Chain of custody system and method

An unimpeachable chain of custody system and method includes a confirmation authentication system that facilitates receiving and storing a communication signal that is indicative of an evidentiary item captured at a determined location and at a determined time. The confirmation authentication system and method further facilitates generating and transmitting a chain of custody confirmation signal to a transportable input system that the communication signal has been authenticated and stored for subsequent retrieval. The transportable input system includes a positioning device and a communication device that cooperate to facilitates generating and transmitting the communication signal in response to receiving the chain of custody confirmation signal. The transportable input system further facilitates generating an authentication signal that the communication signal was generated by the input system at about the determined location and at about the determined time so that the integrity of the received evidentiary item cannot be impeached.

I. BACKGROUND OF THE INVENTION

A. Field of the Invention

The present invention relates to a system and method of capturing and storing an object for subsequent retrieval. More particularly, the system and method enabling the authentication of an original digital asset so that the integrity and chain of custody of the file information cannot be impeached.

B. Description of Related Art

There have been many systems and methods relating to the authentication of a generated signal and to ensuring the integrity of such a signal during its transmission. For example, reference may be made to the following U.S. Pat. Nos.: 4,042,960; 4,383,743; 4,992,868; 5,499,294; 5,751,809; 5,764,770; 5,799,082; 5,852,502; 5,862,217; 5,862,218; 5,870,471; 5,898,799; 5,987,136; 5,995,638; 6,005,936; 6,078,848; 6,163,361; and 6,167,459.

While such systems and methods have been satisfactory for certain applications, they have not always proven to be entirely reliable. Therefore, there is a need for a new and improved system and method that enables the authentication of an original digital file so the integrity and chain of custody of the file information cannot be impeached.

II. SUMMARY OF THE INVENTION

The objects and features of the present invention are realized by providing an unimpeachable chain of custody system and method that includes a confirmation authentication system to facilitate receiving and storing a communication signal that is indicative of an evidentiary item captured at a determined location, and at a determined time. The confirmation authentication system and chain of custody method further facilitate the generating and transmitting of a chain of custody confirmation signal to a transportable input system that the communication signal has been authenticated and stored for subsequent retrieval. The transportable input system includes a positioning device and a communication means that cooperate to facilitate generating and transmitting the communication signal in response to receiving the chain of custody confirmation signal. The transportable input system further facilitates generating an authentication signal that the communication signal was generated by the input system at about the determined location and at about the determined time so that the integrity of the received evidentiary item cannot be impeached.

IV. DETAILED DESCRIPTION OF THE INVENTION

Referring now to the drawings and more particularly toFIG. 1thereof, there is illustrated a chain of custody system10, which is constructed in accordance to the present invention. The chain of custody system10and a unique and novel chain of custody method100provides law enforcement agencies, investigators and the like with authentication of an original digital file so the integrity and chain of custody of the file information is completely immune from impeachment or is at least substantially immune from impeachment.

Considering now the chain of custody system10in greater detail with reference toFIG. 1, the chain of custody system10generally includes a confirmation authentication system12and a plurality of transportable or mobile input units, such as a mobile unit14and a mobile input unit140. The mobile input units14and140are assigned to a client that desires a chain of custody processing service. In this regard, the chain of custody method100not only provides law enforcement agencies, private investigators, attorneys, journalists, business persons and other members of the general public corroboration that a particular evidentiary object acquired at a remote site is authentic, but also the chain of custody method100provides, in a cost-effective manner, a chain of custody record that is completely immune from impeachment or that is at least substantially immune from impeachment.

The preferred embodiment of the method100of the invention is performed partially in the confirmation authentication system12and partially in a mobile input unit utilized by the client to capture an evidentiary object. In this regard, the confirmation authentication system12facilitates receiving and storing a communication signal generated by a mobile input unit, such as the mobile input units14and140. The communication signal generated by the client assigned mobile input unit is indicative of an evidentiary item that has been captured at a determined location and at a determined time from a remote field location. The confirmation authentication system12further facilitates generating and transmitting a custody confirmation signal that provides an immediate indication to a field investigator that the earlier mentioned communication signal generated by the mobile input unit14was received, authenticated and stored for subsequent retrieval. More particularly, the custody confirmation signal is a verification that the chain of custody for the evidentiary item has been transferred from the remote field location to a secure server that ensures the evidentiary item has not been tampered with or altered since it was received and stored within the confirmation authentication system12. The confirmation authentication system12also generates another custody confirmation signal that verifies the assigned mobile input unit was tracked during a given time frame from a predetermined location to the remote location where the communication signal was generated at the determined location and at the determined time. The custody confirmation signal and the another custody confirmation signal provide the necessary corroboration to assure the captured object is unimpeachable or is at least substantially unimpeachable. In short then, the custody confirmation signals provide verification that the communication signal was received from the assigned mobile input unit14, whose location was independently tracked by the confirmation authentication system12.

As will be explained hereinafter in greater detail, during the intended use of an assigned mobile input, such as the mobile input unit14, the authentication confirmation system12establishes a chain of custody record by: a) tracking the location of the mobile input unit14from a designated client location to a designated remote location; b) recording the date and time the mobile input unit14was utilized; and c) recording the identity of the person or device in custody of the mobile input unit14.

To facilitate the establishing of multiple communication paths between the client, the mobile input units14,140and the authentication confirmation system12, the client includes a conventional computer system50that is coupled to an Internet Service Provider (ISP) as well as a Satellite Service Provider (SSP), where the ISP and the SSP are indicated generally at20and22respectively. The client computer system50includes a satellite interface, indicated generally at52and a modem interface, indicated generally at54.

While in the preferred embodiment of the invention, communication between the confirmation authentication system12and the mobile input unit14is described as a wireless communication unit using a secure Internet connection. It is contemplated however, that those of ordinary skill in the art could practice this method in a wide variety of other communication methods. Therefore, this patent should not be read to be limited to the specific embodiment of the described system and method as other communication methods and confirmation authentication systems could easily be substituted by those of ordinary skill in the art without departing from the essence of this invention. Thus, for example, the mobile input unit140is a satellite communication unit using a secure satellite connection. Similarly, the preferred embodiment, described in the following detailed description, includes a number of components and method steps which may not be absolutely necessary in other embodiments of the invention. Therefore those absolutely necessary in other embodiments of the invention. Therefore those reading and understanding this patent are directed to the claims for a description of the range of the claimed subject matter of this invention.

Considering now the confirmation authentication system12in greater detail with reference toFIG. 1, the confirmation authentication system12generally includes a security service center processor30, a storage arrangement32, a printer34, and a server36. The security service center processor30is shown in communication with one or more of the mobile or transportable input units, such as the transportable input units14and140. The transportable input units14and the transportable input140provide two different levels of security relative to information received by the security service center processor30as will be explained hereinafter in greater detail. For the moment it will suffice to indicate that the transportable input system14utilizes a secure Internet communication path, while the transportable input system140utilizes a satellite communication path.

In order to establish the Internet communication path between the confirmation authentication system12and the mobile input unit14, the confirmation authentication system12further includes a modem interface38that is coupled between the server36, and a conventional telephone network backbone indicated generally at18. In a similar manner, in order to establish the satellite communication path between the confirmation authentication system12and the mobile input unit140, the confirmation authentication system12also includes a satellite interface indicated generally at40. The satellite interface40is coupled between the SSP22(via one or more geosynchronous satellites, such as a geosynchronous satellite142) and the server36. As best seen inFIG. 1, the SSP22is also coupled to the ISP20via the Internet backbone indicated generally at16.

From the foregoing, those skilled in the art should be able to understand that the mobile input unit14is in communication with the confirmation authentication system12via either an Internet communication path, such as through a remote cellular base unit24, the Internet backbone16, the telephone network backbone18, the ISP20, and the modem interface38, or a satellite communication path such as through the satellite142, and the satellite interface40. Those skilled in the art will further appreciate that a combination Internet/satellite combination path is also available between the mobile input units14and140and either the confirmation authentication system12or the client computer system50via the satellite142, since the satellite142is able to receive digital information from the satellite service provider22via an uplink indicated generally at148, which digital information is received by the satellite receiver144or the satellite receiver52from the downlinks indicated generally at143and146respectively. The use of such a satellite communication channel is a particularly useful feature when communicating from remote locations where wireless communication via the Internet backbone18and telephone network22is otherwise unavailable. Thus, for example, combination uplinks and downlinks141and145from the mobile input units14and140respectively, enable the confirmation authentication system12to maintain satellite communication with the mobile units14and140regardless of location.

Considering now the operation of the chain of custody system10in greater detail with reference toFIGS. 1 and 2, the chain of custody method100begins at a start command202at the start of a sequence of work. In this regard, when power is first applied to the chain of custody system10, the chain of custody method100generates the start command202and then advances to a call initialize command204that causes an initialize subroutine300(FIG. 3) to be executed. After the initialize subroutine300has been executed, the program proceeds to a query command206and waits for a service request to be received from a subscriber client via the client computer system50. Such a client subscriber service request can be received either from a satellite communication through the satellite interface40or from an Internet request via the modem interface38depending upon the communication channel selected by the subscriber client. It should also be noted that a non-client service request could also be generated by the system itself in order to permit acquired information to be backed up in memory.

The chain of custody request generated by the client computer system50provides the security service center processor30with mobile input unit user information (such as the name, address, employee identification number, social security number, date of birth, etc. of the person utilizing an assigned mobile input unit, such as the mobile input unit14) along with the longitude, latitude coordinate information that the user will be transporting the mobile input unit14. Such coordinate information is provided to the client computer system50using acquired GPS signals from means not shown, such as a GPS enabled police unit that has arrived at the scene of a crime, a cell phone locating system, or any other locating system that can acquire or determine longitude, latitude coordinate information.

When the security service center processor30receives the chain of custody request, the method100advances from the query command206to a call tracking command208that causes a setup tracking subroutine400to be executed. As will be explained hereinafter in greater detail, the setup tracking subroutine records the time the request was received, the mobile input unit user information, the departure coordination information for the location of the mobile input unit14, the destination coordinate information and a data sequence number to the event. This information is recorded once and thereafter only the coordinate information for the mobile unit is recorded as the user transports the mobile input unit to the desired destination.

Once the mobile input unit14has arrived at the desired destination coordinates, the method100exits the setup tracking subroutine and advances to a call command210that causes a capture subroutine500(FIG. 5) to be executed. The capture subroutine500will be described hereinafter in greater detail. At this point it should be noted that when the user arrives at the desired destination coordinates, the user would utilize the input unit14to capture, annotate, encrypt and transmit object information to the chain of custody system10as well as the client=s computer system50. In this manner, two independent records are created, where the original records derived at the client=s computer system50can be corroborated by the independent information tracked and recorded by the chain of custody system10.

Once the input unit14has returned to the departure coordinates, the method100advances from the capture subroutine500to a call command212that initiates a organize subroutine600that will be described hereinafter in greater detail. It will suffice to state that at the organize subroutine400, causes the object files obtained from the mobile input unit14to be organized for subsequent retrieval whenever a chain of custody record is required or whenever an authentication task is needed. The organize subroutine600will be described hereinafter in greater detail.

When the organize subroutine600has been executed, the program advances to a power down query to determine whether the system10has received a request to power down. If such a request has been received, the system10is powered down by advancing to an end command218. Otherwise, the program advances to a command step216that causes a new data sequence number to be set for the client subscriber. Thereafter the method returns to the query command206where the method proceeds as described previously.

From the foregoing, it should be understood by those skilled in the art that an original evidence record is maintained by the client computer system50that can be presented in a court of law under existing rules of evidence. The independent records maintained by the chain of custody system10can also corroborate the original evidence records. In this regard, a user of the chain of custody service may view, download, print local or order certified or uncertified reproductions from a web site established through the chain of custody service centers.

1. The Initialize Subroutine

The initialize subroutine300begins whenever the initialize call command204is executed (FIG. 2). As will be explained hereinafter in greater detail, the initialize subroutine300causes the following to occur: 1) the establishment of communication links between the security service center processor30, the client computer system50, and the mobile input units14and140respectively; 2) using the geosynchronous satellite system (GPS), causing the security service center processor30to acquire time and location information for the client computer system50, and the mobile input units14and140; and 3) setting up a data sequence number for the client computer system and the mobile input units14and140.

Considering now the initialize subroutine300in still greater detail with reference toFIG. 3, the initialize subroutine begins at a start command302and advances to a command step304. The command step304causes the confirmation authentication system30to retrieve a current list of user or subscriber identification numbers. The program then advances to a command step306that causes communication links to be established with each of the current subscribers by sending the client=s computer system50an on line signal. The client=s computer system50responds to the on line signal by sending the confirmation authentication system30the current GPS coordinate location for each mobile unit that has been assigned to the user subscriber.

After sending the on line signal to the client=s computer system50, the program advances to a query command308and waits for the client=s computer system50to respond by sending the current GPS coordinate locations for each mobile unit that has been assigned to the user subscriber. Such communications links are established via either the modem interface38or the satellite interface40.

When the client computer system50responds, the initialize subroutine300advances to another query command310to verify that all client computer system50has provided all of the current coordinate information for each assigned mobile input unit. If all of the current coordinate information has not been provided the program returns to command30and proceeds as described previously. On the other hand, if all current coordinate information has been provided for all the assigned mobile input units, such as the mobile input units14and140, the program proceeds to a call command311that causes a retrieve subroutine700(FIG.7) to be executed. The retrieve subroutine700will be described hereinafter in greater detail.

After the call command311is executed, the subroutine300proceeds to a command step312to set a data sequence number of each mobile input unit. In this manner, the mobile input units are now in a ready state and can be dispatched by a client subscriber whenever a need arises.

After executing the set data sequence command312, the program advances to a return command step314that returns the program to the main chain of custody program100by advancing from the call command204to the query command206. The chain of custody system10is now initialized and the confirmation authentication system30now waits for a service request from the client=s computer system50. In this regard, whenever the client determines that a chain of custody record needs to be established, the client, via the client=s computer system50, sends a chain of custody request to the security service center processor30via the established communication paths.

2. The Setup Tracking Subroutine

Whenever, a service request is received from the client=s computer system50, the chain of custody method100advances to the call setup tracking subroutine400by executing a start command402(FIG. 4).

From the start command402, the subroutine advances to a command step404, which causes the list of subscribers to be retrieved from the storage arrangement32. The subroutine then proceeds to a command step406that causes a communication link to be established with the requesting subscriber computer system, such as the client computer system50and the mobile input units assigned to the subscriber; for example, mobile units14and140.

The subroutine400then advances to a command step408that causes the client=s computer system to send the GPS destination coordinates for the assigned mobile input unit14. As noted earlier, the destination coordinates are supplied either by a satellite or Internet communication from a source not shown, such as a police unit that has arrived at the scene of a crime.

The subroutine400then proceeds to a command step410that causes the location of the mobile input unit14to be tracked while traveling to its destination coordinates. In this regard, a real time record of the movement of the mobile unit14is stored by the confirmation authentication system30. This chain of custody record includes a data sequence number, user information, time information and GPS coordinate information that is recorded every t seconds, where t is between about 1 second and about 600 seconds.

The subroutine400advances from the command step410to a query command412that seeks to determine whether the mobile unit14has arrived at the destination coordinates. If the mobile unit14has not arrived at the destination coordinates within t seconds, the subroutine returns to the command step410and proceeds as described previously. However, should the mobile unit14arrive at the destination coordinates within t seconds, the subroutine advances to a call command412that calls an authenticate subroutine420that will be described hereinafter in greater detail. For the moment it will suffice to indicate that the authenticate subroutine420tracks the location of the mobile input unit14during a capture period. That is, when the user is utilizing the mobile input unit14to capture input information and then during a return period when the user is returning the input unit14to it departure location. In this manner, a complete chain of custody record is established starting from the departure location to the destination location, during the capture period, and then from the destination location to the departure location.

After the call command414is executed, the subroutine400advances to a return command416that returns to the chain of custody program100by advancing to the call capture command210as best seen inFIG. 2.

From the foregoing it should be understood by those skilled in the art that the chain of custody records for the mobile input unit during the capture period could be compared with the input information received from the mobile input unit14whenever it acquires input information. This is an important feature as this information can be utilized not only to help authenticate the input information received from the mobile input unit14but also to help establish the chain of a custody record.

3. The Authentication Subroutine

Considering now the authentication subroutine420in greater detail with reference toFIG.4, the authenticate subroutine420begins at a start command460when the call command414is executed. From the start command460, the subroutine proceeds to a query command to determine whether the user of the mobile input device has sent a start command to the confirmation authentication system30indicating that the user is about to begin capturing object information at the destination location. If the start command has not been received, the authenticate subroutine460goes to command410to continue to track the location of the mobile input unit14and to verify that the mobile unit is at about the destination coordinates supplied by the client computer system50. If a start command is received from the mobile input unit14, the subroutine420proceeds to a step command464and begins to track and record the location of the mobile input unit14at the destination location while the user is using the mobile input unit14to capture information. In this regard the subroutine advances to a query command466to determine whether a done command is received from the mobile input unit14.

If a done command is not received within t seconds, the subroutine returns to command464and proceeds as described previously. If a done command is received from the mobile input unit14, indicating that the user has completed the task of capturing input information at the destination location, the subroutine proceeds to a step command468.

The step command468tracks and records the location of the mobile input unit14from the destination location, back to the departure location. In this regard, the command468records the location of the mobile input unit in the storage arrangement32of the confirmation and authentication system30. The subroutine420then advances to a query command470to determine whether the user has returned to the departure location of the client's computer system50. If the mobile unit14has been returned to the departure location within t seconds after executing the query command470, the subroutine400advances to the query command214and proceeds as described previously.

If the mobile unit14has not been returned to the departure location within t seconds after executing the query command470, the subroutine400returns to the command step468and proceeds as described previously.

4. The Capture Subroutine

Considering now the capture subroutine500in greater detail with reference toFIG. 5, the capture subroutine500begins at a start command502in response to the call capture command210(FIG. 2). From the start command502, the subroutine500proceeds to a query command504to determine whether the user of the input unit14has sent a start command to the confirmation authentication system30. If a start command has not been received, the subroutine500proceeds to a time out query step505. In this regard, if a start command is not received within T minutes from initiating the capture subroutine500, the program advances to a query command507to determine whether the user has returned the mobile unit14to the departure location.

If the user has returned the mobile unit14to its departure location, the subroutine500advances to a send warning command522that will be described hereinafter in greater detail. On the other hand, if the user has not returned the mobile input unit14to the departure location, the subroutine500goes to a query command509to determine whether the mobile unit14is still at about the destination location. If the mobile unit14is still within τ miles of the destination location, where τ miles are between about 0.1 miles and about one mile, the subroutine500returns to the query command504and proceeds as described previously. If the mobile unit is not within the vicinity of the destination location, the subroutine500proceeds to the warning command step522.

Considering again the query command504, if a start command is received, the subroutine500proceeds to a query command506to determine whether the confirmation authentication system has received a digital information packet from the input unit14. If a digital information packet has been received, the subroutine goes to a store command508that causes the confirmation authentication system30to store the packet in the storage arrangement32. If the digital information packet has not been received the subroutine500loops at the query command506until the packet is received.

Once the digital information packet has been stored, the system advances to a command step510to authenticate that an uncorrupted file has been received. In this regard, the confirmation authentication system compares the GPS time and coordinate location information with the GPS time and coordinate information obtained from the authenticate subroutine420. If there is no authentication, the subroutine advances from a query step512to the command step522to cause a warning message to be sent to the user of the mobile input device14and to the client's computer system50. If the digital packet or digital file is authenticated, the subroutine500goes to a query command514to determine whether the user has sent a done command indicating that the user has completed gathering the necessary digital information from the destination location. If the done signal has not been received, the subroutine500returns to query command step506and proceeds as described previously.

If the done command is received, the subroutine500advances to a return command step516, that causes the chain of custody program100to advance to the call command212that will be described hereinafter in greater detail.

Considering now the send warning command522, if the user of the mobile input unit14, does not stay within the vicinity of the destination location, the capture subroutine500will cause a warning to be sent to the client computer system50and to the user. In this regard, after the warning is sent the subroutine advances to the query step206where the program proceeds as previously described.

5. The Organize Subroutine

The organize subroutine600begins at a start command602in response to the call command212and advances to a command step604. The command step604organizes the file data sequences segregating them by subscriber and sequence number. The segregated and sequenced files are then stored in the storage arrangement for subsequent retrieval whenever a customer (user or subscriber) logs into the chain of custody system10. The organize subroutine600advances from the organize command604to the query step214, where the program proceeds as previously described.

6. The Retrieve Subroutine

The retrieve subroutine700is executed whenever a client subscriber desires to retrieve digital information or chain of custody information stored in the chain of custody system10. In this regard, the retrieve subroutine700is started whenever the chain of custody system10is initialized by advancing from a start command702to a query step704.

The query step704determines whether a subscriber/customer logs onto a secure web site related to the chain of custody system10. If the chain of custody system10has not received a log on request, the program advances to a query command707to determine whether a power down signal has been received by the system10. If a power down signal has been received, the program proceeds to an end command709that causes the system10to power down. Alternatively, if no power down signal is received, the program returns to the query command704and proceeds as described previously.

If a log in request is received at query step704, the subroutine700advances to a query command706to determine whether the customer log in request was received from a subscriber. In this regard, each subscriber is given a unique log in identification number, which also functions as a decryption key as will be explained hereinafter in greater detail.

If the log in request was not received from a subscriber, the subroutine700proceeds to a command step720in order to send a non-subscriber message to the person who generated the customer log in request. The subroutine700then goes to the query step704where the subroutine proceeds as described previously.

If the log in request was received from a subscriber, the subroutine700proceeds to a query step708to determine whether the subscriber is requesting to view, download, print or order a certified or uncertified reproduction generated by a specific input unit. In this regard, if an image request is received, the subroutine700advances to a call command711that causes a reproduction subroutine800(FIG. 8) to be executed. The reproduction subroutine800will be described hereinafter in greater detail.

After the image subroutine800has been executed, the subroutine700continues to a log out query command712to determine whether the subscriber has completed the transaction with the chain of custody system10. In this regard, if the subscriber has completed the transaction with the chain of custody system10, the subroutine700goes to the query step704where the subroutine700continues as described previously.

If the subscriber has not completed the transaction with the chain of custody system10, the subroutine700proceeds to query step707to verify that the system10is still available for transaction work. The subroutine700proceeds from query step707as described previously.

Considering again the request step708in greater detail with reference toFIG. 7, if the subscriber has not made an image request, the subroutine700goes to a query command710to determine whether the subscriber has made a chain of custody request. If the subscriber has made a chain of custody request, the subroutine700advances to a call reproduction command step715. The call command715causes the reproduction subroutine800to be executed. After the reproduction subroutine800has been executed, the subroutine700proceeds to the log out query step712where the subroutine proceeds as described previously.

If the subscriber has not made a chain of custody request, the subroutine700proceeds to a query command712to determine whether the subscriber has made a log out request. If the subscriber has made a log out request, the subroutine700advances to the command step704where the subroutine proceeds as described previously. On the other hand, if the subscriber has not made a log out request, the subroutine700goes to the query step707and proceeds as described previously.

7. The Reproduction Subroutine

Considering now the reproduction subroutine800in greater detail with reference toFIG. 8, the reproduction subroutine800begins at a start command802and proceeds to a command step803. The command step803causes the confirmation authentication system30to request a sequence number from the customer/subscriber along with the necessary details to fulfill the request of the subscriber.

Once the request has been made to the customer/subscriber, the subroutine800goes to a query command804to determine the customer/subscriber has supplied the requested information. If not, the subroutine800returns to command step803to make another request.

If the customer/subscriber has provided the requested information, the subroutine800advances to a command step806to cause a subscriber identified file to be retrieved from the storage arrangement32. The subroutine800then goes to a query command808to determine whether the customer/subscriber must provide an encryption key in order to access the requested file.

If an encryption key is required, the subroutine800proceeds to a command step810that causes a request to be generated and transmitted to the customer/subscriber. Next, the subroutine800goes to a query command812to determine whether the subscriber has provided the necessary encryption key information.

If the subscriber has not provided the necessary key information, the subroutine800goes back to the command step810and proceeds as described previously. Alternatively, if the subscriber has provided the key information, the subroutine800advances to a query command809.

The query command809causes the confirmation authentication system30to determine from the subscriber supplied information, whether the subscriber has requested to merely view the file information. In this regard, if the subscriber has requested to view the file information, the subroutine800advances to a display command step816. The display command step816causes the retrieved file to be displayed (on means not shown) for viewing by the subscriber. After the system has displayed the file for viewing by the subscriber, the subroutine800proceeds to the query command712(FIG.7) and proceeds as described previously.

If the subscriber has not requested to view the identified file, the subroutine800proceeds from query command809to a query command811to determine whether the subscriber has requested a hardcopy printout of the identified file. The subroutine800advances to a print command818if the subscriber desires a hardcopy of the file. In this regard, the hardcopy printout is generated by a local printer34and then supplied to the subscriber. Alternately, if the subscriber has a remote printer attached to the system, the hardcopy can be printed on the remote printer.

If a determination is made at query command811that the subscriber does not desire a hardcopy printout of the retrieved file, the subroutine advances to a query command820to determine whether the subroutine advances to a query command822if the user has not requested a certified copy of the retrieved file.

If a certified copy of the retrieved file has been requested, the subroutine800goes to a command step817that causes the requested file to be retrieved, certified and mailed to the subscriber. Thereafter the subroutine800goes to the query step712and proceeds as described previously.

At query step822, a download determination is made, ie., did the subscriber request the file be downloaded? If so, the program advances to a command step824that causes the requested file to be downloaded to the subscriber. After the file has been downloaded to the subscriber, the subroutine advances to the query command712and proceeds as described previously.

If the subscriber did not request a download, the subroutine goes from query command822to the query step712and proceeds as described previously.

8. The Mobile Input Units

Considering now the mobile input units14and140in greater detail with reference toFIGS. 1 and 9, mobile input units14and140are substantially similar and accordingly, only mobile unit14will be described hereinafter in greater detail.

As best seen inFIG. 9, the mobile unit14is a memory-less device that generally includes a plurality of input paths, such as input paths902,904, and906. The input paths are indicative of different types of information that may be captured by the mobile input unit via its capture system920. For example, input path902is a digital camera input to capture system920. For example, input path902is a digital camera input to capture still digital images; input path904is a video camera input to capture video information; and input path906is a audio input to capture audio information. While, example inputs have been provided it is contemplated that other types and kinds of input paths can be provided. For example any device that captures digital information is contemplated. This would include infrared capture devices, chemical analyzing devices, etc.

In order to secure the captured information prior to compression and transmission to the chain of custody system10, the mobile input unit14also includes an encryption system910. The encryption system910is a conventional encryption system and will not be described hereinafter in greater detail. It will suffice to mention that different types of encryption methods are contemplated within the true scope and sprit of the present invention. Thus, for example, time varying encryption, watermark encryption, fingerprint encryption and retina pattern encryption are each considered to be within the scope of the present invention.

To enable wireless transmissions between the chain of custody system10and the mobile input unit14, the mobile input unit14further includes a wireless input/output interface930that includes a satellite interface arrangement934and a modem interface arrangement936. Since such interface arrangements are conventional, they will not be described hereinafter in greater detail. It will suffice to mention that the wireless input/output interface930permits the mobile input unit14to communicate with the chain of custody system10either using a cellular protocol when a cellular base unit, such as a cellular base unit22(FIG.1) is disposed in a reception area that enables cellular communications with the mobile input unit14, or alternatively, using a satellite protocol when the mobile input unit is unable to make a cellular connection as illustrated with mobile unit140.

Finally, as best seen inFIG. 9, the mobile input unit14also includes an encryption by-pass controller940and a GPS controller/processor850. The encryption by-pass controller940operates in cooperation with the encryption system910and the capture system920to encrypt, compress, and transmit captured information on the fly. In this regard, all information captured by the mobile input unit14is encrypted and immediately transmitted to the chain of custody system10without storing the captured information in the mobile input unit14. The GPS controller/processor950that is coupled to a satellite interface952enables the transmitted information to be time stamped and to be supplemented with geographic coordinate information to indicate the location of the mobile input device14when a particular object is captured. As GPS controller/processors and encryption by pass controller are conventional, neither the encryption by-pass controller940nor the GPS controller/processor950will be described hereinafter in greater detail. It should suffice to mention, that when power is applied to the mobile input unit14, the mobile input unit14is initialized by acquiring GPS & time signals, establishing communication links with the chain of custody system10and the client computer system50, and otherwise establishing a default mode of operation where the encryption by-pass controller operates in a normal mode as opposed to an encryption mode of operation.

9. The Communication Subroutine

Considering now the operation of the chain of custody system10in still greater detail with reference toFIG. 10, whenever power is applied to an input unit, such as the mobile input unit14, the encryption by-pass controller940and the GPS controller/processor950begin cooperating with the encryption system910and the capture system920to commence communications with chain confirmation authentication system30and the client computer system50as will be explained hereinafter in greater detail. In this regard, a communications subroutine1000built into the firmware of the mobile input unit14, is activated.

Considering now the communication subroutine1000in greater detail with reference toFIG. 10, when power is applied to the mobile input unit14, the communication subroutine1000begins at a start command1002and proceeds to an acquisition command1002. The acquisition command1002causes the encryption by-pass controller940to acquire the assigned data sequence number from the confirmation authentication system30. The subroutine1000then goes to another acquisition command step1006, which causes the GPS controller/processor950to acquire the destination GPS coordinates from the client computer system50.

After the destination GPS coordinates are acquired, the subroutine1000proceeds to another acquisition command step1008to cause the GPS controller/processor to acquire the current GPS time coordinate information for the input unit14, which is transmitted to the confirmation authentication system30and the client computer system50. The subroutine1000then advances to a query command1010to determine whether the mobile input unit14has arrived at its predetermined destination GPS coordinate location. If the mobile input unit14has not arrived at its predetermined GPS coordinate location, the subroutine returns to command1008and proceeds as described previously. Alternatively, if the mobile input unit14has arrived at its destination location, the subroutine1000proceeds to a query command1012to wait for the user of the input system to provide an indication that he or she is ready to commence utilizing the input unit14for capturing information at the destination location.

It should be understood by those skilled in the art, that the confirmation authentication system30and the client computer system50will know that the mobile input unit has arrived at the destination GPS coordinate not only by the transmission of the GPS coordinate information, but also by the interruption in the transmission of GPS and time information from the mobile input unit14. More particularly, there is an interruption in the GPS coordinate and time information when the subroutine1000advances to the query command1012. The transmission of GPS coordinates and time information is resumed when the user provides an indication that he or she is ready to begin capturing information fat the destination location.

When the user is ready to begin capturing information at the destination location, the user actuates a ready switch942that allows the subroutine1000to advance from the query step1012to a command step1014. The command step1014causes the GPS controller/processor950to once again acquire and transmit the current GPS coordinate and time information associated with the mobile input device. The subroutine1000then advances to a query command1016and waits for the confirmation authentication system50to send a chain of custody command signal to the mobile input unit14. In this regard, the subroutine1000returns to step1014to provide updated coordinate information to the confirmation authentication system30and the client computer system50. It should be understood by those skilled in the art that the confirmation authentication system50knows when to send the chain of custody command signal since the mobile input unit14will only begin to retransmit its current GPS coordinate information when the user of the input unit14is ready to begin a capture sequence.

When the confirmation authentication system30sends the chain of custody signal, the subroutine1000advances from the query step1016to a query step1018to determine whether the user has initiated an input action. The subroutine1000waits at the query step1018until such time as the user starts an input action.

Once the user of the mobile input unit14starts an input action, the subroutine proceeds to a query step to determine whether the encryption by-pass controller940is in an encryption mode of operation or a normal mode of operation. In this regard, if the controller940is in an encryption mode of operation, the subroutine1000goes to a command step1024. Otherwise, the subroutine1000proceeds to a command step1022.

At command step1022, the subroutine1000causes the GPS controller940to acquire GPS and time information while the capture system920acquires input information via one or more of the input paths, such as the input paths902,904and906. The acquired input and GPS information or authentication information is immediately transmitted via a transmit command1026to the confirmation authentication system30and the client computer system50. In short, the same information is transmitted to both systems to create duplicate records of the same information. Since there is no storage of the gathered input information at the mobile input unit14, there is no opportunity for the user of the mobile input unit14to alter the input information.

Command step1024functions in the same manner as command step1022except the encryption system910is engaged to encrypt the input and GPS information prior to the information being transmitted at step1026.

After the mobile unit information is transmitted, the subroutine1000advances to a query command1028to determine whether the user has completed the task of using the mobile input unit14for gathering input information at the destination location. In this regard, if the user is not completed, the subroutine returns to step1028to wait for the user to provide an indication that he or she is again ready to capture additional input information. Again it should be understood by those skilled in the art that the confirmation authentication system30will know that the user intends to continue capturing information since there will be another interruption in the transmission of GPS information. The subroutine1000proceeds from the query step1012as described previously.

If the user has completed capturing all of the necessary information at the destination location, the subroutine advances from the query step1028to command step1030. Command step1030causes the mobile input unit14to acquire the departure GPS coordinate location from the client computer system50. Once the departure GPS coordinate information has been acquired the subroutine1000advances to a command step1031and begins transmitting its current GPS coordinate and time. The subroutine proceeds to a query step1034to determine whether the current GPS coordinate information corresponds to the departure coordinate information. If not, the subroutine returns to step1030and proceeds as described previously. If the mobile unit has arrived at its departure GPS coordinate location, the mobile unit14transmits an end of sequence signal to the confirmation authentication system30and the client computer system50so that both systems know that the current sequence of data received from the mobile input unit14has been completed. After the end of sequence signal has been transmitted the subroutine1000goes to a power down command step1038that powers down the mobile input unit14, which causes the subroutine to advance to an end command1040.

From the foregoing it should be understood by those skilled in the art that the chain of custody system10is suitable for use in a business environment where the system10provides secure creation, chain of custody, storage and reproduction of any digital information media including digital photographic evidence. It is contemplated in a business method, that a service provider would provide a mobile input unit, such as a mobile input unit14to a subscriber customer. The mobile input unit14has the following features: 1) time and location stamping capability via a NIST atomic clock (not shown) and the GPS controller/processor940capability for unit tracking purposes; 2) image encryption capability via the encryption system910to prevent editing/tampering with the capture information; and 3) wireless transmission capability via the wireless interface arrangement930to send digital and analog information to the confirmation authentication system30for storage on a secure server. The present invention contemplates providing secure redundant servers for the retention of the received analog and digital information.

Subscriber/customers have the capability of logging on to the chain of custody system10and its secure server and then using a customer or subscriber identification number or password to view and download files. The service enabled through the chain of custody system10is absolutely secure, redundant and fraud proof.

It is contemplated that mobile input units can be leased, rented or sold along with a remote desktop printer to allow a subscriber/customer to print images for analysis and case preparation. The service contemplated enables a client subscriber to order a certified record that can be printed on a local printer34and mounted for court presentations. In short then, what has been disclosed is a business model for archiving and reproducing secure digital information using the chain of custody system10. The value proposition applies to anyone who needs or wants digital information files as evidentiary items that are certifiable as being untampered with and secured in a verifiable chain of custody, record file. The mobile input unit14with Internet, cellular and GPS satellite capabilities allows the mobile input unit14to be utilized anywhere in the world.

The terms and expressions herein are used as terms of description and not of limitation, and there is no intension in the use of such terms and expressions of excluding equivalents of the features and steps shown and described, or portions thereof, it being recognized that various modifications are possible within the scope of the invention claimed. Thus, modifications and variations may be made to the disclosed embodiments without departing from the subject and spirit of the invention as defined in the following claims.