一种基于计算机取证的信息一致性方案

Message Integrity Scheme on Computer Forensics

计算机数据自身的脆弱性,使计算机取证信息的一致性问题成为计算机证据鉴定过程中的关键所在。该文在计算机取证的基础上,运用DSA签名机制,提出了一种证明计算机证据完整性的一致性方案。该方案能够在计算机系统运行过程中,实时、安全地转移所获取的取证信息,并进行证据固定,以保证其完整性。在基于某些密码学假设的前提下,证明了方案的安全性。

The frangibility of computer data leads the integrity problem for computer forensics into the issue of computer evidence identification. How to efficiently identify computer evidence with their original state is a fundamental problem. An integrity scheme based on computer forensics and DSA signature is proposed to testify to the integrity of computer evidence. The scheme ensures the integrity of computer evidence, transfers them to another safe room and signs them in real-time. Based on some cryptographic assumptions, the security of the scheme is also proved.