gi2010 symposium-mecha (geoportal2)

1114./15.05.201014./15.05.2010 10. Sächsisches GIS10. Sächsisches GIS--ForumForum

Geoportal2 based on relational databaseNew proposal of the National SDI within the project

GEOPORTAL.GOV.PL

www.geoportal2.pl

Krzysztof Borys, GEOBID, PLEdward Mecha, GISPOL, PL


The main feature of the solution is grounding it on services The main feature of the solution is grounding it on services provided by individual nodes of the data infrastructure. provided by individual nodes of the data infrastructure. TheThe ISO or OGC standards have been used, this applies in ISO or OGC standards have been used, this applies in particular to WMS/WFS services. particular to WMS/WFS services. The The ideaidea based on making services available based on making services available entails that nodes of lower rank, shall not send data entails that nodes of lower rank, shall not send data to upper rank nodes, to upper rank nodes, but rather the upper rank nodes but rather the upper rank nodes shall download data from the lower ranks.shall download data from the lower ranks.A general principle has been assumed that maps will be A general principle has been assumed that maps will be downloaded by customers in raster form (WMS format). downloaded by customers in raster form (WMS format). Vector data (WFS format) will be available for downloading Vector data (WFS format) will be available for downloading only by specialized nodesonly by specialized nodes

Polish geo-portal based on datamade available by powiat (districts, counties)


VViewingiewing the mapsthe mapsMap distribution service, or WMS service has been divided Map distribution service, or WMS service has been divided into two categories:into two categories:1. 1. the service providing access to public data,the service providing access to public data,2. 2. the service providing access to nonthe service providing access to non--public (protected) public (protected) data.data.The users of GEOPORTAL when viewing the maps shall at The users of GEOPORTAL when viewing the maps shall at the same time make use of central level data (e.g. the same time make use of central level data (e.g. administrative borders, administrative borders, orthoortho--photomap), as well as the photomap), as well as the powiat (powiat (countycounty)) level data (e.g. plot borders, address points). level data (e.g. plot borders, address points). It is possible, because the WMS service assumes the It is possible, because the WMS service assumes the possibility of developing transparent possibility of developing transparent rastersrasters, and their mutual , and their mutual overlaying.overlaying.The latter (second) category concerns data with limited The latter (second) category concerns data with limited access. Access may be limited both to an area (for example access. Access may be limited both to an area (for example to one administrative/registration unit) or to specific themes to one administrative/registration unit) or to specific themes (for example restricted only to water distribution). (for example restricted only to water distribution).


LLimitedimited accessaccessBecause the problem of authorization and access control Because the problem of authorization and access control is a complex issue, the concept assumes the existence is a complex issue, the concept assumes the existence of special proxy servers. For central data, this will be the of special proxy servers. For central data, this will be the Central Server Proxy (CSP), while for provincial data as Central Server Proxy (CSP), while for provincial data as well as data from well as data from powiat (powiat (countiescounties)), this will be a , this will be a Provincial Proxy Server (Polish: Provincial Proxy Server (Polish: WojewódzkiWojewódzki SerwerSerwerPośredniczącyPośredniczący -- WSP). WSP). PProxyroxy Server does not generate data. It performs the Server does not generate data. It performs the role of a filter, which on the basis of the query sent by role of a filter, which on the basis of the query sent by the user and the user access level will allowthe user and the user access level will allow sendsend the the query to proper data server, being a part of:query to proper data server, being a part of:

cadastralcadastral node node topographictopographic nodenodegeneralgeneral--geographic geographic nodenode..


client

Central level

Provincial level

Powiat level

Commune level

ODGIKDocumentationCentre

Performer

GeneralGeographicNode

TopographicNode

CadastralNode

CommuneNode

Authorization

Location

Orders


Cadastral nodeCadastral nodeA cadastral node will be a set of servers providing specific serA cadastral node will be a set of servers providing specific services. vices. A cadastral node of the implemented network is composed of two A cadastral node of the implemented network is composed of two parts:parts:

internal one, invisible in the Internet network,internal one, invisible in the Internet network,external one, which on the one hand has access to the internal external one, which on the one hand has access to the internal network, on the other hand it has access to public network.network, on the other hand it has access to public network.2. The WFS service is a service with protected content, concerning geometric data and identification in the register ofland and buildings, as well as addresses. The service is available solely for the Provincial Server Proxy (WojewódzkiSerwer Pośredniczący - WSP) and is provided in connection with coded https. In the basic version (the implemented one) the service is used for searching for plots and adjusted to address search.


Cadastral nodeCadastral node

CADASTRAL NODE OF SDIInternal part External part

WINDOWS operating systemEWMAPA graphic serverFIREBIRD database server

LINUX operating systemAPACHE server FIREWALL

Existing systems serving egib Internet network

lne

Sym

met

ric li

ne2M

bInte

rnal

net

wor

k


Basic services

Services have been divided into basic and additional ones.Basic services are:1. WMS service with public content: plots, plot numbers, buildings, street axes, street names, address points (possibly, additionally the development plan zones and its markings, a sketch of development plan).The service making available plots and plot numbers has been assumed the minimum being subject to implementation. This will be a publicly available service. 2. The WFS service is a service with protected content, concerning geometric data and identification in the register of land and buildings, as well as addresses. The service is available solely for the Provincial Server Proxy (Wojewódzki Serwer Pośredniczący - WSP) and is provided in connection with coded https. In the basic version (the implemented one) the service is used for searching for plots and adjusted to address search.


Additional servicesAdditional services are available only for the Provincial Server Proxy (WSP) and are provided through coded https connection.These are:

1. WMS with non-public content: geodetic matrices, cultivable land, classification contours, utilities, basic map.

2. WFS with non-public content: geodetic matrices, cultivable land, classification contours, precinct limits, borders of register units.

3. The OSN service (geodetic matrices) is a special service enabling downloading of information about geodetic matrices, mainly of class three and measurement level.

4. The OPE (geodetic surveys) is a special service enabling access to the database of surveys of the county (district) geodetic and cartographic documentation centre.

5. The EGB (register of land and buildings) is a special service enabling access to the data from descriptive part of the register of land and buildings.


Topographic nodeTopographic node& & GeneralGeneral--geographic nodegeographic node

The presented concept assumes only that a topographic node shallThe presented concept assumes only that a topographic node shallmake its resources available in the WMS/WFS format. make its resources available in the WMS/WFS format. The WMS service, The WMS service, makmakee public data available (accessible from Internet public data available (accessible from Internet without limitations) without limitations) The WMS/WFS services, The WMS/WFS services, makmakee protected data available, accessible only protected data available, accessible only through the Provincial Server Proxy (through the Provincial Server Proxy (WojewódzkiWojewódzki SerwerSerwer PośredniczącyPośredniczący-- WSP)WSP)The generalThe general--geographic shall be a set (group) of servers providing geographic shall be a set (group) of servers providing specific services based on data included in:specific services based on data included in:

GeneralGeneral--geographic Database (BDO),geographic Database (BDO),State Register of Borders and Areas of State Territorial DivisioState Register of Borders and Areas of State Territorial Division Units n Units (PRG),(PRG),State Register of Geographic Names (PRNG),State Register of Geographic Names (PRNG),Bank of Geodetic Matrices (GEOS),Bank of Geodetic Matrices (GEOS),The resources of The resources of orthoortho--photomaps (ORTO) (raster resource). photomaps (ORTO) (raster resource).


Security issuesSecurity issuesOur concept is based on making use of public Internet network, Our concept is based on making use of public Internet network, standing out due to its fast development, particularly as concerstanding out due to its fast development, particularly as concerns ns the throughput and easy provision of services to many interestedthe throughput and easy provision of services to many interestedparties. Establishing of a separate network infrastructure does parties. Establishing of a separate network infrastructure does not not only increase the cost, but also requires establishing many acceonly increase the cost, but also requires establishing many access ss nodes from public Internet network. It is also of substantial ecnodes from public Internet network. It is also of substantial economic onomic importance. importance. The decision to use Internet for establishing geodetic infrastruThe decision to use Internet for establishing geodetic infrastructure cture calls for creation of highest standard security (at least at thecalls for creation of highest standard security (at least at the level of level of security measures used in bank networks), yet it is much cheapersecurity measures used in bank networks), yet it is much cheaperthan using a separate network.than using a separate network.All the nonAll the non--public connections will be using the https protocol. public connections will be using the https protocol. Servers communicating with users in the https protocol will haveServers communicating with users in the https protocol will havecertificates issued by registered certification centres (agenciecertificates issued by registered certification centres (agencies). The s). The exception will be servers distributing nonexception will be servers distributing non--public data solely to be public data solely to be used by WSP and CSP servers( e.g. servers of the county (districused by WSP and CSP servers( e.g. servers of the county (district) t) level). There the exchange of public keys between servers will level). There the exchange of public keys between servers will suffice.suffice.


LLocationocation SSeerrverver andand AuthorizationAuthorizationIn the distributed architecture the most important information iIn the distributed architecture the most important information is the s the information about data location. That information will be storedinformation about data location. That information will be stored by the by the central server of data location, which on the chart has been marcentral server of data location, which on the chart has been marked as ked as LOCATIONLOCATION. The data location server is in reality the server of basic . The data location server is in reality the server of basic metameta--data about the location of specific services. The LOCATION severdata about the location of specific services. The LOCATION severwill contain the information about location (addresses):will contain the information about location (addresses):

of WSP and CSP servers,of WSP and CSP servers,of servers of provincial and central level services.of servers of provincial and central level services.of services for each register unit,of services for each register unit,

The task of the authorization server, marked on the chart as The task of the authorization server, marked on the chart as AUTORYZACJA (AUTHORIZATION), is dealing with the logging of AUTORYZACJA (AUTHORIZATION), is dealing with the logging of system users, as well as their authorization level. When loggingsystem users, as well as their authorization level. When logging to the to the system from the GEOPORTAL server, that server checks whether thesystem from the GEOPORTAL server, that server checks whether theuser name and password is correct, on authorization server. user name and password is correct, on authorization server. In case of correct logging the AUTORYZACJA (AUTHORIZATION) In case of correct logging the AUTORYZACJA (AUTHORIZATION) server sends a special server sends a special tokentoken to theto the client. Thatclient. That tokentoken will be added to will be added to queries sent to WSP and CSP servers. queries sent to WSP and CSP servers.


Order serverOrder serverThe idea of the order server, is to provide services for users, The idea of the order server, is to provide services for users, who want who want to use onto use on--line the nonline the non--public information through the GEOPORTAL public information through the GEOPORTAL browser or to receive graphic and descriptive materials in electbrowser or to receive graphic and descriptive materials in electronic ronic form or onform or on paper.paper.The main task of the ORDERS server is to prepare products or to The main task of the ORDERS server is to prepare products or to makmakeeproducts available. products available. The GEOPORTAL server, from which access will be possible to the ORDERS server, shall provide the possibility of spatial location The products have been divided into:

those that do not have the status of documents,those that have the status of documents.

Electronic data not having the status of documents, shall be understood as all graphic or descriptive data, which the ORDERS will be able to download from the remaining nodes of infrastructure powiat (county,district),Data having document status will be prepared by entities authorized to issue such types of documents. These documents may be prepared in electronic version and provided with electronic signatures, or may be prepared in paper version and sent in traditional manner by mail.


ODGIK ODGIK ((DocumentationDocumentation CentreCentre) ) ServerServer

ODGIK server is a special server, designed for serving ODGIK server is a special server, designed for serving the contractors performing geodesic and cartographic the contractors performing geodesic and cartographic works. At present, execution of geodesyworks. At present, execution of geodesy--related work is related work is connected with paying several visits to the centre connected with paying several visits to the centre –– first first to notify about works to be performed, then to collect the to notify about works to be performed, then to collect the prepared materials, finally when submitting survey. If the prepared materials, finally when submitting survey. If the supervision performed for the survey revealed errors or supervision performed for the survey revealed errors or shortcomings, the number of visits may increase. shortcomings, the number of visits may increase. The task of the ODGIK server is to eliminate the The task of the ODGIK server is to eliminate the necessity of visits paid at the documentation centre, or at necessity of visits paid at the documentation centre, or at least to reduce the number of such visits.least to reduce the number of such visits.The results of our work can be viewed at the website The results of our work can be viewed at the website www.geoportal2.plwww.geoportal2.pl. .

ThankThank youyou for for youryour attentionattention!!

gi2010 symposium-mecha (geoportal2)

Real Estate