华为和小米安卓智能手机录音的溯源鉴定研究  

Traceability Identifi cation of Recording Files Made by Huawei and Xiaomi Android Smartphones

作　　者：王俊 靳雅丹 WANG Jun;JIN Yadan(Criminal Investigation School of Southwest University of Political Science&Law,Chongqing 401120;Chongqing Institutes of Higher Education Key Forensic Science Laboratory,Chongqing 401120)

机构地区：[1]西南政法大学刑事侦查学院,重庆401120 [2]重庆市高校刑事科学技术重点实验室,重庆401120

出　　处：《刑事技术》2023年第4期386-393,共8页Forensic Science and Technology

基　　金：重庆市公安局2022年度重点委托项目(2022-XZWTZD01)。

摘　　要：为探究特定安卓智能手机录音的溯源鉴定方法,选用不同型号的华为和小米智能手机,模拟录音的录制、分享、删除等操作。依据录音文件元数据、手机操作系统记录数据、应用日志数据等的解析和比对分析结果,梳理特定手机录音录制设备的鉴别依据,总结录音文件生成后属性、状态是否发生变化的判定方法。研究结果表明,华为和小米智能手机所录制的录音文件,二者在数据记录方式和内容层面存在差异,但在录音的录制过程中,这两类手机均会在操作系统的特定文件中写入与录音文件相关的记录数据。由此,在鉴定过程中,可以通过系统文件、应用日志等的取证分析,来判定这两大品牌安卓智能手机录音文件的原始录制设备,以及录音文件的变动情况。Recordings made by mobile phone are a common form of evidence in current litigation,but it is easy to separate recording fi les from their initial equipment,so the evidence review of originality and integrity of recordings is prone to cause disputes,which often need to be resolved through judicial expertise.However,the current achievements mostly focus on the integrity identifi cation of mobile phone recordings and the equipment appraisal of IOS recording fi les.For the research on the traceability analysis of Android recording fi les,there is still a lack of research results.Because of this,we selected several Huawei and Xiaomi smartphones,simulated the typical operation behaviors such as recording,deleting,collecting,and transferring ordinary recordings and call recordings,and proposed a method for recording equipment identifi cation&state analysis based on the operating system fi les,application logs and specifi c backup data through experiments.The experimental results show data recording methods and contents differences between Huawei and Xiaomi smartphones.However,under the recording process,the two types of mobile phones will write data records related to the recording fi les in specifi c operating system fi les.Therefore,we can identify the original recording equipment of specifi c mobile phone recording fi les and their changes by analysing system fi les,application logs,and even the particular backup data.This method is effective for recording devices’identification of ordinary and call recordings made by Huawei and Xiaomi Android smartphones and their state analysis;Furthermore,it can also be used for equipment identification&state analysis for Harmony OS recordings and other multimedia fi les in Android smartphones.Of course,since many mobile phone manufacturers have made secondary development of the Android operating system,we must continue research equipment identification&state analysis of recordings made by other Android smartphone brands.

关 键 词：电子物证 华为 小米 安卓智能手机 录音文件 溯源鉴定 

分 类 号：DF793.2[政治法律—诉讼法学]