CN109766725B - Data processing method, device, intelligent terminal and computer readable medium - Google Patents

Data processing method, device, intelligent terminal and computer readable medium Download PDF

Info

Publication number
CN109766725B
CN109766725B CN201811559476.3A CN201811559476A CN109766725B CN 109766725 B CN109766725 B CN 109766725B CN 201811559476 A CN201811559476 A CN 201811559476A CN 109766725 B CN109766725 B CN 109766725B
Authority
CN
China
Prior art keywords
evidence obtaining
browser client
evidence
page
button
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201811559476.3A
Other languages
Chinese (zh)
Other versions
CN109766725A (en
Inventor
赵浩然
刘洋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Chongqing Hualong Aidi Information Technology Co ltd
Original Assignee
Chongqing Hualong Aidi Information Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Chongqing Hualong Aidi Information Technology Co ltd filed Critical Chongqing Hualong Aidi Information Technology Co ltd
Priority to CN201811559476.3A priority Critical patent/CN109766725B/en
Publication of CN109766725A publication Critical patent/CN109766725A/en
Application granted granted Critical
Publication of CN109766725B publication Critical patent/CN109766725B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management

Landscapes

  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the invention discloses a data processing method, equipment, an intelligent terminal and a computer readable medium, wherein the method comprises the following steps: when the evidence obtaining browser client is detected to be started, the local time of the evidence obtaining browser client is synchronously processed with clock information acquired from time service equipment; determining a target class of the evidence obtaining instruction according to user operation triggering the evidence obtaining instruction, and determining a target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction according to a corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule; evidence obtaining is carried out on the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and evidence obtaining data associated with the page displayed by the evidence obtaining browser client is obtained; the evidence obtaining data and the evidence obtaining time information are packaged to generate an evidence package, and the evidence package is sent to the server, so that the evidence obtaining of the webpage data can be realized, the webpage data is prevented from being tampered, and the safety of the webpage data and the effectiveness as evidence are improved.

Description

Data processing method, device, intelligent terminal and computer readable medium
Technical Field
The present invention relates to the field of information security technologies, and in particular, to a data processing method, a device, an intelligent terminal, and a computer readable medium.
Background
With the rapid development of information technology, networks have become an indispensable part of life of people, and bring great effect and convenience to society. Meanwhile, the network brings a lot of illegal actions to society, such as network infringement, network crime, phishing and the like, and the illegal actions bring great threat to personal and property safety of people. However, websites are an important carrier for providing internet content, and as the number of websites proliferates, illegal events are being implemented on web pages endlessly. Therefore, how to manage the internet and audit and manage the bad content defined by laws of various countries on the network becomes a current research hotspot.
Disclosure of Invention
The embodiment of the invention provides a data processing method, data processing equipment, an intelligent terminal and a computer readable medium, which can realize evidence collection of webpage data, prevent the webpage data from being tampered or deleted, and improve the safety of the webpage data and the effectiveness as evidence.
In a first aspect, an embodiment of the present invention provides a data processing method, including:
When the evidence obtaining browser client is detected to be started, clock information is obtained from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information obtained from the time service equipment are synchronously processed;
after the local time of the evidence obtaining browser client side and clock information acquired from the time service equipment are synchronously processed, if an evidence obtaining instruction is acquired, determining a target class of the evidence obtaining instruction according to user operation triggering the evidence obtaining instruction, and determining a target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction according to a corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the classes of different evidence obtaining instructions correspond to different evidence obtaining rules;
the page displayed by the evidence obtaining browser client is obtained according to the target evidence obtaining rule, and evidence obtaining data associated with the page displayed by the evidence obtaining browser client is obtained, wherein the evidence obtaining data comprise page screenshot and page associated data;
and acquiring evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to a server.
In a second aspect, an embodiment of the present invention provides a data processing apparatus, including:
the synchronous unit is used for acquiring clock information from the appointed time service equipment when detecting that the evidence obtaining browser client is started, and carrying out synchronous processing on the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment;
the determining unit is used for determining the target category of the evidence obtaining instruction according to the user operation triggering the evidence obtaining instruction after the local time of the evidence obtaining browser client side and the clock information obtained from the time service equipment are synchronously processed, and determining the target evidence obtaining rule corresponding to the target category of the evidence obtaining instruction according to the corresponding relation between the category of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the categories of different evidence obtaining instructions correspond to different evidence obtaining rules;
the evidence obtaining unit is used for obtaining evidence of the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and obtaining evidence obtaining data associated with the page displayed by the evidence obtaining browser client, wherein the evidence obtaining data comprise page screenshot and page associated data;
The sending unit is used for obtaining evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client side and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to the server.
In a third aspect, an embodiment of the present invention provides an intelligent terminal, including a processor, an input device, an output device, and a memory, where the processor, the input device, the output device, and the memory are connected to each other, where the memory is configured to store a computer program supporting a server to execute the method described above, where the computer program includes program instructions, and where the processor is configured to invoke the program instructions to execute the method of the first aspect described above.
In a fifth aspect, embodiments of the present invention provide a computer readable storage medium storing a computer program comprising program instructions which, when executed by a processor, cause the processor to perform the method of the first aspect described above.
According to the embodiment of the invention, the local time of the evidence obtaining browser client is synchronously processed with the clock information acquired from the time service equipment, when the evidence obtaining instruction is acquired from the evidence obtaining browser client, the page displayed by the evidence obtaining browser client is subjected to evidence obtaining, evidence obtaining data associated with the page displayed by the evidence obtaining browser client is acquired, and the evidence obtaining data and the evidence obtaining time information are packaged to generate an evidence package, so that the evidence package is sent to a server. By the method, evidence collection of the webpage data can be realized, the webpage data is prevented from being tampered or deleted, and the safety of the webpage data and the effectiveness as evidence are improved.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for the description of the embodiments will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a schematic diagram of a data processing system according to an embodiment of the present invention;
FIG. 2 is a schematic flow chart of a data processing method according to an embodiment of the present invention;
FIG. 3a is a schematic diagram of a login interface according to an embodiment of the present invention;
FIG. 3b is a schematic diagram of a time synchronization interface according to an embodiment of the present invention;
FIG. 3c is a schematic diagram of an interface after time synchronization according to an embodiment of the present invention;
FIG. 4a is a schematic diagram of an interface for user login according to an embodiment of the present invention;
FIG. 4b is a schematic diagram of another user login interface provided by an embodiment of the present invention;
FIG. 5 is an interface schematic diagram of a forensic arrangement according to an embodiment of the present invention;
FIG. 6 is a flowchart of another data processing method according to an embodiment of the present invention;
FIG. 7a is a schematic diagram of an interface for providing a button according to an embodiment of the present invention;
FIG. 7b is a schematic diagram of an APP evidence obtaining interface according to an embodiment of the present invention;
FIG. 7c is a schematic diagram of an APP evidence obtaining interface according to an embodiment of the present invention;
FIG. 7d is a schematic diagram of an interface for storing video according to an embodiment of the present invention;
FIG. 8 is a schematic diagram of a data processing apparatus according to an embodiment of the present invention;
fig. 9 is a schematic structural diagram of an intelligent terminal according to an embodiment of the present invention.
Detailed Description
The following description of the embodiments of the present invention will be made clearly and fully with reference to the accompanying drawings, in which it is evident that the embodiments described are some, but not all embodiments of the invention. All other embodiments, which can be made by those skilled in the art based on the embodiments of the invention without making any inventive effort, are intended to be within the scope of the invention.
The embodiment of the invention provides a data processing method, equipment and an intelligent terminal for more effectively obtaining evidence of webpage data, wherein the evidence obtaining browser client encapsulates data information obtained in the webpage loading process to generate an evidence packet, and sends the evidence packet to a server for storage.
In one embodiment, the data processing method is applicable to a data processing device that may be provided in a forensic browser client, which in some embodiments may be provided on an intelligent terminal. In one embodiment, the evidence obtaining browser client is an internet data evidence obtaining special browser, uses a Chromium item as a source code basis, has webpage compatibility and high-speed browsing experience comparable with the Chrome, and has more expansion directions, so that a good and rich internet evidence obtaining product ecology is established. The evidence obtaining browser client is a browser client which is brand-new and takes a browser as a main carrier, can directly patrol and conveniently obtain evidence of illegal and illegal webpages without interrupting the browsing process when browsing webpages. The evidence obtaining browser client reserves almost all browser functions of the Chromium browser and has basically consistent use experience with the Chromium native browser. The evidence obtaining browser client mainly comprises address bar navigation, label management, a menu and settings. After the browser is started or during key operation, the local time of the evidence obtaining browser client is checked with a designated time service device (such as a Beidou dual-mode time service server) so as to correct the local time, and the evidence obtaining and evidence obtaining time attribute and the evidence obtaining and evidence generating process are calibrated. In some embodiments, the forensic browser client can run under a Windows operating system, such as the Windows 7 operating system or the Windows10 operating system.
The evidence obtaining browser client is a browser integrating web page browsing, data extraction and solidification, and is connected with the server through secure transmission to realize evidence management. The browser kernel rendering is utilized, the record of webpage data is reserved to the greatest extent, rapid and traceless evidence collection is realized through an efficient extraction technology, and a one-stop evidence management platform can be realized based on a unified background management channel. The evidence obtaining browser client is based on a Chromium browser, so that most of webpage compatibility can be solved, control of the original browser codes can be utilized, the webpage data can be mined to a great extent, and the data reliability is improved. The evidence obtaining browser client adopts a multi-label mode, evidence obtaining is carried out on the current webpage at any time in the webpage browsing process, and high-speed browsing experience is provided. The evidence obtaining browser client is based on a Chromium browser and has various expansion modes, including plug-in units, network expansion and the like, so that extremely rich ecological applications are expanded.
In one embodiment, when it is detected that the forensic browser client is turned on, the data processing device may acquire clock information from the designated time service device, and synchronize the local time of the forensic browser client with the clock information acquired from the time service device. After the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, if the data processing equipment acquires the evidence obtaining instruction, the target class of the evidence obtaining instruction can be determined according to the user operation triggering the evidence obtaining instruction, and the target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction is determined according to the corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the classes of different evidence obtaining instructions correspond to different evidence obtaining rules. The data processing equipment can obtain evidence of the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and obtain evidence obtaining data associated with the page displayed by the evidence obtaining browser client, wherein the evidence obtaining data comprises a screenshot of the page and page associated data. The data processing equipment can acquire evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client side and the appointed time service equipment in the evidence obtaining process, package the evidence obtaining data and the evidence obtaining time information to generate an evidence package, and send the evidence package to the server, so that evidence obtaining of webpage data can be realized, webpage data is prevented from being tampered or deleted, and safety of the webpage data and effectiveness as evidence are improved.
The data processing method provided by the embodiment of the invention is schematically described below with reference to the accompanying drawings.
Referring to fig. 1, fig. 1 is a schematic structural diagram of a data processing system according to an embodiment of the present invention, as shown in fig. 1, the system includes: a server 11 and a forensic browser client 12. The forensic browser client 12 may be installed in a smart terminal to process data. When the forensic browser client 12 detects that the forensic browser client is started, clock information can be acquired from the designated time service device, and the local time of the forensic browser client and the clock information acquired from the time service device are processed synchronously. After the local time of the evidence obtaining browser client and the clock information acquired from the time service device are processed synchronously, if the evidence obtaining instruction is acquired by the evidence obtaining browser client 12, the target category of the evidence obtaining instruction can be determined according to the user operation triggering the evidence obtaining instruction, and the target evidence obtaining rule corresponding to the target category of the evidence obtaining instruction can be determined according to the corresponding relation between the category of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the categories of different evidence obtaining instructions correspond to different evidence obtaining rules. The forensic browser client 12 may forensic the page displayed by the forensic browser client according to the target forensic rule, and obtain forensic data associated with the page displayed by the forensic browser client, where the forensic data includes a screenshot of the page and page association data. The evidence obtaining browser client 12 may obtain evidence obtaining time information after time synchronization processing between the evidence obtaining browser client and the designated time service device in the evidence obtaining process, encapsulate the evidence obtaining data and the evidence obtaining time information, generate an evidence package, and send the evidence package to the server 11.
Referring to fig. 2, fig. 2 is a schematic flowchart of a data processing method according to an embodiment of the present invention, and as shown in fig. 2, the method may include:
s201: when the evidence obtaining browser client is detected to be started, clock information is obtained from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information obtained from the time service equipment are synchronously processed.
In the embodiment of the invention, when the evidence obtaining browser client is detected to be started, the data processing equipment can acquire clock information from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed. In some embodiments, the designated time service device may be a beidou dual-mode time service server. The evidence obtaining browser client is subjected to time synchronization processing, so that the authenticity of evidence obtaining can be ensured.
In one embodiment, the evidence obtaining browser client comprises a clock display area, an evidence obtaining button, an APP evidence obtaining button, a screen recording button, an evidence obtaining management button, an evidence obtaining setting button and a batch evidence obtaining button; the clock display area is used for displaying time information after the evidence obtaining browser client side and clock information acquired from the time service equipment are subjected to synchronous processing.
Specifically, fig. 3a, fig. 3b, and fig. 3c are taken as examples to illustrate an embodiment of the present invention, fig. 3a is a schematic diagram of a login interface, fig. 3b is a schematic diagram of a time synchronization interface, and fig. 3c is a schematic diagram of an interface after time synchronization. After the forensic browser client is successfully installed by the installation program, outputting a browser interface 31 as shown in fig. 3a, wherein a start button 311 is included on the browser interface 31, and when the user clicks the start button 311, the forensic browser client can be started. When it is detected that the forensic browser client is started, the forensic browser client may output a prompt interface 312 shown in fig. 3b, where the prompt interface 312 is used to prompt the user whether to start the beidou time service synchronization, and if it is detected that the user clicks the determination button 313 on the prompt interface 312, the data processing device may acquire clock information from a designated time service device (such as a beidou time service server), and perform synchronization processing on the local time of the forensic browser client and the clock information acquired from the time service device, and output the synchronized clock information in a clock display area 314 on the interface of the forensic browser client as shown in fig. 3 c.
S202: after the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, if an evidence obtaining instruction is acquired, determining a target category of the evidence obtaining instruction according to user operation triggering the evidence obtaining instruction, and determining a target evidence obtaining rule corresponding to the target category of the evidence obtaining instruction according to a corresponding relation between the category of the preset evidence obtaining instruction and the evidence obtaining rule.
In the embodiment of the invention, after the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, if the data processing equipment acquires the evidence obtaining instruction, the target class of the evidence obtaining instruction can be determined according to the user operation triggering the evidence obtaining instruction, the target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction is determined according to the corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, and in some embodiments, the classes of different evidence obtaining instructions correspond to different evidence obtaining rules.
In one embodiment, when the data processing device obtains the evidence obtaining instruction, it may detect whether the evidence obtaining browser client logs in, if it is detected that the evidence obtaining browser client does not log in, then when it is detected that any user operation related to evidence obtaining is performed, it may trigger the evidence obtaining browser client to output a login interface, and obtain identity authentication information input by a user, so as to verify the identity authentication information, and if verification is successful, it may allow the evidence obtaining operation to be performed. In some embodiments, the user operation related to forensics may be any one of a click operation of a forensics button, a click operation of a batch forensics button, a click operation of an APP forensics button, etc. for forensics. In some embodiments, the identity authentication information may include an account number and a password, the account number may be any one or more of a number, a word, a picture, a fingerprint, and a voice, and the password page may be any one or more of a number, a word, a picture, a fingerprint, and a voice.
In some embodiments, the user interface of the forensic browser client includes a login button, if it is detected that the forensic browser client is not logged in, the user may click the login button on the user interface of the forensic browser client to output a login interface, and obtain identity authentication information input by the user to verify the identity authentication information, and if the verification is successful, the forensic operation may be allowed to be performed.
Specifically, fig. 4a and 4b are taken as an example to illustrate an interface schematic diagram of user login provided by an embodiment of the present invention, and fig. 4a is an interface schematic diagram of user login provided by another embodiment of the present invention. When the data processing device acquires the evidence obtaining instruction, whether the evidence obtaining browser client logs in or not can be detected, if the evidence obtaining browser client is detected to not log in, a login button 401 shown in fig. 4a can be clicked, if the login is not successful, a prompt interface 402 shown in fig. 4a is output, if the click operation of the login button on the prompt interface 402 is detected, a login interface 403 shown in fig. 4b can be output, a user can input an account number and a password on the login interface 403 to verify the account number and the password, and if the verification is successful, the evidence obtaining operation can be allowed to be executed.
S203: and obtaining evidence of the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and obtaining evidence obtaining data associated with the page displayed by the evidence obtaining browser client.
In the embodiment of the invention, the data processing equipment can obtain evidence of the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and obtain evidence obtaining data associated with the page displayed by the evidence obtaining browser client. In some embodiments, the forensic data includes a page screenshot and page association data.
In one embodiment, the data processing apparatus may perform forensic setting before forensics is performed on a page displayed by the forensic browser client according to the target forensic rule. The evidence obtaining browser client comprises an evidence obtaining setting button, or the evidence obtaining setting button can be obtained through a right key at any position of a page of the browser client. When the data processing equipment acquires the click operation of the evidence obtaining setting button by a user, user setting, evidence obtaining function setting, screen recording setting and the like can be performed on the evidence obtaining browser client.
Taking fig. 5 as an example for illustration, fig. 5 is a schematic diagram of an interface of forensic setting provided in an embodiment of the present invention, if the data processing apparatus detects a click operation of a forensic setting button 501 by a user, a forensic setting interface 502 may be output to perform forensic setting, function setting, screen recording setting, and the like in the forensic setting interface 502.
S204: and acquiring evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to a server.
In the embodiment of the invention, the data processing equipment can acquire the evidence obtaining time information after the evidence obtaining browser client side and the appointed time service equipment perform time synchronization processing in the evidence obtaining process, package the evidence obtaining data and the evidence obtaining time information, generate an evidence package and send the evidence package to the server.
In one embodiment, the data processing device may further encrypt the forensic data and the forensic time information when encapsulating the forensic data and the forensic time information, so as to ensure the security of the evidence package.
In the embodiment of the invention, the data processing equipment can synchronously process the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment, and when the evidence obtaining instruction is acquired, the target class of the evidence obtaining instruction is determined according to the user operation triggering the evidence obtaining instruction, and the target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction is determined according to the corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, so that the page displayed by the evidence obtaining browser client is subjected to evidence obtaining according to the target evidence obtaining rule, and the evidence obtaining data associated with the page displayed by the evidence obtaining browser client is acquired. The data processing device can generate an evidence packet by packaging the evidence obtaining data and the evidence obtaining time information, and send the evidence packet to a server. By the method, the evidence can be obtained from the webpage data, the webpage data is prevented from being tampered or deleted, and the safety of the webpage data and the effectiveness as evidence are improved.
Referring to fig. 6, fig. 6 is a flowchart of another data processing method according to an embodiment of the present invention, where the data processing method described in fig. 6 is different from the data processing method described in fig. 2 in that the embodiment of the present invention is a detailed description of a evidence obtaining process. The data processing method shown in fig. 6 may include the steps of:
s601: when the evidence obtaining browser client is detected to be started, clock information is obtained from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information obtained from the time service equipment are synchronously processed.
In the embodiment of the present invention, when it is detected that the evidence obtaining browser client is started, the data processing device may acquire clock information from the designated time service device, and perform synchronous processing on the local time of the evidence obtaining browser client and the clock information acquired from the time service device.
S602: and acquiring a evidence obtaining instruction according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client, and determining the target category of the evidence obtaining instruction.
In the embodiment of the invention, the data processing equipment can acquire the evidence obtaining instruction according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client, and determine the target category of the evidence obtaining instruction.
In one embodiment, the evidence obtaining browser client includes an evidence obtaining button, after the local time of the evidence obtaining browser client and the clock information acquired from the time service device are synchronously processed, the data processing device may acquire a click operation of the evidence obtaining button by a user, trigger to acquire an evidence obtaining instruction corresponding to the evidence obtaining button according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client, and determine a target category corresponding to the evidence obtaining instruction.
In one embodiment, the forensic browser client includes an APP forensic button, and after the local time of the forensic browser client is synchronously processed with the clock information acquired from the time service device, the data processing device may acquire a click operation on the forensic browser client on the APP forensic button, and output at least one APP included in the forensic browser client according to the acquired click operation on the APP forensic button on the forensic browser client. The data processing equipment can determine a evidence obtaining target APP according to the selection operation of a user, obtain evidence obtaining instructions corresponding to the target APP, and determine target categories corresponding to the evidence obtaining instructions.
In one embodiment, the forensic browser client includes a batch forensic button, after the local time of the forensic browser client and the clock information acquired from the time service device are synchronously processed, the data processing device may acquire a click operation on the batch forensic button on the forensic browser client, and trigger to acquire a forensic instruction corresponding to the batch forensic button according to the acquired click operation on the batch forensic button on the forensic browser client, so as to determine a target category corresponding to the forensic instruction.
S603: and determining a target evidence obtaining rule corresponding to the target category of the evidence obtaining instruction according to the corresponding relation between the category of the preset evidence obtaining instruction and the evidence obtaining rule.
In the embodiment of the invention, the data processing equipment can determine the target evidence obtaining rule corresponding to the target category of the evidence obtaining instruction according to the corresponding relation between the category of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the categories of different evidence obtaining instructions correspond to different evidence obtaining rules.
S604: and obtaining evidence from the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule so as to obtain evidence obtaining data associated with the page displayed by the evidence obtaining browser client.
In the embodiment of the invention, the data processing equipment can evidence the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule so as to obtain evidence obtaining data associated with the page displayed by the evidence obtaining browser client.
In one embodiment, if the target forensic rule is determined according to a click operation on a forensic button, the data processing device may respond to a forensic instruction corresponding to the forensic button, perform screenshot on a page currently displayed by the forensic browser client to obtain a first page screenshot, and obtain first page association data associated with the page currently displayed by the forensic browser client. In some embodiments, the first page association data is data information obtained from a time period from when the forensic browser client receives a web page link request to when the requested web page loading ends.
Specifically, taking fig. 7a as an example, fig. 7a is a schematic diagram of an interface of a button provided in an embodiment of the present invention, if the target evidence obtaining rule is determined according to a click operation on the evidence obtaining button 702, the data processing apparatus may respond to an evidence obtaining instruction corresponding to the evidence obtaining button 702, perform screenshot on a page currently displayed by the evidence obtaining browser client to obtain a first screenshot, and obtain first page association data associated with the page currently displayed by the evidence obtaining browser client.
In one embodiment, if the target forensic rule is determined according to a click operation on an APP forensic button, the data processing apparatus may respond to a forensic instruction corresponding to the target APP, perform screenshot on a page currently displayed by the target APP of the forensic browser client to obtain a second screenshot of the page, and obtain second page association data associated with the page currently displayed by the target APP. In some embodiments, the second page association data is data information obtained from a time period from when the forensic browser client receives the target APP web page link request to when the requested web page loading ends.
Specifically, fig. 7a, fig. 7b, and fig. 7c may be combined to describe an interface schematic diagram of APP evidence obtaining provided by the embodiment of the present invention, and fig. 7b is an interface schematic diagram of APP evidence obtaining provided by the embodiment of the present invention. If the data processing apparatus acquires a click operation of the APP evidence obtaining button 701 shown in fig. 7a by a user, an interface as shown in fig. 7b may be output. If the data processing device obtains the clicking operation of the APP704 in fig. 7b, the interface shown in fig. 7c may be output, and in response to the evidence obtaining instruction corresponding to the APP704, the current page shown in fig. 7c is subjected to screenshot, so as to obtain a second screenshot of the page, and second page association data associated with the current page shown in fig. 7c is obtained.
In one embodiment, if the target forensic rule is determined according to a click operation on a batch forensic button, the data processing device may respond to a forensic instruction corresponding to the batch forensic button, perform screenshot on a page displayed by the forensic browser client in a preset time range to obtain a third screenshot of the page, and obtain third page association data associated with the page displayed by the forensic browser client in the preset time range. In some embodiments, the third page association data is data information obtained from the forensic browser client within a preset time frame.
Taking fig. 7a as an example, if the target forensic rule is determined according to a click operation on the batch forensic button 704, the data processing apparatus may respond to a forensic instruction corresponding to the batch forensic button 704, perform screenshot on a page displayed by the forensic browser client within a preset time range to obtain a third screenshot of the page, and obtain third page related data related to the page displayed by the forensic browser client within the preset time range.
In one embodiment, the forensic browser client includes a screen recording button, and if the data processing device detects a click operation on the screen recording button on the forensic browser client, clock information can be obtained from a designated time service device, and the local time of the forensic browser client and the clock information obtained from the time service device are processed synchronously. After the local time of the evidence obtaining browser client and the clock information acquired from the time service device are synchronously processed, the data processing device can record the video of the page displayed by the evidence obtaining browser client or the video of the content displayed by the user interface of the device where the evidence obtaining browser client is located according to the preset time length, and the recorded video is stored in the local storage device.
Specifically, fig. 7a and fig. 7d are examples, and fig. 7d is an interface schematic diagram of video storage according to an embodiment of the present invention. If a click operation on the screen recording button 703 shown in fig. 7a is detected on the forensic browser client, the data processing apparatus may acquire clock information from the designated time service apparatus, and perform synchronization processing on the local time of the forensic browser client and the clock information acquired from the time service apparatus. After the local time of the evidence obtaining browser client and the clock information acquired from the time service device are processed synchronously, the data processing device can record the video of the page displayed by the evidence obtaining browser client according to a preset time length, output a storage interface shown in fig. 7d when the recording is finished, and store the recorded video according to a storage path selected by a user in the storage interface shown in fig. 7 d.
S605: and acquiring evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client side and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, and generating an evidence package so as to send the evidence package to a server.
In the embodiment of the invention, the data processing equipment can acquire the evidence obtaining time information after the evidence obtaining browser client side and the appointed time service equipment perform time synchronization processing in the evidence obtaining process, and package the evidence obtaining data and the evidence obtaining time information to generate an evidence package, so as to send the evidence package to the server.
In one embodiment, the data processing device may detect whether a forensic screen recording function is started in the forensic browser client when forensic is performed on a page displayed by the forensic browser client, and if so, may record a video when forensic is performed on the page displayed by the forensic browser client, and encapsulate the forensic data, the forensic time information, and the recorded video to generate an evidence package.
In one embodiment, the data processing device may store evidence packages of evidence obtained by evidence obtaining on the evidence obtaining browser client so that the user can view the evidence obtaining data packages at any time.
In the embodiment of the invention, the data processing equipment can synchronously process the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment, and when the evidence obtaining instruction is acquired, the target class of the evidence obtaining instruction is determined according to the user operation triggering the evidence obtaining instruction, and the target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction is determined according to the corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, so that the page displayed by the evidence obtaining browser client is subjected to evidence obtaining according to the target evidence obtaining rule, and the evidence obtaining data associated with the page displayed by the evidence obtaining browser client is acquired. The data processing device can generate an evidence packet by packaging the evidence obtaining data and the evidence obtaining time information, and send the evidence packet to a server. By the method, the evidence can be obtained from the webpage data, the webpage data is prevented from being tampered or deleted, and the safety of the webpage data and the effectiveness as evidence are improved.
Referring to fig. 8, fig. 8 is a schematic structural diagram of a data processing device according to an embodiment of the present invention, where the device shown in fig. 8 may be set in an intelligent terminal, and the intelligent terminal may be a smart phone, a tablet computer, an intelligent wearable device, or the like. The data processing apparatus shown in fig. 8 may include a synchronization unit 801, a determination unit 802, a forensic unit 803, and a transmission unit 804.
A synchronization unit 801, configured to acquire clock information from a designated time service device when it is detected that the evidence obtaining browser client is started, and perform synchronization processing on local time of the evidence obtaining browser client and the clock information acquired from the time service device;
a determining unit 802, configured to determine, after performing synchronization processing on the local time of the evidence obtaining browser client and clock information acquired from the time service device, a target class of the evidence obtaining instruction according to a user operation triggering the evidence obtaining instruction, and determine, according to a correspondence between a preset class of the evidence obtaining instruction and a evidence obtaining rule, a target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction, where classes of different evidence obtaining instructions correspond to different evidence obtaining rules;
The evidence obtaining unit 803 is configured to obtain evidence from a page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and obtain evidence obtaining data associated with the page displayed by the evidence obtaining browser client, where the evidence obtaining data includes a screenshot of the page and page association data;
the sending unit 804 is configured to obtain evidence obtaining time information after time synchronization processing is performed on the evidence obtaining browser client and the designated time service device in the evidence obtaining process, encapsulate the evidence obtaining data and the evidence obtaining time information, generate an evidence package, and send the evidence package to a server.
Further, the evidence obtaining browser client comprises a clock display area, an evidence obtaining button, an application APP evidence obtaining button, a screen recording button, an evidence obtaining management button, an evidence obtaining setting button and a batch evidence obtaining button;
the clock display area is used for displaying time information after the evidence obtaining browser client side and clock information acquired from the time service equipment are subjected to synchronous processing.
Further, the forensic browser client comprises a forensic button; the determining unit 802 is specifically configured to, when determining the target class of the forensic instruction according to a user operation triggering the forensic instruction:
Acquiring clicking operation of the evidence obtaining button on the evidence obtaining browser client;
triggering and acquiring a evidence obtaining instruction corresponding to the evidence obtaining button according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client, and determining a target category corresponding to the evidence obtaining instruction;
the determining unit 802 is specifically configured to, when performing forensics on a page displayed by the forensic browser client according to the target forensics rule, and acquiring forensics data associated with the page displayed by the forensic browser client:
responding to a evidence obtaining instruction corresponding to the evidence obtaining button, and capturing a screen of a page currently displayed by the evidence obtaining browser client to obtain a first screen capture of the page;
and acquiring first page association data associated with a page currently displayed by the evidence obtaining browser client, wherein the first page association data is data information acquired from the beginning of a webpage link request received by the evidence obtaining browser client to the ending of loading of a requested webpage.
Further, the evidence obtaining browser client comprises an APP evidence obtaining button; the determining unit 802 is specifically configured to, when determining the target class of the forensic instruction according to a user operation triggering the forensic instruction:
Acquiring clicking operation of the APP evidence obtaining button on the evidence obtaining browser client;
outputting at least one APP contained in the evidence obtaining browser client according to the obtained click operation of the APP evidence obtaining button on the evidence obtaining browser client;
determining a evidence obtaining target APP according to a selection operation of a user, obtaining an evidence obtaining instruction corresponding to the target APP, and determining a target category corresponding to the evidence obtaining instruction;
the determining unit 802 is specifically configured to, when performing forensics on a page displayed by the forensic browser client according to the target forensics rule, and acquiring forensics data associated with the page displayed by the forensic browser client:
responding to a evidence obtaining instruction corresponding to the target APP, and capturing a screen of a page currently displayed by the target APP of the evidence obtaining browser client to obtain a second screen capture;
and acquiring second page association data associated with a page currently displayed by the target APP, wherein the second page association data is data information acquired from the time period from the start of receiving a webpage link request of the target APP by the evidence obtaining browser client to the end of loading the requested webpage.
Further, the evidence obtaining browser client comprises a batch evidence obtaining button; the determining unit 802 is specifically configured to, when determining the target class of the forensic instruction according to a user operation triggering the forensic instruction:
acquiring clicking operation of the batch evidence obtaining buttons on the evidence obtaining browser client;
triggering and acquiring evidence obtaining instructions corresponding to the batch evidence obtaining buttons according to the acquired click operation of the batch evidence obtaining buttons on the evidence obtaining browser client, and determining target categories corresponding to the evidence obtaining instructions;
the determining unit 802 is specifically configured to, when performing forensics on a page displayed by the forensic browser client according to the target forensics rule, and acquiring forensics data associated with the page displayed by the forensic browser client:
responding to a evidence obtaining instruction corresponding to the batch evidence obtaining buttons, and capturing a screen of a page displayed by the evidence obtaining browser client in a preset time range to obtain a third screen;
and acquiring third page association data associated with the page displayed by the evidence obtaining browser client in a preset time range, wherein the third page association data is data information acquired from the evidence obtaining browser client in the preset time range.
Further, the forensics unit 803 is further configured to:
detecting whether a evidence obtaining screen recording function is started in the evidence obtaining browser client when the page displayed by the evidence obtaining browser client is subjected to evidence obtaining;
if the detection result is yes, recording a video when the page displayed by the evidence obtaining browser client is obtained, and packaging the evidence obtaining data, the evidence obtaining time information and the recorded video to generate an evidence package.
Further, the forensic browser client comprises a screen recording button, the device further comprises a screen recording unit 805, and the screen recording unit 805 is configured to:
if the click operation of the screen recording button on the evidence obtaining browser client is detected, clock information is acquired from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed;
after the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, recording the video of the page displayed by the evidence obtaining browser client or the video of the content displayed by the user interface of the equipment where the evidence obtaining browser client is located according to the preset time length, and storing the recorded video in the local storage equipment.
In the embodiment of the invention, the data processing equipment can synchronously process the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment, and when the evidence obtaining instruction is acquired, the target class of the evidence obtaining instruction is determined according to the user operation triggering the evidence obtaining instruction, and the target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction is determined according to the corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, so that the page displayed by the evidence obtaining browser client is subjected to evidence obtaining according to the target evidence obtaining rule, and the evidence obtaining data associated with the page displayed by the evidence obtaining browser client is acquired. The data processing device can generate an evidence packet by packaging the evidence obtaining data and the evidence obtaining time information, and send the evidence packet to a server. By the method, the evidence can be obtained from the webpage data, the webpage data is prevented from being tampered or deleted, and the safety of the webpage data and the effectiveness as evidence are improved.
Referring to fig. 9, fig. 9 is a schematic structural diagram of an intelligent terminal according to an embodiment of the present invention. The server in the present embodiment as shown in the drawings may include: one or more processors 901; one or more input devices 902, one or more output devices 903, and a memory 904. The processor 901, the input device 902, the output device 903, and the memory 904 described above are connected by a bus 905. The memory 904 is used for storing a computer program comprising program instructions, and the processor 901 is used for executing the program instructions stored in the memory 904. Wherein the processor 901 is configured to invoke program code stored in the memory 504 for performing the following operations:
When the evidence obtaining browser client is detected to be started, clock information is obtained from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information obtained from the time service equipment are synchronously processed;
after the local time of the evidence obtaining browser client side and clock information acquired from the time service equipment are synchronously processed, if an evidence obtaining instruction is acquired, determining a target class of the evidence obtaining instruction according to user operation triggering the evidence obtaining instruction, and determining a target evidence obtaining rule corresponding to the target class of the evidence obtaining instruction according to a corresponding relation between the class of the preset evidence obtaining instruction and the evidence obtaining rule, wherein the classes of different evidence obtaining instructions correspond to different evidence obtaining rules;
the page displayed by the evidence obtaining browser client is obtained according to the target evidence obtaining rule, and evidence obtaining data associated with the page displayed by the evidence obtaining browser client is obtained, wherein the evidence obtaining data comprise page screenshot and page associated data;
and acquiring evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to a server.
Further, the evidence obtaining browser client comprises a clock display area, an evidence obtaining button, an application APP evidence obtaining button, a screen recording button, an evidence obtaining management button, an evidence obtaining setting button and a batch evidence obtaining button;
the clock display area is used for displaying time information after the evidence obtaining browser client side and clock information acquired from the time service equipment are subjected to synchronous processing.
Further, the forensic browser client comprises a forensic button; when the processor 901 determines the target class of the forensic instruction according to the user operation triggering the forensic instruction, the processor is specifically configured to:
acquiring clicking operation of the evidence obtaining button on the evidence obtaining browser client;
triggering and acquiring a evidence obtaining instruction corresponding to the evidence obtaining button according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client, and determining a target category corresponding to the evidence obtaining instruction;
the processor 901 performs evidence obtaining on the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and is specifically configured to:
Responding to a evidence obtaining instruction corresponding to the evidence obtaining button, and capturing a screen of a page currently displayed by the evidence obtaining browser client to obtain a first screen capture of the page;
and acquiring first page association data associated with a page currently displayed by the evidence obtaining browser client, wherein the first page association data is data information acquired from the beginning of a webpage link request received by the evidence obtaining browser client to the ending of loading of a requested webpage.
Further, the evidence obtaining browser client comprises an APP evidence obtaining button; when the processor 901 determines the target class of the forensic instruction according to the user operation triggering the forensic instruction, the processor is specifically configured to:
acquiring clicking operation of the APP evidence obtaining button on the evidence obtaining browser client;
outputting at least one APP contained in the evidence obtaining browser client according to the obtained click operation of the APP evidence obtaining button on the evidence obtaining browser client;
determining a evidence obtaining target APP according to a selection operation of a user, obtaining an evidence obtaining instruction corresponding to the target APP, and determining a target category corresponding to the evidence obtaining instruction;
the processor 901 performs evidence obtaining on the page displayed by the evidence obtaining browser client according to the target evidence obtaining rule, and is specifically configured to:
Responding to a evidence obtaining instruction corresponding to the target APP, and capturing a screen of a page currently displayed by the target APP of the evidence obtaining browser client to obtain a second screen capture;
and acquiring second page association data associated with a page currently displayed by the target APP, wherein the second page association data is data information acquired from the time period from the start of receiving a webpage link request of the target APP by the evidence obtaining browser client to the end of loading the requested webpage.
Further, the evidence obtaining browser client comprises a batch evidence obtaining button; when the processor 501 determines the target class of the forensic instruction according to the user operation triggering the forensic instruction, the processor is specifically configured to:
acquiring clicking operation of the batch evidence obtaining buttons on the evidence obtaining browser client;
triggering and acquiring evidence obtaining instructions corresponding to the batch evidence obtaining buttons according to the acquired click operation of the batch evidence obtaining buttons on the evidence obtaining browser client, and determining target categories corresponding to the evidence obtaining instructions;
the processor 501 is specifically configured to, when performing forensics on a page displayed by the forensics browser client according to the target forensics rule, and acquiring forensics data associated with the page displayed by the forensics browser client:
Responding to a evidence obtaining instruction corresponding to the batch evidence obtaining buttons, and capturing a screen of a page displayed by the evidence obtaining browser client in a preset time range to obtain a third screen;
and acquiring third page association data associated with the page displayed by the evidence obtaining browser client in a preset time range, wherein the third page association data is data information acquired from the evidence obtaining browser client in the preset time range.
Further, the processor 901 is further configured to:
detecting whether a evidence obtaining screen recording function is started in the evidence obtaining browser client when the page displayed by the evidence obtaining browser client is subjected to evidence obtaining;
if the detection result is yes, recording a video when the page displayed by the evidence obtaining browser client is obtained, and packaging the evidence obtaining data, the evidence obtaining time information and the recorded video to generate an evidence package.
Further, the forensic browser client includes a screen recording button, and the processor 901 is further configured to:
if the click operation of the screen recording button on the evidence obtaining browser client is detected, clock information is acquired from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed;
After the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, recording the video of the page displayed by the evidence obtaining browser client or the video of the content displayed by the user interface of the equipment where the evidence obtaining browser client is located according to the preset time length, and storing the recorded video in the local storage equipment.
It should be appreciated that in embodiments of the present invention, the processor 901 may be a central processing unit (Central Processing Unit, CPU), which may also be other general purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), off-the-shelf programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
The input device 902 may include a touch pad, microphone, etc., and the output device 903 may include a display (LCD, etc.), speakers, etc.
The memory 904 may include read only memory and random access memory, and provides instructions and data to the processor 901. A portion of memory 904 may also include non-volatile random access memory. For example, the memory 904 may also store information of device type.
In a specific implementation, the processor 901, the input device 902, and the output device 903 described in the embodiments of the present invention may execute the implementation described in the embodiment of fig. 2 and the embodiment of fig. 6 provided in the embodiments of the present invention, and may also execute the implementation of the server described in the embodiments of the present invention, which are not described herein again.
In the embodiment of the present invention, there is further provided a computer readable storage medium, where a computer program is stored, where the computer program when executed by a processor implements an implementation as described in the embodiment of fig. 2 or fig. 6, and the implementation of a server as described in the embodiment of the present invention may also be performed, which is not described herein again.
The computer readable storage medium may be an internal storage unit of the server according to any of the foregoing embodiments, for example, a hard disk or a memory of the server. The computer readable storage medium may also be an external storage device of the server, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), or the like, which are provided on the server. Further, the computer readable storage medium may also include both an internal storage unit and an external storage device of the server. The computer-readable storage medium is used to store the computer program and other programs and data required by the server. The computer-readable storage medium may also be used to temporarily store data that has been output or is to be output.
While the invention has been described with reference to certain preferred embodiments, it will be understood by those skilled in the art that various changes and substitutions of equivalents may be made and equivalents will be apparent to those skilled in the art without departing from the scope of the invention. Therefore, the protection scope of the invention is subject to the protection scope of the claims.

Claims (8)

1. A method of data processing, comprising:
displaying a browser interface of a evidence obtaining browser client, wherein the browser interface comprises a start button, and a prompt interface is displayed in response to clicking operation of the start button and is used for prompting whether time service time synchronization is carried out or not;
responding to clicking operation of a confirmation button on the prompt interface, synchronizing the local time of the evidence obtaining browser client with clock information acquired from time service equipment, and outputting the synchronized clock information in a clock display area on the interface of the evidence obtaining browser client; the interface of the evidence obtaining browser client also comprises an application program APP evidence obtaining button and a batch evidence obtaining button;
After the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, if the click operation of the APP evidence obtaining button on the evidence obtaining browser client is acquired, displaying an icon of at least one APP included in the evidence obtaining browser client in an interface of the evidence obtaining browser client according to the acquired click operation of the APP evidence obtaining button on the evidence obtaining browser client;
determining a evidence obtaining target APP according to a selection operation of a user, displaying an application interface of the target APP in an interface of a client side of the evidence obtaining browser, and obtaining an evidence obtaining instruction corresponding to the target APP;
responding to a evidence obtaining instruction corresponding to the target APP, and capturing a screen of a page currently displayed by the target APP of the evidence obtaining browser client to obtain a second screen capture;
acquiring second page association data associated with a page currently displayed by the target APP, wherein the second page association data is data information acquired from the time period from the start of receiving a webpage link request of the target APP to the end of loading a requested webpage by the evidence obtaining browser client, and the second page screenshot and the second page association data form evidence obtaining data;
If the click operation of the batch evidence obtaining buttons on the evidence obtaining browser client is obtained, obtaining evidence obtaining instructions corresponding to the batch evidence obtaining buttons according to the obtained click operation of the batch evidence obtaining buttons on the evidence obtaining browser client;
responding to a evidence obtaining instruction corresponding to the batch evidence obtaining buttons, and capturing a screen of a page displayed by the evidence obtaining browser client in a preset time range to obtain a third screen;
acquiring third page related data related to a page displayed by the evidence obtaining browser client in a preset time range, wherein the third page related data is data information acquired from the evidence obtaining browser client in the preset time range, and the third page screenshot and the third page related data form evidence obtaining data;
and acquiring evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to a server.
2. The method of claim 1, wherein the step of determining the position of the substrate comprises,
And the interface of the evidence obtaining browser client also comprises an evidence obtaining button, a screen recording button, an evidence obtaining management button or an evidence obtaining setting button.
3. The method of claim 1, further comprising a forensic button on an interface of the forensic browser client; the method further comprises the steps of:
after the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, if the click operation of the evidence obtaining button on the evidence obtaining browser client is acquired, acquiring an evidence obtaining instruction corresponding to the evidence obtaining button according to the acquired click operation of the evidence obtaining button on the evidence obtaining browser client;
responding to a evidence obtaining instruction corresponding to the evidence obtaining button, and capturing a screen of a page currently displayed by the evidence obtaining browser client to obtain a first screen capture of the page;
and acquiring first page associated data associated with a page currently displayed by the evidence obtaining browser client, wherein the first page associated data is data information acquired from the beginning of a webpage link request received by the evidence obtaining browser client to the ending of loading of a requested webpage, and the first page screenshot and the first page associated data form the evidence obtaining data.
4. The method according to claim 1, wherein the method further comprises:
detecting whether a evidence obtaining screen recording function is started in the evidence obtaining browser client when the page displayed by the evidence obtaining browser client is subjected to evidence obtaining;
if the detection result is yes, recording a video when the page displayed by the evidence obtaining browser client is obtained, and packaging the evidence obtaining data, the evidence obtaining time information and the recorded video to generate an evidence package.
5. The method of claim 1, wherein the forensic browser client further comprises a screen capture button on an interface, the method further comprising:
if the click operation of the screen recording button on the evidence obtaining browser client is detected, clock information is acquired from the appointed time service equipment, and the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed;
after the local time of the evidence obtaining browser client and the clock information acquired from the time service equipment are synchronously processed, recording the video of the page displayed by the evidence obtaining browser client or the video of the content displayed by the user interface of the equipment where the evidence obtaining browser client is located according to the preset time length, and storing the recorded video in the local storage equipment.
6. A data processing apparatus, comprising:
the synchronous unit is used for displaying a browser interface of the evidence obtaining browser client, the browser interface comprises a start button, a prompt interface is displayed in response to clicking operation of the start button, and the prompt interface is used for prompting whether time service time synchronization is carried out or not; responding to clicking operation of a confirmation button on the prompt interface, synchronizing the local time of the evidence obtaining browser client with clock information acquired from time service equipment, and outputting the synchronized clock information in a clock display area on the interface of the evidence obtaining browser client; the interface of the evidence obtaining browser client also comprises an application program APP evidence obtaining button and a batch evidence obtaining button;
the determining unit is used for displaying an icon of at least one APP included in the evidence obtaining browser client in an interface of the evidence obtaining browser client according to the obtained click operation of the APP evidence obtaining button on the evidence obtaining browser client if the click operation of the APP evidence obtaining button on the evidence obtaining browser client is obtained after the local time of the evidence obtaining browser client and the clock information obtained from the time service device are synchronously processed; determining a evidence obtaining target APP according to a selection operation of a user, displaying an application interface of the target APP in an interface of a client side of the evidence obtaining browser, and obtaining an evidence obtaining instruction corresponding to the target APP;
The evidence obtaining unit is used for responding to the evidence obtaining instruction corresponding to the target APP, and obtaining a second screenshot of the page currently displayed by the target APP of the evidence obtaining browser client; acquiring second page association data associated with a page currently displayed by the target APP, wherein the second page association data is data information acquired from the time period from the start of receiving a webpage link request of the target APP to the end of loading a requested webpage by the evidence obtaining browser client, and the second page screenshot and the second page association data form evidence obtaining data;
the determining unit is further configured to, after performing synchronization processing on the local time of the forensic browser client and clock information acquired from the time service device, obtain a forensic instruction corresponding to the batch forensic button according to the obtained click operation on the batch forensic button on the forensic browser client if the click operation on the batch forensic button on the forensic browser client is obtained;
the evidence obtaining unit is further used for responding to evidence obtaining instructions corresponding to the batch evidence obtaining buttons, and obtaining a third screenshot of the page displayed by the evidence obtaining browser client in a preset time range; acquiring third page related data related to a page displayed by the evidence obtaining browser client in a preset time range, wherein the third page related data is data information acquired from the evidence obtaining browser client in the preset time range, and the third page screenshot and the third page related data form evidence obtaining data;
The sending unit is used for obtaining evidence obtaining time information after time synchronization processing is carried out on the evidence obtaining browser client side and the appointed time service equipment in the evidence obtaining process, packaging the evidence obtaining data and the evidence obtaining time information, generating an evidence package, and sending the evidence package to the server.
7. An intelligent terminal comprising a processor, an input device, an output device, and a memory, the processor, the input device, the output device, and the memory being interconnected, wherein the memory is configured to store a computer program comprising program instructions, the processor being configured to invoke the program instructions to perform the method of any of claims 1-5.
8. A computer readable storage medium, characterized in that the computer readable storage medium stores a computer program comprising program instructions which, when executed by a processor, cause the processor to perform the method of any of claims 1-5.
CN201811559476.3A 2018-12-19 2018-12-19 Data processing method, device, intelligent terminal and computer readable medium Active CN109766725B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811559476.3A CN109766725B (en) 2018-12-19 2018-12-19 Data processing method, device, intelligent terminal and computer readable medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811559476.3A CN109766725B (en) 2018-12-19 2018-12-19 Data processing method, device, intelligent terminal and computer readable medium

Publications (2)

Publication Number Publication Date
CN109766725A CN109766725A (en) 2019-05-17
CN109766725B true CN109766725B (en) 2023-07-14

Family

ID=66451459

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811559476.3A Active CN109766725B (en) 2018-12-19 2018-12-19 Data processing method, device, intelligent terminal and computer readable medium

Country Status (1)

Country Link
CN (1) CN109766725B (en)

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109783052B (en) * 2018-12-27 2021-11-12 深圳市轱辘车联数据技术有限公司 Data sorting method, device, server and computer readable storage medium
CN110704876A (en) * 2019-09-02 2020-01-17 杭州趣链科技有限公司 Webpage evidence obtaining and evidence fixing method based on block chain
CN114465738A (en) * 2020-10-21 2022-05-10 阿里巴巴集团控股有限公司 Application program evidence obtaining method, system, device and storage medium
CN112507271B (en) * 2020-12-14 2023-03-24 杭州趣链科技有限公司 Webpage evidence obtaining method, device and equipment
CN113495764B (en) * 2021-09-06 2021-12-14 广州市高奈特网络科技有限公司 Automatic data extraction method and device, computer equipment and storage medium
CN113987472B (en) * 2021-09-14 2023-07-18 北京纽盾网安信息技术有限公司 Webpage browsing security detection method, device and system

Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102130973A (en) * 2011-04-28 2011-07-20 沈阳工程学院 System and method for performing automatic batch network forensics on email

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106096953A (en) * 2016-06-27 2016-11-09 宇龙计算机通信科技(深圳)有限公司 safe payment method and system
CN106878265B (en) * 2016-12-21 2020-09-18 重庆华龙艾迪信息技术有限公司 Data processing method and device
CN107688754A (en) * 2017-10-20 2018-02-13 国信嘉宁数据技术有限公司 A kind of electronic evidence evidence collecting method and device
CN107682734A (en) * 2017-10-20 2018-02-09 国信嘉宁数据技术有限公司 The evidence collecting method and relevant apparatus and readable storage medium storing program for executing of a kind of electronic evidence
CN107943997B (en) * 2017-12-05 2020-08-07 厦门市美亚柏科信息股份有限公司 Remote website evidence obtaining method based on Google browser, terminal device and storage medium

Patent Citations (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102130973A (en) * 2011-04-28 2011-07-20 沈阳工程学院 System and method for performing automatic batch network forensics on email

Also Published As

Publication number Publication date
CN109766725A (en) 2019-05-17

Similar Documents

Publication Publication Date Title
CN109766725B (en) Data processing method, device, intelligent terminal and computer readable medium
EP2860906B1 (en) Identity authentication method and device
EP3176719B1 (en) Methods and devices for acquiring certification document
US9680823B2 (en) Convenient login method, apparatus and system for automatically detecting and filling in login field within web environment or application
TWI516972B (en) Method for applying safety verification, applying server, applying client and system
CN104967586A (en) User identity authentication method, user identity authentication apparatus and user identity authentication system
CN114650154B (en) Webpage authority behavior control method and device, computer equipment and storage medium
CN111835714A (en) Information verification processing method, client and server
CN110580318A (en) Information display method and device and storage medium
CN114157568B (en) Browser secure access method, device, equipment and storage medium
WO2022127743A1 (en) Content display method and terminal device
WO2017185889A1 (en) Application installation package detection method and detection device, and computer readable storage medium
CN108509228B (en) Page loading method, terminal equipment and computer readable storage medium
CN110647736A (en) Plug-in agent system login method and device, computer equipment and storage medium
CN113312577A (en) Webpage resource processing method and device, electronic equipment and storage medium
CN111666567A (en) Detection method, device, computer program and medium for malicious modification of application program
EP3410332B1 (en) A system and method for transferring data to an authentication device
CN113326462B (en) H5 page watermarking method, server, computer equipment and storage medium
CN111371643B (en) Authentication method, device and storage medium
WO2022193142A1 (en) Behavior monitoring method and apparatus, terminal device, and computer readable storage medium
KR101636708B1 (en) Web site verification apparatus using two channel certification and method thereof
CN112714351A (en) Evidence obtaining method, evidence obtaining device and server
CN103942313B (en) Method and device for displaying web page and terminal
KR102325169B1 (en) Security marking method, device and security terminal
CN113613041A (en) Page identification method, device and system, electronic equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant