Recording system and method based on one-way hash function

Abstract

The invention discloses a recording system and a method based on one-way hash function. The system comprises a user terminal, a center server and an authentication server. The method comprises that: the user terminal records a record file and initializes an information authentication key and a map code; when the authentication server requests the user terminal for a record unit corresponding to an operation course, the user terminal calculates a test value by using the one-way hash function, and transmits the test value and a map code sequence back to the authentication server; the authentication server authenticates the accuracy of the test value and the map code sequence through the center server; and the center server checks that a phase of the map code sequence acquired by hash calculation is equal to the test value through the one-way hash function so as to check that the record file of the user terminal is not subjected to modification.

Description

technical field [0001] The invention relates to a system and method for maintaining records, in particular to a system and method for recording based on one-way hash functions. Background technique [0002] The Logging Mechanism is used to record the usage history of various systems, such as computer systems, application systems, or network systems. Records, system application activity records for auditing, or use history records for system safety return, application program operation records, interaction records with external components or servers, or user history records for a certain service. From the perspective of e-commerce, the user's operation history records for a certain service (video or software service) can be used as the basis for pricing and charging, or used as a source of information for service providers to analyze user behavior. Therefore, ensuring the security and trustworthiness of a record will affect the availability of that record. A secure record s...

AI Technical Summary

Problems solved by technology

[0004] 2. When the system is attacked and invaded, the records may also be obtained by the attacker and changed into untrue records

However, the technology disclosed in this patent needs to encrypt and sign the content of the recorded event, and the third-party server needs to keep all the content of the event

If the content of the recorded event is information that the verification server does not want to publish (for example, the verification server is owned by Bank A, while the third-party server is owned by Bank B, if the content of the event involves the operating secrets of Bank A, then it should not be published) The content of the event is disclosed on the third-party server of Bank B), it is not suitable to use the technology of US5978475 patent to protect the integrity of the record

In addition, the technology disclosed in the US5978475 patent involves encryption and decryption of the content. The steps are complicated and the system has a large amount of calculation, so that the verification party needs higher calculation efficiency to execute

In summary, the currently proposed technology for protecting the integrity and correctness of records still has defects such as complicated steps, difficult implementation, and heavy and uneven system calculations.

Images