# US 2019/0318078 A1 · Application security authentication method, terminal and storage medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0318078 A1 - Document ID: US20190318078A1 - Status: Published application - Kind: A1 - Application number: 16/467,122 - Filed: 2017-09-13 - Published: 2019-10-17 - Earliest claimed: 2017-04-05 - Assignees: Pax Computer Technology (Shenzhen) Co., Ltd. - Applicants: Pax Computer Technology (Shenzhen) Co., Ltd - Inventors: Shaohai Liu; Wanqiang Lan; Heyu Nie; Jianqiang Li - Web page: https://patentgrep.com/patent/US20190318078A1 ## CPC - G06F 21/44: Program or device authentication - H04L 9/0625: {with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI} - H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC} - H04L 9/0836: {using tree structure or hierarchical structure} - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3247: {involving digital signatures} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An application security authentication method, including: step 202, acquiring an application file to be downloaded and extracting signature information from the application file; step 204, acquiring public key information contained in a multilevel key hierarchy, and acquiring public key information of the currently highest priority according to a priority order of the public key information; step 206, authenticating the signature information with the acquired public key information of the currently highest priority; and step 208, allowing the application file to be downloaded if an authentication of the signature information is passed. ## Claims ### Claim 1 An application security authentication method, comprising the steps of: acquiring an application file to be downloaded and extracting signature information from the application file; acquiring public key information contained in a multilevel key hierarchy, and acquiring public key information of the currently highest priority according to a priority order of the public key information; authenticating the signature information with the acquired public key information of the currently highest priority; and allowing the application file to be downloaded if an authentication of the signature information is passed. ### Claim 2 (depends on 1) The method according to claim 1, wherein before the step of acquiring an application file to be downloaded and extracting signature information in the application file, the method further comprises: downloading at least one authenticated public key information into the multilevel key hierarchy; and performing a priority setting on the public key information in the multilevel key hierarchy according to a hierarchy level, wherein the higher the hierarchy is, the higher the priority is. ### Claim 3 (depends on 1) The method according to claim 1, wherein the step of acquiring public key information contained in a multilevel key hierarchy and acquiring public key information of the currently highest priority according to a priority order of the public key information comprises: acquiring the public key information contained in the multilevel key hierarchy, wherein when multilevel public key information is included in the multilevel key hierarchy, root public key information is acquired as the current public key information, and the current public key information is used to authenticate the legality of the public key information of the up one level; if an authentication of the public key information of the up one level is successful, the successfully authenticated public key information of the up one level is used as the current public key information, and a step of authenticating the public key information of the up one level according to the current public key information is performed until the current legitimate public key information with the highest priority is acquired, wherein the higher the hierarchy is, the higher the priority is. ### Claim 4 (depends on 1) The method according to claim 1, further comprising: receiving an instruction of deleting the public key information of the currently highest priority, wherein the instruction is generated by downloading public key information with the secondary priority, and the public key information with the secondary priority is signed by using private key information corresponding to the public key information of the currently highest priority; and deleting the public key information of the currently highest priority according to the instruction. ### Claim 5 (depends on 1) The method according to claim 1, wherein before the step of authenticating the signature information with the acquired public key information of the currently highest priority, the method further comprises steps of: reading a hash value ciphertext corresponding to pre-stored public key information of the highest level; determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level; and performing the step of authenticating the signature information with the acquired public key information of the currently highest priority, if the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level. ### Claim 6 (depends on 5) The method according to claim 5, whether the step of determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext comprises: encrypting a hash value of the acquired public key information of the currently highest priority to generate a first hash value ciphertext; determining whether the first hash value ciphertext is consistent with a hash value ciphertext corresponding to the public key information of the highest level; and determining that the public key information of the currently highest priority matches with the hash value ciphertext corresponding to the public key information of the highest level, if the first hash value ciphertext is consistent with the hash value ciphertext corresponding to the public key information of the highest level. ### Claim 7 A computer equipment, comprising a memory and a processor, and the memory is configured to store a computer readable instruction, wherein when the computer readable instruction is executed by the processor, the processor is configured to perform the following steps: acquiring an application file to be downloaded and extracting signature information in the application file; acquiring public key information contained in a multilevel key hierarchy and acquiring public key information of the currently highest priority according to a priority order of the public key information; authenticating the signature information with the acquired public key information of the currently highest priority; and allowing the application file to be downloaded if an authentication of the signature information is passed. ### Claim 8 (depends on 7) The computer equipment according to claim 7, wherein the processor is further configured to perform following steps of: downloading at least one authenticated public key information into the multilevel key hierarchy; and performing a priority setting on the public key information in the multilevel key hierarchy according to a hierarchy level, wherein the higher the hierarchy is, the higher the priority is. ### Claim 9 (depends on 7) The computer equipment according to claim 7, wherein the step of acquiring public key information contained in a multilevel key hierarchy and acquiring public key information of the currently highest priority according to a priority order of the public key information performed by the processor comprises: acquiring the public key information contained in the multilevel key hierarchy, wherein when multilevel public key information is included in the multilevel key hierarchy, root public key information is acquired as the current public key information, and the current public key information is used to authenticate the legality of the public key information of the up one level; if an authentication of the public key information of the up one level is successful, the successfully authenticated public key information of the up one level is used as the current public key information, and a step of authenticating the public key information of the up one level according to the current public key information is performed until the current legitimate public key information with the highest priority is acquired, wherein the higher the hierarchy is, the higher the priority is. ### Claim 10 (depends on 7) The computer equipment according to claim 7, wherein the processor is further configured to perform following steps of: receiving an instruction of deleting the public key information of the currently highest priority, wherein the instruction is generated by downloading public key information with the secondary priority, and the public key information with the secondary priority is signed by using private key information corresponding to the public key information of the currently highest priority; and deleting the public key information of the currently highest priority according to the instruction. ### Claim 11 (depends on 7) The computer equipment according to claim 7, wherein the processor is further configured to perform following steps of: reading a hash value ciphertext corresponding to pre-stored public key information of the highest level; determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level; and performing the step of authenticating the signature information with the acquired public key information of the currently highest priority, if the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level. ### Claim 12 (depends on 11) The computer equipment according to claim 11, wherein the step of determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext performed by the processor comprises: encrypting a hash value of the acquired public key information of the currently highest priority to generate a first hash value ciphertext; determining whether the first hash value ciphertext is consistent with a hash value ciphertext corresponding to the public key information of the highest level; and determining that the public key information of the currently highest priority matches with the hash value ciphertext corresponding to the public key information of the highest level, if the first hash value ciphertext is consistent with the hash value ciphertext corresponding to the public key information of the highest level. ### Claim 13 One or a plurality of non-volatile computer readable storage medium storing a computer executable instruction, wherein when the computer executable instruction is executed by one or a plurality of processors, the one or a plurality of processors are configured to perform following steps of: acquiring an application file to be downloaded and extracting signature information in the application file; acquiring public key information contained in a multilevel key hierarchy and acquiring public key information of the currently highest priority according to a priority order of the public key information; authenticating the signature information with the acquired public key information of the currently highest priority; and allowing the application file to be downloaded if an authentication of the signature information is passed. ### Claim 14 (depends on 13) The storage medium according to claim 13, wherein the processor is further configured to perform following steps of: downloading at least one authenticated public key information into the multilevel key hierarchy; and performing a priority setting on the public key information in the multilevel key hierarchy according to a hierarchy level, wherein the higher the hierarchy is, the higher the priority is. ### Claim 15 (depends on 13) The storage medium according to claim 13, wherein the step of acquiring public key information contained in a multilevel key hierarchy and acquiring public key information of the currently highest priority according to a priority order of the public key information performed by the processor comprises: acquiring the public key information contained in the multilevel key hierarchy, wherein when multilevel public key information is included in the multilevel key hierarchy, root public key information is acquired as the current public key information, and the current public key information is used to authenticate the legality of the public key information of the up one level; if an authentication of the public key information of the up one level is successful, the successfully authenticated public key information of the up one level is used as the current public key information, and a step of authenticating the public key information of the up one level according to the current public key information is performed until the current legitimate public key information with the highest priority is acquired, wherein the higher the hierarchy is, the higher the priority is. ### Claim 16 (depends on 13) The storage medium according to claim 13, wherein the processor is further configured to perform following steps of: receiving an instruction of deleting the public key information of the currently highest priority, wherein the instruction is generated by downloading public key information with the secondary priority, and the public key information with the secondary priority is signed by using private key information corresponding to the public key information of the currently highest priority; and deleting the public key information of the currently highest priority according to the instruction. ### Claim 17 (depends on 13) The storage medium according to claim 13, wherein the processor is further configured to perform following steps of: reading a hash value ciphertext corresponding to pre-stored public key information of the highest level; determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level; and performing the step of authenticating the signature information with the acquired public key information of the currently highest priority, if the acquired public key information of the currently highest priority matches with the hash value ciphertext corresponding to the pre-stored public key information of the highest level. ### Claim 18 (depends on 17) The storage medium according to claim 17, wherein the step of determining whether the acquired public key information of the currently highest priority matches with the hash value ciphertext performed by the processor comprises: encrypting a hash value of the acquired public key information of the currently highest priority to generate a first hash value ciphertext; determining whether the first hash value ciphertext is consistent with a hash value ciphertext corresponding to the public key information of the highest level; and determining that the public key information of the currently highest priority matches with the hash value ciphertext corresponding to the public key information of the highest level, if the first hash value ciphertext is consistent with the hash value ciphertext corresponding to the public key information of the highest level.