Abstract:
본 발명은 증거 데이터 수집 장치 및 그 방법에 관한 것으로, 저장매체를 확보하기 어려운 인터넷 상의 웹데이터나 기업 데이터베이스에서 쿼리를 통해 얻은 온라인 데이터 혹은 정보통신공간 상에서 수집된 각종 온라인 데이터 등과 같이 대용량의 공유 디스크에서 수집된 각종 온라인 데이터에 대하여 타임스탬프의 기능과 스크린캡쳐 기능을 선택 혹은 혼합적으로 수행하여 온라인 데이터의 증거 능력을 확보함으로써, 특정한 시점에 특정 데이터가 존재했음을 확인하여 하드디스크 드라이브를 압수하지 않고도 증거의 원본성 및 유효성을 확보할 수 있으며, 온라인데이터에 대한 증거능력을 향상시킬 수 있다. 온라인 데이터, 타임스탬프, 스크린캡쳐, 포렌식 이미지, HDD
Abstract:
PURPOSE: A speeding up method of a password checking process of the encrypted Microsoft Office 2007 file is provided to eliminate the item with the constant value within the arrangement and is provided to heighten the processing function. CONSTITUTION: A password which is inputted from a user is converted into the Unicode format of the double length (S10). In a process of generating an arrangement, which is configured with 4 byte variables from the 64 byte data segment for the SHA-1 hash value calculation, the item in which the arrangement value is the constant value is detected among the arranged items (S20). The item in which the arrangement value is the constant value is eliminated from the arrangement (S30). [Reference numerals] (AA) Start; (BB) End; (S10) Password which is inputted from a user is converted into the Unicode format of the double length; (S20) Process of generating an arrangement, which is configured with 4 byte variables from the 64 byte data segment for the SHA-1 hash value calculation, the item in which the arrangement value is the constant value is detected among the arranged items; (S30) Item in which the arrangement value is the constant value is eliminated from the arrangement; (S40) Calculate SHA-1 value and store HashRsul value; (S50) Calculate SHA-1 value and store HashRsul value on 64 bite to obtain 20 bite; (S60) Decode AES-128 bite on 16 bite ENCRYPTEDVERIFIER and 32 bite EncryptedVerifierHash; (S70) Check ecact password letter order
Abstract:
PURPOSE: A data visualization device and a method thereof are provided to visualize combination data as meaningful information by using a correlation included in the combination data even though data of different sources and different users is combined. CONSTITUTION: A single data collecting unit(110) collects single data having different formats. A first multi data generating unit(120) generates first multi data with first single data having the same format. A second multi data generating unit(130) generates second multi data with the first single data, second single data having a different format from the first single data's, and the first multi data. A data visualizing unit(140) visualizes the single data, the first and the second multi data. [Reference numerals] (110) Single data collecting unit; (120) First multi data generating unit; (130) Second multi data generating unit; (140) Data visualizing unit; (150) Power supply unit; (160) Main control unit
Abstract:
PURPOSE: A digital forensic device of cloud computing is provided to collect a digital forensic evidence when the leakage of a restricted document or the infringement of copyright occurs by using a messenger in a social network based on cloud computing. CONSTITUTION: A messenger information collecting unit(110) collects investigation-related information, output images and voices of a computer including a messenger, and files and messages of the messenger. A cloud storage investigation unit(120) collects and analyzes use information of a cloud storage service to generate a report. An evidence storage unit(130) stores a digital forensic evidence collected by the cloud storage investigation unit and the messenger information collecting unit. [Reference numerals] (100) Digital forensic device; (110) Messenger information collecting unit; (120) Cloud storage investigation unit; (130) Evidence storage unit
Abstract:
본 발명의 음절 분리에 기반한 문자열 검색 장치는, 검색어를 입력받는 검색어 입력부; 검색어를 입력받아 하나 이상의 음절을 갖는 검색 유닛으로 일정하게 분리하는 유닛 분리부; 및 검색어의 각 검색 유닛을 검색 대상 파일에서 검색하여 검색 대상 파일에서의 각 검색 유닛의 발생 위치를 추출하고, 추출한 발생 위치를 이용하여 입력받은 검색어와의 유사도를 계산하는 검색부를 구비한다. 본 발명에 의하면, 인덱스 생성시 사전에 사전을 구축해 두어야 하는 번거로움이 없으며, 인덱스 생성 속도가 빨라지고 오추출이 최소화되어 정확한 문자열 검색이 가능해진다.
Abstract:
PURPOSE: A multiple index apparatus of large scale evidence image in a digital forensic system and a method thereof are provided to shorten the generation time of an index database by generating several index databases according to the size of the evidence image. CONSTITUTION: A file system builder(101) constitutes an evidence image to a file system. A generating unit(102) generates an index database based on documents consisting of the file system. An adder unit(103) generates an additional index database based on the index added to the index database. A deleting unit(104) generates deletion information about the index database or the index database. A searching unit(105) searches a word from the index database or the index database.
Abstract:
PURPOSE: A local computer data indexed method and index device for the same are provided to realize index realized to content of web sites on a visiting web page list which remained to a local computer. CONSTITUTION: An index device collects a visit web page list which is remained in a computer of a user(S110). The index device automatically access at least one among web pages linked by the visit web page list. The index device obtains online text data(S120). The index device performs indexing about online text data. The index device generates index database(S130).
Abstract:
An iris recognition method and an apparatus for the iris recognition method are provided to detect the iris accurately and efficiently even though an eye is covered by eyebrows or an eyelid in an image of the eye. An iris recognition method includes a step of receiving an image of an eye(S100) and filtering the image with a threshold value to obtain a binary image(S105), a step of searching candidate central search regions for the pupil center using histogram information of the binary image(S110), a step of considering points belonging into the candidate central search regions in the binary image as candidate pupil center points and performing a masking operation on concentric circles obtained by varying the radius of a circle having each of the candidate pupil center points as a center point using eight pupil boundary mask templates to detect the boundary and the center point of the pupil(S115), and a step of performing a masking operation on concentric circles obtained by varying the radius of a circle having the detected center point of the pupil as a center point with six iris boundary mask templates to detect the boundary of the iris(S120).
Abstract:
본 발명은 입력된 지문 영상에 대하여 개인별 지문 특징을 융선의 기하학적 형태로 정의하고 융선의 배열 순서대로 정렬하여 등록 저장한 후, 저장된 융선의 상호 위치관계를 이용하여 지문을 인식하는 장치 및 방법에 관한 것이다. 즉, 본 발명은 지문 입력 수단을 통하여 입력되는 지문 영상을 데이터화함에 있어서, 융선의 모양 및 그 주변의 융선에 대하여 연결된 정보를 산출하고, 이를 개별 융선의 법선 방향과 연결 상태를 참조하여 고유한 순서로 정렬하여 저장하며, 이를 이용하여 비교 대상이 되는 지문에서 대응하는 하나의 융선을 탐색할 수 있으며, 이들 융선쌍으로부터 시작하여 순차적으로 연결 관계를 확인함으로써 전체 융선에 대한 탐색이 가능하며 이 과정에서 생기는 유사도를 판정하여 본인 여부를 판별함으로써 입력된 지문에 대한 인식과정에서 신뢰도가 향상되며, 특히 세선화된 작은 영역의 지문 영상만으로도 지문 인식이 가능하게 되어 융선의 개수도 작고 특징점의 개수는 더 작아지는 등 열악한 환경의 지문에 대하여도 오인식율을 현저하게 감소시킬 수 � �는 이점이 있다.
Abstract:
PURPOSE: A device and a method for certifying a user using a fingerprint characteristic point are provided to match the characteristic point on a limited hardware resource environment such as a smart card and a USB(Universal Serial Bus) token by reducing the memory use for the entire bins, and to enhance the safety of the biometric data by preventing the fingerprint data of a user from leaking out. CONSTITUTION: A fingerprint image input part(10) provides a scanned fingerprint image for registration to a host(30) through an I/O(Input/Output) interface(20), scans the fingerprint image of the user wanting the certification, and provides the scanned fingerprint image to the host(30) through the I/O interface(20). The host(30) includes a CPU(32) and a memory(34). The CPU(32) extracts the characteristic point from the fingerprint image for the registration, and simultaneously provides it to the memory(34) and a security token part(40). The memory(34) stores the characteristic point information for a registered fingerprint and the certification provided from the CPU(32). The security token part(40) such as the smart card or the USB token includes a microcomputer(42), a storing part(44), and a work memory(46).