| 基于数字证书的自有APP签名保护方案 |
| |
| 引用本文： | 刘璐,邱勤,王馨裕.基于数字证书的自有APP签名保护方案[J].电信工程技术与标准化,2016(12). |
| |
| 作者姓名： | 刘璐 邱勤 王馨裕 |
| |
| 作者单位： | 中国移动信息安全管理与运行中心,中国移动信息安全管理与运行中心,中国移动信息安全管理与运行中心 |
| |
| 摘 要： | 为应对移动应用(APP)盗版、仿冒、篡改风险,保证自有APP来源可信、内容完 整,本文提出了一套基于数字证书的APP签名保护与安全控制技术方案,实现了对 自有应用进行签名认证和全流程安全管控。该方案规范了自有APP的签名证书,明 确了正版标识；采用可信副署签名技术,加强代码保护,实现被篡改应用可识别可 追溯；通过中央监控平台,及时发现并限制异常应用,实现了APP的全流程实时安全管控。
|
| 关 键 词： | 移动应用 数字证书 全周期安全防护 版权保护 代码签名 |
| 收稿时间： | 2016/11/24 0:00:00 |
| 修稿时间： | 2016/11/24 0:00:00 |
An APP Security Protection Method based on Digital Certificate Signature verification |
| |
| Lu Liu,Qin Qiu and Xinyu Wang.An APP Security Protection Method based on Digital Certificate Signature verification[J].Telecom Engineering Technics and Standardization,2016(12). |
| |
| Authors: | Lu Liu Qin Qiu and Xinyu Wang |
| |
| Institution: | China Mobile Information Security Center,China Mobile Information Security Center,China Mobile Information Security Center |
| |
| Abstract: | In order to protect mobile app from piracy, imitation, manipulation and assure that the source of self-owned apps is trusted and the content is integrated and valid, we propose an app protection method based on digital certificate verification. We introduce an authorized digital certificate standard, and propose countersign technology to track manipulating source, and control the aberrant suspicious apps from running via the integrated security SDK and central monitoring platform. In the end, we realize an app protection and control system from app development step, to distribution step, to the final running course. |
| |
| Keywords: | mobile app igital certificate security protection for the whole cycle copyright protection code signing |
|
| 点击此处可从《电信工程技术与标准化》浏览原始摘要信息 |
| 点击此处可从《电信工程技术与标准化》下载免费的PDF全文 |
