WO2014169632A1

WO2014169632A1 - Forensics processing method and apparatus for mobile device

Info

Publication number: WO2014169632A1
Application number: PCT/CN2013/087157
Authority: WO
Inventors: 李贺; 许磊
Original assignee: 中兴通讯股份有限公司
Priority date: 2013-08-22
Filing date: 2013-11-14
Publication date: 2014-10-23
Also published as: CN104424671A

Abstract

A forensics processing method and apparatus for a mobile device. The forensics processing method for a mobile device comprises the following steps: A. detecting an acceleration value of a motion state of a user and a slope angle value in the vertical direction in real time (S10); B. acquiring the detected acceleration value and slope angle value in the vertical direction every one preset time period, and analyzing a motion track of the user according to the acquired angle value (S20); C. judging whether the detected current acceleration value of the user is greater than a first preset value or not (S30); and if so, executing step D, otherwise executing step C; D. according to the detected current acceleration value of the user and the motion track, judging whether the user collides with others or not (S40); and if so, executing step E, otherwise executing step C; and E. when it is judged that the detected slope angle value of the user is greater than a second preset value, controlling the mobile device to perform image and/or voice collection (S50). The present invention improves the timeliness of forensics in a collision accident.

Description

The present invention relates to the field of mobile terminals, and in particular, to a mobile device forensic processing method and apparatus. BACKGROUND OF THE INVENTION Due to the development of social transportation, the trend of population-intensive urbanization is obvious, and sudden collision accidents are gradually increasing. Once the impact accident occurs, the damage to the human body may be local or systemic. The degree of injury depends mainly on the impact position and whether it is handled in time. Both of these aspects need to be recorded at the first time of the accident to facilitate accident accountability. Therefore, how to collect evidence for collision accidents and ensure the timeliness of obtaining evidence becomes an urgent problem to be solved. SUMMARY OF THE INVENTION A primary object of embodiments of the present invention is to provide a method for forensic processing of a mobile device, which aims to improve the timeliness of forensic in a collision event. In order to achieve the object of the present invention, an embodiment of the present invention provides a mobile device forensic processing method, including the following steps:

A. Real-time detection of the acceleration value of the user's motion state and the tilt angle value of the vertical direction; B. Obtaining the detected acceleration value and the tilt angle value of the vertical direction for each preset preset time period, and analyzing according to the obtained angle value The user's trajectory;

C, determining whether the current acceleration value of the user is greater than the first preset value; if yes, executing step D, otherwise performing step C;

D, according to the detection of the user's current acceleration value and the motion trajectory to determine whether the user has a collision; if yes, perform step E, otherwise perform step C;

E. Control the mobile device to perform image and/or sound collection when it is detected that the user's tilt angle value is greater than the second preset value. Preferably, the step E is specifically: when it is detected that the current tilt angle value of the user is greater than the second preset value, controlling the mobile device to send a help message to the preset number, and controlling the mobile device to perform image and / or sound collection. Preferably, the step E includes:

El. When it is detected that the current tilt angle value of the user is greater than the second preset value, determine whether the light intensity of the current environment of the mobile device is greater than a third preset value. If yes, perform step E2, if otherwise, perform step E3. ;

E2, controlling the mobile device to perform image and sound collection;

E3. Control the mobile device to perform sound collection. Preferably, after performing step E, the method further includes:

F. Save the collected image and/or sound information to the mobile device, or output the collected image and/or sound information to a preset terminal device by wireless transmission. Preferably, the collected image and/or sound information is output to the preset terminal device by means of wireless transmission, specifically: when the collected image and/or sound information reaches a fourth preset value, the currently collected image is obtained. And / or sound information is output in the preset terminal device.

The embodiment of the present invention further provides a mobile device forensic processing device, where the mobile device forensic processing device includes: a detecting device, configured to detect an acceleration value of a user's motion state and a tilt angle value of a vertical direction in real time; the analysis module is set to Obtaining the detected acceleration value and the tilt angle value of the vertical direction every preset time period, and analyzing the motion track of the user according to the obtained angle value; the first determining module is configured to determine whether the current acceleration value of the user is detected The second determining module is configured to: when it is determined that the current acceleration value of the user is greater than the first preset value, determine whether the user occurs according to the detected current acceleration value of the user and the motion track. The processing module is configured to control the mobile device to perform image and/or sound collection when the second determining module determines that the user has collided, and when detecting that the user's tilt angle value is greater than the second preset value. Preferably, the processing module is configured to: when it is detected that the current tilt angle value of the user is greater than the second preset value, control the mobile device to send a help message to the preset number, and control the mobile device to perform image and / or sound collection. Preferably, the processing module includes: a determining unit, configured to determine, when the user detects that the current tilt angle value of the user is greater than the second preset value, determining whether the light intensity of the current environment of the mobile device is greater than a third preset value; The control unit is configured to control the mobile device to perform image and sound collection when the light intensity of the current environment of the mobile device is greater than a third preset value; and when the current light intensity of the mobile device is less than or equal to the third When the value is set, the mobile device is controlled to perform sound collection. Preferably, the mobile device forensic processing device further includes: a management module, configured to save the collected image and/or sound information to the mobile device, or output the collected image and/or sound information by wireless transmission To the default terminal device. Preferably, the management module outputs the collected image and/or sound information to the preset terminal device by means of wireless transmission, specifically: when the collected image and/or sound information reaches the fourth preset value, The currently acquired image and/or sound information is outputted in a preset terminal device.

The mobile device forensic processing method provided by the embodiment of the present invention determines whether the user collides by detecting the acceleration value and the tilt angle value during the movement of the user, and collects an image of the current environment and/or when determining that the user launches the collision. Sound information to ensure the timeliness and effectiveness of on-site evidence collection in collision incidents. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic flowchart of a first embodiment of a mobile device forensic processing method according to an embodiment of the present invention; FIG. 2 is a schematic flowchart of a second embodiment of a mobile device forensic processing method according to an embodiment of the present invention; FIG. 4 is a schematic structural diagram of an embodiment of a mobile device forensic processing device according to an embodiment of the present invention; FIG. 5 is a schematic structural diagram of a processing module of FIG. The implementation, functional features, and advantages of the present invention will be further described with reference to the accompanying drawings. The specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention. Embodiments of the present invention provide a mobile device forensic processing method. Referring to FIG. 1, FIG. 1 is a schematic flowchart diagram of a first embodiment of a mobile device forensic processing method according to an embodiment of the present invention. The mobile device forensic processing method provided in this embodiment includes the following steps: Step S10: detecting an acceleration value of a user motion state and a tilt angle value of a vertical direction in real time; in this embodiment, the mobile device is a device having a three-axis acceleration sensor. For example, a mobile phone, the following is a detailed description of a mobile phone. When the user moves, the three-axis acceleration sensor in the mobile phone will detect the acceleration change of the user during the movement and the inclination angle value of the user from the vertical direction. Specifically, the three-axis acceleration sensor detects the acceleration of the user in the three directions of the X-axis (front-rear direction), the Y-axis (left-right direction), and the z-axis (up-and-down direction) during the movement, and according to the accelerations in the three directions , Calculate to obtain a combined acceleration value. The tilt angle value includes a roll angle value (an angle of left and right tilt) and a tilt angle value (an angle of front and rear tilt), and the above-described three-axis acceleration sensor is configured to calculate an angle value of the user tilted in the vertical direction according to a change in the angular velocity of the user. . Step S20: Acquire the detected acceleration value and the tilt angle value in the vertical direction for each preset time period, and analyze the motion track of the user according to the obtained angle value. In this embodiment, the time length of the preset time period It can be set according to actual needs, and is not further limited herein. For example, when there are only slight changes in the X-axis among the several acceleration values that are continuously acquired to the user, it may be preliminarily determined that the user is walking or running. Step S30, determining whether the current acceleration value of the user is greater than the first preset value; if yes, executing step S40, otherwise performing step S30; step S40, determining the user according to the detected current acceleration value of the user and the motion track Whether a collision occurs; if yes, step S50 is performed, otherwise step S30 is performed; step S50, when it is detected that the user's tilt angle value is greater than the second preset value, the mobile device is controlled to perform image and/or sound collection. In this embodiment, the acceleration value of the three-axis acceleration sensor is determined in real time, and when the acceleration value detected by the triaxial acceleration sensor changes greatly (that is, when the acceleration value is greater than the first preset), it is determined that the user is highly likely to occur. The collision is then compared with the motion trajectory obtained by the analysis of step S20 according to the current acceleration, To determine whether the user meets the collision feature, if yes, determine whether the user has a collision according to the detected inclination angle value of the user and the size of the second preset value; otherwise, proceed to step S30. When the tilt angle value is greater than the second preset value (ie, the roll angle value or the tilt angle value is greater than the second preset value), it is determined that the user has collided, and then the mobile phone is controlled to turn on the camera function or the recording function, The current environment performs image and/or sound collection; when the tilt angle value is greater than the second preset value, the process returns to step S30. It should be noted that the first preset value and the second preset value may be obtained by performing multiple tests on the human body fall process, which will not be further described herein. The mobile device forensic processing method provided by the embodiment of the present invention determines whether the user collides by detecting the acceleration value and the tilt angle value during the movement of the user, and collects an image of the current environment and/or when determining that the user launches the collision. Sound information to ensure the timeliness and effectiveness of on-site evidence collection in collision incidents.

Preferably, based on the foregoing embodiment, in the embodiment, the step S50 is specifically: when the user detects that the current tilt angle value of the user is greater than the second preset value, controlling the mobile device to send the help message to the preset number, And controlling the mobile device for image and/or sound collection. In this embodiment, the mobile device is a mobile phone, and the preset number is a friend and a friend set by the user to timely handle the user's fall accident. Through the SMS function of the mobile phone, if the user has detected that the user has sent a collision, the mobile phone will send a help information to the preset mobile phone to inform the corresponding relatives and friends that they are currently in a collision state and need his help. So that friends and relatives can be rushed to the collision site in time to deal with the accident. The content of the above-mentioned help text message can be set according to actual needs, and is not further limited herein.

Referring to FIG. 2, FIG. 2 is a schematic flowchart diagram of a second embodiment of a mobile device forensic processing method according to an embodiment of the present invention. Based on the foregoing embodiment, in the embodiment, the step S50 includes: Step S51: When it is determined that the current tilt angle value of the user is greater than the second preset value, determining whether the light intensity of the current environment of the mobile device is greater than the first The third preset value, if yes, step S52 is performed, if otherwise, step S53 is performed; step S52, the mobile device is controlled to perform image and sound collection; and step S53, the mobile device is controlled to perform sound collection. In this embodiment, when the mobile phone determines that the user has collided, the mobile phone can be controlled to turn on the camera, and the camera performs photosensitivity detection. When the light intensity is sufficient, the mobile phone is controlled to turn on the camera function, thereby collecting images and sounds of the current environment. . When the light intensity is not enough, the control turns off the camera and turns to the recorder to capture the sound of the current environment.

Preferably, referring to FIG. 3, FIG. 3 is a schematic flowchart of a third embodiment of a mobile device forensic processing method according to an embodiment of the present invention. Based on the foregoing embodiment, in this embodiment, after performing step S50, the method further includes: Step S60, collecting The image and/or sound information is saved to the mobile device, or the captured image and/or sound information is output to the preset terminal device by wireless transmission. In this embodiment, a file may be created in the local memory of the mobile device for storing captured graphics and/or audio information, that is, the mobile phone creates a video file to store the captured or recorded content. When the recording or recording is completed, the above files can be directly saved to the memory of the mobile phone, or can be output to other mobile devices by wireless transmission.

Preferably, in this embodiment, the step of outputting the collected image and/or sound information to the preset terminal device by means of wireless transmission is specifically: when the collected image and/or sound information reaches the fourth preset value The currently acquired image and/or sound information is output to the preset terminal device. In this embodiment, when the size of the file is greater than the fourth preset value, a file is created again, and the connected image and/or voice information is stored. By monitoring the size of each saved image and/or voice information file, the size of each file can be effectively controlled, thereby ensuring that data transfer between the mobile device and the device terminal is not possible due to excessive file size. It should be noted that the manner of wireless transmission between the mobile device and the terminal device may be set according to actual needs. In this embodiment, the mobile device and the terminal device are preferably mobile phones, and the mobile device outputs the file to the terminal device. Preferably, the size of the file is preferably the maximum capacity of a multimedia message.

The embodiment of the invention further provides a mobile device forensic processing device, which is used to implement the above method. Referring to FIG. 4, FIG. 4 is a schematic structural diagram of an embodiment of a mobile device forensic processing apparatus according to an embodiment of the present invention. The mobile device forensics processing device provided in this embodiment includes: The detecting device 100 is configured to detect an acceleration value of a user's motion state and a tilt value of a vertical direction in real time. In this embodiment, the mobile device is a device having a three-axis acceleration sensor, such as a mobile phone. Description. When the user moves, the three-axis acceleration sensor in the mobile phone will detect the acceleration change of the user during the movement and the inclination angle value of the user from the vertical direction. Specifically, the three-axis acceleration sensor detects the acceleration of the user in the three directions of the X-axis (front-rear direction), the Y-axis (left-right direction), and the Z-axis (up-and-down direction) during the movement, and according to the accelerations in the three directions , Calculate to obtain a combined acceleration value. The tilt angle value includes a roll angle value (an angle of left and right tilt) and a tilt angle value (an angle of front and rear tilt), and the above-described three-axis acceleration sensor is configured to calculate an angle value of the user tilted in the vertical direction according to a change in the angular velocity of the user. . It should be noted that the above-described three-axis acceleration sensor is the detection module 100. The analysis module 200 is configured to acquire the detected acceleration value and the tilt value of the vertical direction every preset time period, and analyze the motion track of the user according to the obtained angle value. In this embodiment, the preset time period is The length of time can be set according to actual needs, and is not further limited herein. For example, when the analysis module 200 continuously acquires only a small change in the X-axis among the several acceleration values of the user detected by the detection module 100, it may be preliminarily determined that the user is walking or running. The first determining module 300 is configured to determine whether the current acceleration value of the user is greater than the first preset value; the second determining module 400 is configured to: when determining that the current acceleration value of the user is greater than the first preset value, according to The detecting the current acceleration value of the user and the motion trajectory to determine whether the user has collided; the processing module 500 is configured to: when the second determining module 400 determines that the user has collided, and detects that the tilt angle value of the user is greater than When the preset value is two, the mobile device is controlled to perform image and/or sound collection. In this embodiment, the acceleration value of the three-axis acceleration sensor is determined in real time, and when the acceleration value detected by the triaxial acceleration sensor changes greatly (that is, when the acceleration value is greater than the first preset), it is determined that the user is highly likely to occur. The collision is then compared by the second determining module 400 according to the current acceleration and the motion trajectory obtained by the analysis module 200 to determine whether the user meets the collision feature, and if so, according to the detected user's tilt angle value and the second preset. The size of the value determines whether the user has a collision; otherwise, the first determination module 300 continues to perform the corresponding determination operation. When the tilt angle value is greater than the second preset value (ie, the roll angle value or the tilt angle value is greater than the second preset value), it is determined that the user has collided, and then the processing module 500 controls the mobile phone to turn on the camera function or The recording function performs image and/or sound collection on the current environment. When the tilt angle value is greater than the second preset value, the first determining module 300 continues to perform the corresponding determining operation. It should be noted that the first preset value and the second preset value may be obtained by performing multiple tests on the human body fall process, which will not be further described herein. The mobile device forensic processing device provided by the embodiment of the present invention determines whether the user collides by detecting the acceleration value and the tilt angle value during the movement of the user, and collects an image of the current environment and/or when determining that the user launches the collision. Sound information to ensure the timeliness and effectiveness of on-site evidence collection in collision incidents.

Preferably, in this embodiment, the processing module 500 is specifically configured to: when it is detected that the current tilt angle value of the user is greater than the second preset value, control the mobile device to send the help message to the preset number, and control the The mobile device performs image and/or sound collection. In this embodiment, the mobile device is a mobile phone, and the preset number is a friend and a friend set by the user to timely handle the user's fall accident. Through the SMS function of the mobile phone, if the user has detected that the user has sent a collision, the mobile phone will send a help information to the preset mobile phone to inform the corresponding relatives and friends that they are currently in a collision state and need his help. So that friends and relatives can be rushed to the collision site in time to deal with the accident. The content of the above-mentioned help text message can be set according to actual needs, and is not further limited herein.

Referring to FIG. 5, FIG. 5 is a schematic structural diagram of the processing module in FIG. Based on the foregoing embodiment, in the embodiment, the processing module 500 includes: a determining unit 501, configured to determine, when the user detects that the current tilt angle value of the user is greater than the second preset value, determining the light intensity of the current environment of the mobile device. Whether it is greater than a third preset value; the control unit 502 is configured to control the mobile device to perform image and sound collection when the light intensity of the current environment of the mobile device is greater than a third preset value; When the light intensity is less than or equal to the third preset value, the mobile device is controlled to perform sound collection. In this embodiment, when the mobile phone determines that the user has collided, the mobile phone can be controlled to turn on the camera, and the camera performs photosensitivity detection. When the light intensity is sufficient, the mobile phone is controlled to turn on the camera function, thereby collecting images and sounds of the current environment. . When the light intensity is not enough, the control turns off the camera and turns to the recorder to capture the sound of the current environment.

Preferably, based on the foregoing embodiment, in the embodiment, the mobile device forensic processing device further includes: The management module 600 is configured to save the collected image and/or sound information to the mobile device, or output the collected image and/or sound information to the preset terminal device by wireless transmission. In this embodiment, a file may be created in the local memory of the mobile device for storing captured graphics and/or audio information, that is, the mobile phone creates an audio-visual file to store the captured or recorded content. When the camera or recording is completed, the above files can be directly saved to the memory of the mobile phone, or can be output to other mobile devices by wireless transmission.

Preferably, based on the foregoing embodiment, in the embodiment, the management module 600 outputs the collected image and/or sound information to the preset terminal device by means of wireless transmission, specifically: when the collected image and/or sound When the information reaches the fourth preset value, the currently acquired image and/or sound information is outputted to the preset terminal device. In this embodiment, when the size of the file is greater than the fourth preset value, a file is created again, and the connected image and/or voice information is stored. By monitoring the size of each saved image and/or voice information file, the size of each file can be effectively controlled, thereby ensuring that data transfer between the mobile device and the device terminal is not possible due to excessive file size. It should be noted that the manner of wireless transmission between the mobile device and the terminal device may be set according to actual needs. In this embodiment, the mobile device and the terminal device are preferably mobile phones, and the mobile device outputs the file to the terminal device. Preferably, the size of the file is preferably the maximum capacity of a multimedia message.

The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are used directly or indirectly in other related technical fields. The same is included in the scope of patent protection of the present invention. Industrial Applicability The technical solution provided by the embodiments of the present invention can be applied to the field of mobile terminals, by detecting the acceleration value and the tilt angle value during the motion of the user, to determine whether the user has a collision, and when determining that the user launches the collision, collecting the current Environmental image and/or sound information to ensure the timeliness and effectiveness of on-site evidence collection in collision incidents.

Claims

Claim

1. A mobile device forensic processing method, comprising the following steps:

A. detecting the acceleration value of the user's motion state and the tilting angle value of the vertical direction in real time;

B. Obtain the detected acceleration value and the tilt angle value in the vertical direction every preset time period, and analyze the motion track of the user according to the obtained angle value;

E. Control the mobile device to perform image and/or sound collection when it is detected that the user's tilt angle value is greater than the second preset value.

2. The mobile device forensic processing method according to claim 1, wherein the step E includes: when it is detected that the current tilt angle value of the user is greater than a second preset value, controlling the mobile device to send a help message to Presetting the number and controlling the mobile device for image and/or sound collection.

The mobile device forensic processing method according to claim 1, wherein the step E includes:

E2, controlling the mobile device to perform image and sound collection;

E3. Control the mobile device to perform sound collection.

The mobile device forensic processing method according to any one of claims 1 to 3, further comprising: after performing step E, further comprising:

F. Save the collected image and/or sound information to the mobile device, or output the collected image and/or sound information to the preset terminal device by wireless transmission.

The mobile device forensic processing method according to claim 4, wherein the collected image and/or sound information is output to the preset terminal device by means of wireless transmission, specifically: when the captured image and/or Or when the sound information reaches the fourth preset value, the currently collected image and/or sound information is outputted into the preset terminal device.

6. A mobile device forensic processing device, comprising:

a detecting device, configured to detect an acceleration value of a user's motion state and a tilt angle value of a vertical direction in real time;

The analysis module is configured to acquire the detected acceleration value and the tilt angle value of the vertical direction every preset time period, and analyze the motion track of the user according to the obtained angle value;

The first determining module is configured to determine whether the current acceleration value of the user is greater than the first preset value;

The second determining module is configured to: when it is determined that the current acceleration value of the user is greater than the first preset value, determine, according to the detected current acceleration value of the user and the motion track, whether the user has a collision;

The processing module is configured to control the mobile device to perform image and/or sound collection when the second determining module determines that the user has collided, and when detecting that the user's tilt angle value is greater than the second preset value.

The mobile device forensic processing device according to claim 6, wherein the processing module is configured to control the mobile device to send a help message to the mobile device when it detects that the current tilt angle value of the user is greater than a second preset value. Presetting the number and controlling the mobile device for image and/or sound collection.

8. The mobile device forensic processing device of claim 6, wherein the processing module comprises:

The determining unit is configured to determine, when the user detects that the current tilt angle value of the user is greater than the second preset value, determining whether the light intensity of the current environment of the mobile device is greater than a third preset value;

The control unit is configured to control the mobile device to perform image and sound collection when the light intensity of the current environment of the mobile device is greater than a third preset value; when the light intensity of the current environment of the mobile device is less than or equal to the third pre- When the value is set, the mobile device is controlled to perform sound collection.

The mobile device forensic processing device according to any one of claims 6 to 8, wherein the mobile device forensic processing device further comprises:

The management module is configured to save the collected image and/or sound information to the mobile device, or output the collected image and/or sound information to the preset terminal device by wireless transmission. The mobile device forensic processing device according to claim 9, wherein the management module outputs the collected image and/or sound information to the preset terminal device by means of wireless transmission, specifically: when the captured image and/or Or when the sound information reaches the fourth preset value, the currently collected image and/or sound information is outputted into the preset terminal device.