关键词: 即时通讯, 伪造聊天记录, 真实性鉴定

Abstract: Objective Instant messaging chat records are important evidence for electronic data forensic appraisal, and their authenticity appraisal often becomes the focus of litigation. In forensic appraisal practice, the existence appraisal of instant messaging chat records is mostly conducted, and the authenticity appraisal is notably absent. Developing methods for verifying the authenticity of chat records can address the current difficulties and pain points in electronic data authentication. Methods This article combines the practice of electronic data forensic appraisal, mainly using QQ and WeChat running on iOS and Android systems as sample materials, to conduct research on the authenticity appraisal technology of chat records, specifically targeting methods to detect and counteract “perfectly forged” chat records. Results By analyzing the operating mechanisms of different versions of instant messaging tools running on different models, iOS and Android devices, a technology for mutually verifying the authenticity or forgery of chat records using operating systems, file systems, and chat record databases was proposed, and an operational method for verifying the authenticity of chat records was summarized. Conclusion Through the “three-dimensional” authenticity appraisal technology of operating systems, file systems, and chat record databases, the authenticity of chat records in instant messaging tools can be accurately determined, and the possibility of forgery can be determined or eliminated, filling the gap in the authenticity appraisal technology for chat records. This holds important theoretical research significance and judicial practical application value for authenticity appraisal.

Key words: instant messaging, forgery of chat record, authenticity appraisal