Verifiable redactable audit log
AssigneePalantir Technologies Inc.
InventorsRyan Castellucci, Philip Martin
Life of this patent
Estimating the term…
Abstract
A verifiable, redactable log, which, in some embodiments, may contain multiple hash values per entry in order to sever confidentiality of a log from verifiability. Logs may be verified using recalculation of hashes and verification of trusted digital signatures. In some embodiments, the log may be divided into segments, each signed by a time server or self-signed using a system of ephemeral keys. In some embodiments, log messages regarding specific objects or events may be nested within the log to prevent reporting omission. The logging system may receive events or messages to enter into the log.
Claims20
A computer-implemented method comprising:
- accessing first log data;
- determining first pseudo-random data;
- determining first combined data based at least on the first log data and the first pseudo-random data;
- calculating a first log entry hash based at least on the first combined data;
- calculating a first log summary hash associated with the first log data, the first log summary hash based at least on the first log entry hash and a second hash, wherein the second hash is associated with previous log data;
- and
- generating a first log entry, the first log entry comprising the first log entry hash and the first log summary hash;
- signing the first log entry with a first ephemeral key;
- and
- storing the first log entry.
A non-transitory computer storage medium storing computer executable instructions that when executed by a computer hardware processor perform operations comprising:
- determining first pseudo-random data;
- determining first combined data based at least on first log data and the first pseudo-random data;
- calculating a first log entry hash based at least on the first combined data;
- calculating a first log summary hash based at least on the first log entry hash and a second hash, wherein the second hash is associated with previous log data;
- generating a first log entry, the first log entry comprising the first log summary hash;
- signing the first log entry with a first ephemeral key;
- and
- storing the first log entry.
A computer system comprising:
- one or more hardware computer processors programmed, via executable code instructions, to:
- access first log data;
- determine first pseudo-random data;
- determine first combined data based at least on the first log data and the first pseudo-random data;
- calculate a first log entry hash based at least on the first combined data, wherein calculating the first log entry hash comprises signing the first log entry hash with a first ephemeral key;
- calculate a first log summary hash associated with the first log data, the first log summary hash based at least on the first log entry hash and a second hash, wherein the second hash is associated with previous log data;
- and
- store a first log entry, the first log entry comprising the first log entry hash and the first log summary hash.
Dependencies are inferred from the claim text.