US 12,229,211 B2
Process and system for automatic forensic acquisition of web page content
Emanuele Casadio, Russi (IT); Tommaso Grotto, Schio (IT); Luis Perez Sanchez, Bologna (IT); and Matteo Scapin, Torrebelvicino (IT)
Assigned to KOPJRA S.R.L., Bologna (IT)
Filed by KOPJRA S.R.L., Bologna (IT)
Filed on May 15, 2023, as Appl. No. 18/317,504.
Claims priority of application No. 102022000010355 (IT), filed on May 18, 2022.
Prior Publication US 2023/0409658 A1, Dec. 21, 2023
Int. Cl. G06F 16/955 (2019.01); G06F 16/906 (2019.01)
CPC G06F 16/9566 (2019.01) [G06F 16/906 (2019.01)] 15 Claims
OG exemplary drawing
 
10. An acquisition system for the automatic forensic acquisition of the content of one or more web pages, operating over a telecommunications network by a user device accessing said telecommunications network and suitable for enabling a user to perform interactions over said telecommunications network, said acquisition system comprising:
a control and coordination program, residing in said acquisition system, suitable for coordinating the operation of the various application components and providing a communication bridge to said user device;
a browser used to provide a rendering of the indicated page or pages and the dump of the decryption keys of the network traffic involved;
an automatic extraction program for extraction of a list of relevant features of the contents of the indicated page or pages of which the URL address is stored in said acquisition system;
a classification program for classification of specific types of content of the indicated page or pages on the basis of said relevant features and of the dump obtained by said browser;
specialized program codes for performing at least selective automatic browsing of the indicated page or pages each time on the basis of the type of classification identified by said identification and classification means, also suitable for selectively acquiring the forensic content on the basis of said classification from the indicated page or pages; the specialized program codes configured to perform as follows:
carrying out the selective acquiring step by the specialized program codes selected according to the type of classification of the indicated page or pages and executing in turn to give rise to a browsing cycle;
selecting specialized program codes according to the type of classification of the indicated page or pages to provide output data in the form of source code, or screenshots, or multimedia content and to implement login management on protected sites requiring an authentication procedure and to perform browsing on complex pages with advertising messages, pop-ups and web trackers;
selectively acquiring with the specialized program codes acquiring the forensic content as a function of the classification from the indicated page or pages;
emulating human navigation actions with the specialized program codes based on the type of indicated page or pages associated with them each time, as identified by the classification, forming the browsing cycle;
generating the source code and the screenshot for each page with the specialized program codes;
including a final specialized program code with the specialized program codes that causes an end to the browsing cycle such that no other ones of said specialized program codes may be applied after said final specialized program code;
terminating the browsing cycle by executing said final specialized program code;
an automatic creation program for automatic creation and return to the user of a forensic evidence document by said acquisition system and conclusion of the forensic acquisition.