6th European Conference - Academic Conferences

Jose Mas y Rubi et al.
The preservation function could be complemented with the deployment of a backup system like
incremental backups and mirror system backups.
The presentation function would be implemented with a report mechanism which contains the basic
parameters that would allow to make an adequate legal analysis, and to use it as a proof and to
possibly validate it as evidence. By modifying the REN-JIN model and introduce this new elements to
it, a new forensic model is achieved, which we’ll call CAESMA model.
5. Proposition of CAESMA model
This proposition is an on-going investigation, so, in the following subsection we present a preliminary
architecture and its basic operation.
5.1 Presentation of the new architecture
To be clear about the information flow between the elements that forms this network architecture, we
present a basic diagram which is the following:
Figure 4: Proposed network architecture
By inserting an IP Multimedia Subsystem (IMS) module, this element will allow us to integrate various
existing communication service platforms. Likewise, an ENUM module will allow us to link an
identification number to a system user, having in mind that for each of the users may be various
means of communication previously integrated to IMS. To make this user identification proposition
viable is necessary that, for each of the services offered by the Service Provider, exists an appropriate
registration in ENUM. For example:
Figure 5: ENUM operation
166