Smart Contracts for Managing the Chain-of-Custody of Digital Evidence: A Practical Case of Study

The digital revolution is renewing many aspects of our lives, which is also a challenge in judicial processes, such as the Chain-of-Custody (CoC) process of any electronic evidence. A CoC management system must be designed to guarantee them to maintain its integrity in court. This issue is essential...

Descripción completa

Detalles Bibliográficos
Autores: Santamaría, Pablo, Tobarra Abad, María de los Llanos, Pastor Vargas, Rafael, Robles Gómez, Antonio
Tipo de recurso: artículo
Fecha de publicación:2023
País:España
Institución:Universidad Nacional de Educación a Distancia
Repositorio:e-spacio. Repositorio Institucional de la UNED
Idioma:inglés
OAI Identifier:oai:e-spacio.uned.es:20.500.14468/12789
Acceso en línea:https://hdl.handle.net/20.500.14468/12789
Access Level:acceso abierto
Palabra clave:Blockchain
Smart Contracts
Chain-of-Custody (CoC)
Zero-Knowledge Proof (ZKP)
Alastria
Ethereum
Quorum
Descripción
Sumario:The digital revolution is renewing many aspects of our lives, which is also a challenge in judicial processes, such as the Chain-of-Custody (CoC) process of any electronic evidence. A CoC management system must be designed to guarantee them to maintain its integrity in court. This issue is essential for digital evidence’s admissibility and probative value. This work has built and validated a real prototype to manage the CoC process of any digital evidence. Our technological solution follows a process model that separates the evidence registry and any evidence itself for scalability purposes. It includes the development of an open-source smart contract under Quorum, a version of Ethereum oriented to private business environments. The significant findings of our analysis have been: (1) Blockchain networks can become a solution, where integrity, privacy and traceability must be guaranteed between untrustworthy parties; and (2) the necessity of promoting the standardization of CoC smart contracts with a secure, simple process logic. Consequently, these contracts should be deployed in consortium environments, where reliable, independent third parties validate the transactions without having to know their content.