Re: Secure logging

From: Jim March <jmarch_at_prodigy_dot_net>
Date: Wed Nov 10 2004 - 15:16:01 CST

Edmund R. Kennedy wrote:

> Hello Keith,
>
> Can you think of some other technology or industry that would have
> similar problems? The journal tape of a retail cash register comes to
> mind. Is there something similar for ATM's? Obviously they print a
> receipt which means it is easy for them to print a journal tape at the
> same time. How about check processing or betting? Medical monitoring
> in ICU's?
>
> Thanks, Ed Kennedy

Interjecting here: with a paper printout, you can NEVER be 100% sure
that anything is printing unless you attach a scanner to the paper's
output and continuously read back the results. Expensive but not
totally out of the question.

In all variations where you write out audit trail items to CD/DVD "write
once read many" systems, you can electronically read back and confirm
what you just wrote, one reason I advocate these as at least part of the
solution.

The same is true of USB memory devices of course. My concern there is
that when you buy variants with strong crypto built in and otherwise
high quality, a DVD-burner drive may prove cheaper and the drive has
lots of other uses too. I suspect net costs are lower because the same
drive can do backups, read in the software to start the system, etc.

Jim
==================================================================
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
==================================================================
Received on Tue Nov 30 23:17:25 2004

This archive was generated by hypermail 2.1.8 : Tue Nov 30 2004 - 23:17:44 CST