US7000118B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Asymmetric system and method for tamper-proof storage of an audit trial for a database
Assignee: Oracle International Corp
•
Filing: 2000-10-16
•
Granted: 2006-02-14
•
Expires: 2020-10-16
Abstract
Abstract An asymmetric key based method and system is provided for a tamper-proof storage of one or more records of an audit trail for a database. The asymmetric key based key exchange mechanism is employed to arrive at a common key, which is then used to obtain the authentication and the validation tokens. The method creates one or more authentication token values, and generates one or more validation token values from the authentication token values through a combination of a hashing process and an encryption process. Once the validation token values are created, they are further integrated into the records in the database. When an authorized person such as an auditor who needs to check the integrity of the records, he can detect a tampering of the records by comparing a validation token value newly computed by him independently with the validation token value integrated in the record.
Inventors
- 👤 Madhusudhana H.S. Murthy
- 👤 Aridaman Tripathi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 04:32
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/64; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3234; H04L9/3297; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2151; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99938; Y10S707/99939; Y10S707/99951; Y10S707/99952; Y10S707/99953
Claims Analysis
Total Claims: 25
Claim 1
Independent Claim
239 words
A method for providing one or more independent auditors an audit trail having one or more records for a database system, an integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditors, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditors, each record having a corresponding authentication token and a validation token, the method comprising: initiating the audit trail by generating an initial value of an authentication token and an initial value of a validation token based on a first encryption key of a first type (writer public key) generated by the writer and a second encryption key of the first type generated by each Auditor (auditor public key); generating a third encryption key of a second type (writer private key) related to the first encryption key and a fourth encryption key of a second type (auditor private key) related to the second encryption key; updating the values of the writer private key, the authentication token, and the validation token for each additional audit trail record and integrating the updated values of the validation token and the writer public key into each corresponding record of the audit trail; and validating, by the auditor, each record of the audit trail by comparing the integrated validation token with a newly computed validation token in order to detect a tampering of the audit trail.
Claim 2
Independent Claim
239 words
A method for providing one or more independent auditors an audit trail having one or more records for a database system, an integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditors, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditors, each record having a corresponding authentication token and a validation token, the method comprising: initiating the audit trail by generating an initial value of an authentication token and an initial value of a validation token based on a first encryption key of a first type (writer public key) generated by the writer and a second encryption key of the first type generated by each Auditor (auditor public key); generating a third encryption key of a second type (writer private key) related to the first encryption key and a fourth encryption key of a second type (auditor private key) related to the second encryption key; updating the values of the writer private key, the authentication token, and the validation token for each additional audit trail record and integrating the updated values of the validation token and the writer public key into each corresponding record of the audit trail; and validating, by the auditor, each record of the audit trail by comparing the integrated validation token with a newly computed validation token in order to detect a tampering of the audit trail.
Claim 3
Dependent Claim
33 words
The method of claim 1 wherein the step of initiating further includes storing the initial values of the validation token and the writer public key in an initial record of the audit trail.
Claim 4
Dependent Claim
82 words
The method of claim 1 wherein the step of initiating further includes: concatenating a predetermined identity for the audit trail, and a common initialization encryption key generated by the auditor with the auditor public key and the writer public key; generating the initial value of the validation token through at least one hashing process and at least one encryption process using the concatenated result, wherein the initial value of the authentication token is used as an encryption key for the encryption process.
Claim 5
Dependent Claim
43 words
The method of claim 1 wherein the step of generating further includes: storing the auditor private key in a first secured storage accessible only by the auditor; and storing the writer private key in a second secured storage accessible only by the writer.
Claim 6
Dependent Claim
102 words
The method of claim 1 wherein the step of updating further includes: updating the value of the writer private key; updating the value of the writer public key based on the updated writer private key; updating the value of the authentication token by a hashing process based on the updated value of the writer private key and the auditor public key; and updating the value of the validation token through at least a hashing process and an encryption process, wherein the updated authentication token is used as an encryption key for the encryption process while updating the value of the validation token.
Claim 7
Dependent Claim
27 words
The method of claim 1 wherein the newly computed validation token is generated by the auditor based on the auditor private key and the writer public key.
Claim 8
Independent Claim
219 words
A method for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database system, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditor, the method comprising: integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, wherein the writer has an access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and wherein the auditor has the ability to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 9
Independent Claim
219 words
A method for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database system, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditor, the method comprising: integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, wherein the writer has an access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and wherein the auditor has the ability to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 10
Dependent Claim
86 words
The method of claim 7 wherein the step of integrating further includes: initiating the audit trail by generating an initial value of the authentication token and an initial value of the validation token for an initial record of the audit trail based on the writer public key and the auditor public key; and updating the values of the writer private key, the authentication token, and the validation token, wherein each updated value of the validation token is integrated into a corresponding record of the audit trail.
Claim 11
Dependent Claim
83 words
The method of claim 8 wherein the step of initiating further includes: concatenating a predetermined identity for the audit trail, and a common initialization encryption key generated by the auditor with the auditor public key and the writer public key; and generating the initial value of the validation token through at least one hashing process and at least one encryption process using the concatenated result, wherein the initial value of the authentication token is used as an encryption key for the encryption process.
Claim 12
Dependent Claim
92 words
The method of claim 9 wherein the step of initiating further includes: storing the auditor private key, the identity for the audit trail, and the initial record in a designated secured information storage accessible only by the auditor, wherein the stored auditor private key, the identity for the audit trail, and the initial record can be retrieved by the auditor and used with the writer public key accessible by the auditor to compute the values of the validation token for the records to verify against the integrated values of the validation token.
Claim 13
Dependent Claim
101 words
The method of claim 8 wherein the step of updating further includes: updating the value of the writer private key through a hashing process; updating the value of the writer public key based on the updated writer private key; updating the value of the authentication token by a hashing process based on the updated value of the writer private key; and updating the value of the validation token through at least a hashing process and an encryption process, wherein the updated authentication token is used as an encryption key for the encryption process while updating the value of the validation token.
Claim 14
Dependent Claim
228 words
A computer readable medium storing a computer program for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database system, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditor, the computer program comprising instructions for: integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, wherein the writer has an access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and wherein the auditor has the ability to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 15
Dependent Claim
228 words
A computer readable medium storing a computer program for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database system, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database system having a writing machine (writer) not under the control of the access-privileged user or the auditor, the computer program comprising instructions for: integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, wherein the writer has an access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and wherein the auditor has the ability to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 16
Dependent Claim
94 words
The computer readable medium storing the computer program of claim 12 wherein the means for integrating further includes instructions for: initiating the audit trail by generating an initial value of the authentication token and an initial value of the validation token for an initial record of the audit trail based on the writer public key and the auditor public key; and updating the values of the writer private key, the authentication token, and the validation token, wherein each updated value of the validation token is integrated into a corresponding record of the audit trail.
Claim 17
Dependent Claim
91 words
The computer readable medium storing the computer program of claim 13 wherein the means for initiating further includes instructions for: concatenating a predetermined identity for the audit trail, and a common initialization encryption key generated by the auditor with the auditor public key and the writer public key; and generating the initial value of the validation token through at least one hashing process and at least one encryption process using the concatenated result, wherein the initial value of the authentication token is used as an encryption key for the encryption process.
Claim 18
Dependent Claim
99 words
The computer readable medium storing the computer program of claim 14 wherein the means for initiating further includes instructions for: storing the auditor private key, the identity for the audit trail, and the initial record in a designated secured information storage accessible only by the auditor, wherein the auditor private key, the identity for the audit trail, and the initial record can be retrieved by the auditor and used with the writer public key accessible by the auditor to compute the values of the validation token for the records to verify against the integrated values of the validation token.
Claim 19
Dependent Claim
109 words
The computer readable medium storing the computer program of claim 13 wherein the means for updating further includes instructions for: updating the value of the writer private key through a hashing process; updating the value of the writer public key based on the updated writer private key; updating the value of the authentication token by a hashing process based on the updated value of the writer private key; and updating the value of the validation token through at least a hashing process and an encryption process, wherein the updated authentication token is used as an encryption key for the encryption process while updating the value of the validation token.
Claim 20
Independent Claim
221 words
A system for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database having a writing machine (writer) not under the control of the access-privileged user or the auditor, the system comprising: means for integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, means for the writer to have access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and means for the auditor to be able to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 21
Independent Claim
221 words
A system for providing at least one independent auditor an audit trail, the audit trail having one or more records recording actions taken against a database, the integrity of the audit trail being vulnerable to actions taken by an access-privileged user other than the auditor, the database having a writing machine (writer) not under the control of the access-privileged user or the auditor, the system comprising: means for integrating into each record a corresponding value of a validation token generated based on a first pair of public-private encryption keys generated by the writer and a second pair of public-private encryption keys generated by the auditor, means for the writer to have access to the public encryption key of the second pair (auditor public key), and the auditor has an access to the public encryption key of the first pair (writer public key), wherein only the writer has an access to the private key of the first pair (writer private key), and only the auditor has an access to the private key of the second pair (auditor private key), and means for the auditor to be able to compute the values of the validation token for the records to verify against the integrated values of the validation token in order to detect a tampering of the audit trail by the access-privileged user.
Claim 22
Dependent Claim
88 words
The system of claim 17 wherein the means for integrating further includes means for: initiating the audit trail by generating an initial value of the authentication token and an initial value of the validation token for an initial record of the audit trail based on the writer public key and the auditor public key; and updating the values of the writer private key, the authentication token, and the validation token, wherein each updated value of the validation token is integrated into a corresponding record of the audit trail.
Claim 23
Dependent Claim
85 words
The system of claim 18 wherein the means for initiating further includes means for: concatenating a predetermined identity for the audit trail, and a common initialization encryption key generated by the auditor with the auditor public key and the writer public key; and generating the initial value of the validation token through at least one hashing process and at least one encryption process using the concatenated result, wherein the initial value of the authentication token is used as an encryption key for the encryption process.
Claim 24
Dependent Claim
94 words
The system of claim 19 wherein the means for initiating further includes means for: storing the auditor private key, the identity for the audit trail, and the initial record in a designated secured information storage accessible only by the auditor, wherein the stored auditor private key, the identity for the audit trail, and the initial record can be retrieved by the auditor and used with the writer public key accessible by the auditor to compute the values of the validation token for the records to verify against the integrated values of the validation token.
Claim 25
Dependent Claim
103 words
The system of claim 18 wherein the means for updating further includes means for: updating the value of the writer private key through a hashing process; updating the value of the writer public key based on the updated writer private key; updating the value of the authentication token by a hashing process based on the updated value of the writer private key; and updating the value of the validation token through at least a hashing process and an encryption process, wherein the updated authentication token is used as an encryption key for the encryption process while updating the value of the validation token.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2009-02-13 | 2009-08-15 | 2010-02-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2013-02-13 | 2013-08-15 | 2014-02-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2017-02-13 | 2017-08-15 | 2018-02-14 | $7700.00 | Window Closed / Lapsed |