Government affair data sharing and exchanging system and method based on multi-domain P2P

Abstract

The invention relates to the technical field of computers, in particular to a government affair data sharing and exchanging system and method based on multi-domain P2P, and the system comprises a control plane which is used for maintaining basic data, defining strategies and parameters, and monitoring an execution process; the data plane is used for executing data retrieval, transmission and release according to the strategy and parameters of the control plane; the method has the advantages that flexibility and reliability of the system are improved, and standardization and configurability of strategies are achieved through separation of a control plane and a data plane. The strategy definition and parameter setting of the control plane provide clear guidance for the transmission of the data plane, and the data plane does not depend on control and management nodes when executing a transmission task. The design ensures that the data sharing and transmission process can still be normally carried out even if the management node has a fault, so that the continuity and stability of government affair data exchange are ensured.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a government data sharing and exchange system and method based on multi-domain P2P. Background Art

[0002] In the field of government data sharing and exchange, traditional solutions usually adopt a multi-layer cascade structure to realize cross-level information resource directory services and data exchange services. Although this structure meets the needs of data sharing to a certain extent, with the increase in the amount of government data and the diversification of business needs, its inherent problems gradually emerge. Specifically, due to the fact that the cascade architecture spans multiple layers and has long links, the timeliness of data exchange is low, and operation and maintenance also become complicated. For example, in a multi-layer cascade structure, data needs to pass through multiple intermediate nodes from the source to the destination, which not only increases the delay of data transmission, but also increases the probability of errors, affecting the real-time and accuracy of the data.

[0003] In order to solve these problems, P2P (Peer to Peer) network technology was introduced as a potential solution. The P2P network is formed by multiple independent peer nodes connected to each other, and each node has an independent and unique identity in the network. This network uses distributed storage services to save resources, and each resource also has an independent resource identity in the network. The self-organization and self-management characteristics of the P2P network allow nodes to flexibly join or exit the network, which provides good scalability for the network. However, when the P2P network introduces a central registrar (Enrollment Server) to control node joining, it may encounter a single point of failure problem; and in a fully decentralized full peer-to-peer network, large-scale networking may face performance challenges.

[0004] For example, a Chinese patent with publication number CN116781713A discloses a P2P-based government data sharing and exchange system and data acquisition method. The system includes a business system module, a data transmission control module and a data exchange network module, wherein the data exchange network module is composed of a plurality of network transmission nodes, each node including a P2P file system for storing configuration files of government data. In addition, there is a prefecture-level city shared exchange module for communication between the business system and the network transmission node. However, compared with the present invention, the prior art is mainly based on a fully peer-to-peer P2P file system topology, in which the network transmission node is a key part, and interacts with the business system through a prefecture-level city or provincial shared exchange node. Due to the node number limit of the fully peer-to-peer network, business systems below the prefecture-level city cannot directly become peers, and need to exchange data through a superior shared exchange node as an agent. In addition, the prior art controls the addition of resources through a central data transmission control module, which limits the flexibility and scalability of the system to a certain extent.

[0005] Connector technology provides a cross-organizational framework for data sharing in data spaces, allowing each organization to control how it shares data and providing a trusted data exchange and sharing channel for data providers and data consumers. However, connectors in existing technologies (for example, IDS in Europe) usually rely on central control modules, which may lead to performance bottlenecks and single point failure risks when deployed on a large scale. Summary of the invention

[0006] The purpose of the present invention is to provide a government data sharing and exchange system and method based on multi-domain P2P to solve the problems raised in the above background technology.

[0007] To achieve the above object, the present invention provides the following technical solution: a government data sharing and exchange system based on multi-domain P2P, the system comprising:

[0008] The control plane is used to maintain basic data, define policies and parameters, and monitor the execution process;

[0009] The data plane performs data retrieval, transmission, and publishing according to the policies and parameters of the control plane.

[0010] Preferably, the control plane further includes:

[0011] The management center module is used to manage the operation and configuration of the government data sharing and exchange system in different domains;

[0012] Approval module, used to manage the approval process of data sharing requests;

[0013] The management center module also includes a connector node management unit, which is used to manage the registration, authentication and monitoring of connector nodes in the system; and a digital identity management unit, which is used to manage the digital identities of users and connectors.

[0014] Preferably, the data plane includes a connector module, which is used to realize data exchange and communication between nodes, and specifically includes a networking unit, a content addressing unit, a content routing unit, a security authentication unit, a transmission unit, a publishing unit and a gateway unit;

[0015] The system also includes an application system module for providing and requesting specific government data, including a data provider unit and a data requester unit.

[0016] Preferably, the system adopts a multi-domain P2P topology architecture, and connectors are set in one or more shared domains according to permissions and topics. Connector types include data users, data providers, data providers and users, data storage parties, and gateway connectors; connectors are divided into ordinary connectors, trusted connectors, super connectors, and guide connectors according to identity permission types.

[0017] Preferably, the system configures a key pair that complies with the national encryption algorithm for all connectors, including a public key and a private key for identity authentication and data encryption; uses a distributed hash table to register and manage the connector's public key, IP address, and digital identity; discovers and routes connectors through the ConnectorID generated based on the connector's public key; and allows connectors to be classified and searched by setting tags, such as subject tags, industry tags, storage tags, and credit tags.

[0018] A multi-domain P2P-based government data sharing and exchange method is applied to a multi-domain P2P-based government data sharing and exchange system, and the method comprises the following steps:

[0019] Maintain basic data, define policies and parameters, and monitor the execution process on the control plane;

[0020] The data plane performs data retrieval, transmission, and publishing according to the policies and parameters defined by the control plane.

[0021] Preferably, the control plane management step further includes:

[0022] Manage the operation and configuration of the government data sharing and exchange system by domain through the management center module;

[0023] The approval module manages the approval process of data sharing requests to ensure the security and compliance of data sharing.

[0024] Preferably, the connector module in the data plane execution step realizes data exchange and communication between nodes, specifically including:

[0025] Use networking units to build multi-domain P2P network topology;

[0026] Accurate data location and routing are achieved through content addressing units and content routing units;

[0027] Use security authentication units to perform node identity authentication and data encryption;

[0028] Reliable data transmission, publishing and API access are achieved through transmission units, publishing units and gateway units.

[0029] Preferably, the method further includes the operation steps of the application system module for providing and requesting specific government data, including:

[0030] The data provider unit publishes data resources for other nodes to retrieve and use;

[0031] The data requester unit requests data resources from the data provider unit and receives returned data.

[0032] Preferably, the method further comprises the following steps:

[0033] Adopt a multi-domain P2P topology architecture and set the connector in one or more shared domains according to permissions and topics;

[0034] Configure key pairs that comply with national encryption algorithms for all connectors, including public and private keys, for identity authentication and data encryption;

[0035] Use distributed hash tables to register and manage connector public keys, IP addresses, and digital identities;

[0036] Connector discovery and routing are performed through the ConnectorID generated based on the connector public key to determine the source and destination of the data packet;

[0037] It allows connectors to be classified and searched by setting tags, such as topic tags, industry tags, storage tags, and credit tags, thereby improving the efficiency and accuracy of data sharing and exchange.

[0038] Compared with the prior art, the present invention has the following beneficial effects:

[0039] 1. Improve system flexibility and reliability: By separating the control plane from the data plane, policy standardization and configurability are achieved. The policy definition and parameter settings of the control plane provide clear guidance for the transmission of the data plane, and the data plane no longer relies on the control and management nodes when performing transmission tasks. This design ensures that even if the management node fails, the data sharing and transmission process can still proceed normally, thereby ensuring the continuity and stability of government data exchange.

[0040] 2. Enhance the robustness of the system: The domain management strategy adopted by the system significantly enhances the robustness of the system by dividing the entire network into multiple domains. Each domain has an independent management node and connector. When a domain encounters a failure, the operation of other domains is not affected, thus ensuring the high availability of the entire system.

[0041] 3. Improve the scalability of the system: Domain management also greatly increases the number of nodes that the system can manage. Through the multi-domain approach, the system can be expanded to tens of thousands or even more nodes, meeting the needs of large-scale government data sharing and providing sufficient expansion space for the growth of government data in the future.

[0042] 4. Optimize data transmission efficiency: The introduction of content addressing and routing technology improves the efficiency of data retrieval and transmission. This content-based addressing method makes data transmission more direct and faster, reducing unnecessary network delays and data redundancy.

[0043] 5. Strengthen data sovereignty and security: By strengthening the security authentication mechanism, the security of data exchange and the integrity of data are ensured. The system's security authentication unit and digital identity management unit work together to provide strong security for data transmission.

[0044] 6. Simplify system operation and maintenance: Due to the separation of the control plane and the data plane, the system operation and maintenance work becomes more centralized and efficient. The management center module can centrally manage policies and parameters, while the data plane transmission tasks can be automatically executed, reducing the complexity and workload of operation and maintenance. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 This is a schematic diagram of the domain P2P system of the present invention;

[0046] Figure 2 Schematic diagram of separation of control plane and data plane in the present invention. DETAILED DESCRIPTION

[0047] In order to make the purpose and technical solution of the present invention clearly and completely described, and the advantages more clearly understood, the embodiments of the present invention are further described in detail with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are part of the embodiments of the present invention, rather than all of the embodiments, and are only used to explain the embodiments of the present invention, and are not used to limit the embodiments of the present invention. All other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0048] Embodiment 1, the present invention provides a technical solution: a government data sharing and exchange system based on multi-domain P2P, the system comprising:

[0049] The control plane is used to maintain basic data, define policies and parameters, and monitor the execution process; the control plane includes:

[0050] The management center module is used to manage the operation and configuration of the government data sharing and exchange system in different domains; the management center module includes: a connector node management and control unit, which is used to manage the registration, authentication and monitoring of connector nodes in the system; and a digital identity management unit, which is used to manage the digital identities of users and connectors.

[0051] Approval module, used to manage the approval process of data sharing requests.

[0052] The data plane performs data retrieval, transmission, and publishing according to the policies and parameters of the control plane. The data plane includes:

[0053] The connector module is used to realize data exchange and communication between nodes. The connectors include: data users, which are nodes that can only access and use data; data providers, which are nodes that can provide data to the network; data providers and users, which are nodes that can both provide and use data; data storage, which is a node that stores a copy of the data for users after obtaining it; and gateway connectors, which are nodes that provide an API gateway for other clients that do not have connectors installed.

[0054] Connectors are divided into the following categories according to their identity permissions: ordinary connectors, which can only obtain viewable resources with the lowest permissions; trusted connectors, which are connectors with authenticated identities; super connectors, which have the highest permissions and can configure shared domains, trusted connectors, and boot connectors; and boot connectors, which are responsible for guiding new nodes to join the P2P domain.

[0055] The system configures a key pair that complies with the national secret algorithm for all connectors, including a public key and a private key for identity authentication and data encryption; the system uses a distributed hash table (DHT) to register and manage the public key, IP address and digital identity of the connector; the system discovers and routes connectors through ConnectorID, which is generated based on the public key of the connector and is used to determine the source and destination of the data packet; the system allows connectors to be classified and searched by setting tags, such as subject tags, industry tags, storage tags, credit tags, etc.

[0056] The connector module includes a networking unit, a content addressing unit, a content routing unit, a security authentication unit, a transmission unit, a publishing unit, and a gateway (API Gateway) unit.

[0057] The system includes application system modules for specific government data provision and request, including:

[0058] The data provider unit is responsible for publishing data resources;

[0059] The data requester unit is responsible for requesting data resources.

[0060] The system adopts a multi-domain P2P topology architecture, and connectors are set in one or more shared domains according to permissions and topics.

[0061] Embodiment 2, refer to the attached Figure 1 Based on the first embodiment, a schematic diagram of a government data sharing and exchange system based on multi-domain P2P is proposed, which includes the following modules:

[0062] Management Center:

[0063] The management center is responsible for the management and monitoring of the entire system, including the formulation of strategies, monitoring of the execution process, and maintenance of the system.

[0064] Approval Center:

[0065] The Approval Center is responsible for approving data sharing requests and ensuring that all data sharing requests comply with relevant policies and regulatory requirements.

[0066] Shared domain:

[0067] The sharing domain proposed in the present invention is a logical area divided in a multi-domain P2P system to achieve specific data sharing purposes. Each sharing domain contains a set of connectors, which can be data providers, data consumers, or both. The design of the sharing domain is to promote efficient sharing and secure exchange of data within the domain. Each sharing domain can have its own management policy and security protocol, and autonomously manage data sharing activities within the domain. The sharing domains are independent of each other, and activities within one domain will not directly affect other domains. The system can be expanded by adding new sharing domains to adapt to the growing demand for data sharing. The sharing domain can be adjusted as needed, including increasing or decreasing the connectors within the domain, or changing the management policy of the domain.

[0068] Shared domain 1: contains connectors 101, 102, 201, 202, and boot connector 001.

[0069] Shared domain 2: includes connectors 203, 204, 301, 305, and guide connector 204.

[0070] Shared domain 3: includes connectors 301 , 305 , and guide connector 104 .

[0071] Public domain: represents the public domain in the system, which is used as a default domain for all connectors.

[0072] Connectors:

[0073] Connectors 101-305 represent nodes of various data providers and data requesters in the system, and are divided into common connectors, guide connectors, and storage connectors, and perform data exchange according to data sharing exchange strategies.

[0074] Boot Connector:

[0075] The guide connectors 001, 104, 204 are guide nodes set in each sharing domain, responsible for guiding new nodes to join the P2P domain and perform preliminary data exchange and management.

[0076] Storage Connectors:

[0077] In the multi-domain P2P government data sharing and exchange system, the storage connectors 103 and 205 act as local caches of sharable storage resources and provide efficient data retrieval and access services.

[0078] Storage connectors play a key role in the multi-domain P2P government data sharing and exchange system. They act as local caches for sharable storage resources. These storage connectors are distributed in different sharing domains to provide efficient data retrieval and access services. In this embodiment, when connector 101 needs to query specific content, the system will first use content addressing technology to start retrieving from the adjacent storage connector 103. This design reduces the dependence on remote storage resources and improves the speed and efficiency of data retrieval. Through a specific content routing algorithm, the system can also retrieve data from adjacent storage connectors (such as 205 or 301) in other sharing domains if the required data is not available in this domain. This algorithm optimizes the data retrieval path and ensures that the required data can be quickly accessed even in cross-domain situations. The design of the storage connector allows connectors in a domain to preferentially retrieve data from this sharing domain or adjacent sharing domains. This strategy not only improves the speed of data access, but also reduces the burden on the central node of the system, thereby enhancing the stability and reliability of the entire system. By implementing this intelligent retrieval strategy based on geographic location or network topology, the system can more effectively manage and allocate data resources and optimize user experience.

[0079] Refer to the attached Figure 2 As shown in the figure, the separation architecture of the control plane and the data plane in the government data sharing system is demonstrated, which clearly distinguishes the responsibilities of system management and data transmission.

[0080] The control plane is responsible for policy formulation, authority allocation, and system monitoring, while the data plane performs specific data exchange tasks according to the guidance of the control plane.

[0081] Embodiment 3, based on the embodiment 1, proposes a government data sharing and exchange based on multi-domain P2P, which is applied to a government data sharing and exchange system based on multi-domain P2P. The method includes the following steps:

[0082] Maintain basic data, define policies and parameters, and monitor the execution process on the control plane; further include:

[0083] Manage the operation and configuration of the government data sharing and exchange system by domain through the management center module;

[0084] Manage the approval process of data sharing requests through the approval module to ensure the security and compliance of data sharing;

[0085] The data plane performs data retrieval, transmission and publishing according to the policies and parameters defined by the control plane. The connector module in the data plane execution step realizes data exchange and communication between nodes, including:

[0086] Use networking units to build multi-domain P2P network topology;

[0087] Accurate data location and routing are achieved through content addressing units and content routing units;

[0088] Use security authentication units to perform node identity authentication and data encryption;

[0089] Reliable data transmission, publishing and API access are achieved through transmission units, publishing units and gateway units.

[0090] The method also includes the operation steps of the application system module for specific government data provision and request, including:

[0091] The data provider unit publishes data resources for other nodes to retrieve and use;

[0092] The data requester unit requests data resources from the data provider unit and receives returned data.

[0093] The method further comprises the following steps:

[0094] Adopt a multi-domain P2P topology architecture and set the connector in one or more shared domains according to permissions and topics;

[0095] Configure key pairs that comply with national encryption algorithms for all connectors, including public and private keys, for identity authentication and data encryption;

[0096] Use distributed hash tables to register and manage connector public keys, IP addresses, and digital identities;

[0097] Connector discovery and routing are performed through the ConnectorID generated based on the connector public key to determine the source and destination of the data packet;

[0098] It allows connectors to be classified and searched by setting tags, such as topic tags, industry tags, storage tags, and credit tags, thereby improving the efficiency and accuracy of data sharing and exchange.

[0099] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A multi-domain P2P-based government data sharing and exchange system, characterized by: The system comprises: The control plane is used to maintain basic data, define policies and parameters, and monitor the execution process; The data plane performs data retrieval, transmission, and publishing according to the policies and parameters of the control plane.

2. According to claim 1, a multi-domain P2P-based government data sharing and exchange system is characterized by: The control plane further comprises: The management center module is used to manage the operation and configuration of the government data sharing and exchange system in different domains; Approval module, used to manage the approval process of data sharing requests; The management center module also includes a connector node management unit, which is used to manage the registration, authentication and monitoring of connector nodes in the system; and a digital identity management unit, which is used to manage the digital identities of users and connectors.

3. The multi-domain P2P-based government data sharing and exchange system according to claim 1 is characterized by: The data plane includes a connector module, which is used to realize data exchange and communication between nodes, and specifically includes a networking unit, a content addressing unit, a content routing unit, a security authentication unit, a transmission unit, a publishing unit and a gateway unit; The system also includes an application system module for providing and requesting specific government data, including a data provider unit and a data requester unit.

4. The multi-domain P2P-based government data sharing and exchange system according to claim 1 is characterized by: The system adopts a multi-domain P2P topology architecture. Connectors are set in one or more shared domains according to permissions and topics. Connector types include data users, data providers, data providers and users, data storage parties, and gateway connectors. Connectors are divided into ordinary connectors, trusted connectors, super connectors, and guide connectors according to identity permission types.

5. The multi-domain P2P-based government data sharing and exchange system according to claim 1 is characterized by: The system configures a key pair that complies with the national encryption algorithm for all connectors, including a public key and a private key for identity authentication and data encryption; uses a distributed hash table to register and manage the connector's public key, IP address, and digital identity; discovers and routes connectors through the ConnectorID generated based on the connector's public key; and allows connectors to be classified and searched by setting tags, such as subject tags, industry tags, storage tags, and credit tags.

6. A multi-domain P2P-based government data sharing and exchange system, applied to the multi-domain P2P-based government data sharing and exchange system according to any one of claims 1 to 5, characterized in that: The method comprises the following steps: Maintain basic data, define policies and parameters, and monitor the execution process on the control plane; The data plane performs data retrieval, transmission, and publishing according to the policies and parameters defined by the control plane.

7. The multi-domain P2P-based government data sharing and exchange method according to claim 6 is characterized by: The control plane management step further includes: Manage the operation and configuration of the government data sharing and exchange system by domain through the management center module; The approval module manages the approval process of data sharing requests to ensure the security and compliance of data sharing.

8. The multi-domain P2P-based government data sharing and exchange method according to claim 7 is characterized by: The connector module in the data plane execution step implements data exchange and communication between nodes, including: Use networking units to build multi-domain P2P network topology; Accurate data location and routing are achieved through content addressing units and content routing units; Use security authentication units to perform node identity authentication and data encryption; Reliable data transmission, publishing and API access are achieved through transmission units, publishing units and gateway units.

9. The multi-domain P2P-based government data sharing and exchange method according to claim 6 is characterized by: The method also includes the operation steps of the application system module for specific government data provision and request, including: The data provider unit publishes data resources for other nodes to retrieve and use; The data requester unit requests data resources from the data provider unit and receives returned data.

10. The multi-domain P2P-based government data sharing and exchange method according to claim 6 is characterized by: The method further comprises the following steps: Adopt a multi-domain P2P topology architecture and set the connector in one or more shared domains according to permissions and topics; Configure key pairs that comply with national encryption algorithms for all connectors, including public and private keys, for identity authentication and data encryption; Use distributed hash tables to register and manage connector public keys, IP addresses, and digital identities; Connector discovery and routing are performed through the ConnectorID generated based on the connector public key to determine the source and destination of the data packet; It allows connectors to be classified and searched by setting tags, such as topic tags, industry tags, storage tags, and credit tags, thereby improving the efficiency and accuracy of data sharing and exchange.

Images