An OGC Standards Driven Geodata Online Access for DLRs National Remote Sensing Data Library (NRSDL) Torsten Heinen German Remote Sensing Data Center (DLR/DFD) CEOS WGISS-24 Meetings Oberpfaffenhofen, 17th October 2007

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 2 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 2 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 2 Outline NRSDL Overview DIMS Components Context of and Motivation for Geospatial Data Access Users, Projects and Infrastructures Geospatial Data Access Candidate Datasets Access Control Architectural Overview Conclusion Outlook

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 3 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 3 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 3 NRSDL Overview National Remote Sensing Data Library Supports numerous missions National European International Continuous integration of future missions NRSDL based on DIMS components E.g. EOWEB ® User Interface SRTMCHAMPTERRA Airborne Imaging ENVISAT METOPTerraSAR - XTanDEM-XEnMAP Currently about 50 processing systems product transfers per month 100 product types 1,000,000 products 6.7 Mio. files 200 TByte of data

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 4 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 4 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 4 Functionality Cataloging & Archiving Processing & Production Order Management Delivery Online Access Classical Asynchronous Catalog Ordering Service Browse, search and order existing and future products through Web-Gateway and CIP Access of ordered data through FTP (or CD/DVD) Data Information and Management System (DIMS) Direct access to primary data via standardized interfaces not yet implemented Product Library Processing SystemIngestion System Post-Processing EOWEB ® User Information Service Pickup Point User Systems Pickup Point Online/Offline Prod. Gen.& Delivery Operating Tool Monitoring & Alarm DIMS Data Flow Control Flow Production Control Ordering Control UIS Loader/ Interface

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 5 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 5 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 5 Context and Motivation for Service-Oriented Data Access Users Commercial Scientific Public Government Spatial Data Infrastructure Programs GDI-DE, INSPIRE, other SDIs Projects and Initiatives HMA (ESA) GMES (EU) GITEWS (GFZ/DLR) WISDOM (DLR) International Charter for Space and Major Disasters WDC-RSAT (DLR) ZKI WDC Product Library ArchiveInventory DIMS Processing Systems User Information Services EOWEB ® OGC W*S Interfaces

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 6 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 6 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 6 Standardized Interfaces and Common Software

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 7 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 7 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 7 Candidate Datasets for Online Access Currently evaluated datasets (prototype) SRTM X-SAR (restricted access) Dted2 DEM & HEM NOAA AVHRR L3 SST, LST, NDVI Daily, weekly & monthly ERS GOME L3+ Atmospheric Trace Gas Concentrations Historical and Forecasts Potential further datasets (data policies still to be clarified) METOP GOME2 Enhanced ERS GOME (more trace gases, higher resolution) TerraSAR-X / TanDEM-X Radar Imagery Dted3/4 <12m / <6m EnMAP 200+ bands 30m

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 8 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 8 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 8 Access Control Requirements Commercial datasets dissemination Access control, accounting and new price models are mandatory Satellitendatensicherheitsgesetz – SatDSiG ~ Satellite Data Security Law Restrict access to high-resolution satellite data (such as TerraSAR-X) Check user, country of origin, AOI, etc. before dissemination Commercial Online Data Access must therefore be restricted Service for policy, rule and license management as well as permission check Up-to-date (and easy updateable) dataset of administrative boundaries GeoXACML specifies access control with geospatial operators GeoXACML adopted by OGC [07-026] Currently in RWG Allows restriction on AOI, user attributes, layer/dataset, resolution, specific features, etc. Authentication & Authorization through OASIS SAML and (Geo)XACML Spatial security checks can be backed up by WFS(-T)

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 9 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 9 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 9 Geospatial Data Access Architectural Overview EOWEB ® User Information Service User Systems DIMS Data FlowControl Flow GeoPEP (OWS-Proxy-Service) forward or deny OWS request CSWWMSWCSWFS FTP Policy & Rule GeoServices (OWS Service Implementations) Swaths, Futures, etc EO Products & Datasets Static Geospatial Datasets Restricted Areas & Administrative Boundaries GeoPDP (Security-Service) check request, user & aoi Ingestion Service Ingest, register, secure, publish GDAS CSWWMSWFSWCSWFS-T Product Library User User Service authorize user

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 10 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 10 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 10 Conclusion Mission: To develop new and utilize existing software and services to provide a highly configurable, modular and secure "Corporate Spatial Data Infrastructure" that enables standardized access to and management of geospatial data. Besides classical FTP dissemination, direct data access will be established to Facilitate interoperability Reach more users, collaborate and contribute datasets on different levels Provide inherent add-on services like visualisation, filtering, mapping, reprojection, aggregation and subsetting Challenges and limitations Access Control Authentication and Authorization not yet standardized for OWS (but GeoXACML looks promising) Provide decent performance while restricting access and perform security checks! Administration of complex rules and policies as is quite complicated Cope with different standard flavours, aka profiles Only L2+ products Share security subsystem between GDAS und EOWEB

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 11 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 11 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 11 Outlook Phase 1 (Q1 2008): Access services for public and free datasets WFS(-T) for swath coverages, future products and security WCS for data retrieval and basic post-processing CSW / WMS for browsing, portrayal and EOWEB integration Phase 2 (Q ): Access control and accounting for OWSs Portal, PEP and PDP as a baseline for commercial and restricted datasets Phase 3 (Open): Study and possible adoption of SWE Sensor Planning Service (SPS) for product tasking & ordering Sensor Alert Service (SAS) / Web Notification Service (WNS) for notifications on new datasets, content trigger services (fires, floods, etc.) SensorML for sensor metadata description Sensor Oberservation Service (SOS) / O&M for raw (L0/1) data

Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 12 Institut für Methodik der Fernerkundung bzw. Deutsches Fernerkundungsdatenzentrum Folie 12 CEOS WGISS 24, Oberpfaffenhofen, 17 Oct 2007 Slide 12 Thank you for your attention! Maybe later? Questions?