Patent ID: 11909770
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. An apparatus for providing ongoing and on-demand secure verification of audit compliance for a security policy in a computer network, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
identifying a first update published by a service provider in a compliance log, the first update including: an indication that a compliance action has been taken, a pointer to private data of the service provider, a first digest of the compliance log, and a digital signature of the service provider;
verifying, by an auditor, performance of the compliance action using the pointer to the private data of the service provider; and
publishing, by the auditor, a second update to the compliance log, the second update including: an indication that the service provider is in compliance with a security policy, a second digest of the compliance log, and a digital signature of the auditor.