CN110058871A - Method and system for detecting illegal decompilation of program and updating formal version - Google Patents
Method and system for detecting illegal decompilation of program and updating formal version Download PDFInfo
- Publication number
- CN110058871A CN110058871A CN201910327650.XA CN201910327650A CN110058871A CN 110058871 A CN110058871 A CN 110058871A CN 201910327650 A CN201910327650 A CN 201910327650A CN 110058871 A CN110058871 A CN 110058871A
- Authority
- CN
- China
- Prior art keywords
- program
- illegal
- verification
- updating
- unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 43
- 238000012795 verification Methods 0.000 claims abstract description 43
- 238000001514 detection method Methods 0.000 claims description 12
- 238000010977 unit operation Methods 0.000 claims description 2
- 238000012360 testing method Methods 0.000 claims 2
- 230000009191 jumping Effects 0.000 claims 1
- 230000008447 perception Effects 0.000 abstract description 2
- 244000062793 Sorghum vulgare Species 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 235000019713 millet Nutrition 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/36—Prevention of errors by analysis, debugging or testing of software
- G06F11/3604—Analysis of software for verifying properties of programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Quality & Reliability (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The invention discloses a method and a system for detecting illegal decompilation of a program and updating a formal version.A client acquires an md5 value of a current program according to a current package name; the client side splices URL through a package name, a channel number and a software version number to request background data; background check md 5; if the verification is successful, ending; otherwise, the client downloads the latest program and unloads the current illegal program. The invention can unload and update the latest version under the user perception condition, ensures that the user uses the latest and legal internet program, and reduces the circulation rate of illegal programs.
Description
Technical field
The present invention relates to mobile Internet field, specially a kind of detection illegal decompiling of program and update official release
Method and system.
Background technique
As decompiling method, tool are more and more on the market, it is ensured that user uses program stability, issues the complete of software
Whole property is a problem to be solved.The prior art does not judge procedural legality before software upgrading, not can guarantee program
Legitimacy, stability and the integrality for issuing software, cause illegal program flow rate high, the legitimate rights and interests of developer cannot get
It ensures.
Summary of the invention
The present invention is intended to provide the method and system of a kind of detection illegal decompiling of program and update official release, in user
It unloaded in the case of perception, update latest edition, guaranteed that user uses newest, legal internet program, reduce illegal program
Flow rate.
In order to solve the above technical problems, the technical scheme adopted by the invention is that: a kind of illegal decompiling of detection program and
Update the method for official release, comprising the following steps:
1) client obtains the md5 value of present procedure according to current packet name；
2) client splices URL by packet name, channel number, software version number, requests back-end data；
3) backstage verifies the md5 value of present procedure；If verifying successfully, terminate；Otherwise, client downloads recent program,
Unload current illegal program.
The specific implementation process of step 3) includes:
Judge backstage whether returning response data, if it is not, then terminating；If so, whether only to judge the md5 value of present procedure
One and legal, if legal, then terminate, if it is illegal, then judges whether to pop up illegal program dialog box, if pop-up, client
Recent program is downloaded, current illegal program is unloaded, if not popping up, terminates.
The specific implementation process of verification md5 includes: from the background
Md5 is verified according to key and splices verification successful data if verifying successfully, is terminated；If verification failure, record verification
Verification data are sent to client from the background, terminated by failure information.Key of the invention is the combination of version number Yu channel number.
When verification failure, warning message is sent to developer from the background.
The method of the md5 value of backstage verification present procedure are as follows: backstage judges that the md5 value of present procedure whether there is in backstage
In statistics storage record, if so, verifying successfully；Otherwise, verification failure.
By the above process, it may determine that the legitimacy of program from the background, and then can be with real time modifying logic business, release
It is at high cost in client modification after this, it needs to upgrade, run, and it is at low cost modifying from the background.
Correspondingly, the present invention also provides the system of a kind of detection illegal decompiling of program and update official release, packets
It includes:
Client passes through packet name, channel number, software version number for obtaining the md5 value of present procedure according to current packet name
Splice URL, requests back-end data；And recent program is downloaded in backstage verification failure, unload current illegal program；
From the background, for verifying md5, and client downloads recent program is notified when verifying failure, unload current illegal journey
Sequence.
The client includes:
Acquisition unit, for obtaining the md5 value of present procedure according to current packet name；
Concatenation unit requests back-end data for splicing URL by packet name, channel number, software version number；
Unloading unit unloads current illegal program for downloading recent program in backstage verification failure.
The unloading unit includes:
First judging unit, for judge backstage whether returning response data, if so, execution second judgment unit behaviour
Make；Otherwise, terminate；
Second judgment unit, for judging whether response data is unique and legal, if so, executing third judging unit
Operation；Otherwise, terminate；
Third judging unit pops up illegal program dialog box for judging whether, if so, downloading interface is jumped to, and
Unload current illegal program；Otherwise, terminate.
The backstage includes:
Verification unit, for verifying md5 according to key；
First concatenation unit, for the splicing verification successful data in verification unit back-checking successful information；
Recording unit, for the record verification failure information in verification unit back-checking failure information；
Second concatenation unit, for verification data to be sent to client when verifying failure.
The verification unit whether there is according to the md5 value that key inquires present procedure to be counted in storage record in backstage, if
It is then to verify success；Otherwise, verification failure.
Compared with prior art, the advantageous effect of present invention is that: the present invention can in the case that user perceive unload
It carries, update latest edition, guarantee that user uses newest, legal internet program, reduce illegal program flow rate, ensure
The legitimate rights and interests of developer.
Detailed description of the invention
Fig. 1 is client process flow figure of the present invention.
Fig. 2 is background process flow chart of the present invention.
Specific embodiment
The purpose of the present invention is before software upgrading, the legitimacy of proving program, the verification process will solve following ask
Topic:
How problem one judges to issue internet program uniqueness；
Problem two issues verification policy content, statistics verification failure channel number, version number from the background；
Backstage unloads, updates recent software when problem three, mobile Internet verification failure.
Correspondence problem one, the present invention obtain current md5, channel number, version number splicing URL, request when passing through startup program
Backstage returning response data；The backstage channel number that counts on, version number before judges present procedure md5 with the presence or absence of in rear
In platform statistics storage record, then verification passes through if it exists；Otherwise it verifies and does not pass through.
For problem two, from the background according to the released version channel number of statistics, version number, md5 checking routine legitimacy；From the background
Back-checking as a result, issue verification strategy (such as, if only whether prompt user or prompts to use without downloading upgrade procedure
Simultaneously force more new procedures in family, if show verification failure official documents and correspondence)；If verifying the current channel number of failure record, software version number etc.
Information, and alarm mail is sent to developer.
For problem three, when verification fails and issues check results, mobile client downloads recent program, and backstage unloads
Current illegal program.
Table one
Table two
Mobile Internet client starts thread at runtime, and current version number, channel number, operation program are obtained in thread
Md5 is spliced into URL (uniform resource locator) request back-end data such as one information of table, (soft according to the key of solicited message from the background
Part version number, channel number) obtain inside statistics library md5 (Message Digest 5, Message-Digest Algorithm, one
The Cryptographic Hash Function that kind is widely used), judge whether current request md5 content and statistics library are identical, the school if not identical
Failure is tested, backstage records the information such as version number, the channel number of current request, mails to developer and customer in response end such as table
Two information；Client is according to issuing data pop-up dialog box, whether download that recent program, whether to unload current decompiling illegally soft
Part.
For example, millet, three magnitude tool software, when having third company's mountain vallage, only by program decompiling and name is modified
It is just online, lead to the program circulate of mountain vallage, using method of the invention, developer can be notified to have third company's mountain vallage, and its is soft
Part, and inform that user unloads the mountain vallage software.
Claims (10)
1. a kind of detection illegal decompiling of program and the method for updating official release, which comprises the following steps:
1) client obtains the md5 value of present procedure according to current packet name；
2) client splices URL by packet name, channel number, software version number, requests back-end data；
3) backstage verifies the md5 value of present procedure；If verifying successfully, terminate；Otherwise, client downloads recent program, unloading
Current illegal program.
2. the detection illegal decompiling of program according to claim 1 and the method for updating official release, which is characterized in that step
Rapid specific implementation process 3) includes:
Judge backstage whether returning response data, if it is not, then terminating；If so, judge the md5 value of present procedure it is whether unique and
It is legal, if legal, then terminate, if it is illegal, then judges whether to pop up illegal program dialog box, if pop-up, client downloads
Recent program unloads current illegal program, if not popping up, terminates.
3. the detection illegal decompiling of program according to claim 1 and the method for updating official release, which is characterized in that after
Platform verification md5 specific implementation process include:
Md5 is verified according to key and splices verification successful data if verifying successfully, is terminated；If verification failure, record verification failure
Verification data are sent to client from the background, terminated by information.
4. the detection illegal decompiling of program according to claim 3 and the method for updating official release, which is characterized in that school
When testing unsuccessfully, warning message is sent to developer from the background.
5. the illegal decompiling of detection program described according to claim 1~one of 4 and the method for updating official release, feature
It is, the method that backstage verifies the md5 value of present procedure are as follows: backstage judges that the md5 value of present procedure whether there is and unites in backstage
In meter storage record, if so, verifying successfully；Otherwise, verification failure.
6. a kind of detection illegal decompiling of program and the system for updating official release characterized by comprising
Client is spliced for obtaining the md5 value of present procedure according to current packet name by packet name, channel number, software version number
URL requests back-end data；And recent program is downloaded in backstage verification failure, unload current illegal program；
From the background, for verifying md5, and client downloads recent program is notified when verifying failure, unload current illegal program.
7. the detection illegal decompiling of program according to claim 6 and the system for updating official release, which is characterized in that institute
Stating client includes:
Acquisition unit, for obtaining the md5 value of present procedure according to current packet name；
Concatenation unit requests back-end data for splicing URL by packet name, channel number, software version number；
Unloading unit unloads current illegal program for downloading recent program in backstage verification failure.
8. the detection illegal decompiling of program according to claim 7 and the system for updating official release, which is characterized in that institute
Stating unloading unit includes:
First judging unit, for judge backstage whether returning response data, if so, execution second judgment unit operation；
Otherwise, terminate；
Second judgment unit, for judging whether response data is unique and legal, if so, executing the behaviour of third judging unit
Make；Otherwise, terminate；
Third judging unit pops up illegal program dialog box for judging whether, if so, jumping to downloading interface, and unloads
Current illegal program；Otherwise, terminate.
9. the detection illegal decompiling of program according to claim 6 and the system for updating official release, which is characterized in that institute
Stating backstage includes:
Verification unit, for verifying md5 according to key；
First concatenation unit, for the splicing verification successful data in verification unit back-checking successful information；
Recording unit, for the record verification failure information in verification unit back-checking failure information；
Second concatenation unit, for verification data to be sent to client when verifying failure.
10. the detection illegal decompiling of program according to claim 9 and the system for updating official release, which is characterized in that
The verification unit whether there is according to the md5 value that key inquires present procedure to be counted in storage record in backstage, if so, school
Test success；Otherwise, verification failure.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910327650.XA CN110058871A (en) | 2019-04-23 | 2019-04-23 | Method and system for detecting illegal decompilation of program and updating formal version |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910327650.XA CN110058871A (en) | 2019-04-23 | 2019-04-23 | Method and system for detecting illegal decompilation of program and updating formal version |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110058871A true CN110058871A (en) | 2019-07-26 |
Family
ID=67320182
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910327650.XA Pending CN110058871A (en) | 2019-04-23 | 2019-04-23 | Method and system for detecting illegal decompilation of program and updating formal version |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110058871A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112948254A (en) * | 2021-03-17 | 2021-06-11 | 深圳市腾讯信息技术有限公司 | Channel package detection method, device, equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103632096A (en) * | 2013-11-29 | 2014-03-12 | 北京奇虎科技有限公司 | Method and device for carrying out safety detection on equipment |
| WO2014169631A1 (en) * | 2013-08-30 | 2014-10-23 | 中兴通讯股份有限公司 | Method and device for monitoring and warning application exception |
| CN104317599A (en) * | 2014-10-30 | 2015-01-28 | 北京奇虎科技有限公司 | Method and device for detecting whether installation package is packaged repeatedly or not |
| CN105488361A (en) * | 2015-11-20 | 2016-04-13 | 北京奇虎科技有限公司 | Pirate application detection method, device and system |
| CN108737101A (en) * | 2017-04-25 | 2018-11-02 | 中国移动通信有限公司研究院 | A kind of verification method of application program, device and cloud server |
-
2019
- 2019-04-23 CN CN201910327650.XA patent/CN110058871A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2014169631A1 (en) * | 2013-08-30 | 2014-10-23 | 中兴通讯股份有限公司 | Method and device for monitoring and warning application exception |
| CN103632096A (en) * | 2013-11-29 | 2014-03-12 | 北京奇虎科技有限公司 | Method and device for carrying out safety detection on equipment |
| CN104317599A (en) * | 2014-10-30 | 2015-01-28 | 北京奇虎科技有限公司 | Method and device for detecting whether installation package is packaged repeatedly or not |
| CN105488361A (en) * | 2015-11-20 | 2016-04-13 | 北京奇虎科技有限公司 | Pirate application detection method, device and system |
| CN108737101A (en) * | 2017-04-25 | 2018-11-02 | 中国移动通信有限公司研究院 | A kind of verification method of application program, device and cloud server |
Non-Patent Citations (2)
| Title |
|---|
| 王浩宇等: "基于代码克隆检测技术的Android应用重打包检测", 《中国科学:信息科学》 * |
| 胡志勇等: "一种基于版权保护的安全保障平台", 《信息通信》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112948254A (en) * | 2021-03-17 | 2021-06-11 | 深圳市腾讯信息技术有限公司 | Channel package detection method, device, equipment and storage medium |
| CN112948254B (en) * | 2021-03-17 | 2024-04-12 | 深圳市腾讯信息技术有限公司 | Channel package detection method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| USRE48001E1 (en) | Safe application distribution and execution in a wireless environment | |
| KR100932807B1 (en) | Run test enabled applications | |
| US7490352B2 (en) | Systems and methods for verifying trust of executable files | |
| US11204999B1 (en) | Method and apparatus of performing data executable integrity verification | |
| US20060236122A1 (en) | Secure boot | |
| US9038057B2 (en) | Method for replacing an illegitimate copy of a software program with a legitimate copy and corresponding system | |
| CN106355081A (en) | Android program start verification method and device | |
| CN102043649A (en) | Plug-in downloading control method and plug-in downloading control system | |
| CN103595774A (en) | System application uninstalling method and device with terminal based on server side | |
| CN106709281B (en) | Patch granting and acquisition methods, device | |
| CN110058871A (en) | Method and system for detecting illegal decompilation of program and updating formal version | |
| Zhauniarovich et al. | Enabling trusted stores for android | |
| CN109657454A (en) | A kind of Android application trust authentication method based on TF crypto module | |
| CN116594803B (en) | MacOS repairing method and device based on processing chip and related medium | |
| US8775822B2 (en) | Computer-implemented method and system for protecting a software installation after certification | |
| CN106485139A (en) | A kind of safe verification method of application program | |
| CN110581833A (en) | A business security protection method and device | |
| CN104426894B (en) | A kind of register method of terminal applies, business platform equipment and terminal | |
| CN114629658A (en) | An application signature method, device, device and storage medium | |
| CN119127255A (en) | Firmware upgrade method, device, electronic device and storage medium for embedded device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190726 |