A blockchain-based collaborative design system and method

By using a blockchain-based collaborative design system, the behavioral data in the collaborative R&D of chips and microsystems can be stored and encrypted in real time using blockchain trusted evidence storage technology. This solves the problems of cumbersome data encryption and high reproducibility in existing technologies, and realizes secure data protection and controllable sharing.

CN118656830BActive Publication Date: 2026-01-30INFORMATION SCI RES INST OF CETC
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202410689015.7
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-05-30
Publication Date
2026-01-30
Estimated Expiration
2044-05-30

AI Technical Summary

Technical Problem

Existing technologies involve cumbersome encryption processes for user-generated behavioral data during the collaborative development phase of chips and microsystems, and the data is difficult to reproduce, making it difficult to achieve efficient data security protection and controllable sharing.

Method used

The blockchain-based collaborative design system utilizes a collaborative design EDA tool module, a unit information access module, a collaborative R&D basic service module, and a blockchain trusted evidence storage module to achieve permission verification and real-time evidence storage for resource applications, generate target collaborative design schemes, and use encryption keys to perform chain-based encryption on behavioral data and store it in the blockchain ledger.

Benefits of technology

It provides a collaborative R&D environment with intellectual property traceability and resource integration and sharing functions, realizes real-time evidence storage and security protection of behavioral data, and improves the security and controllable sharing and use of data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118656830B_ABST
    Figure CN118656830B_ABST
Patent Text Reader

Abstract

This disclosure provides a blockchain-based collaborative design system and method, comprising: a unit collaborative design EDA tool module for performing microsystem collaborative design on the unit's intranet using EDA tools to generate an initial collaborative design scheme; a unit information access module for connecting the unit's intranet to the collaborative R&D terminal; a collaborative R&D basic service module for receiving resource requests from each unit's intranet and providing the necessary resources to the unit's intranet via cross-network transmission after successful authorization verification; and a blockchain trusted evidence storage module for real-time evidence storage of the request behavior data generated by the unit's intranet during the resource request process through the collaborative R&D basic service module. Real-time evidence storage of user behavior data provides data security protection and controllable sharing of design simulation data streams, improving data security.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of data security, in particular to a collaborative design system and method based on a blockchain. BACKGROUND

[0002] The design implementation and engineering application of microsystem modules require the collaborative development of multiple professionals, multiple fields and multiple units in terms of structure, electromagnetic, process, thermal design, etc. When encrypting the behavior data generated by user operations in the collaborative development stage of chips and microsystems, the existing technology generally adopts one or more of the following encryption schemes: hardware encryption technology, digital watermarking technology, logic obfuscation technology and chip and microsystem measurement technology. The above four data encryption schemes are relatively complex and difficult to reproduce. SUMMARY

[0003] The embodiments of the present disclosure provide a collaborative design system and method based on a blockchain to solve the problems of cumbersome operation and high difficulty in data reproduction when encrypting the behavior data generated by user operations in the collaborative development stage of chips and microsystems.

[0004] In view of the above problems, in a first aspect, a collaborative design system based on a blockchain is provided, comprising: at least two unit intranet ends and a collaborative development end; wherein each unit intranet end comprises: a unit collaborative design EDA tool module and a unit informationization access module; the collaborative development end comprises: a collaborative development basic service module and a blockchain trusted evidence module;

[0005] The unit collaborative design EDA tool module is configured to perform microsystem collaborative design through an EDA tool for the corresponding unit intranet end to generate an initial collaborative design scheme.

[0006] The unit informationization access module is configured to access the corresponding unit intranet end to the collaborative development end.

[0007] The collaborative development basic service module is configured to receive resource applications sent by each unit intranet end, and perform permission verification on the resource applications sent by each unit intranet end. If the permission verification is passed, the required resources are provided to the corresponding unit intranet end through cross-network transmission. The required resources are used for the corresponding unit intranet end to perform microsystem secondary collaborative design on the initial collaborative design scheme based on the required resources to generate a target collaborative design scheme.

[0008] The blockchain trusted evidence module is configured to store the application behavior data generated by the corresponding unit intranet end in the process of resource application through the collaborative development basic service module in real time.

[0009] With reference to the first aspect, in a possible implementation, each unit intranet end further includes: a unit blockchain trusted storage module, configured to store the design behavior data generated by the EDA tool during the microsystem collaborative design of the corresponding unit intranet end, the initial collaborative design scheme and the target collaborative design scheme in real time.

[0010] With reference to the first aspect, in a possible implementation, the collaborative R&D basic service module includes: a collaborative R&D portal and a personal workbench.

[0011] The collaborative R&D portal is configured to receive the resource application sent by each unit intranet end when each unit intranet end logs in to the collaborative R&D portal, and perform permission verification on the resource application sent by each unit intranet end, so as to provide the required resources for the corresponding unit intranet end through cross-network transmission in the case of passing the permission verification.

[0012] The personal workbench is configured to match a target service according to the required resources of the corresponding unit intranet end, and process the target service through a service processing module corresponding to the target service, where the target service includes one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, stream application, and stream authorization.

[0013] With reference to the first aspect, in a possible implementation, the collaborative R&D basic service module is configured to extract the login identity information in the resource application sent by each unit intranet end.

[0014] Based on the login identity information of each unit intranet end, historical login information of each unit intranet end is collected, where the historical login information includes: historical login time and an IP address set.

[0015] According to the historical login information corresponding to each unit intranet end, a login behavior mode of each unit intranet end is identified, and the login behavior mode of each unit intranet end is converted into a vector to obtain a behavior mode vector of each unit intranet end.

[0016] The behavior mode vector of each unit intranet end is subjected to hash processing to obtain a target hash value corresponding to each unit intranet end, and an encryption key corresponding to each unit intranet end is generated according to the target hash value corresponding to each unit intranet end.

[0017] The resource application sent by each unit intranet end is subjected to chain encryption through the encryption key corresponding to each unit intranet end to obtain encrypted application data of each unit intranet end.

[0018] Respectively, the encryption application data of each unit intranet end is subjected to key identifier extraction, and the key identifier corresponding to the encryption application data of each unit intranet end is obtained;

[0019] The key identifier corresponding to the encryption application data of each unit intranet end is verified, and the permission verification result of each unit intranet end is obtained.

[0020] In combination with the first aspect, in a possible implementation manner, when the target service is the flow piece application or the flow piece authorization, the collaborative R&D basic service module further includes: a project collaborative space.

[0021] The project collaborative space is configured to store flow piece service data generated when the corresponding unit intranet end processes a target service through the business processing module corresponding to the personal workbench.

[0022] In combination with the first aspect, in a possible implementation manner, the blockchain trusted evidence module is configured to perform data encryption on the application behavior data to obtain encrypted behavior data and security index data generated in the data encryption process.

[0023] The target smart contract is matched through the security index data, and the encrypted behavior data is stored in a blockchain node corresponding to the target service in a preset blockchain ledger through the target smart contract.

[0024] In combination with the first aspect, in a possible implementation manner, the application behavior data includes one or more of the following: resource publishing data, resource viewing data, resource searching data, use application data, use application authorization data, project management data, and the flow piece service data.

[0025] Secondly, a collaborative design method based on a blockchain is provided, including:

[0026] The corresponding unit intranet end performs microsystem collaborative design through an EDA tool to generate an initial collaborative design scheme;

[0027] The resource application sent by each unit intranet end is received, and the resource application sent by each unit intranet end is subjected to permission verification, and in the case that the permission verification is passed, the required resource is provided for the corresponding unit intranet end through a cross-network transmission mode, and the required resource is used for the corresponding unit intranet end to perform microsystem secondary collaborative design on the initial collaborative design scheme based on the required resource to generate a target collaborative design scheme.

[0028] The application behavior data generated in the resource application process of the corresponding unit intranet end through the collaborative R&D basic service module is stored in real time.

[0029] In a possible implementation of the second aspect, the method further includes: performing real-time notarization on design behavior data generated by the EDA tool when the corresponding intranet end performs micro-system collaborative design, the initial collaborative design scheme, and the target collaborative design scheme.

[0030] In a possible implementation of the second aspect, the method further includes: receiving resource applications sent by the intranet ends of the units, and performing permission verification on the resource applications sent by the intranet ends of the units, wherein the resource applications are used to provide required resources for the corresponding intranet end through cross-network transmission in the case that the permission verification is passed.

[0031] The target business is matched with the required resources of the corresponding intranet end, and the target business is processed through a business processing module corresponding to the target business, wherein the target business includes one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, tape-out application, and tape-out authorization.

[0032] The collaborative design system and method based on the blockchain provided by the embodiments of the present disclosure include: a unit collaborative design EDA tool module, configured to perform micro-system collaborative design by the EDA tool for the corresponding intranet end of a unit, and generate an initial collaborative design scheme; a unit informationization access module, configured to access the collaborative research and development end for the corresponding intranet end of the unit; a collaborative research and development basic service module, configured to receive resource applications sent by the intranet ends of the units, and perform permission verification on the resource applications sent by the intranet ends of the units, and provide required resources for the corresponding intranet end through cross-network transmission in the case that the permission verification is passed; and a blockchain trusted notarization module, configured to perform real-time notarization on application behavior data generated by the corresponding intranet end in the process of applying for resources through the collaborative research and development basic service module. The embodiments of the present disclosure deploy a blockchain trusted notarization system on the collaborative research and development end based on the blockchain trusted notarization technology, perform real-time notarization on important behaviors of users in the collaborative research and development end, and provide a collaborative research and development environment with intellectual property traceability and resource integration sharing functions for off-site multi-unit users. The behavior data of the users is performed real-time notarization, the design simulation data flow is protected and controllably shared, and the security of the data is improved. BRIEF DESCRIPTION OF DRAWINGS

[0033] Figure 1 FIG. 1 is a structural schematic diagram of a collaborative design system based on a blockchain provided by the embodiments of the present disclosure;

[0034] Figure 2 FIG. 2 is another structural schematic diagram of a collaborative design system based on a blockchain provided by the embodiments of the present disclosure;

[0035] Figure 3 FIG. 3 is a third structural schematic diagram of a collaborative design system based on a blockchain provided by the embodiments of the present disclosure.

[0036] Figure 4 A block chain encryption storage schematic diagram provided by an embodiment of the present disclosure;

[0037] Figure 5 A flowchart of a collaborative design method based on a block chain provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0038] An embodiment of the present disclosure provides a collaborative design system and method based on a block chain. Preferred embodiments of the present disclosure are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present disclosure, and are not used to limit the present disclosure. In the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined with each other.

[0039] An embodiment of the present disclosure provides a collaborative design system based on a block chain, as shown in Figure 1 , comprising:

[0040] At least two unit intranet ends and collaborative research and development ends; wherein each unit intranet end 101 comprises: a unit collaborative design EDA tool module 1011 and a unit informationization access module 1012; the collaborative research and development end 102 comprises: a collaborative research and development basic service module 1021 and a block chain trusted storage module 1022;

[0041] The unit collaborative design EDA tool module 1011 is used for corresponding unit intranet end 101 to perform microsystem collaborative design through an EDA tool, and generate an initial collaborative design scheme;

[0042] The unit informationization access module 1012 is used for accessing the corresponding unit intranet end 101 to the collaborative research and development end 102;

[0043] The collaborative research and development basic service module 1021 is used for receiving the resource application sent by each unit intranet end 101, and performing permission verification on the resource application sent by each unit intranet end. In the case where the permission verification is passed, the required resources are provided for the corresponding unit intranet end 101 through cross-network transmission, and the required resources are used for the corresponding unit intranet end 101 to perform microsystem secondary collaborative design based on the required resources on the initial collaborative design scheme, and generate a target collaborative design scheme;

[0044] The block chain trusted storage module 1022 is used for storing the application behavior data generated by the corresponding unit intranet end 101 in the resource application process through the collaborative research and development basic service module 1021 in real time.

[0045] In the embodiments of the present disclosure, the collaborative R&D basic service module 1021 provides a unified environment for online collaborative R&D of each unit intranet end 101 in a different place, and can realize services such as resource publishing, resource viewing, resource searching, use application, use application authorization, project management, tape-out application, and tape-out authorization.

[0046] In the embodiments of the present disclosure, the blockchain trusted record module 1022 records the main behaviors of each unit intranet end 101 in the system in real time, including resource publishing, resource use application authorization, tape-out authorization, and project space. It should be noted that in the embodiments of the present disclosure, the commercial secret network refers to a network used for storing, processing, and transmitting information related to commercial secrets or commercial sensitive information. These information may include a company's business plan, market strategy, customer data, research and development results, etc. The commercial secret network usually needs to be highly confidential, and only authorized personnel can access it. The intranet refers to a local area network used within an organization or enterprise. It connects computers, servers, and other devices within the organization for internal communication, resource sharing, and data transmission. The intranet is usually protected by firewalls and other security measures to prevent unauthorized external access.

[0047] In the embodiments of the present disclosure, the collaborative R&D informationization service module deployed in the commercial secret network machine room provides software and hardware support for the collaborative R&D basic service module 1021 and the blockchain trusted record module 1022. It provides a unified project management, data management, and resource management environment for multi-unit collaborative R&D.

[0048] Among them, each unit intranet end can be a general unit for project collaborative R&D, a scientific research institution, a university, or a basic process unit. For example, a certain basic process unit logs in to the unit intranet end 101 and performs digital circuit design through the unit collaborative design EDA tool module 1011. After generating a digital circuit model, the core parameters and core graphics are encrypted and packaged to generate an encrypted digital circuit model. The pre-release digital circuit model is generated in the unit intranet end 101, and a pre-release digital circuit model parameter package file is generated. The file is exported, and then the unit informationization access module 1012 is logged in to the collaborative R&D end 102 based on the commercial secret network. The pre-release digital circuit model parameter package file is imported into the collaborative R&D end 102 to complete the release of the digital circuit model. At the same time, the blockchain trusted record module 1022 automatically records the digital circuit model name, owner, release time, and unique ID identification into the blockchain system deployed in the same commercial secret network.

[0049] When the collaborative R&D basic service module 1021 and the blockchain trusted storage module 1022 interact with each other, the data interaction interfaces contained are as follows: a digital label and IP unit affiliation upload interface for resource publishing; an IP unit affiliation blockchain data query interface for resource use application authorization, a resource use authorization information upload interface, a resource use authorization information blockchain data batch query interface, and a resource use authorization information blockchain data download interface; a resource unit affiliation blockchain data query interface for stream authorization, a resource stream authorization information upload interface, and a resource stream authorization information blockchain data batch query interface; a task name information upload interface, a delivery information upload interface, and a project completion time information upload interface.

[0050] It should be noted that in the above description, there are four main interfaces: an upload interface, a query interface, an upload interface, and a download interface. On the blockchain, each transaction and each operation is recorded in a block and added to the blockchain, forming a chain. Therefore, it is called "uplink". The upload interface is an interface for uploading data, transactions or operations to the blockchain, for creating new blocks and adding them to the chain. In this process, the data is verified and permanently stored in the blockchain.

[0051] The query interface is an interface that allows users to obtain data from the blockchain. For example, users can use a certain query interface to find specific transaction records or specific block information. Such an interface usually provides some filtering or sorting parameters so that users can find specific data. Query interfaces are usually used in situations where blockchain data needs to be retrieved and analyzed.

[0052] The upload interface refers to the way users upload data to servers or blockchains. In the above description, the data upload interface is mainly used to upload the digital label and IP unit affiliation of resource publishing. This includes resource use application authorization information and resource unit affiliation data for stream authorization.

[0053] The download interface is the opposite of the upload interface, which refers to the interface through which users can download data from servers or blockchains. Here, the resource use authorization information blockchain data download interface is the way users download resource use authorization information from the blockchain. Users can use such an interface to obtain the data they need when needed.

[0054] The unit information access module 1012 provides a basic environment for accessing the collaborative design system for each unit intranet end 101 in a remote location. Each unit intranet end 101 can log in to the unified collaborative design system in a remote location through the unit information access module 1012.

[0055] The unit collaborative design EDA tool module 1011 can be used for the microsystem collaborative design of each unit internal network terminal 101 based on the EDA tool in each unit. The resources applied for through the collaborative research and development basic service module 1021 are secondarily integrated and collaboratively designed through a cross-network transmission mode. The cross-network transmission mode can be a transmission mode through copying of an optical disc or other mobile storage medium.

[0056] In yet another embodiment of the present disclosure, as shown in Figure 2 Each unit internal network terminal 101 further includes a unit blockchain trusted storage module 1013. The unit blockchain trusted storage module 1013 is used for real-time storage of design behavior data, initial collaborative design scheme and target collaborative design scheme generated when the corresponding unit internal network terminal 101 collaboratively designs a microsystem through an EDA tool.

[0057] In the present embodiment, the unit blockchain trusted storage module 1013 can be used for real-time storage of the collaborative design behavior of each unit internal network terminal 101 in each unit, including resource original files, resource secondary integrated layout files and the like. It should be noted that the unit information service module deployed in the internal computer room of each unit provides software and hardware support for the unit collaborative design EDA tool module 1011 and the unit blockchain trusted storage module 1013. The resource files on the collaborative design EDA tool of the user in the unit internal network terminal can be stored in real time with the original files.

[0058] In yet another embodiment of the present disclosure, as shown in Figure 3 The collaborative research and development basic service module 1021 includes a collaborative research and development portal 10211 and a personal workbench 10212.

[0059] The collaborative research and development portal 10211 is used for receiving the resource application sent by each unit internal network terminal 101 when each unit internal network terminal 101 logs in to the collaborative research and development portal 10211, and performing permission verification on the resource application sent by each unit internal network terminal 101. The resource application is used to provide the required resources for the corresponding unit internal network terminal 101 through a cross-network transmission mode if the permission verification is passed.

[0060] The personal workbench 10212 is used for matching a target service according to the required resources of the corresponding unit internal network terminal 101, and processing the target service through a business processing module 10213 corresponding to the target service. The target service includes one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, tape-out application and tape-out authorization.

[0061] It should be noted that when the target service is tape-out application or tape-out authorization, the collaborative research and development basic service module 1021 further includes a project collaborative space 10214.

[0062] Project collaboration space 10214 for storing data of the flow sheet business generated when the target business is processed by the personal workbench 10212 through the corresponding business processing module 10213 of the corresponding intranet 101.

[0063] For example, a researcher of a university logs in to the collaborative research portal 10211, and the collaborative research portal 10211 receives a resource application sent from the intranet 101 of the university, such as a computing resource, data, or process model data that needs to be called. If the researcher needs a server with high-performance computing capability to run a simulation model, the researcher can submit a resource application to the collaborative research portal 10211 to request server resources.

[0064] At the same time, the personal workbench 10212 matches the target business according to the resource application, for example, the target business can be defined as "resource use application". After confirming the compliance and feasibility of the resource application, the business processing module 10213 performs processing operations.

[0065] It should be noted that if the target business includes a flow sheet application or a flow sheet authorization, the data generated in this process will be stored in the project collaboration space 10214. For example, the university has multiple project teams using shared computing resources, and resource contention processing may be needed. The flow sheet application is like a resource reservation, and the researcher can apply for exclusive use of a part of the resource for a specific period of time. Correspondingly, the flow sheet authorization is a resource allocation decision made after evaluating the resource contention situation.

[0066] In yet another embodiment of the present disclosure, the collaborative R&D basic service module 1021 is configured to extract login identity information in the resource application sent by each unit intranet end; collect historical login information of each unit intranet end based on the login identity information of each unit intranet end, wherein the historical login information includes historical login time and IP address set; perform login behavior pattern recognition on each unit intranet end according to the corresponding historical login information of each unit intranet end, obtain the login behavior pattern corresponding to each unit intranet end, and perform vector conversion on the login behavior pattern corresponding to each unit intranet end to obtain the behavior pattern vector of each unit intranet end; perform hash processing on the behavior pattern vector of each unit intranet end to obtain the target hash value corresponding to each unit intranet end, and generate the encryption key corresponding to each unit intranet end according to the target hash value corresponding to each unit intranet end; perform chain encryption on the resource application sent by each unit intranet end through the encryption key corresponding to each unit intranet end to obtain the encrypted application data of each unit intranet end; extract the key identifier corresponding to the encrypted application data of each unit intranet end respectively; and verify the key identifier corresponding to the encrypted application data of each unit intranet end to obtain the permission verification result of each unit intranet end.

[0067] Specifically, the collaborative R&D basic service module 1021 extracts login identity information from the resource application sent by each unit intranet end. The login identity information usually includes username, password, login time, IP address, etc. Assuming that a user of unit A logs in through IP address 192.168.1.100 on May 22, 2023 at 10:00 and sends a resource application. The collaborative R&D basic service module 1021 will immediately extract the login identity information of this user, which is recorded as user A, login time May 22, 2024 at 10:00, and IP address 192.168.1.100.

[0068] Then, the collaborative R&D basic service module 1021 collects the historical login information of the user of unit A based on the login identity information of the user. The historical login information includes the historical login time and IP address set of user A. For example, the collaborative R&D basic service module 1021 extracts that the login time of user A in the past month is mostly concentrated between 9:00 and 17:00 on weekdays, and the commonly used IP address range is 192.168.1.0 / 24. Then, the collaborative R&D basic service module 1021 performs login behavior pattern recognition according to the historical login information of the user of unit A. Through a classification algorithm, the collaborative R&D basic service module 1021 identifies the typical login behavior pattern of user A. For example, the collaborative R&D basic service module 1021 identifies that user A usually logs in to the collaborative R&D basic service module 1021 between 9:00 in the morning and 5:00 in the afternoon on weekdays, and the IP address used is mostly within the 192.168.1.0 / 24 range.

[0069] This login behavior pattern can be represented by a vector, for example: [workday 9:00-17:00, 192.168.1.0 / 24, Windows 10]. After obtaining the login behavior pattern, the collaborative R&D basic service module 1021 converts it into a behavior pattern vector and hashes the vector to generate a unique target hash value. Hashing usually uses a secure hash algorithm such as SHA-256. For example, the behavior pattern vector [workday 9:00-17:00, 192.168.1.0 / 24, Windows 10] is hashed using SHA-256 to obtain the target hash value "3e23e8160039594a33894f6564e1b1348bb1d7439fa22f26626bdf31f1d8f5d6".

[0070] Based on the generated target hash value, the collaborative R&D basic service module 1021 generates a corresponding symmetric encryption key. For example, the collaborative R&D basic service module 1021 uses the PBKDF2 (Password-Based Key Derivation Function 2) algorithm to generate a 256-bit AES encryption key based on the target hash value and a random salt value. This encryption key will be used to chain encrypt the resource application sent by the user of unit A. Next, the collaborative R&D basic service module 1021 uses the generated symmetric encryption key to chain encrypt the resource application sent by the user of unit A. Chain encryption means that in the encryption process, each data block will depend on the encryption result of the previous data block, so that even if part of the data is intercepted, the entire data stream cannot be decrypted. For example, the resource application content of user A is "apply for access to EDA tool resources", and the collaborative R&D basic service module 1021 will divide it into several data blocks and encrypt them in turn to generate a string of encrypted ciphertext.

[0071] After encryption is complete, the collaborative R&D basic service module 1021 extracts the encryption key identifier from the encrypted data. The encryption key identifier is usually a unique identifier that identifies the symmetric encryption key used in this encryption. For example, the collaborative R&D basic service module 1021 may use part of the target hash value as the encryption key identifier, such as "3e23e8160039594a".

[0072] Then, the collaborative R&D basic service module 1021 verifies the encryption key identifier corresponding to the encryption application data. The verification process includes checking whether the extracted key identifier matches the key identifier stored in the collaborative R&D basic service module 1021. If they match, it indicates that the encryption application data was generated by a legitimate user, and the verification passes; otherwise, the verification fails. By comparing the extracted key identifier with the stored key identifier, the collaborative R&D basic service module 1021 can effectively verify the legality and integrity of the data.

[0073] Finally, the Collaborative R&D Basic Service Module 1021 returns the permission verification result to the user. If the verification passes, the Collaborative R&D Basic Service Module 1021 will allow the user to access and use the requested resources and generate an authorization token; if the verification fails, the Collaborative R&D Basic Service Module 1021 will reject the user's resource request and record the relevant abnormal behavior. For example, if user A's key identifier is verified successfully, the Collaborative R&D Basic Service Module 1021 will allow user A to access EDA tool resources and generate an authorization token valid for one hour. Otherwise, the Collaborative R&D Basic Service Module 1021 will reject user A's request and notify the security administrator for review.

[0074] In yet another embodiment of this disclosure, such as Figure 4 As shown, the blockchain trusted evidence storage module 1022 is used to encrypt application behavior data to obtain encrypted behavior data and security indicator data generated during the encryption process. Then, the security indicator data is used to match the target smart contract, and the encrypted behavior data is stored in the blockchain node corresponding to the target business in the preset blockchain ledger through the target smart contract. The application behavior data includes one or more of the following: resource publishing data, resource viewing data, resource search data, usage application data, usage application authorization data, project management data, and chip fabrication business data.

[0075] Specifically, for example, when a research institution applies for chip fabrication authorization, it generates application behavior data corresponding to the application. This application behavior data includes: resource name, unique ID, resource applicant, resource authorizing unit, and application authorization time. Further, the blockchain trusted evidence storage module 1022 encrypts this application behavior data to obtain encrypted application behavior data, i.e., encrypted behavior data. In this embodiment, the security indicator data is a hash value. The target smart contract is then matched based on this hash value, and the encrypted behavior data is stored in blockchain node 3 in the diagram according to the target smart contract.

[0076] It should be noted that in the embodiments of the present disclosure, the published in-chain content includes the resource name, unique ID, resource publishing unit, reference relationship, publishing time, hash value, etc.; the resource use application authorization in-chain content includes the resource use application authorization resource name, resource use application authorization resource unique ID, resource applicant, resource authorization unit, application authorization time, hash value, etc.; the streaming authorization in-chain content includes the streaming authorization resource name, resource use application authorization resource unique ID, streaming resource applicant, streaming resource authorization unit, streaming authorization time, hash value, etc.; the project space in-chain content includes the project name, subtask name, responsible person, deliverables, delivery time, hash value, etc.

[0077] It should be noted that the data on the blockchain is usually not stored in the form of a traditional database, and the data is encrypted or anonymized for storage. Blockchain data is stored on a decentralized public ledger. The data on the ledger is stored in blocks called blocks, which are linked together using cryptography. Encryption is one of the most common ways of storing data in a blockchain. Data stored using encryption can be verified by anyone, as it is always distributed among thousands of nodes. The way of encryption can be selected according to the user's preference, such as one-time password book, public key cryptography, hash function and symmetric key cryptography, etc. Each block has a unique cryptographic hash as an identifier and the previous block in the blockchain. Each transaction within a block has a timestamp and is added to the ledger along with each block. Each new block records all transactions and adds them to the previous block. Data stored on the blockchain cannot be changed or deleted from the blockchain unless the cryptographic hash and all hashes in subsequent blocks are modified. The hash value is like a fingerprint of the data, which is a sequence of hexadecimal numbers calculated through a mathematical algorithm. The algorithm generates a unique hash value (fingerprint of data) for each block. When someone wants to access the data, the same hashing process must be used to decrypt it in order to view the originally stored content. The close combination of cryptography and blockchain technology makes the blockchain database extremely secure.

[0078] Specifically, data shards are created from the application behavior data, which divides the data application behavior data into smaller pieces, a process called sharding. This step breaks down the data into manageable chunks that can be distributed across multiple nodes. Each shard is encrypted. After sharding, each data shard is encrypted, and the content owner can have complete control over this process. The goal is to ensure that no one other than the content owner can view / access the data in the shard, regardless of where the data is located or whether the data is static or dynamic.

[0079] A hash is generated for each shard. The blockchain generates a unique hash—a fixed-length encrypted output string—based on the shard's data or encryption key. The hash is added to the ledger and shard metadata to link transactions to the stored shards. The exact method for generating the hash varies from system to system. It should be noted that, in this embodiment, security metrics data can be used as the hash value corresponding to each shard's data, and each shard can be replicated. This ensures availability and performance, and prevents performance degradation and data loss. The content owner determines the number of copies of each shard and the location of these shards. During this process, the content owner should establish a threshold for the minimum number of copies that need to be maintained to ensure no data loss. The target smart contract is then matched based on the hash value, and the replicated shards are distributed according to the target smart contract. The replicated shards are distributed to geographically distributed storage nodes. Finally, the transactions are recorded in the ledger. All transactions in the blockchain ledger are recorded, and this information is synchronized across all nodes. The ledger stores detailed information related to transactions, such as shard location, shard hash, and rental cost, etc. Because the ledger is based on blockchain technology, it is transparent, verifiable, traceable, and tamper-proof.

[0080] In this embodiment of the disclosure, a blockchain-based trusted evidence storage system is deployed on the collaborative R&D end based on blockchain trusted evidence storage technology. This system stores important user behaviors in real time, providing a collaborative R&D environment with traceable intellectual property rights and resource integration and sharing capabilities for users in multiple locations. It enables full-process intellectual property traceability from resource release, application, authorization, and tape-out application to tape-out authorization. It also provides comprehensive protection and controllable sharing of design simulation data streams, safeguarding the security of professional data and clarifying intellectual property ownership. By storing user behavior data in real time and providing data security protection and controllable sharing of design simulation data streams, data security is improved.

[0081] This disclosure also provides a blockchain-based collaborative design method, such as... Figure 5 As shown, it includes:

[0082] S201. The corresponding unit's intranet uses EDA tools to perform microsystem collaborative design and generate an initial collaborative design scheme.

[0083] S202. Receive resource requests sent by the intranet terminals of each unit, and verify the permissions of the resource requests sent by the intranet terminals of each unit. If the permission verification is successful, provide the required resources to the corresponding intranet terminal of the unit through cross-network transmission. The required resources are used by the corresponding intranet terminal of the unit to perform micro-system secondary collaborative design based on the required resources, and generate the target collaborative design scheme.

[0084] S203, real-time notarization is performed on the application behavior data generated by the corresponding intranet terminal in the resource application process through the collaborative R&D basic service module.

[0085] In the embodiments of the present disclosure, the design behavior data generated by the corresponding intranet terminal when performing microsystem collaborative design through an EDA tool, the initial collaborative design scheme, and the target collaborative design scheme are also real-time notarized.

[0086] In the embodiments of the present disclosure, when the intranet terminals of each unit log in to the collaborative R&D portal, the resource application sent by the intranet terminals of each unit is received, and the resource application sent by the intranet terminals of each unit is verified for authority. The resource application is used to provide the required resources for the corresponding intranet terminal through the cross-network transmission mode if the authority verification is passed. The target business is matched according to the required resources, and the target business is processed. The target business includes one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, tape-out application, and tape-out authorization.

[0087] In the embodiments of the present disclosure, the specific steps of verifying the resource application sent by the intranet terminals of each unit for authority include:

[0088] (1) Based on the login identity information of the intranet terminals of each unit, the historical login information of the intranet terminals of each unit is collected, wherein the historical login information includes historical login time and an IP address set;

[0089] (2) According to the historical login information corresponding to the intranet terminals of each unit, the login behavior mode of the intranet terminals of each unit is identified, the login behavior mode corresponding to the intranet terminals of each unit is vector converted, and the behavior mode vector of the intranet terminals of each unit is obtained;

[0090] (3) The behavior mode vector of the intranet terminals of each unit is hashed to obtain the target hash value corresponding to the intranet terminals of each unit, and the encryption key corresponding to the intranet terminals of each unit is generated according to the target hash value corresponding to the intranet terminals of each unit;

[0091] (4) The resource application sent by the intranet terminals of each unit is chain encrypted through the encryption key corresponding to the intranet terminals of each unit to obtain the encrypted application data of the intranet terminals of each unit;

[0092] (5) The key identifier corresponding to the encrypted application data of the intranet terminals of each unit is extracted to obtain the key identifier corresponding to the encrypted application data of the intranet terminals of each unit;

[0093] (6) The key identifier corresponding to the encrypted application data of the intranet terminals of each unit is verified to obtain the authority verification result of the intranet terminals of each unit.

[0094] In the embodiments of the present disclosure, when the target service is the stream slice application or the stream slice authorization, the stream slice service data generated when the corresponding unit intranet end processes the target service through the service processing module corresponding to the personal workbench is stored.

[0095] In the embodiments of the present disclosure, step S203 specifically comprises:

[0096] (1) performing data encryption on the application behavior data to obtain encrypted behavior data and security index data generated in the data encryption process;

[0097] (2) matching the target smart contract through the security index data, and storing the encrypted behavior data into the target service corresponding blockchain node in the preset blockchain ledger through the target smart contract.

[0098] In the embodiments of the present disclosure, the application behavior data comprises one or more of the following: resource publishing data, resource viewing data, resource searching data, use application data, use application authorization data, project management data, and the stream slice service data.

[0099] In the embodiments, based on the blockchain trusted evidence technology, a blockchain trusted evidence system is deployed to store the important behaviors of the unit intranet end in the collaborative design system in real time, and the resource files and original files of the user on the EDA tool in the intranet are stored in real time, thereby providing a collaborative R&D environment with traceability of intellectual property rights and resource integration and sharing functions for off-site multi-unit users, realizing the traceability of intellectual property rights in the whole process of resource publishing, resource application, resource authorization, resource stream slice application, and resource stream slice authorization, comprehensively protecting and controllably sharing the design simulation data flow, protecting the safety of professional data and clearly attributing the intellectual property rights, storing the behavior data of the user in real time, protecting the data security of the design simulation data flow and controllably sharing the data, and improving the data security.

[0100] Through the description of the above embodiments, those skilled in the art can clearly understand that the embodiments of the present disclosure can be implemented by hardware, or can be implemented by means of software and necessary general hardware platforms. Based on such understanding, the technical solutions of the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a U disk, a mobile hard disk, etc.), and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments of the present disclosure.

[0101] Those skilled in the art can understand that the drawings are only schematic of a preferred embodiment, and the modules or flows in the drawings are not necessarily required for implementing the present disclosure.

[0102] Those skilled in the art can understand that the modules in the device in the embodiments can be distributed in the device in the embodiments according to the description of the embodiments, or can be changed to be located in one or more devices different from the embodiments. The modules in the above embodiments can be combined into one module, or can be further split into multiple sub-modules.

[0103] The sequence numbers of the embodiments of the present disclosure are only for description, and do not represent advantages or disadvantages of the embodiments.

[0104] Obviously, various modifications and variations of the present disclosure can be made by those skilled in the art without departing from the spirit and scope of the disclosure. Thus, it is intended that the present disclosure include modifications and variations of this disclosure within its scope. The modifications and variations are intended to come within the scope of the claims of the present disclosure and their equivalents.

Claims

1. A blockchain-based collaborative design system, characterized by, Comprise: At least two unit intranet ends and collaborative research and development ends; wherein each unit intranet end comprises: a unit collaborative design EDA tool module and a unit informationization access module; the collaborative research and development end comprises: a collaborative research and development basic service module and a blockchain trusted storage module; The unit collaborative design EDA tool module is used for corresponding unit intranet end to perform microsystem collaborative design through an EDA tool to generate an initial collaborative design scheme; The unit informationization access module is used for corresponding unit intranet end to access the collaborative research and development end; The collaborative research and development basic service module is used for receiving resource applications sent by each unit intranet end, and performing permission verification on the resource applications sent by each unit intranet end, and providing required resources for the corresponding unit intranet end through cross-network transmission in the case of passing the permission verification, the required resources are used for the corresponding unit intranet end to perform microsystem secondary collaborative design on the initial collaborative design scheme based on the required resources, to generate a target collaborative design scheme; The blockchain trusted storage module is used for storing application behavior data generated by the corresponding unit intranet end in the process of resource application through the collaborative research and development basic service module in real time.

2. The blockchain-based collaborative design system of claim 1, wherein, Each unit intranet end further comprises a unit blockchain trusted storage module, which is used for storing design behavior data generated by the corresponding unit intranet end when performing microsystem collaborative design through an EDA tool, the initial collaborative design scheme and the target collaborative design scheme in real time.

3. The blockchain-based collaborative design system of claim 1, wherein, The collaborative research and development basic service module comprises a collaborative research and development portal and a personal workbench; The collaborative research and development portal is used for receiving resource applications sent by each unit intranet end when each unit intranet end logs in to the collaborative research and development portal, and performing permission verification on the resource applications sent by each unit intranet end, the resource applications are used for providing required resources for the corresponding unit intranet end through cross-network transmission in the case of passing the permission verification; The personal workbench is used for matching a target service according to the required resources of the corresponding unit intranet end, and processing the target service through a business processing module corresponding to the target service, wherein the target service comprises one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, stream application, stream authorization.

4. The collaborative design system based on blockchain of claim 3, the collaborative research and development basic service module is used for extracting login identity information in the resource application sent by each unit intranet end; Based on the login identity information of each unit intranet end, historical login information of each unit intranet end is collected, wherein The historical login information comprises historical login time and an IP address set; And according to the corresponding historical login information of each unit intranet end, login behavior mode recognition of each unit intranet end is performed to obtain the login behavior mode of each unit intranet end, and the login behavior mode of each unit intranet end is converted into a vector to obtain the behavior mode vector of each unit intranet end; Hash processing is performed on the behavior mode vector of each unit intranet terminal to obtain a target hash value corresponding to each unit intranet terminal, and an encryption key corresponding to each unit intranet terminal is generated according to the target hash value corresponding to each unit intranet terminal; The resource application sent by each unit intranet terminal is chain encrypted through the encryption key corresponding to each unit intranet terminal to obtain encrypted application data of each unit intranet terminal; The key identifier corresponding to the encrypted application data of each unit intranet terminal is extracted to obtain the key identifier corresponding to the encrypted application data of each unit intranet terminal; The key identifier corresponding to the encrypted application data of each unit intranet terminal is verified to obtain the permission verification result of each unit intranet terminal.

5. The blockchain-based collaborative design system of claim 4, wherein, When the target business is the stream piece application or the stream piece authorization, the collaborative research and development basic service module further comprises: a project collaborative space; The project collaborative space is used to store stream piece business data generated when the corresponding unit intranet terminal processes a target business through the business processing module corresponding to the personal workstation.

6. The blockchain-based collaborative design system of claim 5, wherein, The blockchain trusted evidence module is used to perform data encryption on the application behavior data to obtain encrypted behavior data and security index data generated in the data encryption process; The target smart contract is matched through the security index data, and the encrypted behavior data is stored in the target business corresponding blockchain node in the preset blockchain account book through the target smart contract.

7. The blockchain-based collaborative design system of claim 6, wherein, The application behavior data includes one or more of the following: resource publishing data, resource viewing data, resource searching data, use application data, use application authorization data, project management data, and stream piece business data. 8.A blockchain-based collaborative design method applied to the system of any one of claims 1-7, characterized in that, It comprises: The corresponding unit intranet terminal performs microsystem collaborative design through the EDA tool to generate an initial collaborative design scheme; Receiving resource applications sent by each unit intranet terminal, and performing permission verification on the resource applications sent by each unit intranet terminal, and providing required resources for the corresponding unit intranet terminal through cross-network transmission in the case of passing the permission verification, the required resources are used for the corresponding unit intranet terminal to perform microsystem secondary collaborative design on the initial collaborative design scheme based on the required resources, to generate a target collaborative design scheme; The application behavior data generated in the process of the corresponding unit intranet terminal applying for resources through the collaborative research and development basic service module is stored in real time.

9. The blockchain-based collaborative design method of claim 8, wherein, It also includes: real-time storage of design behavior data generated when the corresponding unit intranet terminal performs microsystem collaborative design through the EDA tool, the initial collaborative design scheme, and the target collaborative design scheme.

10. The blockchain-based collaborative design method of claim 9, wherein, It also includes: Receiving resource applications sent by each unit intranet terminal, and performing permission verification on the resource applications sent by each unit intranet terminal, and providing required resources for the corresponding unit intranet terminal through cross-network transmission in the case of passing the permission verification, the required resources are used for the corresponding unit intranet terminal to perform microsystem secondary collaborative design on the initial collaborative design scheme based on the required resources, to generate a target collaborative design scheme; According to the required resources of the corresponding unit intranet terminal, a target business is matched, and the target business is processed through the business processing module corresponding to the target business, wherein the target business includes one or more of the following: resource publishing, resource viewing, resource searching, use application, use application authorization, project management, stream piece application, and stream piece authorization.

Citation Information

Patent Citations

  • Data cooperative work method and system based on block chain

    CN115203732A

  • Online chip verification method and system, electronic equipment and readable storage medium

    CN117688900A