Distributed Immutabilization of Secure Logs
Distributed Immutabilization of Secure Logs
复制标题
DOI：
10.1007/978-3-319-46598-2_9
复制
发表时间：
2016-09
期刊：
影响因子：
--
通讯作者：
Jordi Cucurull-Juan;J. Puiggalí
中科院分区：
文献类型：
--
作者：
Jordi Cucurull-Juan;J. Puiggalí
一些应用需要健壮且防篡改的日志系统，例如电子投票或银行信息系统。在Scytl，我们使用一种称为不可变日志的技术，我们将其部署在电子投票解决方案中。这种技术确保了生成的日志的完整性、真实性和不可否认性，因此，在任何情况下，审计人员都可以使用它们来调查问题。作为安全建议，建议将记录的信息存储和/或复制到记录器没有写入或修改权限的位置。否则，如果日志记录器受到威胁，则可以使用相同的私钥截断或更改先前生成的数据。这种方法成本很高，并且不能防止日志记录器和保存复制数据的实体之间的勾结。为了解决这些问题，在本文中，我们提出了一个在比特币区块链中对安全日志的完整性证明进行不可篡改的建议和实现。由于提案的属性，不需要执行日志数据复制，甚至在日志记录器最近受到损害的情况下，也可以保证不可变日志的完整性。
Several applications require robust and tamper-proof logging systems, e.g. electronic voting or bank information systems. At Scytl we use a technology, called immutable logs, that we deploy in our electronic voting solutions. This technology ensures the integrity, authenticity and non-repudiation of the generated logs, thus in case of any event the auditors can use them to investigate the issue. As a security recommendation it is advisable to store and/or replicate the information logged in a location where the logger has no writing or modification permissions. Otherwise, if the logger gets compromised, the data previously generated could be truncated or altered using the same private keys. This approach is costly and does not protect against collusion between the logger and the entities that hold the replicated data. In order to tackle these issues, in this article we present a proposal and implementation to immutabilize integrity proofs of the secure logs within the Bitcoin’s blockchain. Due to the properties of the proposal, the integrity of the immutabilized logs is guaranteed without performing log data replication and even in case the logger gets latterly compromised.