Method and system for adaptive geospatial information variable service based on access authority and computer program for the same

Abstract

An adaptive spatial information variable service method is executed by a computing device and may include: receiving access permission information from a user regarding a spatial object stored in a spatial information database; determining a transformation rule to be applied to the spatial object based on one or more of an encryption key, a security level, and a mission type included in the access permission information; generating a transformed spatial object by dynamically transforming one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule; and providing map data including the transformed spatial object to the user.

Description

Technology Field

[0001] The embodiments relate to an access-authority-based adaptive spatial information variable service method and system and a computer program for the same. More specifically, the embodiments relate to a technology that determines transformation rules for spatial objects stored in a spatial information database based on encryption keys, security levels, mission types, etc., included in user access authorization information, and dynamically transforms the shape, attributes, and / or resolution, etc., of the spatial objects according to the transformation rules to provide map data differentiated for each user. Background Technology

[0002] In the fields of military operations and national defense, spatial information is utilized for various purposes, such as operational planning, route finding, and facility management, and its importance is growing day by day. In particular, as the use of integrated spatial information from diverse sources—such as the Defense Geomorphic Database (FDB), national base maps, and civilian map services (OSM)—increases, there is a growing demand to provide services to various users based on a single spatial information database.

[0003] In this regard, Registered Patent Publication No. 10-1338243 discloses a military information visualization system utilizing a web-based virtual space. The aforementioned prior art visualizes military documents in a three-dimensional virtual space and provides a zoom-in function through Level of Detail (LOD) functionality, but it focuses only on improving the method of displaying military information and does not disclose security control technology based on user access rights.

[0004] Meanwhile, spatial information includes sensitive data such as military facilities, tactical roads, and command centers, so providing the same level of information to all users can cause serious security issues. While controlling access by establishing separate databases for each security level or hiding specific layers could be considered, these methods lead to wasted storage space and data synchronization problems. Furthermore, they are vulnerable to security risks as the very existence of the layers may be exposed, and they have limitations in that they make it impossible to provide flexible information tailored to specific mission types.

[0005] Furthermore, when attempting to utilize civilian map data for military purposes, there are limitations due to concerns that the information contained within the data could be misused for military operations; consequently, the rich spatial information resources of the civilian sector are not being effectively utilized. Prior art literature

[0006] Registered Patent Publication No. 10-1338243 The problem to be solved

[0007] According to one aspect of the present invention for solving the problems of such conventional technology, an access-authority-based adaptive spatial information variable service method and system and a computer program for the same can be provided, which can simultaneously secure security and usability by dynamically converting the shape, attributes, and / or resolution of spatial objects according to encryption keys, security grades, mission types, etc. included in the user's access authority information while based on a single spatial information database, thereby providing map data differentiated for each user. means of solving the problem

[0008] An adaptive spatial information variable service method according to one aspect of the present invention is executed by a computing device and comprises the steps of: receiving access rights information from a user for a spatial object stored in a spatial information database; determining a transformation rule to be applied to the spatial object based on one or more of an encryption key, a security level, and a mission type included in the access rights information; dynamically transforming one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule to generate a transformed spatial object; and providing map data including the transformed spatial object to the user.

[0009] In one embodiment, the step of generating the transformed spatial object includes, when the encryption key is determined to be valid, physically moving the coordinates of the vector nodes constituting the spatial object according to a predefined coordinate transformation function to generate the transformed shape.

[0010] In one embodiment, the step of determining the transformation rule includes determining whether to visualize and how to visualize the space object according to the user's security level or mission type by referring to the security level, sensitivity, and need for concealment pre-tagged to the space object.

[0011] In one embodiment, the step of generating the converted space object includes, if the user's access rights fall short of a preset standard, deleting the space object corresponding to the restricted display area or replacing it with a lightweight 3D model.

[0012] In one embodiment, the step of generating the transformed spatial object includes the step of inserting a fake object into a restricted display area when the user's access rights fall below a preset standard. In this case, the fake object may be an object of a type that is determined according to the security level or mission type and does not affect operations, or an object whose location has been randomly disrupted from that of an actual object.

[0013] In one embodiment, the coordinate transformation function is configured to dynamically output different shapes by applying different transformation parameters according to the current time zone or operation phase, even for the same encryption key.

[0014] An adaptive spatial information variable service system according to one embodiment includes: a memory in which executable instructions are stored; a communication unit configured to communicate with an external system; and a processor connected to the memory and the communication unit to communicate with each other.

[0015] At this time, the processor is configured to receive access permission information from a user regarding a spatial object stored in a spatial information database by executing the above command, determine a transformation rule to be applied to the spatial object based on one or more of an encryption key, security level, and mission type included in the access permission information, dynamically transform one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule to generate a transformed spatial object, and provide map data including the transformed spatial object to the user.

[0016] A computer program according to one aspect of the present invention is stored in a computer-readable recording medium to be combined with hardware to execute an adaptive spatial information variable service method according to the embodiments described above. Effects of the invention

[0017] According to an access-authority-based adaptive spatial information variable service system and method of one aspect of the present invention, by dynamically converting and providing the shape, attributes, and / or resolution of spatial objects according to the user's encryption key, security level, mission type, etc., while maintaining a single spatial information database, it is possible to resolve the waste of storage space and data synchronization problems associated with building a separate database.

[0018] An access-authority-based adaptive spatial information variable service system and method according to one aspect of the present invention significantly enhances security by physically transforming vector nodes of spatial objects based on inputs such as encryption keys to output maps of different shapes, and can provide a foundation for safely utilizing civilian map data for military purposes.

[0019] Furthermore, the access-authorization-based adaptive spatial information variable service system and method according to one aspect of the present invention has the advantage of fundamentally preventing the exposure of sensitive information by unauthorized users by providing a function to insert fake objects into restricted display areas or to randomly disrupt and display the locations of actual objects, and to improve operational efficiency by selectively providing only the level of information necessary for operations according to the mission type. Brief explanation of the drawing

[0020] FIG. 1 is a conceptual diagram showing the overall concept of an access-authority-based adaptive spatial information variable service according to one embodiment. FIG. 2 is a schematic block diagram showing the hardware configuration of an access-authority-based adaptive spatial information variable service system according to one embodiment. FIG. 3 is a flowchart illustrating each step of an access-authority-based adaptive spatial information variable service method according to one embodiment. FIG. 4 is a flowchart illustrating the processing process of encryption key-based coordinate transformation according to one embodiment. FIGS. 5A and FIGS. 5B are exemplary diagrams showing changes in the shape of a spatial object before and after the input of an encryption key according to one embodiment. FIGS. 6a to 6c are exemplary diagrams showing the results of spatial object visualization control by security level according to one embodiment. FIGS. 7a and 7b are exemplary diagrams showing the results of inserting a fake object and positioning disturbance according to one embodiment. Specific details for implementing the invention

[0021] In describing the embodiments of this specification, if it is determined that a detailed description of known configurations or functions could obscure the essence of the embodiments of this specification, such detailed description is omitted. Additionally, parts of the drawings unrelated to the description of the embodiments of this specification have been omitted, and similar parts are denoted by similar reference numerals.

[0022] In the embodiments of this specification, when a component is described as being "connected," "combined," or "joined" with another component, this may include not only a direct connection but also an indirect connection in which another component exists in between. Furthermore, when a component is described as "comprising" or "having" another component, this means that, unless specifically stated otherwise, it does not exclude the other component but may include additional components.

[0023] In the embodiments of this specification, terms such as first, second, etc. are used solely for the purpose of distinguishing one component from another component and do not limit the order or importance of the components unless specifically stated otherwise. Accordingly, within the scope of the embodiments of this specification, the first component in an embodiment may be referred to as the second component in another embodiment, and likewise, the second component in an embodiment may be referred to as the first component in another embodiment.

[0024] In the embodiments of this specification, distinct components are used to clearly describe their respective features and do not imply that the components are necessarily separate. The components described in the various embodiments are not necessarily essential components, and some may be optional. Accordingly, embodiments consisting of a subset of the components described in the embodiments are also included within the scope of the embodiments of this specification. Furthermore, embodiments including additional components in addition to the components described in the various embodiments are also included within the scope of the embodiments of this specification.

[0025] Hereinafter, embodiments of the present specification will be examined in detail with reference to the drawings.

[0026] FIG. 1 is a conceptual diagram showing the overall concept of an access-authority-based adaptive spatial information variable service according to one embodiment.

[0027] Referring to FIG. 1, an access-authority-based adaptive spatial information variable service according to one embodiment is realized using an integrated spatial information DB (110) and a variable service engine (100), and can be configured to provide differentiated map data (121, 122, 123, 124) to a plurality of users (111, 112, 113, 114), respectively.

[0028] The integrated spatial information DB (110) is a single database that integrates and stores spatial information collected from various sources, such as the defense terrain database (FDB), national base maps, and civilian map services (OSM). In the integrated spatial information DB (110), various spatial objects such as roads, buildings, military facilities, and terrain are stored in the form of vector data, and each spatial object may have attributes such as security level, sensitivity, and whether concealment is required tagged in advance.

[0029] The variable service engine (100) receives spatial objects from the integrated spatial information DB (110) and generates differentiated map data by dynamically converting one or more of the shape, attributes, and resolution of the spatial objects according to each user's access rights information. The variable service engine (100) can determine a conversion rule to apply to each spatial object based on one or more of the encryption key, security level, and mission type received from the user.

[0030] For example, as illustrated in FIG. 1, multiple users (111, 112, 113, 114) each have different access rights, and the variable service engine (100) can provide different types of map data (121, 122, 123, 124) according to each user's access rights.

[0031] As a specific example, User A (111) is a user who has entered a valid encryption key, and the variable service engine (100) provides a precision map (121) to User A (111). The precision map (121) includes a shape in which the vector node coordinates of a spatial object are physically moved and transformed according to a predefined coordinate transformation function, for example, a road that was displayed as a general mountain path can be transformed and displayed as a precision shape as a tank maneuvering road.

[0032] User B (112) is a user who has not entered an encryption key, and the variable service engine (100) provides User B (112) with map data (122) in which location disturbances are applied to a general map. In this case, the location of the actual spatial object is displayed with random disturbances, thereby preventing a user who does not possess an encryption key from identifying the exact location of a sensitive facility.

[0033] User C (113) is a user with security level 1, and the variable service engine (100) provides User C (113) with a full display map (123) in which all spatial objects are displayed. In the full display map (123), spatial objects containing sensitive information, such as military facilities, command posts, and tactical roads, can be displayed in their original shape and attributes.

[0034] User D (114) is a user with a security level of 3, and the variable service engine (100) provides User D (114) with map data (124) in which fake objects (Decoy) are inserted into the restricted display map. In this case, spatial objects such as military facilities corresponding to the restricted display area are deleted or replaced with lightweight 3D models, and fake objects of a type that do not affect operations are inserted at that location, thereby preventing the existence of sensitive facilities from being exposed to users with a low security level.

[0035] In this way, the access-authority-based adaptive spatial information variable service according to one embodiment is based on a single integrated spatial information DB (110), and by dynamically generating and providing differentiated map data according to each user's access authority through the variable service engine (100), it is possible to secure both security and usability without the need to build a separate database for each security level.

[0036] Meanwhile, the user authority type (whether an encryption key is entered, security level, etc.) and the variable form of the map data corresponding thereto (precision map, location distortion, full display, insertion of fake objects, etc.) illustrated in FIG. 1 are examples to aid in understanding the present invention, and the combination of the type of access authority, the type of transformation rule, and the variable form may be configured in various ways according to the embodiment.

[0037] FIG. 2 is a schematic block diagram showing the hardware configuration of an access-authority-based adaptive spatial information variable service system according to one embodiment.

[0038] The adaptive spatial information variable service system according to the embodiments is implemented in the form of any computing device and may be entirely hardware or have aspects that are partially hardware and partially software.

[0039] For example, the system, device, server, and each unit included therein according to the embodiments may collectively refer to a device for exchanging data of a specific format and content via electronic communication and related software. In this specification, terms such as “unit,” “module,” “server,” “system,” “platform,” “device,” or “terminal” are intended to refer to a combination of hardware and software driven by said hardware. For example, the hardware may be a data processing device including a CPU or other processor. Additionally, the software driven by the hardware may refer to a running process, object, executable, thread of execution, program, etc.

[0040] An adaptive spatial information variable service system according to the embodiments may be implemented as a computing device comprising one or more hardware components. In this case, the adaptive spatial information variable service system may include a memory (210), a processor (220), a communication unit (230), and a spatial information database (DB) (240). In one embodiment, the adaptive spatial information variable service system may further include an input / output unit (not shown).

[0041] The adaptive spatial information variable service system according to the embodiments may be implemented in the form of any computing device, such as a server, a mobile communication terminal, a notebook computer, a personal computer, a PDA (personal digital assistant), a tablet, or a set-top box for IPTV (Internet Protocol Television).

[0042] The memory (210) is a non-transient computer-readable recording medium and may include a permanent mass storage device such as RAM (random access memory), ROM (read only memory), disk drive, SSD (solid state drive), flash memory, etc. Here, the permanent mass storage device such as ROM, SSD, flash memory, disk drive, etc. may be included in the device or server described above as a separate permanent storage device distinct from the memory (210).

[0043] Additionally, the memory (210) may store an operating system and at least one program code (e.g., code for executing an application installed and running on a server or user device). These software components may be loaded from a computer-readable recording medium separate from the memory (210). This separate computer-readable recording medium may include computer-readable recording media such as a floppy drive, disk, tape, DVD / CD-ROM drive, or memory card.

[0044] In another embodiment, software components may be loaded into memory (210) via a communication unit (230) rather than a computer-readable recording medium. For example, at least one program may be loaded into memory (210) based on a computer program installed by files provided over a network by developers or a file distribution system (e.g., a commercial application store service server) that distributes installation files for applications.

[0045] The processor (220) may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input / output operations. Instructions may be provided to the processor (220) by memory (210) or a communication unit (230). For example, the processor (220) may be configured to execute instructions received according to program code stored in a recording device such as memory (210).

[0046] The communication unit (230) can provide a function for the adaptive spatial information variable service system to communicate with a map data server (not shown) and one or more user terminals (200) via a network. Additionally, the function of the communication unit (230) can be controlled by a processor (220) that references memory (210).

[0047] The spatial information DB (240) is a database that stores various spatial objects, such as roads, buildings, military facilities, and terrain, in the form of vector data. For example, spatial information collected from various sources, such as the Defense Geodetic Database (FDB), national base maps, and civilian map services (OSM), can be integrated and stored in the spatial information DB (240). Additionally, each spatial object stored in the spatial information DB (240) may have attributes such as security level, sensitivity, and whether concealment is required tagged in advance, and the processor (220) can determine conversion rules based on the user's access rights by referring to this tagging information. The spatial information DB (240) is connected to communicate with the processor (220) and can provide spatial objects and store or update converted spatial objects in response to the processor's (220) request.

[0048] The input / output unit (not shown) may be a means for interfacing with an external input / output device (not shown). For example, the external input device may include devices such as a keyboard, mouse, microphone, or camera, and the external output device may include devices such as a display, speaker, or haptic feedback device. As another example, the input / output unit (240) may be a means for interfacing with a device in which the functions for input and output are integrated into one, such as a touchscreen.

[0049] Additionally, in other embodiments, the hardware (200) may include more components than those shown in FIG. 2 depending on the nature of the device to which it is applied. For example, when the hardware (200) is applied to a user device, it may be implemented to include at least some of the input / output devices described above, or it may include additional components such as a transceiver, a GPS (Global Positioning System) module, a camera, various sensors, a database, etc. As a more specific example, when the user device is a smartphone, it may be implemented to include various additional components such as an accelerometer or gyroscope sensor, a camera module, various physical buttons, buttons using a touch panel, input / output ports, and a vibrator for vibration, which are generally included in smartphones.

[0050] The processor (220) is configured to execute an operation corresponding to each step of the adaptive spatial information variable service method according to embodiments of the present invention by executing instructions stored in memory (210).

[0051] That is, the processor (220) receives access permission information from a user regarding a spatial object stored in a spatial information DB (240), and can determine a transformation rule to apply to the spatial object based on one or more of the encryption key, security level, and mission type included in the access permission information. Additionally, the processor (220) can dynamically transform one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule to create a transformed spatial object, and provide map data including the transformed spatial object to the user through a user terminal (200).

[0052] The adaptive spatial information variable service method according to embodiments executed by the processor (220) is described in more detail below.

[0053] FIG. 3 is a flowchart illustrating each step of an access-authority-based adaptive spatial information variable service method according to one embodiment.

[0054] Referring to FIG. 3, an access rights-based adaptive spatial information variable service method according to one embodiment may be executed by a computing device, and the computing device may be an access rights-based adaptive spatial information variable service system described with reference to FIG. 2.

[0055] First, the processor (220) can receive access permission information from the user terminal (200) regarding a spatial object stored in the spatial information database (240) (S310). Here, the access permission information may include one or more of an encryption key entered by the user, a security level assigned to the user, and a mission type that the user intends to perform. The access permission information may be generated by the user's input at the user terminal (200) or automatically extracted from authentication information previously stored at the user terminal (200).

[0056] Next, the processor (220) can analyze one or more of the encryption key, security level, and mission type included in the received access rights information (S320). At this stage, the processor (220) can verify the validity of the encryption key, determine whether the user's security level meets a preset standard, or / also determine the level of information required according to the mission type.

[0057] Next, the processor (220) can determine a transformation rule to apply to a spatial object stored in a spatial information database (240) based on the analyzed access rights information (S330). In the step of determining the transformation rule, the processor (220) can determine whether to visualize and how to visualize the spatial object according to the user's security level or mission type by referring to the security level, sensitivity, and need for concealment that are pre-tagged to each spatial object. The transformation rule may include various types such as coordinate transformation, attribute change, resolution adjustment, object deletion, fake object insertion, position distortion, etc.

[0058] Next, the processor (220) can generate a transformed spatial object by dynamically transforming one or more of the shape, attributes, and resolution of the spatial object according to a determined transformation rule (S340). For example, if the encryption key is determined to be valid, the processor (220) can generate a transformed shape by physically moving the coordinates of the vector nodes constituting the spatial object according to a predefined coordinate transformation function. Alternatively, if the encryption key is valid, the original map may be provided, but if the encryption key is invalid, the transformed shape may be generated by physically moving the coordinates of the vector nodes constituting the spatial object according to a predefined coordinate transformation function.

[0059] Additionally, if the user's access rights do not meet the preset criteria, the processor (220) may delete the space object corresponding to the display restriction area, replace it with a lightweight 3D model, insert a fake object into the display restriction area, or randomly disrupt the position of the actual object to create a transformed space object.

[0060] Finally, the processor (220) can provide map data containing the converted spatial object to the user terminal (200) (S350). The map data can be transmitted to the user terminal (200) via a network through the communication unit (230), and the user terminal (200) can provide the received map data to the user by displaying it on a screen.

[0061] FIG. 4 is a flowchart illustrating the processing process of encryption key-based coordinate transformation according to one embodiment.

[0062] Referring to FIG. 4, the processing process of encryption key-based coordinate transformation according to one embodiment may correspond to an example of the process of transforming a shape according to a transformation rule in step S340 of FIG. 3.

[0063] First, the processor (220) can receive an encryption key from the user terminal (200) (S410). The encryption key can be entered directly by the user or extracted from an authentication token stored in the user terminal (200).

[0064] Next, the processor (220) can verify the validity of the received encryption key (S420). In the key validity verification step, the processor (220) can check whether the received encryption key is included in a pre-registered list of valid keys, whether the validity period of the key has not expired, and the scope of authority granted to the key.

[0065] If, as a result of key validation, the encryption key is determined to be valid, the processor (220) may load a coordinate transformation function corresponding to the encryption key (S430). The coordinate transformation function may be defined differently for each encryption key and may include a mathematical function for moving the coordinates of a vector node constituting a spatial object according to a specific rule.

[0066] Next, the processor (220) can apply parameters according to the current time zone or operational phase to the coordinate transformation function (S450). Accordingly, different transformation parameters are applied according to the current time zone (e.g., day / night) or operational phase (e.g., peacetime / wartime) even for the same encryption key, so that different shapes can be dynamically output.

[0067] Next, the processor (220) can perform coordinate transformation of the vector nodes constituting the spatial object using a coordinate transformation function with applied parameters (S460). At this stage, the coordinates of each vector node of the spatial object are physically moved according to the coordinate transformation function, so that, for example, a road that was displayed as a general mountain path can be transformed into a precise shape as a tank maneuvering road.

[0068] Meanwhile, if the encryption key is determined to be invalid as a result of the key validity verification in step S420, the processor (220) may provide a base map without performing coordinate transformation (S440). The base map may be a map in which the original shape of the spatial object is maintained as is, or a map in which transformations such as position distortion or insertion of fake objects are applied according to the user's security level as described with reference to FIG. 3.

[0069] Finally, the processor (220) can output a transformed map containing a spatial object for which coordinate transformation has been performed (S470). The transformed map can be transmitted to a user terminal (200) via a communication unit (230) and displayed on a screen.

[0070] In one embodiment, the encryption key may be restricted to be valid only in a specific geographical area. Specifically, the encryption key may include valid area information indicating the geographical area where the key is valid, and the valid area information may be expressed in the form of a latitude and longitude range, an administrative district code, or a predefined operational area identifier.

[0071] When verifying key validity in step S420, the processor (220) compares the current location information received from the user terminal (200) with the valid area information included in the encryption key, and determines that the encryption key is valid only if the user terminal (200) is located within the valid area. If the user terminal (200) leaves the valid area, the processor (220) may provide a basic map without performing coordinate transformation, or display a message notifying the user of the departure from the valid area. Accordingly, different encryption keys may be issued for each operational area, and even if a specific encryption key is leaked, coordinate transformation is not performed in areas outside the valid area of ​​the key, thereby improving security.

[0072] In addition, in one embodiment, the processor (220) may provide a coordinate transformation inverse transformation function to a user with specific authority. Specifically, the coordinate transformation function loaded in step S430 may include a forward transformation function and an inverse transformation function, wherein the forward transformation function transforms the original coordinates of a spatial object into transformed coordinates, and the inverse transformation function restores the transformed coordinates to the original coordinates.

[0073] The processor (220) checks whether the user's encryption key is granted reverse transformation authority, and may allow the restoration of original coordinates through the reverse transformation function only if the reverse transformation authority is granted. Reverse transformation authority may be granted only to users of a higher security level, and the processor (220) may generate and store an audit log containing information such as the time of reverse transformation, the user performing the transformation, and the target space object whenever a reverse transformation is performed. Additionally, the processor (220) may limit the number of reverse transformations performed for a specific user or a specific period, or perform an approval procedure requiring approval from a higher authority before performing a reverse transformation.

[0074] Furthermore, in one embodiment, the processor (220) can perform coordinate transformation by combining the user's biometric authentication information with an encryption key. Specifically, in step S410, the processor (220) can receive the user's biometric authentication information along with an encryption key from the user terminal (200), and the biometric authentication information may include a biometric template extracted from biometric features such as a fingerprint, iris, face, or voice.

[0075] The processor (220) can generate a final transformation key by combining the received encryption key and the biometric template, and load a coordinate transformation function corresponding to the generated final transformation key. Accordingly, even if a user possesses the same encryption key, different coordinate transformation results may be produced if the biometric authentication information is different, and even if the encryption key is stolen, accurate coordinate transformation cannot be performed without the user's biometric authentication information, thereby enhancing security. Additionally, the processor (220) can identify the individual user who performed the coordinate transformation based on the biometric authentication information, thereby ensuring traceability regarding map data access.

[0076] FIGS. 5A and FIGS. 5B are exemplary diagrams showing changes in the shape of a spatial object before and after the input of an encryption key according to one embodiment.

[0077] FIG. 5a shows an example of a basic map provided to a user without an encryption key being entered. Referring to FIG. 5a, the basic map displays first to third roads (511-513) corresponding to mountainous terrain. Each road (511-513) is represented by a winding curve following the contours of the mountainous terrain, which corresponds to the shape of a typical mountain path or unpaved road. For a user who does not possess an encryption key, the original shape or a generalized shape of the spatial object may be provided in this manner.

[0078] FIG. 5b shows an example of a transformed map provided to a user with a valid encryption key entered. Referring to FIG. 5b, roads (521-523) within the mountainous terrain are transformed and displayed on the transformed map. Compared to the roads (511-513) in FIG. 5a, it can be seen that the transformed first to third roads (521-523) have been transformed into a straightened form. This corresponds to the result of the shape being transformed by physically moving the coordinates of the vector nodes constituting the roads through the encryption key-based coordinate transformation process described with reference to FIG. 4.

[0079] The roads (521-523) of FIG. 5b, transformed through coordinate transformation based on encryption key input, are in the form of a tank maneuver road, with the width expanded and the path straightened, so that they can be represented in a shape suitable for the maneuver of military vehicles. In addition, in one embodiment, the transformed map may also be provided with additional attribute information necessary for military operations, such as the turning radius, slope, and road surface condition of the road.

[0080] FIGS. 6a to 6c are exemplary diagrams showing the results of spatial object visualization control by security level according to one embodiment.

[0081] FIG. 6a shows an example of a full display map provided to a user with security level 1. Referring to FIG. 6a, the full display map shows military facilities (601), runways (602), and radar facilities (603) in their original shapes and attributes. For example, military facilities (601) represent facilities such as command posts or ammunition depots, and runways (602) are displayed in precise shapes as facilities for the take-off and landing of military aircraft. Additionally, radar facilities (603) represent military surveillance equipment, and the location and shape of the facilities are displayed in detail.

[0082] Users with security level 1 have access to all military facilities, so sensitive spatial objects can be displayed as they are without concealment or transformation.

[0083] FIG. 6b shows an example of a partial display map provided to a user corresponding to security level 2. Referring to FIG. 6b, the partial display map shows a generalized facility (611), a runway (612), and a lightweight radar facility (613). Compared to the military facility (601) in FIG. 6a, the generalized facility (611) is depicted with a simplified shape, making it difficult to identify the specific use of the facility. The runway (612) is displayed similarly to the runway (602) in FIG. 6a, but some detailed information may be omitted. The radar facility (613) is replaced with a lightweight 3D model compared to the radar facility (603) in FIG. 6a, so that the presence of the facility is displayed but the detailed shape is concealed. In this way, sensitive spatial objects can be provided to a user of security level 2 in a generalized or lightweight form.

[0084] FIG. 6c illustrates an example of a restricted map provided to a user with security level 3. Referring to FIG. 6c, the restricted map displays a building (621) replaced by a civilian facility, a runway (622) replaced by a general road, and a radar facility (623) marked for deletion. The military facility (601) in FIG. 6a is replaced by a general civilian building (621) in FIG. 6c, thereby concealing the fact that a military facility exists at that location. The runway (602) in FIG. 6a is replaced by a general road (622) in FIG. 6c, so that the existence of the military runway is not exposed. The radar facility (603) in FIG. 6a is marked for deletion (623) in FIG. 6c, thereby removing the existence of the facility from the map. In this way, sensitive military facilities are replaced by civilian facilities or deleted for a user with security level 3, thereby preventing the exposure of military information at its source.

[0085] FIGS. 7a and 7b are exemplary diagrams showing the results of inserting a fake object and positioning disturbance according to one embodiment.

[0086] FIG. 7a shows an example of an original map provided to a user with valid access rights. Referring to FIG. 7a, the original map accurately displays the actual locations of the first military facility (701), the second military facility (702), and the third military facility (703) located within the city area. The first military facility (701) is located in the upper left corner of the city, the second military facility (702) is located within the green area, and the third military facility (703) is located in the lower right corner of the city. The exact location and shape of each military facility can be provided to a user with valid access rights.

[0087] FIG. 7b illustrates an example of a map with fake object insertion and location distortion applied, provided to users with insufficient access rights. Referring to FIG. 7b, the location of the first military facility (701) in FIG. 7a is distorted (720) and displayed as a fake object (711) at a location different from the original first military facility (701). In addition to this location shift, the object (711) may be represented as a decoy object rather than an actual military facility, such as a general warehouse or civilian facility. Furthermore, the second military facility (702) and the third military facility (703) in FIG. 7a are deleted and not displayed in FIG. 7b. Consequently, users with insufficient access rights are unable to determine the exact location of the military facilities.

[0088] In one embodiment, the processor (220) may apply a unique disturbance pattern for each user rather than a random disturbance when performing a location disturbance. Specifically, the processor (220) may input user identification information (e.g., user ID, session information, or a unique identifier of the user terminal (200), etc.) into a hash function to generate a disturbance seed value, and determine the direction and distance of the location disturbance based on the generated disturbance seed value.

[0089] Accordingly, when the same user accesses the same spatial object, the same disturbance pattern is applied to maintain map consistency, while when different users access the same spatial object, different disturbance patterns are applied, allowing the object to be displayed at different locations for each user. Furthermore, when unique disturbance patterns are applied to each user in this manner, a watermark effect can be provided, enabling the traceback of the information leakage path by analyzing the disturbance pattern applied to the map data, even if the map data with applied location disturbance is leaked externally.

[0090] In addition, in one embodiment, the processor (220) may provide different levels of visualization depending on the access time period, even for users of the same security level. Specifically, when the processor (220) receives access authority information from the user terminal (200), it may also check the current time information and apply different levels of visualization depending on whether the current time period is daytime or nighttime, or whether the current operational status is peacetime or wartime.

[0091] For example, during normal daytime, a partial display map as shown in FIG. 6b is provided to a security level 2 user, but during normal nighttime, a map with some sensitive facilities additionally concealed may be provided to the same security level 2 user. Additionally, in wartime, a map with enhanced concealment and disruption applied may be provided to users of all security levels. The processor (220) receives the transition of the operational state in real time by linking with an external operational command system and can immediately change the visualization level of the map provided to all users when the operational state changes. Accordingly, it is possible to flexibly respond to changes in the level of security requirements due to changes in the operational situation.

[0092] In addition, in one embodiment, the processor (220) may not select a fake object from a predefined template, but may dynamically generate a fake object suitable for the surrounding environment context using an AI model. Specifically, the processor (220) may analyze environmental context information, such as building styles, road patterns, terrain characteristics, and land use types existing in the surrounding area of ​​the location where the fake object is to be inserted, and input the analyzed environmental context information into a pre-trained AI model to generate a fake object that naturally fits in with the area.

[0093] For example, in an area densely populated with residential buildings, a fake object in the form of a residential building may be generated, and in the vicinity of an industrial complex, a fake object in the form of a warehouse or factory may be generated. Additionally, the processor (220) may generate a fake object of a different form at each time a user accesses the same point, thereby making it difficult to detect the existence of the fake object even if multiple users compare maps of the same point.

[0094] In addition, the processor (220) can consistently generate visual attributes such as the shadow direction, texture, and color of the generated fake object by taking into account the surrounding environment and the position of the sun in the current time zone, so that the fake object is naturally expressed without any sense of incongruity with the surrounding environment.

[0095] Furthermore, in one embodiment, when the processor (220) performs a transformation on a specific spatial object, it can also consistently transform adjacent objects associated with the spatial object. Specifically, the spatial information DB (240) may store the association relationships between spatial objects in a graph structure, and the association relationships may include physical connection relationships (e.g., access road connection between a road and a building), functional connection relationships (e.g., operational connection between a runway and a hangar), or spatial adjacency relationships (e.g., buildings within the same facility complex). When a transformation rule for a specific spatial object is determined, the processor (220) can identify adjacent objects associated with the spatial object by searching the graph structure and apply a consistent transformation to the identified adjacent objects as well.

[0096] For example, if a military facility is deleted, the access road leading to that facility may also be deleted or converted into a general road; and if a runway is replaced with a general road, adjacent hangars and control towers may also be consistently replaced with civilian facilities. Accordingly, logical inconsistencies that may arise from the partial transformation of individual spatial objects (e.g., cases where an access road exists but there are no connected facilities) can be prevented.

[0097] The operation of the adaptive spatial information variable service method according to the embodiments described above may be implemented at least partially as a computer program and recorded on a computer-readable recording medium. A computer-readable recording medium on which a program for implementing the operation according to the method according to the embodiments is recorded includes all types of recording devices in which data readable by a computer is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc. Additionally, the computer-readable recording medium may be distributed across networked computer systems, and computer-readable code may be stored and executed in a distributed manner. Furthermore, the functional programs, codes, and code segments for implementing the present embodiment will be easily understood by a person skilled in the art to which the present embodiment belongs.

[0098] Additionally, each block or each step illustrated in the flowcharts of this specification may represent a module, segment, or part of code comprising one or more executable instructions for executing a specified logical function(s). Furthermore, in some alternative embodiments, the functions mentioned in the blocks or steps may occur out of order. For example, two blocks or steps illustrated in succession may actually be performed substantially simultaneously, or the blocks or steps may occasionally be performed in reverse order according to the corresponding function.

[0099] The present invention described above has been explained with reference to the embodiments illustrated in the drawings, but this is merely illustrative and those skilled in the art will understand that various modifications and variations of the embodiments are possible therefrom. However, such modifications should be considered to be within the technical scope of protection of the present invention. Accordingly, the true technical scope of protection of the present invention should be determined by the technical spirit of the appended claims.

Claims

Claim 1 A method for an access-authority-based adaptive spatial information variable service executed by a computing device, comprising: receiving access authorization information from a user for a spatial object stored in a spatial information database; determining a transformation rule to be applied to the spatial object based on one or more of an encryption key, a security level, and a mission type included in the access authorization information; generating a transformed spatial object by dynamically transforming one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule; and providing map data including the transformed spatial object to the user, wherein the step of generating the transformed spatial object includes, when the encryption key is determined to be valid, physically moving the coordinates of a vector node constituting the spatial object according to a predefined coordinate transformation function to generate a transformed shape, wherein the coordinate transformation function includes a forward transformation function that transforms the original coordinates of the spatial object into transformed coordinates and an inverse transformation function that restores the transformed coordinates to the original coordinates, and a step of checking whether an inverse transformation authority is granted to the user's encryption key. If inverse transformation authority is granted to the encryption key of the user, the method further comprises the step of allowing the restoration of original coordinates through the inverse transformation function for map data including the transformed spatial object; and the step of generating and storing an audit log including one or more of the time of inverse transformation execution, the user performing the transformation, and the target spatial object whenever an inverse transformation is performed through the inverse transformation function, wherein the step of generating the transformed shape comprises the step of generating a disturbance seed value by inputting the user's identification information into a preset hash function; and the step of applying a disturbance pattern corresponding to the user to the spatial object by determining the direction and distance of positional disturbance based on the generated disturbance seed value.An access-authority-based adaptive spatial information variable service method comprising: a step of exploring association relationships between spatial objects stored in a graph structure in the spatial information database to identify adjacent objects associated with the spatial object to which the transformation rule is to be applied; and a step of applying a transformation corresponding to the transformation rule to the identified adjacent objects. Claim 2 delete Claim 3 An access-authority-based adaptive spatial information variable service method, wherein the step of determining the transformation rule includes the step of determining whether to visualize and how to visualize the spatial object according to the user's security level or mission type by referring to the security level, sensitivity, and concealment requirements pre-tagged to the spatial object. Claim 4 The access-authority-based adaptive spatial information variable service method according to claim 1, wherein the step of generating the transformed spatial object includes the step of deleting the spatial object corresponding to the display restriction area or replacing it with a lightweight 3D model when the user's access authority falls below a preset standard. Claim 5 The method of claim 1, wherein the step of generating the transformed spatial object includes the step of inserting a fake object into a restricted display area when the user's access authority falls below a preset standard, and the fake object is an object of a type that is determined according to the security level or mission type and does not affect operations, or an object whose location is randomly disrupted from that of an actual object, in an access authority-based adaptive spatial information variable service method. Claim 6 In claim 1, the coordinate transformation function is configured to dynamically output different shapes by applying different transformation parameters according to the current time zone or operation phase even for the same encryption key, in an access-authority-based adaptive spatial information variable service method. Claim 7 A computer program stored on a computer-readable recording medium to be combined with hardware to execute an access-authority-based adaptive spatial information variable service method according to any one of paragraphs 1 and 3 through 6. Claim 8 Memory storing executable commands; a communication unit configured to communicate with an external system; An access-authority-based adaptive spatial information variable service system comprising a processor connected to communicate with the memory and the communication unit, wherein the processor, by executing the command, receives access authorization information from a user regarding a spatial object stored in a spatial information database, determines a transformation rule to be applied to the spatial object based on one or more of an encryption key, security level, and mission type included in the access authorization information, dynamically transforms one or more of the shape, attributes, and resolution of the spatial object according to the transformation rule to create a transformed spatial object, and provides map data including the transformed spatial object to the user, wherein, in order to create the transformed spatial object, if the encryption key is determined to be valid, the coordinates of a vector node constituting the spatial object are physically moved according to a predefined coordinate transformation function to create a transformed shape, wherein the coordinate transformation function includes a forward transformation function that transforms the original coordinates of the spatial object into transformed coordinates and an inverse transformation function that restores the transformed coordinates to the original coordinates, and wherein the processor, by executing the command, checks whether inverse transformation authority is granted to the user's encryption key and inverse transformation to the user's encryption key If authorization is granted, restoration of original coordinates through the inverse transformation function is permitted for map data including the transformed spatial object; whenever an inverse transformation is performed through the inverse transformation function, an audit log including one or more of the time of inverse transformation execution, the user performing the transformation, and the target spatial object is generated and stored; and in generating the transformed shape, the user's identification information is input into a preset hash function to generate a disturbance seed value; and by determining the direction and distance of positional disturbance based on the generated disturbance seed value, a disturbance pattern corresponding to the user is applied to the spatial object.An access-authority-based adaptive spatial information variable service system further configured to explore association relationships between spatial objects stored in a graph structure in the spatial information database, identify adjacent objects associated with the spatial object to which the transformation rule is to be applied, and apply a transformation corresponding to the transformation rule to the identified adjacent objects.

Images