How can I prove a document was created when someone said it was?

[Guest]

Is there a way to (besides having a daily backup that isn't appended) pull
up the different copies of a document (created version, and subsequent edited
versions)?

We have someone that said they created a document on a certain date, and we
doubt that to be true. So, is there a way to prove authenticity (date
created and actual document view)?

 

[neil]

Depends how much detail you want and if using MS Word. With the document
open go to File>Properties and look at the "statistics" tab, does that give
you what you need.

Neil

 

[Guest]

Neil,

Thanks for responding, but I need more detail. The detail offered in the
statistics tab, while helpful, doesn't show me the actual document.

See, I'm thinking that if this person were called out on the actual creation
date, that they could open a document that WAS created say on 1/1/05, and
paste all the questionable information into that document. It would look
like the document we're questioning was created when he said it was, when in
all actuallity it wasn't (not that ANYONE would do that... RIGHT).

So, am I SOL, or what?

 

[Sharon F]

Is there a way to (besides having a daily backup that isn't appended) pull
up the different copies of a document (created version, and subsequent edited
versions)?

We have someone that said they created a document on a certain date, and we
doubt that to be true. So, is there a way to prove authenticity (date
created and actual document view)?

A way? Yes and no. The details may be in the file's properties but there
are tools available that allow the user to alter this information.

 

[Guest]

Thanks, Sharon.
It sounds like there isn't really a way to do this. ESPECIALLY if the
document originated from someone else's computer.

 

[John Wunderlich]

=?Utf-8?B?TGlzYV9OZWVkc19IZWxw?=

Neil,

Thanks for responding, but I need more detail. The detail offered
in the statistics tab, while helpful, doesn't show me the actual
document.

See, I'm thinking that if this person were called out on the
actual creation date, that they could open a document that WAS
created say on 1/1/05, and paste all the questionable information
into that document. It would look like the document we're
questioning was created when he said it was, when in all
actuallity it wasn't (not that ANYONE would do that... RIGHT).

So, am I SOL, or what?

If you're talking this level of verification, then you are talking
about digital signatures. Detached signatures will contain the
signature date as well as an encrypted hash of the document itself so
that changes are always detected. Check out PGP (www.pgp.com) or GPG
(www.gnupg.org) for signature generation. There are also digital
timestamping services out there
(http://www.itconsult.co.uk/stamper/stampinf.htm) that can get around
the problem of changing the computer date when digitally signing.

HTH,
John

 

[Guest]

Thanks John! I'll check those sites out. I'm not sure it will do me any
good since this information is located on someone else's computer. I suppose
we could subpoena his hard drive....

Anyway, Thanks!

 

[AJR]

Any document: Rt.click>properties gives the date of creation, date modified
and date accessed. If the person did as you suggested e.g. previous dated
document used - then the properties would indicate the date the document was
modified.

 

[Guest]

AJR,

Thanks. I wonder how that would hold up in court. It would at least cast
suspicion on the origination of the document if in fact a large change
occured AFTER the date in question.

I appreciate everyone's help!

Lisa

 

[Sharon F]

Thanks, Sharon.
It sounds like there isn't really a way to do this. ESPECIALLY if the
document originated from someone else's computer.

If there is a legal issue involved, getting the hard drive subpoenaed and
turned over to forensics experts ASAP is usually how the scenario evolves.
The third party "experts" have much more advanced tools than what is
available to the average consumer.