L o g g ing Syste m fo r L o ng - life time Da ta Va lida tio n - - PowerPoint PPT Presentation

▶
l o g g ing syste m fo r l o ng life time da ta va lida
SMART_READER_LITE
LIVE PREVIEW

L o g g ing Syste m fo r L o ng - life time Da ta Va lida tio n - - PowerPoint PPT Presentation

May 27, 2023 38 likes •504 views

L o g g ing Syste m fo r L o ng - life time Da ta Va lida tio n Ying di Yu UCL A 1 L ife time o f da ta vs. sig ning ke y L ife time o f a da ta pa c ke t de pe nds o n da ta usa g e ma y e xist fo r a lo ng time

slide-1
SLIDE 1

L

  • g g ing Syste m fo r L
  • ng -

life time Da ta Va lida tio n

Ying di Yu UCL A

1

slide-2
SLIDE 2

L ife time o f da ta vs. sig ning ke y

  • L

ife time o f a da ta pa c ke t

– de pe nds o n da ta usa g e – ma y e xist fo r a lo ng time – e ve n fo re ve r

2

slide-3
SLIDE 3

L ife time o f da ta vs. sig ning ke y

  • L

ife time o f a da ta pa c ke t

– de pe nds o n da ta usa g e – ma y e xist fo r a lo ng time – e ve n fo re ve r

  • L

ife time o f a sig ning ke y

– must b e limite d

3

slide-4
SLIDE 4

Ho w to ma inta in lo ng -live d da ta

4

slide-5
SLIDE 5

Ho w to ma inta in lo ng -live d da ta

  • Re -sig n da ta with a ne w ke y

– ma inte na nc e is c o mplic a te d

  • ke y ro llo ve r
  • pub lishing re -sig ne d da ta

5

slide-6
SLIDE 6

Ho w to ma inta in lo ng -live d da ta

  • Re -sig n da ta with a ne w ke y

– ma inte na nc e is c o mplic a te d

  • ke y ro llo ve r
  • pub lishing re -sig ne d da ta
  • Ca n we sig n da ta o nc e a nd le a ve it

a lo ne ?

– po st-fa c t va lida tio n

  • va lida te da ta with a n e xpire d ke y?

6

slide-7
SLIDE 7

Po st-F a c t Va lida tio n

7

slide-8
SLIDE 8

Po st-F a c t Va lida tio n

  • K

e y wa s va lid a t the mo me nt o f sig ning

– tho ug h it is inva lid no w

8

slide-9
SLIDE 9

Po st-F a c t Va lida tio n

  • K

e y wa s va lid a t the mo me nt o f sig ning

– tho ug h it is inva lid no w

  • Che c k if the sig na ture wa s g e ne ra te d

during the va lid pe rio d o f the ke y

9

slide-10
SLIDE 10

Po st-F a c t Va lida tio n

  • K

e y wa s va lid a t the mo me nt o f sig ning

– tho ug h it is inva lid no w

  • Che c k if the sig na ture wa s g e ne ra te d

during the va lid pe rio d o f the ke y

  • Ca n we ha ve a time ma c hine to g o

b a c k?

– a lo g g ing syste m ma y he lp!

10

slide-11
SLIDE 11

Wha t to lo g ?

  • Assume we ha ve a ho ne st lo g g e r

11

slide-12
SLIDE 12

Wha t to lo g ?

  • Assume we ha ve a ho ne st lo g g e r
  • Give n a lo ng -live d da ta

– da ta na me : re trie ve da ta whe n ne c e ssa ry – da ta dig e st: inte g rity c he c king – sig ning time sta mp

12

slide-13
SLIDE 13

Wha t to lo g ?

  • Assume we ha ve a ho ne st lo g g e r
  • Give n a lo ng -live d da ta

– da ta na me : re trie ve da ta whe n ne c e ssa ry – da ta dig e st: inte g rity c he c king – sig ning time sta mp

  • But a lso sig ning ke y

– na me , dig e st, inse rting time sta mp (a nd re vo king

time sta mp if ne e de d)

13

slide-14
SLIDE 14

Wha t to lo g ?

  • Assume we ha ve a ho ne st lo g g e r
  • Give n a lo ng -live d da ta

– da ta na me : re trie ve da ta whe n ne c e ssa ry – da ta dig e st: inte g rity c he c king – sig ning time sta mp

  • But a lso sig ning ke y

– na me , dig e st, inse rting time sta mp (a nd re vo king

time sta mp if ne e de d)

14

slide-15
SLIDE 15

Se c ure lo g g e r

15

slide-16
SLIDE 16

Se c ure lo g g e r

  • A truste d third pa rty?

– no t e ve ry o ne will trust the sa me third pa rty – no e ntity la sts fo re ve r

16

slide-17
SLIDE 17

Se c ure lo g g e r

  • A truste d third pa rty?

– no t e ve ry o ne will trust the sa me third pa rty – no e ntity la sts fo re ve r

  • Pub lic ly a udita b le lo g g e r

– a nyo ne c a n a udit the lo g g e r

  • da ta sig ne rs, da ta c o nsume rs, c e rtific a te issue rs,

inde pe nde nt third pa rtie s, …

17

slide-18
SLIDE 18

Se c ure lo g g e r

  • A truste d third pa rty?

– no t e ve ry o ne will trust the sa me third pa rty – no e ntity la sts fo re ve r

  • Pub lic ly a udita b le lo g g e r

– a nyo ne c a n a udit the lo g g e r

  • da ta sig ne rs, da ta c o nsume rs, c e rtific a te issue rs,

inde pe nde nt third pa rtie s, …

– fo rc e lo g g e r to b e ha ve ho ne stly

18

slide-19
SLIDE 19

Se c ure lo g g e r

  • A truste d third pa rty?

– no t e ve ry o ne will trust the sa me third pa rty – no e ntity la sts fo re ve r

  • Pub lic ly a udita b le lo g g e r

– a nyo ne c a n a udit the lo g g e r

  • da ta sig ne rs, da ta c o nsume rs, c e rtific a te issue rs,

inde pe nde nt third pa rtie s, …

– fo rc e lo g g e r to b e ha ve ho ne stly – ta mpe r-e vide nt lo g

19

slide-20
SLIDE 20

T a mpe r-E vide nt L

  • g

20

slide-21
SLIDE 21

T a mpe r-E vide nt L

  • g
  • Ha sh c ha in

– Bitc o in – simple , spa c e e ffie nt – slo w to c he c k

21

slide-22
SLIDE 22

T a mpe r-E vide nt L

  • g
  • Ha sh c ha in

– Bitc o in – simple , spa c e e ffie nt – slo w to c he c k

22

slide-23
SLIDE 23

T a mpe r-E vide nt L

  • g
  • Ha sh c ha in

– Bitc o in – simple , spa c e e ffie nt – slo w to c he c k

  • Me rkle T

re e

– Ce rtific a te T

ra nspa re nc y

– e ffic ie nt c he c king

23

slide-24
SLIDE 24

T a mpe r-E vide nt L

  • g
  • Ha sh c ha in

– Bitc o in – simple , spa c e e ffie nt – slo w to c he c k

  • Me rkle T

re e

– Ce rtific a te T

ra nspa re nc y

– e ffic ie nt c he c king

24

slide-25
SLIDE 25

Me rkle T re e in NDN

25

slide-26
SLIDE 26

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

26

slide-27
SLIDE 27

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

  • E

a c h sub -tre e

– fixe d b y its ro o t

  • e a sy to ve r

ify

27

slide-28
SLIDE 28

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

  • E

a c h sub -tre e

– fixe d b y its ro o t

  • e a sy to ve r

ify

– fixe d b y its inde x (le ve l, se q No )

  • e a sy to r

e tr ie ve

28

slide-29
SLIDE 29

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

  • E

a c h sub -tre e

– fixe d b y its ro o t

  • e a sy to ve r

ify

– fixe d b y its inde x (le ve l, se q No )

  • e a sy to r

e tr ie ve

– o nc e c o mple te , b e c o me fro ze n

  • c a n be c a c he d

29

slide-30
SLIDE 30

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

  • E

a c h sub -tre e

– fixe d b y its ro o t

  • e a sy to ve r

ify

– fixe d b y its inde x (le ve l, se q No )

  • e a sy to r

e tr ie ve

– o nc e c o mple te , b e c o me fro ze n

  • c a n be c a c he d
  • E

nc o de e a c h sub tre e in a da ta pa c ke t

– na me : / <lo g g e rPre fix>/ [sub T

re e I nde x]/ [dig e st]

– c o nte nt: no de dig e sts in BF

S o rde r

30

slide-31
SLIDE 31

Me rkle T re e in NDN

  • A Me rkle T

re e c o nsists o f sub -tre e s

  • E

a c h sub -tre e

– fixe d b y its ro o t

  • e a sy to ve r

ify

– fixe d b y its inde x (le ve l, se q No )

  • e a sy to r

e tr ie ve

– o nc e c o mple te , b e c o me fro ze n

  • c a n be c a c he d
  • E

nc o de e a c h sub tre e in a da ta pa c ke t

– na me : / <lo g g e rPre fix>/ [sub T

re e I nde x]/ [dig e st]

– c o nte nt: no de dig e sts in BF

S o rde r

  • L

e a f no de

– na me : / <lo g g e rPre fix>/ le a f/ [se q No ] – de ta ile d info (sig ne d da ta , time sta mp…)

31

slide-32
SLIDE 32

Sto ra g e o f lo g & da ta

32

slide-33
SLIDE 33

Sto ra g e o f lo g & da ta

  • Sto re lo g & da ta se pa ra te ly

– L

  • g g e rs ma inta in lo g

– Use rs ma inta in a c tua l da ta

  • no ne e d to re trie ve lo g fo r una va ila b le da ta

33

slide-34
SLIDE 34

Sto ra g e o f lo g & da ta

  • Sto re lo g & da ta se pa ra te ly

– L

  • g g e rs ma inta in lo g

– Use rs ma inta in a c tua l da ta

  • no ne e d to re trie ve lo g fo r una va ila b le da ta
  • Use r c a nno t c ha ng e a c tua l da ta

– dig e st is fixe d in lo g

34

slide-35
SLIDE 35

Sto ra g e o f lo g & da ta

  • Sto re lo g & da ta se pa ra te ly

– L

  • g g e rs ma inta in lo g

– Use rs ma inta in a c tua l da ta

  • no ne e d to re trie ve lo g fo r una va ila b le da ta
  • Use r c a nno t c ha ng e a c tua l da ta

– dig e st is fixe d in lo g

  • Use rs ma y e ve n ke e p a sub -tre e

– c o nta in a use r’ s o wn da ta – c o uld b e inc o mple te – ro o t dig e st is fixe d in lo g

35

slide-36
SLIDE 36

Multiple L

  • g g e rs

36

slide-37
SLIDE 37

Multiple L

  • g g e rs
  • L
  • g g e rs ma y se rve diffe re nt purpo se s

– diffe re nt na me spa c e s, diffe re nt trust

mo de ls

  • e .g ., e a c h o rg a niza tio n ma y ha ve its o wn

lo g g e r to lo g the ir o wn da ta

37

slide-38
SLIDE 38

Multiple L

  • g g e rs
  • L
  • g g e rs ma y se rve diffe re nt purpo se s

– diffe re nt na me spa c e s, diffe re nt trust

mo de ls

  • e .g ., e a c h o rg a niza tio n ma y ha ve its o wn

lo g g e r to lo g the ir o wn da ta

  • L
  • g g e rs sync hro nize with e a c h o the r

38

slide-39
SLIDE 39

Multiple L

  • g g e rs
  • L
  • g g e rs ma y se rve diffe re nt purpo se s

– diffe re nt na me spa c e s, diffe re nt trust

mo de ls

  • e .g ., e a c h o rg a niza tio n ma y ha ve its o wn

lo g g e r to lo g the ir o wn da ta

  • L
  • g g e rs sync hro nize with e a c h o the r

– impro ve re dunda nc y

39

slide-40
SLIDE 40

Multiple L

  • g g e rs
  • L
  • g g e rs ma y se rve diffe re nt purpo se s

– diffe re nt na me spa c e s, diffe re nt trust

mo de ls

  • e .g ., e a c h o rg a niza tio n ma y ha ve its o wn

lo g g e r to lo g the ir o wn da ta

  • L
  • g g e rs sync hro nize with e a c h o the r

– impro ve re dunda nc y – a uto ma tic a lly a udit e a c h o the r

40

slide-41
SLIDE 41

Multiple L

  • g g e rs
  • L
  • g g e rs ma y se rve diffe re nt purpo se s

– diffe re nt na me spa c e s, diffe re nt trust

mo de ls

  • e .g ., e a c h o rg a niza tio n ma y ha ve its o wn

lo g g e r to lo g the ir o wn da ta

  • L
  • g g e rs sync hro nize with e a c h o the r

– impro ve re dunda nc y – a uto ma tic a lly a udit e a c h o the r – using / e xte nding Chro no Sync

  • e a c h lo g g e r ha s its o wn pre fix & se q No

41

slide-42
SLIDE 42

Ha sh Ag ility

  • T

e mpe r-e vide nt lo g is b a se d o n ha sh func tio n

  • A ha sh func tio n ma y b e b ro ke n

e ve ntua lly

42

slide-43
SLIDE 43

Ha sh Ag ility

  • T

e mpe r-e vide nt lo g is b a se d o n ha sh func tio n

  • A ha sh func tio n ma y b e b ro ke n

e ve ntua lly

  • T

wo c o pie s using diffe re nt ha sh func tio ns

– o ne is re la tive ly stro ng e r tha n the o the r

  • e .g ., Sha 256(B), Sha 3-384(B)

43

slide-44
SLIDE 44

Ha sh Ag ility

  • T

e mpe r-e vide nt lo g is b a se d o n ha sh func tio n

  • A ha sh func tio n ma y b e b ro ke n

e ve ntua lly

  • T

wo c o pie s using diffe re nt ha sh func tio ns

– o ne is re la tive ly stro ng e r tha n the o the r

  • e .g ., Sha 256(B), Sha 3-384(B)

– a ssume : no t b ro ke n o n the sa me da y

  • we a ke r b ro ke n, stro ng e r still va lid
  • e no ug h time to re c o nstruc t a no the r c o py with a

stro ng e r ha sh a t tha t time

  • ho pe fully, it ra re ly ha ppe ns

44

slide-45
SLIDE 45

Co nc lusio n

  • lo g g ing syste m e na b le s

– po st-fa c t va lida tio n – usa g e o f sho rt-live d ke ys

  • Se c ure lo g g ing syste m thro ug h pub lic

a uditing

  • I

nc re a se re dunda nc y o f c e rtific a te pro visio ning

45

slide-46
SLIDE 46

T ha nk yo u!

ying di@ c s.uc la .e du

46