A COLLECTION METHOD OF VOLATILE EVIDENCE DATA WITH COMPUTER

摘要

One acquisition method of the variable proof data of one computer is arranged to prove that evidence is not modified, by proving variable evidence in Hash value. A kind of method, the secure volatile for a computer prove that data includes as follows. The current state of evidence is examined (S_10). Automatically variable proof data, generation/storage Hash value (S_20) are collected in operation for a plan in compact disc read-only memory. The title of tidal data recovering information, such as time, worker and relevant evidence (S_30). Storing data, a workman's name and a Hash value are sent to verification server (S_50). With manual inspection, it be examined whether Hash value or be not treaty (S_60).