Streaming non-repudiation for data access and data transaction

• US 10,484,181 B2
• Filed: 12/12/2016
• Issued: 11/19/2019
• Est. Priority Date: 12/12/2016
• Status: Active Grant

• Current Assignee: Datiphy Inc.
• Original Assignee: Datiphy Inc.
• Inventors: Lin, Yeejang James
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Ahmed, Mahabub S
• Application Number:
  US15/375,383
• Publication Number:
  US 20180167401A1
• Time in Patent Office: 1,072 Days
• Field of Search: 713181
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A system and method that generate digests for data transactions provide non-repudiation of collected data. Meta data based on the Data DNA modeling are collected for all data transactions in a system. The digest of the data transactions is encrypted. A digest is also generated for user sessions and time periods. The digests are recorded as part of Data DNA records and can be used for validation of data transactions in the system.

Claims

1. A method, for providing data non-repudiation for a plurality of concurrent user data sessions, each user data session having a plurality of data transactions occurring in a plurality of time periods, comprising:

capturing data, into a captured data, from each data transaction;

hashing the captured data into a hashed data;

encrypting the hashed data into a digest;

appending the digest to the captured data to form a data transaction digest;

generating a user data session digest for each of the plurality of concurrent data transactions from the data transaction digest of a time period and the user data session digest of an immediate prior time period;

hashing the data transaction digests and the user data session digests from the plurality of concurrent user data sessions within the time period into a hashed time data transaction data and encrypting the hashed time data transaction data into the time period digest; and

recording the time period digest into a data file,

wherein the time period digest provides non-repudiation for the data transactions within the time period.

2. The method of claim 1, further comprising:

checking if there is a user data session by checking if there is a timer related to the user data session; and

if there is no timer associated with the user data session, marking the data transaction digest as a begin data transaction digest and starting the timer for the user data session.

3. The method of claim 2, further comprising:

checking if the user data session has ended or the timer for the user data session has expired; and

if the user data session has ended or the first timer for the user data session has expired, marking the data transaction digest as an end data transaction digest.

4. The method of claim 1, wherein generating the user data session digest further comprises:

encrypting the hashed user session data into the user session digest.

5. The method of claim 4, wherein, if the data transaction digest is a first data transaction digest for a user data session, the previous user data session digest is generated based on a session identifier and the data transaction digest.

6. A system, for providing data non-repudiation to a plurality of data transactions from a plurality of concurrent user data sessions within a time period, comprising:

a monitoring unit connected to a network;

a network interface unit in communication with the monitoring unit, the network interface monitors the plurality of data transactions on the network;

a non-volatile computer-readable memory unit for storing computer program instructions; and

a control unit,

wherein the control unit, when executing computer program instructions, causes the system to

capture data, into a captured data, from each data transaction,

hash the captured data into a hashed data,

encrypt the hashed data into a digest,

append the digest to the captured data to form a data transaction digest,

generate a user data session digest for each of the plurality of concurrent data transaction from the data transaction digest of a time period and the user data session digest of an immediate prior time period;

hash the data transaction digests and user data session digests from the plurality of concurrent user data sessions within the time period into a hashed time data transaction data and encrypt the hashed time data transaction data into the time period digest; and

record the time period digest into a data file,

wherein the time period digest provides non-repudiation for the data transactions within the time period.

7. The system of claim 6, wherein the control unit, when executing computer program instructions, further causes the system to:

check if there is a user data session by checking if there is a timer related to the user data session; and

if there is no timer associated with the user data session, mark the data transaction digest as a begin data transaction digest and start the timer for the user data session.

8. The system of claim 7, wherein the control unit, when executing computer program instructions, further causes the system to

check if the user data session has ended or the timer for the user data session has expired;

and

if the user data session has ended or the first timer for the user data session has expired, mark the data transaction digest as an end data transaction digest.

9. The system of claim 6, wherein generating the user data session digest further comprises:

encrypting the hashed user session data into the user session digest.

10. The system of claim 9, wherein, if the data transaction digest is a first data transaction digest for a user data session, the previous user data session digest is generated based on a session identifier and the data transaction digest.