摘要： 论述电子证据与传统物理证据的区别，分析电子证据的管理需求，提出一种电子证据管理方法。采用DEB格式作为电子证据的统一包装，设计XML数字签名链，对证据保全及保管链进行维护，以保证电子证据保全处理过程的可跟踪性。给出基于该方法的原型系统，验证了该方法的可行性。

关键词: 电子证据, 电子取证, 电子证据包, XML签名, 证据保全

Abstract: This paper discusses the difference between digital evidence and traditional physical evidence, analyzes the requirements of digital evidence management, proposes a management method, which uses Digital Evidence Bag(DEB) format as the universal container of digital evidence, designs XML signature link which maintains the chain of custody and makes the process traceable. A system prototype is designed which proves the feasibility of the method.

Key words: digital evidence, digital forensic, Digital Evidence Bag(DEB), XML signature, evidence preservation

中图分类号: 

• TP391