Maintaining Hard Disk Integrity With Digital Legal Professional Privilege (LPP) Data

The concept of legal professional privilege (LPP) in the Common Law is to enable a client to make full disclosure to his legal advisor for seeking advice without worrying that anything so disclosed will be used against him. Thus, some of the communications and documents between a legal advisor and his client can be excluded as evidence for prosecution. Protection of LPP information in the physical world is well addressed and proper procedures for handling LPP documents have been established. However, there does not exist a forensically sound procedure for protecting digital LPP information. In this correspondence, motivated by a real case of a commercial crime investigation, we introduce the LPP data integrity problem. While finding an ideal solution to solve the problem is difficult, we propose a practical solution that was adopted to solve the real case investigation. We also analyze the performance of our solution based on simulated data.

[1]  Philip Turner,et al.  Selective and intelligent imaging using digital evidence bags , 2006, Digit. Investig..

[2]  Zoe L. Jiang,et al.  Improving Disk Sector Integrity Using 3-dimension Hashing Scheme , 2007, Future Generation Communication and Networking (FGCN 2007).

[3]  Peter Butt,et al.  Butterworths concise Australian legal dictionary , 1998 .

[4]  Zoe L. Jiang,et al.  Improving Disk Sector Integrity Using K-Dimension Hashing , 2008, IFIP Int. Conf. Digital Forensics.

[5]  Ricci S. C. Ieong,et al.  FORZA - Digital forensics investigation framework that incorporate legal issues , 2006, Digit. Investig..

[6]  Zoe L. Jiang,et al.  Protecting Digital Legal Professional Privilege (LPP) Data , 2008, 2008 Third International Workshop on Systematic Approaches to Digital Forensic Engineering.

[7]  Philip Turner,et al.  Unification of Digital Evidence from Disparate Sources (Digital Evidence Bags) , 2005, DFRWS.