计算机记录认证及取证的规范化问题研究

Research On the Standardization of Computer Record Evaluation and Obtaining Evidence

伴随计算机的普及应用,记载信息的方式已逐渐从文字记录转为以日志、电子文件、电子表格、电子邮件等形式存储的数字信息。与此同时,数字复原技术和计算机取证活动也应运而生。一旦这些数据得以重现,其记载内容可被用于数据的复原、释明计算机历史操作记录,在法庭中用做证据证明案件事实,等等。在如何界定计算机记录的要领和计算机记录认证的研究方面,美国司法机构现已积累了许多经验,我国应借鉴美国的做法,实现计算机取证程序规范化,确定取证人员准入规范和日常考核规范,制定计算机取证的工具标准。

The form of recording information has gradually become into the forms of digital data, such as log, electronic file, excel and email. Once retrieved, the data can be used to restore the information, to show the history of a computer operation record, and be used as evidence in the court to prove the truth of a case. We should use the experience of the U.S.A. for reference, standardize the procedure of obtaining evidence with computer, set the regulations on permitting the person to take evidence and the criteria on taking evidence with computer.