Forensic Locksmithing

ab123

Forensic locksmithing is a relatively unknown field of investigative work that provides a much needed service to law enforcement, government agencies, and private companies. The forensic locksmith, also known as an investigative locksmith, analyzes lock and keying systems for evidence of compromise. This includes determining method of entry, the tools used, the time and skill required, and any evidence that identifies suspects, victims, or other pertinent information. The forensic locksmith does not solve cases, rather they provide information and suggestions to investigators that may enable them to solve a case. In addition to criminal investigations, forensic locksmiths also perform routine security maintenance for government and private companies to identify any attempts to compromise a lock or key system, successful or otherwise. Many forensic locksmiths also perform penetration testing and security research, too.

What does it take to be a forensic locksmith? Primarily, extensive knowledge of how locks, safes, and keying systems operate and interact with one another. Details of common locks, their features, installation details, and security vulnerabilities are all important.

The importance of understanding compromise techniques is often underestimated. Knowing what can and cannot be used to open a given lock is a priceless skill in any investigation because it can drastically reduce the scope to a handful of techniques, and, more importantly, a handful of potential suspects. The forensic locksmith also draws on skills from many other disciplines, including: evidence handling, chain of custody, photography, macro photography, microscopy, and tool mark examination.

One of the primary goals of a forensic investigation is identifying the method of entry; how entry was attempted or accomplished. Forensic locksmiths identify three methods of entry: destructive, covert, and surreptitious. The main difference between each method is the type of evidence left behind and the ease of identifying different attacks.

Destructive entry includes any techniques that damage or destroy a lock, safe, door, window, or wall. Destructive techniques are by far the most common method of attack because of speed, simplicity, and low cost of tools. Most destructive techniques leave the lock or working keys non-functional and are easily identified by both normal users and forensic investigators. Normal users of the lock are the personnel that operate the lock on a regular basis.

Covert entry is not easily identified by users, but can be identified by a qualified forensic investigator. Most covert techniques do not harm the operation of the lock or working keys. Common techniques include lockpicking, pick guns, vibration picks, key bumping, impressioning, decoding, and bypass. Covert entry techniques are commonly identified by visual inspection of the lock, key, window, or door. Detailed tool marks and trace evidence are identified with photography and microscopy. Metallurgy and tool mark examination is also common, but may not be required depending on the specifics of the case.

Surreptitious entry techniques cannot be identified by either a user or a qualified forensic investigator. Luckily, few techniques are considered surreptitious, and many that do are expensive or time-intensive. This isn’t always the case; removal and disassembly of almost any lock can be performed quickly and surreptitiously. Visual decoding, such as taking a photocopy of a key or sight-reading the bitting cuts on a key, is a simple and powerful surreptitious technique. The forensic locksmith must always consider surreptitious techniques as a possibility. The design and installation details of the lock will narrow down what techniques are possible, and the specifics of the case will determine what is plausible. The forensic locksmith can give investigators an estimate of the feasibility of various techniques, but by definition cannot identify the method of entry based on examination of the lock alone. In the real world, many of these techniques are eventually identified by non-lock evidence, such as finding a photocopy of the victim’s key in possession of a suspect, hair and fiber evidence left at the crime scene, and so on.

The forensic locksmith provides a valuable service to many organizations, particularly law enforcement and insurance companies. A thorough understanding of locks, safes, and keying systems allows them to provide insight into an often misunderstood area of physical security. Distinguishing between the various methods of entry lets the forensic locksmith quickly identify and categorize both known and unknown entry techniques. With the facts provided by a forensic locksmith, investigators can better focus their efforts on what is important.

Interested in learning more about locks, safes, and forensic locksmithing? Visit my website at http://www.lockpickingforensics.com. It has extensive information on tool mark identification, the investigative process, laboratory techniques, and much more. In addition, the International Association of Investigative Locksmiths (IAIL) is the most well-known forensic locksmith association in the world. They offer training and certification to members who qualify.

More information is available on their website, http://www.iail.org.

My nickname is datagram. I’ve taught locks, safes, and methods to compromise them for many years, including training to government agencies and private companies. I also do frequent public speaking at security conferences around the world. I run the lock-related websites http://www.lockpickingforensics.com and http://www.lockwiki.com. Feel free to contact me if you are interested in training on locks, safes, and forensic locksmithing.