|
Merry Christmas All -
Jesus - the phrase you are
looking for is the concept of "Data Spoliation" and its something that offends
System's Admins everywhere because it means we want proof from their systems
which is stronger than their word.
That said - if LTANS wants to be used
in the world it needs to meet Legal Control Requirements on Digital Content and
if it doesn't it doesn't matter what we do technology wise if that is not done,
since the records controlled in the LTANS system will not be admissible in a
court of law without extreme cost and extra hearings to authenticate that data
properly...
The problem here I think is that this
WG doesn't want to hear that. It also doesn't seem to want to embrace that the
Court's are a lot smarter than they used to be. One of my partner's is actually fighting a data
spoliation case in the Federal Court's in NY so I know this stuff is a key
issue.
As to your commentary - Those five
hours of data are spoiled and well - that makes this a real issue I
think.
Todd
----- Original Message -----
Sent: Wednesday, December 26, 2007 4:31
PM
Subject: Re: ERS - using hash tree?
Hello Tobias, I´m Jesus.
I have some questions and I hope you can
help me.
First, about what happen with the gap of time that pass while
you send a data object and finally at the evening the ERS-system build
the
hastree for all documents that were archived during that day?. For example, if
you send a data object at 3:00 pm and the ERS-system build the hashtree at
8:00 pm... you have 5 hours during which that data object could lose its
integrity. What can we do in this situation?
Could be the solution to
timestamp every data object separately and inmediately after they are sent by
the client and when the ERS-system have to build the hashtree, the hash-tree
will built with all these data objects and its timestamps?
And now
about the ARCHIVE operation. In the LTAP Protocol draft is said LTAP Protocol
is asynchronous by nature. And my question is about then second response
(service response). Will a client receive the second response when the TAS
hast just received the data object or when the archive operation has just
finished (the hashtree has been built)?
If the ARCHIVE operation is
asynchronous we really need another operation to permit a client to check if
the full archive operation has finished...
Finally about the
information called "Complementary data" in the article "Long-term trusted
preservation service using service interaction protocol and evidence records",
does it include only timestamping certificates?, or does it include
timestamps' certificates
and user signer´s certificates?. Are they obtain
by SCVP and save up as complementary data in the archive operation?
Thanks and Happy Christmas
|