Cross-network geographic information security query method and device, equipment and medium

Abstract

The invention belongs to the technical field of geographic information data query, and provides a cross-network geographic information security query method and device, equipment and a medium, and the method comprises the steps: obtaining a geographic spatial data query request of an extranet user; performing data verification on the geographic spatial data query request to obtain planar geometric data of a query target, the planar geometric data including a first coordinate system; sending the first coordinate system of the planar geometric data to an internal network and converting the first coordinate system to obtain a second coordinate system; executing spatial query on a target layer of the geographic spatial database according to the second coordinate system to obtain a first query result; and processing the first query result according to a preset desensitization rule to obtain a second query result, and returning the second query result to the extranet user. The cross-network geographic information query method has the beneficial effect that the cross-network geographic information query security and accuracy are improved.

Description

Technical Field

[0001] This invention relates to the field of geospatial data query, and in particular to a method, apparatus, device, and medium for secure cross-network geographic information query. Background Technology

[0002] With the deepening of digital management construction, geospatial data, as an important basic information resource, plays a crucial role in applications such as urban planning, emergency management, and traffic management. Typically, high-precision, authoritative geospatial data is stored in a high-security dedicated business network, while services for the public or most staff run on the external network. Due to network security requirements, the business network and the external network are usually physically isolated or logically isolated through devices such as network gateways. While this isolation measure effectively ensures the security of core data, it also brings the problem of "data silos": applications on the external network cannot directly and in real-time access the geospatial data in the business network.

[0003] In existing technologies, manual copying or simple API mapping are commonly used to solve this problem. However, manual copying is extremely inefficient, data updates are not timely, it cannot meet real-time query requirements, and manual operation is prone to errors, posing a risk of data leakage. API mapping, on the other hand, presents serious security vulnerabilities:

[0004] The raw coordinate information of the business network database is directly exposed, which poses a risk of being stolen;

[0005] Directly opening ports increases the attack surface of the service network;

[0006] Unable to handle coordinate system differences. For national security reasons, my country has implemented confidentiality measures for publicly released geographic information, resulting in offset coordinates. If external users submit queries based on these offset coordinates, the query location will be completely incorrect, and the returned results will be meaningless. Summary of the Invention

[0007] Aimed at at least in solving one of the technical problems existing in the prior art, the present invention provides a method, apparatus, device and medium for secure querying of geographic information across networks, thereby improving the security and accuracy of querying geographic information across networks.

[0008] One aspect of the present invention provides a method for secure cross-network geographic information query, comprising:

[0009] Obtain geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the target query layer information;

[0010] The geospatial data query request is validated to obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system;

[0011] The first coordinate system of the planar geometric data is sent to the intranet and transformed to obtain the second coordinate system;

[0012] A spatial query is performed on the target layer of the geospatial database based on the second coordinate system to obtain the first query result;

[0013] The first query result is processed according to a preset desensitization rule to obtain a second query result, which is then returned to the external network user.

[0014] According to the cross-network geographic information security query method, obtaining the geospatial data query request from an external network user includes:

[0015] In response to query requests from external network users, send a query layer interface to the external network users;

[0016] The geospatial data query request is determined based on one of the following: geospatial vector data, text data, and graphic drawing data uploaded by the external network user, and based on the query layer interface selected by the external network user. The graphic drawing data is generated by drawing a preset graphic selected by the external network user through an interactive interface.

[0017] According to the cross-network geographic information security query method, the geospatial data query request is validated to obtain the areal geometric data of the query target, including:

[0018] Perform file size, extension, and data content checks on the geospatial vector data and the text data;

[0019] Based on the data type of the geometric information within the query range, perform the following processing:

[0020] When the data type is geospatial vector data, file integrity is checked to obtain the metadata in the file header; when the geospatial vector data is determined to be polygon data based on the metadata, the geospatial vector data is read to obtain polygon coordinates, and the polygon geometry data of the query target is determined based on the polygon coordinates.

[0021] When the data type is text data, the coordinates are read line by line; the read coordinates are validated for format, and if they are in the target format, the read coordinates are validated for geometric validity to obtain the areal geometric data of the query target, where the target format includes WKT and CSV.

[0022] According to the cross-network geographic information security query method, the first coordinate system of the areal geometric data is sent to the intranet and transformed to obtain the second coordinate system, including:

[0023] The first coordinate system is transformed to the second coordinate system using a transformation model, where the first coordinate system is the offset coordinate system and the second coordinate system is the precise coordinate system.

[0024] According to the cross-network geographic information security query method, the transformation model includes offline analysis, control point matching, and preset parameter updates.

[0025] According to the cross-network geographic information security query method, a spatial query is performed on the target layer of the geospatial database based on the second coordinate system to obtain a first query result, including:

[0026] Based on the second coordinate system and the target query layer information, perform query range drawing and site selection analysis layer overlay processing;

[0027] The GIS spatial overlay algorithm is used to calculate the intersection area between the land parcels and the query range from the geospatial database for the target layer, and the occupied area and location are determined by the intersection area;

[0028] Based on the land use code and attribute information of the land use patches, calculate the land area, proportion and spatial distribution characteristics of the intersection area;

[0029] Based on the land area, proportion, and spatial distribution characteristics, different color codes are used to render land parcels.

[0030] According to the cross-network geographic information security query method, the first query result is processed according to a preset desensitization rule to obtain a second query result, including:

[0031] Perform confidentiality checks on the fields in the first query result and remove confidential fields, perform mild blurring on the geometry of the first query result, and convert the first query result into a non-editable static file to obtain the second query result.

[0032] Another aspect of the present invention provides a cross-network geographic information secure query device, comprising:

[0033] The first module is used to obtain geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the target query layer information.

[0034] The second module is used to perform data verification on the geospatial data query request and obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system;

[0035] The third module is used to send the first coordinate system of the planar geometric data to the intranet and transform it to obtain the second coordinate system;

[0036] The fourth module is used to perform a spatial query on the target layer of the geospatial database based on the second coordinate system to obtain the first query result;

[0037] The fifth module is used to process the first query result according to a preset desensitization rule to obtain the second query result, and return the second query result to the external network user.

[0038] Another aspect of the present invention provides an electronic device, including a processor and a memory;

[0039] The memory is used to store programs;

[0040] The processor executes the program to implement the method as described above.

[0041] This invention also discloses a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform the methods described above.

[0042] The beneficial effects of this invention are as follows: The use of a command-in, result-out working mode prevents the core database of the business network from being directly exposed to the outside world; combined with unidirectional transmission, it forms physical or logical-level unidirectional data transmission, greatly reducing the security risks of the business network; the desensitization and formatting of query results further prevent the leakage of sensitive information; and through the coordinate transformation engine integrated within the business network, the offset coordinates of the external network are converted into real coordinates in real time and accurately, fundamentally solving the problem of query position errors caused by coordinate system differences, and ensuring the geometric accuracy and usability of the returned results. Attached Figure Description

[0043] Figure 1 This is a schematic diagram of a cross-network geographic information security query system according to an embodiment of the present invention.

[0044] Figure 2 This is a schematic diagram of a cross-network geographic information security query process according to an embodiment of the present invention.

[0045] Figure 3 This is a schematic diagram of layer information in an embodiment of the present invention, wherein (a) is a map of permanent basic farmland in region A; (b) is a map of urban development boundary in region B; and (c) is a map of ecological protection red line in region C.

[0046] Figure 4 This is a schematic diagram of map offset under different coordinate systems according to an embodiment of the present invention.

[0047] Figure 5This is a schematic diagram of the geospatial database query process according to an embodiment of the present invention.

[0048] Figure 6 This is an interactive report in PDF format, representing a detailed analysis report of this invention.

[0049] Figure 7 This is a schematic diagram of a cross-network geographic information security query device according to an embodiment of the present invention. Detailed Implementation

[0050] The embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings. Throughout the description, the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions. In the following description, suffixes such as "module," "part," or "unit" used to denote elements are used only for the purpose of illustrative purposes and have no inherent meaning. Therefore, "module," "part," or "unit" can be used interchangeably. Terms such as "first," "second," etc., are used only to distinguish technical features and should not be construed as indicating or implying relative importance, or implicitly indicating the number of indicated technical features, or implicitly indicating the sequential relationship of the indicated technical features. In the following description, the consecutive reference numerals for method steps are for ease of review and understanding. Adjusting the implementation order of steps, in conjunction with the overall technical solution of the present invention and the logical relationship between the various steps, will not affect the technical effect achieved by the technical solution of the present invention. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present invention, and should not be construed as limiting the present invention.

[0051] refer to Figure 1 , Figure 1 This is a schematic diagram of a cross-network geographic information security query system according to an embodiment of the present invention. It includes a client (government extranet) set on the extranet and a geospatial database (business intranet). The intranet and the extranet are unidirectionally transmitted through a switching device in a cross-network (gateway) switching mode, and the intranet and the extranet are physically isolated.

[0052] In some embodiments, users on external clients complete target graphic drawing operations, map vector data uploads, and text data uploads based on the base map after coordinate offset. The generated graphic data is securely transmitted to the internal network environment via a network gateway. Subsequently, an automated coordinate transformation is performed on the graphic using a dedicated offset plugin to adapt it to the CGCS2000 national geodetic coordinate system. The transformed graphic is then overlaid and analyzed with other graphic data on the internal network. Finally, the analysis results are transmitted back to the internet terminal via the network gateway, thereby achieving a secure closed-loop query of graphic data across network environments.

[0053] refer to Figure 2The diagram shown illustrates a cross-network geographic information security query process, including but not limited to steps S100-S500:

[0054] S100: Obtain geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the target query layer information.

[0055] In some embodiments, in response to a query request from an external network user, a query layer interface is sent to the external network user; a geospatial data query request is determined based on one of the geospatial vector data, text data, and graphic drawing data uploaded by the external network user, and based on the query layer interface selected by the external network user, wherein the graphic drawing data is generated by drawing a preset graphic selected by the external network user through an interactive interface.

[0056] In some embodiments, the query range is obtained through two methods: user upload and hand drawing (the query area is ≤25km2, limited to areas outside the urban boundaries of Hunan Province); the hand drawing method includes rectangles, polygons, and points; user uploads support SHP (a type of geospatial vector data) and TXT format with points, and must be able to form a surface without topological problems.

[0057] In some embodiments, querying layer information can be done by connecting to the API of a provincial land spatial information platform, which can call all layers in the platform in real time, such as land change survey data, three zones and three lines data, etc., such as selecting permanent basic farmland.

[0058] In some embodiments, the query layer interface includes, for example, permanent basic farmland, urban development boundaries, and ecological protection red lines, specifically as follows: Figure 3 The diagram shows the layer information, where (a) is the permanent basic farmland map of region A; (b) is the urban development boundary map of region B; and (c) is the ecological protection red line map of region C.

[0059] S200: Perform data verification on the geospatial data query request to obtain the areal geometric data of the query target, wherein the areal geometric data includes the first coordinate system.

[0060] In some embodiments, file size, extension, and data content checks are performed on geospatial vector data and text data; based on the data type of the geometric information of the query range, the following processing is performed:

[0061] When the data type is geospatial vector data, file integrity is checked to obtain the metadata in the file header; when the geospatial vector data is determined to be polygon data based on the metadata, the geospatial vector data is read to obtain polygon coordinates, and the polygon geometry data of the query target is determined based on the polygon coordinates.

[0062] When the data type is text data, the coordinates are read line by line; the read coordinates are validated for format, and if they are in the target format, the read coordinates are validated for geometric validity to obtain the areal geometric data of the query target, where the target format includes WKT and CSV.

[0063] In some embodiments, file upload and basic security verification include:

[0064] (1) Check file size to prevent excessively large files. SHP files: limit to ≤100MB (to prevent service crashes caused by parsing large files). TXT files: limit to ≤10MB (plain text files are usually smaller).

[0065] (2) Check file extensions, allowing only .shp and .txt files to be uploaded, rejecting other formats (such as .exe, .zip). Client-side verification: Check file extensions via JavaScript and quickly report errors. Server-side verification: SHP files: Read the first 4 bytes of the file header and verify file_code=9994 (SHP file identifier). TXT files: Check if the file content is plain text (e.g., no binary data), which can be verified by the first line character or MIME type.

[0066] In some embodiments, data parsing and planar geometry construction are processed according to the data type, including:

[0067] (1) For SHP files, use GDAL / OGR to read them, check if the geometry type is a face (or multiple faces), and then extract all face geometry. Specifically: verify the supporting files, check if the user has uploaded the three-piece set of .shp (geometric data), .shx (index), and .dbf (attributes) at the same time, otherwise refuse to process; parse the file header, read the file header to obtain metadata, and verify if it is face data; parse the geometry records, read the records one by one, and parse the polygon coordinates.

[0068] (2) For TXT files, read the coordinates line by line to ensure that the coordinates can form a closed polygon; the format of a TXT file can be the coordinates of one point per line, separated by spaces or commas, and automatically closed at the end. Specifically: verify the format and check if the file is one of the following formats: WKT (Well-Known Text): such as POLYGON((x1y1,x2y2,x3y3)); CSV coordinates: one point per line, such as x,y, the first line may contain metadata; verify the geometric validity and check if the polygon is closed (the first and last points are the same) and has no self-intersections.

[0069] It should be noted that the graphics drawn by the user directly include planar geometric data, which does not require processing. The planar geometric data is obtained through the above processing.

[0070] S300 sends the first coordinate system of the planar geometric data to the intranet and transforms it to obtain the second coordinate system.

[0071] In some embodiments, a transformation model is used to transform the first coordinate system to the second coordinate system, wherein the first coordinate system is an offset coordinate system and the second coordinate system is an exact coordinate system.

[0072] The transformation model contains precise transformation parameters or a transformation model from the first coordinate system to the second coordinate system. This transformation model is obtained through offline analysis, control point matching, or official parameters and is updated regularly to ensure transformation accuracy.

[0073] For example, refer to Figure 4 The diagrams showing map offsets in different coordinate systems illustrate that the embodiments of the present invention can obtain accurate map information by transforming the original offset coordinate system.

[0074] S400, perform a spatial query on the target layer of the geospatial database according to the second coordinate system to obtain the first query result.

[0075] In some embodiments, referring to the geospatial database query process diagram shown in Figure 5, the process includes, but is not limited to, steps S410-S440:

[0076] S410, Based on the second coordinate system and the target query layer information, perform query range drawing and site selection analysis layer overlay processing;

[0077] S420: The GIS spatial overlay algorithm is used to calculate the intersection area between the land parcels and the query range from the geospatial database for the target layer, and the occupied area and location are determined by the intersection area.

[0078] S430, based on the land use code and attribute information of the land use patches, calculate the land area, proportion and spatial distribution characteristics of the intersection area;

[0079] S440 uses different color codes to render land use patches based on their land area, proportion, and spatial distribution characteristics.

[0080] In some embodiments, through the collaboration of the data resource layer and the application service layer, where the data resource layer stores layer information using PostgreSQL, the application service layer presents the layer query results through the "spatial data analysis service".

[0081] In some embodiments, the rendered layers are also visualized:

[0082] After the user completes the drawing of the query scope and the overlay of the site selection analysis layers, the system will automatically trigger the spatial analysis engine to perform multi-dimensional analysis of the land use occupancy within the query scope: by integrating GIS spatial overlay algorithms and a land use classification database, the system calculates the intersection area of ​​each map patch with the query scope in real time, classifies and statistically analyzes the proportion according to the type of the query layer (such as residential land, commercial land, green space, etc.), and dynamically renders it on the map using differentiated color levels. Simultaneously, an interactive analysis report is generated, ultimately providing a comprehensive overview. Figure 1 Table 1 presents the current status of land resource utilization within the query area in an intuitive way, providing users with scientific site selection decision support based on spatial data.

[0083] In some embodiments, the spatial query execution first performs spatial overlay analysis on the query range drawn by the user and the site selection analysis layer; then uses a GIS spatial query algorithm to identify all land parcels within the query range; and performs geometric intersection calculations on each parcel to accurately determine the occupied area and location.

[0084] In some embodiments, land use classification and statistics are performed by reading the land use code and attribute information of each map patch; merging land use categories according to national land classification standards (such as GB / T 21010); and automatically calculating the area, proportion, and spatial distribution characteristics of each type of land use.

[0085] In some embodiments, visual rendering is used to assign a unique and easily distinguishable color code to each land type.

[0086] In some embodiments, such as Figure 6 The interactive report view in PDF format includes basic statistical reports, outputting various land use areas, percentages, and spatial locations; it generates downloadable detailed analysis reports in PDF format; and it provides an online interactive dashboard that supports data drill-down and multi-dimensional filtering.

[0087] S500 processes the first query result according to the preset desensitization rules to obtain the second query result and returns the second query result to the external network user.

[0088] In some embodiments, a second query result is obtained by performing a confidentiality check on the fields in the first query result and removing the confidential fields, performing a light blurring process on the geometry of the first query result, and converting the first query result into an uneditable static file.

[0089] Figure 7 This is a schematic diagram of a cross-network geographic information security query device according to an embodiment of the present invention. The device includes a first module 710, a second module 720, a third module 730, a fourth module 740, and a fifth module 750.

[0090] The system comprises the following modules: a first module for acquiring geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the information of the target query layer; a second module for validating the geospatial data query requests to obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system; a third module for sending the first coordinate system of the areal geometric data to the internal network and converting it to obtain a second coordinate system; a fourth module for performing a spatial query on the target layer of the geospatial database based on the second coordinate system to obtain a first query result; and a fifth module for processing the first query result according to preset anonymization rules to obtain a second query result, and returning the second query result to the external network user.

[0091] For example, with the cooperation of the first, second, third, fourth, and fifth modules in the device, the embodiment device can implement any of the aforementioned cross-network geographic information security query methods, namely, obtaining the geospatial data query request from an external network user, wherein the geospatial data query request includes at least the geometric information of the query range and the target query layer information; performing data verification on the geospatial data query request to obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system; sending the first coordinate system of the areal geometric data to the internal network and converting it to obtain a second coordinate system; performing a spatial query on the target layer of the geospatial database according to the second coordinate system to obtain a first query result; processing the first query result according to a preset desensitization rule to obtain a second query result, and returning the second query result to the external network user. The beneficial effects of this invention are as follows: The use of a command-in, result-out working mode prevents the core database of the business network from being directly exposed to the outside world; combined with unidirectional transmission, it forms physical or logical-level unidirectional data transmission, greatly reducing the security risks of the business network; the desensitization and formatting of query results further prevent the leakage of sensitive information; and through the coordinate transformation engine integrated within the business network, the offset coordinates of the external network are converted into real coordinates in real time and accurately, fundamentally solving the problem of query position errors caused by coordinate system differences, and ensuring the geometric accuracy and usability of the returned results.

[0092] This invention also provides an electronic device, which includes a processor and a memory;

[0093] The memory stores the program;

[0094] The processor executes a program to perform the aforementioned cross-network geographic information security query method; the electronic device has the function of carrying and running the software system for cross-network geographic information security query provided in the embodiments of the present invention, such as a personal computer, minicomputer, mainframe, workstation, network or distributed computing environment, standalone or integrated computer platform, or communicating with charged particle tools or other imaging devices, etc.

[0095] This invention also provides a computer-readable storage medium storing a program that is executed by a processor to implement the cross-network geographic information secure query method as described above.

[0096] In some alternative embodiments, the functions / operations mentioned in the block diagrams may not occur in the order shown in the operation diagrams. For example, depending on the functions / operations involved, two consecutively shown blocks may actually be executed substantially simultaneously, or the blocks may sometimes be executed in reverse order. Furthermore, the embodiments presented and described in the flowcharts of this invention are provided by way of example to provide a more comprehensive understanding of the technology. The disclosed methods are not limited to the operations and logic flows presented in the embodiments of this invention. Alternative embodiments are contemplated, in which the order of various operations is changed and sub-operations described as part of a larger operation are executed independently.

[0097] This invention also discloses a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device can read the computer instructions from the computer-readable storage medium and execute the computer instructions, causing the computer device to perform the aforementioned cross-network geographic information security query method.

[0098] Furthermore, although the invention has been described in the context of functional modules, it should be understood that, unless otherwise stated, one or more of the described functions and / or features may be integrated into a single physical device and / or software module, or one or more functions and / or features may be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the invention. Rather, considering the properties, functions, and internal relationships of the various functional modules in the apparatus disclosed in the embodiments of the invention, the actual implementation of the module will be understood within the scope of conventional skill of an engineer. Therefore, those skilled in the art can implement the invention as set forth in the claims using ordinary techniques without excessive experimentation. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the invention, which is determined by the full scope of the appended claims and their equivalents.

[0099] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0100] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by, or in conjunction with, an instruction execution system, apparatus, or device (such as a computer-based system, a processor-included system, or other system that can fetch and execute instructions from, an instruction execution system, apparatus, or device). For the purposes of this specification, "computer-readable medium" can be any means that can include, store, communicate, propagate, or transmit programs for use by, or in conjunction with, an instruction execution system, apparatus, or device.

[0101] More specific examples of computer-readable media (a non-exhaustive list) include: electrical connections (electronic devices) having one or more wires, portable computer disk drives (magnetic devices), random access memory (RAM), read-only memory (ROM), erasable and editable read-only memory (EPROM or flash memory), fiber optic devices, and portable optical disc read-only memory (CDROM). Furthermore, computer-readable media can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, interpreting, or otherwise processing as necessary, and then stored in computer memory.

[0102] It should be understood that various parts of the present invention can be implemented in hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented in software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0103] In the description of this specification, references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0104] Although embodiments of the invention have been shown and described, those skilled in the art will understand that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the claims and their equivalents.

[0105] The above is a detailed description of the preferred embodiments of the present invention, but the present invention is not limited to the embodiments described. Those skilled in the art can make various equivalent modifications or substitutions without departing from the spirit of the present invention, and these equivalent modifications or substitutions are all included within the scope defined by the claims of this application.

Claims

1. A method for secure cross-network geographic information query, characterized in that, include: Obtain geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the target query layer information; The geospatial data query request is validated to obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system; The first coordinate system of the planar geometric data is sent to the intranet and transformed to obtain the second coordinate system; A spatial query is performed on the target layer of the geospatial database based on the second coordinate system to obtain the first query result; The first query result is processed according to a preset desensitization rule to obtain a second query result, which is then returned to the external network user.

2. The cross-network geographic information secure query method according to claim 1, characterized in that, The request to obtain geospatial data from external network users includes: In response to query requests from external network users, send a query layer interface to the external network users; The geospatial data query request is determined based on one of the geospatial vector data, text data, and graphic drawing data uploaded by the external network user, and based on the query layer interface selected by the external network user, wherein the graphic drawing data is generated by drawing a preset graphic selected by the external network user through an interactive interface.

3. The cross-network geographic information secure query method according to claim 2, characterized in that, The step of performing data verification on the geospatial data query request to obtain the areal geometric data of the query target includes: Perform file size, extension, and data content checks on the geospatial vector data and the text data; Based on the data type of the geometric information within the query range, perform the following processing: When the data type is geospatial vector data, file integrity is checked to obtain the metadata in the file header; when the geospatial vector data is determined to be polygon data based on the metadata, the geospatial vector data is read to obtain polygon coordinates, and the polygon geometry data of the query target is determined based on the polygon coordinates. When the data type is text data, the coordinates are read line by line; the read coordinates are validated for format, and if they are in the target format, the read coordinates are validated for geometric validity to obtain the areal geometric data of the query target, where the target format includes WKT and CSV.

4. The cross-network geographic information secure query method according to claim 1, characterized in that, The step of sending the first coordinate system of the planar geometric data to the intranet and transforming it to obtain the second coordinate system includes: The first coordinate system is transformed to the second coordinate system using a transformation model, where the first coordinate system is the offset coordinate system and the second coordinate system is the precise coordinate system.

5. The cross-network geographic information secure query method according to claim 4, characterized in that, The conversion model includes offline analysis, control point matching, and preset parameter updates.

6. The cross-network geographic information secure query method according to claim 1, characterized in that, The step of performing a spatial query on the target layer of the geospatial database according to the second coordinate system to obtain a first query result includes: Based on the second coordinate system and the target query layer information, perform query range drawing and site selection analysis layer overlay processing; The GIS spatial overlay algorithm is used to calculate the intersection area between the land parcels and the query range from the geospatial database for the target layer, and the occupied area and location are determined by the intersection area; Based on the land use code and attribute information of the land use patches, calculate the land area, proportion and spatial distribution characteristics of the intersection area; Based on the land area, proportion, and spatial distribution characteristics, different color codes are used to render land parcels.

7. The cross-network geographic information secure query method according to claim 6, characterized in that, The process of processing the first query result according to a preset de-identification rule to obtain the second query result includes: Perform confidentiality checks on the fields in the first query result and remove confidential fields, perform mild blurring on the geometry of the first query result, and convert the first query result into a non-editable static file to obtain the second query result.

8. A cross-network geographic information security query device, characterized in that, include: The first module is used to obtain geospatial data query requests from external network users, wherein the geospatial data query requests include at least the geometric information of the query range and the target query layer information. The second module is used to perform data verification on the geospatial data query request and obtain the areal geometric data of the query target, wherein the areal geometric data includes a first coordinate system; The third module is used to send the first coordinate system of the planar geometric data to the intranet and transform it to obtain the second coordinate system; The fourth module is used to perform a spatial query on the target layer of the geospatial database based on the second coordinate system to obtain the first query result; The fifth module is used to process the first query result according to a preset desensitization rule to obtain the second query result, and return the second query result to the external network user.

9. An electronic device, characterized in that, Including the processor and memory; The memory is used to store programs; The processor executes the program to implement the cross-network geographic information secure query method as described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that, The storage medium stores a program that is executed by a processor to implement the cross-network geographic information secure query method as described in any one of claims 1-7.

Images