Remote ESI Collection via Self-Service Imaging Kits

Solution Overview

Problem

The high cost and time-consuming process of collecting and preserving electronically stored information from remote locations, particularly due to the need for computer forensic experts to travel and image persistent memory storage devices, which increases the expense and complexity of compliance with Federal Rules of Civil Procedure regarding electronically stored information.

Innovation Solution

A system and method utilizing an external persistent memory storage device connected via USB or Ethernet, loaded with a software application tool that creates an exact image of the target device's data, including deleted files, without altering user-created data or metadata, and provides a chain of custody documentation for legal admissibility, allowing remote collection and authentication without expert intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If computer forensic experts travel to remote locations to collect and image persistent memory storage devices, then the authenticity and admissibility of electronically stored information is ensured, but the cost and time required for collection and preservation increases significantly

Engineering Contradiction:

Improveauthenticity and admissibility of electronically stored informationVSAvoidtime required for collection and preservation

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent enables remote custodians to perform self-service by collecting and imaging their own electronically stored information using standardized kits and procedures, eliminating the need for forensic experts to travel to remote locations while maintaining compliance with Federal Rules of Civil Procedure

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent introduces an intermediary standardized collection process that mediates between the need for expert-level authentication and the practical constraints of remote collection, using predefined procedures and documentation to bridge the gap

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If computer forensic experts travel to remote locations to collect and image persistent memory storage devices, then the authenticity and admissibility of electronically stored information is ensured, but the expense increases significantly

Engineering Contradiction:

Improveauthenticity and admissibility of electronically stored informationVSAvoidexpense for travel and expert involvement

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The patent enables remote custodians to perform self-service by collecting and imaging their own electronically stored information using standardized kits and procedures, eliminating the need for forensic experts to travel to remote locations while maintaining compliance with Federal Rules of Civil Procedure

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent employs disposable or single-use imaging media and standardized collection kits that can be easily distributed and discarded, replacing the need for expensive expert travel and repeated use of costly forensic equipment at remote locations

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

3Device complexity

If the process for collecting and preserving electronically stored information is simplified to reduce cost and time, then the complexity of compliance is reduced, but the reliability and admissibility of the information may be compromised

Engineering Contradiction:

Improvecomplexity of compliance processVSAvoidadmissibility of electronically stored information

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent changes the parameters of the collection process by standardizing procedures, documentation requirements, and imaging protocols, transforming a complex expert-driven process into a simplified yet reliable standardized process that maintains legal admissibility

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent segments the complex compliance process into discrete, manageable steps including kit preparation, device imaging, chain of custody documentation, and data verification, making the process easier to follow while ensuring all necessary elements for admissibility are captured

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS9098730B2System and method for preserving electronically stored information

Publication Date: 2015.08.04 BDO USA LLP

AI summary

A system and method for collection of electronically stored information (ESI) from Windows based desktops and laptops is disclosed that are under the control of remote custodians. The system and method include an external persistent memory storage device and a software application tool that is loaded onto the persistent memory storage device. The external persistent memory storage device is connected to the computer system hosting the persistent memory storage device to be examined, for example, by way of a USB or Ethernet port. Once connected to the computer system hosting the persistent memory storage device to be examined, a Quick Start program, which, when opened, allows the required processing to be methodically performed. Documentation is provided for completing information regarding the chain of custody of the external persistent memory storage device. The documentation may be imprinted on a security receptacle for receiving the external persistent memory storage device. The security receptacle is configured to protect the persistent memory storage device from electrostatic discharge and to indicate if the bag or container was tampered with after it was sealed.