國家機關的木馬偵查——以德國《刑事訴訟法》線上搜索為中心

Abstract

數位時代科技發達，人民隱私意識提升，資訊科技系統伴隨層層加密的使用，目的無不在於保護人民儲存於其中的資料不易被取得。與此同時，犯罪者將與犯罪相關的事證存放在持續受到加密庇護的資訊科技系統，隱身於網路虛擬世界躲避查緝。當犯罪者將加密與科技結合廣為運用，犯罪證據稍縱即逝，傳統搜索扣押無法於第一時間進入目標系統即時蒐證，大幅削弱了執法機關獲取與犯罪相關事證的能力，世界各國無不蒙受著執法上的挑戰。 為了因應加密技術衍生的執法衝擊，德國2017年於《刑事訴訟法》增訂線上搜索，允許執法機關以科技方法秘密入侵受干預人所使用之資訊科技系統，長時間埋伏於系統內即時蒐證，以解決執法機關不知悉目標設備系統所在位置、設備系統上鎖加密無法即時取證，抑或於暗網內犯罪隱藏IP位址、匿名化等偵查困境。本文從德國法的角度，以線上搜索與基本權利之關係出發，藉由德國線上搜索立法發展之探討，掌握德國聯邦憲法法院對干預資訊科技系統授權法規範應有之要求，接著深入分析德國《刑事訴訟法》線上搜索授權規範及程序配套，同時輔以司法實務、相關文獻進行評析。最後，檢視我國現行法對抗加密法制上所不及之處，以凸顯我國確實存在草擬立法對策之必要性。準此，本文希冀借助他山之石德國《刑事訴訟法》線上搜索規範，於文末嘗試提出線上搜索立法方向與具體建議條文，希冀未來能對線上搜索法制化發展有所啟發。

With technological improvements in modern society, people are heightening their privacy awareness. Information technology systems are encrypted to prevent personal data from being easily accessed. At the same time, criminals leave their evidence ininformation technology systems, which are also encrypted to keep hiding in the virtual world and avoid detection by government. If criminals combine encryption with technology, the evidence will disappear immediately, making it much more difficult for search and seizure to access the target's system and collect evidence at the first stage, significantly weakening the investigative ability to obtain any evidence. In order to address the impact of law enforcement caused by encryption technology, Germany has added provisions for online search in German Code of Criminal Procedure in 2017. These provisions allow government to use technological methods such as trojan horse malware to hack into information technology systems used by criminals, conduct long-term ambushes in these systems to collect evidence, and overcome difficulties such as if the location of the target system is unknown, if the target system is locked by encryption, or if criminals hide their IP addresses in the darknet and anonymize their activities. This article will elaborate on German perspective, beginning with the relationship between online search and the interference of fundamental rights. Relying on the development of online search legislation in Germany, we seek to understand the requirements set forth by the German Federal Constitutional Court regarding intervention in information technology systems. Secondly, we analyze the provisions for online search in the German Code of Criminal Procedure through the legal practice and relevant academic literature. Last but not least, we will review the Code of Criminal Procedure and the Communication Security and Surveillance Act in Taiwan to discover the shortcomings of current laws regarding encryption, highlighting the importance and necessity of drafting legislation. To sum up, this article aims to introduce the German Code of Criminal Procedure online search, and we are not only trying to propose the legislative directions but also to specify the suggestions for online search. We hope the article will be an inspiration for some legal development of online search in the future.