Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Enable Transaction Policies for Generation | Contents | next: Validate Allowed Signers

Log All Signature Requests

Statement of Requirement

Signature Managers MUST log all attempts to sign a transaction, with the entry including at least

• the public key of the signer,
• the transaction data and its metadata envelope,
• a timestamp,
• whether the transaction was successfully signed, and if not a reason for failure.

See it in the specification

Applicability

• Signature Managers

Purpose

Provide information to enable forensic analysis

Audit Procedure

Verify that the Signature Manager logs successful and unsuccessful attempts to sign an unverified transaction

Success Criteria

The Signature Manager logs every successful and unsuccessful attempt to sign an unverified transaction

Best Practice

Log entries include information on the source of the attempt, such as IP addresses or authentication information

Failure Criteria

• The Signature Manager does not log an attempt to sign a transaction
• The signing log does not include all the required evidence (i.e. missing at least one of
  • the public key of the signer,
  • the transaction data
  • its metadata envelope,
  • a timestamp,
  • whether the transaction was successfully signed, and if not a reason for failure.)

Key Evidence

• Signature logs

previous: Enable Transaction Policies for Generation | Contents | next: Validate Allowed Signers