EDA design collaboration data security protection system and method and electronic equipment

By adopting a multi-level architecture of the user layer, application layer and cloud platform layer in the EDA design collaboration system, combining data segmentation, encryption and secure multi-party computing protocols, the contradiction between data security and design efficiency in EDA design collaboration is solved, and the dual improvement of data security and design efficiency is achieved.

CN119577811AActive Publication Date: 2025-03-07CHINA NAT INST OF STANDARDIZATION
View PDF 4 Cites 0 Cited by

Patent Information

Application Number
CN202510127818.8
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-02-05
Publication Date
2025-03-07
Estimated Expiration
2045-02-05

AI Technical Summary

Technical Problem

In the EDA design collaboration process, how to improve design efficiency while ensuring data security, avoiding the risk of data leakage and design efficiency impact of traditional data security methods in the collaborative environment.

Method used

A collaborative data security protection system is adopted to design an EDA system, including the user layer, application layer and cloud platform layer. The user layer sets data access policies through the user interface, the application layer performs data segmentation, preprocessing, encryption, decryption and reconstruction, and the cloud platform layer performs computing tasks based on a secure multi-party computing protocol.

Benefits of technology

By segmenting the EDA design data and adopting a secure multi-party computing protocol, each participant can perform joint calculations without disclosing their respective data, which not only protects the security of the design data, but also improves design efficiency.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119577811A_ABST
    Figure CN119577811A_ABST
Patent Text Reader

Abstract

The invention provides an EDA design cooperation data security protection system and method and electronic equipment, and relates to the technical field of electronic design, the system comprises a user layer, an application layer and a cloud platform layer; the user layer sets data access strategies and access permissions of participants through a user interface; the application layer comprises an EDA tool and a data processing module, and the EDA tool is used for executing an EDA design task and sending design data of the EDA design task to the data processing module; the data processing module is used for performing data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data, and returning the processed design data to the EDA tool; and the cloud platform layer is used for executing a calculation task of the EDA design task based on a secure multi-party calculation protocol, and sending an encrypted calculation result to the data processing module. According to the method, the security of design data is ensured, and meanwhile, the design efficiency is improved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of electronic design technology, and in particular to an EDA design collaboration data security protection system, method and electronic equipment. Background Art

[0002] In the EDA (Electronic Design Automation) design process, multiple design teams or designers need to collaborate to complete complex electronic design tasks. However, due to the high sensitivity and confidentiality of EDA design data, how to ensure data security and privacy during the collaboration process has become an urgent problem to be solved. Although traditional data security methods, such as data encryption and access control, can protect data security to a certain extent, there is still a risk of data leakage in a collaborative environment and may affect design efficiency. Summary of the invention

[0003] In view of this, an object of the present invention is to provide an EDA design collaboration data security protection system, method and electronic device, which ensure the security of design data and improve design efficiency.

[0004] In order to achieve the above object, the technical solution adopted by the present invention is as follows: In the first aspect, the present invention provides an EDA design collaboration data security protection system, comprising: a user layer, an application layer and a cloud platform layer; the user layer sets the data access policy and access rights of the participants through a user interface; the application layer comprises: an EDA tool and a data processing module, the EDA tool is used to execute EDA design tasks, and send the design data of the EDA design tasks to the data processing module; the data processing module is used to perform data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data, and return the processed design data to the EDA tool; the cloud platform layer is used to execute the computing tasks of the EDA design tasks based on a secure multi-party computing protocol, and send the encrypted computing results to the data processing module.

[0005] Optionally, the data processing module includes: a data segmentation component for acquiring design data for EDA design tasks, and distributing the design data to corresponding participants after segmentation; a data preprocessing component for preprocessing the segmented design data; a data encryption component for encrypting the preprocessed design data to obtain encrypted data of each participant, and transmitting the encrypted data to a cloud platform that performs computing tasks based on a communication SSL protocol, and receiving encrypted computing results of each participant transmitted by the cloud platform via the communication SSL protocol; a data decryption component for decrypting the encrypted computing results of each participant to obtain the computing results of each participant; a data reconstruction component for verifying the computing results of each participant, and after the verification is passed, integrating the design data of each participant to obtain a design database.

[0006] Optionally, the data encryption component is specifically used to: generate a public key and a private key pair based on a preset key generation algorithm; encrypt the preprocessed design data based on the public key to obtain the encrypted data of each participant, and distribute the share of the private key to the corresponding participant.

[0007] Optionally, the data decryption component is specifically used to: obtain the private key share of each participant, and combine the private key shares of each participant; decrypt the encrypted calculation result based on the combined private key share to obtain the calculation result of each participant.

[0008] Optionally, the data reconstruction component is specifically used to: verify the calculation results of each participant based on a digital signature verification algorithm; if the calculation results of each participant meet the design requirements, uniformly format and integrate the design data of each participant to obtain a design database.

[0009] Optionally, the cloud platform layer includes: cloud computing resources and a security management module; the cloud computing resources are used to receive and store encrypted data transmitted by the data processing module, and to jointly calculate the encrypted data of each participant based on the secure multi-party computing protocol to obtain the encrypted calculation results of each participant, and transmit the encrypted calculation results to the corresponding participants through the communication SSL protocol; the security management module is used for key management, access control of each participant and security audit.

[0010] In a second aspect, the present invention provides an EDA design collaboration data security protection method, which is applied to any EDA design collaboration data security protection system provided in the first aspect, including: obtaining design data of an EDA design task, and dividing the design data and distributing it to corresponding participants; preprocessing the divided design data, and encrypting the preprocessed design data to obtain encrypted data of each participant; jointly calculating the encrypted data of each participant based on a secure multi-party computing protocol to obtain encrypted calculation results of each participant; decrypting the encrypted calculation results of each participant to obtain calculation results of each participant; verifying the calculation results of each participant, and after the verification is passed, integrating the design data of each participant to obtain a design database.

[0011] Optionally, the encrypted calculation results of each participant are decrypted to obtain the calculation results of each participant, including: obtaining the private key shares of each participant and combining the private key shares of each participant; decrypting the encrypted calculation results based on the combined private key shares to obtain the calculation results of each participant.

[0012] In a third aspect, the present invention provides an electronic device comprising a processor and a memory, wherein the memory stores computer-executable instructions that can be executed by the processor, and the processor executes the computer-executable instructions to implement the steps of any one of the methods provided in the first aspect above.

[0013] In a fourth aspect, the present invention provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the steps of any one of the methods provided in the first aspect are executed.

[0014] The present invention brings the following beneficial effects: The EDA design collaboration data security protection system, method and electronic device provided by the present invention include: a user layer, an application layer and a cloud platform layer; the user layer sets the data access policy and access rights of the participants through the user interface; the application layer includes: an EDA tool and a data processing module, the EDA tool is used to perform EDA design tasks, and send the design data of the EDA design task to the data processing module; the data processing module is used to perform data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data, and return the processed design data to the EDA tool; the cloud platform layer is used to perform the calculation task of the EDA design task based on the secure multi-party computing protocol, and send the encrypted calculation result to the data processing module. The above system divides the EDA design data into multiple parts and adopts a secure multi-party computing protocol to enable each participant (design team or designer) to perform joint calculations without disclosing their respective data, which not only protects the security of the design data but also improves the design efficiency.

[0015] Other features and advantages of the present invention will be described in the following description, and partly become apparent from the description, or understood by practicing the present invention. The purpose and other advantages of the present invention are realized and obtained by the structures particularly pointed out in the description, claims and drawings.

[0016] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the preferred embodiments are specifically mentioned below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 An architectural diagram of an EDA design collaboration data security protection system provided by an embodiment of the present invention; Figure 2 A flowchart of an EDA design collaboration method provided by an embodiment of the present invention; Figure 3 A flowchart of an EDA design collaboration data security protection method provided by an embodiment of the present invention; Figure 4 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] At present, although traditional data security methods, such as data encryption and access control, can protect data security to a certain extent, there is still a risk of data leakage in a collaborative environment and may affect design efficiency.

[0021] Based on this, an EDA design collaboration data security protection system, method and electronic device provided by an embodiment of the present invention can ensure the security of design data while improving design efficiency.

[0022] To facilitate understanding of this embodiment, firstly, a EDA design collaboration data security protection system disclosed in an embodiment of the present invention is described in detail. Figure 1 The architecture diagram of an EDA design collaborative data security protection system shown illustrates that the system mainly includes: user layer, application layer and cloud platform layer.

[0023] The user layer sets data access policies and access rights for participants (design teams or designers) through the user interface (UI).

[0024] The application layer includes: EDA tools and data processing modules. EDA tools are used to perform EDA design tasks and send the design data of EDA design tasks to the data processing module. In specific implementation, EDA tools perform specific electronic design tasks, such as schematic drawing, PCB layout, and circuit simulation. In the process of performing these tasks, EDA tools need to interact with the data processing module for data. EDA tools send design data to the data processing module for processing, and receive the processed design data to continue the design task.

[0025] The data processing module is used to segment, preprocess, encrypt, decrypt and reconstruct the design data, and return the processed design data to the EDA tool. In specific implementation, the data processing module is responsible for the segmentation, preprocessing, encryption, decryption and reconstruction of the design data to ensure the security and integrity of the data.

[0026] The cloud platform layer is used to perform the computing tasks of the EDA design tasks based on the secure multi-party computing protocol, and send the encrypted computing results to the data processing module. In the specific implementation, the data processing module sends the encrypted data to the cloud platform layer for computing and storage, and receives the encrypted computing results and other necessary data from the cloud platform layer.

[0027] The above-mentioned EDA design collaboration data security protection system provided by the present invention divides the EDA design data into multiple parts and adopts a secure multi-party computing protocol to enable each participant (design team or designer) to perform joint computing without disclosing their respective data. This not only protects the security of the design data, but also improves the design efficiency.

[0028] In one embodiment, the data processing module includes: a data segmentation component, a data preprocessing component, a data encryption component, a data decryption component and a data reconstruction component.

[0029] The data segmentation component is used to obtain the design data of the EDA design task, and then segment the design data and distribute it to the corresponding participants.

[0030] In the specific implementation, the design data is finely segmented according to functional modules (such as power modules, signal processing modules, control modules, etc.) and levels (such as behavioral level, logical level, circuit level and physical level), and the segmented design data is allocated to the corresponding participants, that is, each participant only receives and processes the data that it is responsible for. At the same time, the data of each module and level is marked and stored in different encrypted containers through the collaborative platform management UI.

[0031] The data preprocessing component is used to preprocess the segmented design data. In the specific implementation, each participant can preprocess the design data locally, such as encoding and encryption, to ensure the security of the original data.

[0032] The data encryption component is used to encrypt the pre-processed design data to obtain the encrypted data of each participant, and transmit the encrypted data to the cloud platform that performs the computing task based on the communication SSL protocol, and receive the encrypted computing results of each participant transmitted by the cloud platform through the communication SSL protocol.

[0033] In one embodiment, the data encryption component is specifically used to: generate a public key and a private key pair based on a preset key generation algorithm; encrypt the preprocessed design data based on the public key to obtain the encrypted data of each participant, and distribute the share of the private key to the corresponding participant.

[0034] In specific implementation, an intelligent key management system is used to generate a public key and a private key pair through a secure key generation algorithm (such as AES-GCM). The public key is used to encrypt data, and the share of the private key will be distributed to each participant. Specifically, the private key can be distributed to the corresponding participants through a secure communication protocol (such as TLS / SSL) to ensure the security of the key during transmission. In the embodiment of the present invention, each participant can only receive his own share of the private key and cannot restore the original data.

[0035] Furthermore, after the data is encrypted, the communication SSL protocol can be used to transmit the encrypted data to the cloud platform that performs the computing task, and receive the encrypted computing results of each participant transmitted by the cloud platform through the communication SSL protocol.

[0036] The data decryption component is used to decrypt the encrypted calculation results of each participant to obtain the calculation results of each participant.

[0037] In one embodiment, when decrypting data, the private key shares of each participant are first obtained and then combined; then the encrypted calculation results are decrypted based on the combined private key shares to obtain the calculation results of each participant.

[0038] In the specific implementation, the participants prepare for the decryption operation and ensure that all necessary private key shares are available for the decryption process. The interactive decryption method is adopted in the embodiment of the present invention. Through an interactive process, the participants cooperate to decrypt the encrypted calculation results. During the decryption process, all participants need to provide private key shares to ensure that only when all participants cooperate can the correct result be decrypted. Specifically include: (1) Private key share collection: When the encrypted calculation results need to be decrypted, each participant needs to provide his or her own private key share to ensure the cooperation of all participants.

[0039] (2) Private key share combination: The private key shares of each participant are combined through a secure interactive process. The combination process needs to ensure that there are enough private key shares to successfully decrypt.

[0040] (3) Data decryption: After the private key shares are successfully combined, the complete private key can be used to decrypt the encrypted data to obtain the original data, that is, the original calculation result.

[0041] The data reconstruction component is used to verify the calculation results of each participant, and after the verification, integrate the design data of each participant to obtain the design database.

[0042] In one embodiment, when reconstructing data, the calculation results of each participant are first verified based on a digital signature verification algorithm; if the calculation results of each participant meet the design requirements, the design data of each participant are uniformly formatted and integrated to obtain a design database.

[0043] In specific implementation, after obtaining the calculation results of each participant, it is necessary to verify the results and reconstruct the data to ensure the correctness of the results and the integrity of the data. Specifically, the calculation results are verified by a digital signature verification algorithm to ensure that all calculation results meet the design requirements and expected results. When the calculation results of all participants are verified, the design data of each participant is integrated together, including the circuit elements, layout information, simulation data, etc. provided by different participants. The unified formatting and organization forms a complete and consistent EDA design database or file set. These data will be used for subsequent circuit manufacturing, testing or further simulation analysis.

[0044] In one embodiment, the cloud platform layer includes: cloud computing resources and a security management module.

[0045] Cloud computing resources are used to receive and store encrypted data transmitted by the data processing module, and to jointly calculate the encrypted data of each participant based on the secure multi-party computing protocol to obtain the encrypted calculation results of each participant, and transmit the encrypted calculation results to the corresponding participants through the communication SSL protocol.

[0046] In specific implementation, cloud computing resources perform EDA computing tasks and work with the security management module to ensure data security. The interaction between cloud computing resources and the security management module ensures the safe execution of computing tasks and the protection of data.

[0047] Specifically, in EDA design collaboration, fast calculation results are a key requirement. Therefore, it is particularly important to select a secure multi-party computing (SMPC) protocol with high computational efficiency. In an embodiment of the present invention, a threshold fully homomorphic encryption (FHE) protocol can be used, which allows calculations to be performed directly on encrypted data without decryption, thereby improving computational efficiency.

[0048] Specifically, when the threshold fully homomorphic encryption protocol is used in the embodiment of the present invention to perform EDA computing tasks, a lightweight encryption algorithm (such as AES-GCM) is used to encrypt and protect the data during data transmission and computing, ensuring that the data remains encrypted even during transmission. The encrypted data will be transmitted to the server or platform (i.e., cloud computing resources) that performs the computing via a secure communication SSL protocol.

[0049] The participants send the encrypted data to the cloud server or other entity that performs the calculation. The cloud server or other entity that performs the calculation receives the encrypted data and starts to perform the necessary EDA calculation tasks. Due to the use of threshold fully homomorphic encryption technology, the cloud server or other entity that performs the calculation can directly perform calculations on the encrypted data without decrypting the original data. After the calculation is completed, the cloud server or other entity that performs the calculation generates the calculation results and stores these results in encrypted form. The encrypted calculation results will be sent back to the participants through the secure communication SSL protocol.

[0050] The security management module is used for key management, access control of various participants and security auditing.

[0051] In specific implementation, the security management module is responsible for functions such as key management, access control and security audit to ensure the security of data on the cloud platform.

[0052] In the embodiment of the present invention, through the communication interaction between the above modules, the system can efficiently perform electronic design tasks while ensuring the security and integrity of data. Each module has a specific function and works in conjunction with other modules to achieve the functions of the overall system. This modular design makes the system easier to maintain, expand and upgrade.

[0053] For ease of understanding, the present invention also provides an EDA design collaboration method, see Figure 2 As shown, it mainly includes the following steps 1 to 5: Step 1: Data segmentation.

[0054] In the specific implementation, the EDA design data is finely divided according to functional modules (such as power module, signal processing module, control module, etc.) and levels (such as behavioral level, logical level, circuit level and physical level).

[0055] Step 2: Data allocation and preprocessing.

[0056] In the specific implementation, each team or designer only receives and processes the data they are responsible for after data segmentation. Each team pre-processes the data locally, such as encoding and encryption, to ensure the security of the original data.

[0057] Step 3: Key generation and distribution.

[0058] In the specific implementation, the intelligent key management system is used to generate public and private key pairs through a secure key generation algorithm. The public key is used to encrypt data, and the share of the private key will be distributed to each participant. The secure communication protocol SSL and encryption technology are used to ensure the security of the key during transmission.

[0059] Step 4: Joint calculation.

[0060] In the specific implementation, the threshold fully homomorphic encryption protocol is used to perform EDA computing tasks. The specific process can be found in the above embodiment and will not be repeated here.

[0061] Step 5: Result verification and data reconstruction.

[0062] In the specific implementation, after obtaining the calculation results of each team, the calculation results are verified through the digital signature verification algorithm to ensure that all results meet the design requirements and expected results. After the calculation results of all teams are verified, these data are integrated together to form a complete and consistent EDA design database or file set.

[0063] The above-mentioned system provided by the embodiment of the present invention divides the EDA design data into multiple parts and adopts SMPC technology to enable each design team or designer to perform joint calculations without disclosing their respective data, which not only protects the security of the design data but also improves the design efficiency. In addition, the calculation results are verified by a specific verification algorithm to ensure the correctness and reliability of the results. Finally, when all design teams or designers have completed their respective tasks, the system will reconstruct the complete EDA design data based on the calculation results of all parties, and further optimize to ensure the quality and performance of the design.

[0064] The embodiment of the present invention also provides an EDA design collaboration data security protection method, which is applied to the EDA design collaboration data security protection system provided in the above embodiment, see Figure 3 The flowchart of a method for protecting EDA design collaboration data security is shown, indicating that the method mainly includes the following steps S301 to S305: Step S301: Acquire design data of an EDA design task, and divide the design data and distribute it to corresponding participants.

[0065] Step S302: pre-processing the segmented design data, and encrypting the pre-processed design data to obtain encrypted data of each participant.

[0066] Step S303: Based on the secure multi-party computing protocol, the encrypted data of each participant is jointly calculated to obtain the encrypted calculation results of each participant.

[0067] Step S304: decrypt the encrypted calculation results of each participant to obtain the calculation results of each participant.

[0068] Step S305: verify the calculation results of each participant, and after the verification, integrate the design data of each participant to obtain a design database.

[0069] The above-mentioned EDA design collaboration data security protection method provided by the present invention divides the EDA design data into multiple parts and adopts a secure multi-party computing protocol to enable each participant (design team or designer) to perform joint computing without disclosing their respective data. This not only protects the security of the design data, but also improves the design efficiency.

[0070] In one embodiment, when decrypting the encrypted calculation results of each participant to obtain the calculation results of each participant, methods including but not limited to the following can be used: first, the private key share of each participant is obtained, and the private key shares of each participant are combined; then, the encrypted calculation results are decrypted based on the combined private key shares to obtain the calculation results of each participant.

[0071] It should be noted that the implementation principle and technical effects of the method provided in the embodiment of the present invention are the same as those of the aforementioned system embodiment. For the sake of brief description, for matters not mentioned in the method embodiment, reference may be made to the corresponding contents in the aforementioned system embodiment.

[0072] An embodiment of the present invention further provides an electronic device. Specifically, the electronic device includes a processor and a storage device. The storage device stores a computer program, and when the computer program is executed by the processor, it executes the method described in any one of the above implementation methods.

[0073] Figure 4A structural diagram of an electronic device provided in an embodiment of the present invention, the electronic device 100 includes: a processor 40, a memory 41, a bus 42 and a communication interface 43, wherein the processor 40, the communication interface 43 and the memory 41 are connected via the bus 42; the processor 40 is used to execute an executable module stored in the memory 41, such as a computer program.

[0074] The memory 41 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 43 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0075] The bus 42 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 4 Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0076] Among them, the memory 41 is used to store programs, and the processor 40 executes the program after receiving the execution instruction. The method executed by the device for flow process definition disclosed in any embodiment of the above-mentioned embodiment of the present invention can be applied to the processor 40 or implemented by the processor 40.

[0077] The processor 40 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 40. The above processor 40 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present invention can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to be executed, or the hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 41, and the processor 40 reads the information in the memory 41 and completes the steps of the above method in combination with its hardware.

[0078] The computer program product of the readable storage medium provided in the embodiment of the present invention includes a computer-readable storage medium storing program code, and the instructions included in the program code can be used to execute the methods described in the previous method embodiments. The specific implementation can be referred to the previous method embodiments, which will not be repeated here.

[0079] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0080] Finally, it should be noted that the above-described embodiments are only specific implementations of the present invention, which are used to illustrate the technical solutions of the present invention, rather than to limit them. The protection scope of the present invention is not limited thereto. Although the present invention is described in detail with reference to the above-mentioned embodiments, ordinary technicians in the field should understand that any technician familiar with the technical field can still modify the technical solutions recorded in the above-mentioned embodiments within the technical scope disclosed by the present invention, or can easily think of changes, or make equivalent replacements for some of the technical features therein; and these modifications, changes or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention, and should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be based on the protection scope of the claims.

Claims

1. An EDA design collaboration data security protection system, characterized in that: include: User layer, application layer and cloud platform layer; The user layer sets data access policies and access rights of participants through the user interface; The application layer includes: an EDA tool and a data processing module, wherein the EDA tool is used to execute an EDA design task and send the design data of the EDA design task to the data processing module; the data processing module is used to perform data segmentation, data preprocessing, data encryption, data decryption and data reconstruction on the design data, and return the processed design data to the EDA tool; The cloud platform layer is used to execute the computing tasks of the EDA design tasks based on a secure multi-party computing protocol, and send the encrypted computing results to the data processing module.

2. The system according to claim 1, characterized in that The data processing module comprises: A data segmentation component is used to obtain the design data of the EDA design task, and divide the design data and distribute it to corresponding participants; A data preprocessing component, used for preprocessing the segmented design data; A data encryption component is used to encrypt the pre-processed design data to obtain the encrypted data of each participant, and transmit the encrypted data to the cloud platform that performs the computing task based on the communication SSL protocol, and receive the encrypted computing results of each participant transmitted by the cloud platform through the communication SSL protocol; A data decryption component, used to decrypt the encrypted calculation results of each participant to obtain the calculation results of each participant; The data reconstruction component is used to verify the calculation results of each participant, and after the verification, integrate the design data of each participant to obtain a design database.

3. The system according to claim 2, characterized in that The data encryption component is specifically used for: Generate a public key and a private key pair based on a preset key generation algorithm; The pre-processed design data is encrypted based on the public key to obtain the encrypted data of each participant, and the share of the private key is distributed to the corresponding participant.

4. The system according to claim 2, characterized in that The data decryption component is specifically used for: Obtain the private key shares of each participant and combine the private key shares of each participant; The encrypted calculation result is decrypted based on the combined private key share to obtain the calculation result of each participant.

5. The system according to claim 2, characterized in that The data reconstruction component is specifically used for: Verifying the calculation results of each participant based on a digital signature verification algorithm; If the calculation results of each participant meet the design requirements, the design data of each participant are uniformly formatted and integrated to obtain a design database.

6. The system according to claim 1, characterized in that The cloud platform layer includes: cloud computing resources and security management modules; The cloud computing resource is used to receive and store the encrypted data transmitted by the data processing module, and perform joint calculations on the encrypted data of each participant based on a secure multi-party computing protocol to obtain the encrypted calculation results of each participant, and transmit the encrypted calculation results to the corresponding participant through a communication SSL protocol; The security management module is used for key management, access control of each participant and security audit.

7. A method for protecting EDA design collaboration data security, characterized in that: The EDA design collaboration data security protection system applied to any one of claims 1 to 6 comprises: Obtain design data for an EDA design task, and divide the design data and distribute it to corresponding participants; Preprocessing the segmented design data, and encrypting the preprocessed design data to obtain encrypted data of each participant; Based on the secure multi-party computing protocol, the encrypted data of each participant is jointly calculated to obtain the encrypted calculation results of each participant; Decrypting the encrypted calculation results of each participant to obtain the calculation results of each participant; The calculation results of each participant are verified, and after the verification is passed, the design data of each participant are integrated to obtain a design database.

8. The method according to claim 7, characterized in that Decrypting the encrypted calculation results of each participant to obtain the calculation results of each participant, including: Obtain the private key shares of each participant and combine the private key shares of each participant; The encrypted calculation result is decrypted based on the combined private key share to obtain the calculation result of each participant.

9. An electronic device, characterized in that: The method comprises a processor and a memory, wherein the memory stores computer executable instructions that can be executed by the processor, and the processor executes the computer executable instructions to implement the steps of the method according to any one of claims 7 to 8.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 7 to 8 are performed.

Citation Information

Patent Citations

  • EDA software integration platform based on cloud platform and implementation method thereof

    CN116489219A

  • Security protection method and system based on big data analysis and cloud computing

    CN117749527A

  • Multi-level privacy protection remote human body scanning method and system

    CN119011237A

  • Method and system for secure multiparty cloud computation

    US20130275752A1