Android应用内话费计费安全防控体系

随着移动互联网业务的飞速发展,应用免费、应用内计费(In-App-Purchase)被越来越多的用户所接受.主流的计费通道包括支付宝、微信和手机话费支付.本文探讨了如何构建一个应用内话费计费的安全防控体系,通过计费SDK软件加固、异常计费行为发现、常态化计费SDK更新和升级等方式,进行端到端的安全管控.

IAP Security Management System for Android Applications

Along with the development of mobile Internet, download for free and in-app-purchase is becoming more and more popular. Primary online payment includes Alipay, Tenpay and mobile phone payment. Since non-username-password mode (subscribers donot have to typing a user name and a password to pass the authentication) is widely used in mobile phone payment, security risks are brought as well as conveniences. That is launching charging request via hacked charging SDK and without the confirmation from subscribers. In order to tackle with this problem, an end-to-end IAP Security Management System for Android Applications is introduced in this paper, which includes methodologies of software hardening, abnormal charging detection and frequent SDK update and upgrade.