System, method and computer program product for auditing XML messages in a network-based message stream

• US 20020174340A1
• Filed: 05/18/2001
• Published: 11/21/2002
• Est. Priority Date: 05/18/2001
• Status: Active Grant

• Current Assignee: Chemtron Research LLC (Intellectual Ventures LLC)
• Original Assignee: Network Resonance Incorporated
• Inventors: Rescorla, Eric Kenneth, Dick, Kevin Stewart
• Granted Patent: US 7,124,299 B2
• Time in Patent Office: Days
• US Class Current: 713/178
• CPC Class Codes: H04L 2463/121 Timestamp
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A system, method and computer program product for auditing a message in a message stream are disclosed. Messages in a message stream are captured including at least one message in an extensible markup language (XML) format. Each message in the XML format is then extracted from the captured messages and has a timestamp applied thereto. Each timestamped message in the XML format is then stored in a memory.

Claims

1. A method for auditing a message in a message stream, comprising:

a) capturing messages in a message stream, wherein the messages include at least one message in an extensible markup language (XML) format;

b) extracting the at least one message in the XML format from the captured messages;

c) applying a timestamp to the extracted at least one message in the XML format; and

d) storing the timestamped at least one message in the XML format in a memory.

2. The method of claim 1, wherein the message stream comprises a plurality of messages utilizing a plurality of protocols.

3. The method of claim 1, wherein the captured messages are parsed to identify the at least one message in the XML format for extraction.

4. The method of claim 1, wherein the message stream is carried out over a communication path having one or more segments, and wherein messages are captured at each segment.

5. The method of claim 4, wherein the captured messages are transmitted from each segment to an aggregation module prior to extraction of the at least one message in the XML format.

6. The method of claim 1, wherein the timestamp includes a digital signature.

7. The method of claim 1, wherein the memory comprises a write once storage medium.

8. The method of claim 1, wherein a report relating to the captured messages is generated.

9. The method of claim 1, wherein the timestamped at least one message in the XML format is encrypted prior to storage in the memory.

10. The method of claim 1, wherein the message stream transverses a security boundary having first and second sides, wherein messages in the message stream on the first side of the security boundary are in an encrypted format, wherein messages in the message stream on the second side of the security boundary are in an encrypted format, wherein an encrypted version of the at least one message in the XML format is captured, extracted, and timestamped on the first side of the security boundary, and wherein a plaintext version of the at least one message in the XML format is captured, extracted, and timestamped on the second side of the security boundary.

11. The method of claim 10, wherein the encrypted and plaintext version of the at least one message in the XML format are correlated to detect any changes between the versions of the at least one message in the XML format.

13. The system of claim 12, wherein the message stream comprises a plurality of message utilizing a plurality of protocols.

14. The system of claim 12, wherein the captured messages are parsed to identify the at least one message in the XML format for extraction.

15. The system of claim 12, wherein the timestamp includes a digital signature.

16. The system of claim 12, wherein the timestamped at least one message in the XML format is encrypted prior to storage in the memory.

18. The computer program product of claim 17, wherein the message stream comprises a plurality of message utilizing a plurality of protocols.

19. The computer program product of claim 17, wherein the timestamp includes a digital signature.

20. The computer program product of claim 17, wherein the timestamped at least one message in the XML format is encrypted prior to storage in the memory.

12. A system for auditing a message in a message stream, comprising:

a) logic for capturing messages in a message stream, wherein the messages include at least one message in an extensible markup language (XML) format;

b) logic for extracting the at least one message in the XML format from the captured messages;

c) logic for applying a timestamp to the extracted at least one message in the XML format; and

d) logic for storing the timestamped at least one message in the XML format in a memory.

17. A computer program product for auditing a message in a message stream, comprising:

a) computer code for capturing messages in a message stream, wherein the messages include at least one message in an extensible markup language (XML) format;

b) computer code for extracting the at least one message in the XML format from the captured messages;

c) computer code for applying a timestamp to the extracted at least one message in the XML format; and

d) computer code for storing the timestamped at least one message in the XML format in a memory.