Blockchain Clock for Risk-Based Event Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current log management systems face challenges in providing real-time, reactive analysis and security due to the large volumes and varied formats of event logs, which are often stored as isolated entities without links to temporally and causally related events, making it difficult to produce meaningful results and ensure system security.
Innovation Solution
A method is introduced to generate a blockchain clock that processes log entries to extract event data, computes a risk value, and stores only event data associated with a certain level of risk, preserving the transparency and relationships between events, thereby improving system security by allowing for real-time decision-making on event execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all event logs are stored and analyzed manually, then comprehensive security monitoring is achieved, but real-time analysis and response become impossible due to large volumes and varied formats
Solution Approach 1:
The patent extracts only high-risk event data from the complete log set by computing risk values and filtering events that exceed a threshold. This selective extraction enables real-time processing of critical security events without being overwhelmed by the full volume of logs, resolving the contradiction between comprehensive monitoring and real-time response capability
Solution Approach 2:
The patent introduces a risk value parameter computed from event data attributes (user, source, target, operation) to transform the log management approach. By changing from storing all events to storing only high-risk events identified through risk parameter computation, the system achieves both comprehensive security monitoring and real-time analysis capability
2Ease of manufacture
If event logs are stored as isolated entities, then storage simplicity is maintained, but difficulty of analysis increases due to lack of links to temporally and causally related events
Solution Approach 1:
The patent introduces a blockchain clock as an intermediary data structure that links isolated event logs through temporal ordering and risk-based selection. The blockchain clock creates causal and temporal relationships between events without requiring complex storage structures, enabling both storage simplicity and improved log analysis capability through the intermediary blockchain structure
3Quantity of substance
If only high-risk event data is stored on the blockchain clock, then storage efficiency and security focus are improved, but potential loss of contextual information from low-risk events may occur
Solution Approach 1:
The patent applies local quality by differentiating the treatment of event data based on risk characteristics. High-risk events are stored in detail on the blockchain clock for security analysis, while low-risk events are processed but not stored in the same manner. This local differentiation optimizes storage efficiency for critical data while maintaining sufficient contextual information for security monitoring
Data Source
AI summary
A method generating a blockchain clock to store event data, as well as a method for using the generated blockchain clock are proposed. In particular, as a blockchain clock is utilized for storing event data, the transparency of the stored event data and relationships between event data may be preserved. Moreover, event data is stored on the blockchain clock based on a risk value computed based on the event data. In this way, event data associated with potentially risky events is stored, and thus may be used for reference when deciding whether to execute a potential event. Accordingly, system security may be improved.