Log Event Management Mechanism Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Event log messages in network security systems can be manipulated by unauthorized users or malware, compromising their integrity and making it difficult for administrators to manage network security effectively.
Innovation Solution
Assigning a unique identifier to log event messages, generating and encrypting checksums associated with these identifiers, and comparing them upon receipt to detect any modifications during transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If log event messages are transmitted without protection, then transmission simplicity is maintained, but message integrity is compromised due to potential manipulation by unauthorized users or malware
Solution Approach 1:
The system generates and stores comparison checksums and unique identifiers for log event messages before transmission. This preliminary action enables later verification of message integrity without requiring complex real-time protection during transmission, as the verification data is prepared in advance
Solution Approach 2:
The patent introduces checksums and unique identifiers as intermediary elements that facilitate message integrity verification. These intermediaries act as mediators between the transmitted message and the verification process, allowing simple transmission while enabling reliable integrity checking through comparison of checksums
2Reliability
If checksums are generated and encrypted for each log event message, then message integrity verification is enhanced, but processing time and computational resources increase
Solution Approach 1:
The patent extracts only the essential verification elements (checksums and unique identifiers) from the complete message verification process. By separating these verification components from the main message transmission, the system enables efficient processing while maintaining integrity verification capability
Solution Approach 2:
The system transforms the verification approach by changing parameters from verifying entire messages to verifying compact checksum values. This parameter change significantly reduces processing time and computational resources required for integrity verification while maintaining reliability
Data Source
AI summary
Techniques and structures to facilitate management of log event messages, including transmitting one or more messages, each having a unique identifier (ID), to a computing device, generating a comparison checksum for each of the one or more messages, wherein each comparison checksum is associated with a unique ID corresponding to a message from which the comparison checksum was generated, performing an encryption on each comparison checksum and associated unique ID to generate encryption data and transmitting the encryption data to the computing device.