A Raw Data Based Fixing Method For Trusted Digital Evidence

Digital forensics has become an important technical method of enforcing legal power against information crime.However,the research on digital forensics has been focusing on the acquisition and analysis of digital evidence for a long time while there was little corresponding argument for the credibility and validity of digital evidence.Since inappropriate digital forensics process would affect credibility of digital evidence,digital evidence needs to be fixed.To solve the problem lacking of credibility in traditional forensics,this paper puts forward the concept of raw data,meaning 'data about evidence',designs the standard system of the raw data and gives the quality evaluation method of the original data on the basis of the concept of Trust Forensics.Because different cases have different emphases of digital evidence,this paper gives the quality assessment method of raw data to summarize the most suitable raw data combination.After that,this paper introduces the idea of raw data based evidence fixing method with its matching trusted verification method and trusted storage solutions.The method uses multiple roles in forensic scene,combined with GPS positioning,fingerprint identification and electronic signature technology to achieve trusted digital evidence fix.At last,this paper shows the raw data based evidence fixing system on ARM + Linux hardware environment.The feasibility of the proposed fixed system is proved from the practical application through the experiment.