Systems and methods in electronic evidence management for creating and maintaining a chain of custody

• US 20080301471A1
• Filed: 05/31/2007
• Published: 12/04/2008
• Est. Priority Date: 05/31/2007
• Status: Abandoned Application

• Current Assignee: Xiotech Corporation
• Original Assignee: Xiotech Corporation
• Inventors: Demarest, Marc, Lolayekar, Santosh, Kondoff, Robert
• Application Number:
  US11/809,548
• Publication Number:
  US 20080301471A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

Systems and methods are provided for electronic evidence management for creating and maintaining a chain of custody. The exemplary systems and methods comprise storing captured electronic evidence in a repository, and recording one or more interactions with the stored electronic evidence in one or more chain of custody logs, wherein at least one chain of custody logs is encrypted and at least one chain of custody logs is unencrypted. The exemplary systems and methods further comprise monitoring the one or more chain of custody logs for unauthorized alterations to the recorded interactions with the stored electronic evidence.

Claims

1. A method for electronic evidence management for creating and maintaining a chain of custody, comprising:

storing captured electronic evidence in a repository;

recording one or more interactions with the stored electronic evidence in one or more chain of custody logs, wherein at least one chain of custody logs is encrypted and at least one chain of custody logs is unencrypted; and

monitoring the one or more chain of custody logs for unauthorized alterations to the recorded interactions with the stored electronic evidence.

2. The method of claim 1, further comprising asymmetrically encrypting the at least one encrypted chain of custody log.

3. The method of claim 1, further comprising decrypting the encrypted custody log and comparing it with the at least one unencrypted log.

4. The method of claim 3, wherein the comparing demonstrates unauthorized alterations to the recorded interactions with the stored electronic evidence, if any.

5. A system for electronic evidence management for creating and maintaining a chain of custody, comprising:

means for storing captured electronic evidence in a repository;

means for recording one or more interactions with the stored electronic evidence in one or more chain of custody logs, wherein at least one chain of custody logs is encrypted and at least one chain of custody logs is unencrypted; and

means for monitoring the one or more chain of custody logs for unauthorized alterations to the recorded interactions with the stored electronic evidence.

6. The system of claim 5, further comprising means for asymmetrically encrypting the at least one encrypted chain of custody log.

7. The system of claim 5, further comprising means for decrypting the encrypted custody log and means for comparing it with the at least one unencrypted log.

8. The system of claim 7, wherein the means for comparing demonstrates unauthorized alterations to the recorded interactions with the stored electronic evidence, if any.

9. A computer readable medium comprising software that, when executed by a computer, causes an electronic evidence management system to perform a method for electronic evidence management for creating and maintaining a chain of custody, the method comprising:

storing captured electronic evidence in a repository;

recording one or more interactions with the stored electronic evidence in one or more chain of custody logs, wherein at least one chain of custody logs is encrypted and at least one chain of custody logs is unencrypted; and

monitoring the one or more chain of custody logs for unauthorized alterations to the recorded interactions with the stored electronic evidence.

10. The medium of claim 9, further comprising asymmetrically encrypting the at least one encrypted chain of custody log.

11. The medium of claim 9, further comprising decrypting the encrypted custody log and comparing it with the at least one unencrypted log.

12. The medium of claim 11, wherein the comparing demonstrates unauthorized alterations to the recorded interactions with the stored electronic evidence, if any.