Patent ID: 7904726
Filing Date: 2011-03-08
Classification: G06F,H04L

Abstract:
1. A computerized method of protecting the integrity of network events, the method comprising: storing an event record reported from one or more communication entities, the event record including abnormal activities corresponding to the one or more communication entities; reading a first set of event fields in the event record, the first set of event fields including information that uniquely identifies the event record; electronically generating, via a processing device, a first digital signature based on the read event fields; electronically appending, via the processing device, the first digital signature to a concatenation of the first set of event fields to thereby produce a signed event record; electronically determining, via the processing device, whether tampering of the first set of event fields in the event record has occurred; upon determining that the first set of event fields have not been tampered with, storing a second set of event fields in the event record, information in the second set of event fields is based on the information of the un-tampered first set of event fields; electronically generating, via the processing device, a second digital signature based on the second set of event fields; and electronically appending, via the processing device, the second digital signature to a concatenation of the second set of event fields in the signed event record.