Secure Audit Logging via Asymmetric Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security systems fail to provide an unalterable and tamper-proof audit log, allowing attackers to delete or alter evidence of unauthorized access, which hinders forensic root cause analysis.
Innovation Solution
A method and system for generating secure audit logs by encrypting logs with a first encryption key, transmitting them to a remote device for decryption, purging local storage, and using asymmetric encryption to ensure tamper-proof evidence, with periodic storage and processing at a central location.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If log files are stored locally in the electronic system, then forensic analysis can be performed, but attackers can alter or delete the log files to cover their tracks
Solution Approach 1:
The patent extracts the audit log from the local electronic system and stores it in a remote, secure location that attackers cannot access. The log is transmitted from the local system to a remote server or cloud storage, physically separating the evidence from the compromised environment, thus preventing attackers from altering or deleting it.
Solution Approach 2:
The patent applies encryption to the audit log before transmission and storage. By encrypting the data in advance using cryptographic algorithms, the log is protected from unauthorized modification or deletion. The encryption keys are managed separately, ensuring that even if attackers access the stored log, they cannot alter it without detection.
2Reliability
If encryption is applied to protect audit logs, then security is improved, but processing and access complexity increases
Solution Approach 1:
The patent implements automated key management and encryption processes that operate without manual intervention. The system automatically generates encryption keys, applies encryption to audit logs, manages key rotation, and handles decryption when needed. This automation reduces the operational complexity and human error associated with manual cryptographic management.
Solution Approach 2:
The patent introduces a secure key management service or cryptographic intermediary that handles the complex tasks of key generation, storage, rotation, and distribution. This intermediary layer shields users from the complexity of cryptographic operations while maintaining strong security, allowing audit logs to be encrypted and protected without burdening users with key management complexity.
Data Source
AI summary
The invention includes systems and methods to asymmetrically encrypt audit logs, store a limited period of the encrypted audit logs, periodically send the encrypted audit logs to a central location for storage and further process in order to provide tamper-proof evidence of an activity. The system comprises a secure audit client enabled to perform various activities. A secure audit manager logs such activities in an audit log for uploading to a secure audit server. The secure audit server receives the audit logs from the secure audit manager. Finally a secure audit log consumer requests audit log data from the secure audit log manager to review the secure audit log.