Abstract: A centralized auditing system receives an audit block containing one or more audit files generated by an audit agent running in an audited device. The audit block additionally stores a first digital signature corresponding to a previous audit block, and a second digital signature generated based at least on the one or more audit files and the first digital signature. After receiving the audit block, the auditing system verifies the integrity of the received audit block based on the second digital signature stored in the audit block and/or the first digital signature corresponding to the previous audit block. In response to verifying the integrity of the received audit block, the auditing system adds the received audit block to an audit register. Moreover, the auditing system adds the one or more audit files included in the audit block to an audit database.

Abstract: An audited device generates, for each of a plurality of events, an audit file and the audit device locally store the audit files. Upon the occurrence of a trigger condition, the audit device retrieves a batch of audit files stored locally and generates an audit block for transmitting the batch of audit files to an auditing system. The audit block includes the audit files in the batch of audit files, and a digital signature generated based in part on the audit files in the batch of audit files. The audited device then sends the audit block to the auditing system. Accordingly, the amount of data for transmitting the audit files from the audited device to the auditing system may be reduced. Additionally, the computational power for authenticating the audit files to the auditing system may also be reduced.

Abstract: A centralized auditing system receives an audit block containing one or more audit files generated by an audit agent running in an audited device. The audit block additionally stores a first digital signature corresponding to a previous audit block, and a second digital signature generated based at least on the one or more audit files and the first digital signature. After receiving the audit block, the auditing system verifies the integrity of the received audit block based on the second digital signature stored in the audit block and/or the first digital signature corresponding to the previous audit block. In response to verifying the integrity of the received audit block, the auditing system adds the received audit block to an audit register. Moreover, the auditing system adds the one or more audit files included in the audit block to an audit database.