TFChain:Blockchain-based Trusted Forensics Scheme for Mobile Phone Data Whole Process
Shanshan Hu, Shuhui Zhang, Kunlun Fu · 2022 IEEE 6th Information Technology and Mechatronics Engineering Conference (ITOEC) · 2022
Nowadays, the usage of mobile phones to commit crimes is becoming more and more common. Mobile electronic evidence can be used to convict suspects. However, the credibility of electronic evidence is a key issue in the research of mobile phone forensics. Therefore, credible mobile phone forensics is crucial in police investigations. In previous studies, some scholars have used the computer live forensics of memory analysis to obtain the physical memory mapping files of mobile phones. This model can naturally distinguish the various stages of online forensics and meet the requirements of physical evidence technology. The rapid development of blockchain technology has brought research opportunities to the academic community. The decentralized, tamper-resistant, and traceable characteristics of blockchain technology have given new opportunities and connotations to the electronic evidence collection system. In this paper, we combine the advantages of blockchain and the effectiveness of memory analysis to propose a trusted mobile phone forensics program based on blockchain and memory analysis. Blockchain runs through the whole system process to ensure the credibility, integrity and auditability of evidence. Then, we use access control to realize the access authority of police investigators and forensic experts to the evidence. Next, forensic experts analyze the evidence and generate a forensic evaluation report. In the forensic phase, we use credible mobile phone memory acquisition tool to obtain evidence. In the identification phase, we use memory analysis to check the integrity and credibility of the evidence. Moreover, the online forensics based on memory analysis that we use is repeatable and verifiable. In addition, we choose the consortium chain to record the transaction behavior of entities. Finally, we tested our system on Hyperledger Fabric and analyzed the security and privacy of TFChain.