CN103617402A - Multimedia electronic data forensic report and generating and displaying method and system thereof - Google Patents

Multimedia electronic data forensic report and generating and displaying method and system thereof Download PDF

Info

Publication number
CN103617402A
CN103617402A CN201310607114.8A CN201310607114A CN103617402A CN 103617402 A CN103617402 A CN 103617402A CN 201310607114 A CN201310607114 A CN 201310607114A CN 103617402 A CN103617402 A CN 103617402A
Authority
CN
China
Prior art keywords
evidence obtaining
report
electronic
file
multimedia data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201310607114.8A
Other languages
Chinese (zh)
Other versions
CN103617402B (en
Inventor
张建明
鲜文兵
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Ruian Technology Co Ltd
Original Assignee
Beijing Ruian Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Ruian Technology Co Ltd filed Critical Beijing Ruian Technology Co Ltd
Priority to CN201310607114.8A priority Critical patent/CN103617402B/en
Publication of CN103617402A publication Critical patent/CN103617402A/en
Application granted granted Critical
Publication of CN103617402B publication Critical patent/CN103617402B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60Protecting data
    • G06F21/64Protecting data integrity, e.g. using checksums, certificates or signatures

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

The invention relates to a multimedia electronic data forensic report and a generating and displaying method and system thereof. The system comprises a multimedia electronic data forensic report collecting device, a multimedia electronic data forensic report generating device and an authentication displaying device. Data files and corresponding header files are combined to generate a multimedia report, wherein the data files are compressed by adopting a compression algorithm, a verification method and an irreversible encryption algorithm when the forensic report is generated, and data decryption and self-extracting verification are carried out on the header files when the forensic report is displayed. The method and system can ensure the integrity, the tamper-proofing performance and the safety of multimedia electronic data as a whole. Whether electronic data evidences are text or audio-visual materials, integrity technological tamper-proofing can be carried out on the electronic data evidences through a sealed tamper-proofing device, an electronic evidence displaying and authentication mechanism is further added, and the processing process is safer and more concealed.

Description

A kind of electronic multimedia data evidence obtaining report and generation, methods of exhibiting and system
Technical field
The invention belongs to Computer forensics field, relate to fixing, transmit, reproducing of electronic multimedia data evidence.
Background technology
In the face of information-based, digitized today, the collection of Computer forensics and fixedly behavior require the primitiveness principle based on electronic evidence, must guarantee that electronic evidence is from producing to the completeness and efficiency of exporting.The electronic evidence of traditional content of text, can indicate evidence obtaining time, evidence obtaining personnel, Data Source etc., and after stamping an offical seal, with the form of documented evidence, be fixed preservation by printing, and prevents that the integrality of electronic evidence fixation procedure from being destroyed; Traditional have audiovisuals, as the evidence that comprises audio frequency, video, adopts the method for taking pictures and making a video recording to be fixed evidence.
Prior art is mainly used in digital signature technology, by calculating unique digital digest value or the check code of electronic data, guarantee the integrality of Computer forensics, but all do not relate in the prior art the total solution how electronic multimedia data evidence is fixed, transmits and reproduced.Prior art forms and exists weak area as follows electronic evidence: how (1) electronic multimedia data evidence is fixed, and there is no corresponding informationization technology scheme; (2) in electronic multimedia data evidence, relate to a large amount of sounds, video data, if signed one by one by classic method, in transmitting procedure, certain file and corresponding signature can be deleted simultaneously and be not found so, thus the integrality of destruction evidence; If to the sound relating to, the whole packing signature of video data, whether the showing problem relating to has the solution of standard; (3) adopt in digital signature procedure and do not add encryption mechanism, may have the intrusion of rogue program, destroy the validity of signature.
Summary of the invention
One of object of the present invention is to provide a kind of electronic multimedia data evidence obtaining report generation, methods of exhibiting, guarantees on the whole the integrality of electronic multimedia data, anti-tamper and security.No matter Computer forensics is text or audiovisual materials, can carry out integrity techniques by the tamper resistant device of sealing anti-tamper, and adds electronic evidence to show authentication mechanism, and processing procedure is safer, hidden.
An electronic multimedia data evidence obtaining report-generating method, its step comprises:
1) extract the electronic data of at least one type and set up the preliminary electronic evidence-collecting report based on file directory;
2) described preliminary e-file evidence obtaining report is compressed and is merged into single compressed file log file memory location;
3) will generate at random character string key as described compressed file symmetric cryptographic key; Then described compressed file is encrypted and calculates document;
4) use preset rivest, shamir, adelman to be encrypted described document, file storage location and file symmetric cryptographic key; Increase by one boot after encryption completes, generates the electronic multimedia data evidence obtaining report of single file layout.
Preferably, the described preliminary electronic evidence-collecting report based on file directory is based on html Hypertext Markup Language.
Preferably, adopt MD5 or SHA1 to calculate document.
Preferably, the method that verifies according to described document the electronic data evidence obtaining report not being tampered is:
Whether the document that the document relatively calculating produces while reporting with generation electronic data evidence obtaining is identical, if identical, electronic multimedia data evidence obtaining file is complete and is not tampered; If not identical, electronic multimedia data evidence obtaining file was tampered, and reminder-data is imperfect, need to regain from raw data source evidence obtaining report.
Preferably, in multimedia evidence obtaining report operation is shown, add signature authentication mechanism, show authentication signature unit, make multimedia reports safer and more effective in transmitting procedure.
Preferably, the electronic data of at least one type comprises: word document, excel document, note, message registration, photo, recording, video recording.
Further, the checking methods of exhibiting of a kind of electronic multimedia data evidence obtaining report generating according to described electronic multimedia data evidence obtaining report-generating method, its step comprises:
1) described electronic multimedia data evidence obtaining report is transferred to and needs computing machine and/or the mobile terminal device Bootloader shown to decrypt document, file storage location and file symmetric cryptographic key;
2) according to described document, verify the electronic data evidence obtaining report not being tampered, and according to described symmetric cryptographic key, this electronic data evidence obtaining report is decrypted, generation result is saved in to temporary file catalogue evidence obtaining report is shown;
3) described report boot is deleted temporary file automatically, completes displaying.
Preferably, described electronic multimedia data evidence obtaining is reported in while showing, adds signature authentication mechanism, shows authentication signature unit.
Preferably, by the mode that USB flash disk copies, network transmits, described electronic multimedia data evidence obtaining report is transferred to computing machine and/or the mobile terminal device that needs displaying.
Another object of the present invention is to provide a kind of electronic multimedia data evidence obtaining report, comprise through asymmetric encryption: document, file storage location, compressed file symmetric cryptographic key and a boot;
Described compressed file symmetric cryptographic key will generate at random character string key and obtain;
Described document is by being encrypted acquisition to described compressed file;
Described boot, for moving user after this electronic multimedia data evidence obtaining report, is carried out verification to the integrality of multimedia evidence obtaining report;
Described file storage location shows this multimedia show catalogue automatically while being used for recording this electronic multimedia data evidence obtaining report of preservation.
Another object of the present invention is to provide a kind of electronic multimedia data evidence obtaining report generation display systems, solve on the whole fixing, transmit and showing of electronic multimedia data evidence, concrete technical scheme is as follows:
The present invention also proposes a kind of electronic multimedia data evidence obtaining report generation, display systems, comprising: the harvester of electronic multimedia data evidence obtaining report; Electronic multimedia data evidence obtaining report preparing apparatus; Authentication exhibiting device;
The harvester of described electronic multimedia data evidence obtaining report, for gathering the electronic data of at least one type from computing machine and/or mobile terminal device;
Described electronic multimedia data evidence obtaining report preparing apparatus, for the electronic data of at least one type of obtaining according to extraction and set up the preliminary electronic evidence-collecting report based on file directory; Described preliminary e-file evidence obtaining report is compressed and is merged into single compressed file log file memory location; To generate at random character string key as described compressed file symmetric cryptographic key; Then described compressed file is encrypted and calculates document; Use preset rivest, shamir, adelman to be encrypted described document, file storage location and file symmetric cryptographic key; Increase by one boot after encryption completes, generates the electronic multimedia data evidence obtaining report of single file layout;
Described authentication exhibiting device, for being transferred to described electronic multimedia data evidence obtaining report to need computing machine and/or the mobile terminal device Bootloader shown to decrypt document, file storage location and file symmetric cryptographic key; According to described document, verify the electronic data evidence obtaining report not being tampered, and according to described symmetric cryptographic key, this electronic data evidence obtaining report is decrypted, generation result is saved in to temporary file catalogue evidence obtaining report is shown; Described report boot is deleted temporary file automatically, completes displaying.
Beneficial effect of the present invention:
Compared with prior art, the present invention is reported in data in transmitting procedure to multimedia evidence obtaining and carries out integrity protection.
1), by compressing multimedia data, calculation document proof test value, generates enciphered data, check header file, and to and the proof test value encryption that generates, effectively prevent the object of malicious user change proof test value.
2) data file of compression is adopted to compression algorithm, method of calibration, irreversible cryptographic algorithm and corresponding data decryption, self-extracting check header file, merge and generate multimedia reports.
3) in multimedia evidence obtaining report operation is shown, add signature authentication mechanism, show authentication signature unit, make multimedia reports safer and more effective in transmitting procedure.
Accompanying drawing explanation
Fig. 1 realizes the schematic diagram that uses electronic multimedia data evidence obtaining report in one embodiment of the invention;
Fig. 2 is that in one embodiment of the invention, electronic multimedia data evidence obtaining report file generates flowchart
Fig. 3 is that process flow diagram is shown in the authentication of electronic multimedia data evidence obtaining report in one embodiment of the invention:
Fig. 4 take certain electronic data evidence obtaining evaluating center certain mobile phone to be reconnoitred to the schematic flow sheet of evaluation as example in one embodiment of the invention.
Fig. 5 is that in one embodiment of the invention, expert assignment raiser can be reported in the evidence obtaining of electronic multimedia data on general computing machine, browses, shows schematic diagram.
Embodiment
In order to make object of the present invention, technical scheme clearer and more definite, below by specific embodiment and coordinate accompanying drawing, the present invention is described in detail.
Fixing, the transmission of electronic multimedia data evidence obtaining report and displaying process have related to a kind of electronic multimedia data evidence obtaining report generation display systems in one embodiment of this invention, comprise three parts: the harvester of electronic multimedia data evidence obtaining report; Electronic multimedia data evidence obtaining report preparing apparatus; Authentication exhibiting device; Below the detailed description to device:
Electronic multimedia data evidence obtaining report harvester, for gathering text, photo, audio frequency, audio-visual-materials from computing machine, mobile terminal device.In computing machine and mobile terminal device, there is a large amount of electronic data, harvester can be according to electronic multimedia data report user's requirement, and electronic data evidence obtaining personnel can preset, choose the multimedia type reading.Default which can the be selected electronic data of which kind is as Computer forensics, as word document, and excel document, note, message registration, photo, recording, video recording etc.
After collecting multi-medium data, select specific electronic data type, as Computer forensics, offer user.The files such as the text collecting, photo, audio frequency, video generally can directly be browsed, analyze on collecting device.The text that multimedia evidence collecting apparatus collects, photo, audio frequency, video file, will import electronic multimedia data evidence obtaining report preparing apparatus into as input.
Electronic multimedia data evidence obtaining report preparing apparatus for by the text, photo, audio frequency, the audio-visual-materials that gather, forms Single document after the form of catalogue, compression, summary, encryption.
Understand that the form of catalogue refers to: the electronic data extracting from mobile communication equipment or computing machine with those skilled in the art know that, in order to facilitate the user's of electronic multimedia data evidence obtaining report analysis and understanding, according to electronic data type, as address list, message registration, photos etc., show step by step with the form of catalogue.
By after compression, a plurality of multimedia electric documents are merged into a single file in the present invention.
The object of described summary is carried out verification to the integrality of file, calculates after summary, and summary is encrypted.Once file is modified, just can, by relatively making a summary, find that file is modified.Because summary is encrypted employing rivest, shamir, adelman, therefore cannot forge the summary after encryption.
Described encryption refers to: what the encryption of summary was adopted is rivest, shamir, adelman, and what the encryption of whole file was adopted is symmetric encipherment algorithm.
The authentication exhibiting device of described electronic multimedia data evidence obtaining report, for after confirming electronic multimedia data evidence obtaining report integrality and consistance, shows electronic multimedia data evidence obtaining report.
An electronic multimedia data evidence obtaining report generation methods of exhibiting, the steps include: in one embodiment of this invention
The first step, user selects after specific electronic data from electronic multimedia data collector, as input, sends electronic multimedia data evidence obtaining report preparing apparatus to.Electronic multimedia data evidence obtaining report preparing apparatus, according to the internal association relation of electronic data, is set up the electronic data evidence obtaining report based on file directory of conveniently browsing based on html identifiable language.After this step completes, form preliminary html evidence obtaining report, can, by the catalogue format of html, browse easily various evidence obtaining information.Html i.e. " hypertext " just refers in the page and can comprise picture, link, even the non-legible element such as music, program.The structure of HTML (Hypertext Markup Language) comprises head part (Head) and main part (Body), and wherein head (head) provides the information about webpage, and main body (body) part provides the particular content of webpage.
Second step, html evidence obtaining report based on file directory form is compressed to merging, form a single compressed file (compressed file is merged in the evidence obtaining report compression that is about to html), and (html file is as the displaying catalogue of electronic multimedia data evidence obtaining report to record the file storage location of html file, need to record the relative position in compressed package of this file, be convenient to like this, when showing media evidence obtaining report, automatically show this multimedia catalogue.)。Automatically generate a character string password, as inputting compressing the key of the symmetric encipherment algorithm of rear file, the compressed file generating is encrypted.The document that adopts MD5 or SHA1 to calculate this compressed file obtains proof test value, employing be the method for calibration of standard, irreversible hash value comparison, does not do concrete restriction in the present invention.By the document generating, symmetric cryptography password (character string of automatically producing is secret), html file storage location information, use prefabricated rivest, shamir, adelman to be encrypted.
The 3rd step, data file after electronic multimedia data evidence obtaining report processing boot, compress-encrypt, document and symmetric cryptography password, the html file storage location information after encryption are unified to process, generate the multimedia evidence obtaining report of single file layout.The effect of described boot is after double-clicking operation multimedia evidence obtaining report, integrality to multimedia evidence obtaining report is carried out verification, if multimedia evidence obtaining report is not modified, it can parse the multimedia evidence obtaining report based on html catalogue, and opens html catalogue and browse for user.
The authentication exhibiting device of electronic multimedia data evidence obtaining report, for after confirming electronic multimedia data evidence obtaining report integrality and consistance, shows electronic multimedia data evidence obtaining report, and methods of exhibiting is as follows:
The first step, boot is reported in the evidence obtaining of electronic multimedia data, decrypts key, symmetric cryptographic key and the html file storage location information of document asymmetric encryption.
Second step, the multimedia data file to compress-encrypt, uses the algorithm calculation document summary identical with producing electronic multimedia data evidence obtaining report.The document that the document relatively calculating and the first step obtain, if identical, thinks that electronic multimedia data evidence obtaining file is complete and was not tampered, and enters the 3rd step; If not identical, illustrate that electronic multimedia data evidence obtaining file was tampered, reminder-data is imperfect, need to, from raw data source obtains evidence obtaining report, exit processing procedure.
The 3rd step, the symmetric cryptographic key that uses the first step to obtain, is decrypted (when showing, using the key in step 2 to be decrypted the compressed file after encrypting) to the electronic multimedia data file after compress-encrypt, generates a single compressed file.To this compressed file, use decompression algorithm corresponding to compression algorithm to carry out decompress(ion), generation result is saved in to temporary file catalogue.
The 4th step, electronic multimedia data evidence obtaining report boot is called the browser on demonstrating computer, usings html file storage location information as input, according to default electronic multimedia data directory, evidence obtaining information is shown.
The 5th step, has shown electronic multimedia data evidence obtaining report, closes after corresponding browser the temporary file that the automatic delete program of electronic multimedia data evidence obtaining report boot generates.
Above-mentioned exhibition method also comprises signature mechanism, is electronic multimedia data evidence obtaining report to be gathered to people's authentication.
Fig. 1 realizes the schematic diagram that uses electronic multimedia data evidence obtaining report in one embodiment of the invention.Electronic data evidence obtaining person carries out multi-medium data collection, has gathered rear formation electronic multimedia data evidence obtaining report.According to this electronic multimedia data evidence obtaining report, electronic multimedia report user can directly show user with it.
Fig. 2 is that in one embodiment of the invention, electronic multimedia data evidence obtaining report file generates flowchart.Flow process is as follows:
1) electronic multimedia data that multi-medium data collection obtained or choose for generating the source data of electronic multimedia data evidence obtaining report;
2) according to the data that obtain, generate the electronic multimedia data report of the html based on file directory;
3) be compressed into single file layout;
4) encryption, calculation document summary;
5) use rivest, shamir, adelman to exist routing information to be encrypted to document, file encryption password, html;
6) generate electronic multimedia data report.
Fig. 3 is that process flow diagram is shown in the authentication of electronic multimedia data evidence obtaining report in one embodiment of the invention.Flow process is as follows:
1) the evidence obtaining report of electronic multimedia data by modes such as USB flash disk copy, network transmission, sends to the computing machine that need to carry out the displaying of electronic data evidence obtaining result;
2) double-click electronic multimedia data evidence obtaining report file;
3) electronic multimedia data evidence obtaining report boot restores document, Crypted password, the information such as html storage Lu Jing;
4) calculation document summary, and compare with the document of storage, if summary is not identical, point out multi-medium data evidence obtaining report to be tampered, finish to open; Identical if make a summary, by electronic multimedia data evidence obtainings file decryption, unzip to temporary path;
5) browser that use system carries is shown html, realizes the displaying to electronic multimedia data;
6) complete and close browser to after the browsing of multimedia evidence obtaining report, automatically delete temporary path and the file generating.
That certain electronic data evidence obtaining evaluating center is that example is reconnoitred the schematic flow sheet of evaluation to certain mobile phone as shown in Figure 4.When a task is accepted in certain electronic data evidence obtaining evaluating center, evaluating center assigns identifier to identify this mobile phone, this identifier collects evidence after evaluation to this mobile phone, utilize electronic multimedia data evidence obtaining report generation technology, generation can depart from the electronic multimedia data evidence obtaining report of the evaluation apparatus of collecting evidence.This electronic multimedia data evidence obtaining report is by the form copy with file or send to expert assignment raiser by network.In electronic multimedia data evidence obtaining report preparing apparatus, carry out following operation:
1) generate the html report based on file path;
2) by the document, symmetric cryptography password, the html file storage location information that generate, use prefabricated rivest, shamir, adelman to be encrypted;
3) electronic multimedia data evidence obtaining report boot, compressed file and relevant information are processed and generated electronic multimedia evidence obtaining report.
Shown in Fig. 5, be to determine task raiser, electronic multimedia data evidence obtainings can be reported in and browse, show schematic diagram on general computing machine.By the asymmetric encryption techniques of application in electronic multimedia data evidence obtaining report, can guarantee integrality and the consistance of electronic data.Idiographic flow is as follows:
1) expert assignment raiser, obtains electronic multimedia data evidence obtaining report file;
2) in electronic multimedia data evidence obtaining report, show in authenticate device, electronic multimedia data evidence obtaining report boot is analyzed evidence obtaining report;
3) determine integrality and the consistance of evidence obtaining report;
4) unzip to temporary folder;
5) multimedia evidence obtaining report is browsed and shown;
6), after having shown, delete temporary file.

Claims (11)

1. an electronic multimedia data evidence obtainings report-generating method, its step comprises:
1) extract the electronic data of at least one type and set up the preliminary electronic evidence-collecting report based on file directory;
2) described preliminary e-file evidence obtaining report is compressed and is merged into single compressed file log file memory location;
3) will generate at random character string key as described compressed file symmetric cryptographic key; Then described compressed file is encrypted and calculates document;
4) use preset rivest, shamir, adelman to be encrypted described document, file storage location and file symmetric cryptographic key; Increase by one boot after encryption completes, generates the electronic multimedia data evidence obtaining report of single file layout.
2. electronic multimedia data evidence obtaining report-generating method according to claim 1, is characterized in that, the described preliminary electronic evidence-collecting report based on file directory is based on html Hypertext Markup Language.
3. electronic multimedia data evidence obtaining report-generating method according to claim 1, is characterized in that, adopts MD5 or SHA1 to calculate document.
4. electronic multimedia data according to claim 1 evidence obtaining report-generating method, it is characterized in that, in multimedia evidence obtaining report operation is shown, add signature authentication mechanism, show authentication signature unit, make multimedia reports safer and more effective in transmitting procedure.
5. electronic multimedia data evidence obtaining report-generating method according to claim 1, is characterized in that, the electronic data of at least one type comprises: word document, excel document, note, message registration, photo, recording, video recording.
6. the checking methods of exhibiting of the electronic multimedia data evidence obtaining report that electronic multimedia data evidence obtaining report-generating method according to claim 1 generates, its step comprises:
1) described electronic multimedia data evidence obtaining report is transferred to and needs computing machine and/or the mobile terminal device Bootloader shown to decrypt document, file storage location and file symmetric cryptographic key;
2) according to described document, verify the electronic data evidence obtaining report not being tampered, and according to described symmetric cryptographic key, this electronic data evidence obtaining report is decrypted, generation result is saved in to temporary file catalogue evidence obtaining report is shown;
3) described report boot is deleted temporary file automatically, completes displaying.
7. electronic multimedia data evidence obtaining report checking methods of exhibiting according to claim 6, is characterized in that, the method that verifies the electronic data evidence obtaining report not being tampered according to described document is:
Whether the document that the document relatively calculating produces while reporting with generation electronic data evidence obtaining is identical, if identical, electronic multimedia data evidence obtaining file is complete and is not tampered; If not identical, electronic multimedia data evidence obtaining file was tampered, and reminder-data is imperfect, need to regain from raw data source evidence obtaining report.
8. electronic multimedia data evidence obtaining report checking methods of exhibiting according to claim 6, is characterized in that, described electronic multimedia data evidence obtaining is reported in while showing, adds signature authentication mechanism, shows authentication signature unit.
9. methods of exhibiting is verified in electronic multimedia data evidence obtaining report according to claim 6, it is characterized in that, by the mode that USB flash disk copies, network transmits, described electronic multimedia data evidence obtaining report is transferred to computing machine and/or the mobile terminal device that needs displaying.
10. electronic multimedia data evidence obtaining report, is characterized in that, comprises through asymmetric encryption: document, file storage location, compressed file symmetric cryptographic key and a boot;
Described compressed file symmetric cryptographic key will generate at random character string key and obtain;
Described document is by being encrypted acquisition to described compressed file;
Described boot, for moving user after this electronic multimedia data evidence obtaining report, is carried out verification to the integrality of multimedia evidence obtaining report;
Described file storage location shows this multimedia show catalogue automatically while being used for recording this electronic multimedia data evidence obtaining report of preservation.
11. 1 kinds of electronic multimedia data evidence obtaining report generation, display systems, is characterized in that, comprising: the harvester of electronic multimedia data evidence obtaining report; Electronic multimedia data evidence obtaining report preparing apparatus; Authentication exhibiting device;
The harvester of described electronic multimedia data evidence obtaining report, for gathering the electronic data of at least one type from computing machine and/or mobile terminal device;
Described electronic multimedia data evidence obtaining report preparing apparatus, for the electronic data of at least one type of obtaining according to extraction and set up the preliminary electronic evidence-collecting report based on file directory; Described preliminary e-file evidence obtaining report is compressed and is merged into single compressed file log file memory location; To generate at random character string key as described compressed file symmetric cryptographic key; Then described compressed file is encrypted and calculates document; Use preset rivest, shamir, adelman to be encrypted described document, file storage location and file symmetric cryptographic key; Increase by one boot after encryption completes, generates the electronic multimedia data evidence obtaining report of single file layout;
Described authentication exhibiting device, for being transferred to described electronic multimedia data evidence obtaining report to need computing machine and/or the mobile terminal device Bootloader shown to decrypt document, file storage location and file symmetric cryptographic key; According to described document, verify the electronic data evidence obtaining report not being tampered, and according to described symmetric cryptographic key, this electronic data evidence obtaining report is decrypted, generation result is saved in to temporary file catalogue evidence obtaining report is shown; Described report boot is deleted temporary file automatically, completes displaying.
CN201310607114.8A 2013-11-25 2013-11-25 A kind of multimedia electronic data forensic report and generation, methods of exhibiting and system Active CN103617402B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310607114.8A CN103617402B (en) 2013-11-25 2013-11-25 A kind of multimedia electronic data forensic report and generation, methods of exhibiting and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310607114.8A CN103617402B (en) 2013-11-25 2013-11-25 A kind of multimedia electronic data forensic report and generation, methods of exhibiting and system

Publications (2)

Publication Number Publication Date
CN103617402A true CN103617402A (en) 2014-03-05
CN103617402B CN103617402B (en) 2016-03-30

Family

ID=50168105

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310607114.8A Active CN103617402B (en) 2013-11-25 2013-11-25 A kind of multimedia electronic data forensic report and generation, methods of exhibiting and system

Country Status (1)

Country Link
CN (1) CN103617402B (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105049581A (en) * 2015-03-31 2015-11-11 杭州猿人数据科技有限公司 Telephone recording evidence processing system and telephone recording evidence processing method
CN105139322A (en) * 2015-07-02 2015-12-09 盘石软件(上海)有限公司 Distributed electronic data evidence collecting system and distributed electronic data evidence collecting method
CN105354773A (en) * 2015-10-28 2016-02-24 重庆邮电大学 System for evidence preservation and verification of traffic accident scene
CN105635257A (en) * 2015-12-24 2016-06-01 福建天泉教育科技有限公司 Method and system for automatically detecting data update
CN106850793A (en) * 2017-01-23 2017-06-13 重庆邮电大学 A kind of method that remote trusted towards Android phone is collected evidence
CN107871063A (en) * 2017-11-16 2018-04-03 王磊 Anti-tamper video and audio recording digital signature method, device and storage medium
CN114065139A (en) * 2020-08-04 2022-02-18 成都鼎桥通信技术有限公司 Multimedia file tamper-proof method and device

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1928842A (en) * 2005-09-07 2007-03-14 创惟科技股份有限公司 Method for protecting enciphered data in high private non-sequential hidden block memory for large data memory device
CN102325139A (en) * 2011-09-14 2012-01-18 福建伊时代信息科技股份有限公司 Electronic document processing method, processing system and verification system
CN102724044A (en) * 2012-07-04 2012-10-10 东方金盾科技有限公司 Electronic evidence verification and preservation method
CN103400083A (en) * 2013-07-08 2013-11-20 福建伊时代信息科技股份有限公司 Method, device and system for protecting electronic evidence

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1928842A (en) * 2005-09-07 2007-03-14 创惟科技股份有限公司 Method for protecting enciphered data in high private non-sequential hidden block memory for large data memory device
CN102325139A (en) * 2011-09-14 2012-01-18 福建伊时代信息科技股份有限公司 Electronic document processing method, processing system and verification system
CN102724044A (en) * 2012-07-04 2012-10-10 东方金盾科技有限公司 Electronic evidence verification and preservation method
CN103400083A (en) * 2013-07-08 2013-11-20 福建伊时代信息科技股份有限公司 Method, device and system for protecting electronic evidence

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105049581A (en) * 2015-03-31 2015-11-11 杭州猿人数据科技有限公司 Telephone recording evidence processing system and telephone recording evidence processing method
CN105049581B (en) * 2015-03-31 2018-05-29 杭州猿人数据科技有限公司 Telephonograph evidence processing system and processing method
CN105139322A (en) * 2015-07-02 2015-12-09 盘石软件(上海)有限公司 Distributed electronic data evidence collecting system and distributed electronic data evidence collecting method
CN105139322B (en) * 2015-07-02 2019-01-25 盘石软件(上海)有限公司 A kind of distributed electronic data evidence obtaining system and method
CN105354773A (en) * 2015-10-28 2016-02-24 重庆邮电大学 System for evidence preservation and verification of traffic accident scene
CN105635257A (en) * 2015-12-24 2016-06-01 福建天泉教育科技有限公司 Method and system for automatically detecting data update
CN106850793A (en) * 2017-01-23 2017-06-13 重庆邮电大学 A kind of method that remote trusted towards Android phone is collected evidence
CN107871063A (en) * 2017-11-16 2018-04-03 王磊 Anti-tamper video and audio recording digital signature method, device and storage medium
CN114065139A (en) * 2020-08-04 2022-02-18 成都鼎桥通信技术有限公司 Multimedia file tamper-proof method and device

Also Published As

Publication number Publication date
CN103617402B (en) 2016-03-30

Similar Documents

Publication Publication Date Title
CN103617402B (en) A kind of multimedia electronic data forensic report and generation, methods of exhibiting and system
EP3710974B1 (en) Method and arrangement for detecting digital content tampering
CN110798315B (en) Data processing method and device based on block chain and terminal
CN113378236B (en) Evidence data online security notarization platform and security method
CN103189872B (en) Safety in networked environment and the effectively method and apparatus of Content Selection
JP2010050760A (en) Content protection apparatus, and content utilization apparatus
CN110958319B (en) Method and device for managing infringement and evidence-based block chain
KR20010041400A (en) Transmitting reviews with digital signatures
US11394538B2 (en) System and method for verifying the no-later-than date-of-existence, data integrity, identity of the recorder, and timestamp of the recording for digital content
CN106557707B (en) Method and system for processing document data
WO2021169530A1 (en) Method, apparatus and device for verifying authenticity of image data
US20110055590A1 (en) Apparatus and method for collecting evidence data
CN105338119A (en) Electronic evidence fixing security system based on cloud storage
CN113411638A (en) Video file playing processing method and device, electronic equipment and storage medium
KR101496318B1 (en) Apparatus and method for providing security in remote digital forensics
WO2012170960A1 (en) Method and apparatus for file assurance
CN107316182A (en) A kind of generation method of electronic contract chain of evidence and generation system
CN115952560B (en) Method, system, equipment and medium for verifying authenticity of electronic archive file based on original handwriting signature
CN115982764A (en) Method, system, device and medium for storing electronic file based on block chain
Garfinkel Providing cryptographic security and evidentiary chain-of-custody with the advanced forensic format, library, and tools
Park et al. A methodology for the decryption of encrypted smartphone backup data on android platform: A case study on the latest samsung smartphone backup system
CN113452526A (en) Electronic document storage and verification method and corresponding device
KR101497067B1 (en) Electric document transfer method and apparatus based digital forensic
CN108900472A (en) The transmission method and device of information
CN110493011B (en) Block chain-based certificate issuing management method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant