Patent · US Expired

System and method for encrypting audit information in network applications

US6286098A · kind A · utility

109Cited by
6References
13Claims
0Family size

Assignee

Inventors

Key dates

Filing dateAug 28, 1998
Grant dateSep 4, 2001
Priority date
Expiry dateAug 28, 2018

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1425
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

A system and method for auditing network applications captures transmissions during a user session between a client and a server. An auditor capture filter captures each request from the client and each response by the server to each request. An auditor encryption module encrypts the captured requests and the captured responses with an encryption key and stores them in an auditor storage. The auditor encryption module also distributes portions of the encryption key to the client and the server. An auditor decryption module collects the portions of the encryption key from the client and the server and decrypts the encrypted requests and the encrypted responses. An auditor analyzer may then use the decrypted requests and the decrypted responses to recreate the user session to thereby analyze what transpired during the user session. In addition, the analyzer may also verify that a particular event occurred during the user session.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.