Block chain-based enterprise science and technology information resource credible sharing method and system
Through resource mapping, security analysis and hashing operations, and combined with blockchain technology, distributed storage and security assessment of enterprise technology information resources is solved, and the security risks and permission management problems of centralized management are achieved, achieving high-reliability sharing of enterprise technology information resources.
Patent Information
- Application Number
- CN202510555049.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-29
- Publication Date
- 2025-07-04
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The sharing of existing enterprises' science and technology information resources has problems such as centralized management security risks, extensive authority management, loss of data control rights and decreasing credibility, and lack of flexible security adjustment mechanisms.
Through resource mapping, security analysis and hashing operations, distributed storage and trusted sharing are combined with blockchain technology, node security coefficients and demand security coefficients are used to evaluate the authorization model, and hash value comparison and verification is carried out to form an untampered audit log.
It realizes distributed storage and security assessment of enterprise technology information resources, reduces the risk of single point of failure, improves the credibility and security of sharing, reduces human intervention errors, and ensures data integrity.
Smart Images

Figure CN120263384A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of blockchain technology, and more specifically, to a blockchain-based enterprise science and technology information resource trusted sharing method and system thereof. Background Art
[0002] In the context of digitalization and globalization, scientific and technological information resources have become the core elements of corporate innovation and competitiveness. However, the current sharing of scientific and technological information resources faces many challenges, such as decentralized storage of data among enterprises, lack of unified standards and sharing mechanisms, resulting in duplicate construction and waste of resources. Therefore, it is necessary to uniformly manage the scientific and technological information resources of enterprises and optimize data sharing when sharing them.
[0003] Traditional enterprise scientific and technological information resource trusted sharing methods mainly rely on centralized management methods to ensure the trust and sharing of resources, including centralized management platforms, access and permission management, and data backup. The centralized management platform is used to build a centralized data management platform or data warehouse to centrally store and manage scientific and technological information resources. This method facilitates enterprises to uniformly manage and control data and ensure data consistency and integrity; access and permission management is used to assign different access rights according to the responsibilities and needs of different roles within the enterprise. By setting the correspondence between roles and permissions, the scope of user access to scientific and technological information resources is limited to ensure data security; data backup is used to back up scientific and technological information resources and store data on multiple different storage media, which to a certain extent ensures the trusted sharing of enterprise scientific and technological information resources.
[0004] However, there are still some shortcomings in its actual use. The existing data centralization is prone to security risks when managing data, especially when a single point failure occurs, which will inevitably increase the risk level and pose a greater risk to enterprise security. Based on this situation, security monitoring is required when sharing data, but due to its centralized management, the security adjustment effect is limited and the hidden danger of not being able to meet the adjustment needs. In addition, data management relies on a third party, resulting in the loss of data control. At the same time, the third party is attacked, resulting in a decrease in credibility, which may threaten the security of the entire data center. Second, the existing authorization is prone to be extensive during permission management. In this case, a shared security assessment is required, but the existing one relies on single indicators such as corporate credit or resource confidentiality, and does not comprehensively quantify dynamic risks. Summary of the invention
[0005] In view of this, embodiments of the present invention provide a method and system for trusted sharing of enterprise science and technology information resources based on blockchain. Before resource sharing in an enterprise, resource mapping and security analysis are performed, and refined and flexible adjustments are made accordingly, maximizing the combination of the sharing process and transaction effects. At the same time, after sharing is completed, the sharing process is stored on the blockchain as evidence, and a judgment is made when a dispute occurs, effectively solving the problems raised in the background technology.
[0006] To achieve the above object, the present invention provides the following technical solutions: A method for trusted sharing of enterprise science and technology information resources based on blockchain, specifically including the following steps:
[0007] S1: Resource mapping: Count science and technology information resource items, and at the same time extract the number of sharing enterprises and the corresponding names and technical fields of each sharing enterprise, and form a science and technology information resource project number, thereby mapping the science and technology information resource project to the sharing enterprises;
[0008] S2: Preprocessing of science and technology information resources: The sharing enterprises register nodes on the blockchain according to the mapping group, perform a hash operation on the science and technology information resources to obtain a resource hash value, and perform block processing on the resource hash value. In the distributed storage system, metadata is added according to the mapping relationship between the science and technology information resource project and the sharing enterprises, where the metadata includes the type of science and technology information resources, creation time, affiliated enterprise, and resource confidentiality level;
[0009] S3: Node security analysis: Integrate the preprocessed science and technology information resources and extract node data, thereby obtaining the node security coefficients of each sharing enterprise corresponding to the science and technology information resource project;
[0010] S4: Requirement security analysis: The demanding enterprise of the sharing enterprise sends a sharing request to the resource-owning enterprise, and at the same time obtains a requirement security coefficient according to the sharing request;
[0011] S5: Trusted sharing evaluation: Evaluate the sharing request based on the node security coefficient and the requirement security coefficient, thereby determining the authorization mode and generating a sharing strategy;
[0012] S6: Sharing similarity comparison: After the demanding enterprise completes authorization, decrypt the resource file and calculate the hash value of the decrypted resource file, thereby comparing the hash value of the resource file with the resource hash value recorded on the chain;
[0013] S7: Log integration: Store the transaction record on the blockchain as evidence to form an audit log.
[0014] The present invention also provides a system for trusted sharing of enterprise science and technology information resources based on blockchain, which is applied to the above method for trusted sharing of enterprise science and technology information resources based on blockchain, including:
[0015] Resource mapping module: used to count science and technology information resource projects, extract the number of shared enterprises and the corresponding names and technical fields of each shared enterprise, and form science and technology information resource project numbers, thereby mapping science and technology information resource projects to shared enterprises;
[0016] Science and technology information resource preprocessing module: Shared enterprises register nodes on the blockchain according to the mapping group, perform a hash operation on the science and technology information resources to obtain a resource hash value, and perform block processing on the resource hash value. In the distributed storage system, metadata is added according to the mapping relationship between science and technology information resource projects and shared enterprises, where the metadata includes the type of science and technology information resources, creation time, affiliated enterprise, and resource confidentiality level, and the preprocessed science and technology information resources are transmitted to the node security analysis module;
[0017] Node security analysis module: used to integrate the preprocessed science and technology information resources and extract node data, thereby obtaining the node security coefficients of each shared enterprise corresponding to the science and technology information resource project;
[0018] Demand security analysis module: used for the demand enterprises of shared enterprises to send sharing requests to resource-owning enterprises, and obtain demand security coefficients according to the sharing requests;
[0019] Trusted sharing evaluation module: evaluate the sharing request based on the node security coefficient and the demand security coefficient, thereby judging the authorization mode and generating a sharing strategy;
[0020] Sharing similarity comparison module: After the demand enterprise completes authorization, it decrypts the resource file and calculates the hash value of the decrypted resource file, thereby comparing the hash value of the resource file with the resource hash value recorded on the chain;
[0021] Log integration module: used to store the transaction records on the chain for evidence, forming an audit log.
[0022] Technical effects and advantages of the present invention:
[0023] 1. Before resource sharing, the present invention maps science and technology information resources to shared enterprises, and preprocesses the science and technology information resources after mapping, thereby obtaining node information of the mapping group on the blockchain and storing the science and technology information resources flexibly, not limited to the trusted storage architecture of centralized management to achieve distributed storage of science and technology information resources. On the one hand, it can meet the sharing needs to the greatest extent through the trusted storage verification between blockchain nodes, and on the other hand, it can avoid the entire centralized server being tampered with and attacked due to a single point of failure, which is beneficial to reducing enterprise risks and significantly improving the trusted guarantee level of resource sharing between enterprises;
[0024] 2. After preprocessing the scientific and technological information resources, the present invention conducts a sharing security assessment. When security problems are found in the assessment, it adjusts the authorization mode based on the node security and requirement security of the demanding enterprises, without being limited to a single indicator such as enterprise credit or resource confidentiality level, which to a certain extent ensures the security of sharing. At the same time, it automatically matches the authorization mode based on the security coefficient to reduce the error of human intervention. In addition, the sharing policy generated according to the authorization mode provides a reliable trusted verification benchmark for cross-enterprise resource interaction, which has more reference value for resource sharing between enterprises;
[0025] 3. After decrypting the resource file, the present invention compares the hash values to obtain the hash similarity between the resource file hash value and the resource hash value recorded on the chain. Through the immutable characteristic of the blockchain, it realizes the trusted verification perception of data integrity, realizes the perception of whether the resource file has been tampered with, avoids the transaction risks caused by the possible tampering of the resource file, and achieves the goals of increased trust, improved efficiency, and reduced risk in the sharing of scientific and technological information resources. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] Figure 1 It is a flowchart of the method implementation steps of the present invention.
[0027] Figure 2 It is a schematic diagram of the overall structure of the present invention.
[0028] Figure 3 It is a flowchart of the method for obtaining the requirement security coefficient of the present invention. DETAILED DESCRIPTION OF THE INVENTION
[0029] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.
[0030] As shown in the attached Figure 1 The trusted sharing method and system for enterprise scientific and technological information resources based on blockchain include:
[0031] S1: Count the scientific and technological information resource projects, extract the number of sharing enterprises and the corresponding names and technical fields of each sharing enterprise at the same time, and form a scientific and technological information resource project number, thereby mapping the scientific and technological information resource projects to the sharing enterprises.
[0032] In this embodiment, it should be specifically noted that the scientific and technological information resource projects include technical fields, confidentiality levels, and validity periods. Exemplarily, the scientific and technological information resource project is publicly shareable information resources in the field of artificial intelligence technology, and the validity period expires in December.
[0033] It should be further noted that the mapping between science and technology information resource projects and sharing enterprises is as follows:
[0034] The existing science and technology information resource projects are numbered in a predefined order, and are sequentially marked as 1, 2,..., n, where the predefined order is the chronological order of the establishment time of the science and technology information resource projects;
[0035] The extracted sharing enterprises are classified according to the technical fields, and are respectively marked as A, B,..., N;
[0036] For each science and technology information resource project number, the matching sharing enterprises are extracted through data collection methods. The data collection methods include crawler programs and feature word screening. The science and technology information resource project number and the matching sharing enterprises form a mapping group. Exemplarily, for the science and technology information resource project numbered 1, feature words are extracted through data collection methods. The feature words include the fields of science and technology information resources, such as artificial intelligence, Internet of Things, and automation. At the same time, after data collection of the technical fields of each sharing enterprise, if the technical field of the extracted feature words has a high correlation with the science and technology information resource project numbered 1, then the science and technology information resource project numbered 1 is mapped to the sharing enterprise marked as A. Among them, a science and technology information resource project can be mapped to multiple sharing enterprises.
[0037] S2: Preprocessing of science and technology information resources: The sharing enterprises register nodes on the blockchain according to the mapping group, and perform a hash operation on the science and technology information resources. The hash algorithm can be the SHA-256 algorithm to obtain a resource hash value, and the resource hash value is block-processed in the distributed storage system. Metadata is added according to the mapping relationship between the science and technology information resource project and the sharing enterprise, where the metadata includes the type of science and technology information resources, creation time, affiliated enterprise, and resource confidentiality level.
[0038] In this embodiment, it should be specifically noted that the hash value is uploaded to the chain through a smart contract and jointly maintained by all network nodes after being confirmed by the consensus mechanism. A single node cannot modify it. If someone tampers with the hash value, the newly generated hash will not match the record on the chain, resulting in verification failure; The science and technology information resources are sharded and stored in the distributed storage system. Exemplarily, the distributed storage system can be IPFS. Since the blockchain storage has high costs and low efficiency, data can be efficiently stored and managed at low cost through distributed storage.
[0039] S3: Integrate the preprocessed science and technology information resources and extract node data, thereby obtaining the node security coefficients of each sharing enterprise corresponding to the science and technology information resource project.
[0040] In this embodiment, it should be specifically noted that the node data includes security parameters, connection parameters, and stability parameters. The node security coefficient is calculated as follows:
[0041] A1: Obtain the security parameters of each registered node of the shared enterprise, where the security parameters include node status, key leakage history, and certificate validity, and adopt the binary judgment F x = {0, 1} to represent the security parameter situation. The specific binary judgment is as follows: Detect the node status of the registered node. If the node is in an active state, then F1 = 1; if the node is in an offline state, then F1 = 0. Detect the key leakage history. If there is no leakage history in the past, then F2 = 1; if there is a leakage history in the past, then F2 = 0. Detect the certificate validity. If the certificate has not expired, then F3 = 1; otherwise, F3 = 0.
[0042] A2: Obtain the number of abnormal connections of each registered node of the shared enterprise, and count the historical maximum number of abnormalities. Compare the number of abnormal connections with the historical maximum number of abnormalities to obtain the node abnormality value.
[0043] A3: Verify the blockchain data through hash verification to determine whether it has been tampered with. Compare the number of tampering times with the total number of verifications to obtain the tampering abnormality value, and use the node abnormality value and the tampering abnormality value as connection parameters.
[0044] A4: Obtain the resource utilization rate of each shared enterprise corresponding to the scientific and technological information resource project according to the registered node. Compare the resource utilization rate with the preset value to obtain the node stability value, and use it as the stability parameter.
[0045] A5: Calculate the node security coefficient of each shared enterprise corresponding to the scientific and technological information resource project based on the node status, key leakage history, certificate validity, node abnormality value, tampering abnormality value, and node stability value corresponding to the security parameter, connection parameter, and stability parameter. Specifically, it is expressed as:
[0046]
[0047] Among them, Ns represents the node security coefficient of each shared enterprise corresponding to the scientific and technological information resource project. F1, F2, and F3 respectively represent the node status, key leakage history, and certificate validity situations. w1, w2, and w3 respectively represent the correction weight values corresponding to the node status, key leakage history, and certificate validity situations. Dn represents the node abnormality value of each registered node of the shared enterprise. Dt represents the tampering abnormality value of each registered node of the shared enterprise. Sn i represents the node stability value of the i-th scientific and technological information resource project corresponding to the shared enterprise. Sn max represents the maximum node stability value among the shared enterprises. It can be seen from the above formula that by analyzing the security parameters through weighted node status, key leakage history, and certificate validity situations, the higher the security parameter, the lower the connection parameter, and the higher the stability parameter, the higher the security node coefficient.
[0048] It should be noted that due to the large number of nodes in the blockchain network, the judgment of security parameters needs to be efficient and easy to execute. By using binary variables to judge the security parameters, the complex security situation is simplified into two clear states, avoiding complex quantification and calculation processes. Exemplarily, when judging the node state, it is only necessary to determine whether the node is active or offline, where 1 represents active and 0 represents offline. This simple judgment method greatly reduces the complexity of evaluation and provides clear security parameter situations for subsequent node security evaluation.
[0049] It should be understood that the main reason for extracting the security parameters, connection parameters, and stability parameters in the node data after integrating the preprocessed scientific and technological information resources is that these three parameters directly affect the security of the node. Specifically, the blockchain network relies on multi-node consensus. If there are defects in the node's own security, network connection, and performance stability during node registration, it may lead to consensus failure, data inconsistency, and even fork risks. Extracting node data to evaluate node security can reduce sharing risks and ensure the secure transmission of enterprise scientific and technological information resources.
[0050] S4: The demanding enterprise of the shared enterprise sends a sharing request to the resource-owning enterprise, and at the same time obtains the demand security coefficient according to the sharing request.
[0051] In this embodiment, it should be specifically noted that the sharing request includes the resource hash value, the corresponding name of the demanding enterprise, and the technical field for applying to use the resource. The demanding enterprises are numbered and marked as 1, 2,..., j,..., k respectively. For the method of obtaining the demand security coefficient, please refer to Figure 3 As shown, the specific obtaining method is as follows:
[0052] B1: Obtain the corresponding scientific and technological information resources according to the sharing request, and at the same time, according to the mapping relationship between the scientific and technological information resource items and the sharing enterprises, count the number of sharing enterprises corresponding to the scientific and technological information resources;
[0053] B2: Divide 1 by the number of sharing enterprises corresponding to the scientific and technological information resources to obtain the resource scarcity score value. The fewer the number of sharing enterprises owning the resource, the higher the resource scarcity;
[0054] B3: Obtain all the performances of the demanding enterprise in past sharing activities according to the blockchain. Exemplarily, the performances specifically include whether the resource is returned on time and whether the usage agreement is complied with;
[0055] B4: Classify all the performances of the demanding enterprise in past sharing activities into negative performances and positive performances. Among them, the negative performance is the default situation of the demanding enterprise in the sharing activity. The specific classification process of its negative performance and positive performance is as follows:
[0056] Extract the performance correlation words corresponding to all the performances of the demanding enterprise. Here, the performance correlation words include positive performance correlation words, such as compliance and long-term cooperation, and also negative performance correlation words, such as breach of contract and data abuse. If all the performances corresponding to the demanding enterprise are positive performance correlation words, then this performance is classified as a positive performance. On the contrary, if there are negative performance correlation words among all the performances corresponding to the demanding enterprise, then this performance is classified as a negative performance;
[0057] B5: Calculate the scoring value of all the performances of the demanding enterprise in the past sharing activities according to the set scoring model based on the performance classification, and obtain the enterprise credit scoring value corresponding to the demanding enterprise. The specific set scoring model includes:
[0058] Construct a set of performance evaluation correlation words for all the performances of the demanding enterprise in the past sharing activities;
[0059] Extract positive performance correlation words and negative performance correlation words from the set of performance evaluation correlation words in turn, and match them with the specific scoring values corresponding to each performance correlation word in the sharing database. The specific scoring value can be a positive value or a negative value, and the specific scoring value of the positive performance correlation word is a positive value, and the specific scoring value of the negative performance correlation word is a negative value, to obtain the specific scoring values of the performance correlation words corresponding to each demanding enterprise;
[0060] Accumulate the specific scoring values of the performance keyword corresponding to each demanding enterprise, and thus obtain the enterprise credit scoring value corresponding to all the performances of each demanding enterprise in the past sharing activities;
[0061] B6: Obtain the demand security coefficient based on the resource scarcity scoring value and the enterprise credit scoring value, which is specifically expressed as:
[0062]
[0063] Where Cs represents the demand security coefficient of each demanding enterprise, Ea represents the resource scarcity scoring value, Erj represents the enterprise credit scoring value of the jth demanding enterprise, and e represents the natural constant. It can be seen from the above formula that when the enterprise credit scoring is higher and the resource scarcity degree is lower, the demand security is higher;
[0064] S5: Evaluate the sharing request based on the node security coefficient and the demand security coefficient, and thus judge the authorization mode and generate the sharing strategy.
[0065] In this embodiment, it should be specifically explained that the sharing request evaluation is as follows: According to the node security coefficient of the sharing enterprise corresponding to each scientific and technological information resource project and the demand security coefficient of each demanding enterprise, count the sharing evaluation index of the sharing enterprise, which is specifically expressed as:
[0066]
[0067] where η represents the sharing evaluation index of the sharing enterprise, and Ns i represents the node security coefficient of the sharing enterprise corresponding to the i-th scientific and technological information resource project, and Cs j represents the demand security coefficient of the j-th demand enterprise. The larger the node security coefficient and the demand security coefficient, and the larger the sharing evaluation index, the higher the security during enterprise sharing.
[0068] It should be further noted that the authorization mode obtains the security threshold through the shared database and compares the security threshold with the sharing evaluation index. Exemplarily, the security threshold is 0.6. If the sharing evaluation index is less than the security threshold, it indicates that the sharing evaluation index is small and the security during enterprise sharing is low, then the authorization model is adjusted to manual review. If the sharing evaluation index is greater than or equal to the security threshold, it indicates that the sharing evaluation index is large and the security during enterprise sharing is high, then the authorization mode is adjusted to automatic approval.
[0069] It should be explained that the sharing policy is adjusted according to the authorization mode. If the authorization mode is automatic approval, the sharing policy is set to automatic approval and verification passed. The smart contract will generate a temporary sharing key for the subsequent encryption and decryption of enterprise scientific and technological information resources, and at the same time record the sharing record, including the resource-owning enterprise ID, the demand enterprise ID, the resource hash value, the sharing time, and the validity period of the sharing key, and chain these information for deposit. If the authorization mode is manual review, the sharing policy is set to manual review. The smart contract will send an approval notice to the client of the resource-owning enterprise, and the management personnel of the resource-owning enterprise will perform approval operations through the visual interface. The approval result and operation record will also be chained for deposit, where the approval result is to agree or reject resource sharing.
[0070] S6: After the demand enterprise completes authorization, it decrypts the resource file and calculates the hash value of the decrypted resource file, and then compares the hash value of the resource file with the resource hash value recorded on the chain.
[0071] In this embodiment, it should be specifically noted that the specific steps for comparing the hash value of the resource file with the resource hash value recorded on the chain are as follows: The hash value of the decrypted resource file is divided into blocks according to the resource hash value recorded on the chain by the same rule, and the hash value of each block is calculated;
[0072] The hash values of each block are compared in a one-to-one correspondence order, and the number of matching blocks is counted;
[0073] The number of matching blocks is compared with the total number of blocks to obtain the hash similarity;
[0074] Set a similarity threshold. If the hash similarity is less than the similarity threshold, it indicates that the file may have been tampered with, and an alarm is sent through the control center. If the hash similarity is greater than the similarity threshold, it indicates that the resource file has not been tampered with during the sharing process, and the demanding enterprise can continue with the transaction.
[0075] S7: Store the transaction record on the blockchain for evidence, forming an audit log.
[0076] In this embodiment, it should be specifically noted that the transaction record, approval result, and operation record are integrated into log data, and the smart contract is called to upload the log data to the blockchain.
[0077] It should be further noted that during the entire sharing process, all operations will generate corresponding transaction records, which are stored on the blockchain for evidence, forming an immutable audit log. When disputes arise, such as disputes over the authenticity of resources, the scope of use of permissions, etc., the "dispute arbitration contract" on the blockchain can be called. This contract will automatically extract the operation records, sharing policies, and resource hash value information stored on the chain, make a ruling according to the preset arbitration rules, and store the ruling result on the blockchain again for evidence.
[0078] The control center is used to analyze the monitoring data during the sharing process and control relevant parameters.
[0079] The shared database is used to store the node security coefficients of the shared enterprises corresponding to each scientific and technological information resource project, the demand security coefficients of each demanding enterprise, and the sharing evaluation indices of the shared enterprises, and store the correction weights, security thresholds, and similarity thresholds corresponding to the node status, key leakage history, and certificate validity.
[0080] See Appendix Figure 2 As shown, the present invention also provides a trusted sharing system for enterprise scientific and technological information resources based on the blockchain, which is applied to the above-mentioned trusted sharing method for enterprise scientific and technological information resources based on the blockchain, including:
[0081] Resource mapping module: used to count scientific and technological information resource projects, extract the number of shared enterprises and the corresponding names and technical fields of each shared enterprise at the same time, and form a scientific and technological information resource project number, thereby mapping the scientific and technological information resource projects to the shared enterprises;
[0082] Scientific and technological information resource preprocessing module: The shared enterprise registers nodes on the blockchain according to the mapping group, performs a hash operation on the scientific and technological information resource to obtain a resource hash value, and performs block processing on the resource hash value. In the distributed storage system, metadata is added according to the mapping relationship between the scientific and technological information resource project and the shared enterprise, where the metadata includes the scientific and technological information resource type, creation time, affiliated enterprise, and resource classification level, and the preprocessed scientific and technological information resource is transmitted to the node security analysis module;
[0083] Node Security Analysis Module: It is used to integrate the preprocessed scientific and technological information resources, extract node data, and thereby obtain the node security coefficients of each shared enterprise corresponding to the scientific and technological information resource project;
[0084] Requirement Security Analysis Module: It is used for the demanding enterprise of the shared enterprise to send a sharing request to the resource-owning enterprise, and at the same time obtain the requirement security coefficient according to the sharing request;
[0085] Trusted Sharing Evaluation Module: It evaluates the sharing request based on the node security coefficient and the requirement security coefficient, thereby determining the authorization mode and generating a sharing policy;
[0086] Sharing Similarity Comparison Module: After the demanding enterprise completes the authorization, it decrypts the resource file and calculates the hash value of the decrypted resource file, and thereby compares the hash value of the resource file with the resource hash value recorded on the chain;
[0087] Log Integration Module: It is used to store the transaction record on the chain for certification to form an audit log.
[0088] Secondly: In the accompanying drawings of the disclosed embodiments of the present invention, only the structures related to the disclosed embodiments are involved. For other structures, reference can be made to the general design. Without conflict, the same embodiment and different embodiments of the present invention can be combined with each other;
[0089] Finally: The above are only the preferred embodiments of the present invention and are not used to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A method for trusted sharing of enterprise science and technology information resources based on blockchain, characterized in that, Including: S1: Resource mapping: Statistic the science and technology information resource projects, extract the number of sharing enterprises and the corresponding names and technical fields of each sharing enterprise, and form a science and technology information resource project number, thereby mapping the science and technology information resource projects with the sharing enterprises; S2: Preprocessing of science and technology information resources: The sharing enterprises register nodes on the blockchain according to the mapping group, perform a hash operation on the science and technology information resources to obtain a resource hash value, and perform block processing on the resource hash value. In the distributed storage system, metadata is added according to the mapping relationship between the science and technology information resource projects and the sharing enterprises, where the metadata includes the type of science and technology information resources, creation time, affiliated enterprise, and resource confidentiality level; S3: Node security analysis: Integrate the preprocessed science and technology information resources, extract node data, and thereby obtain the node security coefficients of each sharing enterprise corresponding to the science and technology information resource projects; S4: Requirement security analysis: The demanding enterprises of the sharing enterprises send sharing requests to the resource-owning enterprises, and obtain the requirement security coefficients according to the sharing requests at the same time; S5: Trusted sharing evaluation: Evaluate the sharing requests based on the node security coefficients and requirement security coefficients, thereby judging the authorization mode and generating a sharing strategy; S6: Sharing similarity comparison: After the demanding enterprises complete the authorization, decrypt the resource files, calculate the hash value of the decrypted resource files, and thereby compare the hash value of the resource files with the resource hash value recorded on the chain; S7: Log integration: Store the transaction records on the chain for evidence, forming an audit log.
2. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, wherein: The mapping of the science and technology information resource projects with the sharing enterprises is specifically as follows: Number the existing science and technology information resource projects in a predefined order, and mark them as 1, 2,..., n in sequence, where the predefined order is the chronological order of the establishment time of the science and technology information resource projects; Classify each extracted sharing enterprise according to the technical field, and mark them as A, B,..., N respectively; For each science and technology information resource project number, extract the matching sharing enterprises through data collection methods, and the data collection methods include crawler programs and feature word screening, and form a mapping group of the science and technology information resource project numbers and the matching sharing enterprises.
3. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, characterized in that: The node data includes security parameters, connection parameters, and stability parameters. The node security coefficient is specifically calculated as follows: A1: Obtain the security parameters of each shared enterprise registration node, where the security parameters include node status, key leakage history, and certificate validity, and adopt a binary judgment F x = {0, 1} represents the security parameter situation. The specific binary judgment is as follows: Detect the node status of the registration node. If the node is in an active state, then F1 = 1; if the node is in an offline state, then F1 = 0. Detect the key leakage history. If there is no leakage history in the past, then F2 = 1; if there is a leakage history in the past, then F2 = 0. Detect the certificate validity. If the certificate has not expired, then F3 = 1; otherwise, F3 = 0. A2: Obtain the abnormal connection times of the registered nodes of each sharing enterprise, and count the historical maximum abnormal number. Compare the abnormal connection times with the historical maximum abnormal number to obtain the node abnormal value; A3: Verify the blockchain data through hash verification to determine whether it has been tampered with. Compare the number of tampering times with the total verification times to obtain the tampering abnormal value, and use the node abnormal value and the tampering abnormal value as connection parameters; A4: Obtain the resource utilization rates of each sharing enterprise corresponding to the science and technology information resource projects according to the registered nodes, compare the resource utilization rates with the preset values to obtain the node stability value, and use it as the stability parameter; A5: Calculate the node security coefficient of each scientific and technological information resource project corresponding to the shared enterprise based on the node status, key leakage history, certificate validity, node outliers, tampering outliers, and node stability value corresponding to the security parameters, connection parameters, and stability parameters, which is specifically expressed as: Among them, Ns represents the node security coefficient of each scientific and technological information resource project corresponding to the shared enterprise, F1, F2, and F3 respectively represent the node status, key leakage history, and certificate validity, w1, w2, and w3 respectively represent the correction weight values corresponding to the node status, key leakage history, and certificate validity, w1 + w2 + w3 = 1, Dn represents the node outlier of each shared enterprise registration node, Dt represents the tampering outlier of each shared enterprise registration node, and Sn i represents the node stability value of the shared enterprise corresponding to the i-th scientific and technological information resource project, and Sn max represents the maximum node stability value in the shared enterprise.
4. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, wherein: The sharing request includes the resource hash value, the corresponding name of the requesting enterprise, and the technical field for which the resource is applied. The specific method for obtaining the required security coefficient is as follows: B1: Obtain the corresponding scientific and technological information resources according to the sharing request, and at the same time, count the number of shared enterprises corresponding to the scientific and technological information resources according to the mapping relationship between the scientific and technological information resource projects and the shared enterprises; B2: Divide 1 by the number of shared enterprises corresponding to the scientific and technological information resources to obtain the resource scarcity score value; B3: Obtain all the performances of the requesting enterprise in past sharing activities according to the blockchain; B4: Classify all the performances of the requesting enterprise in past sharing activities into negative performances and positive performances, where the negative performance is the default situation of the requesting enterprise in the sharing activity; B5: Calculate the score value according to the set scoring model for all the performances of the requesting enterprise in past sharing activities based on the performance classification to obtain the enterprise credit score value corresponding to the requesting enterprise; B6: Obtain the required security coefficient based on the resource scarcity score value and the enterprise credit score value, which is specifically expressed as: Where Cs represents the required security coefficient of each requesting enterprise, Ea represents the resource scarcity score value, Erj represents the enterprise credit score value of the jth requesting enterprise, and e represents the natural constant.
5. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 4, characterized in that: The set scoring model specifically includes: Construct a set of performance evaluation related words for all the performances of the requesting enterprise in past sharing activities; Extract the positive performance related words and negative performance related words from the set of performance evaluation related words in sequence, and match them with the specific score values corresponding to each performance related word in the shared database. The specific score value of the positive performance related word is positive, and the specific score value of the negative performance related word is negative, to obtain the specific score value of each performance related word corresponding to the requesting enterprise; Accumulate the specific score values of the performance keywords corresponding to each requesting enterprise to obtain the enterprise credit score value corresponding to all the performances of each requesting enterprise in past sharing activities.
6. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, wherein: The sharing request evaluation is specifically as follows: Calculate the sharing evaluation index of the shared enterprise according to the node security coefficient of each scientific and technological information resource project corresponding to the shared enterprise and the required security coefficient of each requesting enterprise, which is specifically expressed as: where η represents the sharing evaluation index of the sharing enterprise, Ns i represents the node security coefficient of the i-th scientific and technological information resource project corresponding to the sharing enterprise, Cs j represents the demand security coefficient of the j-th demand enterprise.
7. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, characterized in that: The authorization mode obtains the security threshold through the shared database, and compares the security threshold with the sharing evaluation index. If the sharing evaluation index is less than the security threshold, it means the sharing evaluation index is small, then the authorization model is adjusted to manual review, and the sharing policy is set to manual review. If the sharing evaluation index is greater than or equal to the security threshold, it means the sharing evaluation index is large, then the authorization mode is adjusted to automatic approval, and the sharing policy is set to automatic approval and verification passed.
8. The method for trusted sharing of enterprise science and technology information resources based on blockchain according to claim 1, wherein: The specific steps for comparing the resource file hash value with the resource hash value recorded on the chain are as follows: Divide the decrypted resource file hash value into blocks according to the resource hash value recorded on the chain by the same rule, and calculate the hash value of each block; Compare the hash values of each block in a one-to-one correspondence and count the number of matching blocks; Compare the number of matching blocks with the total number of blocks to obtain the hash similarity; Set a similarity threshold. If the hash similarity is less than the similarity threshold, an alarm is issued through the control center. If the hash similarity is greater than the similarity threshold, the demanding enterprise can continue the transaction.
9. A blockchain-based trustworthy sharing system for enterprise scientific and technological information resources, characterized by the blockchain-based trustworthy sharing method for enterprise scientific and technological information resources according to any one of claims 1-8. It includes: Resource mapping module: used to count science and technology information resource projects, extract the number of sharing enterprises and the corresponding names and technology fields of each sharing enterprise at the same time, and form science and technology information resource project numbers, thereby mapping science and technology information resource projects to sharing enterprises; Science and technology information resource preprocessing module: The sharing enterprise registers nodes on the blockchain according to the mapping group, performs a hash operation on the science and technology information resource to obtain a resource hash value, and performs block processing on the resource hash value in the distributed storage system. According to the mapping relationship between the science and technology information resource project and the sharing enterprise, metadata is added, where the metadata includes the type of science and technology information resource, creation time, affiliated enterprise, and resource confidentiality level, and the preprocessed science and technology information resource is transmitted to the node security analysis module; Node security analysis module: used to integrate the preprocessed science and technology information resources and extract node data, thereby obtaining the node security coefficients of each sharing enterprise corresponding to the science and technology information resource project; Demand security analysis module: used for the demanding enterprise of the sharing enterprise to send a sharing request to the resource-owning enterprise, and obtain the demand security coefficient according to the sharing request; Trusted sharing evaluation module: evaluate the sharing request based on the node security coefficient and the demand security coefficient, thereby judging the authorization mode and generating a sharing strategy; Sharing similarity comparison module: After the demanding enterprise completes authorization, it decrypts the resource file and calculates the hash value of the decrypted resource file, thereby comparing the hash value of the resource file with the resource hash value recorded on the chain; Log integration module: used to store the transaction record on the chain for evidence, forming an audit log.
10. The blockchain-based enterprise science and technology information resource trusted sharing system according to claim 9, characterized in that: The specific process of the sharing similarity comparison module comparing the hash value of the resource file with the resource hash value recorded on the chain includes: dividing the hash value of the decrypted resource file into blocks according to the resource hash value recorded on the chain by the same rule, and calculating the hash value of each block; Compare the hash values of each block in a one-to-one correspondence and count the number of matching blocks; Compare the number of matching blocks with the total number of blocks to obtain the hash similarity; Set a similarity threshold. If the hash similarity is less than the similarity threshold, an alarm is issued through the control center. If the hash similarity is greater than the similarity threshold, the demanding enterprise can continue the transaction.
Citation Information
Patent Citations
Data security sharing method and device based on block chain, and medium
CN111224786A
Agricultural science and technology resource integration-sharing service method and system
CN111882172A
Scientific and technological resource data security storage and sharing method based on alliance chain
CN112039855A
Resource sharing method and system based on block chain
CN114844896A
Enterprise knowledge base cloud sharing method based on AI large model
CN118939622A