Forensic index method and apparatus by distributed processing

A forensic index apparatus by distributed processing, comprising:

• a computer memory;
• a division target data managing unit generating data to be divided by dividing data to be indexed according to predetermined division setting for distributed processing;
• a divided index data generating unit, including a plurality of data processing units, allocating the generated data to be divided to each of the plurality of data processing units according to the predetermined division setting, extracting an index by filtering the corresponding allocated data in each of the plurality of data processing units using the respective data processing unit, and generating divided index data including the extracted index using the respective data processing unit;
• and
• an index database managing unit generating an index database by merging the generated divided index data generated by the plurality of data processing units, wherein generating the index database comprises:
• when a new index is generated in the index database from the merged generated divided index data, setting an index database identifier as a key in the index database and adding the merged generated divided index data to a list of data corresponding to the key;
• and
• when generated index data corresponds to a file being added to an existing index, generating a temporary index data having a temporary index using generated index data and adding the temporary index to a list of data corresponding to the key of the existing index.

A forensic index system by distributed processing, comprising:

• a terminal unit providing an input interface to a user;
• a data storage unit storing data to be indexed;
• and
• a forensic index apparatus dividing the data to be indexed according to predetermined division setting, generating divided index data by using a plurality of data processing units with respect to the divided data to be indexed, and generating an index database by merging the generated divided index data, wherein generating the index database comprises:
• when a new index is generated in the index database from the merged generated divided index data, setting an index database identifier as a key in the index database and adding the merged generated divided index data to a list of data corresponding to the key;
• and
• when generated index data corresponds to a file being added to an existing index, generating a temporary index data having a temporary index using the generated index data and adding the temporary index to a list of data corresponding to the key of the existing index.