| 摘要 |
A method and network device for authenticating application program integrity, the method comprising: when an application program is started, calculating an eigenvalue of data of the application program to obtain a first summary of the application program (101); according to a public key in an embedded key pair, decrypting a stored digital signature of the application program to obtain a second summary of the application program, the digital signature being obtained by signing the data of the application program according to a private key in the key pair each time the application program is updated, and the key pair being a vendor key pair corresponding to the application program (102); and if the first summary and the second summary are same, then determining that an integrity authentication of the application program is passed, and if not, then determining that the integrity authentication of the application program is not passed (103). The method and the network device can authenticate the integrity of an application program after the application program is updated. |
