CN114022117A

CN114022117A - Method for online calling electronic evidence based on Hongmon cooperative cloud platform

Info

Publication number: CN114022117A
Application number: CN202111302477.1A
Authority: CN
Inventors: 牛皓; 李忠; 刘勇; 洪隽; 王向东
Original assignee: Shenzhen Market Inspection Bureau; Shenzhen Daheng Data Security Technology Co ltd
Current assignee: Shenzhen Market Inspection Bureau; Shenzhen Daheng Data Security Technology Co ltd
Priority date: 2021-11-04
Filing date: 2021-11-04
Publication date: 2022-02-08

Abstract

The application provides a method for calling electronic evidence on line based on a Hongmon cooperative cloud platform. When receiving a certificate transferring application initiated by the certificate transferring initiating terminal, the server sends the certificate transferring application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server; the server determines a case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; and when a forensics application is received, the server sends the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application. By carrying out mirror image copying and extracting on line, no uniform personnel need to go to the site, so that the manpower and material resources are saved, the process is efficient and quick, the possibility of data evidence modification, deletion and loss is reduced, the data is truly restored, and the job-performing risk of the evidence-obtaining personnel is removed; and the data evidence has high legal effectiveness and high right maintaining speed.

Description

Method for online calling electronic evidence based on Hongmon cooperative cloud platform

Technical Field

The application relates to the technical field of electronic evidences, in particular to a method for calling electronic evidences on line based on a Hongmon cooperative cloud platform.

Background

With the trend of internet development becoming more and more intense, the legal process can not follow the high-speed development of new technology and new state, the internet disorderly phenomena such as network illegal crimes, network infringement and the like become more and more prominent, the infringement is easy, and the right maintenance is difficult to become the phenomenon grade growth. Based on the characteristics of virtualization, evadibility, diversity and immediacy of internet data, an administrative agency needs to collect evidence of illegal information in the law enforcement process, but because network right is subject to various uncertain factors such as difficulty in identifying infringement behaviors, complexity and secrecy of infringement bodies, wide and rapid infringement effect range, poor positioning in judicial jurisdiction, incapability of self-right maintenance and the like, the legality of network-collected evidence information is difficult to guarantee, the legal effectiveness is affected, and the case handling efficiency is affected.

In the past, the evidence regulation mode usually takes server extraction and data copying as main parts, and the server extraction is used for law enforcement personnel to carry out data evidence preservation extraction on an entity server on site.

However, during law enforcement, the evidence obtaining personnel need to go to the cloud manufacturer site to copy and extract the data evidence in a mirror image mode by using the hard disk, and all the evidence needs to go to the site, so that manpower and material resources are consumed, the process is long, the possibility of modifying, deleting and losing the data evidence also exists, the legal effectiveness is directly flawed, and the whole evidence obtaining process also has certain job risks for the evidence obtaining personnel.

Disclosure of Invention

In view of the problems, the present application is directed to providing a method for online electronic evidence based on a hong meng coordination cloud platform, which overcomes or at least partially solves the problems, and comprises:

a method for online calling electronic evidence based on a Hongmon cooperative cloud platform is characterized in that the method is used for online electronic data evidence obtaining of network cases, and the method relates to a regulation and evidence initiating terminal, a server, an evidence supplying terminal and an evidence obtaining terminal, wherein when the regulation and evidence initiating terminal generates a regulation and evidence application through protocol information, the method comprises the following steps:

when receiving a certificate transferring application initiated by the certificate transferring initiating terminal, the server sends the certificate transferring application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server;

the server determines a case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; wherein the encrypted evidence matches the case analysis environment;

when a case analysis environment, the encrypted evidence and the desensitization evidence are sent to the evidence obtaining end by the server according to the evidence obtaining application.

Preferably, before the step of receiving the application for transferring certificates initiated by the certificate transferring initiator, the method further includes:

the server acquires verification information of a relevant administrative unit according to the scheme information sent by the certificate issuing end, and sends the verification information to the certificate issuing end; the certificate transferring initiating end is used for generating the certificate transferring application according to the verification information; the protocol information includes an identification of the relevant administrative unit.

Preferably, the case-involved evidence comprises mirror image evidence and related evidence, and the step of determining the case analysis environment, the encrypted evidence and the desensitized evidence by the server according to the case-involved evidence comprises:

the server builds a case analysis environment according to the mirror image evidence;

the server acquires the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence;

the server encrypts the anti-counterfeiting evidence to obtain the encrypted evidence;

and the server carries out desensitization processing on the related evidence to obtain the desensitization evidence.

In order to realize the application, the method is used for online electronic data evidence obtaining of the network case and relates to an evidence obtaining initiating terminal, a server, an evidence supply terminal and an evidence obtaining terminal, wherein when the evidence obtaining initiating terminal generates an evidence obtaining application through the filing information, the method comprises the following steps:

when receiving a certificate transfer application initiated by the certificate transfer initiating terminal through the server, the evidence supplying terminal determines case-involved evidence according to the certificate transfer application;

the evidence supply end sends the involved evidence to the server; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

Preferably, the step of the evidence supply end determining the evidence involved in the case according to the application of transferring the evidence comprises:

the evidence supply end calls the relevant evidence of the case relatives according to the evidence calling application;

the evidence supply end calls an involved case source file according to the certificate transferring application and copies the involved case source file to obtain an involved case primary file involved case analysis file;

the evidence supply end stores the case-involved mother file and performs mirror image processing on the case-involved analysis file to obtain the mirror image evidence;

and the evidence supply end determines the case-involved evidence according to the related evidence and the mirror image evidence.

when the evidence transferring initiating terminal sends an evidence transferring application to the evidence supplying terminal through the server; wherein, the evidence supply end is used for determining the case-involved evidence according to the certificate-transferring application; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

For realizing this application still include a device based on electronic evidence is transferred on line to hong meng in coordination cloud platform, the device is used for the online electronic data of network case to collect evidence, the device relates to transfer evidence initiating terminal, server, evidence supply end and collection end, when transferring evidence initiating terminal through the application of filing information generation transfer evidence, the device includes:

the sending module is used for sending the server to the evidence supplying end when receiving the evidence transferring application initiated by the evidence transferring initiating end; the evidence supply end is used for determining case-involved evidence according to the transfer application, and the evidence supply end sends the case-involved evidence to the server;

the evidence determining module is used for determining case analysis environment, encrypted evidence and desensitized evidence by the server according to the involved evidence; wherein the encrypted evidence matches the case analysis environment;

and the receiving module is used for sending the case analysis environment, the encrypted evidence and the desensitized evidence to the evidence obtaining end according to the evidence obtaining application when the evidence obtaining application is received.

For realizing this application still include a device based on electronic evidence is transferred on line to hong meng cooperation cloud platform, the device is used for the online electronic data of network case to collect evidence, the device relates to transfer evidence initiating terminal, server, evidence supply end and end of collecting evidence, the device includes:

the evidence providing end is used for determining case-involved evidence according to the certificate transferring application when receiving the certificate transferring application initiated by the certificate transferring initiating end through the server;

the evidence sending module is used for sending the case-involved evidence to the server by the evidence supply end; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

the case transferring module is used for sending a certificate transferring application to the evidence supplying end through the server when the certificate transferring initiating end sends the certificate transferring application to the evidence supplying end; wherein, the evidence supply end is used for determining the case-involved evidence according to the certificate-transferring application; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

For realizing this application still include a system based on electronic evidence is transferred on line to hong meng cooperation cloud platform, the online electronic data that the system was used for the network case is forensics, the system relates to transfer the evidence and initiates end, server, evidence supply end and forensics end, the system includes:

the certificate transferring initiating terminal is used for generating a certificate transferring application according to the plan information input by the user and sending the certificate transferring application to the server;

the server is used for receiving the evidence transferring application and sending the evidence transferring application to the evidence supply end;

the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server;

the server is also used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment;

the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

The application has the following advantages:

in the embodiment of the application, when receiving the evidence transferring application initiated by the evidence transferring initiating terminal, the server sends the evidence transferring application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server; the server determines a case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; wherein the encrypted evidence matches the case analysis environment; when a case analysis environment, the encrypted evidence and the desensitization evidence are sent to the evidence obtaining end by the server according to the evidence obtaining application. By carrying out mirror image copying and extraction on line, the whole process is finished on line, no uniform personnel need to go to the site, the manpower and material resources are saved, the process is efficient and quick, the possibility of data evidence modification, deletion and loss is reduced, the data is truly restored and guaranteed, and the job-carrying risk of the evidence-obtaining personnel is removed; and the data evidence has high legal effectiveness, high right maintaining speed and obvious effect.

Drawings

In order to more clearly illustrate the technical solutions of the present application, the drawings needed to be used in the description of the present application will be briefly introduced below, and it is apparent that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art that other drawings can be obtained according to the drawings without inventive labor.

Fig. 1 is a flowchart illustrating steps of a method for online retrieving an electronic evidence based on a hongmeng collaboration cloud platform according to an embodiment of the present application;

fig. 2 is a flowchart illustrating another step of a method for online retrieving an electronic evidence based on a hongmeng collaboration cloud platform according to an embodiment of the present application;

fig. 3 is a flowchart illustrating still another step of a method for online retrieving an electronic evidence based on a hongmeng collaboration cloud platform according to an embodiment of the present application;

fig. 4 is a block diagram illustrating a structure of an apparatus for online retrieving an electronic evidence according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a computer device according to an embodiment of the present invention.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present application more comprehensible, the present application is described in further detail with reference to the accompanying drawings and the detailed description. It is to be understood that the embodiments described are only a few embodiments of the present application and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

It is noted that the method is used for online electronic data forensics of network cases.

Referring to fig. 1, a method for online fetching electronic evidence based on a hong meng collaboration cloud platform provided in an embodiment of the present application is shown, where the method includes:

s110, when receiving a certificate transferring application initiated by the certificate transferring initiating terminal, the server sends the certificate transferring application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server;

s120, the server determines a case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; wherein the encrypted evidence matches the case analysis environment;

s130, when an evidence obtaining application is received, the server sends the case analysis environment, the encrypted evidence and the desensitized evidence to the evidence obtaining end according to the evidence obtaining application.

In the following, a method for online invoking electronic evidence based on the hong meng collaboration cloud platform in the present exemplary embodiment will be further described.

As stated in step S110, when receiving the application for transferring certificates initiated by the certificate initiator, the server sends the application to the evidence provider; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server;

in an embodiment of the present invention, the step S110 "when receiving the certificate transfer application initiated by the certificate transfer initiating terminal, the server sends the certificate transfer application to the evidence providing terminal may be further described with reference to the following description; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server.

The server acquires verification information of a related administrative unit according to the scheme information sent by the debugging initiating terminal, and sends the verification information to the debugging initiating terminal; the certificate transferring initiating end is used for generating the certificate transferring application according to the verification information; the protocol information includes an identification of the relevant administrative unit.

In a specific embodiment, the server may be a hong meng collaboration cloud platform, and the evidence provider may be a cloud service vendor, and specifically include other data providers, such as pay treasure, Baidu, Mei Tuo, Taobao, and the like.

The server receives a certificate transfer application initiated by the certificate transfer initiating terminal and sends the certificate transfer application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server.

In a concrete realization, transfer the certificate and initiate the end for administrative function officer's case clerk, administrative function officer's case clerk launches the record information through the server, relevant administrative unit examines and approves the case, and the case and the process file that relate to the case process are covered with the electron official seal and are the process of setting up the record information and obtaining verification information promptly, and the acquisition of setting up record information is managed the unit and is examined and approved the back, and administrative function officer passes through verification information generation transfer certificate application and send for the server.

In a specific implementation, the evidence supply end is a data or service provider, and after receiving and accepting the transfer certificate, the data or service provider transfers case-involved evidence of a case opposite person, wherein the case-involved evidence comprises mirror image evidence and related evidence, the mirror image evidence is mirror image of a cloud server of a cloud service provider, and the related evidence is shop or transaction record of an e-commerce platform, payment record of a payment platform and the like.

As an example, the evidence providing end is configured to determine an involved document source file and a related evidence according to the transfer application, and the evidence providing end invokes the involved document source file according to the transfer application and copies the involved document source file to obtain an involved master file involved document analysis file; the evidence supply end stores the case-involved mother file and performs mirror image processing on the case-involved analysis file to obtain the mirror image evidence; the evidence supply end determines a first evidence according to the mirror image evidence and the related evidence, and the evidence supply end is further used for generating case-involved evidence according to the first evidence; wherein, the involved evidence is the first evidence containing the key.

The server determines a case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence in the step S120; wherein the encrypted evidence matches the case analysis environment;

in an embodiment of the present invention, the following description may be combined to further explain step S120 that the server determines the case analysis environment, the encrypted evidence and the desensitized evidence according to the involved evidence; wherein the encrypted evidence matches the case analysis environment.

The server builds a case analysis environment according to the mirror image evidence; the server acquires the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence; the server encrypts the anti-counterfeiting evidence to obtain the encrypted evidence; and the server carries out desensitization processing on the related evidence to obtain the desensitization evidence.

In a specific embodiment, the server builds a case analysis environment, for example, the case analysis environment is built through data such as operator watermarks, operation logs, real-time auditing and post-affair auditing in the mirror image evidence. The server stores the mirror image evidence and acquires the digital fingerprint of the mirror image evidence and then carries out electronic data solid evidence to acquire the digital fingerprint of the mirror image file provided by the data or service provider; and the server encrypts the mirror image evidence to ensure that the mirror image evidence can be restored only in the case analysis environment. Data can not be obtained from a data source for relevant evidence such as statistics of the transaction amount of a certain shop in a certain time period, who and who in the certain time period, the transaction amount of the certain shop and the transaction amount of the certain shop, and the like, and a data desensitization type processing mode is adopted.

It should be noted that the digital fingerprint is mainly used for copyright protection, and the research thereof has important significance. Digital fingerprinting is the embedding of a different identifying code, a fingerprint, into digital media using digital watermarking techniques, followed by the distribution of the fingerprinted digital media to users. After the distributor finds out the piracy, the distributor can determine the source of illegal copying by extracting the fingerprint in the pirated product, and prosecute the pirate, thereby playing a role in copyright protection.

It should be noted that data desensitization refers to performing data deformation on some sensitive information through a desensitization rule, so as to achieve reliable protection of sensitive private data. Under the condition of relating to client security data or some business sensitive data, the real data is modified and provided for test use under the condition of not violating system rules, and data desensitization is required to be carried out on personal information such as identification numbers, mobile phone numbers, card numbers, client numbers and the like.

As an example, the server decrypts the key to obtain a mirror image evidence and a related evidence, and the server builds a case analysis environment according to the mirror image evidence; the server acquires the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence; the server encrypts the anti-counterfeiting evidence to obtain the encrypted evidence; and the server carries out desensitization processing on the related evidence to obtain the desensitization evidence.

As stated in step S130, when receiving a forensics application, the server sends the case analysis environment, the encrypted evidence, and the desensitized evidence to the forensics terminal according to the forensics application;

in an embodiment of the present invention, the specific process of "when a forensics application is received, the server sends the case analysis environment, the encrypted evidence and the desensitized evidence to the forensics end according to the forensics application" in step S130 may be further described with reference to the following description.

The evidence regulation initiating terminal is used for sending an evidence obtaining application to be authorized to the evidence supplying terminal, and the evidence supplying terminal is used for obtaining the evidence obtaining application and sending the evidence obtaining application to the server according to the evidence obtaining application to be authorized.

In a specific implementation, after a case is qualified, an administrative function clerk initiates an application for obtaining evidence to be authorized to an evidence supply end, and sends the application to a server after obtaining the authorization of the evidence supply end, the server sends the case analysis environment, the encrypted evidence and the desensitization evidence to a evidence obtaining end, the evidence obtaining end is a judicial authority, and the judicial authority provides an authentication report with the same legal effectiveness for data analysis.

The term qualitative indications refers to the determination of the nature of legal relationships involved in foreign-related civil cases by the court of law, and thus, the applicable warranty laws are determined.

In the embodiment of the application, the whole process restores the offline process to the online environment by using an electronic official seal technology, so that the integrity of the process and the corresponding responsibility of a responsible person are guaranteed; the evidence is copied for multiple times, so that the restorability and consistency of the analysis process are guaranteed; the mirror image evidence is processed, and the outflow authority of the data is handed to a data or service provider, so that the data leakage risk is reduced; desensitization processing is carried out on data or data of a service provider, and the data leakage risk is reduced.

Referring to fig. 2, a method for online fetching electronic evidence based on a hong meng collaboration cloud platform provided in an embodiment of the present application is shown, where the method includes:

s210, when receiving a certificate transfer application initiated by the certificate transfer initiating terminal through the server, the evidence supplying terminal determines case-involved evidence according to the certificate transfer application;

s220, the evidence supply end sends the case-involved evidence to the server; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

If the evidence transfer application initiated by the certificate transfer initiating terminal through the server is received, the evidence providing terminal determines the involved evidence according to the certificate transfer application in step S210;

in an embodiment of the present invention, the following description may be combined to further describe a specific process of "when receiving the certificate transfer application initiated by the certificate transfer initiating terminal through the server, the evidence providing terminal determines the evidence involved in the case according to the certificate transfer application" in step S210.

The evidence supply end calls the relevant evidence of the counter-person of the case according to the calling application as described in the following steps; the evidence supply end calls an involved case source file according to the certificate transferring application and copies the involved case source file to obtain an involved case primary file involved case analysis file; the evidence supply end stores the case-involved mother file and performs mirror image processing on the case-involved analysis file to obtain the mirror image evidence; and the evidence supply end determines the case-involved evidence according to the related evidence and the mirror image evidence.

In an embodiment of the present invention, a specific process of the step "the evidence providing end determines the case-related evidence according to the related evidence and the mirror-image evidence" may be further described with reference to the following description.

The evidence supply end determines a first evidence according to the mirror image evidence and the related evidence, and the evidence supply end generates case-involved evidence according to the first evidence; wherein, the involved evidence is the first evidence containing the key.

If the evidence provider sends the case-involved evidence to the server in the step S220; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

In an embodiment of the present invention, the following description may be combined to further explain that "the evidence providing terminal sends the case-related evidence to the server in step S220; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence; the encrypted evidence is matched with the case analysis environment; and the server is also used for receiving a case analysis environment, the encrypted evidence and the desensitized evidence to the specific process of the evidence obtaining end according to the evidence obtaining application.

The server is used for building a case analysis environment according to the mirror image evidence; the server is also used for acquiring the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence; the server is also used for encrypting the anti-counterfeiting evidence to obtain the encrypted evidence; the server is also used for carrying out desensitization processing on the related evidence to obtain the desensitization evidence.

As an example, the server is configured to decrypt a mirror proof and a related proof according to the key, and the server is further configured to build a case analysis environment according to the mirror proof; the server is also used for acquiring the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence; the server is also used for encrypting the anti-counterfeiting evidence to obtain the encrypted evidence; the server is also used for carrying out desensitization processing on the related evidence to obtain the desensitization evidence.

The evidence regulation initiating terminal is used for sending an evidence obtaining application to be authorized to the evidence supplying terminal, and the evidence supplying terminal obtains the evidence obtaining application and sends the evidence obtaining application to the server according to the evidence obtaining application to be authorized.

Referring to fig. 3, a method for online fetching electronic evidence based on a hong meng collaboration cloud platform provided in an embodiment of the present application is shown, where the method includes:

s310, when the evidence transferring initiating terminal sends an evidence transferring application to the evidence supplying terminal through the server; wherein, the evidence supply end is used for determining the case-involved evidence according to the certificate-transferring application; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application;

As stated in step S310, when the originating terminal sends an application for transferring certificates to the evidence providing terminal through the server; wherein, the evidence supply end is used for determining the case-involved evidence according to the certificate-transferring application; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application;

in an embodiment of the present invention, the step S310 "when the evidence transferring application is sent from the evidence initiating terminal to the evidence providing terminal through the server" may be further explained with reference to the following description; wherein, the evidence supply end is used for determining the case-involved evidence according to the certificate-transferring application; the server is used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; and the server is also used for receiving a case analysis environment, the encrypted evidence and the desensitized evidence to the specific process of the evidence obtaining end according to the evidence obtaining application.

The method comprises the following steps that the certificate transferring initiating terminal sends plan information to a server, the server is used for obtaining verification information of a relevant administrative unit according to the plan information sent by the certificate transferring initiating terminal, and the server is used for sending the verification information to the certificate transferring initiating terminal; the certificate transferring initiating terminal generates the certificate transferring application according to the verification information; the protocol information includes an identification of the relevant administrative unit.

The evidence transferring method comprises the following steps that the evidence transferring initiating terminal sends a certificate transferring application to the server, and the server is used for sending the certificate transferring application to the evidence supplying terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server.

As an example, the evidence supply end is configured to determine an involved document source file and a related evidence according to the transfer application, and the evidence supply end is further configured to transfer the involved document source file according to the transfer application and copy the involved document source file to obtain an involved master file involved analysis file; the evidence supply end is also used for storing the case-involved mother file and carrying out mirror image processing on the case-involved analysis file to obtain the mirror image evidence; the evidence supply end is further used for determining a first evidence according to the mirror image evidence and the related evidence, and the evidence supply end is further used for generating case-involved evidence according to the first evidence; wherein, the involved evidence is the first evidence containing the key.

As an example, the server is configured to decrypt the key to obtain a mirror image evidence and a related evidence, and the server is further configured to build a case analysis environment according to the mirror image evidence; the server acquires the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence; the server encrypts the anti-counterfeiting evidence to obtain the encrypted evidence; the server is also used for carrying out desensitization processing on the related evidence to obtain the desensitization evidence.

The evidence obtaining method comprises the following steps that the evidence adjusting and initiating end sends an evidence obtaining application to be authorized to the evidence supplying end, and the evidence supplying end is used for obtaining the evidence obtaining application and sending the evidence obtaining application to the server according to the evidence obtaining application to be authorized.

For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

Referring to fig. 4, a device for online fetching electronic evidence based on a hong meng collaboration cloud platform according to an embodiment of the present application is shown;

the method specifically comprises the following steps:

a sending module 410, configured to send, when receiving a certificate transfer application initiated by the certificate transfer initiating terminal, the server to the evidence providing terminal; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server;

an evidence determining module 420, configured to determine, by the server, a case analysis environment, an encrypted evidence, and a desensitized evidence according to the involved evidence; wherein the encrypted evidence matches the case analysis environment;

a receiving module 430, configured to, when receiving a forensics application, send, by the server according to the forensics application, the case analysis environment, the encrypted evidence, and the desensitized evidence to the forensics terminal.

In an embodiment of the present invention, before the sending module 410, the method includes:

the verification information obtaining submodule is used for obtaining the verification information of a relevant administrative unit by the server according to the scheme information sent by the debugging initiating terminal, and the server sends the verification information to the debugging initiating terminal; the certificate transferring initiating end is used for generating the certificate transferring application according to the verification information; the protocol information includes an identification of the relevant administrative unit.

In an embodiment of the present invention, the evidence determining module 420 includes:

the construction submodule is used for constructing a case analysis environment by the server according to the mirror image evidence;

the digital fingerprint submodule is used for the server to acquire the digital fingerprint of the mirror image evidence provided by the evidence supply end according to the mirror image evidence to generate anti-counterfeiting evidence; wherein the digital fingerprint is used to prevent illegal copying of the associated evidence;

the encryption processing submodule is used for carrying out encryption processing on the anti-counterfeiting evidence by the server to obtain the encrypted evidence;

and the desensitization processing submodule is used for carrying out desensitization processing on the related evidence by the server to obtain the desensitization evidence.

The device for calling the electronic evidence on line based on the Hongmon cooperative cloud platform is provided by one embodiment of the application;

the method specifically comprises the following steps:

In an embodiment of the present invention, the invoking module includes:

the case relativity submodule is used for the evidence supply end to call the relevant evidence of the case relativity according to the evidence calling application;

the replication submodule is used for the evidence supply end to invoke the case-involved source file according to the certificate-transferring application and replicate the case-involved source file to obtain a case-involved mother file case-involved analysis file;

the mirror image processing submodule is used for storing the case-involved mother file by the evidence supply end and carrying out mirror image processing on the case-involved analysis file to obtain the mirror image evidence;

and the determining submodule is used for determining the case-involved evidence by the evidence supply end according to the related evidence and the mirror image evidence.

the method specifically comprises the following steps:

In order to realize the application, the system for online calling the electronic evidence based on the Hongmon cooperative cloud platform is used for online electronic data evidence obtaining of the network case, and specifically comprises the following steps:

the certificate transferring initiating terminal is used for generating a certificate transferring application according to the plan information input by the user and sending the certificate transferring application to the server; the server is used for receiving the evidence transferring application and sending the evidence transferring application to the evidence supply end; the evidence supply end is used for determining case-involved evidence according to the transfer application and sending the case-involved evidence to the server; the server is also used for determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence sent by the evidence supply end; the encrypted evidence is matched with the case analysis environment; the server is further used for receiving a forensics application and sending the case analysis environment, the encrypted evidence and the desensitization evidence to the forensics end according to the forensics application.

It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the illustrated order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments of the present invention. Further, those skilled in the art will appreciate that the embodiments described in the specification are presently preferred and that no particular act is required to implement the invention.

The present embodiment and the above embodiments have repeated operation steps, and the present embodiment is only described briefly, and the rest of the schemes may be described with reference to the above embodiments.

For the system embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.

Referring to fig. 5, a computer device for illustrating the method for online invoking the electronic evidence based on the hong meng collaboration cloud platform of the present application may specifically include the following:

the computer device 12 described above is embodied in the form of a general purpose computing device, and the components of the computer device 12 may include, but are not limited to: one or more processors or processing units 16, a memory 28, and a bus 18 that couples various system components including the memory 28 and the processing unit 16.

Bus 18 represents one or more of any of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, and a processor or local bus using any of a variety of bus architectures. By way of example, such architectures include, but are not limited to, Industry Standard Architecture (ISA) bus, micro-channel architecture (MAC) bus, enhanced ISA bus, audio Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus.

Computer device 12 typically includes a variety of computer system readable media. Such media may be any available media that is accessible by computer device 12 and includes both volatile and nonvolatile media, removable and non-removable media.

The memory 28 may include computer system readable media in the form of volatile memory, such as random access memory 30 and/or cache memory 32. Computer device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (commonly referred to as "hard drives"). Although not shown in FIG. 5, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. The memory may include at least one program product having a set (e.g., at least one) of program modules 42, with the program modules 42 configured to carry out the functions of embodiments of the application.

A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in memory, such program modules 42 including but not limited to an operating system, one or more application programs, other program modules 42, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 42 generally perform the functions and/or methodologies of the embodiments described herein.

Computer device 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, camera, etc.), with one or more devices that enable an operator to interact with computer device 12, and/or with any devices (e.g., network card, modem, etc.) that enable computer device 12 to communicate with one or more other computing devices. Such communication may be through the I/O interface 22. Also, computer device 12 may communicate with one or more networks (e.g., a Local Area Network (LAN)), a Wide Area Network (WAN), and/or a public network (e.g., the Internet) via network adapter 20. As shown in FIG. 5, the network adapter 20 communicates with the other modules of the computer device 12 via the bus 18. It should be appreciated that although not shown in FIG. 5, other hardware and/or software modules may be used in conjunction with computer device 12, including but not limited to: microcode, device drivers, redundant processing units 16, external disk drive arrays, RAID systems, tape drives, and data backup storage systems 34, etc.

The processing unit 16 executes various functional applications and data processing by running the program stored in the memory 28, for example, implementing the method for online fetching the electronic evidence based on the hongmeng collaboration cloud platform provided in the embodiment of the present application.

That is, the processing unit 16 implements, when executing the program,: a method for calling electronic evidence on line based on Hongmon cooperative cloud platform is provided.

In the embodiments of the present application, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the method for online invoking an electronic evidence based on a hongmeng collaboration cloud platform as provided in all embodiments of the present application is implemented.

That is, the program when executed by the processor implements: a method for calling electronic evidence on line based on Hongmon cooperative cloud platform is provided.

Any combination of one or more computer-readable media may be employed. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Computer program code for carrying out operations for aspects of the present application may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the operator's computer, partly on the operator's computer, as a stand-alone software package, partly on the operator's computer and partly on a remote computer or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the operator's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider). The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.

While preferred embodiments of the present application have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including the preferred embodiment and all such alterations and modifications as fall within the true scope of the embodiments of the application.

Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, the statement that "comprises an … …" limits an element does not exclude the presence of other identical elements in the process, method, article, or terminal equipment comprising the element.

The method for online calling the electronic evidence based on the hongmeng cooperative cloud platform is introduced in detail, a specific example is applied in the method for explaining the principle and the implementation mode of the method, and the description of the embodiment is only used for helping to understand the method and the core idea of the method; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.

Claims

1. A method for online calling electronic evidence based on a Hongmon cooperative cloud platform is characterized in that the method is used for online electronic data evidence obtaining of network cases, and the method relates to a regulation and evidence initiating terminal, a server, an evidence supplying terminal and an evidence obtaining terminal, wherein when the regulation and evidence initiating terminal generates a regulation and evidence application through protocol information, the method comprises the following steps:

2. The method for online recalling electronic evidence based on hong meng coordination cloud platform according to claim 1, wherein before the step of receiving the recalling application initiated by the recalling initiator, the method further comprises:

3. The method for on-line electronic evidence based on the hong meng cooperative cloud platform as claimed in claim 1, wherein the case-involved evidence includes mirror image evidence and related evidence, and the step of the server determining case analysis environment, encrypted evidence and desensitized evidence according to the case-involved evidence includes:

4. A method for online calling electronic evidence based on a Hongmon cooperative cloud platform is characterized in that the method is used for online electronic data evidence obtaining of network cases, and the method relates to a regulation and evidence initiating terminal, a server, an evidence supplying terminal and an evidence obtaining terminal, wherein when the regulation and evidence initiating terminal generates a regulation and evidence application through protocol information, the method comprises the following steps:

5. The method for on-line electronic evidence based on the hongmeng collaboration cloud platform as claimed in claim 4, wherein the step of the evidence supply end determining case-related evidence according to the application for evidence transfer comprises:

6. A method for online calling electronic evidence based on a Hongmon cooperative cloud platform is characterized in that the method is used for online electronic data evidence obtaining of network cases, and the method relates to a regulation and evidence initiating terminal, a server, an evidence supplying terminal and an evidence obtaining terminal, wherein when the regulation and evidence initiating terminal generates a regulation and evidence application through protocol information, the method comprises the following steps:

7. The utility model provides a device based on electronic evidence is transferred on line to hong meng cooperation cloud platform which characterized in that, the device is used for the online electronic data of network case to collect evidence, the device relates to transfer evidence initiating terminal, server, evidence supply end and collection end, when transferring evidence initiating terminal through the application of filing information generation transfer evidence, the device includes:

8. An apparatus for online obtaining electronic evidence based on Hongmon cooperative cloud platform, the apparatus is used for online electronic data forensics of network cases, the apparatus relates to a forensics initiating terminal, a server, an evidence supplying terminal and a forensics terminal, the apparatus comprises:

9. The utility model provides a device based on electronic evidence is transferred on line to hong meng cooperation cloud platform which characterized in that, the device is used for the online electronic data of network case to collect evidence, the device relates to transfer evidence initiating terminal, server, evidence supply end and collection end, when transferring evidence initiating terminal through the application of filing information generation transfer evidence, the device includes:

10. A system for online fetching electronic evidence based on Hongmon cooperative cloud platform is characterized in that the system is used for online electronic data forensics of network cases, and the system relates to a forensics initiating terminal, a server, an evidence supplying terminal and a forensics terminal, and the system comprises: