Digital forensics equipment

Abstract

We provide digital forensic equipment. [Solution] The device comprises a control circuit board 130 including first and second E1.S connection ports 121, 122, first and second USB connection ports 123, 124, first and second SAS connection ports 125, 126, a control unit and a touch interface electrically connected to the control unit, a pair of E1.S interfaces, a USB interface and a SAS interface, and a pair of E1.S adapter modules 140 having an E1.S connector 141, a U.2 slot 142, an M.2 slot 143 and a multiplexer 144. The control unit supports copy operations between a first connection port group consisting of a first E1.S connection port, a first USB connection port and a first SAS connection port and a second connection port group consisting of a second E1.S connection port, a second USB connection port and a second SAS connection port.

Description

Technical Field

[0001] The present invention relates to digital forensic tools, and more particularly to a digital forensic device that can perform digital forensics on different types of solid state drives.

Background Art

[0002] A general digital forensic device is connected to a solid state drive waiting for forensics via a USB interface and usually can only process one type of solid state drive data.

Summary of the Invention

Problems to be Solved by the Invention

[0003] However, due to the limited transmission speed of the USB interface and the increasing capacity and types of solid state drives, how to provide a universal and efficient digital forensic method has become an important issue.

[0004] Therefore, the inventor of the present invention considered that the above-mentioned drawbacks could be improved, and after repeated intensive studies, the inventor came up with a digital forensic device according to the present invention that effectively improves the above-mentioned problems through reasonable design.

[0005] The present invention is made in view of such conventional problems. To solve the above problems, an object of the present invention is to provide a digital forensic device that enables an operator to conveniently perform digital forensic operations on a solid state drive for forensics by means of a touch screen.

[0006] Another objective of this invention is to provide a digital forensic device that enhances the efficiency of digital forensic operations by enabling high-speed copying of forensic data in a high-capacity E1.S solid-state drive to another E1.S solid-state drive via a pair of E1.S connection ports.

[0007] Another object of the present invention is to provide a digital forensic device that enables copying forensic data in a U.2 solid-state drive or an M.2 solid-state drive to another U.2 solid-state drive or other M.2 solid-state drive using a pair of E1.S adapter modules, each having a U.2 slot and an M.2 slot, respectively.

[0008] Another further object of the present invention is to provide a digital forensic device that can improve the reliability of digital forensic operations by locking bolts in positioning holes in the housing and stabilizing the connection between the E1.S connector of the E1.S adapter module and the E1.S connection port in the housing.

[0009] Another further object of this invention is to provide a digital forensics device that enables copying forensic data in one USB storage device to another USB storage device via a pair of USB connection ports.

[0010] A further object of this invention is to provide a digital forensics device that enables copying forensic data in a SAS or SATA storage device to another SAS (or SATA) storage device via a pair of SAS connection ports.

[0011] A further object of the present invention is to provide a digital forensic device that makes it possible to copy forensic data in N devices selected from a group consisting of a first E1.S solid-state drive, a first U.2 solid-state drive or a first M.2 solid-state drive inserted into the first E1.S adapter module, a first USB storage device, and a first SAS (or SATA) storage device to N devices selected from a group consisting of a second E1.S solid-state drive, a second U.2 solid-state drive or a second M.2 solid-state drive inserted into the second E1.S adapter module, a second USB storage device, and a second SAS (or SATA) storage device, where N is any integer from 1 to 3.

[0012] Another further object of this invention is to provide a digital forensics device that can be connected to a printer via a USB connection port to print operation records. [Means for solving the problem]

[0013] To achieve the above objective, a digital forensic apparatus, which is one aspect of the present invention, A housing having a display window, The aforementioned display window includes a touchscreen for providing an operating interface, A first E1.S connection port and a second E1.S connection port, both having positioning holes, are provided inside the housing corresponding to the first and second connection openings, and below the first and second connection openings, A first USB connection port and a second USB connection port are provided inside the housing so as to correspond to the third and fourth connection openings of the housing, A first SAS connection port and a second SAS connection port are provided inside the housing so as to correspond to the fifth and sixth connection openings of the housing, A control circuit board located within the housing includes a control unit and a touch interface electrically connected to the control unit, a pair of E1.S interfaces, a pair of USB interfaces, and a pair of SAS interfaces, wherein the touch interface is electrically connected to the touchscreen, the pair of E1.S interfaces are electrically connected to the first E1.S connection port and the second E1.S connection port, the pair of USB interfaces are electrically connected to the first USB connection port and the second USB connection port, and the pair of SAS interfaces are electrically connected to the first SAS connection port and the second SAS connection port. A pair of E1.S adapter modules each have an E1.S connector, a U.2 slot, an M.2 slot, a multiplexer, and a bolt, wherein the E1.S connector of one E1.S adapter module is used to connect to the first E1.S connection port, the E1.S connector of the other E1.S adapter module is used to connect to the second E1.S connection port, the multiplexer is used to electrically connect the E1.S connector to the U.2 slot or the M.2 slot, and the bolt is used to couple to the positioning hole. The control unit supports a copy operation between a first connection port group consisting of the first E1.S connection port, the first USB connection port, and the first SAS connection port, and a second connection port group consisting of the second E1.S connection port, the second USB connection port, and the second SAS connection port, wherein the copy operation is used to copy forensic data from N first memory devices on N connection ports inserted in the first connection port group to N second memory devices on N connection ports inserted in the second connection port group, where N is an integer from 1 to 3, and the N first memory devices are the first E1.S connection port, the first SAS connection port, and the second SAS connection port. The N second memory devices are selected from a group consisting of an S solid-state drive, a first U.2 solid-state drive or a first M.2 solid-state drive inserted into the first E1.S adapter module, a first USB storage device, and a first SAS (or SATA) storage device, and the N second memory devices are selected from a group consisting of a second E1.S solid-state drive, a second U.2 solid-state drive or a second M.2 solid-state drive inserted into another E1.S adapter module, a second USB storage device, and a second SAS (or SATA) storage device.

[0014] In a preferred example of the present invention, the touchscreen is a capacitive touchscreen.

[0015] In a preferred example of the present invention, the first USB connection port or the second USB connection port can be used to connect to a printer to print operation records.

[0016] In a preferred example of the present invention, the control circuit board has a memory electrically connected to the control unit and is used for temporarily storing the forensic data.

[0017] In a preferred example of the present invention, when the U.2 solid state drive is inserted into the U.2 slot and the M.2 solid state drive is inserted into the M.2 slot, the multiplexer selects to transmit the forensic data of the U.2 solid state drive to the control unit via the E1.S interface.

[0018] In a preferred example of the present invention, the control unit includes a processor circuit with an X86 architecture.

[0019] From the descriptions in the following specification and drawings, at least the following matters will become clear.

Brief Description of the Drawings

[0020] [Figure 1] It is an external perspective view showing a digital forensic device according to a preferred embodiment of the present invention. [Figure 2a] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 2b] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 2c] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 2d] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 2e] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 2f] It is an application example showing the digital forensic device shown in FIG. 1. [Figure 3] It is a schematic diagram showing that the E1.S adapter module of the digital forensic device shown in FIG. 1 is fixed to the housing by bolt parts. [Figure 4] It is a circuit block diagram showing the digital forensic device shown in FIG. 1. [Figure 5] It is a schematic diagram showing the E1.S adapter module of the digital forensic device shown in FIG. 1. [Modes for carrying out the invention]

[0021] The present invention will be described below through embodiments of the invention, but these embodiments are not intended to limit the invention as described in the claims. Furthermore, not all combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0022] First, an example of a specific embodiment of the digital forensic device according to the present invention will be described with reference to Figures 1 to 6.

[0023] Figure 1 is an external perspective view showing a digital forensic device according to one preferred embodiment of the present invention. Figures 2a to 2f are application examples showing the digital forensic device shown in Figure 1. Figure 3 is a schematic diagram showing the E1.S adapter module of the digital forensic device shown in Figure 1 fixed to the housing by bolt components.

[0024] In the example shown in Figure 1, the digital forensic device comprises a housing 100, a touchscreen 110, a first E1.S connection port 121 and a second E1.S connection port 122, a first USB connection port 123 and a second USB connection port 124, a first SAS connection port 125 and a second SAS connection port 126, a control circuit board 130, and a pair of E1.S adapter modules 140.

[0025] In the examples shown in Figures 2a to 2f, the digital forensic apparatus is used to perform digital forensic operations on two E1.S solid-state drives 201, two USB storage devices 202, two SAS storage devices 203, two U.2 solid-state drives 210, two M.2 solid-state drives 220, a U.2 solid-state drive 210, and an M.2 solid-state drive 220, respectively. In the example shown in Figure 3, the E1.S adapter module 140 is locked to the housing 100 by bolts 140a.

[0026] The housing 100 has a display window 101, a first connection opening 102, a second connection opening 103, a third connection opening 104, a fourth connection opening 105, a fifth connection opening 106, and a sixth connection opening 107. Below the first connection opening 102 and the second connection opening 103 are positioning holes 102a and 103a, respectively.

[0027] The touchscreen 110 is installed within the display window 101 and is used to provide an operating interface.

[0028] The first E1.S connection port 121 and the second E1.S connection port 122 are installed internally to correspond to the first connection opening 102 and the second connection opening 103 of the housing 100. The first USB connection port 123 and the second USB connection port 124 are installed internally to correspond to the third connection opening 104 and the fourth connection opening 105 of the housing 100. The first SAS connection port 125 and the second SAS connection port 126 are installed internally to correspond to the fifth connection opening 106 and the sixth connection opening 107 of the housing 100.

[0029] The control circuit board 130 is located within the housing 100. In the example shown in Figure 4, the control circuit board 130 includes a control unit 131, a memory 132 electrically connected to the control unit 131, a touch interface 133, a pair of E1.S interfaces 134, a pair of USB interfaces 135, and a pair of SAS interfaces 136. The touch interface 133 is electrically connected to the touchscreen 110, the pair of E1.S interfaces 134 are electrically connected to the first E1.S connection port 121 and the second E1.S connection port 122, the pair of USB interfaces 135 are electrically connected to the first USB connection port 123 and the second USB connection port 124, and the pair of SAS interfaces 136 are electrically connected to the first SAS connection port 125 and the second SAS connection port 126.

[0030] In the example shown in Figure 5, each E1.S adapter module 140 also includes a bolt 140a, an E1.S connector 141, a U.2 slot 142, an M.2 slot 143, and a multiplexer 144. The E1.S connector 141 is used to connect to the E1.S connection port, the multiplexer 144 is used to electrically connect the E1.S connector 141 to the U.2 slot 142 or the M.2 slot 143, and the bolt 140a is used to connect to the positioning hole 102a or 103a.

[0031] More specifically, the control unit 131 supports a copy operation between a first connection port group consisting of a first E1.S connection port 121, a first USB connection port 123, and a first SAS connection port 125, and a second connection port group consisting of a second E1.S connection port 122, a second USB connection port 124, and a second SAS connection port 126. The copy operation is used to copy forensic data from N first memory devices on N connection ports inserted in the first connection port group to N second memory devices on N connection ports inserted in the second connection port group, where N is an integer between 1 and 3. The N first memory devices are N types of devices selected from a group consisting of a first E1.S solid-state drive, a first U.2 solid-state drive or a first M.2 solid-state drive inserted into an E1.S adapter module 140, a first USB storage device, and a first SAS (or SATA) storage device. The N second memory devices are N types of devices selected from a group consisting of a second E1.S solid-state drive, a second U.2 solid-state drive or a second M.2 solid-state drive inserted into another E1.S adapter module 140, a second USB storage device, and a second SAS (or SATA) storage device. In other words, the control unit 131 supports one-to-one forensic copy operations or multiple-to-multiple forensic copy operations, and the forensic copy operations can be performed between two solid-state drives having the same or different transmission specifications.

[0032] Furthermore, the touchscreen 110 is a capacitive touchscreen.

[0033] Additionally, the first USB connection port 123 or the second USB connection port 124 can be used to connect to a printer to print operation logs.

[0034] Furthermore, memory 132 can be used to temporarily store the forensic data.

[0035] Furthermore, if a U.2 solid-state drive 210 is inserted into the U.2 slot 142 and an M.2 solid-state drive 220 is inserted into the M.2 slot 143, the multiplexer 144 can choose to transmit the forensic data of the U.2 solid-state drive 210 to the control unit 131 via the E1.S interface 134.

[0036] Furthermore, the control unit 131 may include a processor circuit based on the x86 architecture.

[0037] In summary, the present invention has the following advantages. (1) The digital forensic device according to the present invention allows the operator to conveniently perform digital forensic operations on a solid-state drive for forensics via a touchscreen. (ii) The digital forensic device according to the present invention enhances the operational efficiency of digital forensics by enabling high-speed copying of forensic data in a high-capacity E1.S solid-state drive to another E1.S solid-state drive via a pair of E1.S connection ports. (iii) The digital forensic device according to the present invention is capable of copying forensic data in a U.2 solid-state drive or an M.2 solid-state drive to another U.2 solid-state drive or another M.2 solid-state drive by means of a pair of E1.S adapter modules each equipped with a U.2 slot and an M.2 slot. (iv) The digital forensic device according to the present invention improves the reliability of digital forensic operations by locking a bolt in a positioning hole in the housing and stabilizing the connection between the E1.S connector of the E1.S adapter module and the E1.S connection port in the housing. (5) The digital forensic device according to the present invention can copy forensic data from one USB storage device to another USB storage device via a pair of USB connection ports. (vi) The digital forensic device according to the present invention is capable of copying forensic data from one SAS (or SATA) storage device to another SAS (or SATA) storage device via a pair of SAS connection ports. (7) The digital forensic apparatus according to the present invention is capable of copying forensic data in N devices selected from a group consisting of a first E1.S solid-state drive, a first U.2 solid-state drive or a first M.2 solid-state drive inserted into the first E1.S adapter module, a first USB storage device, and a first SAS (or SATA) storage device, to N devices selected from a group consisting of a second E1.S solid-state drive, a second U.2 solid-state drive or a second M.2 solid-state drive inserted into the second E1.S adapter module, a second USB storage device, and a second SAS (or SATA) storage device, where N is one integer from 1 to 3. (8) The digital forensic device according to the present invention can be connected to a printer via a USB connection port to print operation records.

[0038] Although embodiments of the present invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments, and design modifications and the like are also included within the scope of the spirit of the present invention. [Explanation of Symbols]

[0039] 100 Housing 110 Touchscreen 121 First E1.S connection port 122 Second E1.S connection port 123 First USB connection port 124 Second USB connection port 125 First SAS connection port 126 Second SAS connection port 130 Control circuit board 140 E1.S Adapter Module 201 E1.S Solid State Drive 202 USB storage devices 203 SAS Storage Devices 210 U.2 Solid State Drive 220 M.2 Solid State Drive 101 Display Window 102 First connecting opening 103 Second connection opening 104 Third connection opening 105 Fourth connecting opening 106 Fifth connecting opening 107 Sixth connecting opening 102a Positioning hole 103a Positioning hole 131 Control Unit 132 memory 133 Touch Interface 134 E1.S Interface 135 USB Interface 136 SAS Interfaces 140a bolt 141 E1.S connector 142 U.2 slots 143 M.2 slots 144 Multiplexer

Claims

1. A housing having a display window, The aforementioned display window includes a touchscreen for providing an operating interface, A first E1.S connection port and a second E1.S connection port, both having positioning holes, are provided inside the housing corresponding to the first and second connection openings, and below the first and second connection openings, A first USB connection port and a second USB connection port are provided inside the housing so as to correspond to the third and fourth connection openings of the housing, A first SAS connection port and a second SAS connection port are provided inside the housing so as to correspond to the fifth and sixth connection openings of the housing, A control circuit board located within the housing includes a control unit and a touch interface electrically connected to the control unit, a pair of E1.S interfaces, a pair of USB interfaces, and a pair of SAS interfaces, wherein the touch interface is electrically connected to the touchscreen, the pair of E1.S interfaces are electrically connected to the first E1.S connection port and the second E1.S connection port, the pair of USB interfaces are electrically connected to the first USB connection port and the second USB connection port, and the pair of SAS interfaces are electrically connected to the first SAS connection port and the second SAS connection port. A pair of E1.S adapter modules each have an E1.S connector, a U.2 slot, an M.2 slot, a multiplexer, and a bolt, wherein the E1.S connector of one E1.S adapter module is used to connect to the first E1.S connection port, the E1.S connector of the other E1.S adapter module is used to connect to the second E1.S connection port, the multiplexer is used to electrically connect the E1.S connector to the U.2 slot or the M.2 slot, and the bolt is used to couple to the positioning hole. The control unit supports a copy operation between a first connection port group consisting of the first E1.S connection port, the first USB connection port, and the first SAS connection port, and a second connection port group consisting of the second E1.S connection port, the second USB connection port, and the second SAS connection port, wherein the copy operation is used to copy forensic data from N first memory devices on N connection ports inserted in the first connection port group to N second memory devices on N connection ports inserted in the second connection port group, where N is an integer from 1 to 3, and the N first memory devices are N types of devices selected from a group consisting of a first E1.S solid-state drive, a first U.2 solid-state drive or a first M.2 solid-state drive inserted in the first E1.S adapter module, a first USB storage device, and a first SAS or SATA storage device, and the N second memory devices are second E1. A digital forensic apparatus characterized by being N types of devices selected from a group consisting of an S solid-state drive, a second U.2 solid-state drive or a second M.2 solid-state drive inserted into another E1.S adapter module, a second USB storage device, and a second SAS or SATA storage device.

2. The digital forensic apparatus according to claim 1, characterized in that the touchscreen is a capacitive touchscreen.

3. The digital forensic apparatus according to claim 1, characterized in that the first USB connection port or the second USB connection port can be used to connect to a printer to print operation records.

4. The digital forensic apparatus according to claim 1, characterized in that the control circuit board has a memory electrically connected to the control unit and is used for temporarily storing the forensic data.

5. The digital forensic apparatus according to claim 1, characterized in that when a U.2 solid-state drive is inserted in the U.2 slot and an M.2 solid-state drive is inserted in the M.2 slot, the multiplexer selects to transmit the forensic data of the U.2 solid-state drive to the control unit via the E1.S interface.

6. The digital forensic apparatus according to claim 1, characterized in that the control unit comprises a processor circuit of the x86 architecture.

Images