that contains the API Access grade point, preserve sign and this API Access grade point of this dynamic load software, wherein the API Access scope in the corresponding portable terminal of this API Access grade point.When dynamic load software during in running of mobile terminal, monitoring unit obtains the API Access grade point of this dynamic load software, and monitor of the visit of this dynamic load software to the API in the portable terminal according to the API Access grade allocation list that presets, wherein this API Access grade allocation list comprises each API and the corresponding setting API Access grade point thereof in the portable terminal.
In one embodiment of this invention, when the API Access grade point of this dynamic load software is greater than or equal to this setting API Access grade point, this monitoring unit allows this API of this dynamic load softward interview, when the API Access grade point of this dynamic load software was lower than this setting API Access grade point, this monitoring unit sounded a warning or stops moving this dynamic load software.
The present invention is owing to adopt above technical scheme; make it compared with prior art; have following remarkable advantage: at first, portable terminal can be protected control to the API that dynamic load software can use according to developer's qualification grade, has improved the operation stability of cell phone system.Secondly, portable terminal is increased API protection control strategy, be regardless of safety pin original API is revised one by one, convenient enforcement, smooth upgrade.Moreover, be convenient to dynamically update the API protection control strategy of terminal.
Description of drawings
For above-mentioned purpose of the present invention, feature and advantage can be become apparent, below in conjunction with accompanying drawing the specific embodiment of the present invention is elaborated, wherein:
Fig. 1 illustrates existing mobile phone terminal software installation and operation process.
Fig. 2 illustrates the issue of dynamic load software, checking and the monitor procedure of one embodiment of the invention.
Fig. 3 illustrates the API Access scope division schematic diagram of one embodiment of the invention.
Fig. 4 illustrates the dynamic load software supervision device of the portable terminal of one embodiment of the invention.
Fig. 5 illustrates the dynamic load software in-depth monitoring flow process of the portable terminal of one embodiment of the invention.
Fig. 6 illustrates by the upgrade example of user terminal firmware of DM mode.
Fig. 7 illustrates the configuration surroundings of the professional firmware upgrade of DM.
Embodiment
Stable performance in order to ensure dynamic load software, guarantee that dynamic load software does not impact other operation business of terminal system and terminal system, in one embodiment, develop the qualification of colony to terminal API (Application Programming Interface according to different third party softwares, application programming interface) carries out the grade classification, the terminal API that the dynamic load software that the exploitation colony of different qualification grades is developed can be visited has different grade restrictions, portable terminal (as mobile phone) can be monitored dynamic load software according to the grade restriction strategy, guarantee the dynamic load running software in its grade limited field, thereby guarantee the stable operation of terminal.Simultaneously, the qualification that the grade restriction strategy of terminal platform can dynamically update, third party software is developed colony also can for example dynamically be adjusted according to their the past performance.
Fig. 2 illustrates the issue of dynamic load software, installation and the proof procedure of one embodiment of the invention.With reference to shown in Figure 2, the remote host in a terminal platform manufacturer, for example checking of authentication server 100 enterprising action attitude load softwares and issue flow process.In step S101, set a plurality of API Access grade points of portable terminal, with division foundation as dynamic load softward interview authority, the API scope difference in the portable terminal that wherein different API Access grade points has the right to visit.For example, the API scope in the higher access level value portable terminal of having the right to visit is big more.As an example, can set the API Access grade point, as shown in Figure 3, for example can develop the qualification division of colony third party software according to developer's qualification of dynamic load software:
One-level: common developer's qualification (such as: student, trier etc. develop colony)
Secondary: elementary developer's qualification (such as: the personal development colony with certain professional background)
Three grades: intermediate developer's qualification (such as: terminal software platform is had certain understanding, but needleless is to the exploitation colony of company of the successful exploitation case of this platform)
Level Four: the senior developers qualification (such as: familiar to terminal software platform, the exploitation colony of company at the successful exploitation case of this platform is arranged)
Pyatyi: VIP developer's qualification (such as: very familiar to terminal software platform, have at the more successful case of this platform, and the exploitation colony of company of customized development ability is arranged)
According to the qualification grade of third party software exploitation colony is divided, terminal platform is issued the API that opens to the developer carries out corresponding access level division:
One-level developer's qualification API: issue is open gives common developer's qualification colony;
Secondary developer qualification API: issue is open gives elementary developer's qualification colony;
Three grades of developer's qualification API: issue is open gives intermediate developer's qualification colony;
Level Four developer's qualification API: the open senior developers qualification colony that gives of issue;
Pyatyi developer's qualification API: the open VIP developer's qualification colony that gives of issue.
In one embodiment, for different developer colonies, the API scope of the issue that obtains is the increment issue, be that the API scope that the higher API Access grade point of grade has the right to visit comprises the API scope that junior API Access grade point has the right to visit, the API scope that for example is distributed to the secondary developer comprises one-level developer qualification API and secondary developer qualification API, the API scope that is distributed to three grades of developers comprises one-level developer qualification API, secondary developer qualification API and three grades of developer's qualification API, next coming in order are analogized, and do not describe one by one.This will simplify the monitoring of API Access, but the present invention is not limited to such arrangement.
In step S102, the checking dynamic load software of submitting to is carried out digital signature, and, give an API Access grade point (as 3 grades) for example according to developer's qualification of this software.This API Quality value can be used as a field of digital signature adds, and also adds software identification (ID) simultaneously, uses the signature strapping tool that software is carried out digital signature then.In the present embodiment, digital signature can guarantee that on the one hand this software passes through the authentication center demonstration validation really, also is simultaneously the means that the API Access grade point that adds provided consistency check.However, in other embodiments, also can add API Access grade point field and, perhaps use other means that consistency check is provided without digital signature.
In step S103, issue this dynamic load software, this dynamic load software can be sent to terminal for downloading by mobile communication network.
In step S104, create and issue an API Access grade allocation list, this API Access grade allocation list comprises each API in the portable terminal and the corresponding relation of its setting API Access grade point.The example of this corresponding relation can be with reference to shown in the following table 1.Step S104 can be independent of abovementioned steps 101-103 on authentication server carries out.Issue based on this API Access grade allocation list, the division of different stage developer qualification API can be not according to the own attribute of API in the terminal, but according to platform provider to the strategy of developer's opening API and decide, this will help the flexible adjustment of these strategies.
Table 1 terminal API Access grade allocation list
??API?ID API Name The API Access grade point
??001 ??Api_1() ??2
??002 ??Api_2() ??3
??... ??... ??...
??00n ??Api_n() ??4
??... ??... ??...
As seen from Table 1, each API has different access level values.For instance, ID is 001 API, and its access level is 2, this means that the dynamic load software with secondary or above API Access grade point could visit it.Terminal platform manufacturer mainly is to decide to the issue opening strategy of third party software exploitation colony according to platform to the API Access grade classification.Simultaneously, terminal platform manufacturer can change according to newly-increased characteristic (open as increasing API newly) and the importance of different brackets API, above-mentioned access level is divided adjust (API that belongs to 3 grades such as some originally is also open to 2 grades of uses).
Therefore, by giving above-mentioned API Access grade point, and dynamically issue API Access grade allocation list, in order to as the foundation of mobile terminal monitored dynamic load software to the visit of API at 100 pairs of dynamic load softwares of authentication server.
Dynamic software installation, checking and the monitoring flow process of portable terminal 200 are described below with reference to Fig. 2.
In step S201, download dynamic load software, this dynamic load software is handled according to abovementioned steps 101-103, comprises API Access grade point (as 3 grades) in the dynamic load software, and this API Access grade point is corresponding to the API Access scope in this portable terminal.In the present embodiment, dynamic load software can be through digital signature, also can be not pass through digital signature.
In step S202, when carrying out the software installation, at first the signature digital certificate that presets by terminal carries out digital signature authentication to dynamic load software, and obtains its API Access grade point.
In step S203, when by checking, preserve the sign (ID) and API Access grade point of dynamic load software, and continue installation procedure;
Otherwise, if authentication failed to information such as the user give a warning, and stops installation procedure.
For the software that does not need to carry out digital signature authentication, when this dynamic load software was installed, step 202-203 can be reduced to sign and this API Access grade point of direct preservation dynamic load software.
In step S204,, obtain the API Access grade point of dynamic load software, according to of the visit of API Access grade allocation list monitoring dynamic load software to the API in the portable terminal when dynamic load software during in running of mobile terminal.API Access grade allocation list comprises each API in the portable terminal and the corresponding relation of its API Access grade point.The example such as the table 1 of API Access grade allocation list.
In the step S205 visit that judges whether to bypass the immediate leadership.For instance, when this API Access grade point is 3 grades, and the setting API Access grade point of the API that dynamic load software will be visited is when being 2 grades or 3 grades, and terminal allows dynamic load this API of softward interview (step S206); And the setting API Access grade point of the API that will visit when dynamic load software is 4 grades, and terminal sounds a warning or stops moving this dynamic load software (step S207).
In one embodiment, above-mentioned API Access grade allocation list can be preset in the memory space of terminal when terminal is dispatched from the factory.
In step S208, above-mentioned API Access grade allocation list can be independent of the execution of above-mentioned step 201-204, upgrades and dynamically receive from authentication server 100, so that adjust the monitoring strategies of API dynamically.
Fig. 4 illustrates the dynamic load software supervision device of the portable terminal of one embodiment of the invention.With reference to shown in Figure 4, in portable terminal 200, has a dynamic assembly system 210, when dynamic load softward interview terminal API, the API jump list 232 that is arranged in main program 230 calls by the pile function 212 of API correspondence in dynamic assembly system 210, thus visit API physical address.The supervising device 220 of present embodiment is set between the pile function 212 of API correspondence and API jump list 232, and it comprises monitoring unit 222 and database 224.Database 224 is preserved sign and its API Access grade point of each dynamic load software in the portable terminal, and these data for example are to preserve when (if needing the words of checking) by checking at dynamic load software.Preset and safeguard API Quality access configuration table 226 in the monitoring unit 222, when dynamic load softward interview terminal API, before visiting the API physical address by API jump list 232 from the pile function 212 of API correspondence, monitoring unit 222 calls API Access grade allocation list 226 and 224 couples of these API of database class inspection that conducts interviews, the visit if do not bypass the immediate leadership (being the access level value that the API Access grade point of dynamic load software is greater than or equal to the API that will visit), then allow visit API entity, the visit if bypass the immediate leadership (being the access level value of the API Access grade point of the dynamic load software API that will visit), ALM or stop running.
Fig. 5 illustrates the in-depth monitoring flow process of the monitoring unit of one embodiment of the invention.In step S31, monitoring unit 222 obtains the API Access grade point A of this dynamic load software by database 224; In step S32, monitoring unit 222 further obtains the api function that will visit from API Quality allocation list 226 and allocation list grade point B is set; In step S33, compare A, B value then, visit judges whether to bypass the immediate leadership.In step S34, when bypassing the immediate leadership, change step S36 over to, send alarm or end running software, when not bypassing the immediate leadership, change step S35 over to, search the physical address of this API, this this subsystem of dynamic load software API Access success, software continues operation (step S37).
For example, it is 3 that dynamic load software API Access grade point when test and digital signature is set, when this software terminal downloads and verify legal when moving then, need this API of visit API_n (), the grade point of monitoring unit 222 these API of inquiry this moment in grade allocation list 226 is 4, relatively draw and 3 to 4 little (be the lowest class if set 1, thereafter the big more grade of numerical value is high more), judge that drawing dynamic software attempts to visit the API higher than its grade, that is the visit of bypassing the immediate leadership, visit is prevented from; If this API is 2 in grade allocation list intermediate value, the visit of then not bypassing the immediate leadership is visited licensed.
Above grade monitor procedure mainly is to realize by increasing in the mapping process of platform api entity function at the platform virtual interface to detect, and can not relate to the modification of any original API module.By this programme, terminal platform need not carry out any modification to original API self, but finishes access level monitoring and protection to API by increasing API Access grade supervising device.
Along with the what's new of terminal platform needs and thereby the importance of original API changes and need be distributed to low-grade exploitation qualification colony, terminal platform manufacturer need adjust API Access grade control strategy.Adjust and mainly comprise two aspect work:
1) up-to-date API Quality configuration information is distributed to the software development colony of corresponding qualification (hereinafter to be referred as CP, content provider), CP will be according to new API Quality strategy, and one side is upgraded to original software and issued upgraded version and use for user's download; On the other hand, software newly developed will be developed by up-to-date API Quality strategy, guarantee that dynamic software and API dispose adjustment and carry out synchronously;
2) terminal platform manufacturer upgrades user terminal software by the mode of eating dishes without rice or wine according to new termination function and new API Access grade allocation list, for example with reference to shown in the step 103 of Fig. 2, by the renewal of authentication server 100, guarantee that the API Access grade allocation list of user terminal keeps up-to-date to portable terminal 200 issue access level allocation lists.
Such as but not limited to, terminal platform manufacturer can DM the mode of (Device Management refers to the equipment management information of OMA tissue) upgrade the firmware of user terminal, thereby upgrade the API Access grade allocation list of user terminal.Concrete mode is that terminal platform manufacturer makes the new difference bag (firmware upgrade bag) that comprises new information such as API Access grade allocation list, upgrading user terminal firmware.
By the DM mode upgrade the user terminal firmware exemplary plot as shown in Figure 6 and Figure 7.The terminal API Access grade allocation list example through adjusting related in this process is as shown in table 2:
The adjusted system API allocation list of table 2 example
??API?ID API Name Remarks The API Access grade
??001 ??Api_1() Grade is turned down ??1
??002 ??Api_2() Grade is constant ??3
??... ??... ??...
??00n ??Api_n() Grade is turned down ??3
??00m ??Api_m() Newly-increased API ??4
??00p ??Api_p() Newly-increased API ??5
In addition, develop the software behaviour in service of colony along with the third party, terminal platform manufacturer also can adjust simultaneously (upgrade to senior exploitation qualification manufacturer such as middle rank exploitation qualification manufacturer, the API Quality visit field that its software is added is also upgraded accordingly) to developer's qualification when signing.
Though the present invention discloses as above with preferred embodiment; right its is not in order to qualification the present invention, any those skilled in the art, without departing from the spirit and scope of the present invention; when can doing a little modification and perfect, so protection scope of the present invention is when with being as the criterion that claims were defined.

Claims (14)

1. the verification method of the dynamic load software of a portable terminal comprises:
Set a plurality of API Access grade points of portable terminal, the API scope difference in the portable terminal that different API Access grade points has the right to visit;
Dynamic load software is added API Access grade point field, to give an API Access grade point;
Issue this dynamic load software;
Create and issue an API Access grade allocation list, this API Access grade allocation list comprises each API and the corresponding setting API Access grade point thereof in the portable terminal;
Wherein this API Access grade point and this API Access grade allocation list are in order to as the foundation of mobile terminal monitored dynamic load software to the visit of API.
2. the verification method of the dynamic load software of portable terminal according to claim 1 is characterized in that,
Set described a plurality of API Access grade point according to developer's qualification of dynamic load software.
3. the verification method of the dynamic load software of portable terminal according to claim 1, it is characterized in that, the API Access grade point is high more, API scope in the portable terminal of having the right to visit is big more, and the API scope that high API Access grade point has the right to visit comprises the API scope that low API Access grade point has the right to visit.
4. the verification method of the dynamic load software of portable terminal according to claim 1 is characterized in that, comprises that also the dynamic load software to comprising this API Access grade point carries out digital signature after dynamic load software is added API Access grade point field.
5. the verification method of the dynamic load software of portable terminal according to claim 1 is characterized in that, also comprises, to the renewal of portable terminal issue to this API Access grade allocation list.
6. as the verification method of the dynamic load software of portable terminal as described in the claim 5, it is characterized in that, by the firmware upgrade bag to the renewal of portable terminal issue to this API Access grade allocation list.
7. as the verification method of the dynamic load software of portable terminal as described in the claim 2, it is characterized in that, comprise that also to the renewal of the developer of dynamic load software issue to this API Access grade allocation list, wherein dynamic load software is according to upgrading of API Access grade allocation list or exploitation after upgrading.
8. the method for supervising of the dynamic load software of a portable terminal comprises:
Obtain dynamic load software, this dynamic load software comprises an API Access grade point, the API Access scope in the corresponding portable terminal of this API Access grade point;
When this dynamic load software is installed, preserve sign and this API Access grade point of dynamic load software;
When dynamic load software during in running of mobile terminal, obtain the API Access grade point of this dynamic load software, monitor the visit of this dynamic load software to the API in the portable terminal according to an API Access grade allocation list, wherein this API Access grade allocation list comprises each API and the corresponding setting API Access grade point thereof in the portable terminal.
9. the method for supervising of the dynamic load software of portable terminal as claimed in claim 8, it is characterized in that, when the API Access grade point of this dynamic load software is greater than or equal to this setting API Access grade point, allow this API of this dynamic load softward interview, when the API Access grade point of this dynamic load software is lower than this setting API Access grade point, sounds a warning or stop moving this dynamic load software.
10. the method for supervising of the dynamic load software of portable terminal as claimed in claim 8, it is characterized in that, when this dynamic load software is installed, also comprise dynamic load software carried out digital signature authentication, and checking by the time preserve sign and this API Access grade point of dynamic load software.
11. the method for supervising of the dynamic load software of portable terminal as claimed in claim 8 is characterized in that, also comprises: receive renewal to this API Access grade allocation list.
12. the method for supervising of the dynamic load software of portable terminal as claimed in claim 11 is characterized in that, by the firmware upgrade bag this API Access grade allocation list is upgraded.
13. the supervising device of the dynamic load software of a portable terminal comprises:
One database when the dynamic load software that contains the API Access grade point is installed, is preserved sign and this API Access grade point of this dynamic load software, wherein the API Access scope in the corresponding portable terminal of this API Access grade point;
One monitoring unit, when dynamic load software during in running of mobile terminal, obtain the API Access grade point of this dynamic load software, and monitor of the visit of this dynamic load software to the API in the portable terminal according to an API Access grade allocation list, wherein this API Access grade allocation list comprises each API and the corresponding setting API Access grade point thereof in the portable terminal.
14. the supervising device of the dynamic load software of portable terminal as claimed in claim 13, it is characterized in that, when the API Access grade point of this dynamic load software is greater than or equal to this setting API Access grade point, this monitoring unit allows this API of this dynamic load softward interview, when the API Access grade point of this dynamic load software was lower than this setting API Access grade point, this monitoring unit sounded a warning or stops moving this dynamic load software.
CN200910048717A 2009-04-02 2009-04-02 Dynamic loading software authentication method, monitoring method and device for mobile terminal Pending CN101854624A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN200910048717A CN101854624A (en) 2009-04-02 2009-04-02 Dynamic loading software authentication method, monitoring method and device for mobile terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN200910048717A CN101854624A (en) 2009-04-02 2009-04-02 Dynamic loading software authentication method, monitoring method and device for mobile terminal

Publications (1)

Publication Number Publication Date
CN101854624A true CN101854624A (en) 2010-10-06

Family

ID=42805831

Family Applications (1)

Application Number Title Priority Date Filing Date
CN200910048717A Pending CN101854624A (en) 2009-04-02 2009-04-02 Dynamic loading software authentication method, monitoring method and device for mobile terminal

Country Status (1)

Country Link
CN (1) CN101854624A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103514075A (en) * 2012-06-18 2014-01-15 腾讯科技(深圳)有限公司 Method and device for monitoring API function calling in mobile terminal
CN103858130A (en) * 2013-08-23 2014-06-11 华为终端有限公司 Method, apparatus and terminal for administration of permission
CN105704154A (en) * 2016-04-01 2016-06-22 金蝶软件(中国)有限公司 RESTful-based service processing method, device and system
CN107169320A (en) * 2017-04-20 2017-09-15 北京小米移动软件有限公司 Method of calibration and device
CN108259413A (en) * 2016-12-28 2018-07-06 华为技术有限公司 It is a kind of to obtain certificate, the method for authentication and the network equipment
CN109150878A (en) * 2018-08-21 2019-01-04 郑州云海信息技术有限公司 A kind of method and device of the access limitation of cloud platform
CN113296799A (en) * 2021-06-21 2021-08-24 Oppo广东移动通信有限公司 Application program installation method and device, electronic equipment and storage medium
CN113392388A (en) * 2021-05-19 2021-09-14 杭州宇泛智能科技有限公司 Terminal, cloud verification method and system for autonomous customized service

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030084286A1 (en) * 2001-08-29 2003-05-01 Bader James E. Key interface for secure object manipulation

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030084286A1 (en) * 2001-08-29 2003-05-01 Bader James E. Key interface for secure object manipulation

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103514075B (en) * 2012-06-18 2016-06-29 腾讯科技(深圳)有限公司 The method and apparatus that monitoring api function is called in the terminal
US9612886B2 (en) 2012-06-18 2017-04-04 Tencent Technology (Shenzhen) Company Limited Method and device for monitoring API function scheduling in mobile terminal
CN103514075A (en) * 2012-06-18 2014-01-15 腾讯科技(深圳)有限公司 Method and device for monitoring API function calling in mobile terminal
CN103858130A (en) * 2013-08-23 2014-06-11 华为终端有限公司 Method, apparatus and terminal for administration of permission
US9614834B2 (en) 2013-08-23 2017-04-04 Huawei Device Co., Ltd. Permission management method, apparatus, and terminal
US9870463B2 (en) 2013-08-23 2018-01-16 Huawei Device (Dongguan) Co., Ltd. Permission management method, apparatus, and terminal
CN105704154A (en) * 2016-04-01 2016-06-22 金蝶软件(中国)有限公司 RESTful-based service processing method, device and system
US11451531B2 (en) 2016-12-28 2022-09-20 Huawei Technologies Co., Ltd. Certificate obtaining method, authentication method, and network device
CN108259413A (en) * 2016-12-28 2018-07-06 华为技术有限公司 It is a kind of to obtain certificate, the method for authentication and the network equipment
CN107169320A (en) * 2017-04-20 2017-09-15 北京小米移动软件有限公司 Method of calibration and device
CN109150878A (en) * 2018-08-21 2019-01-04 郑州云海信息技术有限公司 A kind of method and device of the access limitation of cloud platform
CN113392388A (en) * 2021-05-19 2021-09-14 杭州宇泛智能科技有限公司 Terminal, cloud verification method and system for autonomous customized service
CN113296799A (en) * 2021-06-21 2021-08-24 Oppo广东移动通信有限公司 Application program installation method and device, electronic equipment and storage medium

Similar Documents

Publication Publication Date Title
CN101854624A (en) Dynamic loading software authentication method, monitoring method and device for mobile terminal
CN100578522C (en) Electronic device, update method for same and integrated circuit
US8745223B2 (en) System and method of distributed license management
US10162625B2 (en) Vehicle control storage methods and systems
CN102236764B (en) Method and monitoring system for Android system to defend against desktop information attack
CN102982141A (en) Method and device for realizing distributed database agent
CN102446106A (en) Installation management method, server and terminal for application program
CN103678032B (en) The restorative procedure and device of system file
CN102521548A (en) Method for managing using rights of function and mobile terminal
CN103546436A (en) Security control method, terminal, and cloud server
CN102340398A (en) Security policy setting and determining method, and method and device for executing operation by application program
CN110457612B (en) Terminal page access method and system
CN110008665B (en) Authority control method and device for blockchain
CN110324407B (en) Access control method and device for background server and storage medium
CN101895883B (en) Smart card supporting authentication arithmetic update and method for updating authentication arithmetic
CN102760096A (en) Test data generation method, unit testing method and unit testing system
CN103067391A (en) Method, system and device of malicious permission detection
CN1326410C (en) Method for obtaining updating power information of mobile terminal
CN104363112A (en) Parameter management method and parameter management device
CN101330500B (en) Control method for accessing authority of equipment management
CN105786636A (en) System repairing method and device
CN114064073A (en) Software version upgrading method and device, computer equipment and storage medium
CN104793998A (en) Terminal system resource management method and device
CN102377590A (en) Network device and data updating method thereof
CN103595573B (en) Method and device for issuing strategy rules

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C12 Rejection of a patent application after its publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20101006