Patent ID: 11909770
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method of providing ongoing and on-demand secure verification of audit compliance for a security policy in a computer network, the method comprising:
identifying a first update published by a service provider in a compliance log, the first update including: an indication that a compliance action has been taken, a pointer to private data of the service provider, a first digest of the compliance log, and a digital signature of the service provider;
verifying, by an auditor, performance of the compliance action using the pointer to the private data of the service provider; and
publishing, by the auditor, a second update to the compliance log, the second update including: an indication that the service provider is in compliance with a security policy, a second digest of the compliance log, and a digital signature of the auditor.