Electrical drawing safety collaborative management method, system and equipment based on cloud computing technology and medium

Abstract

The invention discloses an electrical drawing security collaborative management method, system and device based on a cloud computing technology and a medium. The method comprises the steps that an initial key is generated through a quantum key distribution device, the key is divided into a plurality of sub-blocks, and a dynamic session key is generated; encrypting data blocks divided by the electrical drawing file according to the logic structure through the dynamic session key, and transmitting the encrypted data blocks to a cloud computing platform for storage; generating a temporary key to encrypt the modified content, adding a digital signature and position information, and combining the modified content after the cloud verifies the signature to generate a new electrical drawing; synchronizing the new electrical drawing full-text security operation credential update record to the block chain, and verifying the consistency of the data on the chain and the cloud drawing version; and splitting the dynamic session key into a plurality of fragments and storing the fragments in different cloud nodes. According to the invention, safe transmission, efficient collaborative management and accurate data tracing of the electrical drawings are realized, and the safety, reliability and efficiency of full-life-cycle management of the electrical drawings are remarkably improved.

Description

Technical Field

[0001] This invention relates to the fields of electrical engineering and information security technology, and in particular to a method, system, device and medium for collaborative management of electrical drawings based on cloud computing technology. Background Technology

[0002] In the field of electrical engineering, electrical drawings are the core carrier for the entire lifecycle management of component design, production, and operation and maintenance. Their management efficiency and safety directly affect project quality and system reliability. Traditional electrical drawing management relies on local storage and manual collaboration. With the increasing number of cross-regional projects and the growing demand for intelligent operation and maintenance, numerous problems have gradually emerged. These include scattered data storage, reliance on local server-based drawing sharing for collaborative management, issues such as delayed version updates and a lack of real-time synchronization mechanisms, and a high risk of data conflicts during cross-departmental collaboration, leading to inconsistencies between design and construction versions. Furthermore, the traditional model struggles to support multi-person online collaborative editing, resulting in repeated file transfers between cross-regional teams, leading to high communication costs and low efficiency. In power design institutes, cross-regional drawing transmission suffers from insufficient data security. Traditional encryption technologies rely on the computational complexity of mathematical algorithms for protection, but with the increasing challenge of computing power, their keys are vulnerable to being cracked. This makes electrical drawings susceptible to eavesdropping, tampering, or forgery during cross-regional transmission. Moreover, regarding data traceability and auditing capabilities, drawing modification records rely on manual registration or simple database storage, lacking an immutable evidence preservation mechanism. This fails to meet the requirements of engineering audits for data authenticity and integrity, and traditional recording methods cannot provide a credible chain of evidence when facing design change disputes or safety incident tracing. Therefore, a safer, more reliable, more efficient, and intelligent solution is needed to improve the management of electrical drawings. Summary of the Invention

[0003] In view of the aforementioned existing problems, the present invention is proposed.

[0004] Therefore, this invention provides a method, system, device, and medium for collaborative management of electrical drawings based on cloud computing technology to solve the problems of high false detection rate, high false detection rate, and low efficiency of traditional detection methods caused by the high similarity of component outlines, dense layout, and noise interference in electrical secondary drawings.

[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution:

[0006] In a first aspect, the present invention provides a collaborative management method for electrical drawings based on cloud computing technology, comprising:

[0007] An initial key is generated through a quantum key distribution device. The key is divided into multiple sub-blocks according to the logic of the electrical drawing. The hash value of each sub-block is calculated iteratively to generate a dynamic session key that is bound to the structure of the drawing.

[0008] The data blocks of electrical drawing files, divided according to their logical structure, are encrypted using dynamic session keys and then transmitted to a cloud computing platform for storage.

[0009] When a user initiates a modification request, a temporary key is generated to encrypt the modified content and attach a digital signature and location information. After the cloud verifies the signature, the modified content is merged and a new electrical drawing is generated.

[0010] The full text of the new electrical drawings and the safety operation credentials update record are synchronized to the blockchain, and the consistency between the on-chain data and the cloud drawing version is verified.

[0011] The dynamic session key is split into multiple shards and stored on different cloud nodes. The complete key is restored when a threshold number of authorized nodes collaborate.

[0012] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings, the method includes: dividing the key into multiple sub-blocks according to the electrical drawing logic, and iteratively calculating the hash value of each sub-block, including:

[0013] The initial key is logically divided into multiple sub-blocks according to the electrical drawing;

[0014] Perform a hash calculation on each sub-block, and use the hash result of the previous sub-block as the input salt value for the next sub-block;

[0015] The final output is a dynamic session key bound to the logical structure of the drawing.

[0016] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings, the present invention includes: encrypting data blocks of electrical drawing files divided according to their logical structure using a dynamic session key, including:

[0017] Generate a unique initialization vector for each data block;

[0018] The block encryption algorithm is combined with an initialization vector and a dynamic session key to encrypt the drawing data block by block.

[0019] The encrypted data blocks are combined sequentially to form a complete encrypted file.

[0020] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings, the present invention includes: generating a temporary key to encrypt modified content and attaching a digital signature, comprising:

[0021] Generating temporary session keys based on quantum key distribution equipment;

[0022] Encrypt the modified data block using a temporary session key;

[0023] Extract the hash value of the modified content and generate a digital signature using the user's private key;

[0024] The encrypted modified content, digital signature, and location information are encapsulated into an upload data packet.

[0025] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings safety described in this invention, the method includes: synchronizing the update record of the full-text safety operation credentials for new electrical drawings to the blockchain, including:

[0026] Read key information from the new electrical drawing version;

[0027] Package the above key information with timestamps into a blockchain transaction;

[0028] Call the blockchain node interface to submit a transaction to the consensus network.

[0029] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings safety described in this invention, the consistency verification between on-chain data and cloud-based drawing versions includes:

[0030] The smart contract automatically parses the drawing hash value in the blockchain transaction;

[0031] Retrieve the current drawing version stored in the cloud in real time and calculate its hash value;

[0032] Compare the on-chain hash value with the cloud hash value and output the consistency verification result.

[0033] As a preferred embodiment of the cloud computing-based collaborative management method for electrical drawings, as described in this invention, the dynamic session key is split into multiple fragments and stored on different cloud nodes, including:

[0034] Construct a polynomial function containing the original key;

[0035] Multiple key fragments are generated by substituting different values ​​for the independent variables;

[0036] Each key is stored in a fragment on a geographically isolated cloud node.

[0037] Secondly, the present invention provides a secure collaborative management system for electrical drawings based on cloud computing technology, including: a quantum key collaboration module, which synchronously divides a key processing unit and a drawing storage unit according to the logical structure of the electrical drawings, and generates a structure-bound dynamic session key;

[0038] The cloud-based collaborative storage module stores encrypted data in a distributed manner according to the drawing storage units, and supports real-time read and write operations across multiple nodes as well as version snapshot management.

[0039] The blockchain trusted evidence storage module is used to record drawing operation credentials and perform consistency verification, providing an tamper-proof audit traceability channel;

[0040] The threshold key management module is used to dynamically split / restore session keys and implement threshold-controlled decryption permission management.

[0041] The real-time collaborative editing module initiates modification requests based on encrypted storage units, enabling signature verification and version merging.

[0042] Thirdly, the present invention provides an electronic device, comprising:

[0043] Memory and processor;

[0044] The memory is used to store computer-executable instructions, and the processor is used to execute the computer-executable instructions. When the computer-executable instructions are executed by the processor, the steps of the electrical drawing safety collaborative management method based on cloud computing technology are implemented.

[0045] Fourthly, the present invention provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the steps of the electrical drawing safety collaborative management method based on cloud computing technology.

[0046] Compared with existing technologies, the beneficial effects of this invention are as follows: This invention employs the non-cloning characteristic of quantum encryption technology, avoiding the risk of data leakage; cloud computing storage technology ensures the reliability of drawing storage and supports efficient multi-user collaborative work; blockchain evidence storage technology records drawing editing records, ensuring data immutability and traceability; forming a closed loop of "secure storage - encrypted transmission - trusted traceability." This fundamentally reduces the data security risks of engineering drawings, reduces errors caused by inconsistent drawing versions, improves team collaboration efficiency, and avoids data disputes. It is of great significance for the full lifecycle management of electrical drawings and can play an important role in practical engineering projects. Attached Figure Description

[0047] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0048] Figure 1 This is a schematic diagram of the overall architecture for electrical drawing management based on cloud computing technology, according to an embodiment of the present invention.

[0049] Figure 2This is a schematic diagram of a quantum encrypted transmission process based on cloud computing technology according to an embodiment of the present invention.

[0050] Figure 3 This is a schematic diagram of cloud computing storage and system editing according to an embodiment of the present invention.

[0051] Figure 4 This is a schematic diagram of a blockchain evidence storage logic based on cloud computing technology according to an embodiment of the present invention. Detailed Implementation

[0052] To make the above-mentioned objects, features, and advantages of the present invention more apparent and understandable, specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present invention, and not all of them. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the protection scope of the present invention.

[0053] Example 1, referring to Figures 1-4 As an embodiment of the present invention, a collaborative management method for electrical drawings based on cloud computing technology is provided, comprising:

[0054] S100: Generates an initial key through a quantum key distribution device, divides the key into multiple sub-blocks according to the logic of the electrical drawing, and iteratively calculates the hash value of each sub-block to generate a dynamic session key bound to the drawing structure.

[0055] S200: Encrypts data blocks of electrical drawing files divided according to their logical structure using a dynamic session key, and transmits them to a cloud computing platform for storage;

[0056] S300: When a user initiates a modification request, a temporary key is generated to encrypt the modified content and attach a digital signature and location information. After the signature is verified in the cloud, the modified content is merged and a new electrical drawing is generated.

[0057] S400: Synchronizes the update record of the full text of the new electrical drawings' safety operation credentials to the blockchain and verifies the consistency between the on-chain data and the cloud-based drawing version;

[0058] S500: Splits the dynamic session key into multiple shards and stores them on different cloud nodes, and sets the system to restore the complete key when a threshold number of authorized nodes collaborate.

[0059] It should be noted that, firstly, the security of the traditional encryption keys currently used is insufficient. Traditional encryption technology relies on the complexity of mathematical algorithms for protection. With the improvement of computing power, the keys are at risk of being cracked, making it difficult to meet the high security requirements of electrical drawings in cross-regional transmission. Furthermore, traditional key management methods cannot be finely managed according to the complex structure of electrical drawings, resulting in low key usage efficiency and difficulty in adapting to the multi-layered structure of drawings. At the same time, the traditional key update mechanism is relatively complex and lacks dynamism, making it difficult to respond to the needs of drawing modifications and updates in real time, which can easily lead to key expiration or attacks. Moreover, the keys are not directly related to the content of the drawings and cannot be encrypted according to the logical structure of the drawings, resulting in a mismatch between the encryption effect and the actual needs of the drawings, which can easily lead to security vulnerabilities.

[0060] Secondly, traditional modification records rely on manual registration or simple database storage, lacking an immutable evidence preservation mechanism. This makes it difficult to meet the requirements of engineering audits for data authenticity and integrity. Furthermore, the lack of effective encryption and verification mechanisms for modification operations makes them susceptible to tampering or forgery, failing to ensure the legality and authenticity of the modified content. In traditional collaborative editing modes, multiple users simultaneously modifying the same drawing can easily lead to version conflicts and data overwriting issues, resulting in low modification efficiency. In addition, traditional recording methods cannot provide credible evidence chains, failing to meet the requirements of engineering audits for data authenticity and integrity. They cannot effectively trace design change disputes or safety incidents. Because drawing data is stored in multiple locations, the lack of an effective data consistency verification mechanism easily leads to data inconsistencies, causing errors and disputes during project implementation. Finally, the lack of an immutable mechanism in traditional storage methods makes data susceptible to tampering or forgery, failing to ensure data authenticity and integrity.

[0061] Finally, traditional key storage methods are concentrated on a single server or storage device, which is prone to key leakage due to single point of failure or attack, and cannot meet the requirements of high security. Furthermore, the key recovery mechanism relies on a single backup. Once the backup is lost or damaged, the key cannot be recovered, resulting in data that cannot be decrypted and affecting system availability. Traditional key management also lacks distributed storage and collaboration mechanisms, and cannot make full use of the resources of cloud computing platforms, making it difficult to achieve high availability and high security.

[0062] Therefore, to address the aforementioned operational monitoring and health prediction issues, steps S100-S500 utilize quantum key distribution technology to generate an initial key. Based on the uncertainty principle and no-cloning theorem of quantum states, the key generation process is unconditionally secure, fundamentally preventing key theft or cracking. The key is divided into multiple sub-blocks, and hash values ​​are iteratively calculated at each level, ensuring that the generated dynamic session key is tightly bound to the logical structure of the electrical drawings. This enhances the key's specificity and security, better adapting to the encryption requirements of complex drawings. Furthermore, the dynamic session key generation method makes the key timely and dynamic, allowing for real-time adjustments based on drawing modifications and updates, effectively resisting long-term attacks. The dynamic session key is used to encrypt data blocks in the electrical drawings, ensuring the encryption independence of each data block and further enhancing data security. The encrypted data blocks are stored through a cloud computing platform, leveraging cloud computing's distributed storage and fault tolerance mechanisms to improve data storage reliability and availability. It also supports efficient data transmission and management, and includes collaborative editing support, laying the foundation for subsequent multi-user online collaborative editing and supporting real-time cross-regional team collaboration. Collaboration reduces file transfer and communication costs, improving work efficiency. Temporary keys encrypt modified content, attaching digital signatures and location information to ensure the legality and authenticity of modifications, preventing tampering and forgery. Location information includes the drawing coordinates and layer identifiers where the modification occurred, ensuring clear records for each modification, facilitating subsequent auditing and traceability. Blockchain technology synchronizes secure operation credentials for new electrical drawings, leveraging its immutability to provide reliable evidence for drawing version updates and operation records, ensuring data authenticity and integrity. Smart contracts automatically parse the drawing hash value in blockchain transactions and compare it with the hash value of the current drawing version stored in the cloud, verifying data consistency in real time and promptly detecting data tampering, further improving system reliability. Dynamic session keys are split into multiple shards and stored on geographically isolated cloud nodes. Even if a single node is attacked, the complete key cannot be recovered, reducing the risk of key leakage. The combination of distributed storage and authorized node collaboration mechanisms ensures high key availability; even if some nodes fail, the key can be recovered from other nodes, guaranteeing normal system operation. The S100-S600 steps enable secure transmission, efficient collaborative management, and accurate data traceability of electrical drawings. They solve problems such as insufficient data security, low collaborative efficiency, and chaotic version management in the traditional model, significantly improving the security, reliability, and efficiency of electrical drawing lifecycle management. They have significant application value and broad prospects.

[0063] Example 2, refer to Figures 1-4 As an embodiment of the present invention, based on the above embodiment, a collaborative management method for electrical drawings safety based on cloud computing technology is provided.

[0064] In this embodiment of the application, step S100 generates an initial key using a quantum key distribution device, divides the key into multiple sub-blocks according to the electrical drawing logic, and iteratively calculates the hash value of each sub-block to generate a dynamic session key bound to the drawing structure. This includes the following preprocessing steps A1-A2:

[0065] A1: Generate the initial key using a quantum key distribution device.

[0066] Specifically, during the collaborative editing process of uploading and downloading electrical drawings, a commercial quantum key distribution (QKD) terminal is used. Based on the uncertainty principle and the no-cloning theorem of quantum states, this terminal securely generates a shared key between the communicating parties to prevent eavesdropping by third parties. The two parties negotiate the initial secure key through photon polarization states. Photon polarization states are represented as follows: 0° horizontal polarization and 90° vertical polarization correspond to classical bits 0 and 1; diagonal polarization and anti-diagonal polarization correspond to a superposition state. and

[0067] Furthermore, the sender randomly selects either a rectilinear basis (0°, 90°) or a diagonal basis (45°, 135°) to prepare the photon sequence, while the receiver randomly selects a basis to measure the photons and records the measurement results and basis type. Both parties then compare the basis types using a classical channel, retaining only the measurement results with consistent basis types to form the initial key K. raw .

[0068] A2: Divide the key into multiple sub-blocks according to the electrical drawing logic, and iteratively calculate the hash value for each sub-block, including:

[0069] The initial key is logically divided into multiple sub-blocks according to the electrical drawing;

[0070] Perform a hash calculation on each sub-block, and use the hash result of the previous sub-block as the input salt value for the next sub-block;

[0071] The final output is a dynamic session key bound to the logical structure of the drawing.

[0072] Specifically, because the initial key needs to undergo basis vector selection, error correction, and privacy amplification, its final key generation rate is much lower than that of classical communication, and photons attenuate during transmission, resulting in a shorter secure transmission distance. Therefore, post-processing techniques are optimized by employing the SHA-256 (256-bit Secure Hash Algorithm) hash function for a fast privacy amplification algorithm. This shortens the key length through hash compression, reduces processing time, enhances resistance to attacks, ensures the security of privacy amplification, and improves key generation efficiency.

[0073] Electrical drawings contain multiple layers, including title blocks, schematics, and wiring diagrams. To address this layered structure, incremental hash calculation based on the drawing's block-based characteristics is employed. This involves dividing the quantum key sequence into multiple sub-blocks according to the drawing's logic and dynamically adjusting the hash calculation strategy, as detailed below:

[0074] The original quantum key K raw According to the electrical drawings, the logic is divided into n sub-blocks K1, K2, ..., K. n The sequence consists of sub-blocks, each corresponding to a different logical part of the drawing. An iterative hashing method is used, with the hash result of the previous sub-block serving as the input salt value for the next sub-block. The formula is as follows:

[0075] H0 = IV

[0076] H i =SHA-256(K) i ||H i-1 )

[0077] Where H0 is the initial hash value; IV is the initial vector, serving as the starting point of the hash chain to enhance the randomness and unpredictability of the hash result, typically a 32-byte random number; i = 1, 2, ..., n, H i H is the hash output value of the i-th sub-block, containing all information from the initial vector to the i-th sub-block. This involves binding the key information of different parts of the drawing level by level to form a structured key chain. i-1 The hash output value of the previous sub-block is used as the input salt value for the hash calculation of the current sub-block; K i Let i be the i-th sub-block of the quantum key sequence.

[0078] An encrypted session key H is generated based on an iterative hashing method. session Its expression is:

[0079]

[0080] Where Nonce is a random number updated every 10 minutes to ensure key dynamism; H n This is the hash output value of the last sub-block, which is the final hash value obtained after iterative hash calculation.

[0081] Table 1 shows a comparison with traditional hashing:

[0082] Table 1 Comparison of characteristics between traditional hashing and iterative hashing

[0083] characteristic Traditional hash Iterative hashing (this invention) Input processing methods Process the complete key in one go Block-based iterative processing Hash result correlation Each part of the hash is independent The hash of the next block depends on the result of the previous block. Scope of error impact A single error invalidates the entire hash. Only affects the faulty block and subsequent hashes. Binding with drawing structure Unrelated The key structure corresponds to the logical structure of the drawing. Input processing methods Process the complete key in one go Block-based iterative processing

[0084] It should be noted that the session key H session Synchronization to cloud nodes is achieved via a quantum-secure channel, and multi-party collaborative decryption is implemented using threshold cryptography, as shown in the following formula:

[0085] Share(H session ,t,n)=(s1,s2,…,s n )

[0086] Where t is the minimum decryption threshold, n is the number of key fragments, and s i The generated key is fragmented. Based on the Lagrange difference formula, the complete session key can be recovered by the cooperation of any t authorized nodes. This mechanism ensures that data can only be decrypted when a certain number of authorized nodes cooperate, effectively enhancing key security and controllability of data access.

[0087] In this embodiment of the application, step S200 involves encrypting the data blocks of the electrical drawing file, which are logically divided, using a dynamic session key, and then transmitting them to a cloud computing platform for storage. This includes the following steps B1-B3:

[0088] B1: Generate a unique initialization vector for each data block;

[0089] B2: Employs a block encryption algorithm combined with an initialization vector and a dynamic session key to encrypt drawing data block by block;

[0090] B3: Combine the encrypted data blocks in sequence into a complete encrypted file.

[0091] Specifically, the electrical drawing file F is encrypted in blocks using the AES-256 algorithm (Advanced Encryption Standard 256-bit algorithm), assuming the file blocks are {F1, F2, ..., F...}. n Each block is 1MB in size, and the encryption formula is:

[0092]

[0093] Among them, C i For the i-th encrypted data block, F i For the i-th data block of the original drawing file, IV i The initialization vector is unique for each data block. For AES-256 encryption functions that use session keys.

[0094] It should be noted that the encrypted data combination is {C1, C2, ..., C...} n This complete encrypted file is then transmitted to the cloud via a protocol for storage and collaborative work.

[0095] The encrypted drawing is divided into multiple data blocks {C1, C2, ..., C...} n The data is stored on a distributed cloud computing platform. To enhance the reliability of data storage, (n+m,n) erasure coding technology is adopted, and its encoding formula is as follows:

[0096] Encode(C1,C2,…,C n )=(C1,C2,…,C n ,P1,P2,…,P m )

[0097] Where n is the number of original data blocks, m is the number of redundant check blocks, and m > n, P i Redundant check blocks ensure that even if any k blocks are lost, the original data can still be recovered from the remaining blocks, thus improving the fault tolerance of data storage.

[0098] It should be noted that (n+m,n) erasure coding is an encoding method used for data storage and transmission that allows the original data to be recovered even after a certain number of data blocks have been lost. Here, n+m represents the total number of data blocks, including the original data blocks and redundant parity blocks.

[0099] In this embodiment of the application, when a user initiates a modification request in step S300, a temporary key is generated to encrypt the modified content and attach a digital signature and location information. After the signature is verified by the cloud, the modified content is merged to generate a new electrical drawing, including the following steps C1-C2:

[0100] C1: Generating temporary session keys based on quantum key distribution devices;

[0101] Encrypt the modified data block using a temporary session key;

[0102] C2: Extract the hash value of the modified content and generate a digital signature using the user's private key;

[0103] The encrypted modified content, digital signature, and location information are encapsulated into an upload data packet.

[0104] Specifically, when a user initiates a drawing modification request, the system generates a temporary session key H using quantum key distribution. temp Use the temporary key to encrypt the modified portion ΔF:

[0105]

[0106] The encrypted modified data C Δ The modified metadata M, containing timestamps, modification locations, and user private key signatures, is uploaded to the cloud. Upon receiving the data, the cloud verifies the digital signature in M ​​using the user's public key to ensure the data has not been tampered with and was indeed initiated by a legitimate user. After successful verification, the decrypted modifications are merged into the original drawing, generating a new version F′=Merge(F,ΔF). This achieves secure collaborative editing of the drawing, ensuring the traceability and data integrity of each modification.

[0107] It should be noted that the location information includes the drawing coordinates and layer identifiers where the modification occurred.

[0108] Furthermore, a directed acyclic graph structure is used to record the version history, with each version node V. i Include:

[0109]

[0110] Among them, F i For the content of the i-th version of the drawing, V i-1 SK is the hash value of the previous version, used to build the version chain association. user For user's private key; M i The modified content refers to the parts of the current version of the drawing that have been modified compared to the previous version.

[0111] This mechanism ensures that version changes are traceable and non-repudiable, allowing users to clearly view every modification record of the drawings and its source.

[0112] In this embodiment of the application, step S400 synchronizes the update record of the full-text security operation credentials of the new electrical drawing to the blockchain and verifies the consistency between the on-chain data and the cloud drawing version, including the following steps D1-D2:

[0113] D1: Synchronize the full text of the new electrical drawings and safety operation credentials update records to the blockchain, including:

[0114] Read key information from the new electrical drawing version;

[0115] Package the above key information with timestamps into a blockchain transaction;

[0116] Call the blockchain node interface to submit a transaction to the consensus network.

[0117] It should be noted that the present invention uses a consortium blockchain to achieve tamper-proof evidence storage of electrical drawing operation records, and its architecture includes a data layer, a network layer and an application layer.

[0118] The data layer stores transaction records, a state database, and Merkle trees.

[0119] The network layer implements node discovery and P2P communication, and uses the PBFT consensus protocol (Practical Byzantine Fault Tolerance) to ensure data consistency between nodes.

[0120] The application layer provides business logic support and external interaction capabilities through smart contracts and APIs (Application Programming Interfaces).

[0121] Specifically, key information from electrical drawings, including the full-text hash value of the drawings, version number, and dynamic key and timestamp update records, is packaged into a blockchain transaction T:

[0122] T = Hash(H F ||Version||Timestamp||KeyUpdateRecord)

[0123] Among them, H F =SHA-256(F) is the full-text hash value of the drawing, used to uniquely identify the content of the drawing; Version is the version number of the drawing, used to identify the updated version of the drawing; Timestamp is the timestamp, recording the specific time when the transaction or update occurred; KeyUpdateRecord records the quantum key rotation time and the corresponding Nonce value (random number), ensuring the traceability of the key update process.

[0124] D2: Verify the consistency between on-chain data and the cloud-based drawing version, including:

[0125] The smart contract automatically parses the drawing hash value in the blockchain transaction;

[0126] Retrieve the current drawing version stored in the cloud in real time and calculate its hash value;

[0127] Compare the on-chain hash value with the cloud hash value and output the consistency verification result.

[0128] Specifically, the smart contract SC deployed on the consortium blockchain implements the data verification logic, and the verification rules are as follows:

[0129]

[0130] Where F′ represents the current version of the electrical drawing stored off-chain.

[0131] Smart contracts ensure the authenticity and integrity of on-chain data by verifying the validity of the signature in transaction T and the consistency between the drawing hash value and the actual off-chain version.

[0132] Each time the quantum key is updated, a new Nonce value is generated and recorded in the blockchain along with the key update time.

[0133] Block i+1 =Hash(Block) i ||Nonce i+1 ||Timestamp i+1 )

[0134] Among them, Block i+1Represents the hash value of the next block in the blockchain; Block i Nonce represents the hash value of the current block in the blockchain. i+1 This represents the new Nonce value generated for the next block, used to ensure the uniqueness and security of the block; Timestamp i+1 This represents the timestamp of the next block, recording the specific time when the block was generated.

[0135] This method ensures that the key update history is immutable, providing a reliable basis for subsequent auditing. Auditors can trace the entire lifecycle of a key through the blockchain, ensuring the compliance and security of key management.

[0136] In this embodiment of the application, step S500 splits the dynamic session key into multiple shards and stores them on different cloud nodes, and sets the system to restore the complete key when a threshold number of authorized nodes cooperate, including the following steps E1-E3:

[0137] E1: Construct a polynomial function containing the original key;

[0138] E2: Generate multiple key fragments by substituting different values ​​of the independent variable;

[0139] E3: Store each key in fragments on geographically isolated cloud nodes.

[0140] Specifically, the Shamir secret sharing algorithm is used to split the complete quantum key K into three independent key fragments (n=3), and the original key can be recovered from any two fragments (k=2). The underlying principle is to construct the key K as a quadratic polynomial:

[0141] K = a0 + a1x + a2x 2 modp

[0142] Where p is a prime number much larger than the key length, and the fragments are stored on different cloud servers. Leakage on a single server will not lead to key cracking; K is the original quantum key; a0 is a polynomial constant term, the value of which is equal to the original key; a1 and a2 are randomly generated coefficients, the values ​​of which are less than p; x is the independent variable, which is taken as 1, 2, and 3 respectively when generating key fragments, and substituted to obtain K1, K2, and K3.

[0143] It should be noted that, based on the steps of S100-S500, corresponding experimental verifications were conducted, specifically including:

[0144] A test environment was built, including a quantum key distribution device, a cloud server, and blockchain nodes, and multiple tests were conducted on the core functions. The Origin Quantum QKD-600 device (Quantum Key Distribution Model 600 device) was selected, featuring 10km fiber optic transmission and a key generation rate of 10kbps. The cloud platform consisted of three Alibaba Cloud ECS (Elastic Compute Service) instances, each with 4 cores and 8GB of RAM, deployed in different regions. The blockchain used was the Hyperledger Fabric consortium blockchain, with 5 nodes and PBFT consensus. After the experimental environment was configured, tests were conducted using standard electrical drawing files as the test sample.

[0145] Security testing was performed on the key fragments, and an attempt was made to recover the original key K through brute-force attacks, employing an automated attack method. 6 In the previous simulation, K was not successfully recovered, verifying that the leakage of a single shard key does not affect key security. A 10MB electrical drawing was uploaded to a cloud computing platform to simulate collaborative editing by multiple users. In the traditional approach, when one user initiates an edit request, key negotiation is triggered, a session key is generated, and the modified content is encrypted. When other users simultaneously initiate edits, the operation conflicts occur due to outdated keys, requiring key renegotiation, resulting in a delay of no less than 2300ms. In contrast, the present invention utilizes pre-distributed key shard storage in the cloud and a dynamic session key mechanism to reduce the conflict rate, with a delay of no more than 480ms. In version tracing simulation, in the traditional approach, testers randomly select a version number and retrieve the corresponding version's drawing data through a full table scan of the traditional database. This test is repeated 100 times, each time with a different version number, resulting in an average tracing time of no less than 12000ms. The present invention, through the Merkle tree retrieval function of the blockchain, quickly locates the corresponding version record, obtains the hash value and storage location of the drawing data, and then downloads the drawing data from cloud storage. This process is repeated 100 times, with cached data cleared after each test to ensure the test results are not interfered with, resulting in a tracing response time of no more than 178ms. Table 2 compares the traditional solution with this solution.

[0146] Table 2 Comparison of technical specifications between the traditional scheme and the proposed scheme

[0147]

[0148] In summary, this invention divides the initial key into multiple sub-blocks, allowing for separate encryption of different logical parts of electrical drawings. This block-based approach makes encryption more refined, better adaptable to the complex multi-layered structure of electrical drawings, and improves the flexibility and targeting of encryption. The use of a step-by-step iterative hash calculation method enhances the randomness and unpredictability of the key, improving its security. The generated dynamic session key is tightly bound to the logical structure of the electrical drawing, making its use more aligned with the actual needs of the drawing. Simultaneously, the introduction of the dynamic session key ensures its timeliness and dynamism. Generating a unique initialization vector for each data block enhances the confidentiality of the encrypted data. Encrypting the electrical drawing data block by block using a block encryption algorithm combined with the initialization vector and dynamic session key ensures high encryption efficiency, guarantees data security, effectively prevents data from being stolen or tampered with during transmission, and protects the confidentiality and integrity of the electrical drawings. Combining the encrypted data blocks sequentially into a complete encrypted file ensures file integrity and consistency, enabling accurate reconstruction of the original electrical drawing during decryption, and facilitating storage and management on cloud computing platforms. Generating temporary session keys for encrypting modified content ensures the security and independence of each modification operation. Even if an attacker obtains the previous session key, they cannot decrypt the current modifications, thus effectively preventing tampering and theft of the modification operations. Encrypting the hash value of the modified content using the user's private key to generate a digital signature ensures the non-repudiation of the modification operation. Encapsulating the encrypted modifications, digital signature, and location information into an uploaded data packet facilitates cloud verification of the legality and integrity of the modifications. By synchronizing key information update records and other secure operation credentials of new electrical drawings to the blockchain, the immutability of the blockchain provides reliable evidence for version updates and operation records of electrical drawings. Smart contracts verify the consistency between on-chain data and cloud-based drawing versions, enabling timely detection of data tampering during transmission or storage, ensuring data authenticity and integrity, and further improving system security and reliability. Constructing a polynomial function containing the original key ensures high randomness and security in key fragmentation generation, facilitating subsequent key recovery. Distributing the keys across different cloud nodes reduces the risk of key leakage, effectively protecting key security and further enhancing key storage security.

[0149] Example 3 illustrates a schematic scheme for a collaborative management method for electrical drawing security based on cloud computing technology. It should be noted that the technical solution of this cloud computing-based collaborative management system for electrical drawing security belongs to the same concept as the aforementioned collaborative management method for electrical drawing security based on cloud computing technology. Details not described in detail in this example can be found in the description of the aforementioned collaborative management method for electrical drawing security based on cloud computing technology.

[0150] This embodiment also provides an electrical drawing safety collaborative management system based on cloud computing technology, including:

[0151] The quantum key coordination module synchronously divides the key processing unit and the drawing storage unit according to the logical structure of the electrical drawing, and generates a structure-bound dynamic session key;

[0152] The cloud-based collaborative storage module stores encrypted data in a distributed manner according to the drawing storage units, and supports real-time read and write operations across multiple nodes as well as version snapshot management.

[0153] The blockchain trusted evidence storage module is used to record drawing operation credentials and perform consistency verification, providing an tamper-proof audit traceability channel;

[0154] The threshold key management module is used to dynamically split / restore session keys and implement threshold-controlled decryption permission management.

[0155] The real-time collaborative editing module initiates modification requests based on encrypted storage units, enabling signature verification and version merging.

[0156] This embodiment also provides an electronic device suitable for collaborative management of electrical drawings based on cloud computing technology, including: a memory and a processor; the memory is used to store computer-executable instructions, and the processor is used to execute the computer-executable instructions to realize the collaborative management method for electrical drawings based on cloud computing technology as proposed in the above embodiment.

[0157] This embodiment also provides a storage medium on which a computer program is stored. When the program is executed by a processor, it implements the collaborative management method for electrical drawings based on cloud computing technology as proposed in the above embodiments.

[0158] The storage medium proposed in this embodiment and the method for collaborative management of electrical drawings based on cloud computing technology proposed in the above embodiments belong to the same inventive concept. Technical details not described in detail in this embodiment can be found in the above embodiments, and this embodiment has the same beneficial effects as the above embodiments.

[0159] Based on the above description of the implementation methods, those skilled in the art can clearly understand that the present invention can be implemented using software and necessary general-purpose hardware, and of course, it can also be implemented using hardware. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory, hard disk, or optical disk, etc., including several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods of the various embodiments of the present invention.

[0160] It should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to preferred embodiments, those skilled in the art should understand that modifications or equivalent substitutions can be made to the technical solutions of the present invention without departing from the spirit and scope of the technical solutions of the present invention, and all such modifications or substitutions should be covered within the scope of the claims of the present invention.

Claims

1. A collaborative management method for electrical drawings based on cloud computing technology, characterized in that, include: An initial key is generated through a quantum key distribution device. The key is divided into multiple sub-blocks according to the logic of the electrical drawing. The hash value of each sub-block is calculated iteratively to generate a dynamic session key that is bound to the structure of the drawing. The data blocks of electrical drawing files, divided according to their logical structure, are encrypted using dynamic session keys and then transmitted to a cloud computing platform for storage. When a user initiates a modification request, a temporary key is generated to encrypt the modified content and attach a digital signature and location information. After the cloud verifies the signature, the modified content is merged and a new electrical drawing is generated. The full text of the new electrical drawings and the safety operation credentials update record are synchronized to the blockchain, and the consistency between the on-chain data and the cloud drawing version is verified. The dynamic session key is split into multiple shards and stored on different cloud nodes. The complete key is restored when a threshold number of authorized nodes collaborate.

2. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 1, characterized in that, The key is divided into multiple sub-blocks according to the electrical drawings, and the hash value is calculated iteratively for each sub-block, including: The initial key is logically divided into multiple sub-blocks according to the electrical drawing; Perform a hash calculation on each sub-block, and use the hash result of the previous sub-block as the input salt value for the next sub-block; The final output is a dynamic session key bound to the logical structure of the drawing.

3. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 2, characterized in that, Encryption of data blocks in electrical drawing files, divided according to their logical structure, using a dynamic session key, including: Generate a unique initialization vector for each data block; The block encryption algorithm is combined with an initialization vector and a dynamic session key to encrypt the drawing data block by block. The encrypted data blocks are combined sequentially to form a complete encrypted file.

4. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 3, characterized in that, Generate a temporary key to encrypt the modified content and attach a digital signature, including: Generating temporary session keys based on quantum key distribution equipment; Encrypt the modified data block using a temporary session key; Extract the hash value of the modified content and generate a digital signature using the user's private key; The encrypted modified content, digital signature, and location information are encapsulated into an upload data packet.

5. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 4, characterized in that, Synchronize the full text of the new electrical drawings and safety operation credentials update records to the blockchain, including: Read key information from the new electrical drawing version; Package the above key information with timestamps into a blockchain transaction; Call the blockchain node interface to submit a transaction to the consensus network.

6. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 5, characterized in that, Verify the consistency between on-chain data and cloud-based drawing versions, including: The smart contract automatically parses the drawing hash value in the blockchain transaction; Retrieve the current drawing version stored in the cloud in real time and calculate its hash value; Compare the on-chain hash value with the cloud hash value and output the consistency verification result.

7. The electrical drawing safety collaborative management method based on cloud computing technology as described in claim 6, characterized in that, The dynamic session key is split into multiple shards and stored on different cloud nodes, including: Construct a polynomial function containing the original key; Multiple key fragments are generated by substituting different values ​​for the independent variables; Each key is stored in a fragment on a geographically isolated cloud node.

8. An electrical drawing safety collaborative management system based on cloud computing technology, using the method described in any one of claims 1-7, characterized in that, include: The quantum key coordination module synchronously divides the key processing unit and the drawing storage unit according to the logical structure of the electrical drawing, and generates a structure-bound dynamic session key; The cloud-based collaborative storage module stores encrypted data in a distributed manner according to the drawing storage units, and supports real-time read and write operations across multiple nodes as well as version snapshot management. The blockchain trusted evidence storage module is used to record drawing operation credentials and perform consistency verification, providing an tamper-proof audit traceability channel; The threshold key management module is used to dynamically split / restore session keys and implement threshold-controlled decryption permission management. The real-time collaborative editing module initiates modification requests based on encrypted storage units, enabling signature verification and version merging.

9. An electronic device, comprising: Memory and processor; The memory is used to store computer-executable instructions, and the processor is used to execute the computer-executable instructions. When the computer-executable instructions are executed by the processor, they implement the steps of the electrical drawing safety collaborative management method based on cloud computing technology as described in any one of claims 1 to 7.

10. A computer-readable storage medium storing computer-executable instructions that, when executed by a processor, implement the steps of the cloud computing-based collaborative management method for electrical drawings safety as described in any one of claims 1 to 7.

Images