A hierarchical encryption real-time normal high service method and system

Abstract

The present invention discloses a hierarchical encryption real-time normal height service method and system, comprising: step 1: hierarchically peeling a digital elevation benchmark model into k digital elevation benchmark sub-models, and encrypting the sub-models; step 2: storing the encrypted sub-models on multiple independent servers, respectively, and deploying a decryption algorithm and an elevation anomaly interpolation algorithm; step 3: deploying a data leakage prevention module on a broadcast server; step 4: the broadcast server receives a request for obtaining information content sent by a user terminal, and after verification, the broadcast server sends a request to a network RTK server to obtain differential data, and the server sends a request to obtain an elevation anomaly component; step 5: the broadcast server merges all the collected elevation anomaly components into an elevation anomaly, uses the elevation anomaly to correct the geodetic height in the received differential data to obtain a normal height, and broadcasts it to the user terminal. The present invention improves work efficiency and data security.

Description

Technical Field

[0001] The invention belongs to the field of data surveying and mapping, and in particular relates to a layered encryption real-time normal high service method and system. Background Art

[0002] Normal height is usually used for elevation in engineering applications in my country. There are two main ways to obtain it: the first is to use elevation control points to obtain normal height within the survey area through leveling or GNSS elevation fitting. This method has problems such as poor observation conditions, low operating efficiency, and high cost investment. The second is to use GNSS to measure the geodetic latitude, geodetic longitude and geodetic height of ground points, and then convert the geodetic height into normal height through the digital elevation benchmark model. Since the high-precision digital elevation benchmark model is confidential data, users usually submit the measured longitude and latitude and geodetic height to the national surveying and mapping results management department, which will uniformly handle and complete the data conversion. However, with the comprehensive development of government informationization proposed by social development and the rise of smart city construction in recent years, the requirements for data resources are also increasing. However, this process cannot obtain normal height in real time, which is time-consuming and labor-intensive, with low work efficiency, and is not conducive to the efficient development of society. At present, some publicly available real-time normal height service methods cannot guarantee the security of digital elevation benchmark models. In addition, users can use a large number of converted results to reversely calculate the digital elevation benchmark model, which poses a risk of data leakage. Summary of the invention

[0003] In view of the deficiencies in the prior art, the purpose of the present invention is to provide a layered encryption real-time normal high-quality service method and system, which can provide users with real-time normal high-quality services while ensuring data security, thereby improving work efficiency and data security.

[0004] To achieve the above object, the technical solution adopted by the present invention is as follows:

[0005] A hierarchical encryption real-time normal high service method comprises the following steps:

[0006] Step 1: Layering and stripping the digital elevation reference model into k digital elevation reference sub-models, and encrypting the digital elevation reference sub-models;

[0007] Step 2: storing the encrypted digital elevation benchmark sub-models on multiple independent servers respectively, and deploying a decryption algorithm and an elevation anomaly interpolation algorithm;

[0008] Step 3: Set up a broadcast server and a network RTK server, and deploy a data leakage prevention module on the broadcast server to receive user requests, verify user permissions, identify abnormal user behavior, and prevent data leakage;

[0009] Step 4: The user terminal requests a service from the broadcast server. When the broadcast server receives the request sent by the user terminal and the user passes the verification, the broadcast server sends a request to the network RTK server to obtain differential data; at the same time, the broadcast server sends a request to the server storing each digital elevation benchmark submodel to obtain an elevation anomaly component;

[0010] Step 5: The broadcast server combines all the collected elevation anomaly components into elevation anomaly, uses the elevation anomaly to correct the geoid height in the received differential data to obtain the normal height, and broadcasts it to the user terminal.

[0011] Furthermore, the step 1 specifically includes:

[0012] Step 1.1: First, the calculation method of layering and stripping the digital elevation benchmark model into k digital elevation benchmark sub-models is as follows:

[0013] The digital elevation benchmark model with m rows and n columns is denoted as E:

[0014]

[0015] The sub-model after stripping is recorded as E i :

[0016]

[0017] The random number matrix is ​​denoted as R i :

[0018]

[0019] in To pick a random number between the maximum and minimum values ​​of the elements of E;

[0020] The digital elevation benchmark model is stripped into k digital elevation benchmark sub-models:

[0021]

[0022] Step 1.2: Use an encryption algorithm to encrypt the k digital elevation benchmark sub-models to generate k encrypted digital elevation benchmark sub-models and k secret keys.

[0023] Furthermore, the step 2 specifically includes:

[0024] The encrypted k digital elevation benchmark sub-models are stored on k independent servers respectively;

[0025] A decryption algorithm and an elevation anomaly interpolation algorithm are deployed on k independent servers. The decryption algorithm has k built-in secret keys, which can decrypt the encrypted digital elevation benchmark sub-model; the elevation anomaly interpolation algorithm can calculate the elevation anomaly component according to the user's approximate location and the grid corner point value of the digital elevation benchmark sub-model where the user is located.

[0026] Furthermore, the step 3 specifically includes:

[0027] A broadcast server and a network RTK server are set up, and a data leakage prevention module is deployed in the broadcast server. The broadcast server receives user requests and GGA data information sent by users, and parses the user's approximate location; the data leakage prevention module performs user management services and verifies whether the user account has real-time normal high service permissions, and determines whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high according to the user request and the approximate location information sent by the user.

[0028] Furthermore, the data leakage prevention method of the data leakage prevention module specifically includes:

[0029] Step 3.1, User authority control: limit the user's working time and working area, and open real-time normal high-speed services only for specific users or users with relevant qualifications;

[0030] Step 3.2, user abnormal behavior identification strategy: set a frequency threshold, when the user request frequency exceeds the threshold, it can be determined as a suspected abnormality; set a speed threshold, when the user terminal movement speed exceeds the threshold, it can be determined as a suspected abnormality; user trajectory distribution presents or approximates a regular grid or triangulated network, it can be determined as a suspected abnormality; user terminal location during use has poor continuity and jumps showing a certain regularity, it can be determined as a suspected abnormality;

[0031] Step 3.3, user exception handling: Use manual analysis to verify whether the suspected abnormal users maliciously obtain normal highs. After verification, the users who obtain normal highs maliciously will have their services terminated. After verification, the users who obtain normal highs normally will continue to be served.

[0032] Furthermore, the step 4 specifically includes:

[0033] The user terminal sends a service request to the broadcast server. The broadcast server receives the request for obtaining information content sent by the user terminal. After the broadcast server verifies the user's authority and identifies abnormal behavior, the broadcast server requests the network RTK server for corresponding differential data according to the user's approximate position. The differential data includes the plane coordinates of the reference station or virtual reference station and the geodetic height H. GNSSAt the same time, the broadcast server requests the independent servers storing the digital elevation benchmark submodel to obtain the elevation anomaly components respectively. Each independent server decrypts the digital elevation benchmark submodel, calculates the grid according to the user's approximate location using the elevation anomaly interpolation algorithm, and calculates the elevation anomaly component N using the four corner point values ​​of the grid of the digital elevation benchmark submodel. k Return to the advertisement server.

[0034] Furthermore, the step 5 specifically includes:

[0035] The broadcast server sends k elevation anomaly components N k Combined into elevation anomaly N, the calculation method is as follows:

[0036] N=∑N k

[0037] The calculated elevation anomaly is used to correct the base station geodetic height H in the differential data sent by the received network RTK server. GNSS Get the normal height h of the base station, calculated as follows:

[0038] h=H GNSS -N

[0039] The differential data is re-encoded to obtain differential data including the normal height of the reference station, and the differential data is sent to the user terminal. The user terminal receives the differential data including the normal height of the reference station and the satellite navigation positioning data sent by the broadcast server, and uses the differential data including the normal height of the reference station and the received satellite navigation positioning data to perform real-time dynamic calculation to obtain the normal height of the user's location.

[0040] The second object of the present invention is to provide a system for a hierarchical encryption real-time normal high service method, including a user terminal, a broadcast server, a network RTK server, and a plurality of independent servers.

[0041] Each of the servers is internally provided with a data processing module of a decryption algorithm and an elevation anomaly interpolation algorithm, which is used to store k encrypted digital elevation reference sub-models obtained by layering and stripping the digital elevation reference model in the intranet, and to perform decryption and elevation anomaly component analysis;

[0042] The broadcast server deploys a data leakage prevention module, which is used to receive user requests, verify user permissions, identify abnormal user behavior and prevent data leakage, send a request to the network RTK server to obtain differential data and send a request to the independent server to obtain elevation anomaly components, and merge all the collected elevation anomaly components into elevation anomaly, use the elevation anomaly to correct the geoid height in the received differential data to obtain the normal height, and broadcast it to the user terminal;

[0043] The network RTK server is used to receive the differential data request from the broadcast server, generate differential data, and send the differential data to the broadcast server;

[0044] The user terminal is used to send a request differential data to the broadcast server to obtain the normal height of the user's location.

[0045] Furthermore, the data leakage prevention module is used for user management services to verify whether the user account has real-time normal high service permissions, and to determine whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high based on the user request and the approximate location information sent by the user.

[0046] Furthermore, the broadcast server is used to correct the geodetic height of the reference station in the differential data using the elevation anomaly to obtain the normal height of the reference station, and use the normal height of the reference station to replace the geodetic height H in the differential data. GNSS , re-encode the differential data and broadcast it to the user terminal;

[0047] The user terminal is used to receive the differential data containing the normal height of the reference station and the satellite navigation positioning data sent by the broadcast server, and use the differential data containing the normal height of the reference station and the satellite navigation positioning data to perform real-time dynamic calculation to obtain the normal height of the user's location.

[0048] The remarkable effects of the present invention are:

[0049] (1) The present invention can measure and obtain the normal height in real time, without the need to perform leveling or GNSS height fitting to obtain the normal height, and without the need to first measure the plane coordinates and the geodetic height and then obtain the normal height through subsequent conversion, thereby greatly improving the operating efficiency and reducing the manpower and material costs;

[0050] (2) The present invention does not directly publicly release the digital elevation benchmark model, and can provide real-time normal elevation services to relevant qualified departments and specific users under the premise of meeting data confidentiality requirements, fully ensuring the data security of the digital elevation benchmark model;

[0051] (3) The present invention discloses a digital elevation benchmark sub-model, and the sub-model is encrypted and stored on multiple independent servers, which greatly reduces the risk of data leakage and greatly improves data security;

[0052] (4) The data leakage prevention module in the present invention can effectively prevent criminals from using a large number of normal heights and geodetic height results to inversely calculate the digital elevation benchmark model, further ensuring the data security of the digital elevation benchmark model. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] Figure 1 It is a schematic diagram of the process of the present invention. DETAILED DESCRIPTION

[0054] The specific implementation manner and working principle of the present invention are further described in detail below with reference to the accompanying drawings.

[0055] See also Figure 1 A hierarchical encryption real-time normal high service method is shown, comprising the following steps:

[0056] Step 1: In the intranet, the digital elevation reference model is layered and stripped into k digital elevation reference sub-models, and the digital elevation reference sub-models are encrypted, so that the digital elevation reference model is decomposed into k non-confidential digital elevation reference sub-models, where k is a natural number greater than 2;

[0057] include:

[0058] Step 1.1: First, the calculation method of layering and stripping the digital elevation benchmark model in the intranet into k digital elevation benchmark sub-models is as follows:

[0059] The digital elevation benchmark model with m rows and n columns is denoted as E:

[0060]

[0061] The sub-model after stripping is recorded as E i :

[0062]

[0063] The random number matrix is ​​denoted as R i :

[0064]

[0065] in To pick a random number between the maximum and minimum values ​​of the elements of E;

[0066] The digital elevation benchmark model is stripped into k digital elevation benchmark sub-models:

[0067]

[0068] Step 1.2: Use an encryption algorithm to encrypt the k digital elevation benchmark sub-models to generate k encrypted digital elevation benchmark sub-models and k secret keys. In this specific example, an existing mature and secure encryption algorithm is used.

[0069] Step 2: Store the encrypted digital elevation benchmark sub-models on multiple independent servers respectively, and deploy a decryption algorithm and an elevation anomaly interpolation algorithm. The independent servers are servers that are not in the same network, are not in the same location, and cannot communicate with each other. In this specific embodiment: the independent servers are cloud servers, and k cloud servers are used.

[0070] The encrypted k digital elevation benchmark sub-models are stored on k independent and dispersed servers respectively;

[0071] Decryption algorithms and elevation anomaly interpolation algorithms are deployed on k servers. The decryption algorithm has k corresponding built-in secret keys, which can decrypt the encrypted digital elevation benchmark submodel; the elevation anomaly interpolation algorithm can calculate the user's elevation anomaly based on the user's approximate location and the grid corner value of the digital elevation benchmark submodel where it is located. The optimized elevation anomaly interpolation algorithm can calculate the user's elevation anomaly component using a bilinear interpolation algorithm based on the user's approximate location and the grid corner value of the digital elevation benchmark submodel where it is located. The decryption algorithm uses the secret key corresponding to the encryption algorithm.

[0072] Step 3: Set up a broadcast server and a network RTK server, and deploy a data leakage prevention module on the broadcast server to receive user requests, verify user permissions, identify abnormal user behavior, and prevent data leakage;

[0073] A broadcast server and a network RTK server are set up, and a data leakage prevention module is deployed in the broadcast server. The broadcast server receives user requests and GGA data information sent by users, and parses the user's approximate location. In addition to general user management and service functions, the data leakage prevention module also includes a function of verifying whether the user account has real-time normal high service permissions, and judges whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high according to the user request and the approximate location information sent by the user.

[0074] The data leakage prevention method of the data leakage prevention module:

[0075] Step 3.1, User authority control: limit the user's working time and working area, and open real-time normal high-speed services only for specific users or users with relevant qualifications;

[0076] Step 3.2, user abnormal behavior identification strategy: set the frequency threshold, when the user request frequency exceeds the threshold, it can be judged as a suspected abnormality; set the speed threshold, when the user terminal movement speed exceeds the threshold, it can be judged as a suspected abnormality; the user trajectory distribution presents or approximates a regular grid or triangulated network, it can be judged as a suspected abnormality; the user terminal position has poor continuity during use and the jump shows a certain regularity, which is judged as a suspected abnormality; the frequency threshold and speed threshold are set according to conventional experience values.

[0077] Step 3.3, user exception handling: Use manual analysis to verify whether the suspected abnormal user has maliciously obtained the normal height. After verification, the user who has maliciously obtained the normal height will have his service terminated, and the user who has normally obtained the normal height will continue to be served. In this specific embodiment: first enter step 3.1 to determine whether the user authority meets the requirements. If so, proceed to the next step 3.2 to determine whether the user has abnormal behavior; otherwise, users who do not belong to the service cannot enter the set user login interface. When judging whether the user has abnormal behavior, for each suspected abnormality in step 3.2, if any one of them is met, enter the step 3.3 to manually judge whether there is malicious acquisition of normal height.

[0078] Step 4: The user terminal sends a request to obtain information content to the broadcast server. When the broadcast server receives the request to obtain information content sent by the user terminal and the user is authenticated, the broadcast server sends a request to the network RTK server to obtain differential data; at the same time, the broadcast server sends a request to the server storing each digital elevation benchmark submodel to obtain an elevation anomaly component; specifically including:

[0079] The user terminal sends a service request to the broadcast server. The broadcast server receives the request for obtaining information content sent by the user terminal. After the broadcast server verifies the user's authority and identifies abnormal behavior, the broadcast server requests the network RTK server for corresponding differential data according to the user's approximate position. The differential data includes the plane coordinates of the reference station or virtual reference station and the geodetic height H. GNSS At the same time, the broadcast server requests the servers storing the digital elevation reference submodel to obtain the elevation anomaly components respectively. The k servers decrypt the digital elevation reference submodel, use the elevation anomaly interpolation algorithm to calculate the digital elevation reference submodel grid according to the user's approximate location, and use the four corner point values ​​of the grid to calculate the elevation anomaly component N. k Return to the advertisement server.

[0080] Step 5: The broadcast server combines all the collected elevation anomaly components into elevation anomaly, uses the elevation anomaly to correct the geodetic height in the received differential data to obtain the normal height, and broadcasts it to the user terminal, specifically including:

[0081] The broadcast server sends k elevation anomaly components N k Combined into elevation anomaly N, the calculation method is as follows:

[0082] N=∑N k

[0083] The calculated elevation anomaly is used to correct the base station geodetic height H in the differential data sent by the received network RTK server. GNSS Get the normal height h of the base station, calculated as follows:

[0084] h=H GNSS -N

[0085] The differential data is re-encoded to obtain differential data including the normal height of the reference station, and the differential data is sent to a user terminal. The user terminal receives the differential data including the normal height of the reference station and the satellite navigation positioning data sent by the broadcast server. The user terminal uses the differential data including the normal height of the reference station and the received satellite navigation positioning data to perform real-time dynamic solution to obtain the normal height of the user's location. The dynamic solution adopts an existing GNSS measurement method. Specific embodiment 2:

[0087] See also Figure 1 As shown, the characteristic of this specific embodiment is a system based on a hierarchical encryption real-time normal high service method described in this specific embodiment 1, including a user terminal, a broadcast server, a network RTK server, and multiple independent servers. In this specific embodiment: the independent server adopts a cloud server. The broadcast server communicates with the user terminal, the network RTK server and each independent server through a communication unit to receive and send information. The communication unit includes a wireless communication unit and a wired communication unit.

[0088] Each of the servers is internally provided with a data processing module of a decryption algorithm and an elevation anomaly interpolation algorithm, which is used to store k encrypted digital elevation reference sub-models obtained by layering and stripping the digital elevation reference model in the intranet, and to perform decryption and elevation anomaly component analysis.

[0089] The broadcast server deploys a data leakage prevention module, which is used to receive user requests, verify user permissions, identify abnormal user behavior and prevent data leakage, send a request to the network RTK server to obtain differential data and send a request to the independent server to obtain elevation anomaly components, and merge all the collected elevation anomaly components into elevation anomaly, use the elevation anomaly to correct the geoid height in the received differential data to obtain the normal height, and broadcast it to the user terminal;

[0090] Specifically, it includes: using the elevation anomaly to correct the geodetic height of the reference station in the differential data to obtain the normal height of the reference station, and using the normal height of the reference station to replace the geodetic height H in the differential data. GNSS , re-encode the differential data and broadcast it to the user terminal.

[0091] In addition to general user management and service functions, the data leakage prevention module is also used to verify whether the user account has real-time normal high service permissions, and to determine whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high permissions based on the user request and the approximate location information sent by the user.

[0092] The network RTK server is used to receive the differential data request from the broadcast server, generate differential data, and send the differential data to the broadcast server;

[0093] The user terminal is used to send a request for differential data to the broadcast server, and receive the differential data containing the normal height of the reference station and the satellite navigation positioning data sent by the broadcast server, and use the differential data containing the normal height of the reference station and the satellite navigation positioning data to perform real-time dynamic calculation to obtain the normal height of the user's location. Other features are the same as those in the specific example 1, so this specific embodiment is omitted here and will not be described again.

[0094] The technical solution provided by the present invention is described in detail above. Specific examples are used herein to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. It should be pointed out that for ordinary technicians in this technical field, without departing from the principle of the present invention, the present invention can also be improved and modified in a number of ways, and these improvements and modifications also fall within the scope of protection of the claims of the present invention.

Claims

1. A hierarchical encryption real-time normal high service method, characterized by: The steps include: Step 1: Layering and stripping the digital elevation reference model into k digital elevation reference sub-models, and encrypting the digital elevation reference sub-models respectively; Step 2: storing the encrypted digital elevation benchmark sub-models on multiple independent servers respectively, and deploying a decryption algorithm and an elevation anomaly interpolation algorithm; Step 3: Set up a broadcast server and a network RTK server, and deploy a data leakage prevention module on the broadcast server to receive user requests, verify user permissions, identify abnormal user behavior, and prevent data leakage; Step 4: The user terminal requests a service from the broadcast server. When the broadcast server receives the request sent by the user terminal and the user passes the verification, the broadcast server sends a request to the network RTK server to obtain differential data; at the same time, the broadcast server sends a request to the server storing each digital elevation benchmark submodel to obtain an elevation anomaly component; Step 5: The broadcast server combines all the collected elevation anomaly components into elevation anomaly, uses the elevation anomaly to correct the geoid height in the received differential data to obtain the normal height, and broadcasts it to the user terminal.

2. A layered encryption real-time normal high service method according to claim 1, characterized in that: The step 1 specifically includes: Step 1.1: First, the calculation method of layering and stripping the digital elevation benchmark model into k digital elevation benchmark sub-models is as follows: The digital elevation benchmark model with m rows and n columns is denoted as E: The sub-model after stripping is recorded as E i : The random number matrix is ​​denoted as R i : in To pick a random number between the maximum and minimum values ​​of the elements of E; The digital elevation benchmark model is stripped into k digital elevation benchmark sub-models: Step 1.2: Use an encryption algorithm to encrypt the k digital elevation benchmark sub-models to generate k encrypted digital elevation benchmark sub-models and k secret keys.

3. A layered encryption real-time normal high service method according to claim 1, characterized in that: The step 2 specifically includes: The encrypted k digital elevation benchmark sub-models are stored on k independent servers respectively; A decryption algorithm and an elevation anomaly interpolation algorithm are deployed on k independent servers. The decryption algorithm has k built-in secret keys, which can decrypt the encrypted digital elevation benchmark sub-model; the elevation anomaly interpolation algorithm can calculate the elevation anomaly component according to the user's approximate location and the grid corner point value of the digital elevation benchmark sub-model where the user is located.

4. A layered encryption real-time normal high service method according to claim 1, characterized in that: The step 3 specifically includes: A broadcast server and a network RTK server are set up, and a data leakage prevention module is deployed in the broadcast server. The broadcast server receives user requests and GGA data information sent by users, and parses the user's approximate location; the data leakage prevention module performs user management services and verifies whether the user account has real-time normal high service permissions, and determines whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high according to the user request and the approximate location information sent by the user.

5. A layered encryption real-time normal high service method according to claim 4, characterized in that: The data leakage prevention method of the data leakage prevention module specifically includes: Step 3.1, User authority control: limit the user's working time and working area, and open real-time normal high-speed services only for specific users or users with relevant qualifications; Step 3.2, user abnormal behavior identification strategy: set a frequency threshold, when the user request frequency exceeds the threshold, it can be determined as a suspected abnormality; set a speed threshold, when the user terminal movement speed exceeds the threshold, it can be determined as a suspected abnormality; user trajectory distribution presents or approximates a regular grid or triangulated network, it can be determined as a suspected abnormality; user terminal location during use has poor continuity and jumps showing a certain regularity, it can be determined as a suspected abnormality; Step 3.3, user exception handling: Use manual analysis to verify whether the suspected abnormal users maliciously obtain normal highs. After verification, the users who obtain normal highs maliciously will have their services terminated. After verification, the users who obtain normal highs normally will continue to be served.

6. A layered encryption real-time normal high service method according to claim 1, characterized in that: The step 4 specifically includes: The user terminal requests a service from the broadcast server. The broadcast server receives the request sent by the user terminal. After the broadcast server verifies the user's authority and identifies abnormal behavior, the broadcast server requests the network RTK server for corresponding differential data according to the user's approximate position. The differential data includes the plane coordinates of the reference station or virtual reference station and the geodetic height H. GNSS At the same time, the broadcast server requests the servers storing the digital elevation benchmark submodels to obtain the elevation anomaly components respectively. Each server decrypts the digital elevation benchmark submodels, uses the elevation anomaly interpolation algorithm to calculate the grid according to the user's approximate location, and uses the four corner point values ​​of the grid of the digital elevation benchmark submodel to calculate the elevation anomaly component N. k Return to the advertisement server.

7. A layered encryption real-time normal high service method according to claim 1, characterized in that: The step 5 specifically includes: The broadcast server sends k elevation anomaly components N k Combined into elevation anomaly N, the calculation method is as follows: N=∑N k The calculated elevation anomaly is used to correct the base station geodetic height H in the differential data sent by the received network RTK server. GNSS Get the normal height h of the base station, calculated as follows: h=H GNSS -N The differential data is re-encoded to obtain differential data including the normal height of the base station, and sent to the user terminal; the user terminal receives the differential data including the normal height of the base station and the satellite navigation positioning data sent by the broadcast server, and uses the differential data including the normal height of the base station and the received satellite navigation positioning data to perform real-time dynamic calculation to obtain the normal height of the user's location.

8. A system based on a layered encryption real-time normal high service method according to any one of claims 1 to 7, characterized in that: Including user terminals, broadcast servers, network RTK servers, and multiple independent servers. Each of the servers is internally provided with a data processing module of a decryption algorithm and an elevation anomaly interpolation algorithm, which is used to store k encrypted digital elevation reference sub-models obtained by layering and stripping the digital elevation reference model, and to perform decryption and elevation anomaly component analysis; The broadcast server deploys a data leakage prevention module, which is used to receive user requests, verify user permissions, identify abnormal user behavior and prevent data leakage, send a request to the network RTK server to obtain differential data and send a request to the independent server to obtain elevation anomaly components, and merge all the collected elevation anomaly components into elevation anomaly, use the elevation anomaly to correct the geoid height in the received differential data to obtain the normal height, and broadcast it to the user terminal; The network RTK server is used to receive the differential data request from the broadcast server, generate differential data, and send the differential data to the broadcast server; The user terminal is used to send a request differential data to the broadcast server to obtain the normal height of the user's location.

9. The system of the hierarchical encryption real-time normal high service method according to claim 8, characterized in that: The data leakage prevention module is used for user management services, verifies whether the user account has real-time normal high service permissions, and determines whether the user behavior is abnormal and whether there is malicious behavior to obtain normal high according to the user request and the approximate location information sent by the user.

10. The system of the hierarchical encryption real-time normal high service method according to claim 8, characterized in that: The broadcast server is used to correct the reference station geodetic height in the differential data using the elevation anomaly to obtain the reference station normal height, and use the reference station normal height to replace the geodetic height H in the differential data. GNSS , re-encode the differential data and broadcast it to the user terminal; The user terminal is used to receive the differential data containing the normal height of the reference station and the satellite navigation positioning data sent by the broadcast server, and use the differential data containing the normal height of the reference station and the satellite navigation positioning data to perform real-time dynamic calculation to obtain the normal height of the user's location.

Images