Remote sensing image data distribution method and service engine system based on authority control

Abstract

The present invention discloses a remote sensing image data distribution method and service engine system based on authority control, the method comprising: reading remote sensing image data to be processed; performing band separation on the remote sensing image data to be processed to obtain a plurality of band data; after processing each band file according to different resolutions, encrypting the band files of different resolutions to compress and store them in sequence according to the band identifier to obtain a remote sensing image encryption package and distributing the remote sensing image encryption package to a plurality of clients, the clients having initial authority; in response to receiving an authority request message sent by a client, sending a corresponding temporary key to the client, the temporary key being used to decrypt at least one band file in the remote sensing image encryption package, the temporary key being determined according to the client authority. The present invention can achieve real-time band expansion and real-time resolution expansion, and dynamically detect the client status, thereby avoiding the risk of authority confusion and data leakage.

Description

Technical Field

[0001] The present invention belongs to the field of remote sensing image processing, and in particular relates to a remote sensing image data distribution method and a service engine system based on authority control. Background Art

[0002] As an important means of obtaining information about the earth's surface, remote sensing technology is widely used in resource surveys, environmental monitoring, disaster warning, etc. With the rapid development of remote sensing technology, the resolution of remote sensing image data is constantly improving, and the amount of data is also increasing.

[0003] Due to the multi-band and multi-resolution characteristics of remote sensing data, a large amount of resources are required for both storage and display. In addition, for different application scenarios, different client terminals will have multiple data access requirements. In order to meet different requirements, different data versions need to be prepared at the same time, which makes storage more difficult, and multiple versions also reduce data processing efficiency. Summary of the invention

[0004] In order to solve the above problems existing in the prior art, the present invention provides a remote sensing image data distribution method and service engine system based on authority control. The technical problem to be solved by the present invention is achieved through the following technical solutions:

[0005] A remote sensing image data distribution method based on authority control, applied to the server side, includes:

[0006] Read remote sensing image data to be processed;

[0007] Performing band separation on the remote sensing image data to be processed to obtain a plurality of band data, wherein the band data includes a band file and a band identifier, and the band identifier includes a field for identifying a band order, a field for identifying a band wavelength, a field for identifying a resolution, and a field for identifying a separation time;

[0008] After processing each band file according to different resolutions, encrypting the band files of different resolutions to compress and store them in sequence according to the band identifiers to obtain a remote sensing image encryption package and distributing the remote sensing image encryption package to a number of clients, the clients having initial permissions;

[0009] In response to receiving a permission request message sent by the client, a corresponding temporary key is sent to the client, where the temporary key is used to decrypt at least one band file in the remote sensing image encryption package, and the temporary key is determined according to the client's permissions.

[0010] In a specific implementation, in response to receiving a permission request message sent by a client, sending a corresponding temporary key to the client includes:

[0011] Determine the user ID, user authority, authority validity period and specific timestamp according to the user token in the authority request message, wherein the user authority includes band display authority and resolution display authority, and the specific timestamp is generated when the client creates a thread for the remote sensing image encryption package based on the initial authority;

[0012] When it is determined that the specific timestamp is consistent with the stored preset timestamp, a temporary key matching the user authority is generated, and the temporary key is used to decrypt the band file of the corresponding resolution;

[0013] The temporary key is sent to the corresponding client.

[0014] In a specific implementation, when it is determined that the specific timestamp is inconsistent with the stored preset timestamp, a remote sensing image encryption package is regenerated, and a data packet update message is sent to the client so that the client updates the new remote sensing image encryption package to replace the previous remote sensing image encryption package.

[0015] In a specific implementation, after distributing the remote sensing image encryption package to a number of clients, the method further includes:

[0016] Receive a specific timestamp sent by the client, determine whether the specific timestamp is sent by the client for the first time, and if so, store the specific timestamp with the corresponding associated user ID, thread ID, band, and resolution to form a preset timestamp.

[0017] The present invention also discloses a remote sensing image data distribution method based on authority control, which is applied to a client and includes:

[0018] Receiving a remote sensing image encryption package sent by a server, wherein the remote sensing image encryption package is obtained by processing each band file according to different resolutions, encrypting the band files of different resolutions, and compressing and storing them in sequence according to band identifiers;

[0019] After decrypting the remote sensing image encryption package based on the initial authority, each band layer is rendered and each band layer is superimposed and displayed in the band order. When it is determined that the layer to be rendered is not decrypted, the undecrypted layer is rendered as a transparent layer. When rendering each band layer, each band and each resolution creates an independent thread for processing. Each independent thread has a specific timestamp when it is created, and the specific timestamp is sent to the server for storage after creation;

[0020] Sending a permission request message to the server based on the configured user token so that the server generates a temporary key matching the user's permission;

[0021] In response to receiving the temporary key sent by the server, determining the resolution and band corresponding to the temporary key to read the corresponding encrypted file from the remote sensing image encryption package and then decrypting it according to the temporary key to obtain a temporary decrypted file;

[0022] The temporary decrypted file is matched to a corresponding thread for rendering to perform real-time overlay.

[0023] In a specific implementation, the permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

[0024] In a specific embodiment, it also includes:

[0025] In response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package;

[0026] An update data packet reception request is sent to the server so that the server sends a new remote sensing image encryption package according to the update data packet reception request and reprocesses the new remote sensing image encryption package.

[0027] The present invention also discloses a remote sensing image data service engine system based on authority control, which is applied to a client and includes:

[0028] The encrypted package receiving module is used to receive the remote sensing image encrypted package sent by the server, wherein the remote sensing image encrypted package is obtained by encrypting the band files of different resolutions after processing each band file according to different resolutions, and compressing and storing them in sequence according to the band identifier;

[0029] The data rendering module is used to render each band layer after decrypting the remote sensing image encryption package based on the initial authority and to display each band layer after superimposing it in the band order. When it is determined that the layer to be rendered is not decrypted, the undecrypted layer is rendered as a transparent layer. When rendering each band layer, an independent thread is created for each band and each resolution for processing. Each independent thread has a specific timestamp when it is created, and the specific timestamp is sent to the server for storage after creation.

[0030] A key request module, used to send a permission request message to the server based on a configured user token so that the server generates a temporary key matching the user's permission;

[0031] A decryption module, configured to, in response to receiving a temporary key sent by a server, determine the resolution and band corresponding to the temporary key, read the corresponding encrypted file from the remote sensing image encryption package, and then decrypt it according to the temporary key to obtain a temporary decrypted file;

[0032] The data rendering module is further used to match the temporary decrypted file to a corresponding thread for rendering to perform real-time overlay.

[0033] In a specific implementation, the permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

[0034] In a specific implementation, the data rendering module further includes: in response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package;

[0035] Correspondingly, the encrypted packet receiving module is also used to send an update data packet reception request to the server side so that the server side sends a new remote sensing image encryption packet according to the update data packet reception request and reprocesses the new remote sensing image encryption packet.

[0036] Beneficial effects of the present invention:

[0037] 1. The remote sensing image data distribution method based on permission control of the present invention realizes independent authorization of users to specific bands and resolution levels by performing band separation on the remote sensing image data to be processed, and the unauthorized bands are automatically rendered as transparent layers, thereby avoiding the waste of storage resources and transmission resources on the client and server sides. The client does not need to reload and reauthorize, and can achieve real-time band expansion and real-time resolution expansion;

[0038] 2. The remote sensing image data distribution method based on permission control of the present invention can dynamically detect the client status by dynamically binding the client thread timestamp with the server preset timestamp, thereby avoiding permission confusion and the risk of data leakage.

[0039] The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] Figure 1 It is a server-side flow diagram of a remote sensing image data distribution method based on authority control provided by an embodiment of the present invention;

[0041] Figure 2 It is a client process diagram of a remote sensing image data distribution method based on authority control provided by an embodiment of the present invention;

[0042] Figure 3 The present invention provides a block diagram of a remote sensing image data service engine system module based on authority control. DETAILED DESCRIPTION

[0043] The present invention is further described in detail below with reference to specific embodiments, but the embodiments of the present invention are not limited thereto.

[0044] Embodiment 1

[0045] See also Figure 1 , Figure 1 The present invention provides a remote sensing image data distribution method based on authority control, which includes:

[0046] S11, read the remote sensing image data to be processed; the remote sensing image data to be processed in this embodiment is usually a standard remote sensing image data set or a remote sensing image data set that needs to be processed into a standard, such as a map standard that complies with OGC. In addition, the application scenario of this implementation is generally a platform with monitoring and surveillance requirements, so strong data comprehensiveness and data accuracy are required. Therefore, the remote sensing image data to be processed in this implementation can also be an integration of data of different dimensions and different accuracy received through different ports.

[0047] S12, performing band separation on the remote sensing image data to be processed to obtain a plurality of band data, wherein the band data includes a band file and a band identifier, and the band identifier includes a field for identifying a band order, a field for identifying a band wavelength, a field for identifying a resolution, and a field for identifying a separation time;

[0048] Since remote sensing images have the characteristics of multi-band and multi-resolution, in order to better realize accurate authority control, it is necessary to distinguish the bands and resolutions for processing. After the bands are separated, a band identifier is added to each piece of data. The band file is obtained by parsing and splitting the remote sensing image data to be processed. The band identifier will be recorded in each data block in the band file to represent the attributes of the band file. The field used to identify the band order can reduce the difficulty of retrieving the band file, so that during the processing, the band file can be efficiently read and written through the band identifier; the field used to identify the band wavelength is to mark the specific band of the file. Due to the multi-band characteristics of remote sensing data, multi-band overlay may be involved in the display. The field used to identify the resolution is to mark the specific resolution of the file. Maps of different precision can be used in different scene requirements. For example, image data of certain sensitive areas can only be accessed by users of a specific department within a specific time period; or only users in a specific geographical location can download certain types of high-resolution image data; the field used to identify the separation time is to mark the time node when the remote sensing image data to be processed is processed to obtain the band file, which can be used as an identification record for subsequent processing of the band file, such as modifying or deleting the band file. The version status can be determined according to the time node, thereby avoiding confusion during subsequent incremental updates and multi-version management on the server side.

[0049] S13, after processing each band file according to different resolutions, encrypt the band files of different resolutions to compress and store them in sequence according to the band identifiers to obtain a remote sensing image encryption package and distribute the remote sensing image encryption package to several clients, and the clients have initial permissions;

[0050] The core of this embodiment lies in the permission control logic of "one distribution, one decryption, continuous use". The encryption algorithm is not described in detail as the focus of this embodiment. Conventional encryption methods can be used, such as AES symmetric encryption or RSA asymmetric encryption, and encryption for other specific application requirements, such as ECC elliptic curve encryption. It should be noted that since the remote sensing image encryption package needs to be encrypted multiple times in different bands, it is necessary to generate a separate key for each band file. Preferably, the key seed can be associated with the band order. After the remote sensing image encryption package is distributed to several clients, the client can decrypt some band files through the initial permissions granted in advance.

[0051] In order to better understand this implementation scheme, the client operation is also explained. After the client decrypts some band files through the initial authority, it directly renders and displays. When decrypting, the band sequence number, specific band and specific resolution in the remote sensing image encryption package are used to determine the storage location of the file that can be decrypted by the initial authority. For the content that exceeds the decryption authority, although there is no authority at present, it may be re-granted authority later. Therefore, after decryption, it is not only the decrypted file that is rendered, but it is rendered in sequence. During rendering, each band and each resolution creates an independent thread for processing. The client needs to maintain the thread pool and can create a virtual thread according to the configuration. In order to avoid the client bypassing the server for data backup, once the thread is successfully created, it cannot be changed. The thread number is also the only assignment. At the same time, a specific timestamp will be generated when the thread is created for subsequent tracing. The specific timestamp will be stored on the server side. If the server side detects a thread change later, it means that the client has a change operation. The server side will revoke the authority and wait for the client to receive a new remote sensing image encryption package again. For the undecrypted band file, this embodiment is rendered as a transparent layer, so that it is convenient for subsequent dynamic adjustment under the premise of avoiding display conflicts.

[0052] The remote sensing image data distribution method based on permission control in this embodiment realizes independent authorization of specific bands and resolution levels by users by performing band separation on the remote sensing image data to be processed, and unauthorized bands are automatically rendered as transparent layers, thereby avoiding waste of storage resources and transmission resources on the client and server sides. The client does not need to reload and reauthorize, and real-time band expansion and real-time resolution expansion can be achieved.

[0053] S14. In response to receiving the permission request message sent by the client, a corresponding temporary key is sent to the client, where the temporary key is used to decrypt at least one band file in the remote sensing image encryption package, and the temporary key is determined according to the client's permissions. After step S13 is completed, the basic service preparation work is completed. At this time, if the client has further permission requirements, it needs to obtain new authorization through a permission request message.

[0054] In a specific implementation, in response to receiving a permission request message sent by a client, sending a corresponding temporary key to the client includes:

[0055] Determine the user ID, user authority, authority validity period and specific timestamp according to the user token in the authority request message, wherein the user authority includes band display authority and resolution display authority, and the specific timestamp is generated when the client creates a thread for the remote sensing image encryption package based on the initial authority;

[0056] When it is determined that the specific timestamp is consistent with the stored preset timestamp, a temporary key matching the user authority is generated, and the temporary key is used to decrypt the band file of the corresponding resolution;

[0057] In this step, the pre-stored preset timestamp is the timestamp generated by the client when the thread is created, and the specific timestamp should be consistent with the pre-stored preset timestamp under normal circumstances, unless there is a difference in the thread, so as to determine whether the client content has been tampered with. If they are consistent, it means that the thread continues to run consistently, and data security can be guaranteed. At this time, the server side sends the corresponding temporary key to the client according to the band display permission and resolution display permission. The temporary key of the present invention is always valid when the thread is not interrupted. If the thread is interrupted, the thread needs to be restarted, and the encryption package needs to be reloaded at this time, and the previous temporary key is invalid.

[0058] The temporary key is sent to the corresponding client. After the temporary key is issued, the client decrypts the band file of the corresponding band and the corresponding resolution in the remote sensing image encryption package according to the temporary key. The decrypted file is rendered by a pre-created thread. At this time, the thread no longer renders the transparent layer, but renders the band layer and superimposes it in real time, thereby avoiding the problem of reloading the complete data package due to permission changes. At the same time, there is no need to interrupt the current service process, which improves the reliability and efficiency of the system operation. Of course, within the scope of authority, the client can also render certain layers as transparent according to actual needs.

[0059] The remote sensing image data distribution method based on permission control in this embodiment can dynamically detect the client status by dynamically binding the client thread timestamp with the server preset timestamp, thereby avoiding permission confusion and the risk of data leakage.

[0060] In a specific implementation, when it is determined that the specific timestamp is inconsistent with the stored preset timestamp, a remote sensing image encryption package is regenerated, and a data packet update message is sent to the client so that the client updates the new remote sensing image encryption package to replace the previous remote sensing image encryption package. That is, when it is determined that the specific timestamp is inconsistent with the stored preset timestamp, it means that the client thread has been changed, and data processing cannot be performed according to the initial thread at this time. In addition, considering data security, the client is required to re-execute with a new remote sensing image encryption package, and the remote sensing image encryption package before the update needs to be deleted by the client. The client only stores and runs a unique remote sensing image encryption package at any time to avoid confusion and data leakage risks caused by multiple versions.

[0061] In a specific implementation, after distributing the remote sensing image encryption package to a number of clients, the method further includes:

[0062] Receive the specific timestamp sent by the client, determine whether the specific timestamp is sent by the client for the first time, and if so, store the specific timestamp with the corresponding associated user ID, thread ID, band, and resolution to form a preset timestamp. When the first time is sent, that is, when the thread is created, the server needs to store the preset timestamp of the first time as a basis for subsequent comparison. If it is not the first time, it is when the client sends a permission request message, and a comparison is required at this time.

[0063] See also Figure 2 The present invention also discloses a remote sensing image data distribution method based on authority control, which is applied to a client and includes:

[0064] S21, receiving a remote sensing image encryption package sent by a server, wherein the remote sensing image encryption package is obtained by encrypting band files of different resolutions after processing each band file according to different resolutions, and compressing and storing them in sequence according to band identifiers;

[0065] S22, after decrypting the remote sensing image encryption package based on the initial authority, rendering each band layer and superimposing each band layer in the band order for display, when it is determined that the layer to be rendered is not decrypted, rendering the undecrypted layer as a transparent layer, wherein when rendering each band layer, each band and each resolution creates an independent thread for processing, each of the independent threads has a specific timestamp when it is created, and the specific timestamp is sent to the server end for storage after creation;

[0066] S23, sending a permission request message to the server based on the configured user token so that the server generates a temporary key matching the user's permission;

[0067] S24, in response to receiving the temporary key sent by the server, determining the resolution and band corresponding to the temporary key to read the corresponding encrypted file from the remote sensing image encryption package and then decrypting it according to the temporary key to obtain a temporary decrypted file;

[0068] S25, matching the temporary decrypted file to a corresponding thread for rendering to perform real-time overlay.

[0069] In a specific implementation, the permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

[0070] In a specific embodiment, it also includes:

[0071] In response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package;

[0072] An update data packet reception request is sent to the server so that the server sends a new remote sensing image encryption package according to the update data packet reception request and reprocesses the new remote sensing image encryption package.

[0073] See also Figure 3 The present invention also discloses a remote sensing image data service engine system based on authority control, which is applied to a client and includes:

[0074] The encrypted package receiving module is used to receive the remote sensing image encrypted package sent by the server, wherein the remote sensing image encrypted package is obtained by encrypting the band files of different resolutions after processing each band file according to different resolutions, and compressing and storing them in sequence according to the band identifier;

[0075] The data rendering module is used to render each band layer after decrypting the remote sensing image encryption package based on the initial authority and to display each band layer after superimposing it in the band order. When it is determined that the layer to be rendered is not decrypted, the undecrypted layer is rendered as a transparent layer. When rendering each band layer, an independent thread is created for each band and each resolution for processing. Each independent thread has a specific timestamp when it is created, and the specific timestamp is sent to the server for storage after creation.

[0076] A key request module, used to send a permission request message to the server based on a configured user token so that the server generates a temporary key matching the user's permission;

[0077] A decryption module, configured to, in response to receiving a temporary key sent by a server, determine the resolution and band corresponding to the temporary key, read the corresponding encrypted file from the remote sensing image encryption package, and then decrypt it according to the temporary key to obtain a temporary decrypted file;

[0078] The data rendering module is further used to match the temporary decrypted file to a corresponding thread for rendering to perform real-time overlay.

[0079] In a specific implementation, the permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

[0080] In a specific implementation, the data rendering module further includes: in response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package;

[0081] Correspondingly, the encrypted packet receiving module is also used to send an update data packet reception request to the server side so that the server side sends a new remote sensing image encryption packet according to the update data packet reception request and reprocesses the new remote sensing image encryption packet.

[0082] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine different embodiments or examples described in this specification.

[0083] Although the present application is described herein in conjunction with various embodiments, in the process of implementing the claimed application, those skilled in the art may understand and implement other variations of the disclosed embodiments by viewing the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other components or steps, and "one" or "an" does not exclude multiple situations. A single processor or other unit may implement several functions listed in a claim. Certain measures are recorded in different dependent claims, but this does not mean that these measures cannot be combined to produce good results.

[0084] The above contents are further detailed descriptions of the present invention in combination with specific preferred embodiments, and it cannot be determined that the specific implementation of the present invention is limited to these descriptions. For ordinary technicians in the technical field to which the present invention belongs, several simple deductions or substitutions can be made without departing from the concept of the present invention, which should be regarded as falling within the protection scope of the present invention.

Claims

1. A remote sensing image data distribution method based on authority control, applied to the server side, characterized in that: include: Read remote sensing image data to be processed; Performing band separation on the remote sensing image data to be processed to obtain a plurality of band data, wherein the band data includes a band file and a band identifier, and the band identifier includes a field for identifying a band order, a field for identifying a band wavelength, a field for identifying a resolution, and a field for identifying a separation time; After processing each band file according to different resolutions, encrypting the band files of different resolutions to compress and store them in sequence according to the band identifiers to obtain a remote sensing image encryption package and distributing the remote sensing image encryption package to a number of clients, the clients having initial permissions; In response to receiving a permission request message sent by the client, a corresponding temporary key is sent to the client, where the temporary key is used to decrypt at least one band file in the remote sensing image encryption package, and the temporary key is determined according to the client's permissions.

2. The remote sensing image data distribution method based on authority control according to claim 1 is characterized in that: In response to receiving the permission request message sent by the client, sending a corresponding temporary key to the client, including: Determine the user ID, user authority, authority validity period and specific timestamp according to the user token in the authority request message, wherein the user authority includes band display authority and resolution display authority, and the specific timestamp is generated when the client creates a thread for the remote sensing image encryption package based on the initial authority; When it is determined that the specific timestamp is consistent with the stored preset timestamp, a temporary key matching the user authority is generated, and the temporary key is used to decrypt the band file of the corresponding resolution; The temporary key is sent to the corresponding client.

3. The remote sensing image data distribution method based on authority control according to claim 2 is characterized in that: When it is determined that the specific timestamp is inconsistent with the stored preset timestamp, a remote sensing image encryption package is regenerated, and a data packet update message is sent to the client to enable the client to update the new remote sensing image encryption package to replace the previous remote sensing image encryption package.

4. The remote sensing image data distribution method based on authority control according to claim 1 is characterized in that: After distributing the remote sensing image encryption package to several clients, it also includes: Receive a specific timestamp sent by the client, determine whether the specific timestamp is sent by the client for the first time, and if so, store the specific timestamp with the corresponding associated user ID, thread ID, band, and resolution to form a preset timestamp.

5. A remote sensing image data distribution method based on authority control, applied to a client, characterized in that: include: Receiving a remote sensing image encryption package sent by a server, wherein the remote sensing image encryption package is obtained by processing each band file according to different resolutions, encrypting the band files of different resolutions, and compressing and storing them in sequence according to band identifiers; After decrypting the remote sensing image encryption package based on the initial authority, each band layer is rendered and each band layer is superimposed and displayed in the band order. When it is determined that the layer to be rendered is not decrypted, the undecrypted layer is rendered as a transparent layer. When rendering each band layer, each band and each resolution creates an independent thread for processing. Each independent thread has a specific timestamp when it is created, and the specific timestamp is sent to the server for storage after creation; Sending a permission request message to the server based on the configured user token so that the server generates a temporary key matching the user's permission; In response to receiving the temporary key sent by the server, determining the resolution and band corresponding to the temporary key to read the corresponding encrypted file from the remote sensing image encryption package and then decrypting it according to the temporary key to obtain a temporary decrypted file; The temporary decrypted file is matched to a corresponding thread for rendering to perform real-time overlay.

6. The remote sensing image data distribution method based on authority control according to claim 5 is characterized in that: The permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

7. The remote sensing image data distribution method based on authority control according to claim 5 is characterized in that: Also includes: In response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package; An update data packet reception request is sent to the server so that the server sends a new remote sensing image encryption package according to the update data packet reception request and reprocesses the new remote sensing image encryption package.

8. A remote sensing image data service engine system based on authority control, applied to a client, characterized in that: include: The encrypted package receiving module is used to receive the remote sensing image encrypted package sent by the server, wherein the remote sensing image encrypted package is obtained by encrypting the band files of different resolutions after processing each band file according to different resolutions so as to compress and store them in sequence according to the band identifier; The data rendering module is used to render each band layer after decrypting the remote sensing image encryption package based on the initial authority and to display each band layer after superimposing it in the band order. When it is determined that the layer to be rendered is not decrypted, the undecrypted layer is rendered as a transparent layer. When rendering each band layer, an independent thread is created for each band and each resolution for processing. Each independent thread has a specific timestamp when it is created, and the specific timestamp is sent to the server for storage after creation. A key request module, used to send a permission request message to the server based on a configured user token so that the server generates a temporary key matching the user's permission; A decryption module, configured to, in response to receiving a temporary key sent by a server, determine the resolution and band corresponding to the temporary key, read the corresponding encrypted file from the remote sensing image encryption package, and then decrypt it according to the temporary key to obtain a temporary decrypted file; The data rendering module is further used to match the temporary decrypted file to a corresponding thread for rendering to perform real-time overlay.

9. The remote sensing image data service engine system based on authority control according to claim 8, characterized in that: The permission request message includes a user ID, user permissions, a validity period of permissions, and a specific timestamp, wherein the user permissions include band display permissions and resolution display permissions.

10. The remote sensing image data service engine system based on authority control according to claim 8, characterized in that: The data rendering module further comprises: in response to receiving a data packet update message sent by the client, closing the current running thread and deleting the current remote sensing image encryption package; Correspondingly, the encrypted packet receiving module is also used to send an update data packet reception request to the server side so that the server side sends a new remote sensing image encryption packet according to the update data packet reception request and reprocesses the new remote sensing image encryption packet.

Images