A METHOD FOR PROCESSING COMMANDS AND DATA IN WRITE BLOCK DEVICE FOR HARDDISK FORENSIC

摘要

PURPOSE: A command and data processing method of a write block device for hard disk forensics is provided to cut off command and data processing when any change occurs during digital forensics due to development and change of ATA related technology. CONSTITUTION: A command and data processing method of a write block device for hard disk forensics comprises the steps of: waiting for receiving commands transmitted from a host computer(S101), receiving commands transmitted from a host computer(S102), classifying the commands into six groups of read, information, transmission, write, protection and undefined, determining the received commands and moving them to processors for processing each command and data(S103), and completing the command and data processing(S110), and returning to the waiting step. The commands are ones used in the ATA (Advanced Technology Attachment) standard.