Method for implementing digital-forensics-oriented digital evidence supervision chain

Abstract

The invention relates to a method for implementing a digital-forensics-oriented digital evidence supervision chain. The method comprises the steps that first, timestamp information, a data package and an unique equipment identification number are extracted, then a Hash algorithm is used for encrypting to form calibration, so that data supervision chain information is formed, and when errors happen to digital evidence, backtracking is conducted according to the data supervision chain to find the time and place in which problems happen. According to the method, the timestamp information is added in the supervision chain information, the time of data changes is recorded, if a third party tampers or deletes the data and the like, the time can be recorded, meanwhile, the Hash algorithm is used for conducting signature validation on all the steps in the evidentiary process, and therefore the place where the errors happen to the digital evidence is effectively positioned. The problem that in the prior art, the time and the place in which the errors happen to the digital evidence can not be uniquely positioned is solved, and the efficiency of digital forensics work is improved.

Description

technical field [0001] The invention relates to the technical field of digital forensics, in particular to a method for realizing a chain of custody of digital evidence oriented to digital forensics, which effectively improves the efficiency of digital forensics by using a time stamp and a Hash algorithm to form a chain of custody. Background technique [0002] Digital forensics technology includes electronic forensics, network forensics, computer forensics, etc. It is a technology and tool for collecting and discovering evidence from computers, mobile electronic devices and other related electronic devices. Its purpose is to investigate digital crimes related to digital technology, such as e-commerce fraud, intellectual property infringement, computer intrusion, etc., to effectively ensure the security of relevant information in digital devices such as computers, mobile phones, and communication networks, and to build an overall information security framework. , to prevent ...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the problem in the prior art that the time and place where the digital evidence error occurs cannot be uniquely located, the present invention provides a method for implementing a digital-oriented digital evidence chain of custody, which effectively improves The Efficiency of Digital Forensics

Images