Distributed Ledger Chain of Custody for Forensic Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprise organizations face vulnerabilities in data integrity due to time gaps between automatic forensic data collection and digital signature application, allowing malicious actors to modify data undetected, which can lead to reduced trustworthiness of the data by external entities.
Innovation Solution
A computing platform establishes and maintains distributed ledgers to immediately record forensic data, computes hashes before and after access, and records chain of custody information, ensuring an unbroken chain of custody and preventing data manipulation by using side chains and main blockchains to track data usage and modifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signatures are used to establish chain of custody after automatic data collection, then data authentication is improved, but time gaps allow data manipulation by malicious actors
Solution Approach 1:
The patent applies preliminary action by computing and recording hash values of forensic data immediately upon automatic collection, before any human intervention or digital signature application. This creates an immutable timestamped record in a distributed ledger that prevents later manipulation, effectively closing the time gap vulnerability while maintaining authentication reliability.
2Reliability
If distributed ledgers are established immediately upon data receipt, then data integrity is improved, but system complexity increases
Solution Approach 1:
The patent segments the chain of custody system into multiple distributed ledgers, each serving a specific function: one ledger for raw forensic data, another for hash values, and a third for chain of custody metadata. This segmentation allows the system to achieve high data integrity through cryptographic linking while managing complexity by distributing functionality across separate, specialized ledger structures rather than requiring a single complex system.
3Reliability
If multiple distributed ledgers are used to track data access and modifications, then chain of custody certification is improved, but data processing overhead increases
Solution Approach 1:
The patent uses copying by creating hash value replicas of the original forensic data and storing these copies in separate distributed ledgers. Instead of moving or duplicating the entire raw data across multiple ledgers, the system computes hash copies that serve as immutable fingerprints. This approach maintains robust chain of custody certification through multiple ledger copies while minimizing data processing overhead by working with compact hash representations rather than large raw datasets.
Data Source
AI summary
Aspects of the disclosure relate to enhanced chain of custody certification. A computing platform may establish, within a period of time of receiving data, a first distributed ledger that includes the data. The computing platform may receive a request to access the data. The computing platform may compute a first hash of the data indicating a state of the data prior to being accessed, and may record the first hash in a second distributed ledger. After granting data access, the computing platform may receive first information indicating actions performed on the data and second information indicating reasons for accessing the data. The computing platform may compute a second hash of the data indicating a state of the data after being accessed, and may record the second hash and the second information in the second distributed ledger. The computing platform may record, in a third distributed ledger, the first information.


