Citation :

Aris J. Ordonez, "Multiple Digital Signature Integration in the University Data Backup Archive using Enhanced DLP-based Security Framework," International Journal of Engineering Trends and Technology (IJETT), vol. 74, no. 9, pp. 26-39, 2026. Crossref, https://doi.org/10.14445/22315381/IJETT-V74I9P103

Abstract

The dependency of universities on information systems has emphasized the need for a secure archival mechanism for institutional data. This study covers the implementation of a repository for database backup of Bicol University using a multiple digital signatory framework using Enhanced Discrete Logarithm Problem (DLP). The method consolidates five security managers of Bicol University, each maintaining their own digital signatures. The backup activity covers hashing of the database files using SHA-512 and encrypts the result using an Enhanced DLP-based Cryptosystem to generate a consolidated digital signature. The verification process requires the participation of, but is not limited to, five (5) security managers to ensure integrity, authenticity, and non-repudiation of the backup file and the stored security stamp. The evaluation conducted showed consistent and validated generation of digital signatures and security stamps, reliable detection of file tampering, and integration of collaborative authorization of security managers, which establishes distributed accountability and operational trust. Further analysis of the algorithm showed no established patterns between the plaintext and ciphertext, manifesting a high level of security. The sensitivity test using the Avalanche Effect exposed no patterns between the ciphertext and the plaintext and key, manifesting encryption strength. This was further validated by the use of the Strict Avalanche Criterion (SAC), which also showed a higher level of security. However, complexity analysis disclosed that higher computing resources are necessary to effectively implement the system. Nonetheless, the study confirmed that the enhanced DLP-based multiple digital signature framework is cryptographically secured and provides a practical and scalable approach for securing institutional data.

Keywords

Cryptography, Cybersecurity, Digital signature, SHA-512, Enhanced DLP, Multi-party authorization.

References

[1] Bruce Schneier, Applied Cryptography, Second Edition: Protocols, Algorthms, and Source Code in C, 2^nd ed., Wiley, 2015.
[CrossRef] [Google Scholar] [Publisher Link]

[2] William Stallings, Cryptography and Network Security: Principles and Practice, 7^th ed., Pearson, 2017.
[Google Scholar] [Publisher Link]

[3] FIPS 180-4, “Secure Hash Standard (SHS),” National Institute of Standards and Technology (NIST), 2015.
[CrossRef] [Google Scholar] [Publisher Link]

[4] Xiaoyun Wang, and Hongbo Yu, “How to Break MD5 and Other Hash Functions,” Advances in Cryptology – EUROCRYPT 2005: 24^th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Aarhus, Denmark, vol. 3494, pp. 19-35, 2005.
[CrossRef] [Google Scholar] [Publisher Link]

[5] R.L. Rivest, A. Shamir, and L. Adleman, “A Method for Obtaining Digital Signatures and Public-Key Cryptosystems,” Communications of the ACM, vol. 21, no. 2, pp. 120-126, 1978.
[CrossRef] [Google Scholar] [Publisher Link]

[6] T. Elgamal, “A Public Key Cryptosystem and a Signature Scheme based on Discrete Logarithms,” IEEE Transactions on Information Theory, vol. 31, no. 4, pp. 469-472, 1985.
[CrossRef] [Google Scholar] [Publisher Link]

[7] Whitfield Diffie, and M. Hellman, “New Directions in Cryptography,” IEEE Transactions on Information Theory, vol. 22, no. 6, pp. 644-654, 1976.
[CrossRef] [Google Scholar] [Publisher Link]

[8] Alfred J. Menezes, Paul C. van Oorschot, and Scott A. Vanstone, Handbook of Applied Cryptography, 1^st ed., CRC Press, 1997.
[CrossRef] [Google Scholar] [Publisher Link]

[9] Yvo Desmedt, “Threshold Cryptosystems,” Advances in Cryptology - AUSCRYPT '92: Workshop on the Theory and Application of Cryptographic Techniques, Gold Coast, Queensland, Australia, vol. 718, pp 1-14, 2005.
[CrossRef] [Google Scholar] [Publisher Link]

[10] Adi Shamir, “How to Share a Secret,” Communications of the ACM, vol. 22, no. 11, pp. 612-613, 1979.
[CrossRef] [Google Scholar] [Publisher Link]

[11] Mihir Bellare, and Gregory Neven, “Multi-Signatures in the Plain Public-Key Model and A General Forking Lemma,” Proceedings of the 13^th ACM Conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, United States, pp. 390-399, 2006.
[CrossRef] [Google Scholar] [Publisher Link]

[12] P.W. Singer, and Allan Friedman, Cybersecurity and Cyberwar: What Everyone Needs to Know®, Oxford Academic, 2014.
 [CrossRef] [Google Scholar] [Publisher Link]

[13] Eric Cole, and Sandra Ring, Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft, Syngress Publishing, 2006.
[Google Scholar] [Publisher Link]

[14] Zühre Aydın Yenioğlu, “Backup Encryption and Encrypted Backup Operation Performance in SQL Server,” International Journal of Pure and Applied Sciences, vol. 8, no. 2, pp. 380-385, 2022.
[CrossRef] [Google Scholar] [Publisher Link]

[15] Alexandru Boicea et al., “Comparative Study Over the Encryption and Non-Encryption of the MySQL Database,” International Business Information Management Association, Seville, Spain, pp. 18-23, 2016.
[Google Scholar]

[16] Douglas Robert Stinson, and Maura Paterson, Cryptography: Theory and Practice, 4^th ed., CRC Press, 2017.
[CrossRef] [Google Scholar] [Publisher Link]

[17] Colin Boyd, Anish Mathuria, and Douglas Stebila, Protocols for Authentication and Key Establishment, 2^nd ed., Springer Berlin, Heidelberg, pp. 1-521, 2020.
[CrossRef] [Google Scholar] [Publisher Link]

[18] Giuseppe Ateniese et al., “Provable Data Possession at Untrusted Stores,” Proceedings of the 14^th ACM conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, United States, pp. 598-609, 2007.
[CrossRef] [Google Scholar] [Publisher Link]

[19] Ari Juels, and Burton S. Kaliski, “Pors: Proofs of Retrievability for Large Files,” Proceedings of the 14^th ACM conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, United States, pp. 584-597, 2007.
[CrossRef] [Google Scholar] [Publisher Link]

[20] Robert Kahn, and Robert Wilensky, “A Framework for Distributed Digital Object Services,” International Journal on Digital Libraries, vol. 6, no. 2, pp. 115-123, 2006.
[CrossRef] [Google Scholar] [Publisher Link]

[21] ISO/IEC 27001:2022, Information Security Management Systems-Requirements, 3^rd ed., International Organization for Standardization, 2022.
[Publisher Link]

[22] Hidehito Gomi, “Authentication Trust Metric and Assessment for Federated Identity Management Systems,” IEICE Transactions on Information and Systems, vol. E95-D, no. 1, pp. 29-37, 2012.
[CrossRef] [Google Scholar] [Publisher Link]

[23] Thomas H. Cormen et al., Introduction to Algorithms, 4^th ed., MIT Press, 2022.
[Google Scholar] [Publisher Link]

[24] Karl Pearson, “Note on Regression and Inheritance in the Case of Two Parents,” Proceedings of the Royal Society of London, vol. 58, pp. 240-242, 1895.
[Google Scholar] [Publisher Link]

[25] C.E. Shannon, “Communication Theory of Secrecy Systems,” Bell System Technical Journal, vol. 28, no. 4, pp. 656-715, 1949.
[CrossRef] [Google Scholar] [Publisher Link]

[26] A.F. Webster, and S.E. Tavares, “On the Design of S-Boxes,” Advances in Cryptology-CRYPTO ’85 Proceedings, Springer, Berlin, Heidelberg, vol. 218, pp. 523-534, 2000.
[CrossRef] [Google Scholar] [Publisher Link]