System and method for maintaining usage records in a shared computing environment

1. A method for maintaining a log of events in a shared computing environment, the method comprising:

receiving, at an audit trail adapter provided on an audit server, one or more raw data streams from the shared computing environment that include transactions conducted in the shared computing environment by a first entity, a second entity that is different from the first entity, and a third entity that is different from the first entity and the second entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a first blockchain entry for a first transaction conducted in the shared computing environment for the first entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a second blockchain entry for a second transaction conducted in the shared computing environment for the second entity, wherein the second blockchain entry includes a signature that points to the first blockchain entry;

creating, by the audit trail adapter, based on the received one or more raw data streams, a third blockchain entry for a third transaction conducted in the shared computing environment for the third entity, wherein the third blockchain entry includes a signature that points to the second blockchain entry; and

causing the first, second, and third blockchain entries to be written to a common blockchain data structure in a database that is made accessible to the first entity, the second entity, and the third entity;

wherein the third entity is capable of determining that the second blockchain entry exists in the common blockchain data structure but is unable to access any payload in the second blockchain entry, and wherein the third entity is incapable of determining that the first blockchain entry exists in the common blockchain data structure because the third blockchain entry does not point to the first blockchain entry.

2. The method of claim 1 , wherein the third entity is capable of accessing a payload in the third blockchain entry by using a payload de-tokenization service.

3. The method of claim 1 , wherein the audit trail adapter comprises a plurality of instances of the audit trail adapter.

4. The method of claim 1 , wherein a payload of the first blockchain entry is pseudonymized with a first set of pseudonyms, wherein a payload of the second blockchain entry is pseudonymized with a second set of pseudonyms, and wherein the first set of pseudonyms is different from the second set of pseudonyms.

5. The method of claim 1 , wherein the first transaction occurred in the shared computing environment prior to the second transaction and wherein blockchain entries in the common blockchain data structure are ordered according to a time of occurrence of the transactions.

6. The method of claim 1 , further comprising:

receiving a request, from a requesting entity, for information about one or more blockchain entries related to the first entity;

using a unique identifier assigned to the first entity to identify the one or more blockchain entries in the common blockchain data structure that are related to the first entity; and

providing information from the identified one or more blockchain entries back to the requesting entity.

7. The method of claim 6 , further comprising:

calculating a hash value using a first tenant's symmetric key; and

comparing the calculated hash value with a hash value received from the first blockchain entry to verify an integrity of the first blockchain entry.

8. The method of claim 7 , wherein the first entity calculates the calculated hash value.

9. The method of claim 1 , wherein the first and second blockchain entries are immutable records in the common blockchain data structure.

10. The method of claim 1 , wherein the shared computing environment comprises a plurality of Internet-connected server resources that provide one or more services to client devices on behalf of the first entity and the second entity.

11. The method of claim 1 , further comprising:

receiving the first and second blockchain entries at an Application Programming Interface (API) gateway; and

enabling the API gateway to collect the first and second blockchain entries and write the first and second blockchain entries to the common blockchain data structure.

12. The method of claim 1 , wherein a payload of the first blockchain entry is encrypted with a first encryption key, wherein a payload of the second blockchain entry is encrypted with a second encryption key, and wherein the first encryption key is different from the second encryption key.

13. A method for maintaining a log of events in a shared computing environment, the method comprising:

receiving, at an audit trail adapter provided on an audit server, one or more raw data streams from the shared computing environment that include transactions conducted in the shared computing environment by a first entity and a second entity that is different from the first entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a first blockchain entry for a first transaction conducted in the shared computing environment for the first entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a second blockchain entry for a second transaction conducted in the shared computing environment for the second entity, wherein the second blockchain entry includes a signature that points to the first blockchain entry; and

causing the first and second blockchain entries to be written to a common blockchain data structure in a database that is made accessible to both the first entity and the second entity

wherein the signature in the second blockchain entry that points to the first blockchain entry is signed by the audit trail adapter that receives the one or more raw data streams and wherein an authentication entity authenticates the signature in the second blockchain entry prior to enabling the second blockchain entry to be written to the common blockchain data structure.

14. The method of claim 13 , wherein the audit trail adapter comprises a plurality of instances of the audit trail adapter.

15. A method for maintaining a log of events in a shared computing environment, the method comprising:

receiving, at an audit trail adapter provided on an audit server, one or more raw data streams from the shared computing environment that include transactions conducted in the shared computing environment by a first entity and a second entity that is different from the first entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a first blockchain entry for a first transaction conducted in the shared computing environment for the first entity;

creating, by the audit trail adapter, based on the received one or more raw data streams, a second blockchain entry for a second transaction conducted in the shared computing environment for the second entity, wherein the second blockchain entry includes a signature that points to the first blockchain entry;

causing the first and second blockchain entries to be written to a common blockchain data structure in a database that is made accessible to both the first entity and the second entity;

analyzing blockchain entries that are written to the common blockchain data structure;

in response to analyzing the blockchain entries that are written to the common blockchain data structure, determining that at least one blockchain entry written to the common blockchain data structure corresponds to an anomalous activity for an entity that is associated with the at least one blockchain entry; and

generating a report for the at least one blockchain entry that is determined to correspond to an anomalous activity for the entity that is associated with the at least one blockchain entry.

16. The method of claim 15 , wherein the audit trail adapter comprises a plurality of instances of the audit trail adapter.

17. The method of claim 15 , wherein the first transaction occurred in the shared computing environment prior to the second transaction and wherein blockchain entries in the common blockchain data structure are ordered according to a time of occurrence of the transactions.

18. The method of claim 15 , further comprising:

receiving a request, from a requesting entity, for information about one or more blockchain entries related to the first entity;

using a unique identifier assigned to the first entity to identify the one or more blockchain entries in the common blockchain data structure that are related to the first entity; and

providing information from the identified one or more blockchain entries back to the requesting entity.

19. The method of claim 15 , wherein the shared computing environment comprises a plurality of Internet-connected server resources that provide one or more services to client devices on behalf of the first entity and the second entity.

20. The method of claim 15 , wherein a payload of the first blockchain entry is encrypted with a first encryption key, wherein a payload of the second blockchain entry is encrypted with a second encryption key, and wherein the first encryption key is different from the second encryption key.