Forensic analysis system based on electronic data of small unmanned aerial vehicle

Abstract

The invention discloses a forensic analysis system based on electronic data of a small unmanned aerial vehicle, which comprises a case management module, a user management module and a forensic result display module, the case management module comprises a case information management unit, a case result display unit, a data extraction unit, a data analysis unit, a data processing unit, a data recovery unit and a data management and sharing unit; according to the invention, the whole-process evidence collection and analysis of the electronic data of the unmanned aerial vehicle are realized, and a highly automatic and complete evidence collection scheme is provided; the system supports a plurality of functional modules of data acquisition, processing, storage, analysis, display and the like, has relatively high function completion degree, improves user experience and operation convenience, provides technical support for detection and evidence collection work of unmanned aerial vehicle crime cases, provides an effective and convenient solution for the field of unmanned aerial vehicle electronic data evidence collection, and is suitable for popularization and application in the field of unmanned aerial vehicle electronic data evidence collection. And the development of an unmanned aerial vehicle evidence obtaining technology is effectively promoted.

Description

Technical Field

[0001] This invention relates to the field of electronic data forensics and analysis technology, specifically to a forensics and analysis system based on electronic data from small unmanned aerial vehicles (UAVs). Background Technology

[0002] With the rapid development of drone technology, the market for small drones is expanding rapidly. As drones become larger and more technologically advanced, criminals are increasingly using them to achieve their criminal objectives. Effective drone electronic data forensics is crucial for applications such as unauthorized flights in no-fly zones, smuggling, privacy violations, and economic espionage. However, the field of drone forensics currently faces many technical and legal challenges, urgently requiring an efficient and convenient solution.

[0003] my country's electronic data forensics field started relatively late, with many forensic tools imported from abroad, lacking independently developed forensic software and equipment. Imported forensic software is generally not open source, and its source code is kept confidential, making it difficult to guarantee the reliability of data obtained during forensic work. While domestic mobile phone forensics software has added support for mainstream DJI drone models, no dedicated forensic software has been released, and related forensic equipment is still under research. The lack of mature forensic equipment will hinder efficient forensic operations, making complete forensic evidence collection from drones extremely difficult.

[0004] Previous domestically produced electronic data forensics systems for drone equipment were mostly limited in function, inconvenient to operate, and had a poor user experience. Therefore, we need to propose an forensics analysis system based on electronic data from small drones. Summary of the Invention

[0005] The purpose of this invention is to provide an evidence collection and analysis system based on electronic data from small unmanned aerial vehicles (UAVs). This system enables the full-process evidence collection and analysis of UAV electronic data, providing a highly automated and complete evidence collection solution. It supports multiple functional modules, including data acquisition, processing, storage, analysis, and display, exhibiting a high degree of functional completeness. This enhances user experience and ease of operation, providing technical support for the investigation and evidence collection of UAV-related crimes. It offers an effective and convenient solution for the field of UAV electronic data forensics, effectively promoting the development of UAV forensics technology and addressing the problems mentioned in the background section.

[0006] To achieve the above objectives, the present invention provides the following technical solution: an evidence collection and analysis system based on electronic data from small unmanned aerial vehicles, comprising a case management module, a user management module, and an evidence collection result display module. The case management module includes a case information management unit, a case result display unit, a data extraction unit, a data parsing unit, a data processing unit, a data recovery unit, and a data management and sharing unit.

[0007] The case information management unit is used to create new cases, modify case information, and delete case information. Creating a new case includes recording the case details and uploading evidence.

[0008] The case result display unit is used for APP log analysis, SD card evidence analysis, and evidence report export; among them, APP log analysis includes playback of drone flight trajectory, drone system information, and drone path information; SD card evidence analysis includes image evidence analysis and video evidence analysis to obtain key data such as EXIF ​​information and MD5 values;

[0009] The user management module is based on the front-end framework Vue.js and the back-end framework Django, and provides user registration, login, permission allocation and management functions.

[0010] The evidence collection result display module can automatically generate an evidence collection report based on the evidence collection results, which facilitates court hearings and case archiving, and visualizes and analyzes the evidence collection results.

[0011] Preferably, the data extraction unit is used to extract data from digital devices or storage media, including computer hard drives, mobile devices and cloud storage, and the data extraction unit can collect data through any one of physical connection, logical acquisition or network acquisition.

[0012] Preferably, the data parsing unit includes a data interpretation module and a data analysis module. The data interpretation module is used to transform the analysis results into an understandable and presentable form. The data interpretation module can generate charts, timelines, and geographic location information to facilitate further research and analysis of the data by forensic personnel. The data analysis module is used to perform in-depth analysis of the extracted data. The data analysis module can perform keyword search, metadata analysis, data filtering, and sorting to discover the correlations, patterns, and trends between the data.

[0013] Preferably, the data processing unit includes a graphics processing module and a digital signal processing module. The graphics processing module is used to process graphics data and perform parallel computing, and the digital signal processing module is used to process and analyze audio, video, and communication data.

[0014] Preferably, the data recovery unit is used to recover deleted or damaged data. When data is deleted on the device or the storage medium is damaged, the data recovery unit can use file recovery, partition repair, and data fragment reconstruction technologies to restore data integrity.

[0015] Preferably, the data management and sharing unit is used to organize and manage the extracted data and analysis results, and to establish a database to facilitate the storage, retrieval and sharing of data, and to provide access control and version control functions to ensure the security and traceability of data.

[0016] Preferably, the database includes a user database and a case database. The user database is used to store user information, including user login name and login password. The case database is used to store case information, including case text data, image data and video data.

[0017] Preferably, the front-end framework Vue.js uses data hijacking and observation mechanisms to achieve two-way data binding. When data changes, the relevant views are automatically updated, reducing the complexity of manual operations and DOM manipulation. It also uses virtual DOM technology to map data changes onto a virtual DOM tree. By comparing the differences between the old and new virtual DOM trees, actual DOM operations are only performed on the parts that need to be updated, improving performance and efficiency. Furthermore, the front-end framework Vue.js provides a rich set of directives for handling DOM element attributes and events. These directives can be used for binding data, responding to events, and looping through elements.

[0018] Preferably, the backend framework Django provides powerful ORM tools that allow interaction with the database via Python code. The ORM offers easy-to-use APIs for data querying, insertion, updating, and deletion. Furthermore, the Django backend framework comes with an automatically generated management interface for managing the application's backend data, including CRUD operations and permission management. The Django backend framework also provides a flexible URL routing system that maps URLs to corresponding view functions or classes, easily defining URL patterns and handling requests to achieve dynamic page generation and access control. Finally, it includes a built-in template engine for generating dynamic HTML pages, allowing the use of template syntax to define page structure and content, thus achieving page reusability and maintainability.

[0019] Compared with the prior art, the beneficial effects of the present invention are:

[0020] This invention enables the full-process evidence collection and analysis of UAV electronic data, providing a highly automated and complete evidence collection solution. It supports multiple functional modules such as data collection, processing, storage, analysis, and display, and has a high degree of functional completion. It enhances user experience and ease of operation, provides technical support for the investigation and evidence collection of UAV crimes, and offers an effective and convenient solution for the field of UAV electronic data forensics, which will effectively promote the development of UAV forensics technology. Attached Figure Description

[0021] Figure 1 This is a system block diagram of the present invention. Detailed Implementation

[0022] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0023] Please see Figure 1 The present invention provides a technical solution: an evidence collection and analysis system based on electronic data from small unmanned aerial vehicles, including a case management module, a user management module, and an evidence collection result display module. The case management module includes a case information management unit, a case result display unit, a data extraction unit, a data parsing unit, a data processing unit, a data recovery unit, and a data management and sharing unit.

[0024] The case management module can collect, parse, and process UAV electronic data, such as extracting flight log files (DAT files) and converting them into CSV files, as well as performing forensic analysis on images and videos on SD cards to obtain key data such as EXIF ​​information and MD5 values.

[0025] The case information management unit is used to create new cases, modify case information, and delete case information. Creating a new case includes recording the case details and uploading evidence.

[0026] The case result display unit is used for APP log analysis, SD card evidence analysis, and evidence report export; among them, APP log analysis includes playback of drone flight trajectory, drone system information, and drone path information; SD card evidence analysis includes image evidence analysis and video evidence analysis to obtain key data such as EXIF ​​information and MD5 values;

[0027] The user management module is based on the front-end framework Vue.js and the back-end framework Django, and provides user registration, login, permission allocation and management functions.

[0028] The evidence collection result display module can automatically generate an evidence collection report based on the evidence collection results, facilitating court hearings and case archiving, and visualizing and analyzing the evidence collection results, such as data visualization and data mining.

[0029] The data extraction unit is used to extract data from digital devices or storage media, including computer hard drives, mobile devices, and cloud storage. The data extraction unit can collect data through any of the following methods: physical connection, logical acquisition, or network acquisition.

[0030] The data parsing unit includes a data interpretation module and a data analysis module. The data interpretation module is used to transform the analysis results into an understandable and presentable form. The data interpretation module can generate charts, timelines, and geographic location information to enable forensic personnel to further study and analyze the data. It can also provide data visualization tools to more intuitively display evidence and correlations.

[0031] The data analysis module is used for in-depth analysis of the extracted data. It can perform keyword search, metadata analysis, data filtering, and sorting to discover correlations, patterns, and trends between data points. It can also perform text analysis, image analysis, and network traffic analysis to help forensic personnel identify potential evidence and clues.

[0032] The data processing unit includes a graphics processing module and a digital signal processing module. The graphics processing module is used to process graphics data and perform parallel computing. It has large-scale parallel computing capabilities and is suitable for fields such as graphics rendering and deep learning.

[0033] The digital signal processing module is used for the processing and analysis of audio, video, and communication signals.

[0034] The data processing unit provides efficient, accurate, and reliable data processing capabilities. It can be selected and configured according to specific needs and application scenarios to achieve effective management, processing, and analysis of data.

[0035] The data recovery unit is used to recover deleted or damaged data. When data is deleted on the device or the storage medium is damaged, the data recovery unit can use file recovery, partition repair, and data fragment reconstruction technologies to restore data integrity.

[0036] The data management and sharing unit is used to organize and manage the extracted data and analysis results, and to establish a database to facilitate the storage, retrieval and sharing of data. It also provides access control and version control functions to ensure the security and traceability of the data.

[0037] The database includes a user database and a case database. The user database is used to store user information, including user login name, login password, and other user information. The case database is used to store case information, including case text data, image data, and video data, as well as other case information.

[0038] The front-end framework Vue.js uses data hijacking and observation mechanisms to achieve two-way data binding. When data changes, the relevant views are automatically updated, reducing the complexity of manual operations and DOM manipulation. It also uses virtual DOM technology to map data changes onto a virtual DOM tree. By comparing the differences between the old and new virtual DOM trees, actual DOM operations are only performed on the parts that need to be updated, improving performance and efficiency. Furthermore, the front-end framework Vue.js provides a rich set of directives for handling DOM element properties and events. These directives can be used for binding data, responding to events, and looping through elements.

[0039] The Django backend framework provides powerful ORM tools that allow interaction with the database via Python code. The ORM offers easy-to-use APIs for querying, inserting, updating, and deleting data. Furthermore, Django comes with an automatically generated management interface for managing application backend data, including CRUD operations and access control. Django also provides a flexible URL routing system that maps URLs to corresponding view functions or classes, easily defining URL patterns and handling requests to achieve dynamic page generation and access control. Finally, it includes a built-in template engine for generating dynamic HTML pages, allowing users to define page structure and content using template syntax, ensuring page reusability and maintainability.

[0040] By extracting files such as drone flight trajectories, log files, and photographs, the evidence of electronic data was secured, flight trajectories were reconstructed, and EXIF ​​information was extracted. Ultimately, the entire process of obtaining and analyzing drone electronic data was realized, providing an effective and convenient solution for the field of drone electronic data forensics.

[0041] This system realizes the entire process of electronic data forensics for unmanned aerial vehicles (UAVs), providing a highly automated and complete forensics solution. It supports multiple functional modules including data acquisition, processing, storage, analysis, and display, as well as the generation of forensic reports, demonstrating a high degree of functional completeness. Through a modern UI design and multiple data display methods, it enhances user experience and ease of operation.

[0042] This system may need to be adapted and optimized for different models of drones to ensure compatibility and stability; when used on a large scale, the system's scalability and performance optimization may need to be considered to cope with the needs of high load and large amount of data processing.

[0043] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.

Claims

1. A forensic analysis system based on electronic data from small unmanned aerial vehicles (UAVs), characterized in that: It includes a case management module, a user management module, and an evidence collection result display module. The case management module includes a case information management unit, a case result display unit, a data extraction unit, a data parsing unit, a data processing unit, a data recovery unit, and a data management and sharing unit. The case information management unit is used to create new cases, modify case information, and delete case information. Creating a new case includes recording the case details and uploading evidence. The case result display unit is used for APP log analysis, SD card evidence analysis, and evidence report export; among them, APP log analysis includes playback of drone flight trajectory, drone system information, and drone path information; SD card evidence analysis includes image evidence analysis and video evidence analysis to obtain key data such as EXIF ​​information and MD5 values; The user management module is based on the front-end framework Vue.js and the back-end framework Django, and provides user registration, login, permission allocation and management functions. The evidence collection result display module can automatically generate an evidence collection report based on the evidence collection results, which facilitates court hearings and case archiving, and visualizes and analyzes the evidence collection results.

2. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The data extraction unit is used to extract data from digital devices or storage media, including computer hard drives, mobile devices, and cloud storage. The data extraction unit can collect data through any of the following methods: physical connection, logical acquisition, or network acquisition.

3. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The data parsing unit includes a data interpretation module and a data analysis module. The data interpretation module is used to transform the analysis results into an understandable and presentable form. The data interpretation module can generate charts, timelines, and geographic location information to facilitate further research and analysis of the data by forensic personnel. The data analysis module is used to conduct in-depth analysis of the extracted data. The data analysis module can perform keyword search, metadata analysis, data filtering, and sorting to discover the correlations, patterns, and trends between the data.

4. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The data processing unit includes a graphics processing module and a digital signal processing module. The graphics processing module is used to process graphics data and perform parallel computing, while the digital signal processing module is used to process and analyze audio, video, and communication data.

5. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The data recovery unit is used to recover deleted or damaged data. When data is deleted on the device or the storage medium is damaged, the data recovery unit can use file recovery, partition repair, and data fragment reconstruction technologies to restore data integrity.

6. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The data management and sharing unit is used to organize and manage the extracted data and analysis results, and to establish a database to facilitate the storage, retrieval and sharing of data. It also provides access control and version control functions to ensure the security and traceability of the data.

7. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 6, characterized in that: The database includes a user database and a case database. The user database is used to store user information, including user login name and login password. The case database is used to store case information, including case text data, image data and video data.

8. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The front-end framework Vue.js uses data hijacking and observation mechanisms to achieve two-way data binding. When data changes, the relevant views are automatically updated, reducing the complexity of manual operations and DOM manipulation. It also uses virtual DOM technology to map data changes onto a virtual DOM tree. By comparing the differences between the old and new virtual DOM trees, actual DOM operations are only performed on the parts that need to be updated, improving performance and efficiency. Furthermore, the front-end framework Vue.js provides a rich set of directives for handling DOM element properties and events. These directives can be used for binding data, responding to events, and looping through elements.

9. The forensic analysis system based on electronic data from small unmanned aerial vehicles according to claim 1, characterized in that: The Django backend framework provides powerful ORM tools that allow interaction with the database via Python code. The ORM offers easy-to-use APIs for querying, inserting, updating, and deleting data. Furthermore, Django comes with an automatically generated management interface for managing application backend data, including CRUD operations and access control. Additionally, Django provides a flexible URL routing system that maps URLs to corresponding view functions or classes, easily defining URL patterns and handling requests to achieve dynamic page generation and access control. It also has a built-in template engine for generating dynamic HTML pages. Template syntax can be used to define the structure and content of the page, enabling page reuse and maintainability.

Images