CN117313115A - Method and corresponding device for accessing, acquiring and managing installation package resource file - Google Patents

Abstract

The invention relates to the technical field of file management and provides an installation package resource file access method, acquisition method and management method. The server side performs the following process: compresses and encrypts the installation package resource file to generate a compressed and encrypted resource file; according to The installation package resource file generates an original resource file index table, and the resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and installation package version information; the original resource file index table is encrypted , generate an encrypted resource file index table; store the compressed encrypted resource file and the encrypted resource file index table according to the original resource file index table; the application side sends a resource request to the server side through the network request library based on the resource loading interface , to obtain the compressed encrypted resource file. The invention can well protect the installation package resource files and prevent them from being tampered with and improperly obtained.

Description

An installation package resource file access, acquisition, management method and corresponding device

Technical field

The present invention relates to the field of computer technology, and in particular to an installation package resource file management method, an acquisition method and a corresponding device.

Background technique

Because the installation package files of Android applications are easy to be cracked and localized, their security has always been a concern in the industry. At present, most of them use packing and hardening tools to protect them, such as using ProGuard or DexGuard to protect the code, thereby achieving relative code security, but the protection of resource files is ignored.

Contents of the invention

The present invention provides a method for accessing installation package resource files. The method includes two parts. The first part is executed by the server and includes:

Compress and encrypt the installation package resource files to generate compressed and encrypted resource files;

Generate an original resource file index table based on the installation package resource file. The resource file index table includes resource file names, random ID values corresponding to the resource file names, and installation package version information;

Encrypt the original resource file index table to generate an encrypted resource file index table;

Store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table;

The second part is executed by the application side and includes:

Call a predetermined resource loading interface, which is defined in the application program;

Send a resource request to the server through the network request library based on the resource loading interface, where the resource request includes the resource unified locator URL, ID value and version information;

A compressed and encrypted resource file is received based on the resource loading interface, and the compressed and encrypted resource file is obtained by the server using an encrypted resource file index table according to the resource request.

Optionally, part two also includes:

Decompress and decrypt the received compressed and encrypted resource files to generate decrypted and decompressed resource files;

Select the corresponding storage method according to the type of decrypted and decompressed resource files, and store it.

Optionally, selecting a corresponding local storage method according to the type of the decrypted and decompressed resource file and performing local storage includes:

When the decrypted and decompressed resource file is an image resource, the decrypted and decompressed resource file is stored in a local storage device; when the decrypted and decompressed resource file is a text resource, the decrypted and decompressed resource file is stored in the local storage device. Stored in memory cache.

Optionally, before the server uses the encrypted resource file index table to obtain the compressed encrypted resource file according to the resource request, the method also includes:

Perform identity authentication on the application end based on the first identity authentication information; the resource request also includes the first identity authentication information;

When the authentication is passed, the encrypted resource file index table is decrypted, and the application is allowed to access the decrypted resource file index table.

The present invention also provides a method for obtaining installation package resource files. The method is executed by the application end. The method includes:

Call a predetermined resource loading interface, which is defined in the application program;

Send a resource request to the server through the network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, a random ID value and version information;

Receive compressed and encrypted resource files based on the resource loading interface. The compressed and encrypted resource files are obtained by the server according to the resource request using an encrypted resource file index table. The encrypted resource file index table includes the resource file name and the resource file. The random ID value and installation package version information corresponding to the name.

Optionally, the above method also includes:

By calling the loading and parsing functions, the stored decrypted and decompressed resource files are read and loaded.

Optionally, before loading the decrypted and decompressed resource file, the above method also includes: performing a security check on the read decrypted and decompressed resource file; and loading the decrypted and decompressed resource file after it passes the security check. .

Optionally, before sending the resource request to the server through the network request library, the method also includes: searching locally for a resource file that needs to be used, and if the resource file that needs to be used exists locally, directly loading the resource file; If the resource file that needs to be used does not exist locally, the resource request is sent to the server through the network request library.

The present invention provides a method for managing installation package resource files. The method is executed by a server. The method includes:

Compress and encrypt the installation package resource files to generate compressed and encrypted resource files;

Generate an original resource file index table based on the installation package resource file. The resource file index table includes resource file names, random ID values corresponding to the resource file names, and installation package version information;

Encrypt the original resource file index table to generate an encrypted resource file index table;

The compressed encrypted resource files and the encrypted resource file index table are stored according to the original resource file index table.

Optionally, this method also includes:

Receive resource requests from the application side, where the resource requests include resource unified locator URL, ID value, and version information;

According to the resource request and the decrypted resource file index table, obtain the compressed and encrypted resource file corresponding to the resource unified locator URL, ID value, and version information, and send it to the application end. The decrypted resource file index table Obtained by decrypting the encrypted resource file index table.

Optionally, the resource requests second identity authentication information, and the method further includes:

Perform identity authentication on the application end according to the second identity authentication information and version information;

If the authentication is passed, the compressed encrypted resource file is sent to the application end.

Optionally, the resource requests identity authentication information, and the method further includes:

When resource files need to be updated, the encrypted resource file index table is decrypted and a decrypted resource file index table is generated;

Update the decrypted resource file index table according to the incremental resource file and generate a second decrypted resource file index table;

Encrypt incremental resource files and generate encrypted incremental resource files;

Encrypt the second decrypted resource file index table to generate a second encrypted resource file index table;

The second encrypted resource file index table and the encrypted incremental resource file are stored according to the second decrypted resource file index table.

The present invention provides an installation package resource file access system. The system includes a server end and an application end, where the server end includes:

The compression encryption module is used to compress and encrypt installation package resource files and generate compressed and encrypted resource files;

An original resource file index table generation module is used to generate an original resource file index table according to the installation package resource file. The resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and installation package version information. ;

A resource file index table encryption module, used to encrypt the original resource file index table and generate an encrypted resource file index table;

A file storage module, configured to store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table;

The application side includes:

The resource loading interface calling module is used to call a predetermined resource loading interface, and the resource loading interface is defined in the application program;

A resource request sending module, configured to send a resource request to the server through a network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, an ID value, and version information;

A compressed and encrypted resource file receiving module is configured to receive a compressed and encrypted resource file based on the resource loading interface. The compressed and encrypted resource file is obtained by the server using an encrypted resource file index table according to the resource request.

The present invention provides a device for obtaining installation package resource files, which device includes:

The resource loading interface calling module is used to call a predetermined resource loading interface, and the resource loading interface is defined in the application program;

A resource request sending module, configured to send a resource request to the server through a network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, an ID value, and version information;

A compressed and encrypted resource file receiving module, configured to receive compressed and encrypted resource files based on the resource loading interface. The compressed and encrypted resource files are obtained by the server using an encrypted resource file index table according to the resource request. The encrypted resource file index table Including resource file name, random ID value corresponding to the resource file name, and installation package version information.

The present invention provides an installation package resource file management device, which includes:

The compression encryption module is used to compress and encrypt installation package resource files and generate compressed and encrypted resource files;

An original resource file index table generation module is used to generate an original resource file index table according to the installation package resource file. The resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and installation package version information. ;

A resource file index table encryption module, used to encrypt the original resource file index table and generate an encrypted resource file index table;

A file storage module, configured to store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table.

The present invention provides an information storage medium. The information storage medium stores a computer program. When the computer program is executed, the aforementioned installation package resource file access method, installation package resource file acquisition method or installation package resources are implemented. Document management methods.

The present invention provides an electronic device. The electronic device includes a processor and a memory. The memory stores a computer program. The processor executes the computer program to implement the installation package resource file access method and the installation package resource. File acquisition method or installation package resource file management method.

The present invention generates a resource file index table based on resource files on the server, so that the IDs of resource files are randomly generated, and uses an encrypted method to store the resource file index table and resource files, so that resource files can be well protected. The application can securely obtain resource files on the server through remote connections, preventing resource files from being tampered with and improperly obtained.

Description of drawings

In order to explain the present invention or the technical solutions in the prior art more clearly, the drawings needed to be used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings in the following description are of the present invention. For some embodiments of the invention, those of ordinary skill in the art can also obtain other drawings based on these drawings without exerting creative efforts.

Figure 1 is a flow chart of the installation package resource file management method provided by the present invention;

Figure 2 is a flow chart of the process of providing compressed and encrypted resource files to the application end in the installation package resource file management method provided by the present invention;

Figure 3 is a flow chart of the server-side resource file update process in the installation package resource file management method provided by the present invention;

Figure 4 is a flow chart of the installation package resource file acquisition method provided by the present invention;

Figure 5 is an architectural diagram of the resource file uploading part of the installation package resource file management device provided by the present invention;

Figure 6 is an architectural diagram of the resource file download part of the installation package resource file management device provided by the present invention;

Figure 7 is an architectural diagram of an installation package resource file acquisition device provided by the present invention;

Figure 8 is a structural diagram of the electronic device provided by the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present invention more clear, the technical solutions in the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention. , not all examples. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of the present invention.

In the Android system, each application is generally configured with many resource files, and the protection of APK (AndroidPackage Android installation package) resource files. Hardening tools or tools such as AndResGuard are usually used to obfuscate and protect resource files. These tools basically protect the resource files in the APK. Resource file names are replaced with short meaningless names, which creates difficulties for crackers. However, the resource file ID is still unique. It only takes a certain amount of time for the decompiler to figure out the role of these resource files, so that the resource files can be modified. Make destructive changes. The present invention aims to prevent resource files from being directly decompressed or improperly obtained through decompilation, thereby improving the security of resource files.

The present invention provides a method for managing installation package resource files. The method is executed by a server. As shown in Figure 1, the method includes:

S11. Compress and encrypt the installation package resource files to generate compressed and encrypted resource files;

S12. Generate an original resource file index table according to the installation package resource file. The resource file index table includes resource file names, random ID values corresponding to the resource file names, and installation package version information;

S13. Encrypt the original resource file index table and generate an encrypted resource file index table;

S14. Store the compressed encrypted resource file and the encrypted resource file index table according to the original resource file index table.

Through the above method, the resource files are stored on the server side, the resource files are dynamically compressed and encrypted, and a resource file index table is established to store the resource file names and corresponding random ID values, versions and other information for version management. and resource file maintenance. On the one hand, the resource files are encrypted and protected. On the other hand, the ID values of the resource files are randomly generated and stored through the encrypted resource file index table. The resource files are difficult to obtain, thus reliably improving the security of the resource files. . At the same time, the generation and storage of the random ID value enables the corresponding resource file to be obtained based on the random ID value when the application is run on the application side.

In step S11, the APK resource file is dynamically compressed and encrypted to generate an APK compressed and encrypted resource file. The APK compressed and encrypted resource can be stored on a remote server, a storage bucket, or a file server. By using efficient compression algorithms and powerful encryption algorithms, it can not only reduce the storage space occupied by servers, buckets, and file servers, but also reduce the transmission time and bandwidth usage of resource files when sending resource files to the application.

In the encryption process, the present invention can adopt the encryption method of a single-key cryptosystem. The same key can be used for encryption and decryption of information at the same time. This encryption method is called symmetric encryption, also called single-key encryption. An encryption algorithm that uses the same key for encryption and decryption is required. Due to its speed, symmetric encryption is often used when the sender of a message needs to encrypt large amounts of data. The so-called symmetry means that both parties using this encryption method use the same key to encrypt and decrypt. Keys are instructions that control the encryption and decryption process. An algorithm is a set of rules that dictate how encryption and decryption are performed. The security of encryption not only depends on the encryption algorithm itself, but the security of key management is even more important. The same key is used for encryption and decryption, and the key needs to be delivered securely to the application.

Symmetric encryption algorithms can be used: DES, 3DES, TDEA, Blowfish, RC2, RC4, RC5, IDEA, SKIPJACK, AES, etc.

The advantages of the symmetric encryption algorithm are that the algorithm is public, the amount of calculation is small, the encryption speed is fast, and the encryption efficiency is high. The disadvantage of the symmetric encryption algorithm is that before data transmission, the server and the application must agree on the secret key, and then both parties can save the secret key. Relative to the "symmetric encryption algorithm", this method is also called the "asymmetric encryption algorithm".

The present invention can also use an asymmetric encryption algorithm, which requires two keys: a public key and a private key. The public key and the private key are a pair. If the public key is used to encrypt data, only the corresponding private key can be used to decrypt it; if the private key is used to encrypt the data, then only the corresponding public key can be used to decrypt it. Decrypt. The basic process of key exchange using asymmetric encryption algorithms is: the server generates a pair of keys, and the server uses a private key it saves to encrypt the original resource data. And the other one is sent as a public key to the application end in response to the application end's resource acquisition request; the application end that obtains the public key uses the key to decrypt the encrypted compressed resource file. The server can use its private key to decrypt any information encrypted by the application using the public key.

The confidentiality of asymmetric encryption algorithms is relatively good. It eliminates the need for end users to exchange keys. Classic asymmetric encryption algorithms such as RSA algorithms are very secure.

Message authentication refers to authentication through encryption or signature transformation of messages or message-related information. The purpose is to prevent the transmitted and stored messages from being tampered with intentionally or unintentionally, including message content authentication (i.e. message integrity authentication), message integrity authentication, etc. Source and sink authentication (i.e. identity authentication), and message sequence number and operation time authentication, etc. The digest algorithm used in message authentication is different from general symmetric or asymmetric encryption algorithms. It is not used to prevent information from being stolen, but is used to prove the integrity and accuracy of the original text. In other words, message authentication is mainly used to prevent information from being stolen. been tampered with. The present invention can use message authentication technical means in the subsequent processes of first identity authentication and second identity authentication.

In step S12, the fields of the original resource file index table include: ID value (randomly generated), version information, file name, resource file path, size and time, etc. This information facilitates the management of resource files.

In step S13, the resource file index table is encrypted by using an encryption algorithm to prevent malicious users from obtaining resource file index table information. As a preferred implementation manner, the access rights to the resource file index table can be set, or the access rights to the resource file index table can be restricted, thereby ensuring that only authorized users or applications can access it.

In step S14, only the encrypted resource file index table is stored on the server, which effectively prevents malicious users from obtaining the resource file index table.

The above installation package resource file management method also includes the process of providing compressed and encrypted resource files to the application side, as shown in Figure 2, specifically including:

S21. Receive a resource request from the application side, the resource request includes resource unified locator URL, ID value, and version information;

S22. According to the resource request and the decrypted resource file index table, obtain the compressed and encrypted resource file corresponding to the resource unified locator URL, ID value, and version information; the decrypted resource file index table indexes the encrypted resource file. Obtained by decrypting the table;

S23. Send the obtained compressed and encrypted resource file to the application end.

Through the above process, the server uses the decrypted resource file index table after decrypting the encrypted resource file index table to provide the encrypted resource file to the application end according to the resource request of the application.

As a preferred implementation, the resource request also includes first identity authentication information, and the process of providing the compressed and encrypted resource file to the application side includes: performing identity authentication on the application side based on the first identity authentication information; If the authentication is passed, the encrypted resource file index table is decrypted, a decrypted resource file index table is generated, and the application is allowed to access the decrypted resource file index table. In this implementation, the access rights to the index table are restricted or set to ensure that only authorized users or applications can access the resource file index table.

As another implementation manner, the resource requests second identity authentication information. The method also includes: performing identity authentication on the application end according to the second identity authentication information and version information; and sending the compressed encrypted resource if the authentication is passed. file to the application. In the above implementation, an authentication and authorization mechanism is established so that the process of obtaining resource files by the server requires authentication and authorization, and ensures that only users with sufficient permissions can obtain specific resource files. The authentication and authorization mechanism can use role-based For access control, common identity verification mechanisms can also be used, such as user name and password, API key or token verification, etc., which are not specifically limited by the present invention.

As a third implementation, after receiving a resource request from the application side, it does not directly parse it, but performs input verification and filtering on the resource request. The purpose is to ensure that the parameters and data passed to the server are not Contains malicious code, special characters or injection attacks to prevent the server from being hacked or subject to security vulnerabilities.

The installation package resource file management method also includes a resource file update process, as shown in Figure 3, specifically including:

S31. When resource files need to be updated, decrypt the encrypted resource file index table and generate a decrypted resource file index table;

S32. Update the decrypted resource file index table according to the incremental resource file and generate a second decrypted resource file index table;

S33. Encrypt the incremental resource file to generate an encrypted incremental resource file; encrypt the second decrypted resource file index table to generate a second encrypted resource file index table;

S34. Store the second encrypted resource file index table and the encrypted incremental resource file according to the second decrypted resource file index table.

Through the above process, the server only needs to encrypt and store the incremental resource files, which saves the server's processing resources. Moreover, when the application side needs to update the resource files later, only the incremental part of the resource files will be transmitted instead of Transfer the entire resource file. Doing so can reduce the amount of data transfer and update time, and is especially effective for updating large resource files. After receiving the incremental resources, the application end merges them into local resources to achieve real-time updates of resources.

The installation package resource file management method also includes behavioral security auditing and behavior monitoring, specifically including: monitoring and recording server access, requests and abnormal behaviors to form an installation package resource file log. Through analysis, potential security issues can be discovered and dealt with in a timely manner.

The present invention also provides a method for obtaining installation package resource files. The method is executed by the application end. As shown in Figure 4, the method includes:

S41. Call the predetermined resource loading interface, which is defined in the application program;

S42. Send a resource request to the server through the network request library, where the resource request includes the resource unified locator URL, ID value and version information;

S43. Receive compressed and encrypted resource files. The compressed and encrypted resource files are obtained by the server using an encrypted resource file index table according to the resource request. The encrypted resource file index table includes the resource file name and a random number corresponding to the resource file name. ID value, installation package version information.

Through the above method, when running the application on the application side (usually the client), you only need to call the predefined resource loading interface to obtain the required compressed and encrypted resource files from the remote server, ensuring acquisition and transmission. process safety.

In the above step S41, a resource loading interface is defined in the application program, and the resource loading interface includes the URL information of the resource request.

In the above step S42, the resource requests parameters such as URL information, ID value parameters, identity authentication information, and current application version information. By calling the resource loading interface, the application sends a resource request to the server through the network request library and requests the server for the resource files required by the current version. In order to ensure the security of resource files, generally try to avoid hardcoding sensitive information (such as server addresses, API keys, etc.) in the code to prevent decompilers from easily obtaining this sensitive information. This information can be stored in an encrypted configuration file that is stored locally on the application side and protected using appropriate encryption algorithms. The application uses the encrypted configuration file to obtain the server address that needs to be communicated and the key for encrypting the compressed resource file. Therefore, the application side can prevent sensitive information of resource files from being stolen.

In step S43, the server performs identity authentication based on parameters such as the requested resource URL, ID value, identity authentication information, and current application version information. After passing the authentication, the server returns the resource file of the corresponding program version to the application end as a response. In order to protect the security of resource files during network transmission, a secure communication protocol (such as HTTPS) is used between the application and the server. In addition, the server has encrypted the resource files using a secure encryption method to ensure that the resources The confidentiality and integrity of files effectively prevent security threats such as man-in-the-middle attacks, data theft and tampering. Resource files can be downloaded using segmented downloading or breakpoint resume downloading technology. This downloading technology can improve downloading efficiency and stability.

The application receives the compressed encrypted resource file returned by the server through the network request library. Decompress and decrypt the received compressed and encrypted resource files to generate decrypted and decompressed resource files; select a corresponding storage method according to the type of decrypted and decompressed resource files and store them. As a specific implementation manner, when the decrypted and decompressed resource file is an image resource, the decrypted and decompressed resource file is stored in a local storage device; when the decrypted and decompressed resource file is a text resource, the decrypted and decompressed resource file is stored in a local storage device. The decrypted and decompressed resource files are stored in the memory cache. Using this specific implementation method, the memory storage space can be increased without excessively increasing the running speed of the application program.

Before loading the decrypted and decompressed resource file, a security check is performed on the read decrypted and decompressed resource file; after the decrypted and decompressed resource file passes the security check, it is loaded again. The technical means of security check can use hash values or digital signatures to verify resource files. The above technical means can prevent the resource files to be used from being tampered with or replaced.

During the running of the application, when a resource file needs to be used, the corresponding loading and parsing functions are called to read and load the decrypted and decompressed resource file from local storage or memory. In order to ensure the smooth operation of the application, when dynamically loading resource files in the application, some security checks are performed to ensure that the resource files do not contain malicious code or potential security risks. For example, check image files for malicious scripts, check layout files for unauthorized access, etc.

The present invention dynamically loads, decrypts and decompresses resource files, the user can select the resource files to be used, and the user can customize the page layout of the application based on the selected resource files. As a specific implementation manner, XML layout files for user customization are dynamically loaded, so that users can flexibly design the application interface according to their own needs.

As a preferred implementation, the application end can use a resource caching mechanism to save loaded resource files to local storage or memory cache. When a resource file needs to be used, before sending a resource request to the server through the network request library, the resource file that needs to be used is searched in local storage or memory. If the resource file that needs to be used exists locally, the cached resource is directly loaded. file; if the resource file that needs to be used does not exist locally, execute the resource request sent to the server through the network request library.

When updating resource files, the application only obtains the incremental part of the resource file from the service instead of transmitting the entire resource file. Doing so can reduce the amount of data transfer and update time, and is especially effective for updating large resource files. After receiving the incremental resources, the application end merges them into local resources to achieve real-time updates of resources.

In the present invention, the application side dynamically obtains the compressed and encrypted resource files stored on the server remotely, so that attackers using decompilation tools such as APKTOOL cannot obtain the resource files, and cannot perform malicious operations such as replacement and modification, thereby protecting the resource files. The integrity, confidentiality and legality ensure the security of applications and users; and effectively reduce the size of the APK installation package, enabling flexible use of resource files and partial updates of incremental resource files.

The present invention provides an installation package resource file management device. As shown in Figure 5, the device includes:

The compression and encryption module 51 is used to compress and encrypt the installation package resource files and generate compressed and encrypted resource files;

The original resource file index table generation module 52 is used to generate an original resource file index table according to the installation package resource file. The resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and an installation package version. information;

The resource file index table encryption module 53 is used to encrypt the original resource file index table and generate an encrypted resource file index table;

The file storage module 54 is configured to store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table.

As shown in Figure 6, the device also includes:

The resource request receiving module 61 is used to receive resource requests from the application side, where the resource requests include resource unified locator URL, ID value, and version information;

The decrypted resource file index table acquisition module 62 is used to obtain the encrypted resource file index table according to the resource request, and decrypt it to generate a decrypted resource file index table;

The compressed and encrypted resource file acquisition module 63 is used to obtain the compressed and encrypted resource file corresponding to the resource unified locator URL, ID value, and version information;

The compressed and encrypted resource file sending module 64 is used to send the obtained compressed and encrypted resource file to the application end.

Optionally, the device includes a first identity authentication module for performing identity authentication on the application end according to the first identity authentication information, and the resource request also includes the first identity authentication information; the decrypted resource file index table is obtained Module 62, if the authentication is passed, decrypts the encrypted resource file index table and allows the application end to access the decrypted resource file index table.

Optionally, the device further includes a second identity authentication module, configured to perform identity authentication on the application end according to the second identity authentication information and version information, the resource request includes the second identity authentication information; the compressed encrypted resource The file sending module sends the compressed encrypted resource file to the application end when the authentication is passed.

Optionally, the decrypted resource file index table acquisition module 62 decrypts the encrypted resource file index table and generates a decrypted resource file index table when the resource file needs to be updated. The device also includes: a resource file index table update module, for Update the decrypted resource file index table according to the incremental resource file to generate a second decrypted resource file index table; an incremental resource file encryption module is used to encrypt the incremental resource file and generate an encrypted incremental resource file; the resource The file index table encryption module 53 encrypts the second decrypted resource file index table and generates a second encrypted resource file index table; the file storage module 54 encrypts the second encrypted resource file according to the second decrypted resource file index table. Index tables and encrypted incremental resource files are stored.

The present invention provides a device for obtaining installation package resource files. As shown in Figure 7, the device includes:

The resource loading interface calling module 71 is used to call a predetermined resource loading interface, which is defined in the application program;

The resource request sending module 72 is configured to send a resource request to the server through the network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, an ID value, and version information;

The compressed and encrypted resource file receiving module 73 is used to receive compressed and encrypted resource files. The compressed and encrypted resource files are obtained by the server using an encrypted resource file index table according to the resource request. The encrypted resource file index table includes resource file names, The random ID value and installation package version information corresponding to the resource file name.

Optionally, the device also includes: a decryption and decompression module 74, used to decompress and decrypt the received compressed and encrypted resource files, and generate decrypted and decompressed resource files; a local storage module 75, used to decompress the resource files according to the decryption Select the corresponding storage method for the type and store it according to the selected storage method.

Optionally, the local storage module is configured to: store the decrypted and decompressed resource file in a local storage device when the decrypted and decompressed resource file is an image resource; when the decrypted and decompressed resource file is a text resource In this case, the decrypted and decompressed resource file is stored in the memory cache.

Optionally, the device also includes a resource file loading module, configured to read and load the stored decrypted and decompressed resource file by calling a loading and parsing function.

Optionally, the device also includes a security check module for performing a security check on the read decrypted and decompressed resource files before loading the decrypted and decompressed resource files; the resource file loading module performs a security check on the decrypted and decompressed resource files. After the compressed resource file passes the security check, load it again.

Optionally, the device also includes a local search module for resource files, which is used to search locally for resource files that need to be used before sending a resource request to the server through the network request library. In the case where the resource files that need to be used exist locally, the The resource file loading module directly loads the resource file; when the resource file to be used does not exist locally, the resource request sending module 72 sends a resource request to the server through the network request library.

The installation package resource file management device provided by the embodiment of the present invention can implement all the steps of the above installation package resource file management method, and can achieve the same technical effect. The resource file acquisition device provided by the embodiment of the present invention can implement the above resource file acquisition method. All the steps can achieve the same technical effect. The same parts and beneficial effects in this embodiment as in the method embodiment will not be described in detail here.

The present invention also provides an electronic device. As shown in Figure 8, the electronic device includes a processor 81, a memory 82, a communication interface 83 and a communication bus 84. The memory 82 stores a computer program, and the processor 81 and The memory 82 is connected through a communication bus 84, the communication interface 83 is used to connect to the outside, and the processor 81 executes the computer program to perform the aforementioned installation package resource file management method or installation resource file acquisition. method.

The present invention provides an information storage medium that stores a computer program. When the computer program is executed, the installation package resource file management method or the installation package resource file acquisition method described above is implemented.

To sum up, the present invention generates a resource file index table based on resource files on the server, so that the IDs of resource files are randomly generated, and uses an encrypted method to store the resource file index table and resource files, so that it can effectively Protect resource files effectively and avoid resource files from being tampered with and improperly obtained.

Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the part of the above technical solution that essentially contributes to the existing technology can be embodied in the form of a software product. The computer software product can be stored in a computer-readable storage medium, such as ROM/RAM, magnetic disk, optical disk, etc., including a number of instructions to cause a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in various embodiments or certain parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that it can still be used Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent substitutions are made to some of the technical features; however, these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims (13)

1. A method for accessing installation package resource files, characterized in that the method includes two parts, wherein the first part is executed by the server and includes: Compress and encrypt the installation package resource files to generate compressed and encrypted resource files; Generate an original resource file index table based on the installation package resource file. The resource file index table includes resource file names, random ID values corresponding to the resource file names, and installation package version information; Encrypt the original resource file index table to generate an encrypted resource file index table; Store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table; The second part is executed by the application side and includes: Call a predetermined resource loading interface, which is defined in the application program; Send a resource request to the server through the network request library based on the resource loading interface, where the resource request includes the resource unified locator URL, ID value and version information; A compressed and encrypted resource file is received based on the resource loading interface, and the compressed and encrypted resource file is obtained by the server using an encrypted resource file index table according to the resource request. 2. The installation package resource file access method according to claim 1, characterized in that the second part also includes: Decompress and decrypt the received compressed and encrypted resource files to generate decrypted and decompressed resource files; Select the corresponding storage method according to the type of decrypted and decompressed resource files, and store it. 3. The installation package resource file acquisition method according to claim 2, further characterized by selecting a corresponding local storage method according to the type of decrypted and decompressed resource files and performing local storage, including: When the decrypted and decompressed resource file is an image resource, the decrypted and decompressed resource file is stored in a local storage device; when the decrypted and decompressed resource file is a text resource, the decrypted and decompressed resource file is stored in the local storage device. Stored in memory cache. 4. The installation package resource file access method according to claim 1, further characterized in that, before the server side uses the encrypted resource file index table to obtain the compressed encrypted resource file according to the resource request, the method also includes: Perform identity authentication on the application end based on the first identity authentication information; the resource request also includes the first identity authentication information; When the authentication is passed, the encrypted resource file index table is decrypted, and the application is allowed to access the decrypted resource file index table. 5. A method for obtaining installation package resource files, characterized in that the method is executed by the application end, and the method includes: Call a predetermined resource loading interface, which is defined in the application program; Send a resource request to the server through the network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, a random ID value and version information; Receive compressed and encrypted resource files based on the resource loading interface. The compressed and encrypted resource files are obtained by the server using an encrypted resource file index table according to the resource request. The encrypted resource file index table includes the resource file name and the resource file. The random ID value and installation package version information corresponding to the name. 6. The method for obtaining installation package resource files according to claim 5, further characterized in that the method further includes: By calling the loading and parsing functions, the stored decrypted and decompressed resource files are read and loaded. 7. The installation package resource file acquisition method according to claim 6, further characterized in that, before loading the decrypted and decompressed resource files, the method further includes: performing a security check on the read decrypted and decompressed resource files; After the decrypted and decompressed resource file passes the security check, it is loaded again. 8. An installation package resource file management method, characterized in that the method is executed by a server, and the method includes: Compress and encrypt the installation package resource files to generate compressed and encrypted resource files; Generate an original resource file index table based on the installation package resource file. The resource file index table includes resource file names, random ID values corresponding to the resource file names, and installation package version information; Encrypt the original resource file index table to generate an encrypted resource file index table; The compressed encrypted resource files and the encrypted resource file index table are stored according to the original resource file index table. 9. An installation package resource file access system, characterized in that the system includes a server side and an application side, where the server side includes: The compression encryption module is used to compress and encrypt installation package resource files and generate compressed and encrypted resource files; An original resource file index table generation module is used to generate an original resource file index table according to the installation package resource file. The resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and installation package version information. ; A resource file index table encryption module, used to encrypt the original resource file index table and generate an encrypted resource file index table; A file storage module, configured to store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table; The application side includes: The resource loading interface calling module is used to call a predetermined resource loading interface, and the resource loading interface is defined in the application program; A resource request sending module, configured to send a resource request to the server through a network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, an ID value, and version information; A compressed and encrypted resource file receiving module is configured to receive a compressed and encrypted resource file based on the resource loading interface. The compressed and encrypted resource file is obtained by the server using an encrypted resource file index table according to the resource request. 10. A device for obtaining installation package resource files, characterized in that the device includes: The resource loading interface calling module is used to call a predetermined resource loading interface, and the resource loading interface is defined in the application program; A resource request sending module, configured to send a resource request to the server through a network request library based on the resource loading interface, where the resource request includes a resource unified locator URL, an ID value, and version information; A compressed and encrypted resource file receiving module, configured to receive compressed and encrypted resource files based on the resource loading interface. The compressed and encrypted resource files are obtained by the server using an encrypted resource file index table according to the resource request. The encrypted resource file index table Including resource file name, random ID value corresponding to the resource file name, and installation package version information. 11. An installation package resource file management device, characterized in that the device includes: The compression encryption module is used to compress and encrypt installation package resource files and generate compressed and encrypted resource files; An original resource file index table generation module is used to generate an original resource file index table according to the installation package resource file. The resource file index table includes a resource file name, a random ID value corresponding to the resource file name, and installation package version information. ; A resource file index table encryption module, used to encrypt the original resource file index table and generate an encrypted resource file index table; A file storage module, configured to store the compressed encrypted resource files and the encrypted resource file index table according to the original resource file index table. 12. An information storage medium, characterized in that the information storage medium stores a computer program. When the computer program is executed, the installation package resource file access method according to any one of claims 1 to 4 is implemented. The installation package resource file acquisition method according to any one of claims 5 to 7 or the installation package resource file management method according to claim 8. 13. An electronic device, characterized in that the electronic device includes a processor and a memory, the memory stores a computer program, and the processor executes the computer program to implement the installation package resource according to any one of claims 1-4. The file access method, the installation package resource file acquisition method according to any one of claims 5 to 7, or the installation package resource file management method according to claim 8.