LOG EVENT MANAGEMENT MECHANISM

• US 20200133821A1
• Filed: 10/31/2018
• Published: 04/30/2020
• Est. Priority Date: 10/31/2018
• Status: Active Grant

• Current Assignee: Salesforce.com, Inc.
• Original Assignee: Salesforce.com, Inc.
• Inventors: AGRAWAL, PRASHANT, SINGHI, MAYANK, HAINS, ADRIAN, PATIL, DIPTI, SURESH, SUBRAMANYA, THARGAN, AJAY, KANDALA, SRINI
• Granted Patent: US 10,698,787 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 17/40 Data acquisition and logging for input to computer G06F3/00
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Techniques and structures to facilitate management of log event messages, including transmitting one or more messages, each having a unique identifier (ID), to a computing device, generating a comparison checksum for each of the one or more messages, wherein each comparison checksum is associated with a unique ID corresponding to a message from which the comparison checksum was generated, performing an encryption on each comparison checksum and associated unique ID to generate encryption data and transmitting the encryption data to the computing device.

Claims

1. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, are configurable to cause the one or more processors to:

transmit one or more messages to a computing device, wherein each of the one or more messages comprises a unique identifier (ID);

generate a comparison checksum for each of the one or more messages, wherein each comparison checksum is associated with a unique ID corresponding to a message from which the comparison checksum was generated;

perform an encryption on each comparison checksum and associated unique ID to generate encryption data including the encrypted checksum and associated unique ID; and

transmit the encryption data to the computing device.

2. The non-transitory computer-readable medium of claim 1, having stored thereon instructions that, when executed by one or more processors, are configurable to further cause the one or more processors to store the comparison checksums and the associated unique IDs as a batch.

3. The non-transitory computer-readable medium of claim 2, wherein performing the encryption comprises applying a Salt algorithm on each checksum and associated unique ID to generate the encryption data.

4. The non-transitory computer-readable medium of claim 3, wherein performing the encryption further comprises performing a symmetric key encryption on the batch via a public key associated with the computing device.

5. The non-transitory computer-readable medium of claim 1, wherein the encrypted data is transmitted to the computing device via a separate channel from the one or more messages.

6. A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, are configurable to cause the one or more processors to:

receive one or more messages at a computing device, wherein each of the one or more messages comprises a unique identifier (ID);

generate a first message checksum for a first of the one or more messages, wherein the first message and the first message checksum are associated with a first unique ID;

receive encryption data from the computing device;

perform a decryption of the encryption data to extract one or more comparison checksums; and

compare a first of the one or more comparison checksums having the first unique ID to the first message checksum to determine whether there is a match between the first message checksum and the first comparison checksum.

7. The non-transitory computer-readable medium of claim 6, having stored thereon instructions that, when executed by one or more processors, are configurable to further cause the one or more processors to:

generate a second message checksum for a second of the one or more messages, wherein the second message and the second message checksum are associated with a second unique ID; and

compare a second of the one or more comparison checksums having the second unique ID to the second message checksum to determine whether there is a match between the second message checksum and the second comparison checksum.

8. The non-transitory computer-readable medium of claim 7, having stored thereon instructions that, when executed by one or more processors, are configurable to further cause the one or more processors to generate a report a result of the comparison between the first message checksum and the first comparison checksum and the second message checksum and the second comparison checksum.

9. The non-transitory computer-readable medium of claim 6, having stored thereon instructions that, when executed by one or more processors, are configurable to further cause the one or more processors to store the first message, the first message checksum and the first unique ID prior to receiving the encryption data.

10. The non-transitory computer-readable medium of claim 9, wherein the encryption data is received at the computing device via a separate channel from the one or more messages.

11. A computing device comprising:

at least one physical memory device to store a log emitter; and

one or more processors coupled with the at least one physical memory device, the one or more processors configurable to execute the log emitter to transmit one or more messages to a computing device, generate a comparison checksum for each of the one or more messages, perform an encryption on each comparison checksum and an associated unique identifier (ID) to generate encryption data including the encrypted checksum and associated unique ID and transmit the encryption data to the computing device, wherein each of the one or more messages comprises a unique ID and each comparison checksum is associated with a unique ID corresponding to a message from which the comparison checksum was generated.

12. The computing device of claim 11, wherein the log emitter stores the comparison checksums and the associated unique IDs as a batch.

13. The computing device of claim 12, wherein performing the encryption comprises applying a Salt algorithm on each checksum and associated unique ID to generate the encryption data.

14. The computing device of claim 13, wherein performing the encryption further comprises performing a symmetric key encryption on the batch via a public key associated with the computing device.

15. The computing device of claim 11, wherein the encrypted data is transmitted to the computing device via a separate channel from the one or more messages.

16. A computing device comprising:

at least one physical memory device to store a log collector; and

one or more processors coupled with the at least one physical memory device, the one or more processors configurable to execute the log collector to receive one or more messages at a computing device, generate a first message checksum for a first of the one or more messages, receive encryption data from the computing device, perform a decryption of the encryption data to extract one or more comparison checksums including the encrypted checksum and associated unique ID and compare a first of the one or more comparison checksums having a first unique identifier (ID) to the first message checksum to determine whether there is a match between the first message checksum and the first comparison checksum, wherein each of the one or more messages comprises a unique ID and the first message and the first message checksum are associated with the first unique ID;

17. The computing device of claim 16, wherein the log collector further generates a second message checksum for a second of the one or more messages, wherein the second message and the second message checksum are associated with a second unique ID and compares a second of the one or more comparison checksums having the second unique ID to the second message checksum to determine whether there is a match between the second message checksum and the second comparison checksum.

18. The computing device of claim 17, wherein the log collector generates a report a result of the comparison between the first message checksum and the first comparison checksum and the second message checksum and the second comparison checksum.

19. The computing device of claim 16, wherein the log collector stores the first message, the first message checksum and the first unique ID prior to receiving the encryption data.

20. The computing device of claim 19, wherein the encryption data is received at the computing device via a separate channel from the one or more messages.