CN107871066B - Code compilation method and device based on Android system - Google Patents

Abstract

The present application provides a method and device for compiling code based on an Android system. The method includes: a development client, in response to a command line input by a user, parses the command line, and obtains key information carried in the command line; Randomly generate a key for the key information, and write the key information encrypted based on the key and the decryption algorithm corresponding to the key into a preset C++ code file; Compile, and generate a dynamic library file for the Java layer of the Android system to call the dynamic library file to obtain the key information. By using the method provided by the embodiments of the present application, the security of the program can be effectively improved.

Description

Code compilation method and device based on Android system

technical field

The present application relates to the field of computing and communication, and in particular, to a method and device for compiling code based on an Android system.

Background technique

Android is a semi-open source operating system based on Linux, mainly used in mobile devices such as smartphones and tablets. In practical applications, developers often use the Java language to develop APPs (Applications) under the Android system.

However, since the programs developed in the Java language are easy to be decompiled, the key information carried in the programs can be obtained by decompiling the programs developed in the Java language, which greatly reduces the security of the programs.

SUMMARY OF THE INVENTION

In view of this, the present application provides a code compiling method and device based on an Android system to improve program security.

Specifically, the application is achieved through the following technical solutions:

In a first aspect, the present application provides a code compilation method based on an Android system, the method is applied to a development client, and the method includes:

In response to the command line input by the user, the command line is parsed to obtain key information carried in the command line;

Randomly generate a key for the key information, and write the encrypted key information based on the key and a decryption algorithm corresponding to the key into a preset C++ code file;

The C++ code file is compiled to generate a dynamic library file for the Java layer of the Android system to call the dynamic library file to obtain the key information.

In a second aspect, the present application provides a code compiling device based on an Android system, the device comprising:

an obtaining unit, configured to parse the command line in response to the command line input by the user, and obtain the key information carried in the command line;

A writing unit, used for randomly generating a key for the key information, and writing the key information encrypted based on the key and a decryption algorithm corresponding to the key into a preset C++ code file;

A compiling unit, configured to compile the C++ code file to generate a dynamic library file for the Java layer of the Android system to call the dynamic library file to obtain the key information.

An embodiment of the present application provides a code compilation method based on an Android system, where a development client parses the command line in response to a command line input by a user, and obtains key information carried in the command line; Randomly generate a key from the information, and write the key information encrypted based on the key and the decryption algorithm corresponding to the key into a preset C++ code file; Compile the C++ code file to generate a dynamic The library file is used for the Java layer of the Android system to call the dynamic library file to obtain the key information.

On the one hand, since the key information is carried in the command line, it is possible to dynamically transfer the key information to the C++ layer when compiling and packaging the preset C++ code. Compared with the mechanism of writing key information into the C++ code, the portability of the C++ code program can be effectively improved.

On the other hand, since the key and encryption algorithm used for encryption of key information are randomly generated when the C++ code file is compiled and packaged, it will not be leaked due to the omission of developers, and because the key information is encrypted If it is hard-coded in the program, even if the program is decompiled, it is difficult to obtain the key and the decryption algorithm corresponding to the key, so that the encrypted key information cannot be decrypted. Therefore, the security of the program can be effectively improved.

Description of drawings

1 is a flowchart of a method for compiling code based on an Android system according to an exemplary embodiment of the present application;

2 is a hardware structure diagram of a device where an Android-based code compiling apparatus is located according to an exemplary embodiment of the present application;

FIG. 3 is a block diagram of an Android system-based code compiling apparatus according to an exemplary embodiment of the present application.

Detailed ways

Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. Where the following description refers to the drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the illustrative examples below are not intended to represent all implementations consistent with this application. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present application as recited in the appended claims.

The terminology used in this application is for the purpose of describing particular embodiments only and is not intended to limit the application. As used in this application and the appended claims, the singular forms "a," "the," and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It will also be understood that the term "and/or" as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

It should be understood that although the terms first, second, third, etc. may be used in this application to describe various information, such information should not be limited by these terms. These terms are only used to distinguish the same type of information from each other. For example, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information without departing from the scope of the present application. Depending on the context, the word "if" as used herein can be interpreted as "at the time of" or "when" or "in response to determining."

Android is a semi-open source operating system based on Linux, mainly used in mobile devices such as smartphones and tablets. In practical applications, developers often use the Java language to develop APPs under the Android system.

In the process of program development, after the developer has finished writing the code program, it is generally necessary to compile the written code to generate library files and class files (that is, files containing virtual machine instructions), and then compile the generated library files, The intermediate product dex file and resource file converted from the Class file are packaged based on certain rules to generate an APK file. The generated APK file is the final APP file. The compilation is to convert the high-level language (eg Java, C++) written by the developer into virtual machine instructions or binary instructions that can be executed by the device. The generated library file is mainly for the convenience of calling other program modules.

However, after a program written in the Java language is compiled, virtual machine instructions are generated. The virtual machine instruction can be easily restored to the original Java language program by means of decompilation. When the program written in the Java language carries some key information (such as a key), it can be easily obtained by means of decompilation, thus greatly reducing the security of the program written in the Java language.

For programs written in C++, binary instructions are generated after the program is compiled. When the binary instruction is decompiled, it can be decompiled into assembly language. But because assembly language is less readable and difficult for developers to understand, programs written in C++ are more secure.

In addition, since the Android system supports C++ to develop some functions, in order to improve the security of the APP development program under the Android system, in some cases, some key information (such as some key information for signature calculation) needs to be hard-coded In C++ programs, to a certain extent, critical information (such as keys) can be prevented from being leaked.

However, hard-coding key information in a C++ program may, on the one hand, leak the above-mentioned key information due to the negligence of relevant personnel. On the other hand, hard-coding makes it difficult for the module containing the C++ program to be reused by other programs, making the program less portable.

An embodiment of the present application provides a code compilation method based on an Android system, where a development client parses the command line in response to a command line input by a user, and obtains key information carried in the command line; Randomly generate a key from the information, and write the key information encrypted based on the key and the decryption algorithm corresponding to the key into a preset C++ code file; Compile the C++ code file to generate a dynamic The library file is used for the Java layer of the Android system to call the dynamic library file to obtain the key information.

On the one hand, since the key information is carried in the command line, it is possible to dynamically transfer the key information to the C++ layer when compiling and packaging the preset C++ code. Compared with the mechanism of writing key information into the C++ code, the portability of the C++ code program can be effectively improved.

On the other hand, since the key and encryption algorithm used for encryption of key information are randomly generated when the C++ code file is compiled and packaged, it will not be leaked due to the omission of developers, and because the key information is encrypted If it is hard-coded in the program, even if the program is decompiled, it is difficult to obtain the key and the decryption algorithm corresponding to the key, so that the encrypted key information cannot be decrypted. Therefore, the security of the program can be effectively improved.

Referring to FIG. 1, FIG. 1 is a flowchart of an Android system-based code compilation method shown in an exemplary embodiment of the present application. The method is applied to an Android system-based development client, and the method includes:

Step 101: In response to a command line input by a user, parse the command line to obtain key information carried in the command line;

The above-mentioned key information includes the key information that needs to be transmitted to the C++ code file; for example, the above-mentioned key information can be used for the key information for signature calculation.

The above-mentioned development client may be client software for Android development, through which the edited C++ code file can be packaged and compiled.

For example, in practical applications, the above-mentioned client software may specifically be tool software for code compilation and packaging. The software tool can provide an interactive interface for developers, and developers can enter command lines in the interactive interface to interact with the software tool. Interact to complete the compilation and packaging of the edited C++ code.

In the process of developing the client based on Android, if it is necessary to pass some key information to the C++ code, usually, the common practice is that the developer directly converts the key information to the hard disk before compiling the C++ code. The way of coding is statically written to the form of C++ code.

In this way, it is easy for the person who obtains the C++ code to obtain the key information, resulting in the disclosure of the key information. Moreover, by means of hard coding, it is difficult for the module containing the C++ code program to be reused by other programs.

In this example, the format of the command line can be extended to carry key information, so that when compiling the edited C++ code, the key information can be dynamically passed to the C++ code through the command line, Therefore, the C++ code before being compiled and packaged can be used by other programs, and the portability of the C++ code is improved.

At the same time, key information can be "masked" under the command line. Only the development client can parse out the key information carried in the command line according to a certain algorithm. key information. Therefore, the security of the key information is improved to a certain extent.

In this example, when the developer inputs a command line to compile the edited C++ code file, the command line can carry the key information input by the developer, and the development client receives the command line. The command line can be parsed to obtain key information carried in the command line.

Step 102: randomly generate a key for the key information, and write the encrypted key information based on the key and a decryption algorithm corresponding to the key into a preset C++ code file;

In order to further improve the security of key information, after the key information is dynamically transferred to the C++ code file in the editing stage, the above-mentioned development client can also randomly generate a key for the key information, and can generate a key based on the randomly generated key , select the corresponding encryption and decryption algorithm for the key.

The above encryption and decryption algorithms may be symmetric encryption and decryption algorithms or asymmetric encryption and decryption algorithms, which are not particularly limited in this example.

When the above-mentioned development client randomly generates a key for the key information and selects the corresponding encryption and decryption algorithms, the development client can encrypt the above-mentioned key information based on the randomly generated key and the corresponding encryption algorithm. After the encryption is completed, the development client can write the encrypted key information and a decryption algorithm for decrypting the key information into a C++ code file.

Here, it is worth noting that when the development client obtains key information by parsing the command line, the device can randomly generate a key for the key information, select the encryption and decryption algorithms corresponding to the key, and use the key key and the encryption algorithm to encrypt key information.

On the one hand, even if the program can be decompiled, only the encrypted key information is obtained. On the other hand, since the key is randomly generated by the device, it is difficult for even the user who enters the key information to know the generated key, which makes it difficult to obtain the key even if the program is leaked or decompiled. Therefore, the security of the program can be effectively improved.

Step 103: Compile the C++ code file to generate a dynamic library file for the Java layer of the Android system to call the dynamic library file to obtain the key information.

In the embodiment of the present application, after the development client writes the encrypted key information and the decryption algorithm into the C++ code file, the C++ file can be compiled to generate a dynamic library file.

During implementation, after the development client writes the above-mentioned encrypted key information and decryption algorithm into the above-mentioned C++ code file, the device can import the C++ code file into the MakeFile (compilation method) compilation list, and compile the file based on the pre-defined MakeFile rules to compile the C++ code file. After the compilation is completed, the device can generate a dynamic library file from the compiled C++ code file.

The above MakeFile is a file for defining compilation rules. Since a project contains a large number of source files, MakeFile defines the compilation rules for compiling these source files. For example, MakeFile defines which files need to be compiled first, which files need to be compiled later, and which files need to be recompiled.

In this embodiment, after the dynamic library file is generated, the development client can package the dynamic library file, etc., to generate an APK file, and then the Java layer of the Android system can be called through JNI (Java Native Interface, Java Native Call). The APK file (that is, the packaged library file) decrypts the encrypted key information based on the decryption algorithm in the dynamic library file, and then completes corresponding functions based on the decrypted key information.

During implementation, when the Java layer of the Android system needs to use the above key information to implement corresponding functions, for example, when the Java layer needs to call the key for signature calculation, the Java layer of the Android system can call the above packaged dynamic library file (ie APK file). When the Java layer calls the dynamic library file, the development client can decrypt the encrypted key information based on the decryption algorithm in the dynamic library file.

If the above encryption and decryption algorithms are symmetric encryption and decryption algorithms, when decrypting the key information, the same key and decryption algorithm as the encryption algorithm can be used to decrypt the key information.

If the above encryption and decryption algorithms are asymmetric encryption and decryption algorithms, for asymmetric encryption and decryption algorithms, the keys used for encryption and decryption are different. The key information can be encrypted using the public key. When decrypting the key information, a private key corresponding to the public key can be used to decrypt the key information.

The key required for decrypting the key information can be carried in the above-mentioned C++ code file, or the key required for encryption and the key required for decryption can be managed by the key management server, and the key information is decrypted when the key information is decrypted. , the key required for decryption can be obtained from the key management server.

After the decryption is completed, the Java layer of the Android system can obtain the key information, and implement corresponding functions based on the key information.

Among them, the above-mentioned JNI is a part of the Java platform, and is mainly used to make the code written in Java interact with the code written in other languages.

Here, it is worth noting that when the Java layer needs to call the dynamic library file containing the encrypted key information, the above-mentioned development client can decrypt the encrypted key information. The encrypted key information exists in an encrypted form under normal conditions. Such a design method can effectively improve the security of the key information.

An embodiment of the present application provides a code compilation method based on an Android system, where a development client parses the command line in response to a command line input by a user, and obtains key information carried in the command line; Randomly generate a key from the information, and write the key information encrypted based on the key and the decryption algorithm corresponding to the key into a preset C++ code file; Compile the C++ code file to generate a dynamic The library file is used for the Java layer of the Android system to call the dynamic library file to obtain the key information.

On the one hand, since the key information is carried in the command line, it is possible to dynamically transfer the key information to the C++ layer when compiling and packaging the preset C++ code. Compared with the mechanism of writing key information into the C++ code, the portability of the C++ code program can be effectively improved.

On the other hand, since the key and encryption algorithm used for encryption of key information are randomly generated when the C++ code file is compiled and packaged, it will not be leaked due to the omission of developers, and because the key information is encrypted If it is hard-coded in the program, even if the program is decompiled, it is difficult to obtain the key and the decryption algorithm corresponding to the key, so that the encrypted key information cannot be decrypted. Therefore, the security of the program can be effectively improved.

Corresponding to the foregoing embodiments of the code compiling method based on the Android system, the present application also provides an embodiment of the code compiling apparatus based on the Android system.

The embodiments of the Android system-based code compiling apparatus of the present application can be applied to a development client. The apparatus embodiment may be implemented by software, or may be implemented by hardware or a combination of software and hardware. Taking software implementation as an example, a device in a logical sense is formed by reading the corresponding computer program instructions in the non-volatile memory into the memory through the processor of the development client where the device is located. From the perspective of hardware, as shown in FIG. 2 , it is a hardware structure diagram of the development client where the code compiling apparatus based on the Android system of the present application is located, except for the processor, memory, network interface, and non-volatile shown in FIG. 2 In addition to the non-volatile memory, the development client where the device is located in the embodiment generally may also include other hardware according to the actual function of the code compiled based on the Android system, which will not be repeated here.

Please refer to FIG. 3 , which is a block diagram of an Android-based code compilation apparatus according to an exemplary embodiment of the present application. The apparatus is applied to developing a client, and the apparatus includes: an acquiring unit 310 , a writing unit 320 and a compiling unit 330 .

Wherein, the obtaining unit 310 is configured to parse the command line in response to the command line input by the user, and obtain the key information carried in the command line;

A writing unit 320 is used to randomly generate a key for the key information, and write the key information encrypted based on the key and a decryption algorithm corresponding to the key into a preset C++ code file;

The compiling unit 330 is configured to compile the C++ code file to generate a dynamic library file for the Java layer of the Android system to call the dynamic library file to obtain the key information.

In an alternative implementation:

The writing unit 320 is specifically configured to select an encryption and decryption algorithm corresponding to the key. The key information is encrypted based on the encryption algorithm and the key; the encrypted key information and the decryption algorithm corresponding to the key are written into the preset C++ code file.

In another alternative implementation:

The compiling unit 330 is specifically configured to compile the C++ code file based on the MakeFile compilation list, and generate the dynamic library file.

In another alternative implementation:

The compiling unit 330 is further used for the Java layer of the Android system to call the dynamic library file through JNI; decrypt the encrypted key information based on the decryption algorithm in the dynamic library file; the Java layer obtains the decrypted key information.

For details of the implementation process of the functions and functions of each unit in the above device, please refer to the implementation process of the corresponding steps in the above method, which will not be repeated here.

For the apparatus embodiments, since they basically correspond to the method embodiments, reference may be made to the partial descriptions of the method embodiments for related parts. The device embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules can be selected according to actual needs to achieve the purpose of the solution of the present application. Those of ordinary skill in the art can understand and implement it without creative effort.

The above descriptions are only preferred embodiments of the present application, and are not intended to limit the present application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the present application. within the scope of protection.

Claims (6)

1. A code compiling method based on an android system is applied to a development client side, and comprises the following steps:

responding to a command line input by a user, analyzing the command line, and acquiring key information carried in the command line;

randomly generating a key for the key information, and writing the key information encrypted based on the key and a decryption algorithm corresponding to the key into a preset C + + code file;

compiling the C + + code file to generate a dynamic library file, so that a Java layer of the android system can call the dynamic library file to obtain the key information; the key information comprises key information needing to be transmitted to a C + + code file;

the Java layer of the android system calls the dynamic library file to acquire the key information, and the method comprises the following steps:

calling the dynamic library file by a Java layer of the android system through Java local calling JNI;

decrypting the encrypted key information based on a decryption algorithm in the dynamic library file;

and the Java layer acquires the decrypted key information.

2. The method according to claim 1, wherein the writing the key information encrypted based on the key and the decryption algorithm corresponding to the key into a pre-defined C + + code file includes:

selecting an encryption algorithm and a decryption algorithm corresponding to the secret key;

encrypting the key information based on the encryption algorithm and the key;

and writing the encrypted key information and a decryption algorithm corresponding to the key into the preset C + + code file.

3. The method of claim 1, wherein compiling the C + + code file to generate a dynamic library file comprises:

compiling the C + + code file based on a MakeFile compilation list, and generating the dynamic library file.

4. An android-based code compiling apparatus, the apparatus comprising:

the acquisition unit is used for responding to a command line input by a user, analyzing the command line and acquiring key information carried in the command line;

a writing unit, configured to randomly generate a key for the key information, and write the key information encrypted based on the key and a decryption algorithm corresponding to the key into a preset C + + code file;

the compiling unit is used for compiling the C + + code file to generate a dynamic library file so that a Java layer of the android system can call the dynamic library file to acquire the key information; the key information comprises key information needing to be transmitted to a C + + code file;

the compiling unit is further configured to:

calling the dynamic library file by a Java layer of the android system through Java local calling JNI;

decrypting the encrypted key information based on a decryption algorithm in the dynamic library file;

and the Java layer acquires the decrypted key information.

5. The apparatus of claim 4, wherein the write unit is specifically configured to:

selecting an encryption algorithm and a decryption algorithm corresponding to the secret key;

encrypting the key information based on the encryption algorithm and the key;

and writing the encrypted key information and a decryption algorithm corresponding to the key into the preset C + + code file.

6. The apparatus according to claim 4, wherein the compiling unit is specifically configured to:

compiling the C + + code file based on a MakeFile compilation list, and generating the dynamic library file.

Images