Audit Log Identity Preservation via Secure Index Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional audit logs are vulnerable to misuse by intruders, as they contain sensitive identity information that can be exploited to perpetrate fraudulent transactions, posing a significant risk to enterprise security and compliance.
Innovation Solution
A computer-implemented method that generates a transaction identity for each electronic transaction, creates an index entry in a secure index structure, and uses a message digest to track transactions within the audit log, ensuring only authorized resources can access the identity information, thereby maintaining the security and integrity of identities within the log.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional audit logs store identity information directly, then transaction tracking and compliance monitoring are enabled, but the logs become vulnerable to misuse by intruders who can exploit identity information to perpetrate fraudulent transactions
Solution Approach 1:
The patent extracts sensitive identity information from the audit log entries by storing only index references instead of actual identity data. The identity information is separated into a secure index structure that is inaccessible to log readers, while the audit log contains only non-sensitive references. This extraction eliminates the vulnerability while preserving the ability to track transactions through index references.
Solution Approach 2:
The patent introduces an intermediary index structure that mediates between the audit log and identity information. Instead of direct access to identity data, the system uses index entries as intermediaries that reference identities without exposing them. Authorized resources must query the secure index structure through proper authentication, creating a protective layer between the audit log and sensitive identity information.
2Object-affected harmful factors
If identity information is removed from audit logs to improve security, then security vulnerabilities are reduced, but the ability to track and audit transactions is compromised
Solution Approach 1:
The patent creates a copy of the index structure that maintains reference information without containing sensitive identity data. The index entries serve as copies or proxies for actual identities, allowing transaction tracking through reference chains while the original identity information remains protected in the secure index structure. Authorized queries can resolve these references to obtain identity information when needed for auditing.
Solution Approach 2:
The patent adds a new dimensional layer to the audit system by separating the audit log into two dimensions: a public dimension containing transaction metadata and index references, and a protected dimension containing actual identity information accessible only through authenticated queries. This dimensional separation allows simultaneous achievement of security and tracking capabilities.
3Object-affected harmful factors
If a secure index structure is implemented to protect identity information, then unauthorized access is prevented, but system complexity increases due to additional data structures and access control mechanisms
Solution Approach 1:
The patent segments the audit system into distinct functional components: an audit log containing transaction references, an index structure containing identity mappings, and authentication mechanisms. This segmentation allows each component to be optimized independently and simplifies access control by defining clear boundaries between public and protected data.
Solution Approach 2:
The index structure serves multiple functions simultaneously: it acts as a security barrier protecting identity information, a transaction tracking mechanism through reference chains, and an authenticated query interface for authorized access. This multi-functionality reduces overall system complexity by consolidating multiple mechanisms into a single unified structure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Techniques are provided for preserving and managing identities within an audit log when performing and managing electronic transactions. Initial entries into a log do not include an explicit and direct reference to an agent that performs a transaction; rather, the agent acquires a temporary transaction identity for the transaction and an indirect reference to the transaction identity is written to the log while the transaction is pending. Once the transaction completes a direct reference to the transaction identity is written to the log, the identity of agent remains transparent until the identity of the agent expires, if at all.