Land monitoring management system based on edge computing

Abstract

The application relates to the technical field of land resource information management and geographic information space data processing, in particular to a land monitoring management system based on edge computing, which comprises a cloud end subsystem and an edge subsystem; the cloud end subsystem receives a project connection application, extracts a non-overlapping area polygon set, generates a grid occupation check table according to surveying and mapping tolerance, and generates an edge check token in combination with a project connection number, a token version number, a timestamp and a validity period; the edge subsystem decrypts and checks the token, performs local conflict detection on a to-be-uploaded graphic file, generates a conflict-free voucher after the check and uploads the conflict-free voucher; the cloud end subsystem rechecks a signature, a file digest, a project connection number, a token version number and a token digest, releases the to-be-uploaded graphic file into a database when the recheck result is consistent, and otherwise rejects the uploading and feeds back a token update instruction; the application realizes conflict judgment before uploading, reduces vector data sinking risk and edge storage burden.

Description

Technical Field

[0001] This invention relates to the field of land resource information management and geographic information spatial data processing technology, specifically a land monitoring and management system based on edge computing. Background Technology

[0002] With the informatization of real estate registration management, land surveying and mapping and result review, land monitoring and management systems for collaborative processing between central management and enterprise ends have become an important application direction in the field of natural resource management. In order to ensure that the results of newly added land parcels meet the preset review cycle and are transferred safely, preset detection standards have been set for the pre-judgment and upload verification of land spatial conflicts.

[0003] In the current land results review process, newly added land parcel graphic files are usually edited by the enterprise side and uploaded to the central management terminal. The central management terminal then checks for spatial topological conflicts such as overlap, intrusion, or encapsulation by combining the data of surrounding land parcels with confirmed ownership. However, the data volume of the central terminal's spatial base map and cadastral data exceeds the preset data volume threshold. If it is directly distributed to the enterprise side, it will not only easily lead to storage and computing burdens, but also pose a risk of spatial data diffusion. If the method of uploading first and then checking is still adopted, problems such as overlap, partial crossing, or overall encapsulation with boundaries smaller than the preset surveying tolerance will often only be discovered after the file is uploaded. In cases of multiple people editing offline and dynamic changes in surrounding land ownership data, old files and old constraints may continue to be used, affecting the review efficiency and the credibility of the results.

[0004] Therefore, how to lightweight process existing central spatial constraint data without issuing complete vector base maps, and form a constraint carrier that allows enterprises' edge terminals to perform local conflict detection before uploading, while establishing a reliable binding relationship between uploaded files, verification basis, and project version, so as to achieve effective interception before uploading and reliable review after uploading by combining signature verification, digest comparison, and version consistency verification, is crucial to ensuring the security, timeliness, and consistency of land monitoring and management operations. Summary of the Invention

[0005] The purpose of this invention is to provide a land monitoring and management system based on edge computing, and to solve the following technical problems:

[0006] It avoids the storage pressure and leakage risks caused by the sinking of complete vector data, and makes it easier to judge spatial conflicts at the edge through a lightweight spatial constraint carrier, preventing invalid graphic files from being uploaded blindly.

[0007] The objective of this invention can be achieved through the following technical solutions:

[0008] The land monitoring and management system based on edge computing includes a cloud subsystem deployed at the central management end and an edge subsystem deployed at the enterprise edge, and pre-configures public-private key pairs for the central management end and public-private key pairs for the enterprise edge end for the cloud subsystem and the edge subsystem respectively.

[0009] The cloud-based subsystem includes: a project connection application receiving module, which receives project connection applications containing approximate coordinates of land parcels, extracts a set of polygons representing confirmed land parcels within a preset search radius, and outputs a set of polygons representing non-overlapping areas;

[0010] The grid occupancy table generation module is used to divide the set of non-overlapping polygon regions into a set of discrete grids and generate spatial codes. Based on the estimated total number of grids and the preset misjudgment rate, the spatial codes are mapped to a binary array and the grid occupancy verification table is output.

[0011] The verification token issuance module is used to generate a token digest and keep a record based on the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period. After signing with the private key of the central management terminal and encrypting with the public key of the enterprise edge terminal, the edge verification token is output.

[0012] The upload review and feedback module is used to receive the summary of result voucher records, which includes the graphic files to be uploaded and conflict-free vouchers. After verifying the legality and multidimensional consistency, it outputs an entry release instruction or a rejection feedback instruction.

[0013] The edge subsystem includes: an edge local conflict detection module, which is used to decrypt the edge verification token, extract the overlay grid and internal representative points of the graphic file to be uploaded, substitute them into the grid occupancy verification table for conflict detection, and output a local verification pass status record or an interception command.

[0014] The conflict-free credential generation module is used to extract the file digest value of the graphic file to be uploaded when a verification pass status record is received, combine the file digest value with the token digest to generate a conflict-free credential, and summarize and upload the result credential record to the cloud subsystem.

[0015] Furthermore, the specific process by which the grid occupancy table generation module generates the grid occupancy verification table includes:

[0016] The grid size is determined based on the preset surveying tolerance; the estimated total number of grids is determined based on the mapping relationship between the area of ​​each polygon in the set of confirmed land parcel polygons and the grid size; the total length of the binary array and the number of corresponding hash functions are determined based on the preset misjudgment rate and the estimated total number of grids.

[0017] The spatial code of each grid in the discrete grid set is substituted into each hash function corresponding to the number of hash functions to obtain multiple index values. The value at the corresponding index position in the binary array is set to 1, and the grid occupancy check table is output.

[0018] Furthermore, the specific process by which the verification token issuance module outputs the edge verification token includes:

[0019] The grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp, and validity period are concatenated to obtain the payload string to be signed;

[0020] The payload string to be signed is hashed to obtain a token digest, and the token digest is digitally signed using the private key of the central management terminal to obtain a signature string;

[0021] The payload string to be signed is concatenated with the signature string, encrypted using the enterprise edge public key, and an edge verification token is output.

[0022] Furthermore, the specific process by which the edge-local collision detection module performs collision detection includes:

[0023] The edge verification token is decrypted using the enterprise edge private key. The project connection number, token version number and validity period are verified to be consistent with the new land parcel result review application and have not expired. If the verification is successful, the graph parsing stage is allowed.

[0024] The candidate graphic coverage grid set is obtained by continuously rasterizing and expanding all boundary line segments of the uploaded graphic file according to the grid size step.

[0025] The candidate graphic coverage grid set and the grid corresponding to the internal representative point are merged into the grid set to be inspected. The spatial code of any grid in the grid set to be inspected is extracted, and the index value is calculated by substituting it into the hash function of the number of hash functions. The value of the corresponding index position in the grid occupancy verification table obtained from the edge verification token is then queried.

[0026] If there exists a spatial encoding for any grid such that the product of the values ​​at the table index positions corresponding to all hash functions is 1, then the candidate result is determined to have hit a non-overlapping region, an interception command is output, and an error message containing the hit grid position and the corresponding coordinate range is output.

[0027] If the product of all spatial codes of all grids is 0, then output the local verification passed status record.

[0028] Furthermore, the specific process of the conflict-free voucher generation module outputting the summary of result voucher records includes:

[0029] Extract the file digest value of the image file to be uploaded;

[0030] The grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period obtained from the edge verification token are concatenated and hashed to restore the token digest;

[0031] After concatenating the file digest value, project connection number, token version number and token digest, digital signature is performed using the enterprise edge private key to generate a conflict-free credential.

[0032] Establish a communication connection, upload the graphic files to be uploaded, conflict-free credentials, and token version numbers to the cloud subsystem, and output a summary of the results credentials.

[0033] Furthermore, the specific rules for uploading, reviewing, and providing feedback to the module for verification and outputting instructions are as follows:

[0034] Verify the validity of the signature on the conflict-free credential;

[0035] Verify whether the file digest value of the uploaded graphic file matches the file digest value contained in the conflict-free certificate;

[0036] Verify that the project connection number and token version number in the conflict-free credential are consistent with the latest valid token currently available on the central management terminal;

[0037] Verify that the token digest in the conflict-free voucher matches the underlying ledger;

[0038] Only when all four verifications above are true is it determined that the graphic file to be uploaded has been verified at the edge based on the latest and unexpired space constraints, and an entry release instruction is output.

[0039] If any verification fails, the upload is rejected directly, and a token update command is output to the verification token issuance module.

[0040] Furthermore, the upload review and feedback module is also used to handle concurrent conflicts and dirty reads:

[0041] When multiple operators edit offline, causing changes to the content of the graphic file to be uploaded, the file summary value changes accordingly, triggering the invalidation of the conflict-free credential, and the upload is rejected through the upload review and feedback module;

[0042] When the set of polygons of confirmed land parcels within the preset search radius changes, causing the grid occupancy verification table obtained from the edge verification token to be updated, the central management terminal updates the token version number and token digest, triggering the invalidation of the conflict-free certificate corresponding to the old token. The token update instruction is output through the upload review and feedback module, forcing the enterprise edge terminal to re-obtain the latest token and redo the local conflict detection.

[0043] Furthermore, the preset false positive rate is .

[0044] The beneficial effects of this invention are:

[0045] 1. This invention performs local conflict detection at the enterprise edge, continuously rasterizing all boundary segments of the graphic file to be uploaded, and comparing them with the internal representative points in the grid occupancy check table. This processing method can accurately identify extreme spatial conflict conditions such as minor boundary overlap and polygonal overall coverage before the file is uploaded, avoiding the problem of conflicting graphics being blindly uploaded and then rejected by the central end in the traditional mode, which significantly improves the timeliness of land parcel results transfer and review.

[0046] 2. This invention uses a conflict-free credential generation module to concatenate and sign the file digest value, project connection number, token version number, and token digest, establishing a strict binding relationship between the uploaded attachment and the spatial constraint version during local verification. When faced with file changes due to offline editing by multiple users, or dynamic updates to the land parcel data around the central terminal, the system can automatically invalidate old credentials and trigger interception by comparing the digest and version number. This completely solves the business risk of old files and old constraints being incorrectly used, ensuring that the output data flows in accordance with the preset security mechanism. Attached Figure Description

[0047] Other features, objects, and advantages of the invention will become more apparent from the following detailed description of non-limiting embodiments with reference to the accompanying drawings:

[0048] Figure 1 This is a schematic diagram of the modules of the land monitoring and management system based on edge computing provided in the embodiments of this application. Detailed Implementation

[0049] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0050] Please see Figure 1 The land monitoring and management system based on edge computing includes a cloud subsystem deployed at the central management end and an edge subsystem deployed at the enterprise edge end, and pre-configures public-private key pairs for the central management end and public-private key pairs for the enterprise edge end for the cloud subsystem and the edge subsystem respectively;

[0051] The cloud-based subsystem includes: a project connection application receiving module, which receives project connection applications containing approximate coordinates of land parcels, extracts a set of polygons representing confirmed land parcels within a preset search radius, and outputs a set of polygons representing non-overlapping areas;

[0052] The grid occupancy table generation module is used to divide the set of non-overlapping polygon regions into a set of discrete grids and generate spatial codes. Based on the estimated total number of grids and the preset misjudgment rate, the spatial codes are mapped to a binary array and the grid occupancy verification table is output.

[0053] The verification token issuance module is used to generate a token digest and keep a record based on the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period. After signing with the private key of the central management terminal and encrypting with the public key of the enterprise edge terminal, the edge verification token is output.

[0054] The upload review and feedback module is used to receive the summary of result voucher records, which includes the graphic files to be uploaded and conflict-free vouchers. After verifying the legality and multidimensional consistency, it outputs an entry release instruction or a rejection feedback instruction.

[0055] The edge subsystem includes: an edge local conflict detection module, which is used to decrypt the edge verification token, extract the overlay grid and internal representative points of the graphic file to be uploaded, substitute them into the grid occupancy verification table for conflict detection, and output a local verification pass status record or an interception command.

[0056] The conflict-free credential generation module is used to extract the file digest value of the graphic file to be uploaded when a verification pass status record is received, combine the file digest value with the token digest to generate a conflict-free credential, and summarize and upload the result credential record to the cloud subsystem.

[0057] The specific process of generating a grid occupancy verification table by the grid occupancy table generation module includes: determining the grid size based on the preset surveying tolerance; determining the estimated total number of grids based on the mapping relationship between the area of ​​each polygon in the set of confirmed land parcel polygons and the grid size; and determining the total length of the binary array and the number of corresponding hash functions based on the preset misjudgment rate and the estimated total number of grids.

[0058] Substitute the spatial code of each grid in the discrete grid set into each hash function corresponding to the number of hash functions to obtain multiple index values, and set the value at the corresponding index position in the binary array to 1 to output the grid occupancy check table;

[0059] The specific process of the verification token issuance module outputting the edge verification token includes: concatenating the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp, and validity period to obtain the payload string to be signed;

[0060] The payload string to be signed is hashed to obtain a token digest, and the token digest is digitally signed using the private key of the central management terminal to obtain a signature string;

[0061] The payload string to be signed is concatenated with the signature string, encrypted using the enterprise edge public key, and an edge verification token is output.

[0062] In this embodiment, the central management terminal and the enterprise edge terminal are deployed at opposite ends of the network. The enterprise edge terminal submits a project connection application message to the central management terminal through a preset network transmission protocol. The message includes at least the business identifier and approximate coordinates of the land parcel required for project connection.

[0063] After receiving the message, the central management terminal does not directly issue the surrounding vector map. Instead, it extracts the spatial constraint results related to the approximate coordinates of the land parcel and compresses them into a grid occupancy verification table that can be used locally on the edge. Then, it generates an edge verification token by combining the project connection number, token version number, timestamp, and validity period.

[0064] During the subsequent review and application stage of new land parcel results, the enterprise edge terminal first blocks the upload of graphic files locally and performs conflict detection on the graphic files to be uploaded; only after the detection is passed will a conflict-free certificate be generated and uploaded together with the graphic files to be uploaded and the token version number.

[0065] After receiving the uploaded content, the central management terminal performs a consistency check on the signature, file digest, project connection number, token version number, and token digest. If they match, it outputs an entry release instruction; if they do not match, it rejects the upload and returns a token update instruction.

[0066] The system retrieves project connection applications submitted by enterprises at the edge, searches the global land ownership geographic information database based on the approximate coordinates of the land parcels, and generates a set of non-overlapping polygon areas.

[0067] Among them, the approximate coordinates of the land parcel refer to the location description information of the land parcel to be handled submitted by the enterprise during the project connection stage, such as the approximate center point coordinates of the area where the land parcel is located. The coordinates are not required to reach the mapping accuracy of the final result graphic, but should be sufficient to limit the search scope of the central management terminal.

[0068] The preset search radius refers to the spatial range that extends outward from the approximate center point. It is used to limit the confirmed land parcels that are subsequently involved in the exclusion judgment to the necessary range and to avoid irrelevant data from entering the calculation.

[0069] This implementation method first extracts a set of non-overlapping polygons from the central management terminal, retaining only the spatial constraints required for subsequent conflict detection. This avoids the risk of leakage of classified vectors and also prevents edge devices from being subjected to graphics parsing computations exceeding a preset threshold.

[0070] This implementation method can pre-determine the spatial limitation range based on the central end's first search and first filter processing method, avoiding the enterprise end from unconditionally storing a large amount of irrelevant spatial data, and ultimately solving the core problem of existing technologies that cannot effectively judge conflicts before uploading due to the lack of a pre-constraint extraction mechanism;

[0071] Obtain a set of non-overlapping polygons, divide the set of non-overlapping polygons into a grid according to the preset surveying tolerance, and generate a grid occupancy check table;

[0072] Among them, the surveying tolerance refers to the allowable error range in real estate registration surveying business. This parameter is not a simple calculation constant, but a constraint benchmark that determines whether the spatial discrete accuracy can cover the compliance requirements of the business.

[0073] The grid size is set to half of the survey tolerance, so that overlapping areas near the boundary that are smaller than the preset survey tolerance can also be covered by grid sampling, reducing missed detections caused by an overly coarse grid; spatial coding refers to the location identifier of each discrete grid, which is used to convert continuous spatial locations into discrete inputs that can be processed by hash functions;

[0074] In practical implementation, the central management terminal can first discretize the internal areas of each confirmed land parcel polygon according to the grid size to form a discrete grid set; and convert the vector polygons that originally exceeded the preset storage and computing power threshold at the edge end into compressible and fast-indexable grid occupancy information.

[0075] If we define the side length of a single discrete mesh used for constraining edge verification and determining spatial accuracy as follows: And the preset surveying tolerance used to ensure that the discrete accuracy is not lower than the business requirements is Then it satisfies ;

[0076] After obtaining the grid size Then, the central management terminal calculates based on the data within the search scope. In the polygons of the confirmed land parcels, each polygon of the confirmed land parcels actual area With grid size The sum of the squares of the ratios is used to calculate the estimated total number of grids needed to be mapped into the calibration table. The calculation formula is as follows:

[0077]

[0078] To reflect the number of discrete grid cells that each parcel will occupy in the exclusion zone; after obtaining the estimated total number of grid cells. Subsequently, the central management system uses a preset false positive rate to constrain the probability of legitimate results being mistakenly intercepted. Calculate the total length of the binary array used to hold the bit space for all grid occupancy traces. And the number of hash functions used to control the number of mappings when each space code is written to the check table. This achieves a stable balance between edge storage resource consumption and the probability of misjudgment, and the calculation formula is as follows:

[0079]

[0080]

[0081] in, It is a rounding function;

[0082] Furthermore, the central management terminal substitutes the spatial code of each discrete grid into... A hash function is used to obtain multiple index values, and the corresponding index position in the binary array is set to 1, thereby obtaining the grid occupancy check table;

[0083] Here, setting it to 1 indicates that the corresponding position has been occupied by a non-overlapping region. When detecting at the edge, the same hash mapping is performed on the grid to be inspected, and the corresponding position is queried.

[0084] This implementation method uses a combination of grid discretization and hash compression to transform the full data transmission into a precise constraint expression for the collision detection task.

[0085] This method does not require the edge end to restore any real land parcel outline, but only requires the edge end to determine whether a certain grid to be inspected may be occupied. Therefore, it is particularly suitable for browser-based devices or computer devices with computing power below a preset threshold. In land surveying business, common evaluation benchmarks include extreme conditions such as minor boundary overlap, gaps, and encroachment.

[0086] If the traditional upload-then-verify mode is used, even if the overlap is only localized at the boundary and is smaller than the preset surveying tolerance, it can only be detected by the central end after the complete attachment is uploaded.

[0087] In this implementation, the space occupancy near the boundary has been discretized into grid occupancy information, and the enterprise edge can quickly judge these extreme working conditions before uploading. Even if there is a misjudgment in the hash mapping structure of the above grid occupancy verification table, it only means that the graphic that could have been uploaded is intercepted in advance, and there will be no situation where there is a conflict but it is allowed. Therefore, it is more in line with the security requirements of the results review business.

[0088] This implementation can achieve compressed expression of spatial exclusion information based on grid discretization and hash mapping, avoiding the storage pressure and leakage risk caused by the sinking of complete vector data, and ultimately solving the core problem of the lack of lightweight spatial constraint carrier in the existing technology, which makes it impossible for the edge to make pre-judgment.

[0089] Obtain the grid occupancy verification table, and sign and encrypt the grid occupancy verification table according to the project connection number, token version number, timestamp, validity period and hash function parameter configuration set to generate an edge verification token;

[0090] Among them, the project connection number refers to the identifier of a business connection process, which is used to bind the subsequent result review application to the previous spatial constraints to the same business object;

[0091] The token version number refers to the version identifier of the current spatial constraint, which is used to explicitly determine the old spatial constraint as invalid when changes occur in the surrounding confirmed land parcels;

[0092] The timestamp and validity period are used to limit the generation period and usability period of the token, preventing expired constraints from being used again; the hash function parameter configuration set refers to the set of parameters required for the edge end to rebuild the hash mapping, which is used to ensure that the central end generates the verification table and the edge end executes the query using the same mapping rule;

[0093] Specifically, the hash function parameter configuration set includes: the type of the basic hash algorithm, and the parameters used to generate different mapping results. A unique random seed sequence, and a modulo radix used to limit the hash result to the range of valid indices. ;in, The number of hash functions. The total length of the binary array.

[0094] In practice, the central management end concatenates the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp, and validity period into a payload string to be signed;

[0095] The splicing action binds the constraint content and the applicable conditions of the constraint into an indivisible data unit;

[0096] After hashing the payload string to obtain the token digest, the central management terminal's private key is used for digital signature. The payload string and the signature string are concatenated and then encrypted using the enterprise edge terminal's public key to obtain the edge verification token.

[0097] The token digest is used by the central management end to keep a record, and is also used in the subsequent upload and review stage to determine whether the conflict-free credentials submitted by the edge end correspond to the same version of constraint content; the digital signature is used to ensure that the constraints obtained by the edge end are indeed issued by the central management end and not forged.

[0098] Encryption using the enterprise edge public key ensures that the token can only be decrypted and read by the party holding the enterprise edge private key, preventing the restricted content from being directly obtained by other entities during transmission;

[0099] This implementation embeds the grid occupancy verification table, along with the version, validity period, and hash configuration, into the token. This ensures that the edge does not perform verification without a specific scope, but rather performs verification specifically for a particular project, version constraint, and validity period.

[0100] This implementation method can achieve consistent binding of constraint content, scope of application and user subject based on joint processing of signature and encryption, avoiding problems such as reuse of old constraints, forgery of verification conditions or misuse of project numbers, and ultimately solving the core problem of existing technologies that make it difficult for the central end to confirm whether the verification basis of the edge end is true and consistent due to the lack of a trusted constraint carrier.

[0101] In the application examples, the central management terminal can deploy a global land ownership geographic information database, a grid occupancy table generation module, a verification token issuance module, and an upload review and feedback module;

[0102] Enterprise edge devices can deploy token caching functionality, edge-local conflict detection modules, and conflict-free credential generation modules; during the project application phase, the enterprise edge device submits the approximate coordinates of the land parcel through structured business messages, and the central management terminal returns the edge verification token;

[0103] During the achievement review and application stage, the edge terminal first reads the local graphic file to be uploaded, then calls the cached edge verification token to complete the local verification. After the verification is passed, the achievement certificate record is summarized and an upload request is sent to the central management terminal.

[0104] After the central management terminal completes the verification and comparison, it outputs an inbound release instruction to the business processing flow, or an inbound token update instruction to the token issuance processing flow.

[0105] In this way, data flows along the same project connection number and token version number from project connection to result review, and business actions can be continuously constrained to the same set of spatial constraints.

[0106] In a preferred embodiment of the present invention, the specific process of the edge local conflict detection module performing conflict detection includes: using the enterprise edge private key to decrypt the edge verification token, verifying whether the project connection number, token version number and validity period are consistent with the application for review of newly added land parcel results and have not expired; if the verification is successful, the process is allowed to enter the graph parsing stage.

[0107] The candidate graphic coverage grid set is obtained by continuously rasterizing and expanding all boundary line segments of the uploaded graphic file according to the grid size step.

[0108] The candidate graphic coverage grid set and the grid corresponding to the internal representative point are merged into the grid set to be inspected. The spatial code of any grid in the grid set to be inspected is extracted, and the index value is calculated by substituting it into the hash function of the number of hash functions. The value of the corresponding index position in the grid occupancy verification table obtained from the edge verification token is then queried.

[0109] If there exists a spatial encoding for any grid such that the product of the values ​​at the table index positions corresponding to all hash functions is 1, then the candidate result is determined to have hit a non-overlapping region, an interception command is output, and an error message containing the hit grid position and the corresponding coordinate range is output; if the product of the spatial encodings of all grids is 0, then a local verification pass status record is output.

[0110] The specific process of the conflict-free voucher generation module outputting the summary of result voucher records includes: extracting the file digest value of the graphic file to be uploaded;

[0111] The grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period obtained from the edge verification token are concatenated and hashed to restore the token digest;

[0112] After concatenating the file digest value, project connection number, token version number and token digest, digital signature is performed using the enterprise edge private key to generate a conflict-free credential.

[0113] Establish a communication connection, upload the graphic file to be uploaded, conflict-free credentials, and token version number to the cloud subsystem, and output a summary of the results credentials record;

[0114] The specific rules for the upload review and feedback module to verify and output instructions are as follows: verify the signature validity of the conflict-free certificate; verify whether the file digest value of the uploaded graphic file to be uploaded is consistent with the file digest value contained in the conflict-free certificate;

[0115] Verify that the project connection number and token version number in the conflict-free voucher are consistent with the latest valid token in the central management terminal; verify that the token digest in the conflict-free voucher is consistent with the ledger.

[0116] Only when all four verifications above are true is it determined that the graphic file to be uploaded has been verified at the edge based on the latest and unexpired space constraints, and an entry release instruction is output.

[0117] If any verification fails, the upload is rejected directly, and a token update command is output to the verification token issuance module.

[0118] This implementation focuses on how the enterprise edge terminal uses edge verification tokens to perform local conflict detection on the graphic files to be uploaded, and how the central management terminal reviews the upload results;

[0119] Overall, after the enterprise edge device initiates a results review application, it does not immediately establish an upload connection. Instead, it first reads the graphic file to be uploaded and completes token decryption, graphic parsing, grid detection, and conflict-free credential generation locally. Only after obtaining a local verification pass status record does it establish a communication connection and upload the data.

[0120] After receiving the data, the central management terminal does not re-execute the complete edge parsing process. Instead, it determines whether the upload is based on the correct space constraints by verifying the signature, comparing the digest, and comparing the version consistency.

[0121] Obtain the application for review of new land parcel results, perform local conflict detection on the graphic file to be uploaded based on the edge verification token and the graphic file to be uploaded, and generate an interception command or a local verification pass status record.

[0122] Among them, the application for review of newly added land parcel results refers to the business request formed when the enterprise enters the result submission stage at the peripheral end, which is associated with at least one project connection number and one graphic file to be uploaded;

[0123] The graphic file to be uploaded refers to the graphic result file used to express the boundary and shape of the newly added land parcel; the internal representative point refers to one or more representative location points extracted from the interior of the corresponding polygon in the graphic file to be uploaded, which are used to supplement the internal occupancy information missed when only the boundary is detected.

[0124] In practice, the enterprise edge terminal uses its private key to decrypt the edge verification token and verifies whether the project connection number, token version number, and validity period are consistent with the current result review application and have not expired. The verification is used to ensure that the space constraints used for subsequent local testing belong to the current business object and are within the validity period.

[0125] If the verification passes, the image file can be read and the image parsing stage can begin; if the verification fails, the image parsing stage will not begin, and the upload stage will not be allowed.

[0126] Furthermore, at the enterprise edge, all boundary line segments of the graphic file to be uploaded are continuously rasterized and expanded according to the grid size step size to obtain a set of candidate graphic coverage grids;

[0127] Continuous rasterization unfolding refers to projecting the boundary line segments onto a discrete grid segment by segment with the same grid size as the center end, so that every grid that the boundary passes through is included in the detection range, rather than just extracting a small number of boundary points.

[0128] Since checking only the sampling points will result in a missed intersection when the boundary line segment passes through the grid but does not fall on the discrete sampling point, when the boundary size is smaller than the preset tolerance, the intersection will be missed.

[0129] Subsequently, the enterprise edge merges the candidate graphic coverage grid set with the grid corresponding to the internal representative points into a grid set to be inspected, and performs spatial encoding of a single grid to be inspected, which is a discrete representation of a specific occupied position in the graphic to be uploaded. The detection process can be represented as follows:

[0130]

[0131] Encode the space Substituting the values ​​obtained from the calculations at the central management terminal In the hash function, the first one is... The index value is obtained by calculating the hash function. To locate the grid occupancy check table obtained from the edge check token. The detection result is obtained by multiplying multiple query bits in the data. for or These correspond to either missed or non-overlapping areas, respectively.

[0132] If there exists any grid encoding such that the product of the values ​​at the corresponding positions of all hash functions is 1, it means that the grid is marked as occupied in the verification table. Based on this, the enterprise edge determines that the candidate result hits the non-overlapping area, generates an interception command, and outputs an error message containing the hit grid position and the corresponding coordinate range.

[0133] Error messages provide local location hints to facilitate graphic modification; if the detection results for all grids to be inspected are 0, a local verification pass status record is generated.

[0134] This implementation method controls two types of problems simultaneously: minor boundary intersections and overall coverage, by continuously rasterizing boundary segments and supplementing with internal representative points. This moves problems that could only be discovered after uploading to be judged locally at the edge.

[0135] In the review of land results, extreme conditions are often not intersections with an area greater than the preset threshold, but rather overlaps with a local overlap degree less than the preset tolerance, polygons with an aspect ratio greater than the preset threshold, or newly added land parcels falling entirely within already confirmed land parcels. If traditional boundary discrete point sampling is used, it is easy to be less sensitive to local crossings of slender boundaries. If only the boundary is detected and not the interior, it is easy to miss the overall coverage situation.

[0136] This implementation method improves the interception capability under such conditions by continuously rasterizing the boundary line segments and superimposing the detection of internal representative points.

[0137] This implementation method can achieve local conflict detection of the graphic to be uploaded based on continuous rasterization and joint judgment of internal representative points, avoiding the judgment gap caused by sampling only a small number of boundary points, and finally solving the core problem of the lack of a pre-upload spatial detection mechanism in the existing technology, which leads to the blind uploading of invalid graphic files.

[0138] Obtain local verification pass status records, and generate a summary of conflict-free credentials and result credentials based on the image file to be uploaded and the edge verification token;

[0139] The file digest value refers to the digest result obtained by performing a hash operation on the image file to be uploaded, which is used to compress the file content into a fixed-length identifier;

[0140] The token digest refers to the digest result obtained by hashing the payload content of the edge verification token, which is used to identify the version of the space constraint conditions on which the local verification is based.

[0141] A conflict-free credential is a joint signature of the file digest value, project connection number, token version number, and token digest, used to indicate that the enterprise edge claims that a certain file has been locally checked for a certain version constraint and no conflict has been found.

[0142] In practice, the enterprise edge first extracts the file digest value of the graphic file to be uploaded, and then performs a hash operation by concatenating the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period obtained from the edge verification token to restore the token digest.

[0143] Restoration refers to the process by which the edge end calculates the same digest result as the center end based on the decrypted payload.

[0144] The enterprise edge device concatenates the file digest value, project connection number, token version number and token digest, and uses the enterprise edge device's private key to perform digital signature to generate a conflict-free credential.

[0145] After obtaining the conflict-free certificate, the enterprise edge establishes a communication connection and uploads the graphic file to be uploaded, the conflict-free certificate, and the token version number to the cloud subsystem, forming a summary of the results certificate records. During this upload process, the graphic file and the certificate are not independent files without any connection, but rather a correspondence anchored by the file summary value, project connection number, and token version number.

[0146] If the content of the graphic file changes, the file digest value changes, and the previous conflict-free credential no longer corresponds to the current file content;

[0147] This implementation requires the edge device to generate a credential that is bound to the file content, project number, and token version before uploading, which can clearly indicate which file has been verified for which project and which version constraint;

[0148] This implementation method can achieve consistent binding between uploaded content and local verification basis based on the joint signature of file digest and token digest, avoiding the use of old verification results after file changes, and ultimately solving the core problem of existing technology that the central end cannot confirm whether the verification object of the edge end is consistent with the actual uploaded file due to the lack of upload proof binding mechanism.

[0149] The system retrieves a summary of the achievement voucher records sent by the enterprise edge terminal. Based on the conflict-free vouchers, the graphic files to be uploaded, and the bottom-line information, it reviews the uploaded results and generates an entry release instruction or a token update instruction. The bottom-line information refers to the token digest record retained by the central management terminal when issuing the edge verification token. Its purpose is to provide a reliable comparison benchmark for subsequent upload reviews.

[0150] The latest valid token refers to the token record under the current project connection number that has not expired and has the latest version number. It is used to determine whether the edge terminal is using expired or old version space restriction conditions.

[0151] In practice, the central management end executes the following verification rules in sequence: First, it verifies the signature validity of conflict-free credentials to confirm that the credential was indeed generated by the corresponding enterprise edge terminal;

[0152] Secondly, verify whether the file digest value of the uploaded graphic file is consistent with the file digest value contained in the conflict-free certificate, in order to confirm that the certificate corresponds to the currently uploaded file;

[0153] Third, verify whether the project connection number and token version number in the conflict-free certificate are consistent with the latest valid token on the central management end, in order to confirm that the edge end is not using the old version of constraints;

[0154] Fourth, verify whether the token digest in the conflict-free voucher is consistent with the underlying ledger, to confirm that the constraint content on which the edge verification is based has not deviated from the content issued by the central end; only when all four items above are true will the central management end output the warehouse release instruction.

[0155] If any one of the conditions is not met, the upload will be rejected directly, and a token update instruction will be output to the token verification and issuance module. This implementation does not consider the successful transmission of the file to the server as a valid basis for acceptance, but rather uses the validity of the signature, consistency of the file, consistency of the version, and consistency of the digest as conditions for release.

[0156] This allows for the differentiation of old documents, old tokens, incorrect items, and forged credentials. In business environments where multiple operators participate in drawing, graphic files are repeatedly modified, and data around the central terminal may change, relying solely on file names or project numbers for verification is less sensitive than the preset comparison accuracy threshold. For example, if the file content is redrawn but the name remains unchanged, traditional methods may not be able to identify it in a timely manner.

[0157] If the token version changes but the attachment continues to use the old verification result, the traditional method is also prone to mismatch in the business chain; this implementation method uses the file digest value and the token digest for dual comparison, which can transform these changes into inconsistent results that can be directly verified by the central end;

[0158] This implementation method can achieve upload verification based on signature verification, file digest comparison, version comparison and record comparison, avoiding the misuse of no longer applicable local verification results as valid evidence, and ultimately solving the core problem of insufficient credibility of upload results due to the lack of unified verification rules in the existing technology.

[0159] In the application example, after selecting the graphic file to be uploaded, the enterprise edge terminal first parses the graphic object and calculates the file digest value in local memory, and then uses the decrypted edge verification token as the constraint input in the same process; after the detection is passed, the enterprise edge terminal encapsulates the graphic file to be uploaded, the conflict-free certificate and the token version number into an upload message and sends it to the central management terminal.

[0160] After receiving the message, the central management terminal first reads the conflict-free credential and verifies the signature, then calculates the digest value of the uploaded file in real time and compares it with the credential content. After the verification is completed, the result is written to the business processing status.

[0161] If the test passes, the results are released into the database; if it fails, a token update instruction is returned in the response message, and the enterprise edge device obtains the latest token and performs local testing again.

[0162] In a preferred embodiment of the present invention, the upload review and feedback module is also used to handle concurrent conflicts and dirty reads: when multiple operators edit offline, causing changes in the content of the graphic file to be uploaded, the file summary value changes accordingly, triggering the invalidation of the conflict-free certificate, and the upload review and feedback module refuses to upload;

[0163] When the set of polygons of confirmed land parcels within the preset search radius changes, causing the grid occupancy verification table obtained from the edge verification token to be updated, the central management terminal updates the token version number and token digest, triggering the invalidation of the conflict-free certificate corresponding to the old token. The token update instruction is output through the upload review and feedback module, forcing the enterprise edge terminal to re-obtain the latest token and redo the local conflict detection.

[0164] The preset false positive rate is .

[0165] This implementation focuses on how the system handles the problem of old credentials and tokens becoming invalid under two common business scenarios: multi-person offline editing and changes in central spatial data. It also explains the setting method of the false judgment rate and its business significance. This part does not add a new verification link, but rather provides a clearer handling method for the two scenarios of file changes and constraint changes on the basis of the aforementioned upload review rules.

[0166] Obtain the image file to be uploaded and the conflict-free certificate. Determine whether the conflict-free certificate is still valid based on whether the file digest value has changed, and generate a rejection upload result.

[0167] Among them, multi-operator offline editing refers to multiple operators modifying the same business graphic on different terminals or different edit copies;

[0168] Changes in file content do not require changes in file name. As long as the actual byte content changes, the recalculated file digest value will change. The file digest value serves as a unique identifier for the currently uploaded content, rather than simply an archive number.

[0169] In practice, after a conflict-free credential is generated at the enterprise edge, if the image file to be uploaded is modified again, the recalculated file digest value will no longer be equal to the file digest value bound to the credential.

[0170] When the central management terminal uploads the summary value for review, it compares the two values. If they are inconsistent, it determines that the conflict-free certificate cannot prove that the current file has completed local verification and rejects the upload directly.

[0171] This implementation method uses the file digest value as a quantitative basis to maintain stable sensitivity to changes in attachment content, and avoids the continued uploading of old vouchers after multiple people have edited concurrently. This implementation method can directly determine the invalidation of conflict-free vouchers based on changes in the file digest value, and avoids the erroneous submission of old drafts or old copies. Ultimately, it solves the core problem of the lack of a content-level consistency judgment mechanism in the existing technology, which makes it easy for mis-transmission to occur when multiple people are editing offline.

[0172] Obtain the updated results of the polygon set of confirmed land parcels within the preset search radius, update the token version number and token digest according to whether the grid occupancy verification table has changed, and generate a token update instruction;

[0173] Among them, changes in the polygon set of confirmed land parcels refer to the addition, alteration, or replacement of land parcel results within the search scope that would affect the determination of non-overlapping areas;

[0174] The update of the grid occupancy check table means that the space constraints that were originally used for local detection at the edge no longer correspond to the latest status currently known at the center.

[0175] The token version number is used to identify that this change has led to a switch of constraint versions, while the token digest is used to identify the specific constraint content after the switch. In practice, as long as the grid occupancy verification table regenerated by the central management terminal based on the updated set of polygons of the confirmed land parcels is different from the previous version, the central management terminal will synchronously update the token version number and token digest.

[0176] At this point, even if the signature of the conflict-free certificate corresponding to the old token is correct, it will be deemed invalid by the upload review and feedback module due to version inconsistency or inconsistency between the token digest and the ledger. Based on this, the central management terminal outputs a token update instruction, requiring the enterprise edge terminal to obtain the latest token and redo the local conflict detection.

[0177] This implementation method directly transmits changes in surrounding rights confirmation data to the token version and token digest, which can transform backend changes that did not originally trigger frontend status updates into explicit conditions that the frontend must re-verify.

[0178] In land management, the results of land ownership confirmation for surrounding parcels are not static. If the method of unconditionally reusing historical constraints is still adopted, the peripheral end of the enterprise may judge that there is no conflict based on the outdated exclusion zone, but the central end actually has new non-overlapping areas.

[0179] This implementation restricts the continued use of old tokens by using both version number and digest value, so that such inconsistencies can be identified in a timely manner before and after uploading;

[0180] This implementation can trigger token version updates and digest updates based on changes in the grid occupancy verification table, preventing old constraints from continuing to be used as the basis for uploading when surrounding data has changed, and ultimately solving the core problem of distortion of old verification results due to the lack of constraint update transmission mechanism in the existing technology.

[0181] A preset false positive rate is obtained. Based on the estimated total number of grid cells, the total length of the grid occupancy check table and the number of hash functions are determined to keep the probability of a legitimate image file being mistakenly identified as having a spatial topology conflict within a preset range. The preset false positive rate is... ;

[0182] The preset false positive rate is a constraint parameter configured based on the preset memory usage threshold at the edge; no false negatives mean that for the image files to be uploaded that actually hit the non-overlapping area, this implementation will not mistakenly classify them as conflict-free due to the Bloom mapping structure.

[0183] False positives refer to the situation where a valid image file is prematurely blocked even when the false positive rate is below the preset threshold because multiple hash positions are already set.

[0184] In practice, the central management terminal still determines the total length according to the aforementioned formula. and the number of hash functions When the false positive rate is fixed at ; At the same time, for the estimated total number of grids of the same size, a set of corresponding bit array lengths and hash counts can be obtained, so that the edge can complete the conflict pre-screening with storage resources lower than the preset occupancy threshold without holding the real base map.

[0185] By intercepting legitimate files in advance when the false positive rate is below a preset threshold, this implementation avoids allowing files that intrude into non-overlapping areas to pass. By explicitly controlling the false positive rate, this implementation transforms edge pre-screening from a heuristic judgment without quantitative constraints into a quantifiable design.

[0186] This implementation method can be based on The false positive rate setting controls the size of the grid-occupied verification table, reducing the probability of legitimate graphics being falsely intercepted while ensuring no false positives are missed. Ultimately, this solves the core problem of existing technologies where edge verification parameters are difficult to set uniformly due to the lack of a quantifiable false positive control mechanism.

[0187] In the application example, when multiple people are editing the same land parcel result file offline at the enterprise edge, and any operator uploads it again after making modifications, the central management terminal will immediately calculate the file summary value of the currently uploaded file and compare it with the summary in the conflict-free certificate; if the file content has changed, the upload result will be rejected immediately.

[0188] For example, when the confirmed land parcels within the management scope of the central management terminal are updated, causing changes in the exclusion zone within the preset search radius, the central management terminal will synchronously update the token version number and token digest after regenerating the grid occupancy verification table.

[0189] If the enterprise edge continues to submit the summary of achievement voucher records corresponding to the old token, the central management terminal will return a token update instruction, and the enterprise edge will then retrieve the token again and perform local conflict detection again.

[0190] Using the above methods, the system can continuously maintain consistency between the upload basis and the current business status under both file changes and constraint changes.

[0191] The foregoing has provided a detailed description of one embodiment of the present invention, but this description is merely a preferred embodiment and should not be construed as limiting the scope of the invention. All equivalent variations and modifications made within the scope of the claims of this invention should still fall within the patent coverage of this invention.

Claims

1. A land monitoring and management system based on edge computing, characterized in that, It includes a cloud subsystem deployed at the central management end and an edge subsystem deployed at the enterprise edge, and pre-configures public-private key pairs for the central management end and public-private key pairs for the enterprise edge end for the cloud subsystem and the edge subsystem respectively; The cloud subsystem includes: a project connection application receiving module, which is used to receive project connection applications containing the approximate coordinates of land parcels, extract the set of polygons of confirmed land parcels within a preset search radius, and output the set of polygons of non-overlapping areas. The grid occupancy table generation module is used to divide the set of non-overlapping polygon regions into a set of discrete grids and generate a spatial code. Based on the estimated total number of grids and the preset misjudgment rate, the spatial code is mapped to a binary array and a grid occupancy verification table is output. The verification token issuance module is used to generate a token digest and keep a record based on the grid occupancy verification table, hash function parameter configuration set, project connection number, token version number, timestamp and validity period. After signing with the private key of the central management terminal and encrypting with the public key of the enterprise edge terminal, the edge verification token is output. The upload review and feedback module is used to receive the summary of result voucher records, which includes the graphic files to be uploaded and conflict-free vouchers. After verifying the legality and multidimensional consistency, it outputs an entry release instruction or a rejection feedback instruction. The edge subsystem includes: an edge local conflict detection module, which is used to decrypt the edge verification token, extract the overlay grid and internal representative points of the graphic file to be uploaded, substitute them into the grid occupancy verification table to perform conflict detection, and output a local verification pass status record or an interception command. The conflict-free credential generation module is used to extract the file digest value of the graphic file to be uploaded when a verification pass status record is received, combine the file digest value with the token digest to generate a conflict-free credential, and upload the result credential record to the cloud subsystem.

2. The land monitoring and management system based on edge computing according to claim 1, characterized in that, The specific process by which the grid occupancy table generation module generates the grid occupancy verification table includes: The grid size is determined based on the preset surveying tolerance; the estimated total number of grids is determined based on the mapping relationship between the area of ​​each polygon in the set of confirmed land parcel polygons and the grid size; the total length of the binary array and the number of corresponding hash functions are determined based on the preset misjudgment rate and the estimated total number of grids. The spatial code of each grid in the discrete grid set is substituted into each hash function corresponding to the number of hash functions to obtain multiple index values, and the value at the corresponding index position in the binary array is set to 1, and the grid occupancy check table is output.

3. The land monitoring and management system based on edge computing according to claim 1, characterized in that, The specific process by which the verification token issuance module outputs the edge verification token includes: The grid occupancy verification table, the hash function parameter configuration set, the project connection number, the token version number, the timestamp, and the validity period are concatenated to obtain the payload string to be signed; The token digest is obtained by hashing the payload string to be signed, and the token digest is digitally signed using the private key of the central management terminal to obtain the signature string; The payload string to be signed is concatenated with the signature string, and then encrypted using the enterprise edge public key to output the edge verification token.

4. The land monitoring and management system based on edge computing according to claim 2, characterized in that, The specific process by which the edge local conflict detection module performs conflict detection includes: The edge verification token is decrypted using the enterprise edge private key. The project connection number, the token version number, and the validity period are verified to be consistent with the application for review of new land parcel results and have not expired. If the verification is successful, the graph parsing stage is allowed. The candidate graphic coverage grid set is obtained by continuously rasterizing and unfolding all boundary line segments of the graphic file to be uploaded according to the step size of the grid size; The candidate graphic overlay grid set and the grid corresponding to the internal representative point are merged into a grid set to be inspected. The spatial code of any grid in the grid set to be inspected is extracted, and the index value is calculated by substituting it into the hash function of the number of hash functions respectively. The value of the corresponding index position in the grid occupancy verification table obtained from the edge verification token is then queried. If there exists a spatial encoding for any grid such that the product of the values ​​at the table index positions corresponding to all hash functions is 1, then it is determined that the candidate result has hit a non-overlapping region, the interception instruction is output, and an error message containing the hit grid position and the corresponding coordinate range is output. If the product of the spatial codes of all grids is 0, then the local verification pass status record is output.

5. The land monitoring and management system based on edge computing according to claim 1, characterized in that, The specific process of the conflict-free voucher generation module outputting the summary of result voucher records includes: Extract the file digest value of the image file to be uploaded; The token digest is obtained by concatenating the grid occupancy verification table, the hash function parameter configuration set, the project connection number, the token version number, the timestamp, and the validity period obtained from the edge verification token and performing a hash operation. The file digest value, the project connection number, the token version number and the token digest are concatenated and digitally signed using the enterprise edge private key to generate the conflict-free credential. Establish a communication connection, upload the graphic file to be uploaded, the conflict-free certificate, and the token version number to the cloud subsystem, and output the summary of the result certificate records.

6. The land monitoring and management system based on edge computing according to claim 1, characterized in that, The specific rules for the upload review and feedback module to verify and output instructions are as follows: Verify the signature validity of the conflict-free credential; Verify whether the file digest value of the uploaded graphic file to be uploaded is consistent with the file digest value contained in the conflict-free certificate; Verify that the project connection number and the token version number in the conflict-free credential are consistent with the latest valid token currently available on the central management terminal; Verify that the token digest in the conflict-free credential is consistent with the ledger; Only when all four verifications above are true is it determined that the graphic file to be uploaded has been verified at the edge based on the latest and unexpired space constraints, and the entry release instruction is output. If any verification fails, the upload is rejected directly, and a token update command is output to the verification token issuance module.

7. The land monitoring and management system based on edge computing according to claim 6, characterized in that, The upload review and feedback module is also used to handle concurrent conflicts and dirty reads: When multiple operators edit offline, causing changes to the content of the graphic file to be uploaded, the file summary value changes accordingly, triggering the invalidation of the conflict-free credential, and the upload is rejected through the upload review and feedback module; When the set of confirmed land parcel polygons within the preset search radius changes, causing the grid occupancy verification table obtained from the edge verification token to be updated, the central management terminal updates the token version number and the token digest, triggering the invalidation of the conflict-free credential corresponding to the old token. The token update instruction is output through the upload review and feedback module, forcing the enterprise edge terminal to re-obtain the latest token and redo the local conflict detection.

8. The land monitoring and management system based on edge computing according to claim 1, characterized in that, The preset misjudgment rate is .

Images