METHOD AND DEVICE FOR PROVIDING VERIFYING APPLICATION INTEGRITY

摘要

A device (110) downloads and installs (S204) an APK file for the application, during which the code is modified. A checksum for the modified code is sent (S206) to a trusted entity (130) that checks (S208) that the received checksum matches a stored checksum for the application. If so, the received checksum is signed (S210) and returned (S212) to the device (110) where it is stored (S214). The device can then check the integrity of the modified code (S216) by calculating a checksum for the modified code that is compared to the signed checksum. The solution is particularly suitable for devices using the Android OS since the DEX during installation is optimized to an ODEX for which there is no certified checksum.