Oh! That looks like a nail to me... why not check all file hashes against a CP database? That database could be maintained by, well, some government agency, but don't worry about it, it's gonna be super secure and there's no abuse potential or something at all!