数据恢复在电子数据取证与司法鉴定中的应用

Application of data recovery in the electronic data forensics and judicial identification

在对电子数据恢复取证与司法鉴定应用现状进行分析的基础上,提出了一种电子数据恢复取证与司法鉴定模型,通过在电子数据恢复流程中实施多人数字签名、流程监管、介质镜像和哈希校验,提高电子数据在诉讼案件中的可采信力、证明力和法律效力.模型针对数据恢复介质毁坏的不同情况,有针对性地分别利用文件定位算法、文件特征字算法、文档碎片重组算法进行精准、高效的电子数据恢复取证与司法鉴定.实验结果表明,该模型在保证正确率的基础上,具有良好的工作效率.

On the base of analyzing the present situation of application of electronic recovery forensics and the judicial Identification, a model of electronic data recovery forensics and judicial identification was suqqested;digital signature by many people, process monitoring, media mirror and Hash authentication were implemented in the data recovery process to improve admissible stress,probational force and I.egal effect of the electronic data in the lawsuit. Aiming at different destroyed situation of data recovery medium, using the file location algorithm, file character code algorithm,document fragment reassembly algorithm for electronic data,the model accurate, efficient recovery of electronic data for forensics and judicial identification could be achieved. The experimental results showed that the model had a good work efficiency on the basis of accuracy.