Private Mobile App Security Analysis Using Cryptographic Hash Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively assess and mitigate risks posed by applications on mobile devices, potentially leading to malicious activities that compromise network security and user privacy, especially in environments where personal devices are used to access enterprise networks.
Innovation Solution
A method and system that utilize cryptographic representations of application information to compare against a database, automatically remediating applications identified as risks by quarantining or restricting access to enterprise networks, while maintaining user privacy by not logging identifying information about the mobile device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional application analysis methods are used to assess security risks, then security risk detection capability is improved, but user privacy is compromised due to logging of identifying information
Solution Approach 1:
The patent extracts only the cryptographic hash of application information from the mobile device, leaving identifying information behind. This extracted hash is then compared against databases to detect security risks without exposing user privacy, effectively separating the security assessment function from privacy-invasive data collection
Solution Approach 2:
The patent introduces cryptographic hash values as an intermediary between the application and the security analysis system. This intermediary represents the application for security purposes while maintaining privacy, allowing the system to assess security risks without direct access to identifying information about the application or user
2Loss of information
If cryptographic representations are used to maintain privacy, then user privacy is protected, but the complexity of the security analysis system increases
Solution Approach 1:
The patent uses cryptographic hash values as simplified copies of application information. These hash copies contain sufficient data for security comparison and database matching while being computationally efficient and privacy-preserving, replacing the need to handle complex identifying information
3Reliability
If automated remediation is implemented for risky applications, then network security is improved, but the risk of false positives affecting legitimate applications increases
Solution Approach 1:
The patent implements automated remediation actions (such as blocking or quarantining) based on the results of cryptographic hash comparisons. When a hash matches a known malicious application in the database, the system automatically applies remediation, providing rapid response to security threats while reducing manual intervention requirements
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for privately performing application security analysis is disclosed. The method generates, for an application residing on a mobile device (510), at least one cryptographic representation of a company identifier and at least one type of application information. The method transmits the at least one cryptographic representation for determination of whether the application is permitted for a company identified by the company identifier. The determination is then received and indicates whether the application is permitted for the company. In response to a request to install another application on the mobile device (510), the method generates at least one other cryptographic representation of at least one type of application information for the other application, the at least one other cryptographic representation being a composite hash of both a name of the other application and the company identifier, transmits the at least one other cryptographic representation for determination of whether the other application is permitted for the company, and receives the determination indicating whether the other application is permitted or not permitted for the company associated with the company identifier.