CN112671916A - Electronic data evidence obtaining method and edge node - Google Patents
Electronic data evidence obtaining method and edge node Download PDFInfo
- Publication number
- CN112671916A CN112671916A CN202011578441.1A CN202011578441A CN112671916A CN 112671916 A CN112671916 A CN 112671916A CN 202011578441 A CN202011578441 A CN 202011578441A CN 112671916 A CN112671916 A CN 112671916A
- Authority
- CN
- China
- Prior art keywords
- data
- edge node
- cloud platform
- evidence obtaining
- unstructured data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Landscapes
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention discloses an electronic data evidence obtaining method and an edge node, wherein the edge node receives an electronic data evidence obtaining task issued by a cloud platform, the electronic data evidence obtaining task is issued to corresponding evidence obtaining equipment, original data acquired by the evidence obtaining equipment is received, unstructured data in the original data are calculated, an obtained calculation result is gathered to the cloud platform, an edge node is additionally arranged between the cloud platform and the evidence obtaining equipment to form a cloud edge end three-layer framework, even if a backbone network or the cloud platform fails, transmission between edges and ends is not affected, the stability of data transmission is improved, the cost of local construction of the framework is lower than that of the cloud platform and a data center network structure, the construction cost is reduced, the unstructured data in the original data are calculated by edge storage and edge calculation technologies, and the obtained calculation result is gathered to the cloud platform, the user can analyze the calculation result on the cloud platform, and the full application of the unstructured data is realized.
Description
Technical Field
The invention relates to the field of electronic data forensics, in particular to an electronic data forensics method and an edge node.
Background
Electronic data evidence collection goes through three times, belongs to the first generation from 2001 to 2011, and is mainly characterized in that evidence collection is carried out on a single-soldier medium, and data are not gathered. 2012 to 2017 belong to the second generation, and the method is mainly characterized in that a cloud platform is built, so that the electronic data are converged and comprehensively analyzed. At present, the method enters the third generation and is mainly characterized by artificial intelligence application, cloud evidence obtaining, internet of things evidence obtaining and the like. At present, the system is basically a two-layer architecture, namely a cloud and an end, wherein the cloud refers to a cloud platform, and the end refers to electronic evidence obtaining equipment. The evidence data is mainly gathered by structured data, and most of the evidence data is not gathered by unstructured data. The main reason is that the unstructured data has large capacity and the network bandwidth is difficult to support. The capacity of non-mechanization data in electronic equipment is usually 80%, and with the progress of society, the capacity of electronic equipment is larger and larger, and the storage capacity of a mobile phone is usually above 128 GB. If the computer device storage is larger, it is usually several TB.
At present, unstructured data are not fully applied in the field of electronic evidence obtaining, and analyzing and applying unstructured data which represent new values and have rich connotation is not only a new challenge, but also a difficult problem which needs to be solved urgently at present.
Disclosure of Invention
The technical problem to be solved by the invention is as follows: the electronic data forensics method and the edge node are provided, and full application of unstructured data can be achieved.
In order to solve the technical problems, the invention adopts a technical scheme that:
an electronic data forensics method comprising the steps of:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
In order to solve the technical problem, the invention adopts another technical scheme as follows:
an electronic data forensics edge node comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the following steps when executing the computer program:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
The invention has the beneficial effects that: the method comprises the steps of receiving an electronic data evidence obtaining task issued by a cloud platform through an edge node, issuing the electronic data evidence obtaining task to corresponding evidence obtaining equipment, receiving original data acquired by the evidence obtaining equipment, calculating unstructured data in the original data, converging an obtained calculation result to the cloud platform, adding an edge node between the cloud platform and the evidence obtaining equipment to form a cloud edge end three-layer framework, not damaging the original system, only expanding and strengthening the framework in the original system, improving the stability of data transmission, reducing the construction cost due to the fact that the cost of local construction of the framework is lower than that of a cloud platform and a data center network structure even if a backbone network or the cloud platform fails and transmission between edges is not affected, converging the obtained calculation result to the cloud platform, the user can analyze the calculation result on the cloud platform, and the full application of the unstructured data is realized.
Drawings
FIG. 1 is a flow chart of steps in a method of electronic data forensics in accordance with an embodiment of the invention;
FIG. 2 is a schematic structural diagram of an electronic data forensics edge node according to an embodiment of the present invention;
FIG. 3 is a flow chart of a method of electronic data forensics according to an embodiment of the invention;
fig. 4 is a schematic configuration diagram of a cloud-edge three-layer architecture of an electronic data forensics method according to an embodiment of the present invention;
fig. 5 is a functional schematic diagram of a cloud-edge-side three-layer architecture of the electronic data forensics method according to the embodiment of the invention.
Detailed Description
In order to explain technical contents, achieved objects, and effects of the present invention in detail, the following description is made with reference to the accompanying drawings in combination with the embodiments.
Referring to fig. 1, an embodiment of the present invention provides an electronic data forensics method, including:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
From the above description, the beneficial effects of the present invention are: the method comprises the steps of receiving an electronic data evidence obtaining task issued by a cloud platform through an edge node, issuing the electronic data evidence obtaining task to corresponding evidence obtaining equipment, receiving original data acquired by the evidence obtaining equipment, calculating unstructured data in the original data, converging an obtained calculation result to the cloud platform, adding an edge node between the cloud platform and the evidence obtaining equipment to form a cloud edge end three-layer framework, not damaging the original system, only expanding and strengthening the framework in the original system, improving the stability of data transmission, reducing the construction cost due to the fact that the cost of local construction of the framework is lower than that of a cloud platform and a data center network structure even if a backbone network or the cloud platform fails and transmission between edges is not affected, converging the obtained calculation result to the cloud platform, the user can analyze the calculation result on the cloud platform, and the full application of the unstructured data is realized.
Further, the issuing the electronic data forensics task to the corresponding forensics equipment includes:
and the edge node decomposes the electronic data evidence obtaining task into a plurality of subtasks and issues the subtasks to corresponding evidence obtaining equipment according to a preset rule.
According to the description, the edge node decomposes the electronic evidence obtaining task into a plurality of subtasks, and issues the subtasks to the corresponding evidence obtaining equipment according to the preset rule, so that internal arrangement and optimization can be performed on the subtasks, and the timeliness of data processing is improved.
Further, the raw data also includes structured data;
the electronic data forensics method further comprises:
the edge node receives and stores the structured data collected by the evidence obtaining equipment, and the structured data is converged to the cloud platform.
According to the description, due to the facts that the processing time spent on the unstructured data is longer than that spent on the structured data, and the unstructured data is large in capacity, the structured data and the unstructured data are received and processed respectively, bandwidth is saved, timeliness of data processing is improved, the structured data and the unstructured data are stored separately, design and construction of bottom storage are optimized, construction cost of infrastructure is reduced, and the method has the advantage of energy conservation.
Further, the computing the unstructured data by the edge node, and the converging the computing result to the cloud platform includes:
the edge node calculates the unstructured data according to a preset task processing strategy and converges the calculation result to the cloud platform;
the computed result does not include the original unstructured data.
From the above description, it can be known that the global data reaches 163ZB in 2025 year according to prediction, and most of the global data is unstructured data, the data volume is too large, if all the global data are converged to the data center of the cloud platform, the expansion of infrastructure becomes a bottleneck, therefore, only the calculation result obtained by unstructured data calculation is converged to the cloud platform, the original unstructured data is not converged to the cloud platform, the user can perform comprehensive analysis on the cloud platform based on the converged calculation result and the previously converged structured data, and the cloud calculation and the edge calculation are combined, the power cost is only 39% of that of the cloud calculation, which is energy-saving and low-carbon, and by the edge storage and edge calculation technology, the distributed storage and the distributed calculation of the data are realized, that is, the evidence obtaining equipment can be stored nearby, the bandwidth of a backbone network is saved, and the full application of the unstructured data is realized, the potential value of the unstructured data is exerted.
Further, the method also comprises the following steps:
the edge node receives an unstructured data issuing instruction sent by the cloud platform, wherein the unstructured data issuing instruction comprises online preview or download of the unstructured data;
and the edge node executes online operation of the unstructured data to the cloud platform according to the unstructured data issuing instruction, wherein the online operation comprises online preview or uploading of the unstructured data corresponding to the unstructured data issuing instruction.
According to the description, the edge node does not converge the original unstructured data to the cloud platform, when a user comprehensively analyzes the calculation result and the structured data on the cloud platform, the original unstructured data may need to be operated, at this time, the edge node receives an unstructured data issuing instruction, supports the user to preview or download the unstructured data on line, executes on-line preview or upload of the unstructured data to the cloud platform according to the unstructured data issuing instruction, supports the user to perform further edge calculation on the unstructured data, and achieves bidirectional linkage of the cloud platform and the edge node, so that the purpose of processing and applying the unstructured data is achieved, and the potential value of the unstructured data is mined.
Referring to fig. 2, another embodiment of the present invention provides an electronic data forensics edge node, including a memory, a processor, and a computer program stored on the memory and executable on the processor, where the processor executes the computer program to implement the following steps:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
Further, the issuing the electronic data forensics task to the corresponding forensics equipment includes:
and the edge node decomposes the electronic data evidence obtaining task into a plurality of subtasks and issues the subtasks to corresponding evidence obtaining equipment according to a preset rule.
Further, the raw data also includes structured data;
the electronic data forensics method further comprises:
the edge node receives and stores the structured data collected by the evidence obtaining equipment, and the structured data is converged to the cloud platform.
Further, the computing the unstructured data by the edge node, and the converging the computing result to the cloud platform includes:
the edge node calculates the unstructured data according to a preset task processing strategy and converges the calculation result to the cloud platform;
the computed result does not include the original unstructured data.
Further, the method also comprises the following steps:
the edge node receives an unstructured data issuing instruction sent by the cloud platform, wherein the unstructured data issuing instruction comprises online preview or download of the unstructured data;
and the edge node executes online operation of the unstructured data to the cloud platform according to the unstructured data issuing instruction, wherein the online operation comprises online preview or uploading of the unstructured data corresponding to the unstructured data issuing instruction.
The electronic evidence obtaining method and the edge node of the invention can be further extended to the field of electronic evidence obtaining, are also applicable to systems such as data analysis, equipment data acquisition and the like, and are explained by the following specific implementation modes:
example one
Referring to fig. 1 and 3, an electronic evidence obtaining method of the present embodiment includes the steps of:
s1, the edge node receives an electronic data forensics task issued by the cloud platform and issues the electronic data forensics task to corresponding forensics equipment;
specifically, the issuing of the electronic data forensics task to the corresponding forensics equipment includes:
the edge node decomposes the electronic data evidence obtaining task into a plurality of subtasks and issues the subtasks to corresponding evidence obtaining equipment according to a preset rule;
the preset rules comprise file type processing rules, file size processing rules, content element processing rules, file source processing rules, file metadata processing rules, source application type processing rules and the like;
for example, a user initiates an electronic data forensics task on a cloud platform, that is, basic information is firstly input, task processing strategies are configured, the task processing strategies comprise picture processing strategies, audio processing strategies and the like, the picture processing strategies can control whether pictures are collected or not, whether the pictures need face extraction or not, whether only pictures of certain types of applications are processed or not and the like, and finally forensics equipment which needs to be used is selected, wherein the forensics equipment comprises mobile phone forensics, computer forensics, internet of things forensics and the like; the cloud platform issues the electronic data evidence obtaining task to a corresponding edge node according to the locally managed node information and the rules set by the user; the cloud platform can also decompose the electronic data forensics task into a plurality of subtasks and distribute the subtasks to a plurality of edge nodes; the method comprises the steps that an edge node receives an electronic data forensics task issued by a cloud platform, decomposes the electronic data forensics task into a plurality of subtasks, carries out internal arrangement and optimization on the subtasks, for example, the subtasks which are independent from one another can be executed in parallel, and issues the subtasks to corresponding forensics equipment which needs to be used according to rules set by a user;
s2, the edge node receives the original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task;
the raw data comprises unstructured data and structured data;
specifically, the edge node judges the type of the received original data, and executes corresponding operation according to the data type;
if the data is structured data, the edge node receives and stores the structured data acquired by the evidence obtaining equipment, and the structured data is converged to the cloud platform;
for example, after the evidence obtaining equipment receives subtasks issued by edge nodes, data collection is performed through electronic equipment according to a task processing strategy set by a user, the electronic equipment comprises a mobile phone, a computer, an intelligent sound device, an intelligent bracelet and the like, and after the evidence obtaining equipment collects original data, the original data are decomposed into structured data and unstructured data; the evidence obtaining equipment converges the structured data in the evidence obtaining equipment to corresponding edge nodes according to data standards, the edge nodes receive the structured data and then perform local caching, and then converge the structured data to the cloud platform; the cloud platform receives the structured data, updates the state of the corresponding subtask, for example, updates the state of the subtask from a processing state to a completion state, performs data cleaning and data governance on the structured data, and then stores the structured data in the data center, and the user analyzes the structured data through the cloud platform;
if the data is unstructured data, the edge node calculates the unstructured data and converges the calculation result to the cloud platform;
specifically, the calculating the unstructured data by the edge node, and the converging the calculation result to the cloud platform includes:
the edge node calculates the unstructured data according to a preset task processing strategy and converges the calculation result to the cloud platform;
the computed result does not include raw unstructured data;
for example, the evidence obtaining equipment collects unstructured data to corresponding edge nodes by adopting parallel transmission, because the transmission speed of the parallel transmission is high, the transmission time of the unstructured data is reduced, for a mirror image file included in the unstructured data, the evidence obtaining equipment obtains IP (Internet Protocol address) addresses of all edge storage nodes from a cloud platform, sends a routing tracking packet to each edge node, and selects the edge node with the minimum hop number as a target of nearby storage according to a response result, so as to realize the nearby storage; the method comprises the steps that an edge node receives unstructured data, checks and confirms the unstructured data, supports retransmission operation for an abnormal file, calculates the unstructured data through an artificial intelligence engine and a data mining algorithm according to a task processing strategy set by a user, analyzes the task processing strategy based on a rule engine, and schedules a bottom algorithm service and a data processing service to cooperate to complete a calculation task; for example, performing voice Recognition, OCR (Optical Character Recognition) and the like on unstructured data to obtain a calculation result and associated data, converging the calculation result and the associated data to a cloud platform, not converging original unstructured data, sharing the cloud platform in an open service interface manner, and enabling the cloud platform to directly call the original unstructured data on an edge node according to the needs of a service scene to realize functions of displaying, playing and the like on the cloud platform; the cloud platform receives the calculation result and the associated data, updates the state of the corresponding subtask, for example, updates the state of the subtask from a processing state to a completion state, performs data cleaning and data management on the calculation result and the associated data, and stores the calculation result and the associated data in a data center, and the user performs comprehensive analysis on the calculation result, the associated data and the structured data through the cloud platform;
when a cloud platform needs to operate original unstructured data, the edge node receives an unstructured data issuing instruction sent by the cloud platform, wherein the unstructured data issuing instruction comprises online preview or download of the unstructured data;
the edge node executes online operation of the unstructured data to the cloud platform according to the unstructured data issuing instruction, wherein the online operation comprises online preview or uploading of the unstructured data corresponding to the unstructured data issuing instruction;
for example, when a user needs to perform online preview or download of unstructured data corresponding to a calculation result and associated data in the process of comprehensive analysis, the edge node receives an unstructured data issuing instruction sent by the cloud platform, and supports online preview or download of corresponding unstructured data through a streaming media service; when a user needs to perform further edge calculation on the unstructured data previewed or downloaded on line, for example, searching a picture, classifying pictures and the like, the edge node receives a calculation task issued by the cloud platform, and then converges a calculation result and associated data to the cloud platform.
Example two
Referring to fig. 4 and 5, the present embodiment further defines how to construct the cloud-edge three-layer architecture and how to configure the functions of the cloud-edge layers before step S1 based on the first embodiment:
constructing a cloud edge end three-layer framework;
specifically, as shown in fig. 4, edge nodes are added in a cloud platform and evidence obtaining equipment to realize a cloud edge-end three-layer architecture, the edge nodes are deployed in an electronic data evidence obtaining laboratory, one cloud platform manages a plurality of edge nodes, one edge node manages a plurality of evidence obtaining equipment, the cloud platform is connected with the edge nodes by adopting a backbone network, and the edge nodes are connected with the evidence obtaining equipment by adopting a gigabit local area network, so that bandwidth capacity is ensured;
configuring the functions of each layer of the cloud edge end;
as shown in fig. 5, the cloud platform adopts technologies such as big data, artificial intelligence, an edge storage frame, an edge computing frame, and the like, has capabilities such as data storage and data analysis, and simultaneously supports node management, edge storage management, and edge computing management, and realizes comprehensive management and analysis based on a big data center; the node management comprises the steps of supporting addition, modification, deletion, online and offline of edge nodes, realizing node state detection by regularly sending heartbeat messages through the edge nodes, automatically generating a topological structure through protocols such as CDP (Cisco Discovery Protocol), LLDP (Link Layer Discovery Protocol), OSPF (Open Shortest Path First), STP (spanning Tree Protocol), ARP (Address Resolution Protocol) and the like, supporting network topological management, managing, decomposing, optimizing, issuing and the like of tasks, and realizing distributed cooperative processing; the edge storage management comprises the steps of building an integrated edge storage system, managing the capacity of each node, supporting the indexing, reading, writing, deleting, backing up and migrating of files on the edge nodes, and realizing distributed storage; the edge computing management comprises the steps of constructing an integrated edge computing system, and performing task scheduling, resource management and cooperative management on edge nodes to realize distributed cooperative computing; the data center on the cloud platform gathers all the structured data, does not store original unstructured data, and integrates an artificial intelligence technology to realize intelligent processing on the structured data; the cloud platform supports bidirectional linkage with the edge nodes;
the edge nodes adopt technologies such as big data, artificial intelligence, an edge storage frame, an edge computing frame and the like, adopt related technologies of an intelligent gateway, link up a cloud platform and evidence obtaining equipment, support the capabilities of edge storage and edge computing, support the capabilities of data retrieval, data comparison, data conversion, data analysis, data reading and writing, data authentication, data migration, data preview, data storage and the like, simultaneously support the life cycle management of files, and regularly clear failed or expired files; the edge computing capability is enhanced by integrating an artificial intelligence technology, and the intelligent processing of unstructured data is realized; the edge nodes and the equipment support bidirectional linkage, and simultaneously support capabilities of parallel transmission, breakpoint transmission, encryption transmission and the like;
the evidence obtaining equipment receives the instruction of the edge node, and data are collected, analyzed and converged through the electronic equipment.
EXAMPLE III
Referring to fig. 2, an electronic data forensics edge node includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor executes the computer program to implement the steps of the first embodiment or the second embodiment.
In summary, according to the electronic data forensics method and the edge node provided by the invention, the edge node receives an electronic data forensics task issued by a cloud platform, decomposes the electronic data forensics task into a plurality of subtasks, issues the subtasks to corresponding forensics equipment according to a preset rule, performs cooperative processing on the subtasks, improves timeliness of data processing, receives and stores structural data acquired by forensics equipment, converges the structural data to the cloud platform, receives unstructured data and performs calculation according to a preset task processing strategy, converges a calculation result to the cloud platform, and the calculation result does not include original unstructured data, thereby realizing separate storage of the structural data and the unstructured data, realizing integrated distributed storage and distributed calculation, reducing data transmission, optimizing design and construction of bottom storage, and reducing construction cost of infrastructure, the method has the characteristic of energy conservation, the edge node receives an unstructured data issuing instruction sent by the cloud platform, the unstructured data issuing instruction comprises online preview or downloading of the unstructured data, online operation of the unstructured data is executed to the cloud platform according to the unstructured data issuing instruction, the unstructured data is previewed or uploaded online, bidirectional linkage between the cloud and the edge and between the edge and the end is achieved, full application of the unstructured data is achieved, and potential value of the unstructured data is mined.
The above description is only an embodiment of the present invention, and not intended to limit the scope of the present invention, and all equivalent changes made by using the contents of the present specification and the drawings, or applied directly or indirectly to the related technical fields, are included in the scope of the present invention.
Claims (10)
1. An electronic data forensics method, comprising the steps of:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
2. The electronic data forensics method according to claim 1, wherein the issuing of the electronic data forensics task to the corresponding forensics equipment comprises:
and the edge node decomposes the electronic data evidence obtaining task into a plurality of subtasks and issues the subtasks to corresponding evidence obtaining equipment according to a preset rule.
3. A method of electronic data forensics according to claim 1, wherein the raw data further comprises structured data;
the electronic data forensics method further comprises:
the edge node receives and stores the structured data collected by the evidence obtaining equipment, and the structured data is converged to the cloud platform.
4. The electronic data forensics method of claim 1, wherein the edge node calculates the unstructured data, and wherein aggregating the calculation results to the cloud platform comprises:
the edge node calculates the unstructured data according to a preset task processing strategy and converges the calculation result to the cloud platform;
the computed result does not include the original unstructured data.
5. An electronic data forensics method according to any one of claims 1 to 4, further comprising the step of:
the edge node receives an unstructured data issuing instruction sent by the cloud platform, wherein the unstructured data issuing instruction comprises online preview or download of the unstructured data;
and the edge node executes online operation of the unstructured data to the cloud platform according to the unstructured data issuing instruction, wherein the online operation comprises online preview or uploading of the unstructured data corresponding to the unstructured data issuing instruction.
6. An electronic data forensics edge node comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, wherein the processor when executing the computer program implements the steps of:
the method comprises the steps that an edge node receives an electronic data evidence obtaining task issued by a cloud platform and issues the electronic data evidence obtaining task to corresponding evidence obtaining equipment;
the edge node receives original data collected by the evidence obtaining equipment according to the electronic data evidence obtaining task, wherein the original data comprises unstructured data;
and the edge node calculates the unstructured data and converges the calculation result to the cloud platform.
7. The electronic data forensics edge node according to claim 6, wherein the issuing of the electronic data forensics task to the corresponding forensics equipment comprises:
and the edge node decomposes the electronic data evidence obtaining task into a plurality of subtasks and issues the subtasks to corresponding evidence obtaining equipment according to a preset rule.
8. An electronic data forensics edge node according to claim 6, wherein the raw data further comprises structured data;
the electronic data forensics method further comprises:
the edge node receives and stores the structured data collected by the evidence obtaining equipment, and the structured data is converged to the cloud platform.
9. The electronic data forensics edge node of claim 6, wherein the edge node computes the unstructured data, and wherein aggregating the computation results to the cloud platform comprises:
the edge node calculates the unstructured data according to a preset task processing strategy and converges the calculation result to the cloud platform;
the computed result does not include the original unstructured data.
10. An electronic data forensics edge node according to any one of claims 6 to 9, further comprising the steps of:
the edge node receives an unstructured data issuing instruction sent by the cloud platform, wherein the unstructured data issuing instruction comprises online preview or download of the unstructured data;
and the edge node executes online operation of the unstructured data to the cloud platform according to the unstructured data issuing instruction, wherein the online operation comprises online preview or uploading of the unstructured data corresponding to the unstructured data issuing instruction.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011578441.1A CN112671916B (en) | 2020-12-28 | 2020-12-28 | Electronic data evidence obtaining method and edge node |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011578441.1A CN112671916B (en) | 2020-12-28 | 2020-12-28 | Electronic data evidence obtaining method and edge node |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112671916A true CN112671916A (en) | 2021-04-16 |
| CN112671916B CN112671916B (en) | 2023-04-07 |
Family
ID=75410663
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011578441.1A Active CN112671916B (en) | 2020-12-28 | 2020-12-28 | Electronic data evidence obtaining method and edge node |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112671916B (en) |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103152352A (en) * | 2013-03-15 | 2013-06-12 | 北京邮电大学 | Perfect information security and forensics monitoring method and system based on cloud computing environment |
| CN208890843U (en) * | 2018-10-26 | 2019-05-21 | 上海方融科技有限责任公司 | A kind of edge calculations system based on mist node |
| US20190392328A1 (en) * | 2018-06-25 | 2019-12-26 | International Business Machines Corporation | Cognitive computing systems and services utilizing internet of things environment |
| CN111159165A (en) * | 2019-12-06 | 2020-05-15 | 国网安徽省电力有限公司淮南供电公司 | Electric power underground low-power-consumption edge computing system and method based on cloud platform |
| CN111539465A (en) * | 2020-04-16 | 2020-08-14 | 华北电力大学 | Internet of things unstructured big data analysis algorithm based on machine learning |
| CN111552440A (en) * | 2020-04-26 | 2020-08-18 | 全球能源互联网研究院有限公司 | Cloud-edge-end data synchronization method for power internet of things |
| CN111708667A (en) * | 2020-05-29 | 2020-09-25 | 北京赛博云睿智能科技有限公司 | Business edge calculation method and system |
| CN111901173A (en) * | 2020-07-30 | 2020-11-06 | 山东超越数控电子股份有限公司 | Cloud edge cooperative system construction method, device, equipment and readable medium |
-
2020
- 2020-12-28 CN CN202011578441.1A patent/CN112671916B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103152352A (en) * | 2013-03-15 | 2013-06-12 | 北京邮电大学 | Perfect information security and forensics monitoring method and system based on cloud computing environment |
| US20190392328A1 (en) * | 2018-06-25 | 2019-12-26 | International Business Machines Corporation | Cognitive computing systems and services utilizing internet of things environment |
| CN208890843U (en) * | 2018-10-26 | 2019-05-21 | 上海方融科技有限责任公司 | A kind of edge calculations system based on mist node |
| CN111159165A (en) * | 2019-12-06 | 2020-05-15 | 国网安徽省电力有限公司淮南供电公司 | Electric power underground low-power-consumption edge computing system and method based on cloud platform |
| CN111539465A (en) * | 2020-04-16 | 2020-08-14 | 华北电力大学 | Internet of things unstructured big data analysis algorithm based on machine learning |
| CN111552440A (en) * | 2020-04-26 | 2020-08-18 | 全球能源互联网研究院有限公司 | Cloud-edge-end data synchronization method for power internet of things |
| CN111708667A (en) * | 2020-05-29 | 2020-09-25 | 北京赛博云睿智能科技有限公司 | Business edge calculation method and system |
| CN111901173A (en) * | 2020-07-30 | 2020-11-06 | 山东超越数控电子股份有限公司 | Cloud edge cooperative system construction method, device, equipment and readable medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112671916B (en) | 2023-04-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111131379B (en) | Distributed flow acquisition system and edge calculation method | |
| CN113726846B (en) | Edge cloud system, resource scheduling method, equipment and storage medium | |
| US20160357424A1 (en) | Collapsing and placement of applications | |
| CN113949707B (en) | OpenResty and K8S-based container cloud service discovery and load balancing method | |
| CN1905512A (en) | Monitoring and analyzing system for opening shortest path priority route protocol and working method | |
| CN103916479B (en) | Cloud synchronous local area network accelerating system based on working group document | |
| CN103761309A (en) | Operation data processing method and system | |
| CN101127783A (en) | A website buffering method and device | |
| US10826803B2 (en) | Mechanism for facilitating efficient policy updates | |
| Dautov et al. | Pushing intelligence to the edge with a stream processing architecture | |
| CN111064591B (en) | Data aggregation method, device, equipment, storage medium and system | |
| CN111338893A (en) | Process log processing method and device, computer equipment and storage medium | |
| CN114265680A (en) | Mass data processing method and device, electronic equipment and storage medium | |
| CN115348637A (en) | Network topology structure optimization method and device, storage medium and electronic equipment | |
| CN102026228A (en) | Statistical method and equipment for communication network performance data | |
| CN113382071B (en) | Link creation method and device based on hybrid cloud architecture | |
| CN102624932A (en) | Index-based remote cloud data synchronizing method | |
| CN117751567A (en) | Dynamic process distribution for utility communication networks | |
| CN114490021A (en) | Cloud edge coordination system and method for Internet of things edge computing | |
| CN112671916B (en) | Electronic data evidence obtaining method and edge node | |
| Rachadi et al. | Self avoiding paths routing algorithm in scale-free networks | |
| CN117194562A (en) | Data synchronization method and device, electronic equipment and computer readable medium | |
| CN103368770A (en) | Gateway level topology-based self-adaptive ALM overlay network constructing and maintaining method | |
| CN117042026A (en) | Business visualization model construction method, device, equipment, medium and program product | |
| Ou et al. | Research on network performance optimization technology based on cloud-edge collaborative architecture |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |