https://cacontology.projectvic.org/forensics#EvidenceVerificationAction
The action of verifying evidence integrity using cryptographic hashes and comparison methods.
Instances of cacontology-forensics:EvidenceVerificationAction can have the following properties:
| PROPERTY | TYPE | DESCRIPTION | RANGE |
|---|
By the associated SHACL property shapes, instances of cacontology-forensics:EvidenceVerificationAction can have the following properties:
| PROPERTY | PROPERTY TYPE | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS | GLOBAL RANGE |
|---|---|---|---|---|---|---|---|
| cacontology-forensics:EvidenceVerificationAction | |||||||
| cacontology-forensics:verificationHash | owl:ObjectProperty | Links a forensic artifact to its verification hash digest for integrity checking. sh:message An evidence verification action must include at least one verification hash |
1 | * | uco-core:UcoObject | uco-types:Hash | |
cacontology-forensics:verificationMethod |
-- | sh:message Verification method must be specified from allowed hash algorithms |
1 | * | xsd:string |
sh:in
MD5, SHA1, SHA256, SHA512, CRC32
|
-- |
cacontology-forensics:verificationResult |
-- | sh:message Verification result must be verified, failed, or incomplete (gUFO quality aspect) |
0 | 1 | xsd:string |
sh:in
verified, failed, incomplete
|
-- |
gufo:hasBeginPointInXSDDateTimeStamp |
-- | sh:message Evidence verification must have exactly one begin timestamp (gUFO temporal) |
1 | 1 | xsd:dateTimeStamp | -- | |
uco-action:usesTool |
-- | sh:message Evidence verification must specify verification tool used. |
1 | 1 | uco-tool:Tool | -- | |
uco-core:object |
-- | sh:message An evidence verification action must specify at least one object being verified |
1 | * | uco-core:UcoObject | -- | |
uco-core:startTime |
-- | sh:message Evidence verification must specify verification time. |
1 | 1 | xsd:dateTime | -- | |
| cac-core:InvestigativeAction | |||||||
gufo:hasBeginPointInXSDDateTimeStamp |
-- | begin time |
0 | 1 | xsd:dateTimeStamp | -- | |
gufo:hasEndPointInXSDDateTimeStamp |
-- | end time |
0 | 1 | xsd:dateTimeStamp | -- | |
rdfs:label |
-- | label |
1 | * | xsd:string | -- | |
| cac-core:Event | |||||||
(cacontology-forensics:examinedBy | cacontology-forensics:performedBy | cacontology-forensics:witnessedBy | cacontology-forensics:authorizedBy) |
-- | sh:message Every forensic event must have at least one participant (gUFO participation) |
1 | * | -- | ||
(cacontology-grooming:targetsVictim | cacontology-grooming:performedBy | cacontology-grooming:witnessedBy | cacontology-grooming:facilitatedBy) |
-- | sh:message Every grooming event must have at least one participant (gUFO participation) |
1 | * | -- | ||
(cacontology-usa-federal:prosecutedBy | cacontology-usa-federal:investigatedBy | cacontology-usa-federal:defendedBy | cacontology-usa-federal:victimizedBy) |
-- | sh:message Every federal criminal event must have at least one participant |
1 | * | -- | ||
(gufo:hasBeginPointInXSDDateTimeStamp | cacontology-enterprises:hasCoercionEventBeginDate | cacontology-enterprises:hasInvestigationBeginDate) |
-- | sh:message gUFO Events must have at least one temporal beginning point. |
1 | * | -- | ||
gufo:hasBeginPointInXSDDateTimeStamp |
-- | begin time Optional temporal begin point for the event. sh:message Event can have at most one begin point; Forensic action must have at most one begin timestamp (gUFO temporal constraint); Grooming behavior must have at most one begin timestamp (gUFO temporal); Production event must have exactly one begin point. |
1 | 1 | xsd:dateTimeStamp | -- | |
gufo:hasEndPointInXSDDateTimeStamp |
-- | end time Optional temporal end point for the event. sh:message Event can have at most one end point; Forensic action must have at most one end timestamp (gUFO temporal constraint); Grooming behavior must have at most one end timestamp (gUFO temporal); Production event may have an end point. |
0 | 1 | xsd:dateTimeStamp | -- | |
rdfs:label |
-- | label Every event should have at least one human-readable label. |
1 | * | xsd:string | -- | |
| case-investigation:InvestigativeAction | |||||||
uco-action:endTime |
-- | sh:message When present, action endTime should be at most one xsd:dateTime literal. |
0 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
uco-action:object |
-- | sh:message Action must reference at least one object IRI. |
1 | * | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:performer |
-- | sh:message Action must have exactly one performer IRI. |
1 | 1 | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:result |
-- | sh:message When present, action result values should be IRI nodes. |
0 | * | sh:IRI |
sh:severity
sh:Warning
|
-- |
uco-action:startTime |
-- | sh:message Action must have exactly one startTime (xsd:dateTime). |
1 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
| uco-action:Action | |||||||
uco-action:endTime |
-- | sh:message When present, action endTime should be at most one xsd:dateTime literal. |
0 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
uco-action:object |
-- | sh:message Action must reference at least one object IRI. |
1 | * | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:performer |
-- | sh:message Action must have exactly one performer IRI. |
1 | 1 | sh:IRI |
sh:severity
sh:Violation
|
-- |
uco-action:result |
-- | sh:message When present, action result values should be IRI nodes. |
0 | * | sh:IRI |
sh:severity
sh:Warning
|
-- |
uco-action:startTime |
-- | sh:message Action must have exactly one startTime (xsd:dateTime). |
1 | 1 | xsd:dateTime |
sh:severity
sh:Warning
|
-- |
@prefix cac-core: <https://cacontology.projectvic.org/core#> .
@prefix cacontology-forensics: <https://cacontology.projectvic.org/forensics#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
cacontology-forensics:EvidenceVerificationAction a owl:Class ;
rdfs:label "Evidence Verification Action"@en ;
rdfs:comment "The action of verifying evidence integrity using cryptographic hashes and comparison methods."@en ;
rdfs:subClassOf cac-core:InvestigativeAction .