What Are the Different Types of SIM Card Backup Device?

In mobile phone forensics, the mobile phone number is an important way to determine the owner of the mobile phone. At the same time, it can also play a tandem role in many inspection materials or clues. An important way to determine the mobile phone number is through the SIM card. The SIM card may record the mobile phone number. The corresponding mobile phone number can also be obtained from the operator through the ICCID of the SIM card.

SIM card In the mobile communication network, a mobile phone and a SIM card together constitute a mobile communication terminal device. A SIM (Sub scribe Iden tity Module) card is a customer identification module, and it is also called a user identification card. The mobile communication network uses this card to authenticate the user's identity, and at the same time encrypts the user's voice information during a call. At present, the storage capacity of common SIM cards is 8 kB, 16 kB, 32 kB, and 64 kB. From the content point of view, the data information stored in the SIM card can be roughly divided into five categories:

(1) Raw product data stored by the SIM card manufacturer.

(2) The inherent information stored in the mobile phone mainly includes various authentication and encryption information, IM SIM code of GSIM, M IN code of CDMA, IM SI authentication algorithm, and encryption key generation algorithm.

(3) During the use of the mobile phone

Use other tools to create phone backups, and use tools such as iBackupBot to browse backup data. SIM card

The SIM card usage records of Android phones are generally stored in the "data \ com.android.providers.telephony \ databases \ telephony.db" file in the data partition, which is also a SQLite database. The table "sim_info" records information such as the ICCID and mobile phone number of the used SIM card. as the picture shows.

The methods for extracting SIM card history from iOS and Android devices are introduced above. IOS devices do not need to jailbreak, as long as they can create iTunes backups. For Android devices, because related information is stored in the data partition, normal permissions cannot access related data. Generally, you need to root or make an image before you can analyze it.

SQLite database data recovery technology is one of the cornerstones of mobile phone forensics. Regardless of iOS or Android, SIM history is stored in the SQLite database. We can use forensics software to process the above files to obtain deleted records.