Copy auditing card

Abstract

A copy audit card is provided, which is characterized in that: the card consists of a CPU controller and an audit card seat, wherein an audit card interface of the CPU controller is connected with a CPU interface of the audit card seat; the CPU controller is also equipped with a copy interface and is also connected with an input end T2IN and an output end R20UT of a interface chip, and the interface chip is equipped with a computer socket. The invention has the advantages that: in the processes on collecting, extracting, fixing, saving and proofing the electric evidence, when copying data froma source disk to a target disk, can accurately prove whether the data changes or not in the process of evidence collection. At the same time, the operating commands at every step of the evidence collection system shall be recorded, just like using the 'electric camera' way to record the process of evidence collection in whole course at real time. The copy process shall be monitored and audited; inaddition, the process of electric evidence collection can be automatically reappeared in accordance with the audit records.

Description

technical field [0001] The invention relates to a copying device of electronic data information, in particular to a copy audit card for monitoring the hard disk data copying process. Background technique [0002] In recent years, with the rapid development and wide application of information networks, more and more illegal and criminal activities have been carried out against and using information networks. Computer crime is a new type of high-tech crime, which has intelligence, concealment, Dissimilarity and other characteristics. [0003] As the most important information storage medium of a computer, the hard disk is an important acquisition content of computer forensics technology, and it is also the main direction of various computer forensics tools at present. At present, in the domestic and foreign markets, there are many professional products for hard disk copy and data acquisition, but they are basically developed and produced by American manufacturers. The domesti...

AI Technical Summary

Problems solved by technology

At present, domestic public security organs also lack effective technical means in this regard, which not only affects the credibility and notarization of electronic data as evidence in the judicial process, but also restricts the legislation of computer crimes.

[0006] The disadvantages of the existing technology are: lack of supervision in the process of collecting, extracting, fixing, preserving and presenting electronic evidence, and when copying data from the source disk to the target disk, there is no effective technical means to supervise and audit the copying process

Images