Verifying Data Authenticity and Integrity in Server-Aided Confidential Forensic Investigation

Shuhui Hou (1) , Ryoichi Sasaki (2) , Tetsutaro Uehara (3) , Siuming Yiu (4)

1 USTB - University of Science and Technology Beijing [Beijing]
2 Tokyo Denki University
3 Research Institute of Information Security [Wakayama]
4 HKU - The University of Hong Kong

With the rapid development of cloud computing services, it is common to have a large server shared by many different users. As the shared server is involved in a criminal case, it is hard to clone a copy of data in forensic investigation due to the huge volume of data. Besides, those users irrelevant to the crime are not willing to disclose their private data for investigation. To solve these problems, Hou et al. presented a solution to let the server administrator (without knowing the investigation subject) cooperate with the investigator in performing forensic investigation. By using encrypted keyword(s) to search over encrypted data, they realized that the investigator can collect the necessary evidence while the private data of irrelevant users can be protected from disclosing. However, the authenticity and integrity of the collected evidence are not considered there. The authenticity and integrity are two fundamental requirements for the evidence admitted in court. So in this paper, we aim to prove the authenticity and integrity of the evidence collected by the existing work. Based on commutative encryption, we construct a blind signature and propose a “encryption-then-blind signature with designated verifier” scheme to tackle the problem.

Mots clés: confidential forensic investigation; authenticity and integrity; commutative encryption; signcryption

Domaines: Informatique [cs]; Sciences de l'information et de la communication

Shuhui Hou, Ryoichi Sasaki, Tetsutaro Uehara, Siuming Yiu. Verifying Data Authenticity and Integrity in Server-Aided Confidential Forensic Investigation. 1st International Conference on Information and Communication Technology (ICT-EurAsia), Mar 2013, Yogyakarta, Indonesia. pp.312-317, ⟨10.1007/978-3-642-36818-9_33⟩. ⟨hal-01480187⟩