Electronic records are record information that are created, sent, received, or stored in an electronic form, and have unique characteristics such as vulnerability to forgery and /or alteration, media independence, and invisibility. It is difficult to verify the integrity of electronic records, especially when the records are transferred in offline after being stored in a storage medium, and the chain of custody during the transfer can not be guaranteed. This study was conducted to ensure the preservation of integrity and the chain of custody throughout the process from the extraction of electronic records from the storage media transferred such as a floppy disk, optical disk and hard disk etc. to registration in the system.

Similarity and relationship between electronic records and digital evidence were determined through the characteristic comparison, while giving consideration to integrity, identity, reliability requirements of electronic records preservation and professionalism as the criteria for the admissibility of evidence . Through that, it is judged that admissibility of evidence of electronic records can be supplemented by grafting procedures, techniques, and professional tools of the digital forensics. Furthermore, it was possible to suggest the functional elements of the framework for storage media forensics by analysing the current status of domestic and foreign research to graft the digital forensics onto records management, and the limits of grafting.

The suggested functional elements of the framework for storage media forensics include maintaining interface for obsolete media, write protect function, creating imaging file, automatic extraction of preservation metadata, and identifying personal information on the original records by using letter filtering method etc. and a management procedure for grafting these elements onto an electronic records management process are proposed. A prototype management tool for storage media, based on the forensics, which includes write protection function using the registry information, imaging function of DD file format, letter filtering function to verify properties of record disclosure among the main functions, was realized. But for automatic extraction of the preservation metadata and personally identifiable information, the file format should be analyzable, if not connection to a digital format registry system is required. Restoration function for the damaged electronic records using the file carving method and judgement on the authenticity of restored electronic records are left for the future research.