Patent ID: 8422682

Claim:
A system to generate Immutable Audit Logs from one or more audit information sources, comprising at least one independent server (IAL server) hosting a software program, performing the following functions: a. receiving audit information from at least one source by means of an API (Application Programming Interface) that is provided to enable the communication between said IAL server and said audit information source(s) through a communications network; b. processing the audit information applying cryptographic routines to generate one immutable digital chain that contains at least the audit information such that only authorized auditors will be able to verify integrity of the immutable digital chain and access the audit data; and c. storing said chain in a mass storage media comprising at least one of a hard drive, a WORM or a Storage Area Network (SAN), wherein said immutable digital chain is generated by including at every link at least the data resulting to apply an HMAC function using a secret session key K over the result of information at current link concatenated with previous link HMAC value, so that link, will contain at least HMAC K (information of link i operated with h i-1 ) where h i-1 is HMAC K (data of link i-1 concatenated with h i-2 ), said IAL server comprising at least a timer for adding specific links to said immutable digital chain at regular defined intervals (‘Metronome Entry’) that contain at least a timestamp and the data resulting to apply a digital signature using a private key that is always kept secret over the metronome timestamp concatenated with the previous results, and wherein a first entry of said immutable digital chain contains at least said secret session key K encrypted with the public key of an authorized auditor and digitally signed by a private key so that an auditor can benefit from the guaranteed presence at said regular defined intervals of entries that contain at least a timestamp that is digitally signed.