System and method for secure review of audit logs

1. A method for searching encrypted log data comprising:

generating with a logging machine a first log message include first plaintext content;

identifying with the logging machine at least one keyword in the first log message;

encrypting with the logging machine the first log message using a first cryptographic key to produce a first encrypted log message;

generating with the logging machine a first encrypted searchable representation of the first message including the at least one keyword using a second cryptographic key, the second cryptographic key being different than the first cryptographic key;

transmitting with the logging machine the first encrypted searchable representation to an auditor;

performing with the auditor a search to identify at least one search keyword in the first encrypted searchable representation, the auditor using the second cryptographic key to access the first encrypted searchable representation;

generating with a key generation center (KGC) the first cryptographic key, the second cryptographic key, and a third cryptographic key;

distributing with the KGC the first cryptographic key, the second cryptographic key, and the third cryptographic key to the logging machine prior to the generation of the first encrypted message and the first encrypted searchable representation;

distributing with the KGC only the second cryptographic key and the third cryptographic key to the auditor prior to performing the search to identify the at least one search keyword; and

generating with the auditor a first output indicating presence or absence of the at least one search keyword from the first log message, the first output not including the first plaintext content of the first log message.

2. The method of claim 1 further comprising:

applying with the logging machine a one-way function to the first cryptographic key to generate an updated first cryptographic key, the updated first cryptographic key being different than the first cryptographic key;

applying with the logging machine the one-way function to the second cryptographic key to generate an updated second cryptographic key, the updated second cryptographic key being different than the second cryptographic key;

generating with the logging machine a second log message include second plaintext content;

identifying with the logging machine at least one keyword in the second log message;

generating with the logging machine a second encrypted searchable representation of the second message including the at least one keyword using the updated second cryptographic key;

encrypting with the logging machine the second log message using the updated first cryptographic key to produce a second encrypted log message;

transmitting with the logging machine the second encrypted searchable representation to the auditor;

applying with the auditor the one-way function to the second cryptographic key to generate the updated second cryptographic key;

performing with the auditor another search to identify the at least one search keyword in the second encrypted searchable representation, the auditor using the updated second cryptographic key to access the second encrypted searchable representation; and

generating with the auditor a second output indicating presence or absence of the at least one search keyword from the second log message, the second output not including the second plaintext content of the second log message.

3. The method of claim 2 , wherein the logging machine generates the first updated key and the second updated key in response to expiration of a predetermined time period, the second log message being generated after expiration of the predetermined time period.

4. The method of claim 2 , wherein the logging machine generates the first updated key and the second updated key in response to use of the first cryptographic key to generate the first encrypted message and the use of the second cryptographic key to generate the first searchable encrypted representation.

5. The method of claim 2 further comprising:

deleting with the logging machine the first cryptographic key in response to the generation of the updated first cryptographic key to preserve forward security of the first encrypted log message; and

deleting with the logging machine the second cryptographic key in response to the generation of the updated second cryptographic key to preserve forward security of the first encrypted searchable representation.

6. The method of claim 1 further comprising:

generating with the logging machine a first cryptographic signature corresponding to the first encrypted searchable representation using a third cryptographic key;

transmitting with the logging machine the first cryptographic signature to the auditor in association with the first encrypted searchable representation; and

performing with the auditor a search to identify at least one search keyword in the first encrypted searchable representation only in response to verification of the first cryptographic signature using the third cryptographic key.

7. The method of claim 1 further comprising:

transmitting with the logging machine the first encrypted log message to the auditor;

distributing with the KGC the first cryptographic key to the auditor;

decrypting with the auditor the first encrypted cryptographic message using the first cryptographic key; and

generating with the auditor a second output including the first plaintext of the first encrypted message.

8. The method of claim 7 , further comprising:

generating with the logging machine a cryptographic signature of the first encrypted message using the third cryptographic key;

transmitting with the logging machine the cryptographic signature to the auditor in association with the first encrypted message; and

generating with the auditor the second output including the first plaintext of the first encrypted message only in response to verification of the cryptographic signature using the third cryptographic key.

9. The method of claim 1 further comprising:

transmitting with the logging machine the first encrypted log message to the KGC;

decrypting with the KGC the first encrypted cryptographic message using the first cryptographic key;

transmitting with the KGC the first plaintext of the first log message to the auditor; and

generating with the auditor a second output including the first plaintext of the first encrypted message.

10. An encrypted log generation and audit system comprising:

a logging machine communicatively coupled to an auditor and a key generation center (KGC), the logging machine being configured to:

generate a first log message include first plaintext content;

identify at least one keyword in the first log message;

encrypt the first log message using a first cryptographic key to produce a first encrypted log message;

generate a first encrypted searchable representation of the first message including the at least one keyword using a second cryptographic key, the second cryptographic key being different than the first cryptographic key; and

transmit the first encrypted searchable representation to the auditor;

the auditor communicatively coupled to the logging machine and the KGC, the auditor being configured to:

perform a search to identify at least one search keyword in the first encrypted searchable representation, the auditor using the second cryptographic key to access the first encrypted searchable representation; and

generate a first output indicating presence or absence of the at least one search keyword from the first log message, the first output not including the first plaintext content of the first log message; and

the KGC communicatively coupled to the logging machine and the auditor, the KGC being configured to:

generate the first cryptographic key, the second cryptographic key, and a third cryptographic key;

distribute the first cryptographic key, the second cryptographic key, and the third cryptographic key to the logging machine prior to the generation of the first encrypted message and the first encrypted searchable representation; and

distribute only the second cryptographic key and the third cryptographic key to the auditor prior to performing the search to identify the at least one search keyword.

11. The system of claim 10 , the logging machine being further configured to:

apply a one-way function to the first cryptographic key to generate an updated first cryptographic key, the updated first cryptographic key being different than the first cryptographic key;

apply the one-way function to the second cryptographic key to generate an updated second cryptographic key, the updated second cryptographic key being different than the second cryptographic key;

generate second log message include second plaintext content;

identify at least one keyword in the second log message;

generate a second encrypted searchable representation of the second message including the at least one keyword using the updated second cryptographic key;

encrypt the second log message using the updated first cryptographic key to produce a second encrypted log message; and

transmit the second encrypted searchable representation to the auditor; and

the auditor being further configured to:

apply the one-way function to the second cryptographic key to generate the updated second cryptographic key;

perform another search to identify the at least one search keyword in the second encrypted searchable representation, the auditor using the updated second cryptographic key to access the second encrypted searchable representation; and

generate a second output indicating presence or absence of the at least one search keyword from the second log message, the second output not including the second plaintext content of the second log message.

12. The system of claim 11 , the logging machine being further configured to:

generate the first updated key and the second updated key in response to expiration of a predetermined time period, the second log message being generated after expiration of the predetermined time period.

13. The system of claim 11 , the logging machine being further configured to:

generate the first updated key and the second updated key in response to use of the first cryptographic key to generate the first encrypted message and the use of the second cryptographic key to generate the first searchable encrypted representation.

14. The system of claim 11 , the logging machine being further configured to:

delete the first cryptographic key in response to the generation of the updated first cryptographic key to preserve forward security of the first encrypted log message; and

delete the second cryptographic key in response to the generation of the updated second cryptographic key to preserve forward security of the first encrypted searchable representation.

15. The system of claim 10 , the logging machine being further configured to:

generate a first cryptographic signature corresponding to the first encrypted searchable representation using a third cryptographic key; and

transmit the first cryptographic signature to the auditor in association with the first encrypted searchable representation; and

the auditor being further configured to:

perform a search to identify at least one search keyword in the first encrypted searchable representation only in response to verification of the first cryptographic signature using the third cryptographic key.

16. The system of claim 10 , the logging machine being further configured to:

transmit the first encrypted log message to the auditor;

the KGC being further configured to:

distribute the first cryptographic key to the auditor; and

the auditor being further configured to:

decrypt the first encrypted cryptographic message using the first cryptographic key; and

generate a second output including the first plaintext of the first encrypted message.

17. The system of claim 16 , the logging machine being further configured to:

generate a cryptographic signature of the first encrypted message using the third cryptographic key; and

transmit the cryptographic signature to the auditor in association with the first encrypted message; and

the auditor being further configured to:

generate the second output including the first plaintext of the first encrypted message only in response to verification of the cryptographic signature using the third cryptographic key.

18. The system of claim 10 , the logging machine being further configured to:

transmit the first encrypted log message to the KGC;

the KGC being further configured to:

decrypt the first encrypted cryptographic message using the first cryptographic key; and

transmit the first plaintext of the first log message to the auditor; and the auditor being further configured to:

generate a second output including the first plaintext of the first encrypted message.