Electronic evidence availability identification method combining image processing and data mining technology

A data mining and image processing technology, applied in still image data retrieval, still image data clustering/classification, special data processing applications, etc. Guaranteed accuracy

Pending Publication Date: 2022-03-04
郑州信大先进技术研究院
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Existing data recovery technologies can provide recovery capabilities for photos, videos, etc. in the storage medium, but for some damaged files (such as pictures, videos, etc.), they are often damaged after recovery (pictures are stored in binary on the storage medium, recovery The final picture cannot be opened, or only a part of it is displayed), or the captured image itself is very blurred, so it is often considered not to have forensic value

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Electronic evidence availability identification method combining image processing and data mining technology
  • Electronic evidence availability identification method combining image processing and data mining technology
  • Electronic evidence availability identification method combining image processing and data mining technology

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0040] as attached figure 1 And attached figure 2 As shown, a method for identifying the availability of electronic evidence combined with image processing and data mining technology, the method for identifying the availability of electronic evidence includes the following steps:

[0041] Step 1, restore the deleted picture from the storage medium of the suspect, and use the blurred picture in the restored picture as the picture to be identified;

[0042] Step 2, extracting key information in the picture to be identified, said key information including key time periods, key location ranges and image mask templates;

[0043] Step 3, based on the key time period, the range of the key location and the image mask template, crawl pictures similar to or related to the picture to be identified from public resources;

[0044] Using the crawled pictures as the first group of screening pictures, and associating and storing the first group of screening pictures and corresponding desc...

specific Embodiment approach

[0087] (1) Use data recovery tools such as ACE and HRT to restore deleted pictures, and use the blurred pictures in the recovered pictures as pictures to be recognized;

[0088] (2) As attached Figure 4 As shown, in practical applications, there may be situations where the image data of the same picture is continuously stored in different locations in the storage medium. In this case, the following steps can be used to obtain the picture to be recognized:

[0089] First scan the storage medium of the suspect to obtain the (residual) image data of the same picture stored continuously in different locations in the storage medium, and perform data recovery on the obtained image data to obtain multiple residual fragments of the same picture;

[0090] Perform image reorganization on multiple remaining fragments of the same image to obtain the image to be identified;

[0091] (3) It should be noted that for pictures that may be used as evidence (such as photos taken at locations),...

Embodiment 3

[0101] In order to make the evidence availability identification method more diversified, on the basis of the above-mentioned embodiments, this embodiment provides another electronic evidence availability identification method;

[0102] as attached Figure 5 As shown, the electronic evidence availability identification method combined with image processing and data mining technology also includes the following steps:

[0103] Obtain the approximate range of the estimated event occurrence, and determine the target area from the approximate range of the event occurrence based on the color and map data of the picture to be identified; wherein, the target area refers to the area where the key location range is located;

[0104] Establish a 3D color model of the target area based on the 3D city street view in the map data, and obtain the background of the rendered picture in combination with the weather conditions in key time periods;

[0105] Generate rendering images from multip...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides an electronic evidence availability identification method combining an image processing and data mining technology, and the method comprises the following steps: 1, recovering a deleted picture from a storage medium of a suspect, and taking a blurred picture in the recovered picture as a to-be-identified picture; step 2, extracting key information in the to-be-identified picture; step 3, crawling a picture similar to the picture to be identified from public resources; 4, screening out a second group of screened pictures from the first group of screened pictures by utilizing Hadoop; 5, matching the second group of screened pictures by using an SURF algorithm, and taking the matched pictures as a third group of screened pictures; step 6, matching the third group of screened pictures with the to-be-identified picture by using an SIFT algorithm, and taking the matched picture as an associated picture; and step 7, according to the similarity between the associated picture and the to-be-identified picture, identifying the availability of the to-be-identified picture.

Description

technical field [0001] The invention relates to the technical field of electronic evidence collection, in particular to a method for identifying the availability of electronic evidence combined with image processing and data mining technologies. Background technique [0002] Electronic forensics refers to the process of obtaining, storing, analyzing and presenting evidence for criminal acts such as computer intrusion, sabotage, fraud, and attack by using computer software and hardware technology in a legally compliant manner. From a technical point of view, computer crime forensics is a process of scanning and cracking the compromised computer system and reconstructing the intrusion event. Specifically, it refers to treating the computer as a crime scene, using advanced discrimination techniques to dissect computer crimes, and searching for criminals and their criminal evidence. [0003] The data recovery technology in electronic forensics can restore files deleted based on...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06V20/00G06V10/74G06V10/75G06K9/62G06F16/2458G06F16/55G06F16/58G06F16/583G06F16/587
CPCG06F16/2465G06F16/583G06F16/5866G06F16/587G06F16/55G06F18/22Y02D10/00
Inventor 张有为薛兵辜钰婷葛方丽郭赵飞耿政
Owner 郑州信大先进技术研究院
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products