Log Management System Using Secret Splitting for Secure Remote Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing log management systems face challenges in efficiently managing large volumes of log data while ensuring robust security, as they often require transmitting entire data sets for analysis, leading to communication delays and increased costs.
Innovation Solution
A log management system that splits log data into smaller fragments using a secret splitting scheme, where smaller fragments are transmitted remotely and stored, and larger fragments are kept locally, allowing for partial recovery only when needed, reducing communication costs and maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If all log data is transmitted to a remote server for analysis, then complete log data is available for analysis, but communication delay increases and system operation efficiency decreases
Solution Approach 1:
The patent divides log data into multiple fragments using secret splitting scheme. Each fragment contains only a portion of the original log data, and no single fragment can reveal the complete information. This segmentation allows the system to transmit only necessary fragments to the remote server while keeping other fragments locally, thereby reducing communication delay while maintaining data security and completeness for analysis.
2Loss of information
If all log data is transmitted to a remote server, then complete analysis can be performed, but communication costs and data transmission volume increase
Solution Approach 1:
The patent extracts only the necessary fragment of log data (the one required for remote storage and analysis) from the complete log data set. By using secret splitting to identify and extract only the essential portion that needs to be transmitted, the system minimizes data transmission volume while ensuring that the remote server receives sufficient information to perform the required analysis.
3Reliability
If log data is stored remotely for security, then security against information leakage is improved, but access speed and analysis efficiency decrease
Solution Approach 1:
The patent segments log data into multiple fragments and distributes them between local and remote storage. Critical fragments are kept locally for immediate access and fast analysis, while other fragments are stored remotely for security. This segmentation enables the system to maintain both high security (through remote storage) and fast analysis speed (through local access to essential fragments).
Solution Approach 2:
The patent applies different storage qualities to different data fragments based on their importance and access requirements. High-priority fragments that need frequent access are kept locally with fast access characteristics, while less critical fragments are stored remotely with enhanced security characteristics. This local quality differentiation optimizes both security and analysis efficiency.
Data Source
AI summary
A log management system includes a first secret splitting module to split the log data generated regularly or intermittently into a plurality of split log fragments including a split log fragment for remote transmission per predetermined unit using secret splitting scheme, the split log fragment for remote transmission having a smaller size than remaining split log fragments; a first communication control module to transmit the split log fragment for remote transmission to a remote apparatus; a second communication control module to receive, in response to occurrence of an event, one or more remaining split log fragments corresponding to the log data to be partially recovered out of the remaining split log fragments accumulated by a local apparatus; and a second secret splitting module to recover the log data from the one or more remaining split log fragments and the split log fragment for remote transmission using the secret splitting scheme.