CN104156330A - Method for extracting machine body data of Apple device - Google Patents
Method for extracting machine body data of Apple device Download PDFInfo
- Publication number
- CN104156330A CN104156330A CN201410431810.2A CN201410431810A CN104156330A CN 104156330 A CN104156330 A CN 104156330A CN 201410431810 A CN201410431810 A CN 201410431810A CN 104156330 A CN104156330 A CN 104156330A
- Authority
- CN
- China
- Prior art keywords
- data
- extracting
- mobile phone
- apple device
- device body
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Landscapes
- Telephone Function (AREA)
- Telephonic Communication Services (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a method for extracting machine body data of an Apple device. The method includes the steps of firstly, having access to a cell phone; secondly, selecting an application where data need to be extracted; thirdly, starting service of a cell phone end; fourthly, starting service of a device end; fifthly, transmitting the data; sixthly, obtaining, analyzing and monitoring the data; seventhly, writing the data in a memory. By means of the method, the machine body data of the Apple device can be extracted overall or selectively, the data extracting speed is increased due to the two independent reading-writing threads, the data are monitored and displayed in the extracting process, private loss and enterprise loss caused by data loss are reduced, powerful electronic evidence is extracted, and the difficulty of detecting a criminal case is lowered for the judicial office.
Description
Technical field
The present invention relates to field of information security technology, particularly a kind of method of extracting apple device body data.
Background technology
Apple equipment has SOS, independent operating space, third party software can be installed voluntarily, expanded function is powerful, inseparable with people's life, data in mobile phone information wherein relates to work, study, life, contacts, finance, leisure, amusement, emotion of people etc., is very precious intangible asset to individual or company.The data of apple device storage can also be served as the one of electronic material evidence simultaneously, help the judicial departments such as public security, procuratorial work and administrative law-enforcement departments' evidence obtaining to solve a case.
Although there are on the market some apple device datas to extract software, cannot carry out data extraction for single program, also cannot monitor and show extracting data; Extracting method is divided into two step: i, reading out data conventionally at present; Ii, write hard disk; Etc. then after to be written completing, the above step of recycle completes the extraction mirror image of all data; This method extraction rate is slow.
Summary of the invention
The defect that the present invention is directed to prior art provides a kind of method of extracting apple device body data, can effectively solve the problem that above-mentioned prior art exists.
To achieve these goals, the technical solution used in the present invention is:
A kind of method of extracting apple device body data is provided, has comprised the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
As preferably, in described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
As preferably, in described step 6, obtain data, analyze data, monitored data is three-channel parallel pattern.
As preferably, this method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing works alone.
As preferably, if extract and interrupt in described step 6, the prompting that monitoring can be interrupted.
beneficial effect
Compared with prior art innovative point of the present invention is: can all extract or screen extraction apple device body data, independently read and write thread for two and accelerate data extraction rate, and in leaching process, carry out data decryptor and displaying, reduce individual and company's factor data and lose the loss bringing, extract strong electronic evidence, reduce the difficulty of juridical authorities's clear up a criminal case.
Brief description of the drawings
Fig. 1 is the process flow diagram of the embodiment of the present invention.
Embodiment
In order to describe the specific embodiment of the present invention in detail, below in conjunction with accompanying drawing with explanation:
For overcoming the above problems, the present invention also provides a kind of method of extracting apple device body data, comprises the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title, the application domain of for example QQ is com.tencent.mqq, and application domain title is served and obtained by DeviceLookupApplications, opens the service of all application domains by itunes agreement;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
In described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
In described step 6, obtaining data, analyzing data, monitored data is three-channel parallel pattern.
Extract interruption, the prompting that monitoring can be interrupted if encounter because of carelessness data line in described step 6.
Expend the A time at reading out data in the prior art, data writing to storer expends the B time, and so total extraction is consuming time is N*(A+B); This method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing is independent works simultaneously, thus the time of having saved N*B, the extraction data time of raising single device.
More than describe and set forth detail to fully understand the present invention, implement but the present invention can also adopt other to be different from this describing mode.Therefore, the present invention is not limited to above disclosed specific embodiment.
Claims (5)
1. the method for kind of extraction apple device body data, is characterized in that comprising the following steps:
1), open Connection Service, connect and monitor mobile phone, judge whether successful connection, if successfully connect and create and the interface channel of this mobile phone, if do not connect and point out and reconnect;
2), select to need to extract the application program of data, obtain application domain title;
3), mobile phone terminal is opened ApplicationSevice, AFCService, HouseArrestService;
4), the equipment end turn-on data service of obtaining, data decryptor service, data analysis service;
5), obtain the physical storage locations of selected application program, mobile phone terminal transmits data to equipment end;
6), equipment end is obtained data record, file structure and the filename of analysis data, size, extraction time, extraction rate the demonstration of monitoring the data of extracting;
7), data are write to storer.
2. a kind of method of extracting apple device body data according to claim 1, it is characterized in that: in described step 1, interface channel can create many and connects for multiple mobile phones simultaneously, and by unique 32 of apple equipment distinguish for No. ID each passage for mobile phone.
3. a kind of method of extracting apple device body data according to claim 1, is characterized in that: in described step 6, obtaining data, analyzing data, monitored data is three-channel parallel pattern.
4. a kind of method of extracting apple device body data according to claim 1, is characterized in that: described method is opened up two special read-write threads, shares two data fields, and the data field of reading and writing works alone.
5. a kind of method of extracting apple device body data according to claim 1, is characterized in that: if extract and interrupt in described step 6, the prompting that monitoring can be interrupted.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410431810.2A CN104156330A (en) | 2014-08-29 | 2014-08-29 | Method for extracting machine body data of Apple device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410431810.2A CN104156330A (en) | 2014-08-29 | 2014-08-29 | Method for extracting machine body data of Apple device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN104156330A true CN104156330A (en) | 2014-11-19 |
Family
ID=51881835
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410431810.2A Pending CN104156330A (en) | 2014-08-29 | 2014-08-29 | Method for extracting machine body data of Apple device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104156330A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106294632A (en) * | 2016-08-02 | 2017-01-04 | 四川秘无痕信息安全技术有限责任公司 | A kind of extracting method for hundred degree of map navigation path of iPhone |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2005096590A1 (en) * | 2004-03-31 | 2005-10-13 | British Telecommunications Public Limited Company | Method and apparatus for communicating data between computer devices |
| CN103970700A (en) * | 2014-05-28 | 2014-08-06 | 四川效率源信息安全技术有限责任公司 | Device and method for simultaneously recovering and extracting data of multiple pieces of Android equipment |
-
2014
- 2014-08-29 CN CN201410431810.2A patent/CN104156330A/en active Pending
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2005096590A1 (en) * | 2004-03-31 | 2005-10-13 | British Telecommunications Public Limited Company | Method and apparatus for communicating data between computer devices |
| CN103970700A (en) * | 2014-05-28 | 2014-08-06 | 四川效率源信息安全技术有限责任公司 | Device and method for simultaneously recovering and extracting data of multiple pieces of Android equipment |
Non-Patent Citations (1)
| Title |
|---|
| 汤伟 等: "一种基于iOS平台微信取证分析方法", 《软件产业与工程》 * |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106294632A (en) * | 2016-08-02 | 2017-01-04 | 四川秘无痕信息安全技术有限责任公司 | A kind of extracting method for hundred degree of map navigation path of iPhone |
| CN106294632B (en) * | 2016-08-02 | 2019-09-10 | 四川秘无痕科技有限责任公司 | A kind of extracting method for iPhone Baidu map guidance path |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10637674B2 (en) | System and method for real-time decoding and monitoring for encrypted instant messaging and other information exchange applications | |
| CN109214290A (en) | A kind of shops's client management method and device based on recognition of face | |
| CN104636435B (en) | Cloud terminal records screen method | |
| CN104038630A (en) | Speech processing method and device | |
| CN108804299A (en) | Application exception processing method and processing device | |
| CN103247290A (en) | Communication device and control method thereof | |
| CN103399865A (en) | Method and device for multi-media file generation | |
| CN104484116A (en) | Information input method and information input device | |
| CN103645825A (en) | Message processing method and device | |
| CN103455546B (en) | For setting up the method and system of profile for activity and behavior | |
| US9451423B2 (en) | Method and apparatus for recording information during a call | |
| CN104683591A (en) | Message disturbance-free method based on mobile terminal and mobile terminal using method | |
| CN103607512A (en) | Memo reminding method and terminal | |
| CN105139698A (en) | Information input method and device of point reading machine | |
| CN104572348A (en) | Terminal | |
| CN103500158A (en) | Method and device for annotating electronic document | |
| CN107562356B (en) | Fingerprint identification positioning method and device, storage medium and electronic equipment | |
| CN103793313A (en) | Fault recording method and system for mobile terminal | |
| US20160154545A1 (en) | Electronic device and method for managing and displaying application icons | |
| CN104156430A (en) | Device and method for fast extracting Android mobile phone data | |
| CN104156330A (en) | Method for extracting machine body data of Apple device | |
| US9008428B2 (en) | Efficient verification or disambiguation of character recognition results | |
| CN109068010A (en) | voice content recording method and device | |
| CN103220390A (en) | Method and terminal for marking newest contact ways of contacts | |
| CN104102411A (en) | Text editing method and text editing device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20141119 |
|
| WD01 | Invention patent application deemed withdrawn after publication |