具多重監控策略機制之數位證據保全方法

10.29428/9789860544169.201801.0177

許建隆；周彥均；陳囿精

數位證據 ； 同一性 ； 證據力 ； 鑑別加密法 ； 可轉換式鑑別加密法 ； Digital Evidence ； Integrity ； Weight of the Evidence ； Authenticated Encryption Scheme ； Convertible Authenticated Encryption Scheme

NCS 2017 全國計算機會議

2017（2018 / 01 / 01）

945 - 950

繁體中文

電腦網路科技的普及，在提升我們生活的便利性同時，犯罪者也更容易利用電腦技能進行非法行為，因此數位證據作為法院審判之重要依據已是無可避免之趨勢，無法因其具不可著痕跡地修改等數位資料之特性，而放棄此一重要證物。近年來，國內外學者紛紛提出數位鑑識之標準作業程序與相關規範，希望藉此維護數位證據之完整性，但當數位證據之同一性遭到爭執時，司法機關無法向外界對數位證據提出一個最有效直接的證明。本文基於數位證據之電子特性與司法環境之漏洞，提出具多重監控策略機制之數位證據保全方法，我們於鑑識實驗室內上司與下屬間建置一監督機制，若上司與下屬之間是一對一監督關係，可能容易引發上司舞弊、濫權、以及破壞隱私等問題，因此本方法將上司與下屬之間監督關係延伸，依據高度授權監督、門檻式授權監督、低度授權監督、以及全部監督與部分監督之組合，提供六種監督方式。

With the popularization of computer network technologies, while improving the convenience of our lives, perpetrators are also more likely to use computer skills to conduct illegal activities. It is a tendency that digital evidence is to be the important basis in the court, and we can not abandon this critical witness because the characters of digital information such that digital evidence can be easily multified. Recently, domestic scholars or foreign scholars proposed relevant standard operating procedures and other regulations to preserve the integrity of digital evidence. When the integrity of digital evidence comes to be controversial, the judiciary bureaus can not bring the direct proof to the mass, however. The thesis proposed the integrity protection method for digital evidence based on the flaws of the electronical character of digital information and judiciary circumstances. In the digital evidence protection method with multiple supervision mechanism, the supervision mechanism is set between the superior and the subordinate in the cyber forensics laboratory. If the supervisor and subordinate one-on-one supervise the relationship, may lead to boss fraud, abuse of power, as well as the destruction of privacy and other issues. So the method extends the relationships between the superior and the subordinate and provides six supervisal ways according to the combination of highly-authorized supervision, threshold-authorized supervision, lightly-authorized supervision with all-supervision and partial-supervision.