METHOD AND SYSTEM FOR DIGITAL EVIDENCE FIXING AND NETWORK FORENSICS ON BASIS OF MEMORY FORENSICS AND BLOCKCHAIN - SHANDONG COMPUTER SCIENCE CENTER NAT SUPERCOMPUTING CENTER IN JINAN

Title:

METHOD AND SYSTEM FOR DIGITAL EVIDENCE FIXING AND NETWORK FORENSICS ON BASIS OF MEMORY FORENSICS AND BLOCKCHAIN

Document Type and Number:

WIPO Patent Application WO/2020/249112

Kind Code:

A1

Abstract:

A method and system for digital evidence fixing and network forensics on the basis of memory forensics and a blockchain. The method comprises: a digital evidence fixing terminal downloading a credible forensic tool by means of a blockchain network (S101); verifying the legitimacy of executable codes of the forensic tool (S102); running the forensic tool to obtain digital data, generating an operation log, acquiring computer memory information by using the memory forensics technique and performing evidence fixing (S103); generating a hash value and uploading the same to the blockchain network, and receiving a returned corresponding blockchain address (S104); sending the address to a judicial expertise unit terminal; the judicial expertise unit terminal receiving the blockchain address sent by the digital evidence fixing terminal (S201); querying to obtain information on the blockchain and verifying the legitimacy thereof (S202); analyzing the memory information by using the memory forensics technique, extracting a system state when the digital evidence is obtained and verifying the consistency thereof (S203); determining, by using the memory analysis, whether the forensic tool has been hooked or injected when running, and verifying the reliability of the operating environment thereof (S204); and generating a judicial expertise report (S205).

Inventors:

WANG LIANHAI (CN)
ZHANG SHUHUI (CN)

Application Number:

PCT/CN2020/095945

Publication Date:

December 17, 2020

Filing Date:

June 12, 2020

Export Citation:

Click for automatic bibliography generation Help

Assignee:

SHANDONG COMPUTER SCIENCE CENTER NAT SUPERCOMPUTING CENTER IN JINAN (CN)

International Classes:

G06Q50/18

Foreign References:

CN110232645A	2019-09-13
CN109102437A	2018-12-28
CN108924151A	2018-11-30
CN107948736A	2018-04-20
CN109344635A	2019-02-15

Attorney, Agent or Firm:

JINAN SHENGDA INTELLECTUAL PROPERTY AGENCY CO., LTD. (CN)

Download PDF:

View/Download PDF PDF Help

Previous Patent: METHOD AND KIT FOR DETECTING GENOME EDITING AND APPLICATION THEREOF

Next Patent: LOW-CHROMIUM CORROSION-RESISTANT HIGH-STRENGTH POLYCRYSTALLINE HIGH-TEMPERATURE ALLOY AND PREPARATIO...