CN104077410A - Device and method for extracting mobile phone position information and marking mobile phone position information on map - Google Patents

Device and method for extracting mobile phone position information and marking mobile phone position information on map Download PDF

Info

Publication number
CN104077410A
CN104077410A CN201410332638.5A CN201410332638A CN104077410A CN 104077410 A CN104077410 A CN 104077410A CN 201410332638 A CN201410332638 A CN 201410332638A CN 104077410 A CN104077410 A CN 104077410A
Authority
CN
China
Prior art keywords
module
mobile phone
map
file
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201410332638.5A
Other languages
Chinese (zh)
Inventor
梁效宁
甘元军
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Original Assignee
SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd filed Critical SICHUAN SALVATIONDATA INFORMATION SAFETY TECHNOLOGY Co Ltd
Priority to CN201410332638.5A priority Critical patent/CN104077410A/en
Publication of CN104077410A publication Critical patent/CN104077410A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/90Details of database functions independent of the retrieved data types
    • G06F16/904Browsing; Visualisation therefor
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F16/00Information retrieval; Database structures therefor; File system structures therefor
    • G06F16/10File systems; File servers
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601Interfaces specially adapted for storage systems
    • G06F3/0628Interfaces specially adapted for storage systems making use of a particular technique
    • G06F3/0638Organizing or formatting or addressing of data

Abstract

The invention discloses a device for extracting mobile phone position information and marking the mobile phone position information on a map. An interface and a display module are arranged on the surface of the device. A partition mirror image module, an APP extraction module, a storage module, an analysis module and a map marking module are arranged in the device. The interface is connected with the partition mirror image module and the APP extraction module. The partition mirror image module is connected with the APP extraction module and then connected with the storage module. The analysis module is connected with the storage module and the map marking module. The map marking module is connected with the display module. The invention further discloses a method based on the device. The method comprises the steps that (1) the device is connected with a mobile phone and a connection channel is created; (2) data are scanned and extracted; (3) a position and a track are marked. A storage space of the mobile phone is completely scanned so that all the position information and time information can be extracted; according to the extracted position information and the extracted time information, the map is marked, the movement track of a criminal suspect can be rapidly known, and the case handling efficiency is greatly improved.

Description

A kind of apparatus and method of extracting mobile phone position information and marking on map
Technical field
The present invention relates to field of information security technology, particularly a kind of device that extracts mobile phone position information and mark on map, also relates to the method based on this device.
Background technology
Smart mobile phone has SOS, independent operating space, can third party software be installed voluntarily, and expanded function is powerful.The positional information and the temporal information that in data in mobile phone information, relate to people's action, smart mobile phone evidence-obtaining system can be used as a kind of of electronic material evidence, helps judicial department's evidence obtainings such as public security, procuratorial work to solve a case.
Extracting at present mobile phone position information and marking track does not have the corresponding technology can complete realization.Therefore, in the face of current defect is badly in need of a kind of device that extracts mobile phone position information and mark on map.
Summary of the invention
The present invention is directed to the defect of prior art, propose a kind of apparatus and method of extracting mobile phone position information and marking on map, can effectively solve the problem that above-mentioned prior art exists.
To achieve these goals, the technical solution used in the present invention is: a kind of device that extracts mobile phone position information and mark on map, this apparatus surface is provided with interface and display module, inside is provided with subregion mirror image module, APP extraction module, memory module, analysis module, map label module, described interface is connected with APP extraction module with subregion mirror image module, subregion mirror image module is connected with APP extraction module and is connected with memory module, analysis module is connected with map label module with memory module, and map label module is connected with display module.
Interface is for being connected with mobile phone;
Subregion mirror image module is used for generating image file;
APP extraction module is used for extracting APP file;
Memory module is for memory image file and APP file;
Analysis module is for resolving positional information and the temporal information of memory image file and APP file; Map label module is for being labeled in positional information and temporal information on map and forming track;
Display module is for display position information and track on map.
In addition, provide a kind of method of extracting mobile phone position information and marking on map, comprise the following steps:
Step 1: connect mobile phone, create the interface channel with mobile phone;
Step 2: extract and scanning cell phone, obtain the positional information of mobile phone storage;
Step 3: resulting positional information be labeled on map and formed a little, then the setting-out of time order and function order is pressed in each position, forming track.
As preferably, described step 2 needs all storage spaces of scanning cell phone and all APP of scanning cell phone.
As preferably, all storage spaces of described scanning cell phone comprise the following steps:
1) by the mirror image of all partition data bit-by-bits of mobile phone, be, the image file in local storage space;
2), image file is resolved, and the carry subregion drive that is local system;
3), the subregion drive after carry is carried out to scan full hard disk, obtain All Files inventory;
4), all files of obtaining are carried out to search spread by scale-of-two, find the key characteristics of GPS and base station to obtain positional information;
5), by the positional information obtaining, search for 48 bytes before and after this information, retrieval obtains the temporal information of this positional information.
As preferably, all APP of described scanning cell phone comprise the following steps:
1), all SQLite database files in data in mobile phone district, XML file, ini file, TXT file, BList file, PList file copy are arrived to local storage space;
2), analyze memory location, storage format, storage rule, the storage feature of above-mentioned file;
3), the result of analysis is saved as to rule file;
4), by this rule file, mate and retrieve All Files, find positional information and the temporal information of the GPS that exists in file, base station, WIFI.
As preferably, described step 3 comprises the following steps:
1), read all positional informations that obtain and temporal information;
2), all positional informations are labeled in to map relevant position and form point;
3), the setting-out of time order and function order, formation track are pressed in each position.
beneficial effect
Compared with prior art the invention has the advantages that:
Depth scan phone memory, resolves and extracts all positional informations comprehensively;
Extract location information from all APP of mobile phone;
From mobile phone, extract GPS positional information, base station position information, WIFI positional information;
In extract location information, the time attribute that extracting position is relevant;
Positional information according to extracting marks location point on map, and then, according to the time order and function order of each position, setting-out between each point, forms track.
The movement track that can know fast suspect by above-mentioned advantage, greatly improves case handling efficiency.
Accompanying drawing explanation
Fig. 1 is the apparatus structure schematic diagram of the embodiment of the present invention;
Fig. 2 is the process flow diagram of the embodiment of the present invention;
Fig. 3 is the process flow diagram that the embodiment of the present invention is extracted mobile phone position information;
Fig. 4 is the process flow diagram of embodiment of the present invention positional information mark track;
Fig. 5 is the design sketch of embodiment of the present invention map label GPS position.
Embodiment
In order to describe embodiment in detail, in conjunction with the method flow diagram of the embodiment of the present invention, be illustrated:
As shown in Figure 1, a kind of device that extracts mobile phone position information and mark on map, this apparatus surface is provided with interface and display module, inside is provided with subregion mirror image module, APP extraction module, memory module, analysis module, map label module, described interface is connected with APP extraction module with subregion mirror image module, subregion mirror image module is connected with APP extraction module and is connected with memory module, and analysis module is connected with map label module with memory module, and map label module is connected with display module.
Introduce the function of above-mentioned all modules below:
Interface is for being connected with mobile phone;
Subregion mirror image module is used for generating image file;
APP extraction module is used for extracting APP file;
Memory module is for memory image file and APP file;
Analysis module is for resolving positional information and the temporal information of memory image file and APP file; Map label module is for being labeled in positional information and temporal information on map and forming track;
Display module is for display position information and track on map.
As shown in Figure 2, a kind of method of extracting mobile phone position information and marking on map, comprises the following steps:
101: user's usage data line, WIFI, bluetooth, infrared or other modes are connected into this device, use in the present embodiment, by this device, set up and the interface channel of mobile phone;
102: extract and scanning cell phone, obtain the positional information of mobile phone storage;
103: resulting positional information be labeled on map and formed a little, then the setting-out of time order and function order is pressed in each position, forming track.
As shown in Figure 3, need all storage spaces of scanning cell phone and all APP of scanning cell phone.
201: all storage spaces of scanning cell phone comprise the following steps:
1) by the mirror image of all partition data bit-by-bits of mobile phone, be, the image file in local storage space;
2), image file is resolved, and the carry subregion drive that is local system;
3), the subregion drive after carry is carried out to scan full hard disk, obtain All Files inventory;
4), all files of obtaining are carried out to search spread by scale-of-two, find the key characteristics of GPS and base station to obtain positional information;
The position of 2011:GPS is generally used longitude and latitude to represent, its value scope is that latitude-90 are spent to 90 degree, and longitude-180 are spent to 180 degree.According to this feature, if there is adjacent two-90 to 90, two values of-180 to 180, all think longitude and latitude;
LNG, LAT is respectively the english abbreviation of longitude and latitude, and device can be searched for this both keyword hereof, if seek obtaining key word, and has thereafter numeral to occur, thinks and finds longitude and latitude;
2012: base station information has following key characteristics:
CEL: cell name;
CGI: cell global identity, MCC-MNC-LAC-CI forms, definition internal zone name: be NCC(3 position) mobile national number, NDC(2 position) be mobile network No., identify domestic GSM net, LAC(4 position) be lane place number, CI(4 position) be cell ID;
BSIC: base station identity code, mainly for transfer table, distinguish each adjacent base station;
BCCHNO: the frequency of Broadcast Control Channel;
The reserved number as AGCH in GBLK:CCCH BLOCKS number, with MFRMS;
Search for hereof above key word, if seek obtaining key word, and have thereafter numeral to occur, think and find base station information, and propose this value.
5), by the positional information obtaining, search for 48 bytes before and after this information, retrieval obtains the temporal information of this positional information, all search all will be used ASCII, UNICODE, UTF8, UTF16 searches for.
202: all APP of scanning cell phone comprise the following steps:
1), all SQLite database files in data in mobile phone district, XML file, ini file, TXT file, BList file, PList file copy are arrived to local storage space;
2), analyze memory location, storage format, storage rule, the storage feature of above-mentioned file;
For SQLLite database, to analyze different tables, field and represent respectively what meaning, have or not storage GPS, base station, the field of WIFI information;
For XML, BList, PList will analyze meaning and a storage rule for node representative;
For ini file, to distinguish each Section, the meaning of Key representative;
For TXT, will analyze the form of data storage, for example, be to separate with TAB or ", ", and what meaning is the value of each section represent.
3), the result of analysis is saved as to rule file;
4), by this rule file, mate and retrieve All Files, find positional information and the temporal information of the GPS that exists in file, base station, WIFI;
2021: from APP, extract GPS location and time attribute;
If determine that gps data is stored in SQLite, directly read appointment table, the value of specific field;
If determine that gps data is stored in XML, BLIST, in PLIST, directly according to node path read value;
If determine that gps data is stored in ini file,, directly according to SECTION, KEY reads analog value;
If determine that gps data is stored in TXT file, according to the text storage form location the extraction value that analyze.
2022: from APP, extract base station location and time attribute;
If determine that base station data is stored in SQLite, directly read appointment table, the value of specific field;
If determine that base station data is stored in XML, BLIST, in PLIST, directly according to node path read value;
If determine that base station data is stored in ini file,, directly according to SECTION, KEY reads analog value;
If determine that base station data is stored in TXT file, according to the text storage form location the extraction value that analyze.
2023: from APP, extract WIFI location and time attribute;
If determine that WIFI data are stored in SQLite, directly read appointment table, the value of specific field;
If determine that WIFI data are stored in XML, BLIST, in PLIST, directly according to node path read value;
If determine that WIFI data are stored in ini file,, directly according to SECTION, KEY reads analog value;
If determine that WIFI data are stored in TXT file, according to the text storage form location the extraction value that analyze.
As shown in Figure 4, described 103 comprise the following steps:
301: read all positional informations that obtain and temporal information;
302: all positional informations are labeled in to map relevant position and form point;
303: the setting-out of time order and function order is pressed in each position, form track.
As shown in Figure 5, the design sketch after having marked with the GPS positional information extracted and temporal information in the present embodiment.
More than describe and set forth detail to fully understand the present invention, but the present invention can also adopt other to be different from this describing mode, implement, so the present invention is not limited to above disclosed specific embodiment.

Claims (7)

1. a device that extracts mobile phone position information and mark on map, it is characterized in that: this apparatus surface is provided with interface and display module, inside is provided with subregion mirror image module, APP extraction module, memory module, analysis module, map label module, described interface is connected with APP extraction module with subregion mirror image module, subregion mirror image module is connected with APP extraction module and is connected with memory module, analysis module is connected with map label module with memory module, and map label module is connected with display module.
2. a kind of device that extracts mobile phone position information and mark on map according to claim 1, is characterized in that:
Interface is for being connected with mobile phone;
Subregion mirror image module is used for generating image file;
APP extraction module is used for extracting APP file;
Memory module is for memory image file and APP file;
Analysis module is for resolving positional information and the temporal information of memory image file and APP file; Map label module is for being labeled in positional information and temporal information on map and forming track;
Display module is for display position information and track on map.
3. the method extracting mobile phone position information and mark on map, is characterized in that comprising the following steps:
Step 1: connect mobile phone, create the interface channel with mobile phone;
Step 2: extract and scanning cell phone, obtain the positional information of mobile phone storage;
Step 3: resulting positional information be labeled on map and formed a little, then the setting-out of time order and function order is pressed in each position, forming track.
4. a kind of method of extracting mobile phone position information and marking on map according to claim 3, is characterized in that: described step 2 needs all storage spaces of scanning cell phone and all APP of scanning cell phone.
5. a kind of method of extracting mobile phone position information and marking on map according to claim 4, is characterized in that: all storage spaces of described scanning cell phone comprise the following steps:
1) by the mirror image of all partition data bit-by-bits of mobile phone, be, the image file in local storage space;
2), image file is resolved, and the carry subregion drive that is local system;
3), the subregion drive after carry is carried out to scan full hard disk, obtain All Files inventory;
4), all files of obtaining are carried out to search spread by scale-of-two, find the key characteristics of GPS and base station to obtain positional information;
5), by the positional information obtaining, search for 48 bytes before and after this information, retrieval obtains the temporal information of this positional information.
6. a kind of method of extracting mobile phone position information and marking on map according to claim 4, is characterized in that: all APP of described scanning cell phone comprise the following steps:
1), all SQLite database files in data in mobile phone district, XML file, ini file, TXT file, BList file, PList file copy are arrived to local storage space;
2), analyze memory location, storage format, storage rule, the storage feature of above-mentioned file;
3), the result of analysis is saved as to rule file;
4), by this rule file, mate and retrieve All Files, find positional information and the temporal information of the GPS that exists in file, base station, WIFI.
7. a kind of method of extracting mobile phone position information and marking on map according to claim 3, is characterized in that described step 3 comprises the following steps:
1), read all positional informations that obtain and temporal information;
2), all positional informations are labeled in to map relevant position and form point;
3), the setting-out of time order and function order, formation track are pressed in each position.
CN201410332638.5A 2014-07-14 2014-07-14 Device and method for extracting mobile phone position information and marking mobile phone position information on map Pending CN104077410A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410332638.5A CN104077410A (en) 2014-07-14 2014-07-14 Device and method for extracting mobile phone position information and marking mobile phone position information on map

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410332638.5A CN104077410A (en) 2014-07-14 2014-07-14 Device and method for extracting mobile phone position information and marking mobile phone position information on map

Publications (1)

Publication Number Publication Date
CN104077410A true CN104077410A (en) 2014-10-01

Family

ID=51598664

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410332638.5A Pending CN104077410A (en) 2014-07-14 2014-07-14 Device and method for extracting mobile phone position information and marking mobile phone position information on map

Country Status (1)

Country Link
CN (1) CN104077410A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104951515A (en) * 2015-05-29 2015-09-30 四川效率源信息安全技术有限责任公司 Method for extracting and analyzing Android mobile phone track
CN105426417A (en) * 2015-11-02 2016-03-23 四川效率源信息安全技术股份有限公司 Method for quickly looking up geographic position information in smartphone
CN106102001A (en) * 2016-06-02 2016-11-09 中国联合网络通信集团有限公司 The screening technique of suspected crime mobile terminal and system
CN106503197A (en) * 2016-11-02 2017-03-15 四川秘无痕信息安全技术有限责任公司 A kind of method for extracting android system Baidu map base station data
CN107767321A (en) * 2017-12-08 2018-03-06 珠海华索软件科技有限公司 A kind of gridding food safety Regulation method and system
CN108242204A (en) * 2016-12-27 2018-07-03 卡西欧计算机株式会社 Electronic equipment, computer-readable storage medium and information report method
CN109214276A (en) * 2018-07-23 2019-01-15 武汉虹信技术服务有限责任公司 A kind of system and method for the target person track following based on face recognition technology
CN111932425A (en) * 2020-07-28 2020-11-13 南昌龙行港口集团有限公司 Port equipment and personnel association method based on big data processing

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101866295A (en) * 2010-06-21 2010-10-20 清华大学 Network installation method of operating system
CN102254357A (en) * 2011-08-11 2011-11-23 福州开睿动力通信科技有限公司 Attendance system and attendance method
CN102768753A (en) * 2011-05-05 2012-11-07 李前光 Source information acquisition and management system for small and medium-sized special industries
CN103002401A (en) * 2012-11-30 2013-03-27 魏红霞 Smart phone with automatic positioning function
CN103347125A (en) * 2013-06-24 2013-10-09 同济大学 Mobile phone contextual model automatic regulating system based on sound and position of environment
US20130267244A1 (en) * 2012-04-10 2013-10-10 Qualcomm Incorporated Indoor positioning using joint likelihoods
CN103796241A (en) * 2014-01-28 2014-05-14 工业和信息化部电信研究院 Method for judging and positioning pseudo base station based on reported information of terminal

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101866295A (en) * 2010-06-21 2010-10-20 清华大学 Network installation method of operating system
CN102768753A (en) * 2011-05-05 2012-11-07 李前光 Source information acquisition and management system for small and medium-sized special industries
CN102254357A (en) * 2011-08-11 2011-11-23 福州开睿动力通信科技有限公司 Attendance system and attendance method
US20130267244A1 (en) * 2012-04-10 2013-10-10 Qualcomm Incorporated Indoor positioning using joint likelihoods
CN103002401A (en) * 2012-11-30 2013-03-27 魏红霞 Smart phone with automatic positioning function
CN103347125A (en) * 2013-06-24 2013-10-09 同济大学 Mobile phone contextual model automatic regulating system based on sound and position of environment
CN103796241A (en) * 2014-01-28 2014-05-14 工业和信息化部电信研究院 Method for judging and positioning pseudo base station based on reported information of terminal

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
姚伟等: "Android智能手机的取证", 《中国司法鉴定》 *
王海英等: "智能手机数据的提取与恢复", 《机械管理开发》 *
田成亚: "智能手机取证研究", 《中国优秀硕士学位论文全文数据库信息科技辑》 *

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104951515A (en) * 2015-05-29 2015-09-30 四川效率源信息安全技术有限责任公司 Method for extracting and analyzing Android mobile phone track
CN104951515B (en) * 2015-05-29 2019-01-25 四川效率源信息安全技术股份有限公司 A method of it extracts and analyzes Android phone whereabouts trace information
CN105426417A (en) * 2015-11-02 2016-03-23 四川效率源信息安全技术股份有限公司 Method for quickly looking up geographic position information in smartphone
CN105426417B (en) * 2015-11-02 2019-03-12 四川效率源信息安全技术股份有限公司 A kind of method of geographical location information in quick lookup smart phone
CN106102001A (en) * 2016-06-02 2016-11-09 中国联合网络通信集团有限公司 The screening technique of suspected crime mobile terminal and system
CN106503197A (en) * 2016-11-02 2017-03-15 四川秘无痕信息安全技术有限责任公司 A kind of method for extracting android system Baidu map base station data
CN106503197B (en) * 2016-11-02 2019-08-06 四川秘无痕科技有限责任公司 A method of extracting android system Baidu map base station data
CN108242204A (en) * 2016-12-27 2018-07-03 卡西欧计算机株式会社 Electronic equipment, computer-readable storage medium and information report method
CN108242204B (en) * 2016-12-27 2020-12-22 卡西欧计算机株式会社 Electronic device, computer-readable storage medium, and information notification method
CN107767321A (en) * 2017-12-08 2018-03-06 珠海华索软件科技有限公司 A kind of gridding food safety Regulation method and system
CN109214276A (en) * 2018-07-23 2019-01-15 武汉虹信技术服务有限责任公司 A kind of system and method for the target person track following based on face recognition technology
CN111932425A (en) * 2020-07-28 2020-11-13 南昌龙行港口集团有限公司 Port equipment and personnel association method based on big data processing

Similar Documents

Publication Publication Date Title
CN104077410A (en) Device and method for extracting mobile phone position information and marking mobile phone position information on map
CN106792992B (en) Method and equipment for providing wireless access point information
CN108304423B (en) Information identification method and device
CN105354196A (en) Information pushing method and information pushing apparatus
US10289695B2 (en) Computerized system and method for performing a location-based search
CN104112020A (en) Frame type retrieval method for navigation equipment
CN102650993A (en) Index establishing and searching methods, devices and systems for audio-video file
CN103886082A (en) Method and device for verifying position information of interest points
CN102573012A (en) Service set identifier (SSID) alias naming method of wireless access point (AP) based on global positioning system (GPS) position information of mobile terminal
CN104765877B (en) A kind of photo processing method and system
CN102646124A (en) Method for automatically identifying address information
CN110298039B (en) Event place identification method, system, equipment and computer readable storage medium
CN100461181C (en) Operation method of handwriting input for navigation device
US9980125B2 (en) Method for saving standard format page and server
CN105989024A (en) Method and device for determining position regions of users
WO2018010693A1 (en) Method and apparatus for identifying information from rogue base station
CN103425770A (en) Event multi-dimensional information display device and method
CN104537102A (en) Positive geocoding service method and system for obtaining longitude and latitude
CN103152633B (en) A kind of recognition methods of keyword and device
CN101726284A (en) Place identification method, photographing device and place identification system
KR20170130538A (en) Business anchoring using geolocated images
CN105653574A (en) Ordering method and system for browsing history records
CN105119743A (en) Acquisition method of user behavior intention and apparatus
CN102446186B (en) Chinese geocoding and coding/decoding method and device
JP2012252391A (en) Information processor, information processing method, and program

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20141001

WD01 Invention patent application deemed withdrawn after publication