Log Data Authenticity Assurance via Intermittent Hash Chain Tracing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital signature technologies for long-term assurance of log data authenticity face challenges such as increased computer load during signature generation and verification, vulnerability to tampering, and inefficiencies in tracing hash chains, especially when dealing with large quantities of data.
Innovation Solution
A method using a management computer with a processor and memory to intermittently trace hash chains by selecting and combining hash values of log data at predetermined intervals, reducing the number of verification steps and load on the computer, while ensuring data authenticity through digital signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signatures are assigned to all pieces of log data, then data authenticity is assured, but computer load increases
Solution Approach 1:
The patent divides the continuous hash chain into segments by introducing periodic trust points. Instead of verifying every single log entry, the system creates trust points at predetermined intervals (e.g., every N entries) and only verifies authenticity at these segments. This segmentation reduces the verification frequency from 100% to a fraction, significantly lowering computer load while maintaining authenticity assurance through the segmented verification structure.
Solution Approach 2:
The patent implements periodic verification by establishing trust points at regular intervals throughout the log data. Rather than continuous verification of all entries, the system performs authentication checks only at these periodic trust points. This periodic action pattern reduces the overall verification burden while ensuring that any tampering can be detected at the next trust point, balancing security with computational efficiency.
2Reliability
If all hash chains are traced one by one from trust point, then specific log data authenticity is verified, but verification time increases
Solution Approach 1:
The patent segments the verification process by dividing the hash chain into intervals bounded by trust points. When verifying specific log data, the system only needs to trace from the nearest trust point to the target entry rather than examining all possible hash chains from the beginning. This segmentation of the verification path dramatically reduces the number of hash comparisons required, cutting verification time while maintaining complete authenticity verification.
3Reliability
If hash values are saved to tamper-resistant apparatus, then past data tampering is detected, but apparatus capacity is exceeded with large data quantities
Solution Approach 1:
The patent extracts only the essential trust point information from the complete log data and saves only these extracted trust points to the tamper-resistant apparatus. Instead of storing all hash values or complete log entries, the system identifies and extracts the critical trust point hash values at periodic intervals, storing only these in the limited-capacity tamper-resistant storage. This extraction approach enables tampering detection while working within the storage capacity constraints of the apparatus.
Data Source
AI summary
A data authenticity assurance method carried out by a management computer including: a first step of receiving the first data piece from the computer; a second step of selecting a plurality of second data pieces at predetermined intervals in chronological order from among the plurality of second data pieces held in the data holding part; a third step of performing an arithmetic operation for each of the hash values of the selected plurality of second data pieces; a fourth step of generating signature target data by combining the first data piece received from the computer with the hash values of the selected plurality of second data pieces; and a fifth step of generating a second data piece by assigning the digital signature to the signature target data by using the preset key, and holding the generated second data piece in chronological order sequentially in the data holding part.