As a wearable device,smart watches are easy to use and fully functional,which has an important role in the health monitoring.The monitoring data of smart watches can be applied to electronic forensics,to help investigators analyze individual characteristics,and to provide effective evidence or clues for the detection of cases.However,as the smart watches are electronic products increasing rapidly nearly two years,there is no data extraction and analysis equipment of smart watch.That limits the widely application of smart watch data in the field of electronic forensics.Therefore,the purpose of this paper is to explore the method of extraction and analysis of smart watch data and to carry out the experimental research of character analysis of smart watch data.It can provide reference for forensic analysis of electronic forensics.This article mainly uses the literature research method and the experimental research method.The literature research method is to read the relevant literature about the principle of movement,health monitoring of smart watches and the development of the status at home and abroad.The experimental research method is to design experimental program and to carry out the extraction and analysis of smart watches by using FL-900 mobile phone forensic tower,Oxygen Forensic Analyst and IBM SPSS Statistics 22.0.According to the user tend of smart watches,choose 25 subjects aged20 to 30 years old,each wearing a watch about a week.Character analysis experiments based on smart watch data lasts 7 months.Experiment 1 is the basic research experiment to ensure the method of extraction and analytical and the storage location of contents of smart watches.Experiment 2 is to find the difference between awake state and sleep state,awake state: heart rate is unstable,calorie consumption in most of 8 to 15,coefficient of variation of heart rate more than 10%;sleep state: heart rate is horizontal in a period,calorie consumption in most of 4 to 8,coefficient of variation of heart rate below 10%.Experiment 3 is to find the difference between drinking state and normal state,heart rate of drinking state is higher than normal,the average heart rate is about 10% higher than normal,the coefficient of variation is less than about 30% of normal state.Experiment4 is to find the difference between motion state and normal state,before and after motion state,the value of steps,calories and heart rate is relatively small;in the movement,the value of steps,calories and heart rate is larger.When the value of heart rate and steps is more than 100 and above the maximum proportion at the same time,it is considered to be in motion or fitness state.Through the research of basic status,it can effectively grasp the status of smart watch users when the crime occurs.It can provide a large number of electronic data support for the crime scene reproduces. |