基于微信日志文件对苹果手机的音频文件进行溯源分析  

Source tracing into iPhone-stored Audio Files Based on WeChat Logs

作　　者：周娟[1] 王俊 易爽 袁红照 ZHOU Juan;WANG Jun;YI Shuang;YUAN Hongzhao(Criminal Investigation School&Forensic Expertise Center,Southwest University of Political Science and Law,Chongqing,400120,China)

机构地区：[1]西南政法大学刑事侦查学院,西南政法大学司法鉴定中心,重庆400120

出　　处：《刑事技术》2022年第2期211-215,共5页Forensic Science and Technology

基　　金：国家自然科学基金青年项目(62002301);重庆市技术创新与应用示范项目(cstc2018jscx-msybX0115、cstc2019jcyj-msxm X0393);重庆市教委科技项目(KJQN201900307、KJQN201900305)。

摘　　要：苹果手机的“语音备忘录”“微信”“文件”三种APP之间可以对音频文件进行转发及转储。在转发及转储的过程中,音频文件大小和所记录内容没有改变,但是音频文件的元数据信息及电子数据信息却会发生改变。因此,语音备忘录中所保存的音频文件的真实性鉴定除了对音频文件本身做常规的元数据分析、信号分析、语义分析、电子数据分析,还需要对音频文件的生成及流转的整个过程中系统及应用程序的日志文件进行溯源性分析。本文通过案例,介绍如何通过微信日志文件对音频的流转过程进行溯源,并对录音真实性进行综合判断。iPhone furnishes the functional APPs of “Voice Memo”, “WeChat” and “File”, facilitating users to forward and dump audio fi les across them. Usually, either forwarding or dumping can remain the audio fi le unchanged of its size and recorded content, yet making it changed of the metadata information and electronic data. Therefore, the audio fi les stored in “Voice Memo” should be authenticated with not only the routine analyses of their metadata, signal, semantics and electronic data but also source-tracing into their systemic and applicative log fi les resulted throughout the entire course of generation and transformation from the audio fi les. With a real case, an introduction was here made on how to trace into the transferring process of audio fi les through iPhone-stored “WeChat” log fi les and accordingly judge the authenticity of the relevant audio recordings synthetically.

关 键 词：语音备忘录 音频文件 微信日志文件 溯源性分析 录音真实性 

分 类 号：DF793.2[政治法律—诉讼法学]