Mobile Forensic Imaging Prototype with Data Integrity

Although it is a useful tool in criminal investigations, digital evidence is easily altered. This might result in misinterpretation, deletions, or privacy violations. To protect digital evidence, it is important to ensure its integrity, authentication, and non-repudiation. This can be done using hash functions, digital signatures, and traceability functions. However, in Indonesia, the storage of digital evidence integrity data relies on handwriting, which is vulnerable to tampering. A prototype of mobile forensic imaging tools that can help protect the reliability of digital evidence is shown in this study. The prototype uses a more secure SHA-256 hash function, an ED25519 digital signature, and a traceability function. An RFID tag automatically stores and secures the digital evidence’s integrity data. The prototype also offers entity authentication to prevent hash value forgery. The Raspberry Pi single-board computer is the platform for the prototype. These procedures are carried out automatically by the system, which promotes accuracy and consistency.