back
GPU
Verification of GPU Authenticity and Computational Power: A Key Issue in Decentralized GPU Scenarios
Learn more:
apus.network
Updated Jun 10, 2024
Apus Network is building a decentralized and trustless GPU network designed for secure, efficient and scalable AI agents inference, aiming to address the key challenges faced by decentralized GPU networks, ensuring GPU integrity, AI model trustworthiness, and verifiable inference results.
What is a Decentralized GPU Scenario?
A decentralized GPU scenario involves utilizing multiple independent GPU resources within a distributed network to perform computational tasks, rather than relying on a single data center or provider. In this model, anyone can contribute their idle GPU power to the network and receive corresponding rewards, while users in need of computing power can rent these resources on-demand. This model not only improves the efficiency of computing resource utilization but also significantly reduces costs, providing more possibilities for various application scenarios such as AI training and inference, video rendering, and scientific computation. Compared to traditional centralized GPU clusters, decentralized GPU networks offer enhanced fault tolerance, scalability, and privacy protection.

Decentralized GPU not only provides powerful computing capabilities but also ensures higher computational efficiency and reliability through distributed networks. It has a wide range of applications, including but not limited to AI training and inference, high-performance computing (HPC), big data analysis, game graphics rendering, and video processing and encoding. This model makes high-performance computing resources affordable for small and medium-sized enterprises as well as individual developers, thereby fostering innovation and technological advancement.
Challenges
In Apus's business scenario, users request computing tasks through an AI Agent. These tasks are then completed using decentralized GPU computation and returned to the user via the agent. Under this business model, Apus faces several key challenges:
1. Verifiable and Trustworthy Transmission Channel
Users need a channel that can be verified and trusted to transmit AI requests, such as prompts and configurations, ensuring data integrity during transmission is crucial.
2. Verification Mechanism for Computation Results
Since AI task results cannot be directly verified using mathematical methods, a reliable mechanism for verifying computation results must be established. This involves using blockchain technology and decentralized verification solutions to ensure the authenticity and reliability of the results.
3. Security of Decentralized GPUs
From the perspective of decentralized GPUs executing the computations, it is essential to ensure the security of the computation results and the execution of the economic model. This means preventing the presence of malicious nodes and ensuring all participating nodes complete a series of collateral guarantees, with an economic model in place for rewards and penalties.
4. Security of the Economic Model
The security of the economic model is also crucial for the safe and stable operation of the business.
DePHY’s Solution
Using decentralized GPUs as an example, DePHY DID solves the problem of universal and unique identification of devices on the network. It also provides Apus' economic model executors and GPU devices with a uniquely verifiable DID. At the same time, DePHY's restaking mechanism ensures the security of Apus' economic model. Thus led to the creation of the Fisherman role, also protected by DID, to perform multiple verifications on data computation results and execute the economic model.
When the user issues a task (assuming no malicious behavior)
The user sends an AI task to the GPU via the DePHY messaging layer and makes a payment.
The GPU executes the task and returns the result to the user; generated data is sent to the token economic model executor.
The GPU owner receives the reward.
When the economic model executor acts maliciously
If the economic model executor fails to submit messages properly, the on-chain token economic model contract will verify the executor's results.
If the execution content fails the validation by the proofer, the slash mechanism will be triggered, forfeiting the restaking rewards and possibly the principal.
When fisherman checks and GPU does not perform tasks according to rules
In DePHY's design, users can delegate the Fisherman to re-verify GPU tasks, i.e., redistribute tasks to different GPUs to verify results.
Before validation, the Fisherman needs to stake some tokens. If they successfully identify incorrect results, they share the slashed tokens with the system. If the validation fails, they must compensate with a portion of their staked tokens.
DePHY DID
DePHY DID associates each GPU node with a unique on-chain identity, where metadata can include hardware specifications declared by the device owner. It can combine with RWA, abandoning anonymity to provide real-name information disclosure, which serves as a traceable basis for computation incentives and penalties (Slashing). The core technology of Apus lies in its perfect integration with the DePHY DID solution:
Hardware Fingerprinting Technology:
Generates a unique hardware fingerprint based on the physical characteristics of the GPU, serving as the basis for GPU identity verification. DePHY DID can be used for staking/rainbow staking, providing economic security assurances.
Trusted Execution Environment:
Utilizes trusted hardware to provide an isolated operating environment for obtaining GPU information, preventing computational fraud. DePHY offers a hardware functionality verification contract (DID RA), enabling the functionality of the GPU to be validated before joining the Apus network.
Incentive Strategy Network:
Apus employs an incentive strategy network that balances honest and malicious behaviors through a combination of an Economic Incentive Policy and a Slashing Policy.
To ensure the economic efficiency of GPU computation, a deterministic model has been designed. This model employs the AlexNet model, known for its significant performance difference between GPU and CPU operation. The process involves randomly selecting several GPU nodes or confirming certain nodes as GPU anchor nodes. Using VRF (Verifiable Random Function), random parameters are generated to create a GPU computation task. The GPU being tested and the anchor nodes execute this task separately and submit their results. In the smart contract, an arbitration process verifies the accuracy of the results and checks the performance metrics and benchmarks of the task to ensure they fall within an acceptable deviation range. Upon successful verification, a mark is added to the DID, proving the computational capability of the GPU node is authentic and trustworthy. To maintain ongoing validity of the verification, the certification might have an expiration date, requiring random revalidation. This mechanism ensures the authenticity and computational reliability of every GPU node in the network, thereby enhancing the reliability and trustworthiness of the entire decentralized GPU network.
Result
2,000+
GPUs ready
As of now, more than 2,000 GPUs from Apus are prepared for testing and deployment on the DePIN network based on the Solana mainnet. Optimistically, Apus is expected to launch a directly usable AI agent product in Q4 2024.
Looking ahead, Apus Network will use the Web3 identity system, DePHY ID, to associate each GPU node with a unique on-chain identity. This is not just an ordinary identity credential but a crucial component in establishing the trust foundation of Apus. With a unique digital identity for each GPU node based on DePHY ID, which can be linked to real-world attestation, a range of innovative scenarios will emerge. For instance, GPU nodes can be used for staking and consensus, where node operators need to stake funds for GPU nodes as a financial guarantee for honest service. Nodes with excellent historical records and higher stakes will receive more task allocations and rewards, incentivizing long-term integrity. Different GPU hardware configurations can accept differentiated staking strategies (known as “rainbow staking”), balancing contributions and rewards in a heterogeneous hardware environment.

Moreover, Apus will introduce a series of peripheral services based on the trusted GPU, such as hardware functionality verification contracts, to objectively assess the capabilities of the GPU. Combining the genuine GPU with reliable verification mechanisms, Apus demonstrates infinite potential and a promising future.