WO2015161683A1 - Unified apk signing method and system thereof - Google Patents

Abstract

Disclosed are a unified APK signing method and system thereof, comprising: a receipt institution generates a first public and private key pair and a second public and private key pair, and utilizes the first private key to sign the second public key to generate a receipt institution work public key certificate; the first public key is distributed to terminal devices to generate respective receipt institution root public key certificates to be pre-installed in the terminal device; the receipt institution generates receipt institution signature information according to a signed source file and the receipt institution work public key certificate, calculates the signed source file and the receipt institution signature information to generate a Hash value, fills with the Hash value to generate a signed file, encrypts the signed file using a second private key to generate receipt institution signature data, and downloads the signed APK file to the terminal device; the terminal device checks the validity of the receipt institution work public key certificate using the receipt institution root public key certificate, and then extracts the second public key to decrypt the receipt institution signature data to obtain a Hash value, calculates an authentication Hash value, and determines whether the Hash value is equal to the authentication Hash value; if yes, then allowing the installation and operation of an original APK file.

Description

Method and system for unified APK signature

Technical field

The invention relates to APK The field of signature authentication, especially one that is unified APK Signature method and its system.

Background technique -

Bank card( BANK Card As a payment tool is becoming more and more popular, the usual bank card payment system includes a point-of-sale terminal ( Point Of Sale , POS ), POS Receipt system POSP ),password keyboard( PIN PAD ) and hardware encryption machine ( Hardware and Security Module , HSM ). among them POS The terminal can accept the bank card information, has the communication function, and accepts the instructions of the teller to complete the financial transaction information and the related information exchange device; POS Billing system POS Centralized management of terminals, including parameter download, key download, accept, process or forward POS Terminal transaction request, and POS The terminal returns the transaction result information, which is a centralized management and transaction processing system; POS The program above is downloaded and updated by the acquirer. due to Android The versatility of the system, the acquiring agency began to purchase Android systematic POS Terminal Equipment. Android System installation package is called APK , AndroidPackage abbreviation of.

But because POS There are many terminal equipment manufacturers, each manufacturer is improving POS The security of the terminal device will be installed to or allowed to be downloaded. POS The program in the process performs signature verification, and only legitimate signature programs are allowed to install or run. And because the vendor implementation mechanism is different, it can be downloaded and installed to different vendors. Android system POS Terminal APK The signed file format is inconsistent, resulting in the acquisition of different manufacturers by the acquirer. Android system POS Terminal equipment, need to maintain different at the same time APK Signing tool and pair APK Maintaining different versions of signed documents brings cumbersome maintenance work and great maintenance costs to the acquirer, so it is necessary to propose a unified APK Signed scheme, reducing the acquirer’s APK The maintenance cost of the signature.

Summary of the invention

The object of the present invention is to provide a convenient acquiring institution to uniformly manage different manufacturers. Android Signature of system terminal equipment, reducing the uniformity of maintenance costs APK Signature method and its system.

In order to achieve the above object, one technical solution adopted by the present invention is:

a unity APK Signature methods, including:

The acquirer signature server invokes the encryption device to generate a first public private key pair and a second public private key pair, and the acquirer signature server uses the first private key to perform a signature operation on the second public key to generate an acquirer work public key certificate, which will be a public key is distributed to different vendors CA server;

The signing server of the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate, and then calculates the hash value of the signed source file and the acquiring institution signature information, and generates the hash value. Filling the generated signature file, encrypting the signed file with the second private key to generate the acquirer signature data; including the signed source file, the acquirer signature information, the acquirer signature data, and the acquirer work public key certificate Signed APK The file provides downloads of terminal devices from different vendors, where the signed source files include the original APK file;

Different manufacturers CA After the server generates the acquirer root public key certificate by using the first public key according to the respective certificate generation mechanism, the server pre-installs the acquirer root public key certificate in the vendor's respective terminal device;

The terminal device downloads the signed APK File when signed from APK The document extracts the work order public key certificate of the acquirer, and the terminal device verifies the legality of the work order public key certificate of the acquirer by using the acquirer root public key certificate stored in the terminal device, and after the legality verification of the work public key certificate is passed, The terminal device extracts the second public key by using the acquiring public key certificate of the acquiring institution, and decrypts the signature data of the acquiring institution by using the second public key. After the decryption succeeds, the hash value is obtained, and the terminal device signs the signed source file and the acquiring institution. The information calculation generates a verification hash value, and the terminal device determines whether the hash value and the verification hash value are equal, and if they are equal, the original is allowed. APK File installation and operation.

Another technical solution adopted by the present invention is:

a unity APK a system for signing, comprising an acquirer server and a terminal device server, the acquirer server comprising a first signature module, a key distribution module, a second signature module, a first computing module, and a first encryption module;

The first signing module, the encryption device for the acquiring institution generates the first public private key pair and the second public private key pair, and the signing server of the acquiring institution uses the first private key to perform the signature operation on the second public key to generate the acquiring Institutional work public key certificate;

The key distribution module is configured to distribute the first public key to different vendors CA server;

The second signature module is configured to generate, by the signature server of the acquiring institution, the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate;

The first computing module is configured to calculate, by the signature server of the acquiring institution, the hash value of the signed source file and the acquiring institution signature information, and fill the hash value to generate the signed file;

The first encryption module is configured to: the acquiring institution encrypts the signed file by using the second private key to generate the acquiring institution signature data; and includes the signed source file, the acquiring institution signature information, the acquiring institution signature data, and the receiving Single agency work public key certificate signed APK The file provides downloads of terminal devices from different vendors, where the signed source files include the original APK file;

The terminal device server includes a second encryption module, a signature file acquisition module, a first decryption module, a second decryption module, and a third decryption module;

The second encryption module is used by different vendors CA After the server generates the different acquirer root public key certificates according to the respective mechanisms, the server pre-installs the acquirer root public key certificate in the manufacturer's terminal device;

The signature file obtaining module is configured to: sign the signed source file, the acquiring institution signature information, the acquiring institution signature data, and the acquiring institution working public key certificate APK Download files to terminal devices of different vendors;

The first decryption module is configured for the terminal device to be signed APK The document extracts the work order public key certificate of the acquiring institution, and the terminal device verifies the legality of the work order public key certificate of the acquiring institution by using the acquirer root public key certificate stored in the terminal device, and the legality of the working public key certificate when the acquiring institution works After the verification is passed, the second decryption module is sent to the second decryption module;

The second decryption module is configured to: the terminal device extracts the second public key by using the occupant working public key certificate, and decrypts the signature data of the acquiring institution by using the second public key, and obtains a hash value after the decryption succeeds;

The third decryption module is configured to calculate, by the terminal device, a verification hash value by using the signature source file and the acquirer signature information, and the terminal device determines whether the hash value and the verification hash value are equal, and if they are equal, allow original APK File installation and operation.

Through the invention, the acquiring institution only needs to generate a unified signature APK The file can be downloaded to different terminal devices through the verification mechanism of the terminal device, and the signed certificate is guaranteed. APK The integrity of the data in the data transfer process and APK At the same time of legitimacy, the acquiring institution only needs to maintain a signed document and a set of signature checking mechanism for the terminal equipment of different manufacturers, which greatly reduces the APK The maintenance cost of the signature.

DRAWINGS

Figure 1 Is a unified in an embodiment of the present invention APK An execution flow diagram of the method of signing;

Figure 2 Is a unified in an embodiment of the present invention APK a composition diagram of the signature system;

Figure 3 Is a unified in an embodiment of the present invention APK The composition diagram of the terminal device server in the signature system.

The main component symbol description:

First signature module; 2 Key distribution module; 3 Second signature module;

First arithmetic module; 5 First cryptographic module; 6 Second cryptographic module;

, signature file acquisition module;  8 First decryption module; 9 Second decryption module;

Third decryption module; 11 Filling module; 12 First storage module;

, the second storage module.

detailed description

The invention generates a unified signature by the acquiring institution APK After the file is downloaded, it can be downloaded to the terminal equipment of different manufacturers. The terminal equipment uses the public key distributed by the acquiring institution to carry out the respective inspections to ensure the signature. APK The integrity of the file during the data transfer process and APK At the same time of legitimacy, the acquiring institution only needs to maintain a signed document and a set of signature implementation mechanism for the terminal equipment of different manufacturers, which greatly reduces the APK The maintenance cost of the signature.

The detailed description of the technical contents, structural features, and the objects and effects of the present invention will be described in detail below with reference to the accompanying drawings.

Please refer to the picture 1 Is a unified in an embodiment of the present invention APK A block diagram of the method of signing. The unity APK The signature method is applied to the acquirer and the terminal device, and the method includes the following:

step S1 The acquirer signature server invokes the encryption device to generate a first public private key pair and a second public private key pair, and the acquirer signature server uses the first private key to perform a signature operation on the second public key to generate an acquirer work public key certificate, which will The first public key is distributed to different vendors CA server;

step S2 The signing server of the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate, and then calculates the hash value of the signed source file and the acquiring institution signature information, and generates a hash value. Performing a padding to generate a signed file, and encrypting the signed file with a second private key to generate an acquirer signature data; including a signed source file, an acquirer signature information, an acquirer signature data, and an acquirer work public key Certificate signed APK The file provides downloads of terminal devices from different vendors, where the signed source files include the original APK file;

step S3 : different manufacturers CA After the server generates the acquirer root public key certificate by using the first public key according to the respective certificate generation mechanism, the server pre-installs the acquirer root public key certificate in the vendor's respective terminal device;

step S4 : The terminal device downloads the signed APK File when signed from APK The document extracts the work order public key certificate of the acquirer, and the terminal device verifies the legality of the work order public key certificate of the acquirer by using the acquirer root public key certificate stored in the terminal device, and after the legality verification of the work public key certificate is passed, The terminal device extracts the second public key by using the acquiring public key certificate of the acquiring institution, and decrypts the signature data of the acquiring institution by using the second public key. After the decryption succeeds, the hash value is obtained, and the terminal device signs the signed source file and the acquiring institution. The information calculation generates a verification hash value, and the terminal device determines whether the hash value and the verification hash value are equal, and if they are equal, the original is allowed. APK File installation and operation.

Different vendors described in this scenario CA After the server generates the acquirer root public key certificate by using the first public key according to the respective certificate generation algorithm, the server pre-installs the acquirer root public key certificate in the manufacturer's terminal device, and the acquirer root generated by each vendor Public key certificates are different and are used for signatures received by each future check. APK file. The signed APK The file is verified when different vendors need the program to download and install or the device periodically self-tests. After the verification is passed, the installation and operation are allowed. APK file.

In this scenario, the signing server of the acquiring institution uses the hash value according to PKCS#1 The signature standard pair is filled to obtain the signed file, and then the second private key is used to encrypt the signed file to generate the acquiring institution signature information, and the acquiring institution working public key certificate, the acquiring institution signature information, and the signature acquiring institution Signature information and signed source files APK Constitute signed APK File, then will be signed APK The file is downloaded to the terminal device of different manufacturers, and the hash value is obtained by signing information and original to the acquirer. APK The file is generated by the operation;

Embodiment 1:

And the method further includes: the step of generating the signed source file before the “signing server of the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate” Specifically, including:

The acquirer signature server will be original APK File tail padding 0x00 The four-byte complement is used as the signed source file.

In this embodiment, to ensure the original APK The file is aligned in four bytes, filling the end of the file with insufficient bits 0x00 And then make up 4 One 0x00 To ensure that the end of the signed source file is 0x00 .

Embodiment 2:

In addition to the foregoing solution, the “acquisition institution signature information” is used to store a public key certificate including an acquirer work. ID Number, algorithm used for signature, and signature time;

Said "signed APK The file also includes a signature file header and a signed source file;

The signature file header storage includes the original APK File length, signed source file length, acquirer signature information offset and length, used to identify the offset and length of the file that has been signed and signed.

In this embodiment, the algorithm used by the signature stored in the signature information of the signature authority is preferably SHA-256 with RSA The offset position of the acquirer signature information and the offset length of the signature file are the offset lengths calculated from the beginning of the file.

Please refer to the picture 2- Figure 3 , respectively, is a unity of the invention APK A composition diagram of the signature system and a unified embodiment of the present invention APK The composition diagram of the terminal device server in the signature system. Another technical solution provided by the present invention is:

a unity APK a signed system comprising an acquirer server and a terminal device server, the acquirer server comprising a first signature module 1 Key distribution module 2 Second signature module 3 First arithmetic module 4 And the first encryption module 5 ;

The first signature module 1 The encryption device for the acquiring institution generates the first public private key pair and the second public private key pair, and the signing server of the acquiring institution uses the first private key to perform the signature operation on the second public key to generate the acquiring institution working public key certificate;

Key distribution module 2 For distributing the first public key to different vendors CA server;

The second signature module 3 The signature server for the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate;

The first computing module 4 The signature server for the acquiring institution calculates the hash value of the signed source file and the acquiring institution signature information, and fills the hash value to generate the signed file;

The first encryption module 5 : used by the acquiring institution to encrypt the signed document by using the second private key to generate the acquiring institution signature data; and will include the signed source file, the acquiring institution signature information, the acquiring institution signature data, and the acquiring institution working public key certificate. Signed APK The file provides downloads of terminal devices from different vendors, where the signed source files include the original APK file;

The terminal device server includes a second encryption module 6 Signature file acquisition module 7 First decryption module 8 Second decryption module 9 And third decryption module 10 ;

The second encryption module 6 For different manufacturers CA After the server generates the different acquirer root public key certificates according to the respective mechanisms, the server pre-installs the acquirer root public key certificate in the manufacturer's terminal device;

The signature file acquisition module 7 For signatures including signed source files, acquirer signature information, acquirer signature data, and acquirer work public key certificates APK Download files to terminal devices of different vendors;

The first decryption module 8 For terminal devices from signed APK The document extracts the work order public key certificate of the acquiring institution, and the terminal device verifies the legality of the work order public key certificate of the acquiring institution by using the acquirer root public key certificate stored in the terminal device, and the legality of the working public key certificate when the acquiring institution works After the verification is passed, the second decryption module is sent to the second decryption module. 9 ;

The second decryption module 9 , the terminal device uses the acquirer work public key certificate to extract the second public key, and uses the second public key to decrypt the acquirer signature data, and obtains a hash value after successful decryption;

The third decryption module 10 And the terminal device calculates, by using the signature source file and the acquiring institution signature information, a verification hash value, and the terminal device determines whether the hash value and the verification hash value are equal, and if they are equal, the original is allowed. APK File installation and operation.

Embodiment 1:

In addition to the foregoing solution, the acquiring institution server further includes a filling module. 11 ;

The filling module 11 , the signature server used for the acquirer will be original APK File tail padding 0x00 Four bytes are filled to ensure original APK End of file 0x00 After the end, it is used as the encryption source file.

In this embodiment, the filling module 11 In order to guarantee the original APK The last four bytes of the file are aligned, and the insufficient bits are padded at the end of the file. 0x00 And then make up 4 One 0x00 To ensure that the end of the signed source file is 0x00 .

Embodiment 2:

A storage module is further included on the basis of the foregoing solution, and the storage module includes a first storage module. 12 And the second storage module 13 ;

The first storage module 12 And storing the work order public key certificate of the acquirer in the signing information of the acquirer ID Number, algorithm used for signature, and signature time;

Said "signed APK The file also includes a signature file header and a signed source file;

The second storage module 13 For storing the signature file header including the original APK The file length, the length of the signed source file, the signing information of the acquiring institution, and the offset position of the signing information of the acquiring institution are used to identify the offset length of the file that has been signed and the signature file.

In this embodiment, the algorithm used by the signature stored in the signature information of the signature authority is preferably SHA-256 with RSA The offset position of the acquirer signature information and the offset length of the signature file are the offset lengths calculated from the beginning of the file.

A uniform provided by the present invention APK The signature method and its system enable the acquirer to generate only one unified signature APK The file can be downloaded to different terminal devices through the verification mechanism of the terminal device, and the signed certificate is guaranteed. APK File data integrity and data in the data transfer process APK At the same time of legitimacy, the acquiring institution only needs to maintain a signed document and a set of signature checking mechanism for the terminal equipment of different manufacturers, which greatly reduces the APK The maintenance cost of the signature.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation of the present invention and the contents of the drawings may be directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims (6)

1. A method for unifying APK signature, characterized in that it comprises:

   The acquirer signature server invokes the encryption device to generate a first public private key pair and a second public private key pair, and the acquirer signature server uses the first private key to perform a signature operation on the second public key to generate an acquirer work public key certificate, which will be A public key is distributed to CA servers of different vendors;

   The signing server of the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate, and then calculates the hash value of the signed source file and the acquiring institution signature information, and generates the hash value. Filling the generated signature file, encrypting the signed file with the second private key to generate the acquirer signature data; including the signed source file, the acquirer signature information, the acquirer signature data, and the acquirer work public key certificate The signed APK file provides downloading of terminal devices from different vendors, wherein the signed source file includes the original APK file;

   After the CA server of different vendors generates the acquirer root public key certificate by using the first public key according to the respective certificate generation mechanism, the root public key certificate of the acquirer is pre-installed in the respective terminal devices of the manufacturer;

   When the terminal device downloads the signed APK file, the acquiring institution work public key certificate is extracted from the signed APK file, and the terminal device verifies the acquiring institution working public key certificate by using the acquirer root public key certificate stored in the terminal device. Legitimacy, when the validity of the work public key certificate is verified, the terminal device extracts the second public key using the work order public key certificate of the acquirer, decrypts the signature data of the acquirer using the second public key, and obtains the hash after the decryption succeeds. The terminal device calculates and generates a verification hash value by using the signed source file and the acquirer signature information, and the terminal device determines whether the hash value and the verification hash value are equal. If they are equal, the original APK file is allowed to be installed and run.
2. The method for unifying APK signature according to claim 1, wherein the "signing server of the acquiring institution generates the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate" The step of generating the signed source file includes:

   The acquirer signature server fills the original APK file with 0x00 four-byte padding as the signed source file.
3. The method for unifying APK signature according to claim 1, wherein the "acquisition institution signature information" is used for storing an ID number including an occupant working public key certificate, an algorithm used for signature, and a signature time. ;

   The "signed signature file" further includes a signature file header and a signed source file;

   The signature file header stores an offset position including an original APK file length, a signed source file length, an acquirer signature information, and an acquirer signature information, and is used to identify that the file has been signed and the offset length of the signature file.
4. A unified APK signature system, comprising: an acquirer server and a terminal device server, wherein the acquirer server comprises a first signature module, a key distribution module, a second signature module, a first computing module, and a An encryption module;

   The first signing module, the encryption device for the acquiring institution generates the first public private key pair and the second public private key pair, and the signing server of the acquiring institution uses the first private key to perform the signature operation on the second public key to generate the acquiring Institutional work public key certificate;

   The key distribution module is configured to distribute the first public key to a CA server of a different vendor;

   The second signature module is configured to generate, by the signature server of the acquiring institution, the acquiring institution signature information according to the signed source file and the acquiring institution working public key certificate;

   The first computing module is configured to calculate, by the signature server of the acquiring institution, the hash value of the signed source file and the acquiring institution signature information, and fill the hash value to generate the signed file;

   The first encryption module is configured to: the acquiring institution encrypts the signed file by using the second private key to generate the acquiring institution signature data; and includes the signed source file, the acquiring institution signature information, the acquiring institution signature data, and the receiving The signed APK file of the single institution work public key certificate provides terminal device downloads of different vendors, wherein the signed source file includes the original APK file;

   The terminal device server includes a second encryption module, a signature file acquisition module, a first decryption module, a second decryption module, and a third decryption module;

   The second encryption module is configured to: after the CA server of different vendors generates different acquirer root public key certificates according to respective mechanisms, pre-install the acquirer root public key certificate in the manufacturer's terminal. In the equipment;

   The signature file obtaining module is configured to download a signed APK file including a signed source file, an acquirer signature information, an acquirer signature data, and an acquirer work public key certificate to a terminal device of a different manufacturer;

   The first decryption module is configured to: the terminal device extracts an acquirer work public key certificate from the signed APK file, and the terminal device verifies the acquirer work public key certificate by using the acquirer root public key certificate stored in the terminal device. The legality is sent to the second decryption module after the legality verification of the work order public key certificate of the acquirer is passed;

   The second decryption module is configured to: the terminal device extracts the second public key by using the occupant working public key certificate, and decrypts the signature data of the acquiring institution by using the second public key, and obtains a hash value after the decryption succeeds;

   The third decryption module is configured to calculate, by the terminal device, a verification hash value by using the signature source file and the acquirer signature information, and the terminal device determines whether the hash value and the verification hash value are equal, and if they are equal, allow The original APK file is installed and running.
5. The unified APK signature system according to claim 4, wherein the acquirer server further comprises a filling module;

   The filling module is used by the signing server of the acquiring institution to fill the original APK file with 0x00 four-bytes to ensure that the original APK file ends with 0x00 and is used as the encryption source file.
6. A method for unifying APK signature according to claim 4, further comprising a storage module, the storage module comprising a first storage module and a second storage module;

   The first storage module is configured to store an ID number of the work function public key certificate of the acquirer in the signing information of the acquirer, an algorithm used by the signature, and a signature time;

   The "signed signature file" further includes a signature file header and a signed source file;

   The second storage module is configured to store, in the signature file header, an offset position including an original APK file length, a signed source file length, an acquirer signature information, and an acquirer signature information, where the identifier is used to identify that the file has been The offset length of the signed and signed file.