Remote credible evidence obtaining method for Android mobile phone

Abstract

The invention relates to a remote credible evidence obtaining method for an Android mobile phone, and belongs to the field of evidence obtaining of electronic data of smart phones. The method comprises the following steps: firstly, analyzing and extracting data as much as possible from the Android mobile phone, then remotely transmitting the extracted data to a PC server; and receiving the transmitted data by the PC server, performing hash value verification on each received data file, and comparing the received data file with the data prior to transmission to verify the integrity of the data. Meanwhile, in order to prevent trace once the evidence is stolen, an evidence supervision chain method is realized. The remote credible evidence obtaining method provided by the invention has the advantages that, non professional personnel can obtain evidence by a remote calling mechanism, the instantaneity of the electronic data is guaranteed, the loss of important data is prevented, and meanwhile an evidence supervision mechanism is adopted in a remote data transmission process to ensure that the data received by the PC server are original data, thereby ensuring the validity and non repudiation of the electronic evidence.

Description

Technical field [0001] The invention belongs to the field of smart phone electronic data forensics, and relates to a remote trusted forensics method for Android phones. Background technique [0002] With the development of the Internet, the popularity of smart phones has penetrated into people’s daily lives. People cannot do without it in work or life. People can use it to chat, shop, manage personal information, and send Weibo. Wait, it is obvious that smartphones are playing the role of small computers in everyone's minds. While smartphones bring convenience to people, some criminals use them as tools for high-tech crimes. Therefore, for public security departments, the data stored in mobile phones is used as important evidence for detecting cases, usually in smartphones. The text messages, address book, call records, Internet records, chat records of instant messaging tools (such as QQ, WeChat, etc.), traces of third-party applications (such as Alipay, Baidu Maps), etc. may r...

AI Technical Summary

Problems solved by technology

[0004] In local forensics, there is a premise that the smartphone device must be transferred to a specialized judicial appraisal agency for specialized appraisal personnel to extract mobile phone data, but in the long-distance transportation process, not only waste of manpower and material resources, but most importantly violated The real-time principle of mobile phone forensics has caused the loss of important data in transit

However, some research institutes that use remote forensics extract less data, and remote SMS manipulation can easily cause changes to mobile phone data, and at the same time, the evidence is not well preserved during the transmission process.

Images