基于区块链的软件物料清单数据共享管控方法研究  

Research on data sharing and control method of software bill of materials based on blockchain

作　　者：张心语 杨凯 陈隽 冉鹏 方煦譞 ZHANG Xin-yu;YANG Kai;CHEN Jun;RAN Peng;FANG Xu-xuan(China Mobile Research Institute,Beijing 100053,China;China Mobile Group Co.,Ltd.,Beijing 100053,China)

机构地区：[1]中国移动通信有限公司研究院,北京100053 [2]中国移动通信集团有限公司,北京100053

出　　处：《电信工程技术与标准化》2025年第2期19-25,共7页Telecom Engineering Technics and Standardization

摘　　要：软件物料清单对软件供应链安全意义重大,但当前其数据价值挖掘与有效性保障面临挑战。本文提出基于区块链的企业级软件物料清单数据共享管控方法,设计基于数据质量评估的激励机制与智能合约。该方法利用区块链特性,防止数据篡改与窃取,严格把控数据质量,多场景触发智能合约实现数据共享,为企业软件透明度管理提供有效支撑,助力提升软件供应链安全。Software bill of materials is of great signifi cance to the security of software supply chain,but its data value mining and validity guarantee are facing challenges.This paper proposes an enterprise-level software bill of materials data sharing control method based on blockchain,constructs a full-node-light node architecture,and designs an incentive mechanism and smart contract based on data quality assessment.This method uses the characteristics of blockchain to prevent data tampering and theft,strictly control data quality,trigger smart contracts in multiple scenarios to achieve data sharing,provide eff ective support for enterprise software transparency management,and help improve software supply chain security.

关 键 词：软件供应链安全 软件物料清单 区块链技术 

分 类 号：TN918[电子电信—通信与信息系统]