Systems and methods for security analysis of applications on user mobile devices while maintaining user application privacy

A system, comprising:

• a processor;
• and
• a memory for storing executable instructions, the instructions being executed by the processor for:
• generating, for an application residing on a mobile device, at least one cryptographic representation of a company identifier and at least one type of application information;
• transmitting the at least one cryptographic representation for determination of whether the application is permitted for a company identified by the company identifier;
• receiving the determination indicating whether the application is permitted for the company;
• and
• in response to a request to install another application on the mobile device, generating at least one other cryptographic representation of at least one type of application information for the other application, the at least one other cryptographic representation being a composite hash of both a name of the other application and the company identifier, transmitting the at least one other cryptographic representation for determination of whether the other application is permitted for the company, and receiving the determination indicating whether the other application is permitted or not permitted for the company associated with the company identifier.

A method, comprising:

• generating, for an application residing on a mobile device, at least one cryptographic representation of a company identifier and at least one type of application information;
• transmitting the at least one cryptographic representation for determination of whether the application is permitted to access an enterprise network with enterprise services of a company associated with the company identifier;
• receiving the determination in the form of a message from an application risk control system indicating whether the application is permitted or not permitted to access the enterprise network with the enterprise services of the company associated with the company identifier;
• and
• in response to a request to install another application on the mobile device, generating at least one other cryptographic representation of at least one type of application information for the other application, the at least one other cryptographic representation being a composite hash of both a name of the other application and the company identifier, transmitting the at least one other cryptographic representation for determination of whether the other application is permitted to access an enterprise network with enterprise services of a company associated with the company identifier, and receiving the determination in the form of another message from an application risk control system indicating whether the other application is permitted or not permitted to access the enterprise network with the enterprise services of the company associated with the company identifier.