Remote sensing satellite data encryption distribution and link monitoring system in a local area network

Abstract

The application provides a remote sensing satellite data encryption distribution and link monitoring system in a local area network, wherein: a data encryption distribution module is used for encrypting and distributing remote sensing satellite files based on distribution tasks in the local area network, wherein the distribution tasks are queued in a distribution queue; a link monitoring module is used for providing distribution links to the data encryption distribution module and monitoring state information of the distribution links in a remote sensing satellite file transmission process; a multi-thread module is used for making the remote sensing satellite files in the data encryption distribution module transmit in parallel along multiple distribution links and making monitoring threads in the link monitoring module run in parallel; a cache module is used for caching parameters of the system, information of the distribution queue and state information of the distribution links; and a persistence module is used for persistently storing function item configuration information of the link monitoring module and distribution strategy configuration information in the data encryption distribution module, respectively.

Description

Technical Field

[0001] The present invention relates to the technical field of digital information transmission, and in particular to a remote sensing satellite data encryption distribution and link monitoring system in a local area network. Background Art

[0002] With the rapid development of aerospace technology, satellite remote sensing applications have gradually shifted towards marketization and industrialization. In this process, the application of satellite remote sensing data products has also become more systematic, comprehensive, and personalized. To meet users' increasingly complex application needs, not only high-quality remote sensing imagery products but also comprehensive and complete satellite remote sensing imagery application systems are needed.

[0003] Currently, this system includes multiple components, including a satellite mission planning subsystem, a remote sensing data reception subsystem, a remote sensing data processing subsystem, and a remote sensing data application subsystem. However, these subsystems cannot efficiently and accurately transmit and share remote sensing data, which limits the efficient execution of distribution tasks and makes it difficult to meet the requirements for remote sensing data timeliness and availability.

[0004] Furthermore, data encryption is not given sufficient attention or requirements in current system designs, which results in the distribution process and data being transparent to all nodes in the chain, making them highly vulnerable to malicious attacks and data leaks. Summary of the Invention

[0005] (1) Technical issues to be resolved

[0006] In response to the above-mentioned shortcomings, the main purpose of the present invention is to provide a remote sensing satellite data encryption distribution and link monitoring system in a local area network. The system can quickly complete the real-time distribution of various types of data in satellite remote sensing application scenarios, ensure the security and confidentiality of remote sensing data during transmission and distribution, and at the same time monitor the link occupancy in the local area network in real time and complete automatic optimization of data distribution links.

[0007] (2) Technical solution

[0008] To achieve the above-mentioned object, the present invention provides a remote sensing satellite data encryption distribution and link monitoring system in a local area network, comprising a data encryption distribution module, a link monitoring module, a multi-thread module, a cache module and a persistence module, wherein: the data encryption distribution module is used to encrypt and distribute remote sensing satellite files based on distribution tasks in the local area network, wherein all distribution tasks are queued in a distribution queue; the link monitoring module is used to provide a distribution link to the data encryption distribution module and monitor the status information of the distribution link during the transmission of the remote sensing satellite files; the multi-thread module is used to enable the remote sensing satellite files in the data encryption distribution module to be transmitted in parallel along multiple distribution links, and to enable the monitoring threads in the link monitoring module to run in parallel; the cache module is used to cache system parameters, distribution queue information and distribution link status information; and the persistence module is used to persistently store the function item configuration information of the link monitoring module and the distribution strategy configuration information in the data encryption distribution module.

[0009] In the above scheme, the data encryption distribution module includes: a distribution strategy configuration unit, which is used to complete the configuration of the distribution strategy and generate a distribution task based on the folder content, information to be filtered and destination information to be distributed input by the user, where the distribution task includes remote sensing satellite files; a distribution strategy monitoring unit, which is used to monitor the configuration process of the distribution strategy; and a distribution filtering unit, which is used to filter the information to be filtered in the distribution task.

[0010] In the above scheme, the data encryption and distribution module also includes: a data encryption unit, which is used to encrypt remote sensing satellite files using an encryption distribution algorithm composed of a symmetric encryption algorithm, an asymmetric encryption algorithm and a hash algorithm; and a data distribution unit, which is used to transmit the encrypted remote sensing satellite files to the target device along multiple distribution links.

[0011] In the above scheme, the link monitoring module includes: a function item configuration unit, which is used to provide function item configuration information to complete server configuration, node configuration and link configuration respectively; a link monitoring unit, which is used to monitor the real-time load information of the distribution link during the remote sensing satellite file transmission process based on the node configuration and link configuration, and display the path of the distribution link.

[0012] In the above scheme, the link monitoring module also includes: a link evaluation unit, which is used to perform performance analysis based on real-time load information to obtain performance indicators, and perform load evaluation based on the performance indicators to obtain status information of the distribution link; a link optimization unit, which is used to determine the target distribution link through an optimization algorithm based on the status information and performance indicators; a link alarm unit, which is used to issue an alarm when it detects that the performance indicators of the distribution link have dropped or the load exceeds a preset threshold; and a link switching unit, which is used to switch the distribution link based on the triggering of the alarm.

[0013] In the above solution, the link monitoring module further includes: a network access unit, which is used to add the target node to the local area network by automatically searching for information of surrounding adjacent nodes after the system is deployed based on any target node.

[0014] In the above scheme, the multi-thread module includes a thread pool, wherein the thread pool dynamically adjusts the parallel transmission of remote sensing satellite files in the data encryption distribution module and the parallel operation of monitoring threads in the link monitoring module by configuring the number of core threads and the thread number threshold.

[0015] In the above scheme, when the number of tasks to be distributed in the local area network is greater than the thread number threshold, the thread pool issues a rejection and puts the tasks to be distributed into the distribution queue for re-execution or performs exception processing.

[0016] In the above scheme, the encryption distribution algorithm includes the XChaCha20 symmetric encryption algorithm, the RSA asymmetric encryption algorithm and the BLAKE3 hash function.

[0017] In the above scheme, when each new distribution task is started, the link monitoring module will determine the target distribution link through the optimization algorithm and send it to the data encryption distribution module.

[0018] (3) Beneficial effects

[0019] The technical solution of the embodiment of the present invention has at least the following beneficial effects:

[0020] (1) The system is not only suitable for the transmission of raw code stream data, but also covers various types of satellite remote sensing data such as image product data. This wide applicability enables the system to play a role in a variety of different application scenarios and effectively meet all of them.

[0021] (2) The system ensures high security of remote sensing satellite data during transmission and storage by combining symmetric encryption algorithms and public key encryption algorithms. At the same time, the encryption key is hashed using a hash function to further enhance the integrity and authenticity of the data.

[0022] (3) The data encryption distribution module adopts multi-threading technology, which significantly improves the efficiency and stability of data transmission.

[0023] (4) The link monitoring module's link optimization capability can dynamically distribute tasks based on real-time load conditions, optimize transmission efficiency, and ensure maximum resource utilization. In addition, the link monitoring module can promptly detect and resolve link failures by monitoring indicators such as latency, packet loss rate, and bandwidth utilization during data transmission in real time. At the same time, the link monitoring module has the ability to automatically recover from failures. Once a link failure is detected, it can automatically switch to a backup link, thereby ensuring system continuity and availability.

[0024] (5) The system architecture is designed as a distributed architecture with good scalability and flexibility. It has the function of automatic node access to the network. It can increase or decrease nodes according to actual needs, adjust the system scale, and meet different application scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 The framework diagram of the remote sensing satellite data encryption distribution and link monitoring system in the local area network according to an embodiment of the present invention is schematically shown. DETAILED DESCRIPTION

[0026] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present invention. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of embodiments of the present invention. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concept of the present invention.

[0027] The terms used herein are only for describing specific embodiments and are not intended to limit the present invention. The terms "comprise," "include," etc. used herein indicate the presence of features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0028] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0029] When expressions such as "at least one of A, B, and C, etc." are used, they should generally be interpreted in accordance with the meaning commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0030] The accompanying drawings illustrate certain block diagrams and / or flow charts. It should be understood that some blocks in the block diagrams and / or flow charts, or combinations thereof, may be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when executed by the processor, these instructions create a device for implementing the functions / operations described in the block diagrams and / or flow charts. The techniques of the present invention may be implemented in the form of hardware and / or software (including firmware, microcode, etc.). Furthermore, the techniques of the present invention may take the form of a computer-readable storage medium storing instructions, which stores executable instructions that, when executed by the processor, cause the processor to perform the methods of the present invention.

[0031] In the technical solution of the present invention, the user information (including but not limited to user personal information, user image information, user device information, such as location information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, invention and application of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0032] Figure 1 The following schematically shows a framework diagram of a remote sensing satellite data encryption distribution and link monitoring system in a local area network according to an embodiment of the present invention. Figure 1 , the remote sensing satellite data encryption distribution and link monitoring system in the local area network is described in detail.

[0033] Please refer to Figure 1 In an embodiment of the present invention, the remote sensing satellite data encryption distribution and link monitoring system 100 in the local area network adopts a distributed architecture, specifically including a data encryption distribution module 110, a link monitoring module 120, a multi-threading module 130, a cache module 140 and a persistence module 150.

[0034] In the embodiment of the present invention, the data encryption distribution module 110 is used to encrypt and distribute remote sensing satellite files based on distribution tasks in the local area network, wherein the distribution tasks are queued in a distribution queue.

[0035] like Figure 1 As shown, the data encryption distribution module 110 includes a distribution policy configuration unit 1101 , a distribution policy monitoring unit 1102 , a distribution filtering unit 1103 , a data encryption unit 1104 , and a data distribution unit 1105 .

[0036] The distribution policy configuration unit 1101 is used to configure the distribution policy and generate a distribution task based on user input of the folder contents to be distributed, the information to be filtered, and the destination information. The distribution task includes remote sensing satellite files. The distribution policy monitoring unit 1102 is used to monitor the distribution policy configuration process. The distribution filtering unit 1103 is used to filter the information to be filtered in the distribution task. The data encryption unit 1104 is used to encrypt the remote sensing satellite files using an encryption distribution algorithm composed of symmetric encryption algorithms, asymmetric encryption algorithms, and hash algorithms. The data distribution unit 1105 is used to transmit the encrypted remote sensing satellite files along multiple distribution links to the target device.

[0037] Specifically, the data encryption distribution module 110's distribution policy configuration function (i.e., distribution policy configuration unit 1101) allows users to input the folder contents, filtering information, and destination information to be distributed. Once the configuration is complete, a distribution task is generated. The distribution task may include files such as remote sensing satellite data.

[0038] It should be noted that the distribution strategy monitoring unit 1102 will monitor according to the user's configured strategy. When there is a file to be sent or a change, it will trigger the subsequent filtering and sending process. At the same time, this module provides a real-time monitoring page for file distribution, which can monitor the file information being sent in real time.

[0039] The data encryption unit 1104 and the data distribution unit 1105 encrypt and distribute the remote sensing satellite data, respectively, to ensure the secure transmission and storage of the data. The data encryption unit 1104 uses a combination of symmetric and asymmetric encryption algorithms to encrypt and decrypt data by generating and managing key pairs, as described below:

[0040] To ensure data confidentiality and integrity, data encryption unit 1104 implements an efficient remote sensing satellite data encryption and distribution algorithm. This algorithm cleverly combines the XChaCha20 symmetric encryption algorithm, the RSA asymmetric encryption algorithm, and the BLAKE3 hash function, ensuring both efficient encryption and enhanced data security.

[0041] During the startup phase, the data encryption unit 1104 generates a pair of public and private keys for the RSA encryption algorithm. This pair of keys plays a crucial role in the subsequent encryption and decryption processes. The public key is used to encrypt data, ensuring that only the recipient holding the corresponding private key can decrypt and access the original data; the private key is used to decrypt the data, ensuring its confidentiality. For example, to improve the security and efficiency of data distribution, the files to be distributed are first compressed to reduce their size and then broken down into multiple small packets. These packets are encrypted using asymmetric encryption technology, retaining only the public key of the endpoint. Therefore, during data transmission, only the endpoint can decrypt the data, effectively preventing other nodes in the link from illegally reading the data.

[0042] When transmitting remote sensing satellite data, the encrypted distribution algorithm first calculates a hash value for the satellite data using the BLAKE3 hashing algorithm to verify data integrity. As a next-generation hash function, BLAKE3 offers excellent performance and security. The data is then encrypted using the XChaCha20 symmetric encryption algorithm. With its exceptional performance and security, XChaCha20 effectively resists various known attacks during the encryption process. Furthermore, by expanding the size of non-key inputs, each key can securely encrypt more data, meeting the needs of large-scale transmission of remote sensing satellite data.

[0043] After data encryption is complete, the encryption distribution algorithm hashes the encryption key using the BLAKE3 hash function. These functions can quickly generate unique hash values ​​for encryption keys, ensuring the integrity and authenticity of the keys during transmission.

[0044] The encrypted data, hash checksum, and hashed encryption key are then transmitted to the target device by the data distribution unit 1105. During the first communication handshake with the target device, the target device sends the public key of the RSA encryption algorithm, which is used to asymmetrically encrypt the data encryption key from the previous step and then sends it to the target device. After receiving the data, the target device first decrypts the encryption key using the RSA algorithm private key to obtain the original encryption key. The decrypted key is then used to decrypt the encrypted data, thereby recovering the original remote sensing satellite data.

[0045] This encrypted distribution algorithm ensures the security of remote sensing satellite data during transmission and storage. Whether facing external attacks or internal leaks, the algorithm provides strong protection, ensuring data confidentiality and integrity are not compromised, and ensuring that data is not tampered with during transmission. Furthermore, its efficient encryption and decryption processes ensure real-time data transmission and availability, meeting the practical needs of remote sensing satellite data distribution.

[0046] It should be noted that the data encryption distribution module 110 uses multi-threading technology to transmit the encrypted remote sensing satellite files to the target device along multiple distribution links, thereby improving the efficiency and stability of data transmission.

[0047] In an embodiment of the present invention, the link monitoring module 120 is used to provide a distribution link to the data encryption distribution module 110 and monitor the status information of the distribution link during the remote sensing satellite file transmission process.

[0048] like Figure 1 As shown, the link monitoring module 120 includes a function item configuration unit 1201 , a link monitoring unit 1202 , a link evaluation unit 1203 , a link optimization unit 1204 , a link alarm unit 1205 , a link switching unit 1206 and a network access unit 1207 .

[0049] Among them, the function item configuration unit 1201 is used to provide function item configuration information to complete server configuration, node configuration and link configuration respectively. The link monitoring unit 1202 is used to monitor the real-time load information of the distribution link during the remote sensing satellite file transmission process based on the node configuration and link configuration, and display the path of the distribution link. The link evaluation unit 1203 is used to perform performance analysis based on the real-time load information to obtain performance indicators, and to perform load evaluation based on the performance indicators to obtain the status information of the distribution link. The link optimization unit 1204 is used to determine the target distribution link through an optimization algorithm based on the status information and performance indicators. The link alarm unit 1205 is used to issue an alarm when it detects that the performance indicator of the distribution link has dropped or the load has exceeded a preset threshold. The link switching unit 1206 is used to switch the distribution link based on the alarm trigger. The network access unit 1207 is used to automatically search for information about surrounding adjacent nodes to add the target node to the local area network after the system is deployed on any target node.

[0050] In the embodiment of the present invention, the core of the link monitoring module 120 is to monitor the health status and performance of the data transmission link in real time. At the same time, the module also has the ability to distribute tasks and optimize links according to the link load.

[0051] Specifically, based on the configuration of the node and the configuration of the link, the link monitoring unit 1202 in the link monitoring module 120 regularly sends detection packets and collects load information. In the link monitoring unit 1202, the source device not only sends detection packets to the target device at preset time intervals to measure the performance of the link, but also collects the load information of the link. The load information can include, for example, key indicators such as the bandwidth utilization, packet queue length, and packet loss rate of the current link. These data provide important decision-making basis for subsequent distribution link optimization and task distribution. In addition, the link monitoring unit 1202 also provides a link viewing function. By clicking on a link, you can view information such as the link direction on the map.

[0052] In the link evaluation unit 1203, the target device returns a response packet after receiving the detection packet. The source device calculates the link's performance indicators such as delay, jitter and bandwidth by analyzing the timestamp, sequence number and load information in these response packets. These indicators reflect the current status and performance of the link and are important inputs to the link optimization algorithm. The link evaluation unit 1203 continuously monitors the status of the distribution link and performs load evaluation based on the collected load information. The purpose of load evaluation is to determine the load status of the current link and whether there are sufficient resources to handle additional data transmission tasks. If the load of a link is close to or has reached its maximum capacity, the system needs to find other available links to share the load.

[0053] Based on the status and performance indicators of the link, the link optimization unit 1204 runs an optimization algorithm to select the best transmission path. For example, a graph data structure is used to store network topology information, and the Dijkstra algorithm is used to optimize the path. The network load information and information such as the network packet loss rate are comprehensively evaluated as the weight information of a certain edge in the network topology structure. This weight information is used to calculate the optimal route for the Dijkstra algorithm. These algorithms may consider multiple factors, such as the link's bandwidth, delay, jitter, packet loss rate, and current load status. By comparing the comprehensive performance indicators of different links, the system can select the target distribution link (that is, the optimal transmission path) and distribute tasks to these optimal transmission paths.

[0054] It should be noted that when each new distribution task is started, the link monitoring module 120 will determine the target distribution link through the optimization algorithm and send it to the data encryption distribution module 110 .

[0055] During task distribution, the link monitoring module 120 also needs to consider load balancing. It should avoid assigning too many tasks to already heavily loaded links and try to evenly distribute tasks across available links to achieve balanced load distribution and maximize resource utilization.

[0056] If link performance degradation, excessive load, or even a failure is detected, the link alarm unit 1205 will sound an alarm, and the link switching unit 1206 will automatically switch the current distribution link to a backup link or re-optimize the link and redistribute tasks. This dynamic adjustment capability enables the system to respond to network changes in real time, maintaining stable and reliable data transmission.

[0057] The embodiments of the present invention implement a real-time monitoring mechanism for distribution tasks on links within a local area network. Whenever a new distribution task is initiated, link monitoring module 120 instantly reads the relevant monitoring data and, through precise analysis, determines the real-time load status of each link between the task's starting point and endpoint. Based on this load data, link monitoring module 120 intelligently allocates transmission tasks to ensure efficient task execution and optimal resource allocation.

[0058] This module also features automatic network access. After any target node deploys the system, its network access unit 1207 automatically searches for information about neighboring nodes and adds the target node to the local area network (LAN). For example, after any new node deploys the system, the LAN broadcast function of the network access unit 1207 in the link monitoring module 120 automatically broadcasts metadata about surrounding nodes (including core communication information such as IP addresses and TCP ports) via the UDP protocol. It then synchronizes network information (edge ​​and node information within the network topology, used to maintain the network topology) with surrounding nodes via the TCP protocol, allowing the node to automatically join the LAN and automatically monitor the heartbeat information of synchronized devices. This not only simplifies the network configuration process but also enhances the network's flexibility and scalability, enabling the LAN to quickly adapt to various changing scenarios.

[0059] The embodiments of the present invention can effectively improve the efficiency and security of task distribution in a local area network, while enhancing the dynamic adaptability of the network, and provide strong technical support for practical application scenarios.

[0060] It should be noted that the monitoring threads of the various units in the link monitoring module 120 can all run in parallel.

[0061] By integrating link load management and optimization functions, the link monitoring module 120 not only monitors the status and performance of data transmission links in real time, but also intelligently distributes tasks and selects paths based on the real-time load of the links. This capability enhances the flexibility and efficiency of the data transmission network, ensuring efficient and stable data transmission in complex network environments.

[0062] In the embodiment of the present invention, the multi-thread module 130 is used to enable the remote sensing satellite files in the data encryption distribution module 110 to be transmitted in parallel along multiple distribution links, and to enable the monitoring threads in the link monitoring module 120 to run in parallel.

[0063] Specifically, the multi-threading module 130 is primarily responsible for managing system tasks that need to run in parallel within the system and concurrent file transfer tasks. The multi-threading module 130 includes a thread pool. By configuring the number of core threads and a thread threshold, the thread pool dynamically adjusts the parallel transmission of remote sensing satellite files in the data encryption and distribution module 110 and the parallel execution of monitoring threads in the link monitoring module 120. When the number of pending tasks on the local area network exceeds the thread threshold, the thread pool issues a rejection and places the pending tasks into a distribution queue for re-execution or performs exception handling.

[0064] In this embodiment of the present invention, cache module 140 is used to cache system parameters, distribution queue information, and distribution link status information. For example, if information such as distribution queue information and network link status needs to be frequently updated, cache module 140 can be used to cache information to improve data query efficiency.

[0065] In the embodiment of the present invention, the persistence module 150 is used to persistently store the function item configuration information of the link monitoring module 120 and the distribution policy configuration information in the data encryption distribution module 110 respectively.

[0066] Exemplarily, the persistence module 150 can be used to persist information that needs to be stored on disk. For example, configuration information such as servers, nodes, and links in link monitoring and the distribution policy configuration of the data encryption distribution module 110 can all be persistently stored to ensure that data is not lost when the system is shut down and restarted.

[0067] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functions and operations that may be implemented according to the systems and methods of various embodiments of the present invention. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the above-mentioned module, program segment, or a part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0068] Those skilled in the art will appreciate that various combinations and / or combinations of features described in the various embodiments and / or claims of the present invention may be made, even if such combinations or combinations are not explicitly described in the present invention. In particular, various combinations and / or combinations of features described in the various embodiments and / or claims of the present invention may be made, without departing from the spirit and teachings of the present invention. All such combinations and / or combinations fall within the scope of the present invention.

[0069] The above describes embodiments of the present invention. However, these embodiments are for illustrative purposes only and are not intended to limit the scope of the present invention. Although each embodiment has been described separately above, this does not mean that the measures in each embodiment cannot be advantageously used in combination. The scope of the present invention is defined by the appended claims and their equivalents. Without departing from the scope of the present invention, those skilled in the art may make various substitutions and modifications, which should all fall within the scope of the present invention.

Claims

1. A remote sensing satellite data encryption distribution and link monitoring system in a local area network, characterized in that: It includes data encryption and distribution module, link monitoring module, multi-threading module, cache module and persistence module, among which; A data encryption and distribution module is used to encrypt and distribute remote sensing satellite files based on distribution tasks in a local area network, wherein the distribution tasks are queued in a distribution queue; A link monitoring module, configured to provide a distribution link to the data encryption distribution module and monitor status information of the distribution link during the remote sensing satellite file transmission process; a multi-thread module, configured to enable the remote sensing satellite files in the data encryption distribution module to be transmitted in parallel along a plurality of the distribution links, and to enable the monitoring threads in the link monitoring module to run in parallel; a cache module, configured to cache the system parameters, the information of the distribution queue, and the status information of the distribution link; A persistence module, configured to persistently store the function item configuration information of the link monitoring module and the distribution strategy configuration information in the data encryption distribution module respectively; The data encryption distribution module includes: A distribution strategy configuration unit, configured to complete the configuration of the distribution strategy and generate a distribution task based on the folder content to be distributed, the information to be filtered, and the destination information input by the user, wherein the distribution task includes remote sensing satellite files; A distribution policy monitoring unit, configured to monitor the configuration process of the distribution policy; A distribution filtering unit, configured to filter the information to be filtered in the distribution task; The multi-thread module includes a thread pool, wherein; The thread pool dynamically adjusts the parallel transmission of remote sensing satellite files in the data encryption distribution module and the parallel operation of monitoring threads in the link monitoring module by configuring the number of core threads and the thread number threshold; When the number of tasks to be distributed in the local area network is greater than the thread number threshold, the thread pool issues a rejection and puts the tasks to be distributed into a distribution queue for re-execution or performs exception processing.

2. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 1, characterized in that: The data encryption distribution module also includes: A data encryption unit, configured to encrypt the remote sensing satellite file using an encryption distribution algorithm composed of a symmetric encryption algorithm, an asymmetric encryption algorithm, and a hash algorithm; The data distribution unit is used to transmit the encrypted remote sensing satellite file to the target device along the multiple distribution links.

3. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 1, characterized in that: The link monitoring module includes: Function item configuration unit, used to provide function item configuration information to complete server configuration, node configuration and link configuration respectively; The link monitoring unit is used to monitor the real-time load information of the distribution link during the remote sensing satellite file transmission process based on the configuration of the node and the configuration of the link, and display the path of the distribution link.

4. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 3, characterized in that: The link monitoring module also includes: a link evaluation unit, configured to perform a performance analysis based on the real-time load information to obtain a performance indicator, and perform a load evaluation based on the performance indicator to obtain status information of the distribution link; A link optimization unit, configured to determine a target distribution link through an optimization algorithm based on the state information and performance indicators; a link alarm unit, configured to issue an alarm when detecting that a performance indicator of the distribution link decreases or a load exceeds a preset threshold; The link switching unit is configured to switch the distribution link based on triggering of the alarm.

5. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 1 or 3, characterized in that: The link monitoring module also includes: The network access unit is used to deploy the system based on any target node and add the target node to the local area network by automatically searching for information of surrounding adjacent nodes.

6. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 2, characterized in that: The encryption distribution algorithm includes the XChaCha20 symmetric encryption algorithm, the RSA asymmetric encryption algorithm and the BLAKE3 hash function.

7. The remote sensing satellite data encryption distribution and link monitoring system in a local area network according to claim 4, characterized in that: When each new distribution task is started, the link monitoring module determines the target distribution link through an optimization algorithm and sends it to the data encryption distribution module.

Images