CN104156330A - Method for extracting machine body data of Apple device - Google Patents

Method for extracting machine body data of Apple device Download PDF

Info

Publication number
CN104156330A
CN104156330A CN201410431810.2A CN201410431810A CN104156330A CN 104156330 A CN104156330 A CN 104156330A CN 201410431810 A CN201410431810 A CN 201410431810A CN 104156330 A CN104156330 A CN 104156330A
Authority
CN
China
Prior art keywords
data
extracting
mobile phone
apple device
device body
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201410431810.2A
Other languages
Chinese (zh)
Inventor
梁效宁
张佳强
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Original Assignee
SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd filed Critical SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Priority to CN201410431810.2A priority Critical patent/CN104156330A/en
Publication of CN104156330A publication Critical patent/CN104156330A/en
Pending legal-status Critical Current

Links

Landscapes

  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephone Function (AREA)

Abstract

The invention discloses a method for extracting machine body data of an Apple device. The method includes the steps of firstly, having access to a cell phone; secondly, selecting an application where data need to be extracted; thirdly, starting service of a cell phone end; fourthly, starting service of a device end; fifthly, transmitting the data; sixthly, obtaining, analyzing and monitoring the data; seventhly, writing the data in a memory. By means of the method, the machine body data of the Apple device can be extracted overall or selectively, the data extracting speed is increased due to the two independent reading-writing threads, the data are monitored and displayed in the extracting process, private loss and enterprise loss caused by data loss are reduced, powerful electronic evidence is extracted, and the difficulty of detecting a criminal case is lowered for the judicial office.

Description

A kind of method of extracting apple device body data
Technical field
The present invention relates to field of information security technology, particularly a kind of method of extracting apple device body data.
Background technology
Apple equipment has SOS, independent operating space, third party software can be installed voluntarily, expanded function is powerful, inseparable with people's life, data in mobile phone information wherein relates to work, study, life, contacts, finance, leisure, amusement, emotion of people etc., is very precious intangible asset to individual or company.The data of apple device storage can also be served as the one of electronic material evidence simultaneously, help the judicial departments such as public security, procuratorial work and administrative law-enforcement departments' evidence obtaining to solve a case.
Although there are on the market some apple device datas to extract software, cannot carry out data extraction for single program, also cannot monitor and show extracting data; Extracting method is divided into two step: i, reading out data conventionally at present; Ii, write hard disk; Etc. then after to be written completing, the above step of recycle completes the extraction mirror image of all data; This method extraction rate is slow.
Summary of the invention
The defect that the present invention is directed to prior art provides a kind of method of extracting apple device body data, can effectively solve the problem that above-mentioned prior art exists.
To achieve these goals, the technical solution used in the present invention is:
A kind of method of extracting apple device body data is provided, has comprised the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
As preferably, in described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
As preferably, in described step 6, obtain data, analyze data, monitored data is three-channel parallel pattern.
As preferably, this method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing works alone.
As preferably, if extract and interrupt in described step 6, the prompting that monitoring can be interrupted.
beneficial effect
Compared with prior art innovative point of the present invention is: can all extract or screen extraction apple device body data, independently read and write thread for two and accelerate data extraction rate, and in leaching process, carry out data decryptor and displaying, reduce individual and company's factor data and lose the loss bringing, extract strong electronic evidence, reduce the difficulty of juridical authorities's clear up a criminal case.
Brief description of the drawings
Fig. 1 is the process flow diagram of the embodiment of the present invention.
Embodiment
In order to describe the specific embodiment of the present invention in detail, below in conjunction with accompanying drawing with explanation:
For overcoming the above problems, the present invention also provides a kind of method of extracting apple device body data, comprises the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title, the application domain of for example QQ is com.tencent.mqq, and application domain title is served and obtained by DeviceLookupApplications, opens the service of all application domains by itunes agreement;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
In described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
In described step 6, obtaining data, analyzing data, monitored data is three-channel parallel pattern.
Extract interruption, the prompting that monitoring can be interrupted if encounter because of carelessness data line in described step 6.
Expend the A time at reading out data in the prior art, data writing to storer expends the B time, and so total extraction is consuming time is N*(A+B); This method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing is independent works simultaneously, thus the time of having saved N*B, the extraction data time of raising single device.
More than describe and set forth detail to fully understand the present invention, implement but the present invention can also adopt other to be different from this describing mode.Therefore, the present invention is not limited to above disclosed specific embodiment.

Claims (5)

1. the method for kind of extraction apple device body data, is characterized in that comprising the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
2. a kind of method of extracting apple device body data according to claim 1, it is characterized in that: in described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
3. a kind of method of extracting apple device body data according to claim 1, is characterized in that: in described step 6, obtaining data, analyzing data, monitored data is three-channel parallel pattern.
4. a kind of method of extracting apple device body data according to claim 1, is characterized in that: described method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing works alone.
5. a kind of method of extracting apple device body data according to claim 1, is characterized in that: if extract and interrupt in described step 6, the prompting that monitoring can be interrupted.
CN201410431810.2A 2014-08-29 2014-08-29 Method for extracting machine body data of Apple device Pending CN104156330A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410431810.2A CN104156330A (en) 2014-08-29 2014-08-29 Method for extracting machine body data of Apple device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410431810.2A CN104156330A (en) 2014-08-29 2014-08-29 Method for extracting machine body data of Apple device

Publications (1)

Publication Number Publication Date
CN104156330A true CN104156330A (en) 2014-11-19

Family

ID=51881835

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410431810.2A Pending CN104156330A (en) 2014-08-29 2014-08-29 Method for extracting machine body data of Apple device

Country Status (1)

Country Link
CN (1) CN104156330A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106294632A (en) * 2016-08-02 2017-01-04 四川秘无痕信息安全技术有限责任公司 A kind of extracting method for hundred degree of map navigation path of iPhone

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2005096590A1 (en) * 2004-03-31 2005-10-13 British Telecommunications Public Limited Company Method and apparatus for communicating data between computer devices
CN103970700A (en) * 2014-05-28 2014-08-06 四川效率源信息安全技术有限责任公司 Device and method for simultaneously recovering and extracting data of multiple pieces of Android equipment

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2005096590A1 (en) * 2004-03-31 2005-10-13 British Telecommunications Public Limited Company Method and apparatus for communicating data between computer devices
CN103970700A (en) * 2014-05-28 2014-08-06 四川效率源信息安全技术有限责任公司 Device and method for simultaneously recovering and extracting data of multiple pieces of Android equipment

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
汤伟 等: "一种基于iOS平台微信取证分析方法", 《软件产业与工程》 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106294632A (en) * 2016-08-02 2017-01-04 四川秘无痕信息安全技术有限责任公司 A kind of extracting method for hundred degree of map navigation path of iPhone
CN106294632B (en) * 2016-08-02 2019-09-10 四川秘无痕科技有限责任公司 A kind of extracting method for iPhone Baidu map guidance path

Similar Documents

Publication Publication Date Title
US10637674B2 (en) System and method for real-time decoding and monitoring for encrypted instant messaging and other information exchange applications
CN102567496B (en) The bookmark of conference context
CN109214290A (en) A kind of shops's client management method and device based on recognition of face
CN101938568B (en) Method, system and mobile terminal for positioning information
US20140279061A1 (en) Social Media Branding
CN104038630A (en) Speech processing method and device
CN108804299A (en) Application exception processing method and processing device
CN103247290A (en) Communication device and control method thereof
CN104484116A (en) Information input method and information input device
CN103645825A (en) Message processing method and device
US9451423B2 (en) Method and apparatus for recording information during a call
CN103607512A (en) Memo reminding method and terminal
CN105139698A (en) Information input method and device for finger reader
CN108447509A (en) A kind of method and apparatus generating multimedia file
CN103500158A (en) Method and device for annotating electronic document
CN103455546B (en) For setting up the method and system of profile for activity and behavior
CN107562356B (en) Fingerprint identification positioning method and device, storage medium and electronic equipment
CN103793313A (en) Fault recording method and system for mobile terminal
US20160154545A1 (en) Electronic device and method for managing and displaying application icons
CN104156430A (en) Device and method for fast extracting Android mobile phone data
CN104156330A (en) Method for extracting machine body data of Apple device
US9008428B2 (en) Efficient verification or disambiguation of character recognition results
CN103220390A (en) Method and terminal for marking newest contact ways of contacts
CN104102411A (en) Text editing method and text editing device
CN110490101A (en) A kind of picture intercept method, device and computer storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20141119

WD01 Invention patent application deemed withdrawn after publication