Hash-based chain of custody preservation

A method for verifying the chain of custody for evidence associated with a retail security event, the method comprising:

• electronically receiving from a retail security video system video data files and storing the video data files in a video archiving system, each of the video data files representing footage of security events;
• physically receiving, from a retail security entity;
• physical evidence items and storing the physical evidence items in a secure repository, each of the physical evidence items being related to the security events, each of said physical evidence items including data related to one or more of the security events, the physical evidence items are physical evidence of a crime;
• electronically cataloging the physical evidence items by recording data from said items into a physical evidence archival database;
• restricting electronic access to the video archiving system and the physical evidence archival database to users having specified credentials;
• tracking said users' activities in the video archiving system and the physical evidence archival database;
• creating, with a computer implemented case management system, a case record for each security event that associates the security event with a video data file that depicts activity related to the security event, a physical evidence item related to the security event, criminal enforcement information, and private investigation information;
• presenting an electronic form that displays the case record and identifies the associated physical evidence item, criminal enforcement information, and private investigation information;
• receiving user input selecting a video data file to associate with the case record;
• creating, using an encryption system, at least a first hash value that is a function of data in the associated video data file and data from the associated physical evidence item such that later modification of the video data file and data from the associated physical evidence item can be detected;
• associating the encryption system with the case management system such that the case management system can receive the at least first hash value;
• identifying, in the electronic form, at least the first hash value;
• and
• reporting users' activities in the video archiving system and the physical evidence archival database together with the at least the first hash value.

A non-transitory computer-readable medium, embodied in a device, on which medium is encoded program code configured for execution by a processor to perform a method for receiving and transmitting event information, the method comprising:

• electronically receiving from a retail security video system video data files and storing the video data files in a video archiving system, each of the video data files representing footage of security events;
• physically receiving, from a retail security entity, physical evidence items and storing the physical evidence items in a secure repository, each of the physical evidence items being related to the security events, each of said physical evidence items including data related to one or more of the security events;
• electronically cataloging the physical evidence items by recording data from said items into a physical evidence archival database;
• restricting electronic access to the video archiving system and the physical evidence archival database to users having specified credentials;
• tracking said users' activities in the video archiving system and the physical evidence archival database;
• creating, with a computer implemented case management system, a case record for each security event that associates the security event with a video data file that depicts activity related to the security event, a physical evidence item related to the security event, criminal enforcement information, and private investigation information;
• presenting an electronic form that displays the case record and identifies the associated physical evidence item, criminal enforcement information, and private investigation information;
• receiving user input selecting a video data file to associate with the case record;
• creating, using an encryption system, at least a first hash value that is a function of data in the associated video data file and data from the associated physical evidence item such that later modification of the associated video data file and data from the associated physical evidence can be detected;
• associating the encryption system with the case management system such that the case management system can receive the at least first hash value;
• identifying, in the electronic form, the at least the first hash value;
• and
• reporting users' activities in the video archiving system and the physical evidence archival database together with the at least the first hash value.