This solution has too much limitation!

[rigortek]

1. self defined permission: "com.boyaa.permission.push" leads to all clients must use the same signature, My God, it is impossible!
2. The new version of PushService may be useless for It depends entirely on the first launched application (PushService hosted application)
3. it is easy to attack com.boyaa.push process or create a fake com.boyaa.push process for you use implicit bind service method,
   android 5.0 and above has abandoned implicit bind service.