Data Recovery Methods - Chip-Off and JTAG

There are two principal techniques whilst coping with mobile smartphone facts recovery and flash recoveries. By interrogating the NAND memory chip, each of these strategies provide statistics recuperation engineers get right of entry to to a low-degree picture of the information, although they are each very unique. Mobile phones, flash garage and stable-state-drives all depend on reminiscence chips for storing statistics in assessment to tough disk drives, which use rotating platters and study/write heads.

When it comes to difficult disk drives all of them generally tend to apply a commonplace approach to storing information, that means that facts restoration tools may be ordinary. Flash gadgets on the other hand vary a lot more having a wealth of various data codecs, record structures, algorithms, reminiscence kinds and configurations, facts extractors are frequently 'device particular'. This means that the most effective manner to gain a chunk for bit replica of the raw facts is to interrogate the memory chips directly, correctly bypassing the working gadget. This is in which chip-off and JTAG technology comes into play.

The first approach is the chip-off method. This approach calls for de-soldering the memory chip from the circuitry. In order to put off the chip from the device with out inflicting any damage it requires precision ability beneath a microscope as making any tiny errors dangers dropping all the data completely. After the chip is removed it could be examine with records extractors. NAND chips are typically an awful lot less difficult to study than other forms of chip and are commonly what SD playing cards and iPhones use. This is because of the reminiscence structure and pin configuration being standardised. The pins are on the out of doors which means there may be no want to rebuild the connectors. Other common kinds of chip along with the BGA have a couple of connectors on the underside that are without delay soldered to the motherboard with hundreds of different configurations so are much more tough to take away.

The 2nd method is JTAG which would not require elimination of the chip. A information recuperation engineer can occasionally get entry to the reminiscence via the JTAG ports. This is a far more prolonged technique and does now not damage the media. This method it could be saved in a operating state which is occasionally a essential requirement in forensic investigations. A disadvantage of this technique is that it is not always as a success and can be a riskier option.