State v. Ritchie

208 P.3d 981, 228 Or. App. 412, 2009 Ore. App. LEXIS 711
CourtCourt of Appeals of Oregon
DecidedMay 20, 2009
DocketCR0401509; A129591
StatusPublished
Cited by7 cases

This text of 208 P.3d 981 (State v. Ritchie) is published on Counsel Stack Legal Research, covering Court of Appeals of Oregon primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
State v. Ritchie, 208 P.3d 981, 228 Or. App. 412, 2009 Ore. App. LEXIS 711 (Or. Ct. App. 2009).

Opinion

*414 WOLLHEIM, J.

Defendant appeals a judgment of conviction on 20 counts of encouraging child sexual abuse in the second degree. ORS 163.686. In support of his first and fourth assignments of error, defendant asserts that the trial court erred by denying his motions for judgments of acquittal. 1 Defendant first argues that the state did not elicit sufficient evidence to show that defendant knowingly possessed or controlled child pornography. In support of his fourth assignment of error, defendant argues that the state did not elicit sufficient evidence to establish venue as to Counts 11 through 20. We conclude that the evidence was insufficient to establish venue as to Counts 11 through 20, but that the evidence was sufficient to support convictions on the remaining counts.

FACTS

We state the facts in the light most favorable to the state. State v. Cervantes, 319 Or 121, 125, 873 P2d 316 (1994). Defendant had been an elementary school teacher in Clackamas County since 1999 and a resident of Clackamas County since 2001. In September 2004, during the course of an investigation at the school by the Clackamas County Sheriffs Department, defendant consented to a forensic examination of his personal computers.

Defendant owned two personal computers at that time: a desktop computer and a laptop computer. Defendant purchased the desktop computer in the summer of 2002 and purchased the laptop computer in the first few months of 2004. Defendant almost always had his laptop computer with him. It was set up to connect automatically to the Internet and to an instant-messaging service. It was connected to the instant-messaging service approximately 80 to 90 percent of the time during evening hours.

Defendant searched on the Internet for pictures of children under the age of 18 years old. The forensic *415 examination showed that defendant had approximately 600 pornographic images on his desktop computer and approximately 500 pornographic images on his laptop computer. At least 75 percent of those images were pornographic images of children. The forensic examination also showed that defendant had sent and received files by instant messaging on the Internet. The names of those files exchanged by instant-messaging contained terms consistent with child pornography.

For each of the 20 counts charged in this case, the state introduced a specific image file recovered from defendant’s computers by the forensic examination. Each of those files contained a photograph of sexually explicit conduct involving a child. Ten of those files were recovered from the desktop computer; the other 10 were recovered from the laptop computer. The files containing each of those 20 photographs had been deleted before the investigation at the school began in September 2004.

The state’s computer expert described how data from deleted files could be recovered in a forensic examination. The expert noted that, when a computer file is created, the data contained in that file is recorded at a physical location on the hard drive. A master table keeps track of that physical location so that the computer is able to locate the data for later retrieval. When a file is deleted, the master table is modified to indicate that new data may be written in that same physical location. However, data contained at that physical location will remain there until and unless new data is recorded there. Although data may remain on the hard drive for some time after a file is deleted, a computer user cannot access data associated with a deleted file without specialized data recovery software. Accordingly, a forensic examination may recover data from deleted files that a typical computer user could not access.

The parties stipulated that defendant received the photographic files associated with Counts 1 through 4 on his desktop computer from another user through an Internet-based “chat room.” The state’s computer expert testified that a person has to confirm the acceptance of a file sent through the Internet in that manner. After receipt, those files were *416 available for viewing on defendant’s desktop computer. Those files were created and last accessed on that computer on July 7, 2002; the files were deleted that same day.

The parties stipulated that defendant received the photographic files associated with Counts 5 through 20 as a result of Web browsing. Each of those photographs was contained in a separate file that had been deleted from defendant’s computers and that had been recovered through the forensic examination.

The state’s computer expert explained how defendant’s computer received those files and how those files may have been deleted. According to the expert, when a person browses the Internet and accesses a particular Web page, the computer automatically saves various files onto the hard drive as temporary Internet files. One of those files contains instructions for how the Web page should be displayed on the screen. Additional files contain each separate image that appears on that Web page.

Temporary Internet files may be deleted either intentionally by direct action of a computer user or automatically during normal operations of the computer. The state’s computer expert could not ascertain whether the files associated with Counts 5 through 20 were deleted intentionally by defendant or by some automatic computer process.

The photographic files associated with Counts 5 through 10 were found on defendant’s desktop computer. The forensic examination indicated that those files were created and last accessed on December 8, 2002. The state introduced an exhibit showing how those six photographs would have been displayed on two separate Web pages. Both of those pages were photo albums created on the same Web service and listed under the same username. Although it could not be determined whether either Web page was too large to fit on defendant’s computer monitor, any photograph that did not fit on the monitor could be seen by scrolling on the Web page. Each photograph was displayed as a thumbnail-sized image, but each photograph could be enlarged by clicking on it. The state’s computer expert testified that defendant had clicked on and enlarged the two photographs associated with Counts 8 and 9.

*417 The photographic files associated with Counts 11 through 20 were found on defendant’s laptop computer. The state’s computer expert could not identify when those files were downloaded on the laptop computer. In addition, because laptop computers are mobile devices, the expert could not determine where the computer was located when those images were downloaded onto the laptop computer.

MOTIONS FOR JUDGMENTS OF ACQUITTAL

After the state presented its case-in-chief, defendant moved for judgments of acquittal on all counts. Defendant argued that he never knowingly possessed or controlled a tangible, visual recording of any prohibited image.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Hardin v. Popoff
379 P.3d 593 (Multnomah County Circuit Court, Oregon, 2016)
State v. Pugh
297 P.3d 27 (Court of Appeals of Oregon, 2013)
State v. Tilden
288 P.3d 567 (Court of Appeals of Oregon, 2012)
State v. Ritchie
248 P.3d 405 (Oregon Supreme Court, 2011)
State v. Anderson
2009 UT 13 (Utah Supreme Court, 2009)

Cite This Page — Counsel Stack

Bluebook (online)
208 P.3d 981, 228 Or. App. 412, 2009 Ore. App. LEXIS 711, Counsel Stack Legal Research, https://law.counselstack.com/opinion/state-v-ritchie-orctapp-2009.