WO2019071828A1

WO2019071828A1 - Method for detecting secondary packaging of application installation package, storage medium, device, and system

Info

Publication number: WO2019071828A1
Application number: PCT/CN2017/117376
Authority: WO
Inventors: 周志刚; 陈少杰; 张文明
Original assignee: 武汉斗鱼网络科技有限公司
Priority date: 2017-10-10
Filing date: 2017-12-20
Publication date: 2019-04-18
Also published as: CN107809672A

Abstract

A method for detecting secondary packaging of an application installation package, relating to the field of information processing. The method comprises: write, in a video stream address authentication module file of a live broadcast APP, a function for obtaining a live broadcast APP signature (S1); when the live broadcast APP obtains a video stream address from a live broadcast server, obtain the live broadcast APP signature by means of the function, written in the video stream address authentication module file, for obtaining the signature, and then obtain a live broadcast APP signature value according to the live broadcast APP signature (S2); the live broadcast APP sends to the live broadcast server a video stream address request containing the live broadcast APP signature value (S3); the live broadcast server compares the live broadcast APP signature value stored therein with the live broadcast APP signature value in the video stream address request, if the two are the same, returns the video stream address to the live broadcast APP, and if the two are different, forbids the live broadcast APP to access the live broadcast server (S4). By means of the method, the security of user data can be effectively ensured.

Description

Method, storage medium, device and system for detecting application package secondary packaging

Technical field

The present invention relates to the field of information processing, and in particular, to a method, a storage medium, a device and a system for detecting secondary packaging of an application installation package.

Background technique

At present, with the increasing popularity of mobile devices, more and more mobile applications. More and more people tend to use the live app to watch the live broadcast, and the live APP is installed on the user device more and more. However, in the Android operating system platform, some illegal personnel or illegal industrial chains will be packaged twice for the live broadcast APP of the live broadcast platform, that is, malicious code or program implementation is implemented in the live APP installation package downloaded from the official channel. After the second package, the second packaged live APP installation package is placed on other websites or illegal application stores for users to download, and finally the live package APP after the second package is installed on the user's device, and then the live APP is Implanted malicious programs can achieve malicious deduction, advertising information, secretly download other APP programs installed to the user's mobile phone, peek and collect user privacy information, etc., greatly jeopardizing the security of user equipment, damaging users and broadcast manufacturers interest.

Summary of the invention

Aiming at the defects existing in the prior art, the object of the present invention is to provide a method for detecting the secondary packaging of an application installation package, which can effectively ensure the security of the data of the user and the live server.

In order to achieve the above object, the technical solution adopted by the present invention includes:

S1: writing a function for acquiring a direct-app signature in the video stream address authentication module file of the live APP;

S2: When the live broadcast APP obtains the video stream address from the live broadcast server, obtains the live APP signature by using the obtain signature function written in the video stream address authentication module file, and then obtains the live APP signature value according to the live APP signature;

S3: The live broadcast APP sends a video stream address request containing the live APP signature value to the live broadcast server;

S4: The live server compares the signature of the live APP stored by the live broadcast with the signature of the live APP in the video stream address request. If the same, the video stream address is returned to the live broadcast APP. If not, the live broadcast APP is prohibited. Access.

On the basis of the foregoing technical solution, when the live broadcast APP obtains the video stream address from the live broadcast server, the live broadcast APP sends the verification information to the live broadcast server, and the verification information includes the token value obtained by the live APP login to the live broadcast server, and the user requests to watch the live broadcast. The room number, the ID number of the device where the live APP is located, the random number obtained by the live APP login to the live server, the current system time of the device where the live APP is located, and the network IP address of the live APP.

On the basis of the foregoing technical solution, the live server uses the MD5 algorithm to generate a KEY value for all the values in the received verification information and the live APP signature value stored by the live server;

The live broadcast APP uses the MD5 algorithm to generate a KEY value for all the values in the verification information and the obtained live APP signature value, and sends the generated KEY value to the live server;

The live server compares the generated KEY value with the received KEY value. If they are the same, the video stream address is returned to the live broadcast application. If not, the live APP is prohibited from accessing the live broadcast server.

On the basis of the foregoing technical solution, each time the live broadcast APP initiates a video stream address request to the live server, it needs to send the live APP signature value to the live server for verification.

On the basis of the foregoing technical solution, the video stream address authentication module file of the live broadcast APP is written in C language or C++ language.

The present invention also provides a storage medium having stored thereon a computer program that, when executed by a processor, implements the method described above.

The present invention also provides an apparatus for detecting secondary packaging of an application installation package, comprising a memory and a processor, wherein the memory stores a computer program running on the processor, and the processor executes the computer program to implement the above-mentioned method.

The invention also provides a system for detecting secondary packaging of an application installation package, comprising:

a writing module, configured to write a function for acquiring a live APP signature in a video stream address authentication module file of the live APP;

An obtaining module, configured to obtain a live APP signature by using a get signature function written in a video stream address authentication module file, and obtain a live APP signature value according to the live APP signature, when the live broadcast APP obtains the video stream address from the live broadcast server;

a transmission module, configured to enable the live broadcast APP to send a video stream address request containing a live APP signature value to the live broadcast server;

a judging module, configured to enable the live broadcast server to compare the live APP signature value stored by the live broadcast server with the live APP signature value in the video stream address request, and if the same, return the video stream address to the live broadcast APP, if not, prohibiting Live APP access to the live server.

On the basis of the foregoing technical solution, when the live broadcast APP obtains the video stream address from the live broadcast server, the transmission module is further configured to send the verification information to the live broadcast server, where the verification information includes the token value obtained by the live APP login to the live broadcast server, The user requests to view the room number of the live broadcast room, the ID number of the device where the live APP is located, a random number obtained by the live APP login to the live server, the current system time of the device where the live APP is located, and the network IP address of the live APP.

Compared with the prior art, the present invention has the following advantages: the function for obtaining the signature of the live APP is written in the video stream address authentication module file of the live APP, and each time the live APP obtains the video stream address from the live server, The live broadcast APP signature value is added to the video stream address request, and the live server compares the signature value sent by the live broadcast application with the signature value of the live broadcast APP saved in the live server. If not, the live broadcast APP is prohibited. The access ensures that users download genuine live broadcast apps from official channels to effectively ensure the security of users and live server data.

DRAWINGS

1 is a flowchart of a method for detecting secondary packaging of an application installation package according to an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of an apparatus for detecting secondary packaging of an application installation package according to an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments.

Referring to FIG. 1 , an embodiment of the present invention provides a method for detecting a secondary package of an application installation package, which is applicable to an Android platform, and is used to detect whether a live broadcast APP is twice packaged, and prevents a live broadcast APP that is twice packaged. The access to the live server effectively guarantees the interests and privacy of the live broadcasters and users. The method for detecting the secondary packaging of the application installation package in the embodiment of the present invention specifically includes:

S1: Write a function for obtaining a live APP signature in the video stream address authentication module file of the live APP. In the Android system, the module file, that is, the SO file is a common file. The module file is often written in C language or C++ language, and is not easily analyzed by other illegal personnel, so its security is higher than the Java language. Here, the function of obtaining the signature of the live APP is written into the module file, which can increase the security of the function logic, that is, the video stream address authentication module file of the live APP is also written in C language or C++ language. In the live broadcast APP, there are a plurality of module files, such as a module file of a video decoding, a module file of a map, a module file of a network program, a module file of a beauty module, and the like. In the embodiment of the present invention, a live broadcast APP is obtained. The function of the signature is written into the module file of the video stream address authentication. When the live APP initiates a video stream address acquisition request to the live server, it is completed by the video stream address authentication module file.

S2: When the live broadcast APP obtains the video stream address from the live broadcast server, obtains the live APP signature by using the obtain signature function written in the video stream address authentication module file, and then obtains the live APP signature value according to the live APP signature. When the user uses a live broadcast APP to view a live broadcast room each time, the user needs to initiate a request for obtaining a video stream address to the live broadcast server. The process of obtaining a live APP signature by using the acquisition signature function written in the video stream address authentication module file is specifically:

S201: Obtain an information management object PackageManager of the live APP. The Android system provides a PackageManager management class, its main role is to manage the application package, through the PackageManager, you can get information about the application. For the acquisition of the information management object PackageManager, the corresponding code is:

jmethodIDpackageManagerMethod=(*env)->GetMethodID(env,contextObj,

"getPackageManager",

"()Landroid/content/pm/PackageManager;");

Then get the method of getPackageManager provided by Android system

jobjectpackageManagerObj=(*env)->CallObjectMethod(env,mContext,

packageManagerMethod);

Through this, get the specific packageManager object packageManagerObj, where packageManagerObj is the specific case of the management class object PackageManager of the live app that we need to obtain.

S102: The method for obtaining the detailed information of the live APP is getPackageInfo, and the corresponding implementation code is:

jmethodIDmethodID_pm=env->GetMethodID(pm_clazz,

"getPackageInfo",

"(Ljava/lang/String;I)Landroid/content/pm/PackageInfo;");

S103: Obtain a package name of the live APP, and the corresponding implementation code is:

jmethodIDmethodID_packagename

=env->GetMethodID(native_clazz,"getPackageName",

"()Ljava/lang/String;");

Jstringname_str=static_cast<jstring>(env->CallObjectMethod(thiz,methodID_packagename));

S104: Obtain the package information of the live APP, and the corresponding implementation code is:

Jobjectpackage_info=env->CallObjectMethod(package_manager,methodID_pm,name_str,64);//env->NewStringUTF("com.example.contasdf")

S105: Obtain the PackageInfo class of the package information class, and the corresponding implementation code is:

Jclasspi_clazz=env->GetObjectClass(package_info);

S106: Obtain a signature attribute ID of the live APP, and the corresponding implementation code is:

jfieldIDfieldID_signatures=env->GetFieldID(pi_clazz,

"signatures","[Landroid/content/pm/Signature;");

S107: Obtain a signature object of the live APP, and the corresponding implementation code is:

Jobjectsignatur=env->GetObjectField(package_info,fieldID_signatures);

JobjectArray signatures=reinterpret_cast<jobjectArray>(signatur);

Jobjectsignature_obj=env->GetObjectArrayElement(signatures,0);

Among them, signature_obj is the signature object of the live APP that needs to be acquired.

S108: Obtain a string of the signature of the live APP, and the corresponding implementation code is: jclasssignature_clazz=env->GetObjectClass(signature_obj);

Then get the signed class, the corresponding implementation code is:

jmethodIDstring_id=env->GetMethodID(signature_clazz,"toCharsString","()Ljava/lang/String;");

Then convert the obtained class into a string, the corresponding implementation code is:

Jstringstr=static_cast<jstring>(env->CallObjectMethod(signature_obj,string_id));

Char*csignature=(char*)env->GetStringUTFChars(str,0);

Finally, the signature object is converted into the final signature string csignature.

At this point, the live APP signature is obtained, and the live APP signature value is obtained according to the live APP signature.

S3: The live broadcast APP sends a video stream address request containing the live APP signature value to the live broadcast server. That is, the video stream address request sent by the live APP to the live server contains the obtained live APP signature value information.

S4: The live server compares the stored live APP signature value with the live APP signature value in the video stream address request. If the same, it indicates that the current live APP installation package has not been packaged twice, and the live server returns the video. If the current address of the current live APP is packaged twice, the live broadcast APP is forbidden to access the live broadcast server. In this case, the user can also recognize that the live broadcast APP is currently used. Officially, it has been forbidden to be accessed by the live server, and then the user uninstalls it and goes to the official channel to download the genuine live broadcast app, which effectively guarantees the security of the user data and ensures the reputation of the live broadcast manufacturer.

After the live broadcast APP is developed, the live server signature value will be saved in the live broadcast server, and the signature value of the live broadcast APP after being double packaged will be changed. According to the live broadcast server, the live broadcast APP signature value can be The live APP signature values stored by the user are compared to determine whether the live APP is packaged twice.

Each time the live broadcast APP initiates a video stream address request to the live server, it needs to send the live APP signature value to the live server for verification. That is, for the live APP signature value to be sent with the video stream address request, multiple verifications are performed, which effectively ensures that the live APP used by the user is not twice packaged.

In an embodiment, when the live broadcast APP obtains the video stream address from the live broadcast server, the live broadcast APP sends the verification information to the live broadcast server, and the verification information includes the token value (login token) obtained by the live APP login to the live broadcast server, and the user request. View the room number of the live room, the ID number of the device where the live APP is located, the random number obtained by the live APP login to the live server, the current system time of the device where the live APP is located, and the network IP address of the live APP, that is, the broadcast APP is sent to the live server. The video stream address request includes the above verification information, and then the live server uses MD5 (Message-Digest Algorithm 5) algorithm for all the values in the received verification information and the live APP signature value stored by the live server itself. The splicing generates a KEY value (key). The live APP applies all the values in the verification information and the obtained live APP signature value to generate a KEY value by using the MD5 algorithm, and sends the generated KEY value to the live server, and the live server will itself The generated KEY value is compared with the received KEY value. If they are the same, the video is returned. APP address to live, if not identical, is prohibited APP live access to the live server.

For the calculation of the KEY value using the MD5 algorithm, specifically:

Video_Key=MD5.CreateMd5(Token+room number+device ID number+random number+Time+IP+csignature);

Among them, Video_Key is the calculated KEY value, csignature is the live APP signature value, Time is the current system time of the device where the live APP is located, and IP is the network IP address of the live APP.

For the verification of the secondary package for the live broadcast application, the signature value and the verification information of the live broadcast APP are jointly verified by the KEY value generated by the MD5 algorithm, and the token value is used as a part of the calculation of the KEY value to ensure that the user must log in before pulling. The video stream address enhances the verification threshold and ensures the accuracy of verification. After the token is applied to the live broadcast server, the live broadcast server returns the identifier of the live broadcast, that is, a long string. The live broadcast APP must first log in to the live broadcast server to obtain the token value. The verification process.

The principle of the method for detecting the secondary package of the application installation package of the present invention is that the function for acquiring the signature of the live APP is written in the video stream address authentication module file of the live APP, and the acquisition function is written into the core module to prevent The illegal personnel can reverse the analysis of the signature of the live APP and crack the function. Each time the live APP obtains the video stream address from the live server, the signature of the obtained live APP is added to the video stream address request, and the live server sends the live APP. The signature value is compared with the signature value of the live APP saved in the live server. According to this, whether the live APP is sub-packaged is determined. If the same, the video stream address is returned to the live APP. If not, the live APP is prohibited. The access to the live server prompts the user to uninstall the live package that is packaged twice, because the live package that is packaged twice cannot be used normally, which is equivalent to reminding the user to download the genuine live APP from the official channel to effectively guarantee the user. And the security of the live server data.

In addition, in accordance with the method for detecting the secondary packaging of the application installation package, the present invention further provides a storage medium on which a computer program is stored, and when the computer program is executed by the processor, the detection application installation package described in each embodiment is implemented. The steps of the method of secondary packaging. It should be noted that the storage medium includes a U disk, a mobile hard disk, a ROM (Read-Only Memory), a RAM (Random Access Memory), a magnetic disk, or an optical disk, and the like. The medium of the code.

As shown in FIG. 2, in accordance with the method for detecting the secondary packaging of the application installation package, the present invention further provides a device for detecting secondary packaging of an application installation package, including a memory and a processor, where the memory is stored and stored on the processor. The computer program, when the processor executes the computer program, implements the method of detecting the second package of the application installation package of each of the above embodiments.

The embodiment of the invention further provides a system for detecting the secondary packaging of the application installation package based on the method for detecting the secondary packaging of the application installation package, comprising a writing module, an obtaining module, a transmitting module and a judging module.

The writing module is configured to write a function for acquiring a live APP signature in a video stream address authentication module file of the live application; the obtaining module is configured to use the video stream address to authenticate when the live APP obtains the video stream address from the live server. The acquisition signature function written in the module file obtains the live APP signature, and then obtains the live APP signature value according to the live APP signature; the transmission module is configured to enable the live broadcast APP to send the video stream address request containing the live APP signature value to the live broadcast server; The live broadcast server compares the live APP signature value stored by the live broadcast server with the live APP signature value in the video stream address request. If the same, the video stream address is returned to the live broadcast APP. If not, the live broadcast APP is prohibited from being broadcasted. Server access.

When the live broadcast APP obtains the video stream address from the live broadcast server, the transmission module is further configured to send the verification information to the live broadcast server, where the verification information includes a token value obtained by the live APP login to the live broadcast server, and the user requests to view the room number of the live broadcast room. ID of the device where the live APP is located, a random number obtained by the live APP login to the live server, the current system time of the device where the live APP is located, and the network IP address of the live APP. Each time the live broadcast APP initiates a video stream address request to the live server, it needs to send the live APP signature value to the live server for verification.

The principle of the system for detecting the secondary packaging of the application installation package in the embodiment of the present invention is that the writing module writes the function for acquiring the signature of the live APP in the video stream address authentication module file of the live APP, each time when the live APP is When the live stream server obtains the video stream address, it adds the obtained live APP signature value to the video stream address request, and the live broadcast server compares the signature value sent by the live broadcast application with the signature value of the live broadcast APP saved in the live broadcast server. On the basis of this, it is determined whether the live broadcast APP is sub-packaged. If the same, the video stream address is returned to the live broadcast application. If not, the live broadcast APP is prohibited from accessing the live broadcast server, thereby effectively ensuring the security of the user and the live broadcast server. .

The present invention is not limited to the above embodiments, and those skilled in the art can also make several improvements and retouchings without departing from the principles of the present invention. These improvements and retouchings are also considered as protection of the present invention. Within the scope. The contents not described in detail in the present specification belong to the prior art well known to those skilled in the art.

Claims

A method for detecting the secondary packaging of an application installation package is applicable to the Android platform, and is characterized in that:

S1: a function for obtaining a live APP signature is written in a video stream address authentication module file of the live APP;

S2: When the live broadcast APP obtains the video stream address from the live broadcast server, obtains the live APP signature by using the obtain signature function written in the video stream address authentication module file, and then obtains the live APP signature value according to the live APP signature;

S3: The live broadcast APP sends a video stream address request containing the live APP signature value to the live broadcast server;

S4: The live server compares the signature of the live APP stored by the live broadcast with the signature of the live APP in the video stream address request. If the same, the video stream address is returned to the live broadcast APP. If not, the live broadcast APP is prohibited. Access.
The method for detecting the secondary packaging of the application installation package according to claim 1, wherein when the live broadcast APP obtains the video stream address from the live broadcast server, the live broadcast APP sends the verification information to the live broadcast server, and the verification information is sent. The token value obtained by the live APP login to the live server, the user's request to view the room number of the live broadcast room, the ID number of the device where the live APP is located, the random number obtained by the live APP login to the live server, the current system time of the device where the live APP is located, and the live APP. Network IP address.
A method for detecting secondary packaging of an application installation package according to claim 2, wherein:

The live server uses the MD5 algorithm to generate a KEY value for all the values in the received verification information and the live APP signature value stored by the live server.

The live broadcast APP uses the MD5 algorithm to generate a KEY value for all the values in the verification information and the obtained live APP signature value, and sends the generated KEY value to the live server;

The live server compares the generated KEY value with the received KEY value. If they are the same, the video stream address is returned to the live broadcast application. If not, the live APP is prohibited from accessing the live broadcast server.
The method for detecting the secondary packaging of an application installation package according to claim 1, wherein each time the live broadcast APP initiates a video stream address request to the live server, the live APP signature value needs to be sent to the live server for verification.
The method for detecting the secondary packaging of an application installation package according to claim 1, wherein the video stream address authentication module file of the live APP is written in C language or C++ language.
A storage medium having stored thereon a computer program, wherein the computer program is executed by a processor to implement the method of any one of claims 1 to 5.
An apparatus for detecting secondary packaging of an application installation package, comprising a memory and a processor, wherein the memory stores a computer program running on the processor, wherein the processor executes the computer program to implement claim 1 The method of any of the preceding claims.
A system for detecting secondary packaging of an application installation package, characterized in that:

a writing module, configured to write a function for acquiring a live APP signature in a video stream address authentication module file of the live APP;

An obtaining module, configured to obtain a live APP signature by using a get signature function written in a video stream address authentication module file, and obtain a live APP signature value according to the live APP signature, when the live broadcast APP obtains the video stream address from the live broadcast server;

a transmission module, configured to enable the live broadcast APP to send a video stream address request containing a live APP signature value to the live broadcast server;

a judging module, configured to enable the live broadcast server to compare the live APP signature value stored by the live broadcast server with the live APP signature value in the video stream address request, and if the same, return the video stream address to the live broadcast APP, if not, prohibiting Live APP access to the live server.
The system for detecting the secondary packaging of the application installation package according to claim 8, wherein the transmission module is further configured to send the verification information to the live broadcast server when the live broadcast APP obtains the video stream address from the live broadcast server. The verification information includes a token value obtained by the live APP login to the live server, a room number requested by the user to view the live broadcast, an ID number of the device where the live APP is located, a random number obtained by the live APP login to the live server, and a current system of the device where the live APP is located. Time and network IP address of the live app.
The system for detecting the secondary packaging of the application installation package according to claim 8, wherein each time the live broadcast APP initiates a video stream address request to the live server, the live APP signature value needs to be sent to the live server for verification.