On the Design of a Blockchain-Based Reputation Service for Android Applications

摘要

Permissions usually cannot fulfill user requirements to determine security and privacy risks of Android smartphone applications. To provide users additional information about applications, this study proposes a blockchainbased reputation service for Android applications. The proposedreputation service provides a scheme to integrate reputation information about an application, such as comments, reviews, security analysis results and so on, around the world with tree structures. Therefore, people can send requests to perform query and update operations provided by the reputationservice on the so called reputation information trees. Moreover, the proposed service adopts the blockchain technology used in the Bitcoin. Therefore, the service can be provided based on resources of application users and other volunteers. Consequently, we can prevent reputation informationprovided by the service from being controlled by a single party. Moreover, this study proposes a flexible means for application developers or marketplace providers to embed reputation information into applications to reduce the costs of obtaining the basic reputation information from the reputationservice. Users can obtain reputation of applications from the application files directly and query advanced information from the reputation service on demand. While users can obtain more reputation information about applications, the study can hopefully contribute to enable users to understandapplication security and privacy risks.