A data evidence tamper-proof method, device and system based on computer forensics

Abstract

This application discloses a method, device and system for anti-tampering of data evidence based on computer forensics, including: No. 1 blockchain node uses a visible light flash as a light source to collect and process images to obtain No. 1 image; perform hash calculation to obtain The first hash value; the second block chain node uses ultraviolet flashlight as the light source, and performs image acquisition and processing to obtain the second image; performs hash calculation to obtain the second hash value; the third block chain node uses visible light flashlight and The ultraviolet flash lamp is used as a light source to perform image acquisition and processing to obtain the No. 3 image; perform hash calculation to obtain the third hash value; the No. 1 block chain node obtains the first ciphertext and stores it in the first block chain; The No. 2 block chain node obtains the second ciphertext and stores it in the second block chain; the No. 3 block chain node obtains the third ciphertext and stores it in the third block chain. In this way, the data security of computer forensics is guaranteed, and the possibility of being tampered with is reduced.

Description

technical field [0001] The present application relates to the field of computers, in particular to a method, device and system for preventing tampering of data evidence based on computer forensics. Background technique [0002] Computer forensics can use computer identification and analysis technology to distinguish the content of the records generated during the operation of the computer system to prove the facts of the case. For example, it can be used for forensics of computer viruses. In order to ensure the validity of the evidence, it is necessary to prevent the data of computer forensics from being tampered with. The traditional computer forensics data evidence anti-tampering scheme generally stores the computer forensics data evidence in a physical storage medium that is disconnected from the network. However, this traditional computer forensics data evidence tamper-proof solution is poor in convenience and applicability. SUMMARY OF THE INVENTION [0003] The pre...

AI Technical Summary

Problems solved by technology

However, this traditional computer forensics data evidence anti-tampering scheme has poor convenience and poor applicability.

Images