Method for signing key management by electronic device, and electronic device therefor
Disclosed is an electronic device comprising: a memory in which instructions are stored; and a processor electrically connected to the memory. The processor, when the instructions stored in the memory are executed: acquires a command for installation of a first application signed with a first key; checks information relating to the first key in a key storage of the electronic device; if the first key is determined to be valid, installs the first application; and if the first key is determined to have been revoked, controls to prohibit installation of the first application.
1. An electronic device comprising:
a memory storing instructions and information on applications installed in the electronic device; and
a processor configured to execute the instructions to:
acquire a command for installing a first application signed by a first key,
identify information on the first key within a key storage space stored in the memory of the electronic device, wherein the information on the first key is stored in the key storage space separately from a storage space storing the information on applications,
install the first application in response to determining that the first key is valid based on the identified information, and
prevent installation of the first application in response to determining that the first key is discarded based on the identified information,
wherein, when identifying the information on the first key, the processor is further configured to execute the instructions to:
identify a status flag for the first key among a plurality of keys stored in the key storage space, the status flag indicating whether either the first key is valid or the first key was registered in the key storage space and then discarded.
2. The electronic device of claim 1 , wherein, in response to identifying that the information on the first key does not exist within the key storage space, the processor is further configured to execute the instructions to:
install the first application.
3. The electronic device of claim 2 , wherein, in response to identifying that the information on the first key does not exist within the key storage space, the processor is further configured to execute the instructions to:
register the information on the first key in the key storage space.
4. The electronic device of claim 1 , wherein the key storage space comprises a database that stores information on a key of an application installed in the electronic device.
5. The electronic device of claim 4 , wherein the information on the key of the application installed in the electronic device comprises at least one of a history for registration of the key in the key storage space or a history for discarding of the key which has been registered in the key storage space.
6. The electronic device of claim 5 , wherein the history for discarding of the key comprises, a history of discarding an original key used to sign when the application is installed in the electronic device registered in the key storage space, when the application is updated by a key different from the original key.
7. The electronic device of claim 1 , wherein the first application is signed by an original signature key equal to a second application and has an equal shared user identification (UID), and the processor is configured to determine whether to share resources between the first application and the second application according to whether an application list included in the first application identifies the second application.
8. The electronic device of claim 1 , wherein in response to determining that the first key is discarded based on the identified information, the processor is further configured to execute the instructions to:
determine whether to prevent installation of the first application in response to a user input.
9. A method of managing a signature key by an electronic device, the method comprising:
acquiring a command for installing a first application signed by a first key;
identifying information on the first key within a key storage space of the electronic device, wherein the information on the first key is stored in the key storage space separately from a storage space storing information on applications;
installing the first application in the electronic device in response to determining that the first key is valid based on the identified information; and
preventing installation of the first application in response to determining that the first key is discarded based on the identified information,
wherein the identifying of the information on the first key within the key storage space comprises identifying a status flag for the first key among a plurality of keys stored in the key storage space, the status flag indicating whether either the first key is valid or the first key was registered in the key storage space and then discarded.
10. The method of claim 9 , further comprising:
installing the first application, in response to identifying that the information on the first key does not exist within the key storage space; and
registering the information on the first key in the key storage space, in response to identifying that the information on the first key does not exist within the key storage space.
11. The method of claim 9 , wherein the key storage space comprises a database that stores information on a key of an application installed in the electronic device.
12. The method of claim 11 , wherein the information on the key of the application installed in the electronic device comprises at least one of a history for registration of the key in the key storage space or a history for discarding of the key which has been registered in the key storage space.
13. The method of claim 12 , wherein the history for discarding of the key comprises, a history of discarding of an original key used to sign when the application is installed in the electronic device registered in the key storage space, when the application is updated by a key different from the original key.
14. A non-transitory computer readable medium for storing computer readable program code or instructions for carrying out operations, when executed by a processor, for managing a signature key by an electronic device, the operations comprising:
acquiring a command for installing a first application signed by a first key;
identifying information on the first key within a key storage space of the electronic device, wherein the information on the first key is stored in the key storage space separately from a storage space storing information on applications;
installing the first application in the electronic device in response to determining that the first key is valid based on the identified information; and
preventing installation of the first application in response to determining that the first key is discarded based on the identified information,
wherein the identifying of the information on the first key within the key storage space comprises identifying a status flag for the first key among a plurality of keys stored in the key storage space, the status flag indicating whether either the first key is valid or the first key was registered in the key storage space and then discarded.
15. The non-transitory computer readable medium of claim 14 , further comprising:
installing the first application, in response to identifying that the information on the first key does not exist within the key storage space; and
registering the information on the first key in the key storage space, in response to identifying that the information on the first key does not exist within the key storage space.
16. The non-transitory computer readable medium of claim 14 , wherein the key storage space comprises a database that stores information on a key of an application installed in the electronic device.
17. The non-transitory computer readable medium of claim 16 , wherein the information on the key of the application installed in the electronic device comprises at least one of a history for registration of the key in the key storage space or a history for discarding of the key which has been registered in the key storage space.