PRELIMINARY PERSPECTIVES ON THE CHAIN OF CUSTODY FOR DIGITAL EVIDENCE USING BLOCKCHAIN

Abstract

The article examines the chain of custody as a normative–technical system that guarantees the identity, integrity, and authenticity of evidence, and proposes its updating for digital evidence. It argues that the chain operates on two planes—formal (continuous documentation) and material (effective preservation)—and that, in digital settings, it requires bit-level identity through bit-by-bit forensic acquisition, metadata preservation, hash functions, and trusted timestamps. Methodologically, it adopts a qualitative approach based on documentary analysis and a review of specialized literature—including systematic studies and forensic standards—to build a comparative, applicable framework. The body of the work distinguishes the probative particularities of digital documents, the need for protocols and training, and the integration of decentralized technologies. It contends that blockchain adds a complementary layer of timestamping, traceability, and independent verification, with probative content kept off-chain, robust key governance, access control, and strict compliance with lawfulness and expert examination. The proposed framework prioritizes minimal anchoring of data, permissioned or hybrid networks, interoperability with standards, reproducible tests, and empirical validation. It concludes that blockchain does not replace forensic methodology or procedural guarantees; rather, it strengthens the chain of custody when embedded in a previously validated workflow, enabling end-to-end auditability and improving probative confidence without, by itself, resolving challenges of attribution, privacy, and cross-border coordination.