Cloud Appliance Event Log Integrity via Digital Signature Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In cloud computing environments, there is a need to ensure the integrity and reliability of event log data by preventing event records from being removed from internal storage before successful download to an external data store, while ensuring tamper-proofness and correct data transfer.

Innovation Solution

A mechanism with two distinct interfaces - a download event records interface and a delete event records interface - is implemented, using REST-based APIs to validate and securely transfer event records, ensuring only tamper-free and correctly-downloaded records are removed from internal storage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If event records are allowed to be deleted from internal storage after download, then storage space is recovered and system efficiency is improved, but the integrity and reliability of the deletion process cannot be ensured

Engineering Contradiction:

Improvestorage space recovery efficiencyVSAvoidintegrity of event record deletion

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system generates a digital signature of the event records before deletion occurs. This preliminary action creates a cryptographic proof that the records existed and were properly downloaded, ensuring that deletion only happens after successful transfer and maintaining auditability of the deletion process.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

A digital signature mechanism acts as an intermediary between the download process and deletion process. The signature serves as a mediator that verifies the integrity of event records, allowing the system to safely delete records only when verification confirms successful download, thus resolving the contradiction between efficiency and reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Duration of action of stationary object

If event records are downloaded to external storage, then long-term archival capability is achieved, but there is risk that records may be removed from internal storage before successful download

Engineering Contradiction:

Improvearchival duration of event recordsVSAvoidcompleteness of event record transfer

Core Design Contradiction:

Duration of action of stationary objectVSReliability

Solution Approach 1:

The system performs verification of the downloaded event records using digital signatures before allowing deletion from internal storage. This preliminary verification action ensures that records are successfully transferred and intact before removal from the source, preventing data loss and ensuring complete archival.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The verification process provides feedback about the success of the download operation. Only when verification confirms successful transfer does the system proceed with deletion, creating a feedback loop that ensures reliability of the transfer process while enabling long-term archival capability.

Inventive Principle:

Principle #23Feedback

3Device complexity

If a single interface is used for both download and delete operations, then system complexity is reduced, but the ability to ensure integrity and prevent premature deletion is compromised

Engineering Contradiction:

Improvenumber of interfacesVSAvoidintegrity protection of event records

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The system segments the download and delete operations into separate interfaces. This segmentation allows independent control and verification of each operation, enabling the system to enforce integrity checks before deletion occurs. The separate delete interface receives and validates digital signatures, ensuring that deletion only happens for successfully downloaded records.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A digital signature verification mechanism serves as an intermediary between the download and delete interfaces. This intermediary validates that records were successfully downloaded before permitting deletion, resolving the contradiction by adding necessary complexity to the interface layer while maintaining overall system reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS8856086B2Ensuring integrity of security event log upon download and delete

Publication Date: 2014.10.07 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A cloud deployment appliance includes a mechanism to enable permitted users to move event records reliably from an internal event log of the appliance to a data store located external to the appliance while ensuring the integrity of event records. The mechanism ensures that the event records are not tampered with in storage or during download. Further, the approach ensures that no event records can be removed from the appliance internal storage before being successfully downloaded to the external data store.