System and method for a computer information retrieval based on network

Abstract

The invention discloses a computer information retrieval system based on a network, which comprises a main control computer, a target computer, and a network connecting the main control computer and the target computer, wherein the main control computer is stored with configuration information of retrieval programs and retrieval objects and used for storing retrieving results. A computer information retrieval method based on the network comprises the following steps that: retrieval target configuration information is generated by configured programs on the main computer; the target computer acquires a starting program and is started; the target computer acquires the retrieval program from the main control computer through the network after being started; the retrieval program is started on the target computer; the target computer acquires the retrieval target configuration information from the main control computer through the network; and the target computer operates the retrieval program and performs the information retrieval of the target computer.

Description

technical field [0001] The invention relates to a method and system for processing electronic data, in particular to a method and system for retrieving and processing data stored in a target computer based on a network. Background technique [0002] With the rapid development of modern information technology represented by computer and network technology, various electronic data stored in computers are becoming more and more important to people's life and work. People often need to retrieve a large amount of electronic data, especially the timely collection, analysis, confirmation, protection, extraction, and archiving of various electronic data in computer systems. The most urgent technical problems to be solved. [0003] Existing computer forensics technology requires professional technicians to arrive at the scene, operate and check the target computer system, disassemble the case and take out the storage medium, use special equipment such as hard disk duplicators to cop...

AI Technical Summary

Problems solved by technology

[0004] To sum up, the existing computer retrieval and evidence collection systems have the following disadvantages: In order to obtain the final forensic analysis conclusion, it is necessary to go to the scene, complicated disassembly, and long-term copying work, which is time-consuming and complicated, especially in When it is necessary to perform information retrieval on multiple remote computers at the same time, the efficiency is lower; the collection of electronic evidence involving crimes requires high technical personnel and requires comprehensive knowledge of computer software and hardware. Look, it is difficult to popularize computer electronic evidence forensics technology, which is not conducive to cracking down on criminal activities involving computer electronic evidence; whether the search is started from the target computer's own operating system, or the target computer's storage medium is copied and retrieved, sensitive evidence may be destroyed, resulting in Unable to analyze the key original data, which seriously affects the authenticity, legality, relevance and probative force of the electronic evidence obtained by analysis; the search and evidence collection functions are weak and the types are single, and only plain text keywords and file names can be completed. Retrieval, which lacks the function of retrieving various specific information such as pictures, file contents, phone numbers, credit card numbers, email addresses, network addresses, ID card numbers, etc.

Images