IT Forensics · Car

Forensic analysis of paired mobile phone data – using devices connected via Bluetooth as a data source

When a mobile phone is paired with a vehicle’s infotainment system, contacts, call histories and, in some cases, message content are often synchronised and temporarily stored within the vehicle itself.

Enquire without obligation

This data may still be present in the vehicle even if the mobile phone that was originally paired with it is no longer available, and thus constitutes a standalone source of forensic data.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We systematically analyse data stored in the vehicle and synchronised from paired mobile phones, and place this data within the context of the investigation.

Typical areas of application

•Analysis of synchronised contact and call data
•Reconstruction of the usage of a connected mobile phone in a vehicle
•Filling in missing data when a mobile phone is no longer available
•Proof that a specific person was in the vehicle
•Judicial and non-judicial expert reports
•Cooperation with law enforcement agencies in relation to traffic offences

This is how an analysis of linked mobile phone data is carried out

Once the accessible infotainment memory has been backed up, synchronised contact, call and pairing data are extracted and analysed. This data is then cross-referenced with other data sources, such as the navigation history.

Why is the analysis of linked mobile phone data relevant from a forensic perspective?

This data may still be available even if the original mobile phone itself is no longer accessible, and thus provides an important additional source of forensic data.

Evidence of a device being paired can also help to prove that a particular person was in the vehicle at a specific time.

Frequently Asked Questions

Is pairing data stored permanently?+
This depends on the specific system configuration and storage capacity, and is assessed on a case-by-case basis.
Can news content also be synchronised?+
With some systems, yes, but the scope varies considerably depending on the manufacturer and the mobile operating system.
Is data retained after unpairing a phone?+
To some extent; this depends on the system in question and whether automatic cleaning takes place.

LanCologne – Vehicle IT Forensics, Cologne

Do you require a professional forensic investigation into the „forensic analysis of linked mobile phone data"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant vehicle artefacts.

Get in touch now