A secure peer-to-peer network

Abstract

The present invention relates to a securely interactive peer-to-peer network, based on a peer-to-peer network for collaborative computing, the interaction between an access terminal and the peer-to-peer network regarding request commands and response contents, by extracting data information into semantic content permitted by the rules of the peer-to-peer computing network, solves the network security problem existing in the traditional network data interaction that extracts designated location information from encapsulated data. The node device of the peer-to-peer network obtains the corresponding request command by parsing the obtained semantics, and can filter out all data information that is irrelevant to the request command, does not comply with security specifications, and cannot be understood by the peer-to-peer network before further processing, avoiding problems such as Trojan attacks and authority hijacking. The network composed of peer-to-peer network nodes can be implemented as a pure intranet, not directly connected to the external network, and uses its own communication protocol, and performs real-time, massive, and super-dimensional verification calculations by the peer computing mode to ensure its security.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing and secure interaction, and more specifically, to a secure interactive peer-to-peer network. Background Art

[0002] With the increasing application of information technology and the increasing variety of business types in different fields, it is necessary to achieve cross-business and cross-platform interaction, realize multi-business co-platform production, and multimedia fusion production requirements. Under this premise, in order to ensure cross-network and cross-platform content security, meet content interaction efficiency, improve user experience, and meet the overall security requirements of the platform, it is necessary to design the security of platform content transmission and information collaboration processing.

[0003] The existing platform content transmission security mechanisms mainly include the following four:

[0004] 1. Direct access

[0005] The direct access method is mainly used in situations where security requirements are not high or security does not need to be considered. The biggest feature of this method is its extremely high transmission efficiency, but its disadvantage is its extremely low security, and it cannot meet security requirements in cross-network and cross-platform transmission.

[0006] 2. Call anti-virus software and security protection to directly detect and kill

[0007] This method is more secure than direct access, but it is still not secure. Most importantly, its performance is affected by the performance and coverage of antivirus software. Although this method has a relatively high transmission efficiency and a certain degree of security, it cannot fully meet the security requirements of cross-platform and cross-business interactions in the construction of cloud platforms.

[0008] 3. Pass the firewall

[0009] This method is often used in platform construction and is a protocol filtering mechanism. This method has better transmission efficiency and higher security, but its disadvantage is that it cannot identify and protect against targeted viruses, Trojans and intrusions, and the transmission performance is affected by the throughput of the firewall.

[0010] 4. Security Gatekeeper

[0011] A security firewall is a physical ferry mechanism that is highly secure and can effectively isolate internal and external networks. However, its disadvantage is that it has low defense capabilities against offline viruses and Trojans.

[0012] On the other hand, for identification and monitoring over a larger geographical area, such as monitoring at the metropolitan level, when identity recognition or event confirmation is performed through feature recognition, including the identification or event confirmation of objects such as vehicles, roads, public facilities, pedestrians, events, environment, weather, and noise, not only is the accuracy low, but the data cannot be guaranteed to be credible.

[0013] In the prior art, identity confirmation or identification is usually performed in a point-based manner, that is, identification is performed at only one location, or repeated identification is performed at multiple locations.

[0014] For example, the method of confirming or identifying a person's identity is to perform user password verification or biometric recognition at the location where identification is required. The shortcomings are: on the one hand, there are major security risks. When the password is stolen or the face is imitated, there is a risk of identity impersonation regardless of whether the identification is performed at one location or repeated identification is performed at multiple locations. On the other hand, users are required to actively output information, and the user experience is poor.

[0015] For example, the method of confirming or identifying the identity of a vehicle is feature recognition. The disadvantages are that the recognition result is easily disconnected, the data source is not completely reliable, the recognition technology is required to be high, but the recognition accuracy is low.

[0016] In addition, the single-point recognition method requires high-speed recognition operations at each point, which has high hardware requirements and will reduce execution efficiency as the amount of data increases.

[0017] The existing technologies for intelligent management at the metropolitan level, with the city brain as a typical example, are still traditional information-based single-point convergence computing models from the overall architecture point of view; the city brain sets up a centralized service platform and multiple sites with different functions and functions, and the sites and the service platform are connected non-equivalently with a relatively fixed layer-by-layer convergence relationship; each site sends the processing results or raw data of the event directly or indirectly to the service platform, which processes and coordinates the entire network through the service platform to achieve the so-called intelligent management purpose. However, in the technical solution of the city brain, the functions of each site are actually still the technical means of single-point identification, and the coordination between the sites is actually the overall management of the centralized platform.

[0018] In addition to the above-mentioned shortcomings of single-point identification at each site, the overall technical solution of the City Brain also has the following shortcomings:

[0019] Weak anti-attack capability: single points are easily attacked and private data is easily leaked;

[0020] Data security and authenticity are difficult to guarantee: data is easily tampered with, false information, the cost of discovering and correcting erroneous information is high, governance is difficult, and it is difficult to hold people accountable for data problems and respond in a timely manner;

[0021] Data silos exist: data between departments and sites cannot be fully shared, sharing costs are high, and network security risks are high, which in turn restricts the maximization of information efficiency. Summary of the invention

[0022] The purpose of the present invention is to overcome the shortcomings of the prior art and provide a secure interactive peer-to-peer network. The interaction between networks is freed from the direct interconnection between networks, while not affecting data interaction, ensuring the security of data interaction. The use of collaborative computing has fundamentally changed the nature of traditional information technology that is sensitive to single points of security. The data source and the computing process are reliable, the execution efficiency is high, the hardware requirements are low, and the recognition accuracy is high.

[0023] The technical solution of the present invention is as follows:

[0024] A secure interactive peer-to-peer network, comprising a peer-to-peer network and an access terminal, wherein the peer-to-peer network comprises a plurality of node devices; the access terminal is connected to the node device via a semantic module and is used to submit a request command to the peer-to-peer network; the request command submitted by the access terminal to the peer-to-peer network via the semantic module is data information with semantics, the semantic module receives the data information and performs semantic extraction, obtains the request content, and sends it to the node device;

[0025] Some or all of the node devices are provided with at least one type of sensor for collecting perception data of different corresponding types; the current node device receives result data output by other node devices; for the current node device, the collected perception data is combined with the result data from other node devices, the result data of the current node is calculated, and sent to other node devices; the node devices in the peer-to-peer network perform collaborative calculations as the perception data is collected and the result data is calculated, and respond to the request command; when the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the request command is completed.

[0026] Preferably, when the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the result corresponding to the request content is represented in the result data output by the one or more node devices, according to preset conditions or the output of a data processing model deployed in advance by a program or node device; if it is determined that the current node device needs to respond to the request command, the current node device will send instructions to the execution device connected to the current node device according to the calculated result data; when all the execution devices connected to all the node devices that need to respond have completed the response action, the request command is completed.

[0027] Preferably, the semantic module exchanges data with the peer network via a gateway, and the access terminal and the node device do not directly communicate data.

[0028] Preferably, the result corresponding to the request content is represented by result data; the execution device receives the result data output by the connected node device, and if a specific element in the result data indicates that the execution device needs to respond, or the result data is used as one of the inputs of the data processing model of the node device, and it is calculated that the corresponding execution device needs to respond, the execution device performs the corresponding operation.

[0029] Preferably, when the execution device is required to respond, the execution device calculates its own result data in combination with the result data output by other node devices, and controls the execution components on the execution device to perform corresponding operations through the obtained result data.

[0030] Preferably, the execution device receives result data output by other node devices, and the principle is: when the request content requires the corresponding execution device to respond to the request command, if the result data calculated by one or more node devices can determine the execution device that needs to respond, the corresponding execution device is added to the node list for transmitting the current result data, and the one or more node devices directly transmit the result data to the execution device or the node device to which the execution device is connected; alternatively, the execution device receives the result data output by other node devices in a layer-by-layer manner.

[0031] Preferably, the corresponding execution device is added to the list of nodes for transmitting result data according to preset conditions or algorithm output or model output.

[0032] Preferably, the execution device is a node device connected to execution components of specific functions, and execution feedback information of the execution components of the execution device is fed back to the execution device to participate in the calculation of subsequent result data of the execution device.

[0033] Preferably, the node device is deployed with a data processing model, and the data processing model is used to calculate and obtain result data; the data processing model will adjust the model parameters according to the result data received each time.

[0034] Preferably, the data processing model loaded on the node device performs adaptive perception calculation on the data processing model of the previous node device. Specifically, when a node device performs calculations on result data from other node devices, the adaptive perception calculation includes verifying the result data of the current node device with other related node devices and / or verifying the historical result data of the current node device to obtain an adaptability value.

[0035] Preferably, when the data processing model of a certain node device cannot adapt to the sensors and actuators connected to it, the adaptability value of its adaptive perception calculation affects the current result data of the current node device as follows: in the current result data of the current node device, a preset flag bit is assigned a value; or, other related node devices perform comprehensive calculations on the current result data of the current node device based on their own data processing models; when the obtained result data enables subsequent node devices to use the result data as input, the result data is used for calculation by other node devices, and then drives the data processing model of the current node device to be adjusted.

[0036] Preferably, in the current result data calculation or several data transmissions and result data calculations, the data processing model of the node device includes the following modes:

[0037] When it is found that the adaptability value of the data processing model of a certain node device exceeds the degree threshold, the result data output by the node device will add the node device connected to the model training facility to the receiving node list. The node device connected to the model training facility will receive such data and include the driving command for driving the model training facility in the result data calculated at that time;

[0038] The model training facility is regarded as a type of sensor. The signal it sends is added to the connected node device. As the result data of the node device is calculated and sent, the corresponding node device in the peer-to-peer network will drive the data storage device of the connected sensor to establish a file transfer channel between the node devices in the peer-to-peer network or establish a file transfer channel in other network communication modes after calculating the result data. The perception data specified by the model training facility is sent to a specific location to participate in model training and improvement. The improved data processing model will be deployed in the same way to the node device that the original data processing model cannot adapt to.

[0039] Preferably, the model training facility drives multiple node devices to generate new data processing models and update the data processing models by using their own perception data in a federated computing manner.

[0040] Preferably, the degree threshold is a set value or a dynamic value; if it is a dynamic value, it is determined by a pre-set program or by a dynamically updated data processing model.

[0041] As a preferred embodiment, the principle of data transmission between node devices is: when the result data of the current node device changes, or the change amount of the result data reaches a preset threshold, the latest result data is sent to other node devices;

[0042] Alternatively, the current node device continuously sends each result data to other node devices at a certain frequency.

[0043] Preferably, all node devices encrypt the result data obtained by their calculations based on the encryption consensus mechanism to obtain the encrypted result, and then send the encrypted result to other node devices; the semantic module parses the request content based on the decryption consensus mechanism and transcribes the response content.

[0044] Preferably, the encryption consensus mechanism includes one or more consensus mechanisms, and different consensus mechanisms correspond to changes in the encryption algorithm structure and parameters of the node device.

[0045] Preferably, the node devices communicate with each other using data packets of standard size.

[0046] Preferably, the request content includes the encryption consensus mechanism, the data carrier type for transcribing the response content, and the response content of the request; the response content is a compliance result generated by the peer-to-peer network based on the request content, and the compliance result is processed according to the encryption consensus mechanism.

[0047] Preferably, after the node device obtains the request content corresponding to the request command, it adds the calculation requirement of whether the subject corresponding to the request command has the authority to execute the request command to the result data of the current node device; when the subsequent node device calculates the result data, the calculation result of whether the subject corresponding to the request command has the authority to execute the request command is added to the result data and transmitted to other node devices; when the result data calculated by one or more node devices in the peer-to-peer network determines that the subject has the authority to execute the request command, and the corresponding node device completes the request command response according to the received result data, the peer-to-peer network completes the response to the request command, otherwise, the result data calculated by the node devices in the peer-to-peer network does not respond to the request content.

[0048] Preferably, when transmitting result data, a specific node device is added to receive the result data based on preset conditions or algorithm output or model output; after one or more layers of transmission, when one or more node devices receive the result data, they execute a response to the request command based on the preset conditions or algorithm output or model output.

[0049] Preferably, if the result data contains a result matching an item in the request content, and the subject corresponding to the presentation request command does not have the authority to obtain the result data matching the request content, then corresponding feedback information is included in the result data.

[0050] Preferably, when the subject corresponding to the request command is the requester and it is determined that the identity information of the requester needs to be obtained, the identity information acquisition command is triggered, and the identity information acquisition command is used as one of the inputs to participate in the calculation of the result data of the node device. The node device in the peer-to-peer network that is connected to the barrier-free data collection conditions that can obtain the identity information of the requester is driven to respond to the corresponding result data, thereby achieving the acquisition of the identity information of the requester.

[0051] Preferably, the peer-to-peer network verifies the authenticity of the requester's identity information and determines the requester's authority; wherein the node device in the peer-to-peer network that can obtain the identity information does not provide the identity information, but only expresses the verification result in the result data of the node device based on the verification requirement for the authenticity of the identity information in the received result data.

[0052] Preferably, the peer-to-peer network verifies the relationship between the real identity and ownership of the requester to determine whether his real identity has the execution authority of the requested command. Specifically, the peer-to-peer network directly performs collaborative operations on the actual behavior, trajectory, and data to determine the relationship between his real identity and the execution authority of the requested command. Other node devices perform subsequent calculations on the relationship between the real identity they obtain and the execution authority of the requested command, and express the relationship between the real identity of the requester and the execution authority of the requested command in the result data, which is transmitted to the subsequent node devices of the next layer, wherein there is no need to output the specific identity information of the requester to other node devices.

[0053] Preferably, a node device in a peer-to-peer network that can obtain identity information does not provide identity information, and drives an information source device that provides identity information to establish an encrypted file transmission channel with an input terminal of a node device that needs to obtain identity information, or to establish an encrypted information transmission channel in other network communication modes; and uses the identity information as one of the inputs of the node device.

[0054] Preferably, the access terminal is connected to the semantic module via a non-network connected medium; the request command submitted by the access terminal to the peer network is sent to the semantic module via a non-network connected medium; the response content is transcribed into data information with corresponding semantic content by the semantic module, and sent to the access terminal connected to the execution device with response function via a non-network connected medium.

[0055] Preferably, the non-network connected media include sound transceiver equipment, image transceiver equipment, and electromagnetic induction equipment; the sound transceiver equipment includes a microphone and a speaker, and the data carrier type corresponding to the request content and the response content is sound; the image transceiver equipment includes a camera and a display, and the data carrier type corresponding to the request content and the response content is image; the electromagnetic induction equipment includes an electromagnetic induction input device and an electromagnetic induction output device, and the data carrier type corresponding to the request content and the response content is electromagnetic waves.

[0056] Preferably, when the data information corresponding to the request content and the response content is a web page, the semantic module obtains the request content by identifying the content displayed on the web page; the response content is transcribed into one or more combinations of text, sound or image, and displayed through the web page.

[0057] Preferably, the data information corresponding to the request content is input into the semantic module through the data network interface, and the semantic module parses the data information input from the data network interface through semantic extraction to obtain the request content.

[0058] Preferably, when the access terminal is in an intranet environment, an assistant program is set; when one access terminal serves as an interaction initiator and at least one other access terminal serves as an interaction receiver, and data is interacted through a peer-to-peer network, the interaction initiator is guided by the assistant program to complete the generation of the request command, and the interaction receiver automatically completes the reception, entry or execution of the response content through the assistant program.

[0059] The beneficial effects of the present invention are as follows:

[0060] The secure interactive peer-to-peer network described in the present invention is based on a peer-to-peer network for collaborative computing. The interaction between the access terminal and the peer-to-peer network regarding the request command and the response content solves the network security problem that exists in the traditional network data interaction by extracting the specified location information from the encapsulated data (the receiving party will receive other redundant information at the same time) by extracting the data information into semantic content that can be allowed by the rules of the peer-to-peer computing network. The node device of the peer-to-peer network obtains the corresponding request command by parsing the obtained semantics, and can filter all data information that is irrelevant to the request command, does not meet the security specifications, and cannot be understood by the peer-to-peer network (for example, in human interaction, the incomprehensible problem will be traced to "understanding" (the peer-to-peer network (people can be regarded as a peer-to-peer network composed of nerve cells) has an existing structure verification and is compliant (including extracting compliance semantics and performing demand compliance verification)), and then further processing will be carried out to avoid problems such as Trojan attacks and authority hijacking. The network composed of peer network nodes can be implemented as a pure intranet, not directly connected to the external network, and uses its own communication protocol. The peer computing mode performs real-time, massive, and super-dimensional verification calculations to ensure its security.

[0061] In the described peer-to-peer network, there is no primary-secondary relationship between all node devices, and there is no fixed connection path between node devices. Node devices only receive the calculation results of other node devices, send out the result data of their own calculations, and respond to the discovery of events and / or the corresponding execution device without relying on a single node device for identification and control, but through multiple node devices in the peer-to-peer network for collaborative calculation and joint confirmation. Furthermore, the present invention does not rely on single-point calculation, and distributes the calculation function throughout the network, reducing the hardware and software requirements of single-point calculation, with high execution efficiency and greatly improved anti-attack capability; the information is relatively symmetrical between node devices, and the problem of illegal data tampering can be immune, even if a single node device is physically cracked and the data it sends is tampered, but because the whole network calculation is a complex calculation with super-high redundancy and super-multi-dimensional verification, the data sent by a single node device is tampered with, which does not affect the calculation results of the whole network, and the fault and the tampered node device can be quickly located to ensure the credibility of the calculation results of the whole network, and then, the contradiction between data sharing and information security between departments can be solved.

[0062] In the present invention, the access terminal is not allowed to directly connect to the node device in any form, and is not allowed to directly interact with the node device, so as to ensure the security of data interaction; and ensure the security of the network environment formed by the node devices of the peer-to-peer network, and block the transmission of viruses or other attack means. The access terminal and the peer-to-peer network use a non-network connection medium to transmit the information carrier corresponding to the request command and the response content, and there is no virus or other attack means to hide or disguise the data signal, so as to ensure the security of the interaction between the networks.

[0063] In a peer-to-peer network, the result data transmitted between node devices is the processing result of information, not the information itself, so the collected original data (i.e., perception data) does not need to be stored. The node device only receives the calculation results output by other node devices and sends out its own calculation results. The amount of information contained in a single calculation result is not enough to restore any event and target information. The calculation results on the entire peer-to-peer network, the elements of the multi-dimensional data matrix, and the correspondence between the physical space and facilities must be collaboratively calculated to obtain a definite result. Collaborative computing is less dependent on information transmitted by a few node devices, and can fundamentally change the nature of traditional information technology that is sensitive to single-point security.

[0064] The implementation of the present invention only requires a simple software and hardware foundation to achieve the effects of secure interaction and trusted computing that are difficult to achieve with existing technologies such as large and complex network gates or firewalls. BRIEF DESCRIPTION OF THE DRAWINGS

[0065] Figure 1 It is a principle block diagram of the present invention. DETAILED DESCRIPTION

[0066] The present invention is further described in detail below with reference to the accompanying drawings and embodiments.

[0067] In order to solve the security problems existing in traditional information interaction and the shortcomings of traditional information-based single-point convergence computing models, the present invention provides a secure interactive peer-to-peer network, in which the request commands and response contents for interaction between access terminals and the peer-to-peer network are implemented in a manner of extracting and translating compliant semantics, thereby solving a large number of security problems existing in the traditional method of extracting information from a specified position of an encapsulated data packet and simultaneously receiving other data that may not have clear intentions for request or response, including virus infection, authority hijacking and other problems that occur in the process of generating request commands and response contents, thereby ensuring the security of the entire interaction process and computing process.

[0068] The secure interactive peer-to-peer network of the present invention is as follows: Figure 1 As shown, it includes a peer-to-peer network and an access terminal, and the peer-to-peer network includes multiple node devices; the access terminal is connected to the node device through a semantic module, and is used to submit a request command to the peer-to-peer network; the request command submitted by the access terminal to the peer-to-peer network through the semantic module is a data information with semantics, and the semantic module receives the data information and performs semantic extraction to obtain the request content and send it to the node device. In the present invention, the request content includes the encrypted consensus mechanism according to which the data carrier type of the response content is transcribed (the requester can request the response content carrier type, but the peer-to-peer network will add and modify other types according to the existing rules to assist the accuracy of the expression), and the requested response content; the response content is the compliance result generated by the peer-to-peer network according to the request content, and the compliance result is processed according to the encrypted consensus mechanism.

[0069] In the present invention, the direct data interaction between the access terminal and the node device is avoided by the semantic module, that is, the access terminal and the node device do not interact with each other based on the general protocol encapsulated data packets, such as information and commands expressed by the general protocol encapsulated data packets, and no security risks are introduced due to the reception of information and commands. In the traditional data interaction, the two parties of the interaction receive or send digital signals with a frame structure that conforms to the general communication protocol based on the general communication protocol. In terms of the expression form, when transmitting information and commands, the digital signal synchronously transmits other data whose purpose the receiving party fails to fully understand in time. In other words, the format or expression form of the traditional data communication semantically wraps many layers of data that are not directly related to the semantic purpose. At the same time, whether it is wired communication or wireless communication, in terms of interaction logic, it should be regarded as a direct data interaction logic, that is, one party sends a digital signal, the other party receives the digital signal, and the content is parsed only after receiving it, and the content parsing does not spend too much resources to focus on information other than the required content, which is often one of the main means of hacker attacks.

[0070] In the present invention, the interaction between the access terminal and the node device is actually that the access terminal first interacts with the semantic module, and then the semantic module interacts with the node device. The data information interacted between the access terminal and the node device is the semantic content that has been preliminarily understood by the semantic module according to the model output by the peer-to-peer network. This process will filter out other irrelevant data. According to the implementation requirements, the data carrier type submitted by humans and devices to the semantic module through the access terminal can be sound, text, image, etc., which is often information that humans can read based on natural language or thought expression. Since the semantic module always extracts semantics from the received data information, the data information may be an analog signal or a digital signal, but what is finally received and extracted semantically by the semantic module are all data information with semantics, and these data information will only be extracted with clear semantics that conform to the processing logic of the peer-to-peer network (the assistant program deployed by the access terminal will provide semantic guidance for those that do not conform to the processing logic, just like when a person hears a request that he does not understand, he will have an interactive dialogue to achieve consistency of understanding between the two parties. Correspondingly, only indirect information reception is performed between the access terminal and the node device. Assuming that the request command is received by the access terminal in the form of sound, and the sound is received by the semantic module in the form of an analog signal, the semantic module analyzes the semantics expressed by the "heard" sound, that is, "what was said", and then obtains the semantic content, and adds information such as time, place, target, environment, the expression of the expresser, action, possession, operation object, status, etc. (Some information is obtained from the result data sent by other node devices when the peer network understands the calculation and is associated when the peer network performs calculations, which may not be directly received by the access terminal and the semantic module. The node device uses the semantic content as its own collected information, and processes it together with other data received by itself as result data and sends it to other node devices. In this way, the understanding of this semantic content is completed through the entire peer-to-peer network. If the semantic content can be understood as a command with a clear intention, the matching verification of the identity of the initiator of the semantic content and the command execution right is used as the additional content of the semantic content, and added to the peer-to-peer network for calculation to obtain the corresponding response. If the semantic content cannot be understood as the semantics of a clear intention, the peer-to-peer network will generate relevant guidance information, and the output terminal of the corresponding node device will interact with the demander or the demand-proposing device to guide its expression into a command that can be understood as a clear intention. Therefore, the semantic module also assumes the role of anti-DOS attack. Repetitive or high-frequency expressions will extract their behavioral characteristics and express them to the peer-to-peer network. Combined with the result data of other node devices, it is easy to determine whether this is a DOS attack or an urgent expression.Assume that the request command is sent by the access terminal in the form of a digital image, and the digital image is received by the semantic module in the form of a digital signal, but the semantic module ultimately outputs not a pattern, but the semantic module analyzes the semantics expressed by the pattern "seen", that is, "what does this pattern express", and then obtains the semantic content, and then sends the request content corresponding to the semantic content to the node device. In specific implementation, the semantic module and necessary peripheral functional modules can be set according to the specific digital carrier type corresponding to the digital information, and the present invention will not be repeated in the technical solution.

[0071] In specific implementation, when the data information corresponding to the request content and the response content is a web page, the semantic module obtains the request content by identifying the content displayed on the web page; the response content is transcribed into one or more combinations of text, sound or image, and displayed through the web page.

[0072] Alternatively, the data information corresponding to the request content is input into the semantic module through the data network interface, and the semantic module parses the data information input from the data network interface through semantic extraction to obtain the request content.

[0073] In order to prevent data hijacking caused by network attacks and generate illegal data, and to further ensure the security of interaction, in this embodiment, the access terminal is connected to the semantic module through a non-network-connected medium; the request command submitted by the access terminal to the peer-to-peer network is sent to the semantic module through a non-network-connected medium; the response content is transcribed into data information with corresponding semantic content by the semantic module, and sent to the access terminal connected to the execution device with a response function through a non-network-connected medium. Specifically, the non-network-connected medium includes a sound transceiver device, an image transceiver device, and an electromagnetic induction device; the sound transceiver device includes a microphone and a speaker, and the data carrier type corresponding to the request content and the response content is sound; the image transceiver device includes a camera and a display, and the data carrier type corresponding to the request content and the response content is an image; the electromagnetic induction device includes an electromagnetic induction input device and an electromagnetic induction output device, and the data carrier type corresponding to the request content and the response content is an electromagnetic wave (light is also an electromagnetic wave, such as text with a visual effect).

[0074] In order to further ensure the security of the interaction process, in this embodiment, the peer-to-peer network and the access terminal are further isolated. Specifically, the semantic module and the peer-to-peer network exchange data through the network gate, and the access terminal and the node device do not directly communicate data, thereby isolating the semantic module from the node device of the peer-to-peer network, ensuring the absolute intranet environment of the peer-to-peer network and network security. The request content extracted by the semantic module is delivered to the node device through the network gate for subsequent processing, and the compliance results processed and returned by the peer network are sent to the semantic module through the network gate. At the same time, the semantic model of the semantic module is updated in real time by the peer-to-peer network through the network gate to achieve immunity to existing hacker attack modes.

[0075] Some or all of the node devices are provided with at least one type of sensor for collecting perception data of different corresponding types; the current node device receives result data output by other node devices; for the current node device, the collected perception data is combined with the result data from other node devices, the result data of the current node is calculated, and sent to other node devices; the node devices in the peer-to-peer network perform collaborative calculations as the perception data is collected and the result data is calculated, and respond to the request command; when the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the request command is completed.

[0076] In a peer-to-peer network, for a certain node device, its result data can be selectively sent to specific other node devices according to implementation requirements. In specific implementation, the result data of a certain node device does not necessarily need to be received by all other node devices, and some node devices can be selected as subsequent node devices of the next layer to receive it. Specifically, when the result data is transmitted, according to preset conditions or algorithm output, model output, a specific node device is added to receive the result data; after one or more layers of transmission, when one or more node devices receive the result data, they execute a response to the request command according to the preset conditions or algorithm output, model output.

[0077] In the peer-to-peer network described in the present invention, there is no primary-secondary relationship between all node devices, forming a decentralized network and computing architecture. Different from the traditional information-based single-point convergence computing mode, there is no fixed, preset path relationship in the direction of data transmission between the node devices of the present invention. In the peer-to-peer network described in the present invention, for a certain node device, the collected original data is processed to obtain result data, and the result data is propagated to other node devices; other node devices that receive the result data use the result data as one of the collected original data, and the result data of other node devices is affected by the result data. For the convenience of expression, the aforementioned "a certain node device" is referred to as the "current node device" and the "other node devices" are referred to as "subsequent node devices". Then one of the effects is that the result data calculated by the subsequent node device is not completely determined by the original data collected by itself, but is jointly determined with the result data output by the current node device; wherein, the result data output by the current node device may change the data processing model and parameters used by the subsequent node device to calculate the result data, thereby affecting the result data of the subsequent node device. For example, if the result data output by the current node device is correlated with the original data collected by the subsequent node device, it is necessary to consider the impact of the result data output by the current node device on the accuracy of the result data of the subsequent node device; specifically, for the perception of a specific target, if the result data obtained by calculation is only based on the original data collected by the subsequent node device, it can only reflect the real-time (including real-time location and time) single-point result judgment of the target within the perception range of the subsequent node device; and the result data output by the current node device reflects the direct perception data and result judgment about the target at other locations and other times, or other indirectly related perception data and result judgment, which helps to improve the accuracy and comprehensiveness of the result data of the subsequent node devices, including superposition calculations of the same dimension and correlation references of different dimensions.

[0078] Since there is no master-slave relationship between node devices in a peer-to-peer network, point-to-point transmission can be performed between node devices. Therefore, for the calculation result corresponding to a certain perception data of a certain target reflected in the result data output by a certain node device, the information is relatively symmetrical in other node devices that receive the result data; other node devices use the received result data as input, combine the perception data of their own sensors, and calculate their own result data. Their own result data naturally covers the received result data and the information reflected by their own sensors, and transmits it to other node devices in the next layer. Therefore, for a certain perception data of a certain target, the information is relatively symmetrical in all node devices, which can be immune to the influence of the calculation process and calculation results of a single node device being tampered with and forged, which leads to the result data. At the same time, it also becomes a means to discover faulty or tampered node devices and node devices with non-compliant performance, fundamentally solving the fundamental hidden dangers of traditional information technology, that is, false information, forged information, and erroneous information caused by information asymmetry, which then become the entry point for fraud and network attacks, and complex comprehensive applications have problems such as poor accuracy, excessive time consumption, poor credibility, and poor adaptability. Therefore, it can truly become the information infrastructure for comprehensive urban management and the infrastructure of the digital economy. The present invention is different from the blockchain technology that still uses each node to independently calculate, determine the results, and pay attention to the technical solution of original data storage. The present invention focuses on peer-to-peer collaborative computing between node devices. Through peer-to-peer collaborative computing, each node device can adjust its own data processing model (i.e., the algorithm for calculating the result data) and parameters when processing data. The adjustment is the feedback of all node devices on their own adjustments, thereby turning the calculations of all node devices into a whole. Each node device no longer completes the calculation independently, but all node devices complete the calculation together. After the data processing model of the node device is adjusted, it is an objective adjustment that will affect the next data processing.

[0079] Among them, for a certain node device, according to the implementation requirements, its result data can be selectively sent to specific other node devices. In specific implementation, the result data of a certain node device does not necessarily need to be received by all other node devices, and some node devices can be selected as subsequent node devices of the next layer to receive.

[0080] In the present invention, some or all of the node devices are provided with at least one type of sensor for collecting perception data of different corresponding types; the node devices in the peer-to-peer network collect any perception data (i.e., raw data) that can be perceived through all the sensors set by them within their perception range; at the same time, any node device also receives the result data output by other node devices, calculates its own result data and outputs it; then the entire peer-to-peer network continuously perceives, collects data, inputs, outputs, calculates, etc. Based on this, multiple node devices in the peer-to-peer network perform collaborative calculations to respond to the corresponding execution devices. In the present invention, the execution device is one of the node devices, and the execution device responds to the execution in accordance with the calculation result obtained by the collaborative calculation, with high response efficiency, avoiding illegal responses such as false execution or non-execution due to network attacks. In order to avoid hijacking, the present invention can also use multiple node devices to collaboratively control the execution device to further improve the immunity to hijacking attacks.

[0081] Specifically, a certain node device is taken as the current node device, and combined with the data transmission of its preceding node device and subsequent node device (the preceding node device and subsequent node device in the present invention are only used to describe the before-and-after relationship with the current node device in the current calculation and data transmission process, and do not mean that there is an inevitable before-and-after relationship and priority relationship between them), correspondingly, the current node device receives the result data output by other node devices (including the preceding node device), and the subsequent node device receives the result data output by other node devices (including the current node device). For the current node device, the collected perception data is combined with the result data from other node devices (including the preceding node device), the result data of the current node device is calculated, and sent to other node devices (including the subsequent node device). Similarly, the working process of the subsequent node device is the same as that of the current node device, and the preceding node device also receives the result data of the preceding node device of the preceding node device, and performs the same working process as the current node device; that is, the node devices in the peer-to-peer network perform the same working process. Furthermore, the node devices in the peer-to-peer network perform collaborative calculations as the perception data is collected and the result data is calculated. Among them, the result data output by a certain node device is only received by the subsequent layer of node devices and used as input. The result data of the subsequent layer of node devices will cover the result data of the previous layer of node devices (including the aforementioned certain node device).

[0082] In a peer-to-peer network, all events are processed synchronously according to the request commands, and it is not necessary to clearly generate interim result outputs such as what event was discovered and what the specific content of the event is. In a peer-to-peer network, only the perception of the sensor and the response of the corresponding execution device are clear, and other intermediate processes are processed simultaneously by collaborative calculation. That is, during the operation of the present invention, the intermediate process of event discovery is imperceptible. As the collaborative calculation proceeds and the result data of the node device is obtained, the corresponding execution device automatically responds and executes.

[0083] In the present invention, the response to the request command includes various different situations such as "demand-execution", "request-response" or others. In the present invention, when the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the result corresponding to the request content is represented in the result data output by one or more node devices, according to the preset conditions or the output of the data processing model deployed on the node device or the program deployed in advance; if it is determined that the current node device needs to respond to the request command, the current node device will send instructions to the execution device connected to the current node device according to the calculated result data; that is, the "demand-execution" situation. When all the execution devices connected to all the node devices that need to respond have completed the response action, the request command is completed. When the response to the request command is a "request-response" situation, that is, the request content corresponding to the request command issued by the access terminal requires the peer network to feedback the response content, the obtained response content is transcribed through multiple semantic modules to obtain one or several data information matching the requester's needs, which is responded by one or more output terminals (execution devices).

[0084] Based on the collaborative computing of peer-to-peer network, the execution device can be used as one of the node devices. As the collaborative computing proceeds, when the result data obtained by the execution device can perform relevant operations corresponding to the request content, the execution device completes the response to the request command. In the present invention, the result corresponding to the request content is characterized by the result data, and the result corresponding to the request content includes the response requirements of the corresponding execution device, the responses that need to be made, etc. The execution device receives the result data output by the connected node device, and if a specific element in the result data indicates that the execution device needs to respond. Among them, the response request command is often completed by multiple execution devices on multiple node devices, such as the display connected to node a plays images, the speaker connected to node b plays sounds, and so on. Alternatively, the result data is used as one of the inputs of the data processing model of the node device, and the calculation determines that the corresponding execution device needs to respond, and then the execution device performs the corresponding operation.

[0085] When the execution device needs to respond, the execution device combines the result data output by other node devices, calculates its own result data, and controls the execution components on the execution device to perform corresponding operations through the obtained result data. In the present invention, the execution device does not need to determine whether it needs to respond first, but combines the result data output by other node devices with the perception data collected by its own sensors, inputs its own data processing model, and the output result data is whether each execution component of the execution device acts and what action it takes.

[0086] In this embodiment, the execution device is a node device connected to the execution components of specific functions, and the execution feedback information of the execution components of the execution device is fed back to the execution device to participate in the calculation of subsequent result data of the execution device.

[0087] In the present invention, since the execution device can be used as one of the node devices, the execution device responds to the execution based on the calculation result obtained by the collaborative calculation, and the response efficiency is high, avoiding illegal responses such as false execution or non-execution due to network attacks. To avoid hijacking, the present invention can also use multiple node devices to collaboratively control the execution device to further improve the immunity to hijacking attacks.

[0088] In a peer-to-peer network, the result data calculated and output by the node device can be implemented as a state corresponding to the perceived data (i.e., the original data), which can be represented by a state value. Therefore, the node device does not need to store and send the original data. In this embodiment, the data or elements in the multidimensional matrix are related to the installation location, attributes, etc. of each node device. Therefore, when the result data is transmitted, what is actually transmitted is the transcoding result after multiple sets of parameter transcoding. The so-called multidimensional matrix is ​​actually a combination of multiple sets of parameters. For example, the path of a certain target is from abcd, and the physical position of the abcd node device is fixed, so the sequence of abcd can be expressed by one character or a similar concept when multiple sets of parameters are transcoded and transmitted.

[0089] Based on the technical characteristics of peer-to-peer networks, they can be applied to various scenarios that provide targeted services or control for a certain target or event. Based on this, since the result data transmitted between node devices is the result of information processing, rather than the information itself, the collected original data (i.e., perception data) can be stored without storage. The node device only receives the calculation results output by other node devices and sends out its own calculation results. The amount of information contained in a single calculation result is not enough to restore any event and target information. The calculation results on the entire peer-to-peer network, the multi-dimensional data matrix elements, and the corresponding relationship between physical space and facilities must be jointly calculated to obtain a definite result. The collaborative calculation is less dependent on the information transmitted by a few node devices, which can fundamentally change the nature of traditional informationization that is sensitive to single-point security.

[0090] In the present invention, since the result data output by each node device reflects the state evolution of the result data output by the previous node device, based on the result data received by the current node device, the behavior, attribute, state or event of the target when it is perceived by each previous node device can be inferred. For example, when it is necessary to find the position of target a 15 minutes ago, the position corresponding to the node device where target a is perceived can be obtained at the current moment, and the position of target a can be inferred; then, according to the transmission path of the result data, it can be inferred to 15 minutes ago, and the position of target a 15 minutes ago can be inferred (determined by the node device where target a is perceived); then, the node device does not need to store the original data about target a, that is, based on the present invention, it is not necessary to identify the original data to realize the search for target a, but it is possible to first infer the node device where target a is perceived, and if necessary, obtain the original data about target a at the time when it needs to be searched from the storage device connected to the node device.

[0091] In the present invention, the execution device receives the result data output by other node devices. The principle is: when the request content requires the corresponding execution device to respond to the request command, if the result data calculated by one or more node devices can determine the execution device that needs to respond, the corresponding execution device is added to the node list for transmitting the current result data, and the one or more node devices directly transmit the result data to the execution device or the node device connected to the execution device, wherein the corresponding execution device is added to the node list for transmitting the result data according to the preset conditions or algorithm output, model output; or, the execution device receives the result data output by other node devices in a layer-by-layer transmission manner. In the process of collaborative computing in a peer-to-peer network, the node device will also calculate the node list that needs to receive the result data when calculating the result data each time. One or more execution devices that need to be added are clearly known according to the current result data, and will be added to the node list. The execution device or the node device connected to the execution device is directly used as the subsequent node device of the next layer to directly receive the current result data, so as to achieve transcendence over the normal layer-by-layer transmission and turn the peer-to-peer network into a three-dimensional architecture. For example, the result data of the current node device can clearly know that it needs to be proved. If the result data of the current node device is transmitted to the corresponding node device according to the normal layer-by-layer transmission method, at least one or more layers of transmission are required; if the corresponding node device is added to the node list, the corresponding node device can directly receive the result data of the current node device when transmitting at the next layer, which will greatly shorten the processing time and improve the response capability. The present invention adopts a peer-to-peer network, so this temporary construction is precisely the advantage of the present invention. The traditional information-based layer-by-layer convergence architecture cannot withstand the complex computing requirements brought about by this temporary network construction.

[0092] In the present invention, it is also necessary to perform permission verification on the request command to ensure its legality; specifically, after the node device obtains the request content corresponding to the request command, the calculation requirement of whether the subject corresponding to the request command (which can be a retroactive permission verification of the access device and its related devices, or a permission verification of the requester) has the permission to execute the request command is added to the result data of the current node device; when the subsequent node device calculates the result data, the calculation result of whether the subject corresponding to the request command has the permission to execute the request command is added to the result data and transmitted to other node devices; when the result data calculated by one or more node devices in the peer-to-peer network determines that the subject has the permission to execute the request command, the peer-to-peer network completes the response to the request command, otherwise, the result data calculated by the node devices in the peer-to-peer network does not respond to the request content. Based on the peer-to-peer network, the judgment of whether the subject corresponding to the request command has the execution authority is actually not based on the result calculated by a single node device, but the result obtained by collaborative calculation of multiple node devices.

[0093] If the result data contains the result of matching one of the items in the request content, and the subject corresponding to the request command does not have the authority to obtain the result data matching the request content, the corresponding feedback information is included in the result data. In specific implementation, if the corresponding feedback information is included in the result data, the subsequent node devices of the next layer will naturally not respond to the request command after calculating the result data and the result of the collaborative calculation, and there is no need to feed back the decision not to respond to the access terminal. Since all node devices (including execution devices) are equal in a peer-to-peer network, after the feedback information is sent out, each node device (including execution devices) determines whether to respond and what kind of response to make. In this way, the a node device issues a command and the m node device gives feedback information. If the access terminal contains a responding execution device and the requester has not moved, the access terminal can respond.

[0094] In addition, as an alternative implementation, a single node device may directly calculate the result of whether the subject corresponding to the request command has the execution authority (in the present embodiment, a single node device directly calculates the result of whether the subject corresponding to the request command has the execution authority, and also combines the result data transmitted by other node devices to obtain the result through comprehensive calculation), and then add the calculation result to the result data and send it to other subsequent node devices; or, a single node device (such as an execution device, or a node device connected to the execution device) directly calculates the result of whether the subject corresponding to the request command has the execution authority, and then controls the execution device to execute or terminate the response. This calculation result will also be sent to other node devices in accordance with the peer-to-peer network principle, so that the entire peer-to-peer network can be aware of the event.

[0095] In the present invention, when necessary, the identity information of the subject corresponding to the request command can also be obtained. Specifically, when the subject corresponding to the request command is the requester, and it is determined that the identity information of the requester needs to be obtained, by triggering the identity information acquisition command, the identity information acquisition command is used as one of the inputs to participate in the calculation of the result data of the node device, and the node device connected to the peer-to-peer network with barrier-free data collection conditions that can obtain the identity information of the requester is driven to respond to the corresponding result data, thereby obtaining the identity information of the requester. Similar to the corresponding response execution of the execution device, the acquisition of identity information is the result of collaborative calculation, that is, the acquisition of identity information is triggered by the determination that the identity information needs to be obtained, rather than an additional trigger through a specific request command. Based on the present invention, if the permission calculation is triggered by a request command, in most cases, it can be completed without obtaining the identity information. In a few cases where it is found that the permission calculation cannot be completed without obtaining the identity information, the determination that the identity information needs to be obtained is generated according to the implementation requirements. For example, through collaborative computing, it can be known that the identity information of a person exists in the code scanning registration system of several locations, the express pickup registration system of several locations, or the consumption registration system of several locations, and the person is authorized in advance or the query authority is obtained in accordance with the law. Then the peer-to-peer network can drive the node devices connected to these systems in a barrier-free data collection manner, and the relevant information obtained participates in the peer-to-peer network calculation through each node device, obtains information comparison and provides accurate identity information to the execution device that needs accurate identity information. Based on this, the present invention can also minimize the harm of tampering with the data of a traditional information system to achieve local counterfeiting of identity.

[0096] In the present invention, the calculation of whether the requester has the authority to meet the corresponding requirements does not require the determination of the specific identity information; because in a peer-to-peer network environment, it is not necessary to obtain identity information in most cases to determine whether the real identity of any requester has this authority. The peer-to-peer network verifies the relationship between the real identity and the authority of the requester, where the real identity does not refer to the identity data, but to the physical entity of the requester in the coverage area of ​​the peer-to-peer network. The observation results of multiple authorized operations performed by the physical entity are often extended to the node device for verification in the form of calculation result data between node devices; thus, it is determined whether the real identity has the execution authority currently required, rather than declaring its identity. This process does not require obtaining its real identity information in most cases. Since the peer-to-peer network can directly perform collaborative operations on actual behaviors, trajectories, and data, there is no need to obtain the specific identity information of the requester. It only needs to verify the real identity and other rights and interests to determine the relationship between the real identity and the execution authority currently required, including whether it has authority or not. Other node devices will perform subsequent calculations on the relationship between the real identity they obtain and the execution authority currently required, and express the relationship between the real identity of the requester and the execution authority currently required in the result data, which is transmitted to the subsequent node devices at the next level without the need to output the specific identity information of the requester to other node devices.

[0097] When a node device in a peer-to-peer network that can obtain identity information does not provide the identity information, the information source device that drives the identity information is connected to an encrypted file transmission channel temporarily established between the node device input terminal that needs to obtain the identity information, or temporarily establishes an encrypted information transmission channel in other network communication modes; and uses the identity information as one of the inputs of the node device.

[0098] In the present invention, the node device is deployed with a data processing model, and the data processing model is used to calculate the result data. In the collaborative computing process, each node device gradually forms functional differentiation due to the physical location of its installation, the connected sensors and the execution devices. Each node device may change the architecture and parameters of its own data processing model when processing data (collecting raw data, receiving the result data output by the previous node device, and calculating its own result data). That is, the data processing model adjusts the model parameters according to the result data received each time, which reflects the influence of the node devices on each other through the output result data; just like human neurons, they will gradually change some of their own biological characteristics according to the electrical signals conducted by other neurons, which is reflected as human memory and learning as a whole. The influence includes improving the accuracy of the result data and the increasing degree of perception of the target or event.

[0099] In order to accurately reflect the mutual influence between node devices and determine whether the data processing model of the current node device is suitable for the sensors and actuators connected to it, in the present invention, the data processing model loaded on the node device performs adaptive perception calculation on the data processing model of the previous node device. Specifically, when a node device performs calculations on the result data from other node devices, the adaptive perception calculation includes verifying the result data of the current node device and other related node devices and / or verifying the historical result data of the current node device to obtain the adaptability value or serve as the input of the adaptability judgment model. In the present invention, based on collaborative computing, the result of the verification calculation is reflected in the result data of the node device, so that the result data of a series of nodes can drive the model training facility to make greater adjustments to the data processing model of the problem node device. The implementation method of the adaptability value can be used as an implementation method to replace the aforementioned adjustment method based on collaborative computing.

[0100] When the data processing model of a certain node device cannot adapt to the sensors and actuators connected to it, the adaptability value of its adaptive perception calculation affects the current result data of the current node device as follows: in the current result data of the current node device, a preset flag bit is assigned a value; or, other related node devices perform comprehensive calculations on the current result data of the current node device based on their own data processing models, and when the obtained result data enables subsequent node devices to use the result data as input, the result data is used for calculation by other node devices, and then drives the data processing model of the current node device to be adjusted.

[0101] For the data processing model, adaptive perceptual computing is included in other calculations (including the calculation of result data, adjustment of the data processing model, etc.). That is to say, only one round of calculation is performed, which includes both other types of calculations and adaptive perceptual computing. That is, adaptive perceptual computing and the calculation of result data are performed simultaneously.

[0102] In the present invention, the adjustment of the data processing model occurs in the current result data calculation or several data transfers and result data calculations. Specifically, the data processing model of the node device should cover the following modes:

[0103] Mode 1: When it is found that the adaptability value of the data processing model of a certain node device exceeds the degree threshold, the result data output by the node device will add the node device connected to the model training facility to the list of receiving nodes. The node device connected to the model training facility will receive such data and will include the driving command for driving the model training facility in the result data calculated at that time. According to different implementation requirements, the degree threshold is a set value or a dynamic value. If the degree threshold is a dynamic value, it is determined by a pre-set program or by a dynamically updated data processing model. In the present invention, based on collaborative computing, during the process of calculating the result data of the node device, the model training facility can be driven to adjust the data processing model of the problem node device. The implementation method of the driving command can be used as an implementation method to replace the aforementioned adjustment method based on collaborative computing.

[0104] Mode 2: The model training facility is regarded as a type of sensor. The signal it sends is added to the connected node device. After the result data of the node device is calculated and sent, the corresponding node device in the peer-to-peer network will drive the data storage module of the connected sensor after calculating the result data. By establishing a file transfer channel between the node devices in the peer-to-peer network or establishing a file transfer channel in other network communication modes, the perception data specified by the model training facility is sent to a specific location to participate in model training and improvement. The improved data processing model will be deployed in the same way to the node devices that the original data processing model cannot adapt to.

[0105] As another implementation, in the present invention, the model training facility can also drive multiple node devices to use their own perception data to generate new data processing models in a federated computing manner, and update the data processing models.

[0106] In the present invention, different data transmission principles can be selected according to different implementation requirements, including application scenarios, implementation types and quantities of sensors, etc.; specifically, the principle of data transmission between node devices is: when the result data of the current node device changes, or the change in the result data reaches a preset threshold, the latest result data is sent to other node devices; or, the current node device continuously sends each result data to other node devices at a certain frequency.

[0107] In order to ensure that the data source and the calculation process are further credible, in the present invention, all node devices encrypt the result data obtained by their calculations based on the encryption consensus mechanism to obtain the encryption result, and then send the encryption result to other node devices. The encryption consensus mechanism includes one or more consensus mechanisms, and different consensus mechanisms correspond to changes in the encryption algorithm structure and parameters of the node device.

[0108] Node devices communicate with each other using standard-sized data packets (i.e., result data or calculation results). In the present invention, the node devices of the peer-to-peer network are similar to human neurons. Each neuron does not transmit specific data that directly describes external events. Similarly, the node devices do not output raw data, but process the raw data obtained by the connected sensors and data acquisition devices into standard-sized data packets (i.e., result data or calculation results, similar to the nerve impulses of neurons) according to their own data processing models (similar to the biological characteristics of nerve cells). The amount of information contained in a single data packet is not enough to restore any event and target information. The calculation results, multi-dimensional data matrix elements, and physical space and facility correspondences on the entire peer-to-peer network must be jointly calculated in a collaborative manner to obtain a definite result. The collaborative calculation is not very dependent on the data output by a few node devices, and the collaborative calculation simultaneously processes the needs received or initiated by all node devices. It is a collaborative verification calculation of super-multi-dimensional related information, which can fundamentally change the nature of traditional information technology that is sensitive to single-point security.

[0109] In order to ensure the integrity of data and the effective execution of collaborative computing, in the present invention, the peer-to-peer network deploys a QoS mechanism, and the QoS mechanism is to give priority to ensuring the transmission quality of the result data between node devices.

[0110] In the specific implementation, the networking mode of the peer-to-peer network is one or a combination of 4G mode, 5G mode or MESH mode, so as to adapt to different application scenarios, comprehensively implement feasibility, cost considerations and other factors, and achieve the best solution. Among them, the MESH mode is based on the LTE standard, and communicates at the physical layer of the LTE standard; it carries data with a customized frame structure and interacts with a dedicated wireless communication protocol. The frame structure is customized to be suitable for peer-to-peer network computing, and a proprietary wireless communication protocol developed for urban agglomeration peer-to-peer network computing is adopted to further improve its security and reliability. In addition, the wireless algorithm fully adapts to the multipath channel environment based on consensus mechanism control required for peer-to-peer network computing. The communication distance in the city is 100 meters to 10 kilometers, and the omnidirectional antenna can also achieve efficient transmission of 120 kilometers in the field. In this embodiment, the communication distance of the Mesh network is: the distance between node devices indoors is 50-150 meters, the distance between node devices outdoors is 50 meters to 120 kilometers, and the number of node devices that can be accessed by each node is 65535. In addition, when networking in 4G mode or 5G mode, the communication distance is determined by the coverage distance and range of the 4G or 5G network used, and the number of accessible node devices depends on the computing power of the computing chip and the communication delay.

[0111] When used to implement cross-system or cross-department requests, in order to ensure the data security of each system or department, the access terminals belonging to different systems or departments are usually in their own intranet environments, causing inconvenience in interaction. In order to take into account both secure interaction and ease of use, and at the same time ensure that the network environment where the access terminal is located can work in a pure intranet manner and ensure the security of each network, in this embodiment, when the access terminal is in the intranet environment, an assistant program (pure intranet software, not connected to the external network) can be set; when one access terminal is used as an interaction initiator and at least one other access terminal is used as an interaction receiver, and data is interacted through a peer-to-peer network, the interaction initiator guides the generation of the request command through the assistant program, and the interaction receiver automatically completes the reception, entry or execution of the response content through the assistant program. Furthermore, the interaction initiator and the interaction receiver located in different intranets can achieve absolutely secure remote operation through a peer-to-peer network; wherein, the interaction initiator can also be the Internet, a private network or other forms, and on the basis of the present invention, the security of the interaction can still be guaranteed.

[0112] The above embodiments are only used to illustrate the present invention, and are not used to limit the present invention. As long as they are based on the technical essence of the present invention, changes and modifications to the above embodiments will fall within the scope of the claims of the present invention.

Claims

1. A secure interactive peer-to-peer network, characterized in that: It includes a peer-to-peer network and an access terminal, wherein the peer-to-peer network includes a plurality of node devices; the access terminal is connected to the node device through a semantic module and is used to submit a request command to the peer-to-peer network; The request command submitted by the access terminal to the peer-to-peer network through the semantic module is data information with semantics. The semantic module receives the data information and performs semantic extraction to obtain the request content and sends it to the node device; Some or all of the node devices are provided with at least one type of sensor for collecting perception data of different corresponding types; The current node device receives the result data output by other node devices; For the current node device, the collected perception data is combined with the result data from other node devices to calculate the result data of the current node and send it to other node devices; The node devices in the peer-to-peer network perform collaborative calculations and respond to request commands as the perception data is collected and the result data is calculated; When the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the request command is completed.

2. The secure interactive peer-to-peer network according to claim 1, characterized in that: When the result data calculated by one or more node devices in the peer-to-peer network matches the request content, the result corresponding to the request content is represented in the result data output by the one or more node devices, according to the preset conditions or the output of the data processing model deployed on the pre-deployed program or node device; If it is determined that the current node device needs to respond to the request command, the current node device will send instructions to the execution device connected to the current node device according to the calculated result data; when the execution devices connected to all the node devices that need to respond have completed the response action, the request command is completed.

3. The secure interactive peer-to-peer network according to claim 1 or 2, characterized in that: The semantic module exchanges data with the peer network through the gateway, and the access terminal and the node device do not directly communicate data.

4. The secure interactive peer-to-peer network according to claim 1 or 2, characterized in that: The result corresponding to the request content is represented by result data; the execution device receives the result data output by the connected node device. If a specific element in the result data indicates that the execution device needs to respond, or the result data is used as one of the inputs of the data processing model of the node device, and it is calculated that the corresponding execution device needs to respond, the execution device performs the corresponding operation.

5. The secure interactive peer-to-peer network according to claim 4, characterized in that: When the execution device is required to respond, the execution device combines the result data output by other node devices, calculates its own result data, and controls the execution components on the execution device to perform corresponding operations through the obtained result data.

6. The secure interactive peer-to-peer network according to claim 1 or 4, characterized in that: The execution device receives the result data output by other node devices. The principle is: when the request content requires the corresponding execution device to respond to the request command, if the result data calculated by one or more node devices can determine the execution device that needs to respond, the corresponding execution device is added to the node list for transmitting the current result data, and the one or more node devices directly transmit the result data to the execution device or the node device connected to the execution device; Alternatively, the execution device receives result data output by other node devices in a layer-by-layer manner.

7. The secure interactive peer-to-peer network according to claim 6, characterized in that: According to preset conditions or algorithm output or model output, the corresponding execution device is added to the node list for transmitting result data.

8. The secure interactive peer-to-peer network according to claim 4, characterized in that: The execution device is a node device connected to the execution components of specific functions. The execution feedback information of the execution components of the execution device is fed back to the execution device and participates in the calculation of subsequent result data of the execution device.

9. The secure interactive peer-to-peer network according to claim 1, characterized in that: The node device is deployed with a data processing model, which is used to calculate and obtain result data; The data processing model will adjust the model parameters according to the result data received each time.

10. The secure interactive peer-to-peer network according to claim 1, 2 or 9, characterized in that: The data processing model loaded on the node device performs adaptive perception calculation on the data processing model of the previous node device. Specifically, when a node device performs calculations on the result data from other node devices, the adaptive perception calculation includes verifying the result data of the current node device with that of other related node devices and / or verifying the historical result data of the current node device to obtain an adaptability value.

11. The secure interactive peer-to-peer network according to claim 10, characterized in that: When the data processing model of a certain node device cannot adapt to the sensors and actuators connected to it, the adaptability value of its adaptive perception calculation affects the current result data of the current node device as follows: in the current result data of the current node device, a preset flag bit is assigned a value; Alternatively, other related node devices perform comprehensive calculations on the current result data of the current node device based on their own data processing models; when the obtained result data enables subsequent node devices to use the result data as input, the result data is used by other node devices for calculation, and then drives the adjustment of the data processing model of the current node device.

12. The secure interactive peer-to-peer network according to claim 10, characterized in that: In the current result data calculation or several data transmissions and result data calculations, the data processing model of the node device covers the following modes: When it is found that the adaptability value of the data processing model of a certain node device exceeds the degree threshold, the result data output by the node device will add the node device connected to the model training facility to the receiving node list. The node device connected to the model training facility will receive such data and include the driving command for driving the model training facility in the result data calculated at that time; The model training facility is regarded as a type of sensor. The signal it sends is added to the connected node device. As the result data of the node device is calculated and sent, the corresponding node device in the peer-to-peer network will drive the data storage device of the connected sensor to establish a file transfer channel between the node devices in the peer-to-peer network or establish a file transfer channel in other network communication modes after calculating the result data. The perception data specified by the model training facility is sent to a specific location to participate in model training and improvement. The improved data processing model will be deployed in the same way to the node device that the original data processing model cannot adapt to.

13. The secure interactive peer-to-peer network according to claim 12, characterized in that: Alternatively, the model training facility drives multiple node devices to use their own perception data to generate new data processing models in a federated computing manner, and update the data processing models.

14. The secure interactive peer-to-peer network according to claim 12 or 13, characterized in that: The degree threshold is a set value or a dynamic value; if it is a dynamic value, it is determined by a pre-set program or by a dynamically updated data processing model.

15. The secure interactive peer-to-peer network according to claim 1, characterized in that: The principle of data transmission between node devices is: when the result data of the current node device changes, or the change amount of the result data reaches a preset threshold, the latest result data is sent to other node devices; Alternatively, the current node device continuously sends each result data to other node devices at a certain frequency.

16. The secure interactive peer-to-peer network according to claim 1, characterized in that: All node devices encrypt the result data obtained by their calculations based on the encryption consensus mechanism to obtain the encrypted result, and then send the encrypted result to other node devices; The semantic module parses the request content based on the decryption consensus mechanism and transcribes the response content.

17. The secure interactive peer-to-peer network according to claim 16, characterized in that: The encryption consensus mechanism includes one or more consensus mechanisms. Different consensus mechanisms correspond to changes in the encryption algorithm structure and parameters of the node device.

18. The secure interactive peer-to-peer network according to claim 1, characterized in that: Node devices communicate with each other using packets of standard size.

19. The secure interactive peer-to-peer network according to claim 1, characterized in that: The request content includes the encryption consensus mechanism, the data carrier type for transcribing the response content, and the response content of the request; the response content is the compliance result generated by the peer-to-peer network based on the request content, and the compliance result is processed in accordance with the encryption consensus mechanism.

20. The secure interactive peer-to-peer network according to claim 1 or 19, characterized in that: After the node device obtains the request content corresponding to the request command, it adds the calculation requirement of whether the subject corresponding to the request command has the authority to execute the request command to the result data of the current node device; when the subsequent node device calculates the result data, it adds the calculation result of whether the subject corresponding to the request command has the authority to execute the request command to the result data and transmits it to other node devices; When the result data calculated by one or more node devices in the peer-to-peer network determines that the subject has the authority to execute the request command, and the corresponding node device completes the request command response based on the received result data, the peer-to-peer network completes the response to the request command. Otherwise, the result data calculated by the node device in the peer-to-peer network does not respond to the request content.

21. The secure interactive peer-to-peer network according to claim 20, characterized in that: When transmitting result data, a specific node device is added to receive the result data based on preset conditions or algorithm output or model output; after one or more layers of transmission, when one or more node devices receive the result data, they execute a response to the request command based on the preset conditions or algorithm output or model output.

22. The secure interactive peer-to-peer network according to claim 20, characterized in that: If the result data contains a result that matches an item in the request content, and the subject corresponding to the presentation request command does not have the authority to obtain the result data that matches the request content, then corresponding feedback information is included in the result data.

23. The secure interactive peer-to-peer network according to claim 20 or 22, characterized in that: When the subject corresponding to the request command is the requester, and it is determined that the identity information of the requester needs to be obtained, the identity information acquisition command is triggered, and the identity information acquisition command is used as one of the inputs to participate in the calculation of the result data of the node device. The node device connected to the peer-to-peer network with barrier-free data collection conditions that can obtain the identity information of the requester is driven to respond to the corresponding result data, thereby achieving the acquisition of the identity information of the requester.

24. The secure interactive peer-to-peer network according to claim 23, characterized in that: The peer-to-peer network verifies the authenticity of the requester's identity information and determines the requester's authority. The node device in the peer-to-peer network that can obtain identity information does not provide identity information, but only expresses the verification result in the result data of the node device based on the verification requirement for the authenticity of the identity information in the received result data.

25. The secure interactive peer-to-peer network according to claim 24, characterized in that: The peer-to-peer network verifies the relationship between the real identity and ownership of the requester to determine whether his real identity has the execution authority of the requested command. Specifically, the peer-to-peer network directly performs collaborative operations on the actual behavior, trajectory, and data to determine the relationship between his real identity and the execution authority of the requested command. Other node devices perform subsequent calculations on the relationship between the real identity they obtain and the execution authority of the requested command, and express the relationship between the real identity of the requester and the execution authority of the requested command in the result data, which is transmitted to the subsequent node devices of the next layer, wherein there is no need to output the specific identity information of the requester to other node devices.

26. The secure interactive peer-to-peer network according to claim 24, characterized in that: A node device in a peer-to-peer network that can obtain identity information does not provide identity information, and drives an information source device that provides identity information to establish an encrypted file transmission channel between the node device input terminal that needs to obtain identity information or to establish an encrypted information transmission channel in other network communication modes; and uses the identity information as one of the inputs of the node device.

27. The secure interactive peer-to-peer network according to claim 1 or 2, characterized in that: The access terminal is connected to the semantic module via a non-network-connected medium; the request command submitted by the access terminal to the peer-to-peer network is sent to the semantic module via the non-network-connected medium; the response content is transcribed into data information with corresponding semantic content by the semantic module, and is sent to the access terminal connected to the execution device with response function via the non-network-connected medium.

28. The secure interactive peer-to-peer network according to claim 27, characterized in that: Non-network-connected media include sound transceiver devices, image transceiver devices, and electromagnetic induction devices; sound transceiver devices include microphones and speakers, and the data carrier type corresponding to the request content and the response content is sound; image transceiver devices include cameras and displays, and the data carrier type corresponding to the request content and the response content is image; electromagnetic induction devices include electromagnetic induction input devices and electromagnetic induction output devices, and the data carrier type corresponding to the request content and the response content is electromagnetic waves.

29. The secure interactive peer-to-peer network according to claim 1 or 2, characterized in that: When the data information corresponding to the request content and the response content is a web page, the semantic module obtains the request content by identifying the content displayed on the web page; the response content is transcribed into one or more combinations of text, sound or image, and displayed through the web page.

30. The secure interactive peer-to-peer network according to claim 1, characterized in that: The data information corresponding to the request content is input to the semantic module through the data network interface. The semantic module analyzes the data information input from the data network interface through semantic extraction to obtain the request content.

31. The secure interactive peer-to-peer network according to claim 1, characterized in that: When the access terminal is in an intranet environment, an assistant program is set; when one access terminal serves as an interaction initiator and at least one other access terminal serves as an interaction receiver, and data is interacted through a peer-to-peer network, the interaction initiator is guided by the assistant program to complete the generation of the request command, and the interaction receiver automatically completes the reception, entry or execution of the response content through the assistant program.

Images