基于区块链的开放协作开发供应链可信管理平台
作者:
作者单位:

作者简介:

通讯作者:

中图分类号:

TP311

基金项目:

国家重点研发计划(2024YFB2505604)


Blockchain-based Trusted Management Platform for Open Collaborative Development Supply Chains
Author:
Affiliation:

Fund Project:

  • 摘要
  • |
  • 图/表
  • |
  • 访问统计
  • |
  • 参考文献
  • |
  • 相似文献
  • |
  • 引证文献
  • |
  • 资源附件
  • |
  • 文章评论
    摘要:

    开放协作开发是重要的软件开发模式, 在智能化基础软件的开发过程中得到了广泛应用. 然而, 该模式在软件供应链安全性方面存在显著隐患: 一方面, 协作开发过程中的收益分配可能遭受操纵篡改; 另一方面, 代码资产在被用户合法获取后, 仍可能被非法转售或泄露. 针对这些问题, 提出一种开放协作开发供应链可信管理平台, 以区块链作为可信执行与可追溯的技术支撑, 在保障过程可验证性的同时进一步提升安全性. 该平台引入贡献点来量化用户在协作开发中的贡献, 并通过智能合约依据贡献点的价值公平分配项目收益. 此外, 实现基于智能合约的押金与信用积分安全机制, 有效降低了协作开发过程的软件信息泄露与恶意行为风险. 实验结果表明, 所提平台能够有效保障开发者权益, 显著提升开发者的开发积极性与响应速度, 同时保持合理的开销水平, 为软件供应链安全提供了有力保障.

    Abstract:

    Open collaborative development is an important software development model that has been widely applied in the development of intelligent foundational software. However, this model presents significant risks in terms of software supply chain security. On the one hand, the revenue distribution process in collaborative development may be subject to manipulation and tampering. On the other hand, code assets, even after being legitimately obtained by users, may still be illegally resold or leaked. To address these issues, this study proposes a trusted management platform for open collaborative development supply chains that uses blockchain to support trusted execution and traceability, ensuring process verifiability and enhanced security. The platform introduces contribution points to quantify users’ contributions in collaborative development and fairly allocates project revenue through smart contracts based on the value of the contribution points. Furthermore, a deposit and credit score security mechanism based on smart contracts is implemented, effectively reducing the risks of software information leakage and malicious behavior in the collaborative development process. Experimental results show that the proposed platform effectively protects developers’ rights and interests, significantly enhances developer motivation and responsiveness, and maintains reasonable overhead, thus providing strong support for software supply chain security.

    参考文献
    相似文献
    引证文献
引用本文

张硕骁,汤恩义,张浩枫,单一啸,潘佳滨,刘子豪,成浩亮,赵建华,陈鑫,李宣东.基于区块链的开放协作开发供应链可信管理平台.软件学报,,():1-27

复制
相关视频

分享
文章指标
  • 点击次数:
  • 下载次数:
  • HTML阅读次数:
  • 引用次数:
历史
  • 收稿日期:2025-10-16
  • 最后修改日期:2026-01-21
  • 录用日期:
  • 在线发布日期: 2026-08-19
  • 出版日期:
文章二维码
您是第位访问者
版权所有:中国科学院软件研究所 京ICP备05046678号-3
地址:北京市海淀区中关村南四街4号,邮政编码:100190
电话:010-62562563 传真:010-62562533 Email:jos@iscas.ac.cn
技术支持:北京勤云科技发展有限公司

京公网安备 11040202500063号