METHOD FOR THE PROTECTED DEPOSIT OF EVENT PROTOCOL DATA OF A COMPUTER SYSTEM, COMPUTER PROGRAM PRODUCT AND COMPUTER SYSTEM

• US 20150237057A1
• Filed: 10/31/2013
• Published: 08/20/2015
• Est. Priority Date: 11/02/2012
• Status: Active Grant

• Current Assignee: Fujitsu Technology Solutions Intellectual Property GmbH (Allgeier SE)
• Original Assignee: Fujitsu Technology Solutions Intellectual Property GmbH (Allgeier SE)
• Inventors: Claes, Heinz-Josef
• Granted Patent: US 9,473,508 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]

Abstract

A method for the protected deposit of event protocol data of a computer system provides access control which prohibits access to event protocol data in the computer system and also performs:

• • reading event protocol data generated in the computer system,
  • sequential assignment of individual data sections of the read event protocol data to one of at least two categories in accordance with predetermined criteria,
  • merging the categorized data sections for each respective category into a sub-file, and
  • separate storage of created sub-files and setting up an access option to access the individual sub-files.

Claims

1-11. -11. (canceled)

12. A method for the protected deposit of event protocol data (Log_A_B) of a computer system, wherein an access control is provided which prohibits access to the event protocol data (Log_A_B) in the computer system and also performs:

reading of event protocol data (Log_A_B) generated in the computer system;

sequential assignment of individual data sections (A1, A2, B1, B2) of the read event protocol data (Log_A_B) to one of at least two categories (A, B) in accordance with predetermined criteria;

merging of the categorized data sections (A1, A2, B1, B2) for each respective category (A, B) to sub-data (Log_A, Log_B);

separate storage of all created sub-data (Log_A, Log_B); and

setting up a specific access option separately for the respective sub-data (Log_A, Log_B) in accordance with predetermined user groups.

13. The method according to claim 12, wherein the event protocol data (Log_A_B) generated in the computer system are read out from at least one event protocol file.

14. The method according to claim 12, wherein the created sub-data (Log_A, Log_B) are locally stored in the computer system and/or distributed to a further computer system by a network infrastructure.

15. The method according to claim 12, wherein the created sub-data (Log_A, Log_B) of at least one category (A, B) are encrypted.

16. The method according to claim 12, wherein the individual data sections (A1, A2, B1, B2) of the event protocol data (Log_A_B) are categorized on the basis of at least one criteria selected from:

specific syntactic instructions,

time stamps,

predefined terms,

patterns,

variables, and

data types.

17. The method according to claim 12, wherein the individual categories (A, B) are defined by different user groups and/or different access rights to the computer system.

18. The method according to claim 12, wherein for each data section (A1, A2, B1, B2) of a respective category (A, B) a checksum (#A1, #A2, #B1, #B2) is generated.

19. The method according to claim 18, wherein the checksum (#A1, #A2, #B1, #B2) of a data section (A1, A2, B1, B2) is added to a subsequent data section (A1, A2, B1, B2) of the respective category (A, B).

20. The method according to claim 18, wherein in addition to the checksum (#A1, #A2, #B1, #B2) for each data section (A1, A2, B1, B2) of a respective category (A, B) a random number is generated.

21. A computer program product containing a computer program which, when run on a computer system, performs the method according to claim 12.

22. A computer system comprising an access control unit for controlled access to event protocol data (Log_A_B) of the computer system, wherein the access control unit performs the method according to claim 12.

23. The method according to claim 19, wherein in addition to the checksum (#A1, #A2, #B1, #B2) for each data section (A1, A2, B1, B2) of a respective category (A, B) a random number is generated.

24. The method according to claim 13, wherein the created sub-data (Log_A, Log_B) are locally stored in the computer system and/or distributed to a further computer system by a network infrastructure.

25. The method according to claim 13, wherein the created sub-data (Log_A, Log_B) of at least one category (A, B) are encrypted.

26. The method according to claim 14, wherein the created sub-data (Log_A, Log_B) of at least one category (A, B) are encrypted.

27. The method according to claim 13, wherein the individual data sections (A1, A2, B1, B2) of the event protocol data (Log_A_B) are categorized on the basis of at least one criteria selected from:

specific syntactic instructions,

time stamps,

predefined terms,

patterns,

variables, and

data types.

28. The method according to claim 14, wherein the individual data sections (A1, A2, B1, B2) of the event protocol data (Log_A_B) are categorized on the basis of at least one criteria selected from:

specific syntactic instructions,

time stamps,

predefined terms,

patterns,

variables, and

data types.

29. The method according to claim 15, wherein the individual data sections (A1, A2, B1, B2) of the event protocol data (Log_A_B) are categorized on the basis of at least one criteria selected from:

specific syntactic instructions,

time stamps,

predefined terms,

patterns,

variables, and

data types.