Forensic Imaging Integrity Guarantor using Raspberry Pi and RFID Tag

Abstract

Digital Evidence used in criminal investigation could help reveal the unlawful act committed by the perpetrators. Digital evidence is more revealing, but it is easier to tamper. Tampering the digital evidence can lead to misinterpretation, deletion of evidence, or evidence privacy breach. Digital evidence protection, including maintaining digital evidence integrity while doing forensic imaging, is needed to avoid these things. Common digital forensic tools use hash function to maintain digital evidence integrity, such as MD-5 and SHA-1. These common hashing algorithms has been found to have weaknesses. This research presents a prototype of digital evidence integrity guarantor which provide forensic imaging process used in digital forensic and hash value as integrity data for the evidence using a more secure SHA-256 hash function built on a single board computer Raspberry Pi. Hash value will be stored and secured automatically in a RFID tag. The prototype also provides entity authentication to avoid hash value forging. All of these processes are carried out automatically by the system so as to reduce human interaction in it, which also reduces the possibility of human error.