Distributed Ledger Chain of Custody for Forensic Data Integrity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Enterprise organizations face vulnerabilities in data integrity due to time gaps between automatic forensic data collection and digital signature application, allowing malicious actors to modify data undetected, which can lead to reduced trustworthiness of the data by external entities.

Innovation Solution

A computing platform establishes and maintains distributed ledgers to immediately record forensic data, computes hashes before and after access, and records chain of custody information, ensuring an unbroken chain of custody and preventing data manipulation by using side chains and main blockchains to track data usage and modifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If digital signatures are used to establish chain of custody after automatic data collection, then data authentication is improved, but time gaps allow data manipulation by malicious actors

Engineering Contradiction:
Improvedata authenticationVSAvoidtime gap between collection and certification
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by computing and recording hash values of forensic data immediately upon automatic collection, before any human intervention or digital signature application. This creates an immutable timestamped record in a distributed ledger that prevents later manipulation, effectively closing the time gap vulnerability while maintaining authentication reliability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If distributed ledgers are established immediately upon data receipt, then data integrity is improved, but system complexity increases

Engineering Contradiction:
Improvedata integrityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the chain of custody system into multiple distributed ledgers, each serving a specific function: one ledger for raw forensic data, another for hash values, and a third for chain of custody metadata. This segmentation allows the system to achieve high data integrity through cryptographic linking while managing complexity by distributing functionality across separate, specialized ledger structures rather than requiring a single complex system.

Inventive Principle:
Principle #1Segmentation

3Reliability

If multiple distributed ledgers are used to track data access and modifications, then chain of custody certification is improved, but data processing overhead increases

Engineering Contradiction:
Improvechain of custody certificationVSAvoiddata processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent uses copying by creating hash value replicas of the original forensic data and storing these copies in separate distributed ledgers. Instead of moving or duplicating the entire raw data across multiple ledgers, the system computes hash copies that serve as immutable fingerprints. This approach maintains robust chain of custody certification through multiple ledger copies while minimizing data processing overhead by working with compact hash representations rather than large raw datasets.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250021997A1Distributed Ledgers for Enhanced Chain of Custody Certification
Publication Date: 2025.01.16 BANK OF AMERICA CORP
  • US20250021997A1 patent drawing
  • US20250021997A1 patent drawing
  • US20250021997A1 patent drawing

AI summary

Aspects of the disclosure relate to enhanced chain of custody certification. A computing platform may establish, within a period of time of receiving data, a first distributed ledger that includes the data. The computing platform may receive a request to access the data. The computing platform may compute a first hash of the data indicating a state of the data prior to being accessed, and may record the first hash in a second distributed ledger. After granting data access, the computing platform may receive first information indicating actions performed on the data and second information indicating reasons for accessing the data. The computing platform may compute a second hash of the data indicating a state of the data after being accessed, and may record the second hash and the second information in the second distributed ledger. The computing platform may record, in a third distributed ledger, the first information.