WO2016177172A1

WO2016177172A1 - Management method, system and terminal, key management system and terminal manufacturer system

Info

Publication number: WO2016177172A1
Application number: PCT/CN2016/077376
Authority: WO
Inventors: 李楠; 章强
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-10-21
Filing date: 2016-03-25
Publication date: 2016-11-10
Also published as: CN106612179A

Abstract

Provided are a management method, system and terminal, key management system and terminal manufacturer system. The method comprises: receiving and storing, by a key management system, a public key of an application key uploaded by an application developer, and feeding back an application identifier corresponding to the application to the application developer; transmitting, by a terminal manufacturer system, a key download request to the key management system, receiving the public key of the application key returned by the key management system, and writing into a key partition of the terminal; acquiring, by the terminal, an application identifier of an application to be installed, searching, in the key partition, for the public key of the application key corresponding to the application identifier, conducting a signature verification of a private key of the application to be installed, and managing, according to a verification result, the installation of the application to be installed. By implementing the present invention, when installing the application, the terminal conducts, based on the public key of the application key of a stored valid application, a signature verification of the private key of the application, and manages, according to the verification result, the installation of the application, thus addressing the problem in which a related terminal is unable to verify the validity of an application.

Description

Management method and system, terminal, key management system and terminal manufacturer system

Technical field

The present invention relates to the field of application installation management, and in particular, to a management method and system, a terminal, a key management system, and a terminal vendor system.

Background technique

At present, the Android system platform is the most popular mobile phone platform for users. As an open source code, the application of the Android platform, application developers can develop at will, and can download the network application to decompile and modify the internal source code and then release it. After some application developers modify the Trojans for some popular applications, users installing such applications will result in deductions, deductions, etc. after downloading and installing.

At present, the application software is downloaded on various websites. Users cannot distinguish which are published by the formal institutions and which are pirated applications that are maliciously injected and tampered with; if the user downloads and installs the pirated application, the lighter can cause the user to be charged after downloading and installing. , deduction of traffic, etc., heavy Alipay, mobile banking stealing bank password information, property suffered serious losses.

Therefore, how to provide a management method for an application installation that can verify an application is a technical problem to be solved by those skilled in the art.

Summary of the invention

The embodiment of the invention provides a management method and system, a terminal, a key management system and a terminal manufacturer system, so as to solve the problem that the relevant terminal cannot verify the validity of the application.

The embodiment of the invention provides a management method for managing application installation, which includes:

Obtain an application identifier of the application to be installed;

Searching for the public key of the application key corresponding to the application identifier in the key partition; the key partition is used to store the public key of the application key of the legal application;

Signature verification of the private key of the application to be installed according to the public key of the application key;

Manage the installation of the application to be installed based on the verification result.

Optionally, the method further includes: if the public key of the application key corresponding to the application identifier is not found in the key partition, updating the key partition, or prompting the application to be installed as a dangerous application.

Optionally, the method further includes: acquiring the key differential upgrade package periodically or in real time, and updating the key partition by using the key differential upgrade package based on the public key of the application key of all legal applications currently stored in the key partition.

Optionally, the installation of the application to be installed according to the verification result includes: when the verification result is that the verification is successful, the application to be installed is installed; when the verification result is a verification failure, the application to be installed is prompted to be a dangerous application.

Optionally, before the application to be installed is a dangerous application, the method further includes: updating the key partition, re-finding the public key of the application key corresponding to the application identifier, and performing signature verification again. If the verification succeeds, the installation is performed. If the application is to be installed, if the verification fails, the application to be installed is prompted to be a dangerous application.

Optionally, before updating the key partition, the method further includes: comparing the last update time of the key partition with the upload time of the application to be installed, and updating the key partition if the update time is earlier than the upload time, if the update time is later The key partition is not updated at the time of upload.

Optionally, after prompting the application to be installed as a dangerous application, the method further includes: prompting whether the installation of the dangerous application is performed, and if yes, installing the application to be installed and performing the danger identification.

Receiving and storing the public key of the application key uploaded by the application developer, and feeding back the application identifier corresponding to the application to the application developer;

After receiving the key download request of the terminal manufacturer system, the public key of all stored application keys is sent to the terminal manufacturer system for the terminal manufacturer system to write the terminal key partition.

Optionally, the method further includes: generating and transmitting a key differential upgrade package to the terminal manufacturer system and/or the terminal when receiving the new application key or the application key change.

Sending a key download request to the key management system;

Receive the public key of the application key returned by the key management system and write it to the key partition of the terminal.

Optionally, the method further includes: generating a key differential upgrade package when receiving a new application key or an application key change, or receiving a key differential upgrade package sent by the key management system; sending the key differential upgrade package to terminal.

The key management system receives and stores the public key of the application key uploaded by the application developer, and feeds back the application identifier corresponding to the application to the application developer;

The terminal manufacturer system sends a key download request to the key management system, receives the public key of the application key returned by the key management system, and writes the key partition of the terminal;

The terminal obtains the application identifier of the application to be installed, searches for the public key of the application key corresponding to the application identifier in the key partition, and uses the key partition to store the public key of the application key of the legal application, and treats the public key according to the application key. Install the application's private key for signature verification, and manage the installation of the application to be installed according to the verification result.

An embodiment of the present invention provides a terminal, including:

Obtaining a module, configured to obtain an application identifier of the application to be installed;

a search module, configured to search for a public key of an application key corresponding to the application identifier in the key partition; the key partition is configured to store a public key of the application key of the legal application;

The verification module is configured to perform signature verification on the private key of the application to be installed according to the public key of the application key;

The management module is configured to manage the installation of the application to be installed according to the verification result.

Optionally, the searching module is further configured to update the key partition if the public key of the application key corresponding to the application identifier is not found in the key partition, or prompt the application to be installed as a dangerous application.

Optionally, the searching module is further configured to obtain a key differential upgrade package periodically or in real time, and update the key partition by using the key differential upgrade package based on the public key of the application key of all legal applications currently stored in the key partition.

Optionally, the management module is configured to: when the verification result is successful, install the application to be installed; when the verification result is verification failure, prompt the application to be installed as a dangerous application.

Optionally, before the user is prompted to install the application as a dangerous application, the search module is further configured to update the key partition, re-search the public key of the application key corresponding to the application identifier, and perform signature verification again. Then install the application to be installed. If the verification fails, the application to be installed is prompted to be a dangerous application.

Optionally, before the update key partition is updated, the search module is further configured to compare the last update time of the key partition with the upload time of the application to be installed, and if the update time is earlier than the upload time, update the key partition, if the update is performed. When the time is later than the upload time, the key partition is not updated.

Optionally, after the management module prompts that the application to be installed is illegal, the management module is further configured to prompt whether to install the dangerous application, and if yes, install the application to be installed and perform the danger identification.

The embodiment of the invention provides a key management system, which includes:

a storage module configured to receive and store a public key of an application key uploaded by an application developer, and feed back to the application developer Use the corresponding application identifier;

The issuing module is configured to, after receiving the key download request of the terminal manufacturer system, send the stored public key of all application keys to the terminal manufacturer system for the terminal manufacturer system to write the terminal key partition.

Optionally, the sending module is further configured to generate and send the key differential upgrade package to the terminal manufacturer system and/or the terminal when receiving the new application key or the application key change.

The embodiment of the invention provides a terminal manufacturer system, which includes:

a request module, configured to send a key download request to the key management system;

The write module is configured to receive the public key of the application key returned by the key management system and write the key partition of the terminal.

Optionally, the writing module is further configured to generate a key differential upgrade package when receiving a new application key or an application key change, or receive a key differential upgrade package sent by the key management system; and send the key difference Upgrade the package to the terminal.

An embodiment of the present invention provides a management system for managing application installation, including: a key management system, a terminal manufacturer system, and a terminal;

a key management system, configured to receive and store a public key of an application key uploaded by an application developer, and feed back an application identifier corresponding to the application to the application developer;

The terminal manufacturer system is configured to send a key download request to the key management system, receive the public key of the application key returned by the key management system, and write the key partition of the terminal;

The terminal is configured to obtain an application identifier of the application to be installed, and find a public key of the application key corresponding to the application identifier in the key partition, and the key partition is used to store the public key of the application key of the legal application, according to the application key The public key performs signature verification on the private key of the installed application, and manages the installation of the application to be installed according to the verification result.

In the embodiment of the present invention, a computer storage medium is further provided, and the computer storage medium may store an execution instruction for executing the management method in the foregoing embodiment.

Advantageous effects of embodiments of the present invention:

The embodiment of the present invention provides a management method. After the user downloads an application, the terminal performs signature verification on the private key of the application based on the public key of the application key of the legal application stored in the terminal. Whether the application is an application developed by a legitimate developer to verify the validity of the application, and manage the installation of the application according to the verification result, and the legal application is directly installed, and the illegal application prompts the application as a dangerous application, and the related terminal is solved. The problem of not being able to verify the validity of the application enhances the user experience.

DRAWINGS

1 is a schematic structural diagram of a management system according to a first embodiment of the present invention;

2 is a flowchart of a management method according to a second embodiment of the present invention;

FIG. 3 is a flowchart of a management method according to a third embodiment of the present invention.

detailed description

The invention will now be further illustrated by way of specific embodiments in conjunction with the accompanying drawings.

First embodiment:

FIG. 1 is a schematic structural diagram of a management system according to a first embodiment of the present invention. As shown in FIG. 1, in the embodiment, the management system provided by the embodiment of the present invention includes: a key management system 1, a terminal manufacturer system 2, and a terminal. 3, among them,

The key management system 1 is configured to receive and store a public key of an application key uploaded by an application developer, and feed back an application identifier corresponding to the application to the application developer;

The terminal manufacturer system 2 is configured to send a key download request to the key management system 1, receive the public key of the application key returned by the key management system 1, and write the key partition of the terminal 3;

The terminal 3 is configured to obtain an application identifier of the application to be installed, and search for a public key of the application key corresponding to the application identifier in the key partition, and the key partition is used to store the public key of the application key of the legal application, according to the application key. The public key performs signature verification on the private key of the installed application, and manages the installation of the application to be installed according to the verification result.

In some embodiments, as shown in FIG. 1, the terminal 3 provided by the embodiment of the present invention includes:

The obtaining module 31 is configured to obtain an application identifier of the application to be installed;

The searching module 32 is configured to: in the key partition, find a public key of an application key corresponding to the application identifier; the key partition is configured to store a public key of the application key of the legal application;

The verification module 33 is configured to perform signature verification on the private key of the application to be installed according to the public key of the application key; the same application key includes a public key and a private key, and the public key and the private key are generated based on the same algorithm, if the user is After the other developers modify and upload, the private key carried in the application installation package will change. At this time, the signature verification cannot be passed. Correspondingly, if the application key is illegally modified, the private key carried in the application installation package will not change. At this point, the signature verification can be passed;

The management module 34 is configured to manage the installation of the application to be installed according to the verification result.

In some embodiments, the lookup module 32 in the above embodiment is further configured to update the key partition if the public key of the application key corresponding to the application identifier is not found in the key partition, or prompt the application to be installed as a danger. application.

In some embodiments, the lookup module 32 in the above embodiment is further configured to acquire the key differential liters periodically or in real time. The level packet, based on the public key of the application key of all legitimate applications currently stored by the key partition, updates the key partition by using the key differential upgrade package.

In some embodiments, the management module 34 in the foregoing embodiment is configured to install the application to be installed when the verification result is that the verification is successful; and when the verification result is the verification failure, the application to be installed is prompted to be a dangerous application.

In some embodiments, before prompting the application to be installed as a dangerous application, the searching module 32 in the above embodiment is further configured to update the key partition, re-find the public key of the application key corresponding to the application identifier, and sign again. If the verification is successful, the application to be installed is installed. If the verification fails, the application to be installed is prompted to be a dangerous application.

In some embodiments, the lookup module 32 in the above embodiment is further configured to compare the last update time of the key partition with the upload time of the application to be installed before updating the key partition, and if the update time is earlier than the upload time, The key partition is updated, and if the update time is later than the upload time, the key partition is not updated.

In some embodiments, after the management module 34 in the above embodiment prompts that the application to be installed is illegal, it is further set to prompt whether to install the dangerous application, and if so, install the application to be installed and perform the danger identification.

In some embodiments, as shown in FIG. 1, the key management system 1 provided by the embodiment of the present invention includes:

The storage module 11 is configured to receive and store a public key of an application key uploaded by the application developer, and feed back an application identifier corresponding to the application to the application developer;

The delivery module 12 is configured to, after receiving the key download request of the terminal manufacturer system 2, send the stored public key of all application keys to the terminal manufacturer system 2 for the terminal manufacturer system to write the terminal key partition.

In some embodiments, the sending module 12 in the above embodiment is further configured to generate and send a key differential upgrade package to the terminal manufacturer system 2 and/or the terminal when receiving a new application key or an application key change. 3.

In some embodiments, as shown in FIG. 1, the terminal manufacturer system 2 provided by the embodiment of the present invention includes:

The requesting module 21 is configured to send a key download request to the key management system 1;

The writing module 22 is arranged to receive the public key of the application key returned by the key management system 1 and write it to the key partition of the terminal 3.

In some embodiments, the writing module 22 in the above embodiment is further configured to generate a key differential upgrade package when receiving a new application key or application key change, or receive the secret sent by the key management system 1. Key differential upgrade package; send key differential upgrade package to terminal 3.

In the embodiment of the present invention, a computer storage medium is further provided, and the computer storage medium may store an execution instruction for executing the method in the foregoing embodiment.

Second embodiment:

FIG. 2 is a flowchart of a management method according to a second embodiment of the present invention. As shown in FIG. 2, in the embodiment, the management method provided by the present invention includes the following steps:

S201: The key management system receives and stores the public key of the application key uploaded by the application developer, and feeds back the application identifier corresponding to the application to the application developer;

S202: The terminal manufacturer system sends a key download request to the key management system, receives the public key of the application key returned by the key management system, and writes the key partition of the terminal;

S203: The terminal acquires an application identifier of the application to be installed, and searches for a public key of the application key corresponding to the application identifier in the key partition, where the key partition is used to store the public key of the application key of the legal application, according to the public key of the application key. The key performs signature verification on the private key of the installed application, and manages the installation of the application to be installed according to the verification result.

In some embodiments, an embodiment of the present invention provides a management method for managing application installation, including:

Obtain an application identifier of the application to be installed;

In some embodiments, the method in the foregoing embodiment further includes: if the public key of the application key corresponding to the application identifier is not found in the key partition, updating the key partition, or prompting the application to be installed as a dangerous application.

In some embodiments, the method in the foregoing embodiment further includes: acquiring the key differential upgrade package periodically or in real time, and using the key differential upgrade package based on the public key of the application key of all legal applications currently stored in the key partition. Update the key partition.

In some embodiments, the installing the application to be installed according to the verification result in the foregoing embodiment includes: when the verification result is that the verification is successful, installing the application to be installed; when the verification result is a verification failure, prompting to wait Install the application as a hazardous application.

In some embodiments, the method in the foregoing embodiment further includes: updating the key partition, re-finding the public key of the application key corresponding to the application identifier, and performing signature verification again before prompting the application to be installed as a dangerous application. If the verification is successful, install the application to be installed. If the verification fails, the application to be installed is prompted to be a dangerous application.

In some embodiments, before updating the key partition, the method in the foregoing embodiment further includes: comparing the last update time of the key partition with the upload time of the application to be installed, and updating if the update time is earlier than the upload time. Key partitioning, if the update time is later than the upload time, the key partition is not updated.

In some embodiments, after the method in the foregoing embodiment prompts that the application to be installed is a dangerous application, the method further includes: prompting whether to install the dangerous application, and if yes, installing the application to be installed and performing the danger identification.

After receiving the key download request of the terminal manufacturer system, the public key of all stored application keys is sent to the terminal factory. The merchant system is used by the terminal manufacturer system to write the terminal key partition.

In some embodiments, the method in the above embodiments further includes generating and transmitting a key differential upgrade package to the terminal vendor system and/or the terminal when a new application key or application key change is received.

In some embodiments, an embodiment of the present invention provides a management method for managing an application installation, including:

Sending a key download request to the key management system;

In some embodiments, the method in the foregoing embodiment further includes: generating a key differential upgrade package when receiving a new application key or applying a key change, or receiving a key differential upgrade package sent by the key management system. Send the key differential upgrade package to the terminal.

The embodiments of the present invention are further explained in conjunction with specific application scenarios.

Third embodiment:

This embodiment is to establish a new mobile phone application usage specification mode, and establish a third-party key management authority database, that is, the key management system provided by the embodiment of the present invention, which can be released by the application developer after uploading the key to the database. Applied on the network. Only the mobile phone manufacturer, that is, the terminal manufacturer system provided by the embodiment of the present invention, can have the download access and download permission of the database through the formal application channel, and save the key database in the mobile phone local. With the development of technology, the storage of the mobile phone Space is no longer a limitation problem. When users install an application downloaded from the network, they query the database key of the mobile security partition to verify the signature. The software that has been uploaded by the key management authority is a formal software that can be installed. Otherwise, the installation cannot be successful and the query is based on the application release time. Whether the network upgrade key security partition is installed, and the installation is performed again after the upgrade. The verification succeeds as the security software. The verification still fails. It is dangerous software. It is recommended not to install, prompting the user. Whether to install dangerous software, if yes, allow the user to install successfully and perform dangerous identification on the software icon.

Specifically, the key management system is a newly established third-party key management organization that manages keys uploaded by all application developers; the application developer has the right to upload a key to a third-party key management authority, and has a unique id account. There is no modification and download permission; only the regular mobile phone manufacturer obtains the download permission of the third-party key management organization through the formal application process. With the development of technology, mobile phone storage space is no longer a constraint. The mobile phone will establish a secure key partition to store the downloaded key database. The mobile phone will burn a newest version in the secure partition when it is burned in the factory. The database is available for users to use for subsequent upgrades. The mobile phone manufacturer will periodically release an upgrade package for this partition. Similar to the fata differential upgrade package for this partition, the mobile phone manufacturer periodically downloads and creates an upgrade package for the third-party key management architecture. Online differential upgrade.

As shown in FIG. 3, the application management method provided by the embodiment of the present invention includes the following steps:

S301-S302: After the application software developer completes the application, upload the key certificate to the key management system, and add the application to the id account of the publishing time and the uploading key, and then upload and apply the application to each major website for the user to download;

S303-S308: The terminal manufacturer system acquires the key of the legal application already stored by the key management system when the terminal leaves the factory. And burning into the terminal, when detecting the new key of the key management system, making a differential upgrade package for the terminal to download and upgrade;

S309-S318: After the user downloads to an application, the mobile phone is installed. During the installation process, the system will search for the key of the security key partition based on the unique id number for verification. If the verification is successful, the system can be installed, and the prompt is formal software; The installation fails. The application publishing time is read. If the application is published in March 2015 and the database time of the key partition is April 2015, the user is prompted to be illegal and the installation fails. If the application is published in 2015. In September, the database time of the key partition is August 2015, prompting the user to network to perform differential upgrade of the security key partition. After the upgrade is successful, the signature verification is performed again. If the verification is successful, the security software is prompted. If the verification still fails, the illegal software is prompted and the installation fails. Prompt the user whether to install dangerous software. If yes, allow the user to install successfully and perform danger identification on the software icon.

Based on the embodiment of the present invention, the developer needs to follow the specification, create his own signature, sign the application, record the application and developer information to the third-party website, and upload the corresponding key to the third-party key management organization.

For the terminal side, when the user obtains an application through a certain channel, the application management method provided by the embodiment of the present invention includes: the user obtains the application through a certain channel; the user clicks to install the application; the terminal is installed. During the process, the security key partition of the mobile phone is searched, and the key signature verification is performed after the corresponding key is found. After the verification succeeds, the application is developed as a normal application development software, and the user can be installed normally. Otherwise, the user is prompted according to the application release time. Network upgrade upgrade security key partition, install again after upgrade, the verification is successful security software, the verification still fails, that is, dangerous software, it is recommended not to install, prompt the user whether to install dangerous software, if yes, allow users to install Success and risk identification on the software icon.

In summary, through the implementation of the embodiments of the present invention, at least the following beneficial effects exist:

The embodiment of the present invention provides a management method. After the user downloads an application, the terminal signs the private key in the application installation package based on the public key of the application key of the legal application stored in the terminal. Check whether the application is an application developed by a legitimate developer, verify the validity of the application, and manage the installation of the application according to the verification result. The legal application is directly installed, and the illegal application prompts the application as a dangerous application, and the problem is solved. The related terminal cannot verify the validity of the application, which enhances the user experience.

The above is only a specific embodiment of the present invention, and is not intended to limit the present invention in any way. Any simple modification, equivalent change, combination or modification of the above embodiments in accordance with the technical spirit of the present invention is still in the present invention. The scope of protection of the technical solution of the invention.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1. Obtain an application identifier of the application to be installed.

S2. Search for a public key of an application key corresponding to the application identifier in the key partition; the key partition is used to store a public key of the application key of the legal application;

S3, performing signature verification on the private key of the application to be installed according to the public key of the application key;

S4, managing the installation of the application to be installed according to the verification result.

Optionally, in this embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic disk. Or a variety of media such as optical discs that can store program code.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

In the embodiment of the present invention, after the user downloads the application, the terminal performs signature verification on the private key of the application based on the public key of the application key of the legal application stored in the terminal, and determines whether the application is An application developed by a legitimate developer to verify the validity of the application, and manage the installation of the application according to the verification result. The legal application is directly installed, and the illegal application prompts the application as a dangerous application, and the related terminal cannot be legally applied. The problem of verifying the sex enhances the user experience.

Claims

A management method for managing application installations, including:

Obtain an application identifier of the application to be installed;

Searching, in a key partition, a public key of an application key corresponding to the application identifier; the key partition is configured to store a public key of an application key of a legal application;

Performing signature verification on the private key of the application to be installed according to the public key of the application key;

The installation of the application to be installed is managed according to the verification result.
The management method according to claim 1, further comprising: if the public key of the application key corresponding to the application identifier is not found in the key partition, updating the key partition, or prompting the location Describe the installation application as a hazardous application.
The management method according to claim 1, further comprising: acquiring a key differential upgrade package periodically or in real time, and using the public key of the application key of all legal applications currently stored by the key partition, using the secret The key differential upgrade package updates the key partition.
The management method according to any one of claims 1 to 3, wherein the managing the installation of the to-be-installed application according to the verification result comprises: installing the to-be-installed when the verification result is that the verification is successful Application; when the verification result is a verification failure, the application to be installed is prompted to be a dangerous application.
The management method of claim 4, wherein before the prompting that the application to be installed is a dangerous application, the method further comprises: updating the key partition, and re-finding a public key of an application key corresponding to the application identifier, The signature verification is performed again. If the verification is successful, the application to be installed is installed. If the verification fails, the application to be installed is prompted to be a dangerous application.
The management method according to claim 5, wherein before updating the key partition, the method further comprises: comparing a last update time of the key partition with an uploading time of the to-be-installed application, if the update time When the upload time is earlier, the key partition is updated, and if the update time is later than the upload time, the key partition is not updated.
The management method according to claim 4, wherein after prompting the application to be installed as a dangerous application, the method further comprises: prompting whether to install the dangerous application, and if yes, installing the application to be installed and performing a dangerous identification.
A management method for managing application installations, including:

Receiving and storing a public key of an application key uploaded by an application developer, and feeding back, to the application developer, an application identifier corresponding to the application;

After receiving the key download request of the terminal manufacturer system, the stored public key of all application keys is sent to the terminal manufacturer system for the terminal manufacturer system to write the terminal key partition.
The management method according to claim 8, further comprising: when a new application key or an application key is changed When generated, a key differential upgrade package is generated and transmitted to the terminal vendor system and/or terminal.
A management method for managing application installations, including:

Sending a key download request to the key management system;

Receiving the public key of the application key returned by the key management system and writing the key partition of the terminal.
The management method according to claim 10, further comprising: generating a key differential upgrade package when receiving a new application key or an application key change, or receiving the secret sent by the key management system Key differential upgrade package; sending the key differential upgrade package to the terminal.
A management method for managing application installations, including:

The key management system receives and stores the public key of the application key uploaded by the application developer, and feeds back to the application developer the application identifier corresponding to the application;

The terminal manufacturer system sends a key download request to the key management system, receives the public key of the application key returned by the key management system, and writes the key partition of the terminal;

The terminal acquires an application identifier of the application to be installed, and searches for a key corresponding to the application identifier in the key partition; the key partition is used to store a public key of an application key of the legal application; according to the application key The public key performs signature verification on the private key of the application to be installed; and manages installation of the application to be installed according to the verification result.
A terminal comprising:

Obtaining a module, configured to obtain an application identifier of the application to be installed;

a search module, configured to search for a public key of an application key corresponding to the application identifier in a key partition; the key partition is configured to store a public key of an application key of a legal application;

a verification module, configured to perform signature verification on the private key of the application to be installed according to the public key of the application key;

The management module is configured to manage the installation of the to-be-installed application according to the verification result.
The terminal according to claim 13, wherein the searching module is further configured to update the key partition if a public key of an application key corresponding to the application identifier is not found in the key partition, Or suggesting that the application to be installed is a dangerous application.
The terminal according to claim 13, wherein the searching module is further configured to acquire a key differential upgrade package periodically or in real time, and utilize the public key of the application key of all legal applications currently stored by the key partition. The key differential upgrade package updates the key partition.
The terminal according to any one of claims 13 to 15, wherein the management module is configured to install the to-be-installed application when the verification result is that the verification is successful; when the verification result is a verification Upon failure, the application to be installed is prompted to be a dangerous application.
The terminal according to claim 16, wherein the finding module is further configured to update the key partition and re-look the application key corresponding to the application identifier before prompting the application to be installed as a dangerous application. If the verification succeeds, the application to be installed is installed, and if the verification fails, the application to be installed is prompted to be a dangerous application.
The terminal according to claim 17, wherein the searching module further sets, before updating the key partition, a comparison between a last update time of the key partition and an uploading time of the application to be installed, if When the update time is earlier than the upload time, the key partition is updated, and if the update time is later than the upload time, the key partition is not updated.
The terminal according to claim 16, wherein the management module is further configured to prompt whether to install the dangerous application after prompting the application to be installed to be illegal, and if yes, installing the application to be installed and performing dangerous identification .
A key management system comprising:

a storage module, configured to receive and store a public key of an application key uploaded by the application developer, and feed back, to the application developer, an application identifier corresponding to the application;

The issuing module is configured to: after receiving the key download request of the terminal manufacturer system, send the stored public key of all application keys to the terminal manufacturer system, where the terminal manufacturer system writes the terminal key partition .
The key management system according to claim 20, wherein said issuing module is further configured to generate and transmit a key differential upgrade package to said terminal manufacturer when a new application key or application key change is received System and / or terminal.
A terminal vendor system that includes:

a request module, configured to send a key download request to the key management system;

The writing module is configured to receive the public key of the application key returned by the key management system and write the key partition of the terminal.
The terminal manufacturer system of claim 22, wherein the writing module is further configured to generate a key differential upgrade package or receive the key management when a new application key or application key change is received The key differential upgrade package sent by the system; sending the key differential upgrade package to the terminal.
A management system for managing application installation, comprising: a key management system, a terminal manufacturer system, and a terminal; wherein

The key management system is configured to receive and store a public key of an application key uploaded by an application developer, and feed back, to the application developer, an application identifier corresponding to the application;

The terminal manufacturer system is configured to send a key download request to the key management system, receive a public key of an application key returned by the key management system, and write the key partition of the terminal;

The terminal is configured to obtain an application identifier of an application to be installed, and search for a key corresponding to the application identifier in a key partition; the key partition is configured to store a public key of an application key of a legal application; The public key of the application is used to perform signature verification on the private key of the application to be installed; and the installation of the application to be installed is managed according to the verification result.