Detecting tampering in data processing pipelines
OwnerShawn Rud Hartsock, Adrian Oneyinventors
Life of this patent
Estimating the term…
Abstract
Techniques for detecting tampering in a data processing pipeline are provided. At a high level, these techniques involve instrumenting each transformer in the data processing pipeline to (1) compute a digest of the input data it actually receives for processing, and (2) generate an immutable log entry that records, among other things, the computed input digest and a digest of the resulting output data. With this approach, if an adversary attempts to tamper with the input data for a transformer, the tampering will be evident due to an “orphaned link scenario” in which the input digest for the log entry generated by that transformer fails to map to the output digest of any other log entry (or to the digest of input data from a known data source).
Claims21
A method comprising:
- receiving, by a computer system implementing a transformer in a data processing pipeline, input data for the transformer;
- computing, by the computer system, an input digest based on the input data;
- processing, by the computer system, the input data via the transformer, the processing resulting in output data;
- computing, by the computer system, an output digest based on the output data;
- and
- writing, by the computer system, a log entry including the input digest and the output digest to a storage location.
A non-transitory computer readable storage medium having stored thereon program code executable by a computer system implementing a transformer in a data processing pipeline, the program code embodying a method comprising:
- receiving input data for the transformer;
- computing an input digest based on the input data;
- processing the input data via the transformer, the processing resulting in output data;
- computing an output digest based on the output data;
- and
- writing a log entry including the input digest and the output digest to a storage location.
A computer system implementing a transformer in a data processing pipeline, the computer system comprising:
- a processor;
- and
- a non-transitory computer readable medium having stored thereon program code that, when executed, causes the processor to:
- receive input data for the transformer;
- compute an input digest based on the input data;
- process the input data via the transformer, the processing resulting in output data;
- compute an output digest based on the output data;
- and
- write a log entry including the input digest and the output digest to a storage location.
Dependencies are inferred from the claim text.