《BREW进阶与精通——3G移动增值业务的运营、定制与开发》连载之16---BREW精要之安全性

移动通信网正在以IP为核心实施承载网的技术变迁，业务网将依托在以IP为技术基础的承载网之上已没有太多的悬念。然而，现有IP承载网不能保证相应的安全性和可信任性，且加密技术滥用和失控，给信息安全造成了一些威胁。作为一种移动增值业务平台，BREW所提供的安全性是独一无二的。

4.3.4.1 系统安全

由于安全性涵盖面很广，即使OSI网络分层模型也存在不同的安全层面，上层的安全只有在下层的安全得到保障后才有意义，具有一定的传递性。所以当一个应用系统宣称自己是安全的系统之前，必须在不同层都拥有足够的安全性。按粒度从粗到细的排序是：系统级安全、程序资源访问控制安全、功能性安全、数据域安全。不同系统的系统级安全关注点往往差异很大，有很大部分的业务系统甚至不涉及系统级安全问题。

1)系统级安全：BREW的系统级安全是由所承载的无线网络决定的。以CDMA网络为例，能够实现访问IP段的限制，登录时间段的限制，连接数的限制，特定时间段内登录次数的限制等，是应用系统第一道防护大门。

2)资源访问控制安全 ：在BREW的客户端上，为应用程序提供了与其权限相关的设定，仅其权限相符功能才能被执行。

3)功能性安全：功能性安全会对BREW应用流程产生影响，为了保证BREW应用的安全性，所有的BREW商业应用都是经过严格测试的，也就是说，通过第三方独立测试（TRUE BREW TEST）来保证增值业务功能的安全性。

4)数据域安全：BREW中数据域的首要控制是数字签名控制的执行，不正确登陆的程序将不可能被执行，BREW执行环境启动/强制执行所有的其它控制和防御。数字签名是安全领域的有力武器，根密钥在VeriSign vault里，VeriSign 另有附加口令探测密钥的安全机制。

除此之外，基于BREW的移动增值业务分发渠道是单向的。应用程序一旦获得商用数字签名，将永远不可被修改，应用程序始终被数码签名保护。开发商的应用程序在BDS的下载服务器里，除了OTA以及运营商授权的预安装之外，他人一般没有获得或篡改该应用程序的渠道。在手机上任何修改,即使是一个字节, 都将被探测到并禁止执行。从而，病毒没有繁殖传播的可能性。也就是说，应用程序的发布不是对等流程, 也就没有传统的高速传播路径供病毒繁殖传播。资源访问控制的安全性使得一个程序不能改变或侵蚀另外一个程序，这种几乎不传播的可能性将促使病毒爱好者几乎望洋兴叹。

4.3.4.2 终端安全

BREW中使用一种名为 AEESafeMode 的机制来防止有问题的 BREW 应用程序导致的设备崩溃。手机设备首次崩溃后，此机制将在重新启动时将设备置于监察模式并启动一个计时器。计时器的持续时间由手机厂商配置。

如果计时器超时，此机制将运行级别转回正常模式。如果设备在计时器超时前再次崩溃，设备重新启动时将再次进入安全模式并启动计时器。在设备返回正常模式前禁止所有 BREW 应用程序创建活动。通过重新调用或升级有问题的应用程序可以恢复到正常模式。以下的图表显示了正常、监察和安全模式之间的转换关系。

<!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f"> <v:stroke joinstyle="miter" /> <v:formulas> <v:f eqn="if lineDrawn pixelLineWidth 0" /> <v:f eqn="sum @0 1 0" /> <v:f eqn="sum 0 0 @1" /> <v:f eqn="prod @2 1 2" /> <v:f eqn="prod @3 21600 pixelWidth" /> <v:f eqn="prod @3 21600 pixelHeight" /> <v:f eqn="sum @0 0 1" /> <v:f eqn="prod @6 1 2" /> <v:f eqn="prod @7 21600 pixelWidth" /> <v:f eqn="sum @8 21600 0" /> <v:f eqn="prod @7 21600 pixelHeight" /> <v:f eqn="sum @10 21600 0" /> </v:formulas> <v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" /> <o:lock v:ext="edit" aspectratio="t" /> </v:shapetype><v:shape id="_x0000_i1025" type="#_x0000_t75" style='width:396pt; height:148.5pt'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image001.jpg" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image001.jpg" o:title="safe" /> </v:shape><![endif]-->

<!--[if supportFields]><b style='mso-bidi-font-weight:normal'><span style="mso-element:field-begin" mce_style="mso-element:field-begin"></span><span style='mso-spacerun:yes'>&nbsp;</span>TOC \h \z \c &quot;</b><b style="mso-bidi-font-weight: normal" mce_style="mso-bidi-font-weight: normal"><span lang=ZH-CN style="font-family:宋体;mso-ascii-font-family:"Times New Roman"; mso-hansi-font-family:"Times New Roman"" mce_style="font-family:宋体;mso-ascii-font-family:"Times New Roman"; mso-hansi-font-family:"Times New Roman"">图</span>&quot; <span style="mso-element: field-separator" mce_style="mso-element: field-separator"></span></b><![endif]-->图 4-9： BREW中的AEESafeMode 机制 <!--[if supportFields]><b style='mso-bidi-font-weight:normal'><span style="mso-element:field-end" mce_style="mso-element:field-end"></span></b><![endif]-->

4.3.4.3 内容安全

对于应用内容而言，BREW提供了完备的应用认证与管理（图4-10），能够确保一个用户下载的应用程序只能为该客户所使用，从而有效地防止应用软件的非法复制与盗版现象，保证运营商和开发商以及用户的合法权益不受到侵害。

<!--[if mso & !supportInlineShapes & supportFields]><span style='mso-font-kerning:0pt'><span style="mso-element:field-begin;mso-field-lock: yes" mce_style="mso-element:field-begin;mso-field-lock: yes"></span><span style="mso-spacerun:yes" mce_style="mso-spacerun:yes">&nbsp;</span>SHAPE<span style='mso-spacerun:yes'>&nbsp; </span>\* MERGEFORMAT <span style="mso-element:field-separator" mce_style="mso-element:field-separator"></span></span><![endif]--><!--[if gte vml 1]><v:group id="_x0000_s1026" editas="canvas" style='width:330.1pt;height:452.4pt; mso-position-horizontal-relative:char;mso-position-vertical-relative:line' coordorigin="2362,5575" coordsize="6731,9239"> <o:lock v:ext="edit" aspectratio="t" /> <v:shape id="_x0000_s1027" type="#_x0000_t75" style='position:absolute;left:2362; top:5575;width:6731;height:9239' o:preferrelative="f"> <v:fill o:detectmouseclick="t" /> <v:path o:extrusionok="t" o:connecttype="none" /> <o:lock v:ext="edit" text="t" /> </v:shape><v:shape id="_x0000_s1028" type="#_x0000_t75" style='position:absolute; left:2623;top:6622;width:828;height:1188'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image003.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image003.wmz" o:title="BD18246_" /> </v:shape><v:shapetype id="_x0000_t202" coordsize="21600,21600" o:spt="202" path="m,l,21600r21600,l21600,xe"> <v:stroke joinstyle="miter" /> <v:path gradientshapeok="t" o:connecttype="rect" /> </v:shapetype><v:shape id="_x0000_s1029" type="#_x0000_t202" style='position:absolute; left:2688;top:7894;width:896;height:504;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1029" mce_style="mso-next-textbox:#_x0000_s1029" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='mso-bidi-font-size:10.5pt;font-family:"Arial","sans-serif"; color:black'>BDS<o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1030" type="#_x0000_t75" style='position:absolute; left:4384;top:7220;width:652;height:380'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image004.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image004.wmz" o:title="MCj02381790000[1]" /> </v:shape><v:shape id="_x0000_s1031" type="#_x0000_t202" style='position:absolute; left:4123;top:7594;width:1924;height:834;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1031" mce_style="mso-next-textbox:#_x0000_s1031" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>ADS</span><span lang=ZH-CN style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:宋体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:宋体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:Arial;color:black">采用私钥</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>License</span><span lang=ZH-CN style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">签名</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1032" type="#_x0000_t75" style='position:absolute; left:5949;top:8192;width:701;height:765'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image005.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image005.wmz" o:title="MCSO00109_0000[1]" /> </v:shape><v:shape id="_x0000_s1033" type="#_x0000_t202" style='position:absolute; left:5819;top:9016;width:2335;height:363;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1033" mce_style="mso-next-textbox:#_x0000_s1033" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>BREW App</span><span lang=ZH-CN style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">数字签名</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shapetype id="_x0000_t65" coordsize="21600,21600" o:spt="65" adj="18900" path="m,l,21600@0,21600,21600@0,21600,xem@0,21600nfl@3@5c@7@9@11@13,21600@0e"> <v:formulas> <v:f eqn="val #0" /> <v:f eqn="sum 21600 0 @0" /> <v:f eqn="prod @1 8481 32768" /> <v:f eqn="sum @2 @0 0" /> <v:f eqn="prod @1 1117 32768" /> <v:f eqn="sum @4 @0 0" /> <v:f eqn="prod @1 11764 32768" /> <v:f eqn="sum @6 @0 0" /> <v:f eqn="prod @1 6144 32768" /> <v:f eqn="sum @8 @0 0" /> <v:f eqn="prod @1 20480 32768" /> <v:f eqn="sum @10 @0 0" /> <v:f eqn="prod @1 6144 32768" /> <v:f eqn="sum @12 @0 0" /> </v:formulas> <v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" textboxrect="0,0,21600,@13" /> <v:handles> <v:h position="#0,bottomRight" xrange="10800,21600" /> </v:handles> <o:complex v:ext="view" /> </v:shapetype><v:shape id="_x0000_s1034" type="#_x0000_t65" style='position:absolute; left:4931;top:6098;width:1344;height:674;v-text-anchor:middle' fillcolor="#9cf"> <v:textbox style="mso-next-textbox:#_x0000_s1034" mce_style="mso-next-textbox:#_x0000_s1034" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal align=center style="text-align:center;mso-layout-grid-align: none;text-autospace:none" mce_style="text-align:center;mso-layout-grid-align: none;text-autospace:none"><span lang=ZH-CN style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">客户端信息</span><span style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1035" type="#_x0000_t65" style='position:absolute; left:6601;top:6098;width:1240;height:674;v-text-anchor:middle' fillcolor="#fc9"> <v:textbox style="mso-next-textbox:#_x0000_s1035" mce_style="mso-next-textbox:#_x0000_s1035" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal align=center style="text-align:center;mso-layout-grid-align: none;text-autospace:none" mce_style="text-align:center;mso-layout-grid-align: none;text-autospace:none"><span lang=ZH-CN style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">使用规则</span><span style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:line id="_x0000_s1036" style="position:absolute" mce_style="position:absolute" from="5884,6846" to="6210,7145"> <v:stroke endarrow="block" /> </v:line><v:line id="_x0000_s1037" style="position:absolute;flip:x" mce_style="position:absolute;flip:x" from="6406,6846" to="6667,7145"> <v:stroke endarrow="block" /> </v:line><v:shape id="_x0000_s1038" type="#_x0000_t202" style='position:absolute; left:6145;top:6173;width:496;height:628;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1038" mce_style="mso-next-textbox:#_x0000_s1038" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:20.5pt;mso-bidi-font-size:24.0pt;font-family:"Arial","sans-serif"; color:black'>+</span><span style="font-size:20.5pt;mso-bidi-font-size: 24.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:宋体; color:black" mce_style="font-size:20.5pt;mso-bidi-font-size: 24.0pt;font-family:"Arial","sans-serif";mso-bidi-font-family:宋体; color:black"><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1039" type="#_x0000_t75" style='position:absolute; left:6080;top:7220;width:516;height:447'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image006.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image006.wmz" o:title="MCj03113280000[1]" /> </v:shape><v:line id="_x0000_s1040" style="position:absolute" mce_style="position:absolute" from="5232,7369" to="6014,7369"> <v:stroke endarrow="block" /> </v:line><v:line id="_x0000_s1041" style="position:absolute" mce_style="position:absolute" from="6275,7744" to="6275,8042"> <v:stroke endarrow="block" /> </v:line><v:shape id="_x0000_s1042" type="#_x0000_t75" style='position:absolute; left:2427;top:11781;width:1196;height:1720'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image007.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image007.wmz" o:title="j0300233[1]" /> </v:shape><v:shape id="_x0000_s1043" type="#_x0000_t202" style='position:absolute; left:4321;top:12831;width:1925;height:1304;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1043" mce_style="mso-next-textbox:#_x0000_s1043" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>ADS</span><span lang=ZH-CN style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:宋体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:宋体;mso-ascii-font-family:Arial;mso-hansi-font-family: Arial;mso-bidi-font-family:Arial;color:black">采用公钥解密</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt'><o:p>&nbsp;</o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1044" type="#_x0000_t75" style='position:absolute; left:6080;top:10884;width:701;height:764'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image005.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image005.wmz" o:title="MCSO00109_0000[1]" /> </v:shape><v:shape id="_x0000_s1045" type="#_x0000_t202" style='position:absolute; left:5949;top:11825;width:2007;height:426;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1045" mce_style="mso-next-textbox:#_x0000_s1045" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>BREW App</span><span lang=ZH-CN style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">数字签名</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1046" type="#_x0000_t65" style='position:absolute; left:3771;top:13426;width:1591;height:523;v-text-anchor:middle' fillcolor="#9cf"> <v:textbox style="mso-next-textbox:#_x0000_s1046" mce_style="mso-next-textbox:#_x0000_s1046" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal align=center style="text-align:center;mso-layout-grid-align: none;text-autospace:none" mce_style="text-align:center;mso-layout-grid-align: none;text-autospace:none"><span lang=ZH-CN style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:10.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">客户端信息</span><span style='font-size:10.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:line id="_x0000_s1047" style="position:absolute" mce_style="position:absolute" from="6406,12229" to="6406,12454"> <v:stroke endarrow="block" /> </v:line><v:shape id="_x0000_s1048" type="#_x0000_t75" style='position:absolute; left:6275;top:12604;width:517;height:447'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image006.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image006.wmz" o:title="MCj03113280000[1]" /> </v:shape><v:line id="_x0000_s1049" style="position:absolute" mce_style="position:absolute" from="5427,12828" to="6210,12828"> <v:stroke endarrow="block" /> </v:line><v:shapetype id="_x0000_t68" coordsize="21600,21600" o:spt="68" adj="5400,5400" path="m0@0l@1@0@1,21600@2,21600@2@0,21600@0,10800,xe"> <v:stroke joinstyle="miter" /> <v:formulas> <v:f eqn="val #0" /> <v:f eqn="val #1" /> <v:f eqn="sum 21600 0 #1" /> <v:f eqn="prod #0 #1 10800" /> <v:f eqn="sum #0 0 @3" /> </v:formulas> <v:path o:connecttype="custom" o:connectlocs="10800,0;0,@0;10800,21600;21600,@0" o:connectangles="270,180,90,0" textboxrect="@1,@4,@2,21600" /> <v:handles> <v:h position="#1,#0" xrange="0,10800" yrange="0,21600" /> </v:handles> </v:shapetype><v:shape id="_x0000_s1050" type="#_x0000_t68" style='position:absolute; left:2558;top:8266;width:195;height:3291;v-text-anchor:middle' fillcolor="#bbe0e3"> <v:textbox style="layout-flow:vertical-ideographic" mce_style="layout-flow:vertical-ideographic" /> </v:shape><v:shapetype id="_x0000_t67" coordsize="21600,21600" o:spt="67" adj="16200,5400" path="m0@0l@1@0@1,0@2,0@2@0,21600@0,10800,21600xe"> <v:stroke joinstyle="miter" /> <v:formulas> <v:f eqn="val #0" /> <v:f eqn="val #1" /> <v:f eqn="sum height 0 #1" /> <v:f eqn="sum 10800 0 #1" /> <v:f eqn="sum width 0 #0" /> <v:f eqn="prod @4 @3 10800" /> <v:f eqn="sum width 0 @5" /> </v:formulas> <v:path o:connecttype="custom" o:connectlocs="10800,0;0,@0;10800,21600;21600,@0" o:connectangles="270,180,90,0" textboxrect="@1,0,@2,@6" /> <v:handles> <v:h position="#1,#0" xrange="0,10800" yrange="0,21600" /> </v:handles> </v:shapetype><v:shape id="_x0000_s1051" type="#_x0000_t67" style='position:absolute; left:3471;top:8341;width:195;height:3291;v-text-anchor:middle' fillcolor="#bbe0e3"> <v:textbox style="layout-flow:vertical-ideographic" mce_style="layout-flow:vertical-ideographic" /> </v:shape><v:shape id="_x0000_s1052" type="#_x0000_t202" style='position:absolute; left:2362;top:11630;width:1591;height:753;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1052" mce_style="mso-next-textbox:#_x0000_s1052" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span lang=ZH-CN style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family: 宋体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: Arial;color:black'>客户端</span><span style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black"> License </span><span lang=ZH-CN style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family: 宋体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: Arial;color:black'>验证</span><span style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1053" type="#_x0000_t202" style='position:absolute; left:3732;top:9762;width:1604;height:976;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1053" mce_style="mso-next-textbox:#_x0000_s1053" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'>ADS </span><span lang=ZH-CN style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black" mce_style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:宋体;mso-ascii-font-family:Arial; mso-hansi-font-family:Arial;mso-bidi-font-family:Arial;color:black">响应客户端的认证请求</span><span style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif"; color:black'><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1054" type="#_x0000_t75" style='position:absolute; left:4547;top:12346;width:622;height:688;rotation:-3744092fd'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image008.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image008.wmz" o:title="MCj02901890000[1]" /> </v:shape><v:shape id="_x0000_s1055" type="#_x0000_t202" style='position:absolute; left:6601;top:7294;width:1240;height:455;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1055" mce_style="mso-next-textbox:#_x0000_s1055" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span lang=ZH-CN style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family: 宋体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: Arial;color:black'>签名操作</span><span style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1056" type="#_x0000_t202" style='position:absolute; left:6865;top:12504;width:1602;height:646;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1056" mce_style="mso-next-textbox:#_x0000_s1056" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span lang=ZH-CN style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family: 宋体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: Arial;color:black'>签名验证</span><span style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black" mce_style="font-size:9.0pt;mso-bidi-font-size: 12.0pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:shape id="_x0000_s1057" type="#_x0000_t202" style='position:absolute; left:6732;top:13200;width:2361;height:799;v-text-anchor:top-baseline' filled="f" fillcolor="#bbe0e3" stroked="f"> <v:textbox style="mso-next-textbox:#_x0000_s1057" mce_style="mso-next-textbox:#_x0000_s1057" inset="2.17017mm,1.0851mm,2.17017mm,1.0851mm"> <![if !mso]> <table cellpadding=0 cellspacing=0 width="100%"> <tr> <td><![endif]> <div> <p class=MsoNormal style="mso-layout-grid-align:none;text-autospace:none" mce_style="mso-layout-grid-align:none;text-autospace:none"><span lang=ZH-CN style='font-size:9.0pt;mso-bidi-font-size:12.0pt;font-family: 宋体;mso-ascii-font-family:Arial;mso-hansi-font-family:Arial;mso-bidi-font-family: Arial;color:black'>依赖于终端信息来验证客户端信息</span><span style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif";color:black" mce_style="font-size:9.0pt; mso-bidi-font-size:12.0pt;font-family:"Arial","sans-serif";color:black"><o:p></o:p></span></p> <p class=MsoNormal><span style="font-size:9.0pt;mso-bidi-font-size:12.0pt" mce_style="font-size:9.0pt;mso-bidi-font-size:12.0pt"><o:p>&nbsp;</o:p></span></p> </div> <![if !mso]></td> </tr> </table> <![endif]></v:textbox> </v:shape><v:line id="_x0000_s1058" style="position:absolute" mce_style="position:absolute" from="6471,13126" to="6471,13351"> <v:stroke endarrow="block" /> </v:line><v:shape id="_x0000_s1059" type="#_x0000_t75" style='position:absolute; left:6210;top:13426;width:515;height:467'> <v:imagedata src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image009.wmz" mce_src="file:///C:\DOCUME~1\hongweic\LOCALS~1\Temp\msohtmlclip1\01\clip_image009.wmz" o:title="MCj02808030000[1]" /> </v:shape><v:line id="_x0000_s1060" style="position:absolute" mce_style="position:absolute" from="5427,13650" to="6145,13650"> <v:stroke endarrow="block" /> </v:line><w:wrap type="none" /> <w:anchorlock /> </v:group><![endif]--><!--[if mso & !supportInlineShapes & supportFields]><span style='mso-font-kerning:0pt'><v:shape id="_x0000_i1026" type="#_x0000_t75" style='width:330.1pt;height:452.4pt'> <v:imagedata croptop="-65520f" cropbottom="65520f" /> </v:shape><span style="mso-element:field-end" mce_style="mso-element:field-end"></span></span><![endif]-->

<!--[if supportFields]><b style='mso-bidi-font-weight:normal'><span style="mso-element:field-begin" mce_style="mso-element:field-begin"></span><span style='mso-spacerun:yes'>&nbsp;</span>TOC \h \z \c &quot;</b><b style="mso-bidi-font-weight: normal" mce_style="mso-bidi-font-weight: normal"><span lang=ZH-CN style="font-family:宋体;mso-ascii-font-family:"Times New Roman"; mso-hansi-font-family:"Times New Roman"" mce_style="font-family:宋体;mso-ascii-font-family:"Times New Roman"; mso-hansi-font-family:"Times New Roman"">图</span>&quot; <span style="mso-element: field-separator" mce_style="mso-element: field-separator"></span></b><![endif]-->图 4-10： BREW应用的认证管理及数字签名 <!--[if supportFields]><b style='mso-bidi-font-weight:normal'><span style="mso-element:field-end" mce_style="mso-element:field-end"></span></b><![endif]-->

手机是一种必须重视安全性能的设备，用户在手机上使用的应用程序也必须能保证安全，能够在实现信赖性时发挥作用的是数字签名。所有应用程序如果没有开发人员或者运营商的电子签名，在BREW中将无法运行。对于那些数字签名有可能被更换的应用程序，则被判断成为有可能感染了病毒，从而在BREW环境下无法运行。 BREW要进行两次电子签名确认。第一次是在下载应用程序时，第二次是当运行下载的应用程序时还需要进行确认，这是为了避免下载后的应用程序被篡改成其他程序。