WO2019079998A1

WO2019079998A1 - Method and terminal for managing and controlling permission of application, and pos terminal

Info

Publication number: WO2019079998A1
Application number: PCT/CN2017/107641
Authority: WO
Inventors: 彭波涛
Original assignee: 福建联迪商用设备有限公司
Priority date: 2017-10-25
Filing date: 2017-10-25
Publication date: 2019-05-02
Also published as: CN108064383A

Abstract

The present invention relates to the field of data processing, and in particular to a method and terminal for managing and controlling a permission of an application, and a POS terminal. By obtaining a permission file corresponding to an application, the permission file comprising information of an accessible interface of the application, packaging an original installation package corresponding to the application and the permission file to obtain a checked installation package, and performing a sign operation on the checked installation package to obtain a signed installation package, the present invention improves the legitimacy of a third-party application installed on a terminal.

Description

Management method, terminal and POS terminal of application authority

[0001] The present invention relates to the field of data processing, and in particular, to a method and a method for controlling application authority, a terminal, and a P

OS terminal.

Background technique

[0002] With the continuous integration of P0S terminals and Internet technologies, smart P0S (usually using the Android operating system) has become a very hot topic in the POS industry in recent years. Compared with traditional P0S, smart P0S has more business application scenarios, more participating roles, and more complex application types. In order to support the basic business functions of bank card receipt, smart POS terminals usually need to provide bank cards such as magnetic stripe card readers, contact IC card readers, contactless IC card readers, PIN pads, printers, etc. The various hardware device components required for payment, if the access rights to these components are not restricted, may be utilized by third-party applications, fake the fake transaction interface, implement phishing attacks, resulting in loss of the cardholder account.

[0003] At present, in order to ensure the security of the POS terminal, it is necessary for the commissioner to review the code of the third-party application that can run on the POS terminal without the financial transaction function, and check whether the third-party application contains an illegal call. The code of the external financial terminal connected to the POS terminal. Among them, the financial terminal refers to an external device that can read the user's bank card information. However, manual review of the code is cumbersome and prone to errors.

technical problem

The technical problem to be solved by the present invention is: How to improve the legitimacy of third-party applications installed on the terminal.

[0005] Technical solutions and benefits

[0006] The present invention provides a management method and a terminal for application authority, which have the beneficial effects of: configuring a permission file for carrying an information of an accessible interface for an application, and packaging the permission file with an original installation package of the application. The digital signature is performed so that the application only has access rights to the interfaces involved in the permission file during the running process, and the created permission package cannot be tamper with the permission file without being detected. Because even if the code of the application contains interface call code that is not related to business functions However, if the interface information is not included in the permissions file, the application cannot successfully access the interface. Therefore, different from the prior art, by manually checking whether the code containing the illegal calling specific interface in the application has low auditing efficiency and is prone to errors and omissions, the above-mentioned application authority control method and the terminal need not review the application code, and only need to By configuring the interface information that it is allowed to access, it can ensure that the application cannot call the interface unrelated to its business function through phishing code, etc., which not only improves the efficiency of checking the validity of the application, but also improves the legitimacy of the application.

[0007]

[0008] The present invention also provides a method for controlling application authority, including:

Obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the interface accessible by the application;

[0010] installing the application according to the signed installation package;

[0011] When the application issues a request to access a preset interface,

[0012] detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result; [0013] if the detection result is that the permission file does not exist, corresponding to the preset interface The information is denied to the application to access the preset interface; otherwise, the application is allowed to access the preset interface.

[0014] The present invention also provides a POS terminal including one or more second processors and a second memory, the second memory storing a program, and configured to be configured by the one or more second processors Perform the following steps:

[0015] obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the application accessible interface;

[0016] installing the application according to the signed installation package;

[0017] when the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

[0018] if the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed to access the The default interface.

[0019] The present invention also provides a management method for an application authority and a POS terminal, and the beneficial effects thereof are: PO The s terminal only installs the signed installation package containing the permission file, and accepts or rejects the application's request to access a specific interface according to the information of the accessible interface carried by the permission file. Since the rights file and the original installation package of the application are digitally signed as a whole, the permission file cannot be illegally falsified without being detected after the permission file is approved, so that the application installed on the POS terminal only It can call the interface related to its business function, and cannot call the interface unrelated to its business function through the phishing code, etc., which effectively avoids the interception of the user's electronic account information without being allowed, which improves the installation. The legitimacy of third-party applications on the POS terminal, and the security of the POS terminal.

Problem solution

Advantageous effects of the invention

Brief description of the drawing

DRAWINGS

1 is a flow chart of a specific implementation manner of a method for controlling and controlling application rights according to the present invention.

2 is a structural block diagram of a specific implementation manner of a management terminal for application authority according to the present invention.

[0022] FIG. 3 is a flow chart diagram of a specific implementation manner of a method for controlling and controlling application rights according to the present invention;

4 is a structural block diagram of a specific implementation manner of a POS terminal according to the present invention;

[0024] Description of the label:

[0025] 1. The first processor; 2. The first memory; 3. The second processor; 4. The second memory.

Detailed ways

Please refer to FIG. 1 and FIG. 4,

[0027] As shown in FIG. 1, the present invention provides a method for controlling application authority, including:

[0028] obtaining a rights file corresponding to the application; the rights file includes information of the application accessible interface; [0029] packaging the original installation package corresponding to the application and the permission file to obtain an audited installation package

[0030] signing the audited installation package to obtain a signed installation package.

[0031] Further, obtaining a permission file corresponding to the application, specifically:

[0032] obtaining a function list corresponding to the application;

[0033] obtaining a permission list corresponding to the function list;

[0034] generating a rights file corresponding to the application according to the permission list.

[0035] As can be seen from the above description, the application is assigned a corresponding authority according to the business function of the application claimed by the sender. This effectively prevents the application from performing operations that are not allowed by the user if the user is not aware of it.

[0036] Further, obtaining a permission list corresponding to the function list, specifically:

[0037] if the financial transaction function exists in the function list, generating the permission list according to the information of the financial terminal interface; the financial terminal includes a magnetic stripe card reader, a contact type IC card reader, and a non-contact type IC card reader and password keyboard.

[0038] It can be seen from the above description that the financial terminal is used to obtain the information of the electronic account of the user, and the privacy of the electronic account information is extremely high. The present invention is only provided that the application is configured with an accessible financial terminal interface, and the financial The terminal can be accessed by a third-party application installed on the terminal, which improves the privacy and security of the user information.

[0039] Further, the method further includes:

[0040] installing the application according to the signed installation package;

[0041] when the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

[0042] if the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed to access the The default interface.

[0043] It can be seen from the above description that the present invention accepts or rejects the application's request to access a specific interface according to the information of the accessible interface carried by the rights file, so that the application installed on the terminal can only invoke the interface related to its business function. It is not possible to call the industry with a phishing code, etc., unknown to the user. The function-independent interface improves the legitimacy of third-party applications installed on the terminal and the security of the terminal.

[0044] After the application is installed according to the signed installation package, the method further includes:

[0045] assigning a unique identifier to the application;

[0046] when the application issues a request to access a preset interface, obtaining a rights file corresponding to the application according to the unique identifier.

[0047] Further, installing the application according to the signed installation package is specifically:

Obtaining a digital signature corresponding to the signed installation package;

[0049] verifying the legality of the digital signature, and obtaining a verification result;

[0050] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0051] It can be seen from the above description that if the digital signature verification of the signed installation package fails, it indicates that the permission file is highly likely to be illegally tampered with. There is a risk in installing the application, and the application is installed only when the digital signature passes the legality verification. The program improves the security of installing third-party application terminals.

[0052]

As shown in FIG. 2, the present invention provides a management terminal for application authority, including one or more first processors 1 and a first memory 2, wherein the first memory 2 stores a program and is configured. The following steps are performed by the one or more first processors 1:

[0054] obtaining a rights file corresponding to the application; the rights file includes information that the application can access the interface;

[0055] packaging the original installation package corresponding to the application and the permission file to obtain an audited installation package

[0056] signing the audited installation package to obtain a signed installation package.

[0057] Further, obtaining a permission file corresponding to the application, specifically:

[0058] obtaining a function list corresponding to the application;

[0059] obtaining a permission list corresponding to the function list;

[0060] generating a rights file corresponding to the application according to the permission list.

[0061] Further, obtaining a permission list corresponding to the function list, specifically: [0062] if the financial transaction function exists in the function list, generating the permission list according to the information of the financial terminal interface; the financial terminal includes a magnetic stripe card reader, a contact IC card reader, and a non-contact type IC card reader and password keyboard.

[0063] Further, the method further includes:

[0064] installing the application according to the signed installation package;

[0065] when the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

[0066] if the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed to access the The default interface.

[0067] Further, after the application is installed according to the signed installation package, the method further includes:

[0068] assigning a unique identifier to the application;

[0069] when the application issues a request to access a preset interface, obtaining a rights file corresponding to the application according to the unique identifier.

[0070] Further, installing the application according to the signed installation package is specifically:

[0071] obtaining a digital signature corresponding to the signed installation package;

[0072] verifying the legality of the digital signature, and obtaining a verification result;

[0073] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0074]

[0075] As shown in FIG. 3, the present invention further provides a method for controlling application permission, including:

[0076] obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the application accessible interface;

[0077] installing the application according to the signed installation package;

[0078] when the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

[0079] if the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed to access the Preset Interface.

[0080] Further, installing the application according to the signed installation package is specifically:

Obtaining a digital signature corresponding to the signed installation package;

[0082] verifying the legality of the digital signature, and obtaining a verification result;

[0083] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0084] After the application is installed according to the signed installation package, the method further includes:

[0085] assigning a unique identifier to the application;

[0086] When the application issues a request to access the preset interface, the rights file corresponding to the application is obtained according to the unique identifier.

[0087] Further, the method further includes:

[0088] when the detection result is that the information corresponding to the preset interface does not exist in the permission file, the application is uninstalled.

[0089] It can be seen from the above description that when it is detected that a third-party application installed on the POS terminal wants to invoke an unauthorized interface, it indicates that the application program is likely to contain a phishing code. To ensure the security of the POS terminal, the uninstallation is performed. The application program improves the security of the POS terminal.

[0090]

As shown in FIG. 4, the present invention further provides a POS terminal, including one or more second processors 3 and a second memory 4, wherein the second memory 4 stores a program and is configured to be The one or more second processors 3 perform the following steps:

[0092] obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the application accessible interface;

[0093] installing the application according to the signed installation package;

[0094] when the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

[0095] if the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed to access the The default interface. [0096] Further, installing the application according to the signed installation package is specifically:

Obtaining a digital signature corresponding to the signed installation package;

[0098] verifying the legality of the digital signature, and obtaining a verification result;

[0099] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0100] Further, after the application is installed according to the signed installation package, the method further includes:

[0101] assigning a unique identifier to the application;

[0102] When the application issues a request to access the preset interface, the rights file corresponding to the application is obtained according to the unique identifier.

[0103] Further, the method further includes:

[0104] When the detection result is that the information corresponding to the preset interface does not exist in the permission file, the application is uninstalled.

[0105]

[0106] Embodiment 1 of the present invention is:

[0107] This embodiment provides a method for controlling and controlling application rights, including:

[0108] Sl, obtaining a rights file corresponding to the application; the rights file includes information of the application accessible interface. Specifically:

[0109] Sl l. Obtain a function list corresponding to the application.

[0110] S12. Obtain a permission list corresponding to the function list. Specifically, if the financial transaction function exists in the function list, the permission list is generated according to the information of the financial terminal interface; the financial terminal includes a magnetic stripe card reader, a contact IC card reader, and a contactless IC card reader and password keyboard.

[0111] For example, if the business function of a third-party application APP1 is document editing, it is not given access to the financial terminal, and the third-party application APP1 can only use the basic functions of the operating system. The service function of another third-party application APP2 is credit card payment, which gives it access to the financial terminal. The third-party application APP2 can call the standard interface of the operating system or the financial connection with the device running APP2. The interface provided by the terminal.

[0112] S13. Generate a rights file corresponding to the application according to the permission list.

[0113] Optionally, abstracting access rights of multiple devices into one permission string entry, which is convenient for separate management A third-party application access to different devices.

For example, access rights to multiple devices are defined as shown in the following table:

UI

9pop ['UOTSSTUlI9d'90TAJ9S90TA9p*SOd^UIS

[SZTOO] gqS3⁄43'UOTSSTUU9d'90TAJ9S90TA9 *SOd^UIS

[εζτοο] j

9UU3⁄40S'UOTSSTUU9d'90TAJ9S90TA9 *SOd^UIS

[moo]

[6TT00]

3⁄493⁄4 j3⁄4'UOTSSTUU9d'90TAJ9S90TA9 *SOd^UIS 翁31卿3⁄4非3⁄4^ [8Π00] [moo]

3⁄493⁄43I'UOTSSTUU9d'90TAJ9S90TA9 *SOd^UIS

[ 1100] [STTOO]

[εττοο] ^duTj'uoTSSTUXisd'QOTAjgsQOTAg 'sod^uis

[TTTOO]

[01100] Item ^ [60100]

[ΐ挲l 9L0l/Ll0Z l3/13d 8666Ζ.0/6Ϊ0Ζ OAV [00128] [00128] The right to use the second generation card device card reading function smartpos.deviceservice.permission.SAMV limit

[00130] Permission to use the buzzer device function smartpos.deviceservice.permission.Beeper

[00132] Calling the PBOC financial interaction process function smartpos.deviceservice.permission.PBOC

[00134] Calling permission to acquire terminal device information smartpos.deviceservice.permission.Device

Info

[00136] Permission to use serial device function smartpos.deviceservice.permission.SerialP

Ort

[00138] [00138] Permission to use the LED light device function smartpos.deviceservice.permission.Led

[0115] An example of the content of the rights file obtained according to the above access rights definition is as follows:

[0116] Examples of the contents of the file are as follows:

[0117] [Main]

[0118] Type = APK // indicates that the format of the APP is an APK;

[0119] Version = 3 // format version number of the permission description file, for example, 3 indicates the third version;

[0120] AccessableKapIds=00010001 II

You can expand other information you want to customize, such as AccessableKapIds, which is reserved for future use.

[0121] II can add the permissions of a device to be accessed below

[Uses-permis sion- 1 ] [0123] Name=smartpos.deviceservice.permission.Pinpad

[Uses-permission-2]

[0125] Name=smartpos.deviceservice.permission.MagReader

[Uses-permission-3]

[0127] Name: smartpos.deviceservice.permission.ICReader

[Uses-permission-4]

[0129] Name= smartpos.deviceservice.permission.RFReader

[Uses-permission-5]

[0131] Name= smartpos.deviceservice.permission.Printer

[Uses-permission-6]

[0133] Name= smartpos.deviceservice.permission.Scanner

[Uses-permission-7]

[0135] Name= smartpos.deviceservice.permission.CashBox

[Uses-permission-8]

[0137] Name= smartpos.deviceservice.permission.Modem

[Uses-permission-9]

[0139] Name= smartpos.deviceservice.permission.SAMV

[U ses-permis sion- 10]

[0141] Name= smartpos.deviceservice.permission.Beeper

[Uses-permis sion- 11 ]

[0143] Name= smartpos.deviceservice.permission.PBOC

[U ses-permis sion- 12]

[0145] Name= smartpos.deviceservice.permission.DeviceInfo.

[0146] S2, packaging the original installation package corresponding to the application and the permission file to obtain an audited installation package.

[0147] S3. Perform a signature operation on the audited installation package to obtain a signed installation package.

[0148] wherein, after confirming the accessible interface according to the service function of the application, the rights file and the original installation package are immediately packaged to obtain the audited installation package. And digitally sign the audited installation package to prevent it The permission file was illegally tampered with.

[0149] S4. Install the application according to the signed installation package. Specifically:

[0150] S41. Obtain a digital signature corresponding to the signed installation package.

[0151] S42. Verify the validity of the digital signature, and obtain a verification result.

[0152] S43. If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0153] S5. Assign a unique identifier to the application.

[0154] The unique identifier is the running ID of the application. When the application is in the running state, the operating system can obtain the running ID of the application, and obtain related information of the application according to the running ID.

[0155] S6, when the application sends a request for accessing the preset interface, acquiring a permission file corresponding to the application according to the unique identifier; detecting whether the preset file exists in the permission file The information corresponding to the interface is obtained.

[0156] For example, the application requests access to the ICReader device to read the information of the IC card, and if the permission file corresponding to the application does not exist, "Name=smartpos.deviceservice.permission.ICReader" is detected as the permission. There is no information corresponding to the preset interface in the file.

[0157] S7. If the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed. Access the preset interface.

[0158] Optionally, when the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is uninstalled.

[0159] Where, when detecting that a third-party application installed on the current terminal wants to invoke an unauthorized interface, it is highly likely that the application has a phishing code, and in order to ensure the security of the current terminal, the application is uninstalled. , improve the security of the current terminal.

[0160] It can be seen from the above description that the present embodiment abstracts and extracts the risk of the third-party application, reduces the focus of the control from the code of the entire third-party application to the authority of the third-party application, and narrows the scope of the control. Controlling the effect of the entire third-party application through the control authority; participating in the application signature process by the permission of the third-party application, thereby ensuring that the permission file is also part of the application signature, thereby ensuring that the permission is not illegally falsified. Because once the permission file has been tampered with, it is equal to the whole The signature of the application has been tampered with. After the application is downloaded to the terminal, it will be rejected due to the signature failure. Abstract the access rights of each device into a single permission string entry for easy management

[0161]

[0162] Embodiment 2 of the present invention is:

[0163] The embodiment provides a management terminal for application authority, including one or more first processors 1 and a first memory 2, the first memory 2 stores a program, and is configured to be configured by the one Or the plurality of first processors 1 perform the following steps:

[0164] Sl, obtaining a rights file corresponding to the application; the rights file includes information of the application accessible interface. Specifically:

[0165] Sl l. Obtain a function list corresponding to the application.

[0166] S12. Obtain a permission list corresponding to the function list. Specifically, if the financial transaction function exists in the function list, the permission list is generated according to the information of the financial terminal interface; the financial terminal includes a magnetic stripe card reader, a contact IC card reader, and a contactless IC card reader and password keyboard.

[0167] S13. Generate a rights file corresponding to the application according to the permission list.

[0168] Optionally, the access rights of the multiple devices are abstracted into one permission string entry, which is convenient for separately managing the access rights of a third-party application to different devices.

[0169] S2, packaging the original installation package corresponding to the application and the permission file to obtain an audited installation package.

[0170] S3. Perform a signature operation on the audited installation package to obtain a signed installation package.

[0171] wherein, after confirming the accessible interface according to the service function of the application, the rights file and the original installation package are immediately packaged to obtain the audited installation package. The digitally signed installation package is protected against unauthorized tampering.

[0172] S4. Install the application according to the signed installation package. Specifically:

[0173] S41. Acquire a digital signature corresponding to the signed installation package.

[0174] S42. Verify the validity of the digital signature, and obtain a verification result.

[0175] S43. If the verification result is that the digital signature is legal, the application is installed according to the signed installation package. [0176] S5. Assign a unique identifier to the application.

[0177] wherein the unique identifier is an operation ID of the application, and when the application is in a running state, the operating system may obtain a running ID of the application, and acquire related information of the application according to the running ID.

[0178] S6, when the application sends a request for accessing the preset interface, acquiring a permission file corresponding to the application according to the unique identifier; detecting whether the preset file exists with the preset The information corresponding to the interface is obtained.

[0179] S7. If the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed. Access the preset interface.

[0180] Optionally, when the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is uninstalled.

[0181] wherein, when detecting that the third-party application installed on the POS terminal wants to invoke an unauthorized interface, it indicates that the application program is highly likely to contain a phishing code. To ensure the security of the POS terminal, the application is uninstalled. , improve the security of the POS terminal.

[0182]

[0183] Embodiment 3 of the present invention is:

[0184] This embodiment provides a method for controlling application authority, including:

[0185] Sl, obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the application accessible interface.

[0186] wherein, after confirming the accessible interface according to the service function of the application, the rights file and the original installation package are immediately packaged to obtain the audited installation package. The digitally signed installation package is protected against unauthorized tampering. That is, the current terminal installs a third-party application by using the signed installation package whose access permission is approved and the permission file cannot be illegally tampered with, thereby ensuring the security of the current terminal.

[0187] S2. Install the application according to the signed installation package. Specifically:

Obtaining a digital signature corresponding to the signed installation package;

[0189] verifying the legality of the digital signature, and obtaining a verification result.

[0190] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package. [0191] wherein, if the digital signature of the signed installation package fails the legality verification, it indicates that the permission file is highly likely to be tampered with after being approved, and installing the third-party application is risky and refuses to install.

[0192] S3. Assign a unique identifier to the application.

[0193] wherein the unique identifier is an operation ID of the application, and when the application is in a running state, the operating system may obtain a running ID of the application, and acquire related information of the application according to the running ID.

[0194] S4, when the application sends a request for accessing the preset interface, acquiring a permission file corresponding to the application according to the unique identifier; detecting whether the preset file exists in the permission file The information corresponding to the interface is obtained.

[0195] For example, the application requests access to the ICReader device to read the information of the IC card, and if the permission file corresponding to the application does not exist, "Name=smartpos.deviceservice.permission.ICReader" is detected as the permission. There is no information corresponding to the preset interface in the file.

[0196] S5. If the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed. Access the preset interface.

[0197] S6. When the detection result is that the information corresponding to the preset interface does not exist in the permission file,

, uninstall the application.

[0198] wherein, when detecting that the third-party application installed on the current terminal wants to invoke an unauthorized interface, it indicates that the application program is highly likely to contain a phishing code, and the application is uninstalled in order to ensure the security of the current terminal. , improve the security of the current terminal.

[0199]

[0200] Embodiment 4 of the present invention is:

[0201] The embodiment provides a POS terminal, including one or more second processors 3 and a second memory 4, wherein the second memory 4 stores a program, and is configured to be configured by the one or more The second processor 3 performs the following steps:

[0202] Sl, obtaining a signed installation package; the signed installation package includes an original installation package of the application and a permission file carrying information of the application accessible interface.

[0203] wherein, after confirming the accessible interface according to the business function of the application, the rights file and the original installation package are immediately packaged to obtain the audited installation package. And digitally sign the audited installation package to prevent it The permission file was illegally tampered with. That is, the current terminal installs a third-party application by using a signed installation package whose access permission is audited and the permission file cannot be illegally tampered with, thereby ensuring the security of the current terminal.

[0204] S2. Install the application according to the signed installation package. Specifically:

Obtaining a digital signature corresponding to the signed installation package;

[0206] verifying the legality of the digital signature, and obtaining a verification result.

[0207] If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

[0208] Wherein, if the digital signature of the signed installation package fails the legality verification, it indicates that the permission file is highly likely to be tampered with after being approved, and installing the third-party application is risky and refuses to install.

[0209] S3. Assign a unique identifier to the application.

[0210] wherein the unique identifier is the running ID of the application, and when the application is in the running state, the operating system may obtain the running ID of the application, and obtain related information of the application according to the running ID.

[0211] S4, when the application sends a request for accessing the preset interface, acquiring a permission file corresponding to the application according to the unique identifier; detecting whether the preset file exists in the permission file The information corresponding to the interface is obtained.

[0212] S5. If the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is denied access to the preset interface; otherwise, the application is allowed. Access the preset interface.

[0213] S6. When the detection result is that the information corresponding to the preset interface does not exist in the permission file,

, uninstall the application.

[0214] wherein, when detecting that the third-party application installed on the POS terminal wants to invoke an unauthorized interface, it indicates that the application program is highly likely to contain a phishing code. To ensure the security of the POS terminal, the application is uninstalled. , improve the security of the POS terminal.

[0215]

[0216] In summary, the present invention provides an application permission management method, a terminal, and a POS terminal, by configuring a permission file for carrying an information of an accessible interface for an application, and authenticating the permission file and the application. The installation package is digitally signed after being packaged, so that the application only has the access rights of the interfaces involved in the permission file during the running process, and cannot generate the signed installation package after being undetected. In the case of tampering with the permissions file. The POS terminal only installs the signed installation package containing the permission file, and accepts or rejects the application's request to access a specific interface according to the information of the accessible interface carried by the permission file. Because even if the code of the application contains interface call code that is not related to the business function, the application cannot successfully access the interface if the interface information is not included in the permission file. Therefore, different from the prior art, by manually checking whether the code containing the illegal calling specific interface in the application has low auditing efficiency and is prone to errors and omissions, the above-mentioned application authority control method and the terminal need not review the application code, and only need to By configuring the interface information that it is allowed to access, it can ensure that the application cannot call the interface unrelated to its business function through phishing code, etc., which not only improves the efficiency of checking the validity of the application, but also improves the legitimacy of the application.

Claims

Claim

[Claim 1] A method for controlling the authority of an application program, comprising:

Obtaining a permission file corresponding to the application; the permission file includes information of the interface accessible by the application;

The original installation package corresponding to the application and the permission file are packaged to obtain an audited installation package;

Sign the audited installation package to get the signed installation package.

[Claim 2] The method for controlling the authority of an application according to claim 1, wherein the permission file corresponding to the application is obtained, specifically:

Obtaining a list of functions corresponding to the application;

Obtaining a permission list corresponding to the function list;

Generating a rights file corresponding to the application according to the permission list.

[Claim 3] The method for controlling the application authority according to claim 2, wherein the permission list corresponding to the function list is obtained, specifically:

If the financial transaction function exists in the function list, generating the permission list according to the information of the financial terminal interface; the financial terminal includes a magnetic stripe card reader, a contact IC card reader, and a non-contact IC card reading. Writer and password keyboard.

[Claim 4] The method for controlling the application authority according to claim 1, further comprising:

Installing the application according to the signed installation package;

When the application sends a request for accessing the preset interface, detecting whether the information corresponding to the preset interface exists in the permission file, and obtaining a detection result;

If the detection result is that the information corresponding to the preset interface does not exist in the permission file, the application is denied access to the preset interface; otherwise, the application is allowed to access the preset. Interface.

[Claim 5] The method for controlling the application authority according to claim 4, wherein after the application is installed according to the signed installation package, the method further includes:

Assigning a unique identifier to the application; When the application issues a request to access the preset interface, the permission file corresponding to the application is obtained according to the unique identifier.

The method for controlling the application authority according to claim 4, wherein the application is installed according to the signed installation package, specifically:

Obtaining a digital signature corresponding to the signed installation package;

Verifying the legality of the digital signature and obtaining the verification result;

If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

A management terminal for application authority, comprising: one or more first processors and a first memory, wherein the first memory stores a program and is configured to be processed by the one or more first Perform the following steps:

Sign the audited installation package to get the signed installation package.

The control terminal of the application authority according to claim 7, wherein the permission file corresponding to the application is obtained, specifically:

Obtaining a list of functions corresponding to the application;

Obtaining a permission list corresponding to the function list; and generating a rights file corresponding to the application according to the permission list.

The control terminal of the application authority according to claim 8, wherein the permission list corresponding to the function list is obtained, specifically:

The control terminal of the application authority according to claim 7, further comprising: Installing the application according to the signed installation package;

The control terminal of the application authority according to claim 10, wherein after the application is installed according to the signed installation package, the method further includes:

Assigning a unique identifier to the application;

When the application issues a request to access the preset interface, the rights file corresponding to the application is obtained according to the unique identifier.

The control terminal of the application authority according to claim 10, wherein the application is installed according to the signed installation package, specifically:

Obtaining a digital signature corresponding to the signed installation package;

A method for controlling application authority, characterized in that it comprises:

Installing the application according to the signed installation package;

The method for controlling the application authority according to claim 13, wherein the application is installed according to the signed installation package, specifically: Obtaining a digital signature corresponding to the signed installation package;

The method for controlling the application authority according to claim 13, wherein after the application is installed according to the signed installation package, the method further includes:

Assigning a unique identifier to the application;

The method for controlling the application authority according to claim 13, further comprising:

When the detection result is that the information corresponding to the preset interface does not exist in the rights file, the application is uninstalled.

A POS terminal, comprising: one or more second processors and a second memory, wherein the second memory stores a program and is configured to perform the following steps by the one or more second processors :

Installing the application according to the signed installation package;

The POS terminal according to claim 17, wherein the application is installed according to the signed installation package, specifically:

Obtaining a digital signature corresponding to the signed installation package;

Verifying the legality of the digital signature and obtaining the verification result; If the verification result is that the digital signature is legal, the application is installed according to the signed installation package.

The POS terminal according to claim 17, wherein after the application is installed according to the signed installation package, the method further includes:

Assigning a unique identifier to the application;

[Claim 20] The POS terminal according to claim 17, further comprising: