TWM569868U - Electronic device with application program based self-checking mechanism - Google Patents

Abstract

An electronic device includes a memory unit recorded with a Java application and a processing unit, the Java application having a Java local interface module and a verification algorithm for calling the Java local interface module, and the The code of the check algorithm is presented in the form of a machine code. The processing unit loads the Java application from the memory unit when receiving an open command indicating that the Java application is started, and causes the Java local interface module to call the check algorithm to perform the check. The algorithm, whereby the processing unit opens and executes the Java application when it is determined that an application-side digital signature embedded in the Java application matches a development-side digital signature stored in an official server Program, otherwise the Java application will not be opened.

Description

Electronic device with application self-checking mechanism

The present invention relates to an electronic device, and more particularly to an electronic device having an application self-checking mechanism.

In recent years, due to the popularity of smart phones, applications with different functions have sprung up, which has greatly improved the convenience of modern life.

The Android operating system (Chinese translation for "Android") is one of the most common smart phone operating systems today. However, applications that support the Android operating system have always had security issues in which internal code is easily falsified. For example, a person who is interested may put a virus or Trojan in the application and then publish the modified application on the Internet. After the user installs the modified application to the smart phone, it may result in Cell phone poisoning or personal leakage occurs.

Therefore, how to enjoy the convenience of the application while taking into account its information security has become the topic of discussion in this case.

Therefore, the object of the present invention is to provide an electronic device capable of further improving information security.

The electronic device of the present invention comprises an input unit, a memory unit, and a processing unit electrically connected to the input unit and the memory unit. The memory unit records a Java application having a Java local interface module and a check algorithm for calling the Java local interface module, and the code of the check algorithm is The form of the machine code is presented. When the processing unit receives an open command from the input unit and indicates that the Java application is started, the processing unit loads the Java application from the memory unit and calls the Java local interface module. The check algorithm performs the check algorithm. By executing the check algorithm, the processing unit determines that an application-side digital signature embedded in the Java application and a developer-side digital signature stored in an official server and corresponding to the Java application When the match is met, the Java application is opened and executed, otherwise the Java application is not opened.

In some implementations of the electronic device of the present invention, the processing unit determines that the application digital signature is not embedded in the Java application, or determines that the application digital signature is determined by executing the verification algorithm. The processing unit does not open the Java application when the development side digital signature does not match each other.

In some implementations of the novel electronic device, the processing unit further generates a digital signature request by executing the verification algorithm, and according to an official server address of the Java application The digital signature request is transmitted to the official server to cause the official server to transmit the development digital signature to the electronic device upon receiving the digital signature request.

In some implementations of the present electronic device, the processing unit further transmits the application digital signature to the official server address according to the Java application by executing the verification algorithm. The official server, so that the official server receives the digital signature of the application, and compares the digital signature of the application with the digital signature of the development end, and returns a flag indicating whether the digital signature of the application end is The development side digital signature matches the matching result to the electronic device.

In some implementations of the novel electronic device, the development side digital signature is generated based at least on a private key managed by a developer of the Java application.

The effect of the novel is that the processing unit of the electronic device can execute the verification algorithm by causing the Java local interface module to call the verification algorithm, and according to the application end digital signature and the development end The comparison result of the digital signature determines whether the Java application is opened and executed, so that the Java application can be effectively checked whether the Java application has been tampered with, and since the code of the verification algorithm is a machine The form of the code is presented, so that the verification algorithm itself can not be reversed and modified, and the information security of the Java application is further improved.

Before the present invention is described in detail, it should be noted that in the following description, similar elements are denoted by the same reference numerals.

Referring to FIG. 1, a first embodiment of the present electronic device 1 can be implemented, for example, as a smart phone operating in an Android operating system, and the electronic device 1 is adapted to communicate with an official server 50 via the Internet. In other embodiments, the electronic device 1 can also be implemented as a tablet computer, a notebook computer, or a desktop computer, and the operating system of the electronic device 1 can be transmitted through a Java virtual machine. The Java Virtual Machine (JVM) can be implemented by executing an application developed in the Java programming language, and is not limited to the Android operating system exemplified in the embodiment.

The electronic device 1 includes an input unit 11, an output unit 12, a memory unit 13 that records a Java application, a communication unit 14, and an electrical connection to the input unit 11, the output unit 12, and the memory unit. 13 and processing unit 15 of the communication unit 14. In this embodiment, the input unit 11 is implemented together with the output unit 12 as a touch display screen, and the memory unit 13 is implemented as a flash memory, for example, the processing unit 15 For example, it is implemented as a control circuit board having a central processing unit, but is not limited thereto. It is to be noted that, in other embodiments, when the electronic device 1 is implemented as a notebook computer or a desktop computer, the input unit 11 can be implemented as a keyboard, a touch pad, a mouse, for example. At least one of them, and the output unit 12 is implemented as a display screen, and is not limited to the embodiment.

Specifically, the electronic device 1 obtains the Java application from a computer-readable recording medium. Specifically, the computer-readable recording medium can be implemented, for example, as a CD-ROM storing the Java application. A film, a memory card, a USB interface flash drive, a hard drive or other kind of data carrier, but not limited to this. Moreover, when the computer readable recording medium is disposed on the electronic device 1, the computer readable recording medium is used as the memory unit 13, and the processing unit 15 can read the record by reading the computer. The media gets the Java application. Alternatively, the electronic device 1 can also download an application product containing the Java application from the network (for example, from an application store) via the communication unit 14 via the communication unit 14, and then download the obtained application. The Java application is stored in the memory unit 13, but is not limited thereto.

It is to be noted that, in this embodiment, the Java application is in the memory unit 13 for example, but is in a state that it has been installed and can be executed by the processing unit 15, but is not limited thereto.

The Java application has a Java native interface module, a check algorithm for the Java local interface module call, and an official server address indicating the IP address or URL of the official server 50. And a major functional part.

In this embodiment, the Java native interface module is a piece of code (JNI's full name called Java Native Interface) written by JNI technology, so that the processing unit 15 can call other kinds of programs through the Java virtual machine. An algorithm, application, or library written in a language such as C, C++, or a combination language.

In this embodiment, the check algorithm is presented in Machine Language, that is, the code of the check algorithm is presented in the form of a compiled Machine Code, and therefore, For the user, the code of the check algorithm appears as multiple 0s and 1s in binary, and is not readable.

The main functional part is, for example, a software resource part of the Java application for the processing unit 15 to implement the main functions provided by the Java application. For example, if the Java application is a virtual currency transaction program, the main functional part of the Java application may include, for example, a main algorithm for constructing an online virtual currency transaction function, and a user operation. Graphical user interface for online virtual currency trading, etc., but not limited to this.

In this embodiment, the processing unit 15 can connect to the official server 50 via the communication unit 14 via the communication unit 14 according to the official server address of the Java application. Specifically, the official server 50 is managed by a developer of the Java application, for example, and stores a pair of development end digital signatures of the Java application, and the development digital signature is, for example, based on The private key managed by the developer of the Java application and the code of a part of the Java application are generated by a hash operation program, which is unique and non-repudiation.

Referring to FIG. 1 and FIG. 2 together, the following describes in detail how the electronic device 1 of the embodiment implements an application self-checking method.

First, in step S1, the processing unit 15 receives an open command from the input unit 11 indicating that the Java application is opened. The opening command is generated, for example, by the input unit 11 according to a user operation, and it should be noted that, in this embodiment, the opening command is used to request that the processing unit 15 has been used in the Java application. When the installation is complete, the Java application is opened and executed to provide the main function of the Java application to the user, but not limited thereto. Next, step S2 is performed.

In step S2, the processing unit 15 loads the Java application from the memory unit 13 upon receiving the open command, and causes the Java local interface module to call the check algorithm to perform the check. Nuclear algorithm. Next, step S3 is performed.

In step S3, by executing the check algorithm, the processing unit 15 determines whether an application-side digital signature is embedded in the Java application. When the determination result of the processing unit 15 is YES, the process proceeds to step S4. When the determination result of the processing unit 15 is NO, the process proceeds to step S7.

In step S4, by performing the check algorithm, when the processing unit 15 determines that the application end digital signature is embedded in the Java application, the processing unit 15 generates a digital signature request, and according to the The official server address of the Java application, the digital signature request is transmitted to the official server 50 via the communication unit 14 via the communication unit, so that the official server 50 receives the digital signature request. The development end digital signature is stored back to the electronic device 1 so that the processing unit 15 obtains the development end digital signature from the official server 50. It should be noted that, in other embodiments, this step may also be performed when the processing unit 15 receives the open command, and is not limited to the embodiment. Next, step S5 is performed.

In step S5, by executing the check algorithm, the processing unit 15 compares the application digital signature with the development end digital signature, and determines whether the application digital signature is signed with the development end number. The chapter matches. When the determination result of the processing unit 15 is YES, the process proceeds to step S6. When the determination result of the processing unit 15 is NO, the process proceeds to step S7.

In step S6, the processing unit 15 generates a check result indicating that the check is successful, and ends the execution of the check algorithm when it is determined that the application digital signature and the development end digital signature match each other. . Next, step S8 is performed.

In the step S7 of the step S3 or the step S5, the processing unit 15 determines that the application digital signature is not embedded in the Java application, or determines that the application digital signature is digitally signed by the development end. When the chapters do not coincide with each other, the processing unit 15 generates a check result indicating that the check is failed, and ends the execution of the check algorithm. Next, step S9 is performed.

In step S8, the processing unit 15 turns on and executes the Java application according to the check result indicating that the check is successful.

In step S9, the processing unit 15 does not open the Java application according to the check result indicating that the check fails, and generates a check failure notification, and the processing unit 15 notifies the check failure via the output unit. 12 output, the check failure notification, for example, indicates "This application has been tampered with, please go to the official website to re-install and install", but not limited to this.

It is worth noting that, because the syntax of the Java programming language itself is readable, applications developed in the Java programming language are relatively simple in the difficulty of anti-compilation, and are particularly susceptible to being tampered with or implanted by malicious people. Program. However, in this embodiment, after the Java application is developed, the developer first generates the development side digital signature corresponding to the Java application with the private key, and uses the development side digital signature as the signature. The application digital signature is embedded in the Java application, and the Java application is published on the Internet for download. That is to say, in the case that the Java application has not been tampered with, the application digital signature embedded in the Java application matches the development side digital signature. If the Java application is tampered with by a person who is interested, if the person does not have the private key managed by the developer, then the Java application cannot be re-encapsulated to match the digital signature of the development end. The digital signature, therefore, the interested person can only generate another digital signature that does not match the digital signature of the development end and use it as a new application-side digital signature, or the interested person may directly ignore it. Create a new application-side digital signature. The processing unit 15 in this embodiment performs the check algorithm by using the JNI technology, and can determine whether the Java application has the digital signature in the application end and whether the digital signature of the application end is The development end digital signature is matched, so that each time the processing unit 15 receives the open command (that is, each time the user of the electronic device 1 wants to use the Java application), the processing unit 15 The check algorithm is executed and it is effectively determined whether the Java application has been tampered with by a person of interest. Moreover, it is worth mentioning that since the code of the check algorithm is presented in the form of compiled machine code and is not readable, even if the person is interested in the reverse translation of the Java application, According to the code of the check algorithm, the mechanism of the check algorithm is understood or modified. In this way, the embodiment can ensure that the check algorithm itself is difficult to be tampered with, and further improve the overall Java application. Information security.

The second embodiment of the present electronic device 1 is substantially the same as the first embodiment, and the differences between the second embodiment and the first embodiment will be described below.

In the second embodiment, before the application self-checking method is implemented, the Java application is in a state in which the memory unit 13 is not yet installed, that is, the Java application is rendered as An installation file is recorded in the memory unit 13, and the Java application can be used by the processing unit 15 to open and execute a pair of Java application installation programs. More specifically, the file format of the Java application may be, for example, an APK format or a JAR format, but is not limited thereto. Moreover, in the second embodiment, in the step S1 of the application self-checking method, the opening command is used to request the processing unit 15 to open the Java application and perform the installer to make the Java application. The program is installed to provide the status of its main function for the user. In step S8 of the second embodiment, the processing unit 15 starts the Java application according to the check result indicating that the check is successful, and executes the installer corresponding to the Java application. That is, in the second embodiment, the processing unit 15 executes the check algorithm only when the Java application is ready to be installed, unlike the first embodiment.

The third embodiment of the present electronic device 1 is substantially the same as the first embodiment, and the differences between the third embodiment and the first embodiment will be described below.

Referring to FIG. 1 and FIG. 3, in the third embodiment, by performing the check algorithm, the processing unit 15 in step S4 is to mark the application end digital signature according to the Java application. The official server address is transmitted to the official server 50, so that the official server 50 compares the application digital signature with the development digital signature when receiving the digital signature of the application, and returns a A comparison result indicating whether the application digital signature matches the development side digital signature to the electronic device 1. Therefore, the processing unit 15 determines in step S5 whether the application digital signature is consistent with the development end digital signature based on the comparison result received from the official server 50.

In summary, the electronic device 1 of the present invention can implement the self-checking method of the application, so that the processing unit 15 can perform the check calculation by calling the Java local interface module to call the check algorithm. Method, and according to the comparison between the application digital signature and the digital signature of the development end, determine whether to open and execute the Java application, so that the Java application can be effectively checked whether the Java application has been tampered with. Moreover, since the code of the check algorithm is presented in the form of a machine code, it can ensure that the check algorithm itself cannot be reversely translated and falsified, thereby further improving the information security of the Java application in application. Sex, so it is indeed possible to achieve the purpose of this new type.

However, the above is only the embodiment of the present invention, and when it is not possible to limit the scope of the present invention, all the simple equivalent changes and modifications according to the scope of the patent application and the contents of the patent specification are still This new patent covers the scope.

1‧‧‧Electronic device
11‧‧‧ Input unit
12‧‧‧Output unit
13‧‧‧ memory unit
14‧‧‧Communication unit
15‧‧‧Processing unit
50‧‧‧Official server
S1~S9‧‧‧Steps

Other features and effects of the present invention will be apparent from the following description of the drawings, wherein: FIG. 1 is a block diagram showing a first embodiment of the electronic device in accordance with an official server; 2 is a flowchart, exemplarily illustrating how the first embodiment implements an application self-checking method; and FIG. 3 is a flowchart exemplarily illustrating how a third embodiment of the novel electronic device implements the Application self-checking method.

Claims (5)

An electronic device comprising: an input unit; a memory unit, recorded with a Java application, the Java application having a Java local interface module and a verification algorithm for calling the Java local interface module, And the code of the check algorithm is presented in the form of a machine code, and a processing unit electrically connects the input unit and the memory unit, the processing unit receives an input from the input unit and indicates that the device is turned on. When the Java application opens the instruction, the processing unit loads the Java application from the memory unit, and causes the Java local interface module to call the verification algorithm to execute the verification algorithm; The check algorithm, the processing unit determines that an application-side digital signature embedded in the Java application matches a development-end digital signature stored in an official server and corresponds to a Java application. Open and execute the Java application, otherwise the Java application will not be opened. The electronic device of claim 1, wherein the processing unit determines that the application digital signature is not embedded in the Java application, or determines that the application digital signature is determined by executing the verification algorithm. The processing unit does not open the Java application when the development side digital signature does not match each other. The electronic device of claim 1, wherein the processing unit further generates a digital signature request by executing the verification algorithm, and according to an official server address of the Java application The digital signature request is transmitted to the official server to cause the official server to transmit the development digital signature to the electronic device upon receiving the digital signature request. The electronic device of claim 1, wherein the processing unit further transmits the application digital signature to the official server address according to the Java application by executing the verification algorithm. The official server, so that the official server receives the digital signature of the application, and compares the digital signature of the application with the digital signature of the development end, and returns a flag indicating whether the digital signature of the application end is The development side digital signature matches the matching result to the electronic device. The electronic device of claim 1, wherein the development side digital signature is generated based at least on a private key managed by a developer of the Java application.