US 12,468,827 B2
Systems and methods for maintaining immutable data access logs with privacy
Andrew J. Mullin, Cypress, TX (US); Jason S. Thacker, Cypress, TX (US); Nicholas R. Adam, The Woodlands, TX (US); Hai Van Nguyen, Houston, TX (US); and Binh Nguyen, Sugarland, TX (US)
Assigned to JPMORGAN CHASE BANK, N.A., New York, NY (US)
Filed by JPMORGAN CHASE BANK, N.A., New York, NY (US)
Filed on Apr. 11, 2023, as Appl. No. 18/298,930.
Application 18/298,930 is a continuation of application No. 16/396,016, filed on Apr. 26, 2019, granted, now 11,663,347.
Prior Publication US 2023/0244801 A1, Aug. 3, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 21/60 (2013.01); G06F 21/62 (2013.01); H04L 9/30 (2006.01); H04L 9/00 (2022.01); H04L 9/32 (2006.01)
CPC G06F 21/62 (2013.01) [G06F 21/602 (2013.01); H04L 9/30 (2013.01); H04L 9/3297 (2013.01); H04L 9/50 (2022.05)] 17 Claims
OG exemplary drawing
 
1. A method for maintaining immutable data access logs with privacy comprising:
in a cloud provider comprising at least one computer processor, the cloud provider having a plurality of clients:
receiving data from a data owner, wherein the data owner is one of the clients;
storing the data in cloud storage;
executing an action or condition that impacts an availability or an accessibility of the data stored in cloud storage;
generating a log entry associated with the action or condition comprising a timestamp for the action or condition, an identification of a system associated with the action or condition, and an identification of the data associated with the action or condition;
encrypting at least a portion of the timestamp, the identification of the system associated with the action or condition, and the identification of the data associated with the action or condition in the log entry with a public key for the data owner;
committing a cryptographic signature of the encrypted portion of the log entry to a distributed ledger so that the committed log entry is immutable and cryptographically verifiable; and
storing the log entry including the encrypted portion in a location that is separate from the distributed ledger.