System and method for securely distributing legal evidence

• US 9,246,898 B2
• Filed: 11/19/2013
• Issued: 01/26/2016
• Est. Priority Date: 11/20/2012
• Status: Active Grant

• Current Assignee: Utility Associates Incorporated
• Original Assignee: Utility Associates Incorporated
• Inventors: McKeeman, Robert S., Davis, Ted M.
• Primary Examiner(s): BROWN, ANTHONY D
• Application Number:
  US14/084,072
• Publication Number:
  US 20140143545A1
• Time in Patent Office: 798 Days
• Field of Search: 726 26- 30
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

This invention provides a system and method to search for and securely download Digital MultiMedia Evidence (DME) data from a central DME repository to portable USB, smart phone, tablet, laptop, desktop, or other data storage devices, with a clear chain of custody and access control audit trail reporting, so the DME can be used to prepare for and conduct legal proceedings.

Claims

1. A secure data collection and distribution system comprising:

a. a data recording system including;

i. a data recording device for capturing data; and

ii. a network adapter for transmitting the data from the data recording device, via a first communication link, to a management storage system;

b. the management storage system including;

i. a management storage system input/output interface for receiving the data via the first communication link from the data recording device and for delivering the data to a data storage device via a second communication link;

ii. a management storage memory for storing the data;

iii. a management storage processor for controlling the operation of the management storage system to ensure that the integrity of the data, as recorded by the data recording device, is maintained; and

iv. a verification module configured for verifying access to the data by the data storage device; and

c. the data storage device, something a user has, for receiving data from the management storage system including;

i. a data storage device input/output interface for receiving the data via the second communication link from the management storage system;

ii. a data storage device memory for storing the data and software modules;

iii. an authentication and security module stored in the data storage device memory and configured to communicate via the second communication link with the verification module of the management storage system in order to allow the data storage device to have access to the data in the management storage system wherein the verification module of the management storage system checks the validity of credentials of the user of the data storage device, the credentials being something the user knows and that the user supplies to the verification module of the management storage system, and wherein the verification module of the management storage system checks for the existence of a permanent unique identifier associated with the data storage device and supplied by the data storage device to the verification module of the management storage system, and based on checking the user credentials and the existence of the permanent unique identifier associated with the data storage device, the verification module determines whether the data storage device is entitled to receive a portion of the data and to thereby ensure the integrity of the data,

wherein the data is multimedia data including image data, audio data, and metadata and the data storage device further includes an audit trail record creation module configured to create an audit trail record for the data stored in the data storage device memory, the audit trail record including information about the circumstances under which the data is accessed from the data storage device, and wherein the audit trail is stored in the data storage device memory.

2. The data management system of claim 1, wherein the data storage device further includes a data storage device processor for controlling the operation of the data storage device.

3. The data management system of claim 1, wherein the data storage device further includes a viewer module for displaying the data.

4. The data management system of claim 1, wherein the authentication and security module is configured to erase the data storage device memory if the user'"'"'s credentials or the unique identifier are not valid.

5. The data management system of claim 1, wherein the data storage device further includes a virtual private network secure communications module to securely transfer the data from the management storage system.

6. The data management system of claim 2, wherein the data storage device further includes a search module to search the data based upon metadata criteria.

7. The data management system of claim 2, wherein the management storage system further includes a characterization and indexing module for organizing the data based upon metadata captured along with the video data and audio data, and wherein the data storage device further includes a search module for searching the organized data.

8. The data management system of claim 1, wherein the second communication link further includes a download computer connected to the management storage system input/output interface and to which the data storage device is directly connected.

9. The data management system of claim 1, wherein the data storage device is connected to another computer and the viewer module is configured to display the data on the other computer without permanently transferring the data to the other computer.

10. A data storage device, something a user has, for receiving data from a management storage system via a communications link, the data storage device comprising:

a. a data storage device input/output interface for receiving the data via the communication link from the management storage system;

b. a data storage device memory for storing the data and software modules;

c. an authentication and security module stored in the data storage device memory and configured to communicate via the second communication link with a verification module of the management storage system in order to allow the data storage device to have access to the data in the management storage system wherein the verification module of the management storage system checks the validity of credentials of the user of the data storage device, the credentials being something the user knows and that the user supplies to the verification module of the management storage system, and wherein the verification module of the management storage system checks for the existence of a permanent unique identifier associated with the data storage device and supplied by the data storage device to the verification module of the management storage system, and based on checking the user credentials and the existence of the permanent unique identifier associated with the data storage device, the verification module determines whether the data storage device is entitled to receive a portion of the data to thereby ensure the integrity of the data,

wherein the data is multimedia data including image data, audio data, and metadata and the data storage device further includes an audit trail record creation module configured to create an audit trail record for the data stored in the data storage device memory, the audit trail record including information about the circumstances under which the data is accessed from the data storage device, and wherein the audit trail is stored in the data storage device memory.

11. The data storage device of claim 10, wherein the data storage device further includes a data storage device processor for controlling the operation of the data storage device.

12. The data storage device of claim 10, wherein the data storage device further includes a viewer module for displaying the data.

13. The data storage device of claim 10, wherein the authentication and security module is configured to erase the data storage device memory if the user'"'"'s credentials or the unique identifier are not valid.

14. The storage device system of claim 10, wherein the data storage device further includes a virtual private network secure communications module to securely transfer the data from the management storage system.

15. The storage device system of claim 11, wherein the data storage device further includes a search module to search the data based upon metadata criteria.

16. The data storage device of claim 15, wherein the data storage device further includes a messaging module to send messages to other authorized users with metadata search results and pointers to specific data segments.

17. The data storage device of claim 10, wherein the data storage device is connected to another computer and the viewer module is configured to display the data on the other computer without permanently transferring the data to the other computer.

18. A method for securely collecting and managing data comprising the steps of:

a. recording the data by a data recording system including;

i. capturing the data; and

ii transmitting the data via a first communication link from a data recording device to a management storage system;

b. receiving the data by the management storage system and processing the data including;

i. storing the data in a central storage device of the management storage system;

ii. ensuring that the integrity of the data, as recorded by the data recording system, is maintained in the management storage system;

iii. verifying whether a data storage device, something a user has, is authorized to have access to the data in the management storage system wherein a verification module of the management storage system checks the validity of credentials of the user of the data storage device, the credentials being something the user knows and that the user supplies to the verification module of the management storage system, and wherein the verification module of the management storage system checks for the existence of a permanent unique identifier associated with the data storage device and supplied by the data storage device to the verification module of the management storage system, and based on checking the user credentials and the existence of the permanent unique identifier associated with the data storage device, the verification module determines whether the data storage device is entitled to receive a portion of the data based on the credentials of the user and the unique identifier of the data storage device and to thereby ensure the integrity of the data; and

iv. if the data storage device is authorized to have access to the data, delivering the data to the data storage device via a second communication link; and

c. receiving data by the data storage device from the management storage system and processing the data including storing the data in a data storage device memory of the data storage device,

wherein the processing step by the data storage device further includes creating an audit trail by an audit trail creation module and storing the audit trail in the data storage device memory and wherein the audit trail includes information about the circumstances under which the data is accessed from the data storage device.

19. The method for securely managing data of claim 18, wherein the data includes image data, audio data, and metadata.

20. The method for securely managing data of claim 18, wherein the verifying step further includes erasing the data storage device memory if the user'"'"'s credentials or the unique identifier are not valid.

21. The method for securely managing data of claim 18, wherein the step of storing data in the central storage device further includes characterizing and indexing the data by characterization and indexing module in the management storage system and wherein processing the data by the data storage device includes a searching the characterized and indexed data by a search module.

22. The method for securely managing data of claim 18, wherein the method further includes the step of displaying the data by a viewer module of the data storage device.

23. The method for securely managing data of claim 18, wherein the step of delivering the data to the data storage device via the second communication link that further includes downloading the data from the data management storage system via the second communication link to a download computer and directly connecting the data storage device to the download computer.

24. The method for securely managing data of claim 23, wherein the step of displaying the data by the viewer module includes connecting the data storage device to another computer and displaying the data on the other computer without permanently transferring the data to the other computer.

25. The method for securely managing data of claim 18, wherein processing the data by the data storage device includes sending the data to authorized third parties by means of a messaging module in the data storage device.

26. The method for securely managing data of claim 18, wherein the step of delivering the data to the storage device via a second communication link includes a virtual private network connection between the management storage system and the data storage device.