Auditably proving a usage history of an asset
AssigneeInternational Business Machines Corporation
InventorsKlaus Werner, Jakob C. Lang, Joerg Schmidbauer, Angel Nunez Mencias
Life of this patent
Estimating the term…
Abstract
Auditably proving a usage history of an asset, in which the asset includes a hardware security module with at least a public key and a private key. A client application logs hash values of a pair of request data and response data. Usage history of the asset is proved. The proving includes verifying, using the public key, a signature of other hash values of the pair of request data and response data. The other hash values are signed with the private key. The proving further includes comparing the hash values logged by the client application with the other hash values.
Claims20
A computer-implemented method of auditably proving a usage history of an asset, the computer-implemented method comprising:
- logging in a log one set of hash values of a pair of request data and response data, the one set of hash values including hash (request data) and hash (response data);
- and
- proving the usage history of the asset, the asset comprising a hardware security module having at least a public key and a private key, the proving comprising:
- verifying a signature of an other set of hash values of the pair of request data and response data, the other set of hash values being signed with the private key and retrieved from a secure database, the verifying comprising verifying the signature of the other set of hash values with the public key, wherein the secure database from which the other set of hash values is retrieved is separate from the log containing the one set of hash values of the pair of request data and response data;
- and
- comparing the one set of hash values that are logged in the log with the other set of hash values retrieved from the secure database.
A computer system for auditably proving a usage history of an asset, the computer system comprising:
- a memory;
- and
- a processor in communication with the memory, wherein the computer system is configured to perform a method, said method comprising:
- logging in a log one set of hash values of a pair of request data and response data, the one set of hash values including hash (request data) and hash (response data);
- and
- proving the usage history of the asset, the asset comprising a hardware security module having at least a public key and a private key, the proving comprising:
- verifying a signature of an other set of hash values of the pair of request data and response data, the other set of hash values being signed with the private key and retrieved from a secure database, the verifying comprising verifying the signature of the other set of hash values with the public key, wherein the secure database from which the other set of hash values is retrieved is separate from the log containing the one set of hash values of the pair of request data and response data;
- and
- comparing the one set of hash values that are logged in the log with the other set of hash values stored in retrieved from the secure database.
A computer program product for auditably proving a usage history of an asset, the computer program product comprising:
- a computer readable storage medium readable by a processing circuit and storing instructions for performing a method comprising:
- logging in a log one set of hash values of a pair of request data and response data, the one set of hash values including hash (request data) and hash (response data);
- and
- proving the usage history of the asset, the asset comprising a hardware security module having at least a public key and a private key, the proving comprising:
- verifying a signature of an other set of hash values of the pair of request data and response data, the other set of hash values being signed with the private key and retrieved from a secure database, the verifying comprising verifying the signature of the other set of hash values with the public key, wherein the secure database from which the other set of hash values is retrieved is separate from the log containing the one set of hash values of the pair of request data and response data;
- and
- comparing the one set of hash values that are logged in the log with the other set of hash values retrieved from the secure database.
Dependencies are inferred from the claim text.