OOXML字处理文档的RSID变化规律与鉴定价值分析

doi:10.3969/j.issn.1671-2072.2025.03.010

中国司法鉴定 ›› 2025 ›› Issue (3): 74-82.DOI: 10.3969/j.issn.1671-2072.2025.03.010

OOXML字处理文档的RSID变化规律与鉴定价值分析

廖根为，凌治博

华东政法大学刑事法学院，上海 201620

收稿日期:2024-10-17 出版日期:2025-05-15 发布日期:2025-05-16
作者简介:廖根为（1976—），男，副教授，博士，硕士研究生导师，主要从事司法鉴定、网络安全与法律研究。E-mail：liaogenwei@ecupl.edu.cn
基金资助:
教育部人文社科项目基金（23YJA820015）

The Variation Patterns of RSID and Their Forensic Value in OOXML Word Processing

LIAO Genwei, LING Zhibo

Criminal Justice College, East China University of Political Science and Law, Shanghai 201620, China

Received:2024-10-17 Published:2025-05-15 Online:2025-05-16

摘要/Abstract

摘要： 目的电子文档易篡改、易复制的特性导致其来源和真实性鉴定成为司法鉴定实践中的难题之一，而利用文档修订标识符（revision identifier，RSID）规律辅助鉴定有一定价值。因此，亟需探索Office Open XML（OOXML）文档的RSID变化规律，拓展相关理论基础，补充现有鉴定方法的不足。方法通过模拟多种不同中文字处理环境，针对不同软件版本和应用场景，对OOXML文档的RSID生成和变化规律进行实验分析，总结RSID生成和变化的一般规律并揭示其鉴定价值。结果 RSID在不同字处理软件中展现出一定的规律性，且RSID的生成规律在不同软件中存在一致性与差异性，可在一定程度上辅助判断文档来源及真实性。结论 RSID为OOXML文档真实性鉴定增补了新的途径，具有重要的理论研究意义和实践应用价值，有助于为从事电子文档鉴定的研究人员提供重要参考。

关键词: 修订标识符, 文档鉴定, OOXML

Abstract: Objective The convenience of modification and duplication of electronic documents has made determining their origin and authenticity a significant challenge in judicial forensics. Utilizing the patterns of Revision Identifier (RSID) for document verification holds potential value. Therefore, it is crucial to explore the variation patterns of RSID in OOXML documents, expand the theoretical foundation, and address the limitations of existing verification methods. Methods By simulating various Chinese word processing environments, experiments were conducted to analyze the generation and variation patterns of RSID in OOXML documents across different software versions and application scenarios. General patterns of RSID generation and variation were summarized, and their forensic values were revealed. Results RSID exhibits certain patterns across different word processing software. Similarities and differences in RSID generation rules were observed across different software programs, and these patterns can assist in determining the origin and authenticity of documents to a certain extent. Conclusion RSID provides a new approach to authenticity verification for OOXML documents, offering significant theoretical and practical values. It serves as an important reference for researchers engaged in electronic document authentication.

Key words: revision identifier （RSID）, document authentication, OOXML

中图分类号:

D918.8

廖根为, 凌治博. OOXML字处理文档的RSID变化规律与鉴定价值分析[J]. 中国司法鉴定, 2025(3): 74-82.

LIAO Genwei, LING Zhibo. The Variation Patterns of RSID and Their Forensic Value in OOXML Word Processing[J]. Chinese Journal of Forensic Sciences, 2025(3): 74-82.

参考文献

[ 1 ] GARFINKEL S L，MIGLETZ J J. New XML-based files implications for forensics[J]. IEEE Security & Privacy，2009，7（2）： 38-44.
[ 2 ] FU Z J，SUN X M，LIU Y L，et al. Forensic investigation of OOXML format documents[J]. Digital Investigation，2011，8（1）： 48-55.
[ 3 ] FU Z J，SUN X M，ZHOU L，et al. New forensic methods for OOXML format documents[M]. Berlin，Germany： Springer，2014：503-513.
[ 4 ] FU Z J，SUN X M，XI J. Digital forensics of Microsoft Office 2007—2013 documents to prevent covert communication[J]. Journal of Communications and Networks，2015，17（5）： 525-533.
[ 5 ] DIDRIKSEN E. Forensic Analysis of OOXML Documents[C/OL]. [2024-08-01].https://9pdf.net/document/yr3dvo0v-forensic-analysis-of-ooxml-documents.html.
[ 6 ] 罗文华，孙道宁. Office Word文档溯源方法研究[J]. 警察技术，2015（4）： 45-47.
[ 7 ] 罗钊，麦永浩. 基于RI码计算的Word复制文档鉴别[J]. 信息安全研究，2016，2（4）： 324-327.
[ 8 ] 杨英，黄啸波. 基于Office Open XML技术的机考作弊检测方法探究——以全国计算机等级考试为例[J]. 中国考试，2020（11）： 42-47.
[ 9 ] SPENNEMANN D H R，SPENNEMANN R J. Establishing genealogies of born digital content： The suitability of revision identifier （RSID） numbers in MS word for forensic enquiry[J]. Publications，2023，11（3）： 35.
[10] SPENNEMANN D H R，SINGH C L. Generation of revision identifier （RSID） numbers in MS word[J]. International Journal of Digital Curation，2024，18（1）： 22.
[11] JOUN J H，HAN J，JUNG D，et al. Study on history tracking technique of the document file through RSID analysis in MS Word[J]. Journal of the Korea Institute of Information Security & Cryptology，2018，28（6）：1439-1448.
[12] JOUN J，CHUNG H，PARK J，et al. Relevance analysis using revision identifier in MS Word[J]. Journal of Forensic Sciences，2021，66（1）： 323-335.
[13] LANGWEG H. OOXML file analysis of the July 22nd terrorist manual[M]. Berlin，Germany：Springer，2012： 195-197.
[14] JOHNSON C，DAVIES R. Using digital forensic techniques to identify contract cheating： A case study[J]. Journal of Academic Ethics，2020，18（2）： 105-113.

OOXML字处理文档的RSID变化规律与鉴定价值分析

The Variation Patterns of RSID and Their Forensic Value in OOXML Word Processing

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 1

编辑推荐

Metrics