Unlock instant, AI-driven research and patent intelligence for your innovation.

Method for identifying metadata format of NANDFlash memory chip

A format recognition and memory chip technology, applied in the field of mobile phone chip data recognition, achieves great practical value and strong versatility

Inactive Publication Date: 2013-08-21
BEIJING INSTITUTE OF TECHNOLOGYGY
View PDF1 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in the existing technology, there is a lack of mature methods for identifying the storage structure and metadata format of mobile phone NAND Flash chips.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for identifying metadata format of NANDFlash memory chip
  • Method for identifying metadata format of NANDFlash memory chip
  • Method for identifying metadata format of NANDFlash memory chip

Examples

Experimental program
Comparison scheme
Effect test

Embodiment

[0044] The target machine for forensics is philips x800 mobile phone A. In order to meet the unchangeable principle of forensic data on the target machine, another mobile phone B of the same model was found as a reference mobile phone.

[0045] Use the data line to connect Philips x800 mobile phone B to the PC, and the computer recognizes the removable storage device I, which has a used space of 5.4M and an available space of 42.5M. Use the file generation function of Winhex15.2 to create 4 random data files with a total size of 42M. The data file is stored on the removable device 1, i.e. on the built-in NAND Flash of the mobile phone B. Then use the disk cloning tool of Winhex15.2 to generate the logical image file philips-x800-logical of NAND Flash. Then use the mobile phone maintenance tool (Miaoshou Box) to obtain the physical image file philips-x800-physical.bin of mobile phone B.

[0046] Open the physical image file philips-x800-physical.bin in a readable manner. The...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a method for identifying the metadata format of a NANDFlash memory chip, comprising the following steps: firstly, distinguishing the arrangement rule of a metadata zone and an effective data zone in a physical mirror image; then, randomly generating certain data files, and storing the data files onto a chip; respectively obtaining the physical mirror image file and the logic mirror image file of the chip; according to the principle that the MD5 (message digest 5) values of the same data segment are same, finding a physical page corresponding to each logic page, and recording corresponding metadata; and according to the certain rule, analyzing the logic address field and an ECC (error correcting code) check code field in the metadata. On the basis of the metadata format and the meaning thereof of an unknown mobile phone built-in chip, the data arrangement rule of the physical mirror image can be correctly identified, and the field position and the meaning thereof of the key metadata are explained so as to utilize the existing mobile phone evidence-obtaining tool to analyze deleted or hidden offence evidences.

Description

technical field [0001] The invention relates to a mobile phone chip data identification method, in particular to a method for identifying the format of metadata in a mobile phone NAND Flash storage chip, which is used in the technical field of mobile phone forensics. Background technique [0002] With the continuous development of mobile communication technology and the continuous improvement of service levels and service types, mobile phones have increasingly become an indispensable contact tool in people's work and life. At the same time, illegal and criminal activities such as fraud, selling fakes, and spreading rumors using mobile phones are also becoming more and more rampant. Mobile phone forensics is an effective means of combating such crimes. [0003] The enhancement of the function of the mobile phone makes the capacity of the built-in storage chip of the mobile phone continuously increase, so the NAND Flash chip gradually becomes the main non-volatile storage dev...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G11C16/20
Inventor 李元章谭毓安张丽张雪兰张全新马忠梅
Owner BEIJING INSTITUTE OF TECHNOLOGYGY