WO2016200232A1 - System and method for remote server recovery in case of server failure - Google Patents

Abstract

The present invention relates to a system and a method for a remote server recovery in case of a server failure, and more specifically to a system and a method for a remote server recovery in case of a server failure, a recording medium on which a program to implement the system and method are recorded, and a computer program, stored in the medium, for implementing the system and method, the present invention allowing, by means of a simple manipulation, a rapid recovery to be carried out according to a recovery scenario inputted in a manager server when a server failure occurs, thereby allowing smooth work flow to be maintained.

Description

Remote server recovery system and method in case of server failure

The present invention relates to a system and method for recovering a remote server in the event of a server failure, and more particularly, to a system and method for recovering a remote server in case of a server failure capable of automatic recovery according to a recovery scenario input to a manager server, and a program for implementing the same. A recording medium and a computer program stored in a medium for implementing the same.

Distributed Denial of Service (DDoS) is also known as a distributed denial of service or distributed denial of service attack. It is a hacking method that attacks specific sites by distributing several attackers and operating them at the same time. It is a method of injecting tools for a service attack on multiple computers and simultaneously flooding a huge amount of packets that cannot be handled by the target computer system, thereby degrading network performance or paralyzing the system.

DDoS attacks do not penetrate specific computers and delete or steal data, but rather prevent the target server from receiving other legitimate signals. To put it simply, it's a way to paralyze your computer by causing a large number of connections.

In order to attack a particular site, a hacker can inject tools for attacking a service on multiple computers and flood the network with massive amounts of packets that cannot be handled by the target system's computer system. As a result, overloading the system will result in a loss of access for normal customers.

Due to such disasters such as DDoS attacks, sudden server failures have not ceased. In addition, unpredictable disasters frequently cause paralyzed major servers of institutions.

In order to recover from such a server failure, in the past, a manpower has been directly applied to recover a server offline. However, this has a problem of causing a time delay of failure recovery. In addition, server failures that occur at night or on holidays are difficult to recover from offline. Therefore, there is a need for a technology that can remotely solve a problem by monitoring the status of a server in case of server failure due to an unforeseen disaster.

Korean Patent No. 10-0734110 discloses a server error recovery method in the TCP stage.

The present invention is to solve the problems of the prior art, a server failure to maintain a smooth flow of work by performing a quick recovery in accordance with a preset recovery scenario with a simple operation when a server failure due to a disaster such as DDoS attack To provide a remote server recovery system and method for the purpose.

In order to achieve the above object, the present invention provides a remote server recovery system in case of server failure, the backup server 100 is installed agent program; A preset recovery scenario is inputted and receives a status information of the corresponding backup server 100 from an agent program installed in the backup server 100; And a remote management terminal 300 for monitoring and controlling the backup server 100 through socket communication with the manager server 200 by using a server port approved by a server manager. When the terminal 300 accesses the manager server 200 to monitor the backup server 100, and the remote management terminal 300 requests a recovery to the backup server 100, the manager server 200. ) Provides a remote server recovery system in the event of a server failure, characterized in that for recovering the backup server 100 remotely based on the recovery scenario.

In one embodiment of the present invention, the agent program is characterized in that developed in Java (JAVA).

In one embodiment of the present invention, the socket communication is characterized in that the TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol).

The present invention is in the form of a program executed by arithmetic processing means including a computer, in the case of a server failure remote server recovery method using a remote server recovery system in case of server failure, the manager server 200 receives the recovery scenario Recovery scenario input step (S10); The manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300, and uses the server port (Port) approved by the remote management terminal 300 and the server administrator is completed authentication A socket communication step of performing socket communication (S20); A monitoring step (S30) in which the manager server 200 receives the state information through an agent program installed in the backup server 100 and transmits the state information to the remote management terminal 300; And a server recovery step of recovering the backup server 100 according to the recovery scenario received in the recovery scenario input step S10 when the manager server 200 receives a server recovery request from the remote management terminal 300. Provides a method for recovering a remote server in case of server failure, including).

In one embodiment of the present invention, the socket communication is characterized in that the TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol).

In one embodiment of the present invention, the agent program is characterized in that developed in Java (JAVA).

In one embodiment of the present invention, the unique identification information is a specific IP, public certificate, ID (ID) and password (password), Access Control List (ACL), MAC address (MAC (media access control)) at least one selected from an address, an International Mobile Station Equipment Identity (IMEI), a User Device IDentification (UDID), a Universally Unique IDentifier (UUID), and a telephone number. It is done.

In one embodiment of the present invention, the server recovery step (S40) transmits a recovery progress status result of the manager server 200 to restore the backup server 100 according to the recovery scenario to the remote management terminal (300). Characterized in that.

The present invention also provides a computer-readable recording medium storing a program for implementing a remote server recovery method in case of server failure.

In addition, the present invention provides a program stored in a computer-readable recording medium for implementing a remote server recovery method in the event of server failure.

According to the remote server recovery system and method in the event of a server failure of the present invention, it is possible to perform a quick recovery according to a preset recovery scenario by a simple operation and maintain a smooth flow of work.

In addition, by managing the backup server through the manager server can double the security when connecting to the backup server from the outside, and in the event of a server failure due to a sudden disaster disaster, it is possible to quickly recover the server from a long distance.

In addition, it is possible to promptly respond to sudden disasters during holidays or weekends, so that the company can quickly solve problems such as production line paralysis, and it is possible to minimize server recovery work offline by enabling automatic server recovery remotely. .

Simple operation also prevents overload of each server, reducing customization time and manpower cost.

1 is a block diagram of a remote server recovery system in case of server failure according to an embodiment of the present invention.

2 and 3 are data flow diagrams for explaining FIGS. 1 and 2.

4 is a flowchart illustrating a method for recovering a remote server in the event of a server failure according to an embodiment of the present invention.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. The terms or words used in the present specification are merely illustrated to explain the present invention in more detail and to help those skilled in the art, and the scope of the present invention should not be interpreted as being limited thereto.

Technical terms and scientific terms used in the present invention represent the meanings that are commonly understood by those of ordinary skill in the art unless otherwise defined.

1 is a block diagram of a remote server recovery system in case of server failure according to an embodiment of the present invention, FIGS. 2 to 3 are data flow diagrams for explaining FIG. 1, and FIG. 4 is according to an embodiment of the present invention. Flowchart of remote server recovery method in case of server failure.

Prior to the description, the terms used herein will be briefly described.

'Disaster disaster' is a term used to mean a series of things that prevent a server from functioning.For example, e-mail detonation, logic bombs, DDoS attacks, other cyber terrorism, power outages, etc. Yes.

As shown in Figures 1 to 3, the present invention provides a remote server recovery system in case of server failure, the backup server 100, the agent program is installed; A preset recovery scenario is inputted and receives a status information of the corresponding backup server 100 from an agent program installed in the backup server 100; And a remote management terminal 300 for monitoring and controlling the backup server 100 through socket communication with the manager server 200 by using a server port approved by a server manager. When the terminal 300 accesses the manager server 200 to monitor the backup server 100, and the remote management terminal 300 requests a recovery to the backup server 100, the manager server 200. The present invention relates to a remote server recovery system in case of a server failure, wherein the backup server 100 is remotely restored based on a recovery scenario.

The backup server 100 is a server that the administrator monitors for normal operation, and installs an agent program to monitor and control (manage) remotely in a situation where the administrator is difficult to monitor.

In order for the administrator to remotely access the backup server 100, access information for accessing the backup server 100 is required. However, when such access information is exposed to the outside, a risk such as hacking may occur. The access of the backup server 100 through the access information has a risk. To prevent this, it is to install an agent program that can communicate with the manager server (200).

That is, in order for the manager to remotely access from the outside, only the unique identification information for accessing the manager server 200 is required.

The manager server 200 receives a preset recovery scenario and receives state information of the backup server 100 from an agent program installed in the backup server 100.

The manager server 200 may communicate with the backup server 100 through an agent program installed in the backup server 100.

As described above, in order to strengthen the security of the backup server 100 is to have a manager server 200 acting as an intermediary.

In this case, the agent program may be characterized in that it is developed in JAVA.

When a piece of software is produced, the cost of building the software is high, but the cost of maintenance is enormous. The Java language was designed with this in mind. Although the Java language was developed based on C ++, it eliminated some of the confusion in C ++. Examples are operator overloading and multiple inheritance. We overcome the problem of storage management in C ++ with automatic garbage collection. Therefore, the programmer no longer needs to worry about this.

Java is an object-oriented language, and we can't talk about object-oriented languages in detail here, but a simple example is inheritance. Child objects inherit from the parent object. If a child object inherits from a parent object, it means that the data and methods of the parent object are available. Therefore, when developing software, there are many advantages in terms of recycling.

Java is a language originally designed for use in network distributed processing environments. As the network environment is an environment where security aspects are emphasized more than other environments, Java is focused on security. Java has a structure that does not allow viruses to penetrate and can restrict data access in memory. If you do not allow access, access to the data structures or data of the application is not possible. That is, it is strong in security.

A network consists of a variety of computers, different platforms (for example, operating systems such as Windows NT, Solaris, and Macintosh OSs) and a variety of hardware. Java compiles Java code source to produce byte code, which can be executed on any platform because it is interpreted by Java interpreters installed on various platforms. So even a new machine can interpret bytecode if it only has a Java interpreter installed.

Existing languages use slightly different code for each platform due to numerical problems. However, Java is highly portable, allowing you to use the same code on different operating systems and on different CPUs. The disadvantage of high portability is that it does not take into account the specifics of each system, so optimal performance cannot be achieved. Java is a language that overcomes this.

In summary, Java is a highly secure object-oriented programming language, and the compiled code is provided as a class for use in other operating systems. It is more efficient and supports distributed environments while taking advantage of the object-oriented advantages of the C ++ language.

In addition, the socket communication may be characterized in that the TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol).

TCP / IP is a network transport protocol that can be used to transfer data between computers running different operating systems. TCP is a protocol for dividing and packaging transmission data into certain units, and IP is a protocol for directly transmitting and receiving data. All computers on the Internet follow the protocol established by the Internet Standards Committee. The Internet standard protocol is TCP / IP. A protocol is simply a device for completely sending data from one computer to another. In TCP / IP, first IP forwards data to the destination through the network by referring to headers with the origin and destination addresses. However, in the process, data may be mistransmitted or damaged, and data may not be transmitted in the order in which they are sent. It is TCP that makes up for this drawback. In other words, if IP loses or corrupts a data packet, TCP is responsible for notifying that a problem has occurred and resending the data accordingly. In the process of TCP recovering from an error, the host receiving the data always receives the data in order without any error.

UDP stands for user datagram protocol. It is a communication protocol that unilaterally transmits data on the Internet without going through a signal to send or receive information when sending or receiving information to each other on the Internet. The sending side is a protocol designed to make sure that the receiving side has not received or received the data.

The concept is opposed to the Transmission Control Protocol (TCP), a communication protocol designed to allow the sending and receiving of information to automatically communicate with a central computer server at the same time as pressing the Internet icon. For example, when sending and receiving e-mails, 'receipt confirmation' shows whether the other party has read or not read the e-mail because the sending and receiving parties can exchange data with each other.

In this way, the transmitting and receiving side exchanges data with each other, and TCP is used. The receiving side transmits data only regardless of whether the receiving side is UDP. That is, UDP is a method in which data is unilaterally transmitted from a transmitting side without going through a connection procedure with a receiving side. Such a service is called an unrelated service, and the communication protocol of the unrelated service is UDP.

Therefore, unlike TCP, UDP is not responsible for receiving data. This means that the sender sent the information, but the sender does not need to care about whether the information arrived at the receiver in time or the information contents were reversed. It's also less reliable than TCP, but much faster.

The remote management terminal 300 monitors and controls the backup server 100 through socket communication with the manager server 200 using a server port approved by a server administrator.

In this case, the remote management terminal 300 refers to a general terminal (computer, mobile device, smart device, etc.) that can be wired or wirelessly connected to the Internet.

All access attempts from the Internet (external network) to the firewall are internally traversed by access control lists, which are preset security rules inside the firewall. By default, the firewall denies all access and then allows / permits only the access that you want to allow. For example, the passage of data through a network is called a "port," which basically blocks all about 65,000 communication ports and leaves only certain ports open to allow access. That is, if you provide a web service (http) for homepage operation, you should allow 80 ports, and if you provide an FTP service (ftp), allow 20/21 ports. In addition to the communication port, you can determine whether to access or deny based on external IP addresses or specific programs. All of these security rule settings are included in the access control list and applied collectively.

As shown in FIG. 4, the method for recovering a remote server in the event of a server failure in accordance with an embodiment of the present invention is in the form of a program executed by arithmetic processing means including a computer. In the remote server recovery method in the event of a server failure, the recovery scenario input step (S10), the socket communication step (S20), the monitoring step (S30) and the server recovery step (S40).

In the recovery scenario input step (S10), the manager server 200 receives the recovery scenario.

The recovery scenario refers to a procedure for restoring a backup server when a problem occurs in the backup server 100. For example, data backup-data restoration-server rebooting-reinstalling the operating program-running and setting the operating program. (Data interworking)-Refers to the procedure such as normal operation of backup server 100.

Such a recovery scenario may be set in a large number according to a kind of problem situation that may occur in the backup server 100.

In other words, various recovery scenarios such as rebooting, program execution after rebooting, rebooting, program execution and even data interworking are inputted in advance, and the recovery scenario can be selected according to the situation.

For example, in the case of a simple program down, the server will recover if only the program is executed after rebooting. If a problem occurs due to a DDoS attack, the server will block the port where the DDoS attack came from, block the IP where the DDoS attack came from, After restoring, you can recover the server by taking actions such as opening the port to its original state.

Socket communication step (S20) is the manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300, the authentication is completed by the remote management terminal 300 and the server administrator is completed Socket communication is performed using the server port.

In this case, the socket communication may be characterized as TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol).

In addition, the unique identification information is a specific IP, public certificate, ID (ID) and password (password), Access Control List (ACL), MAC address (MAC (media access control) address), international mobile device identification code (IMEI, International Mobile Station Equipment Identity), Unique Identification Number (UDID: User Device IDentification), Universally Unique ID (UUID: It may be characterized in that at least one selected from the telephone number.

Basically, the network firewall allows or blocks the packets coming in through the network according to the security rules (ACL, Access Control List, and Access Control List) previously set by the administrator. Generally, this packet control function is located between the internal network and the external network (Internet). Firewalls can be deployed as needed to enhance security.

The firewall's access control list is usually printed in an intuitive format that is easy for administrators to configure and set up, and the results are immediately visible when security rules are applied. However, since access control lists and firewall settings require considerable knowledge and experience related to security, they should be done accurately and systematically by security experts.

For example, in the case of a computer, membership authentication can be performed using a specific IP, public certificate, ID and password, and MAC address. In the case of a mobile device and a smart device, MAC (media access control) address, International Mobile Station Equipment Identity (IMEI), User Device IDentification (UDID), Universally Unique IDentifier (UUID), and telephone Membership authentication can be performed using a number.

A MAC (media access control) address (MAC) is an address of a network device in the MAC layer in a network structure, and is usually stored in a ROM of a network card.

A unique device identification number (UDID) is an identifier for identifying a user's device. It's kind of a serial number.

Universally Unique IDentifier (UUID) is a 128-bit number used to identify an object or entity on the Internet. It is almost the only usable identifier that is constructed through a combination of space and time (up to about 3400) and is used for a variety of purposes, from extremely short objects to permanent object identification. There is no registration procedure for a certification authority, but only a unique identification number for a universal single identifier generation program is required. For example, storing a Mac address of a product in a specific server may cause a problem such as leakage of personal information, and thus may be used as an identifier for replacing and storing the Mac address.

Various unique identification information (identifier) has been described above, and one device may have a plurality of unique identification information.

 For example, if a mobile phone is capable of Wi-Fi and Bluetooth communication, the mobile phone may have a plurality of unique identification information, such as an identifier (UDID) of the mobile device itself, a Mac address for the Wi-Fi chip, and a Mac address for the Bluetooth chip.

In the monitoring step S30, the manager server 200 receives state information through an agent program installed in the backup server 100, and transmits the state information to the remote management terminal 300.

That is, the status of the backup server 100 can be checked (monitored) using the remote management terminal 300.

In this case, the agent program may be characterized in that it is developed in JAVA.

As shown in Figure 2, the monitoring step (S30) is also possible to check the current state of the backup server 100 in real time from the time when the remote management terminal 300 is connected to the manager server, As shown in FIG. 3, the manager server 200 constantly stores the state information received from the agent program of the backup server 100, and provides status information for each event at the request of the remote management terminal 300. It is also possible.

In the server recovery step (S40), when the manager server 200 receives the server recovery request from the remote management terminal 300, the backup server 100 is restored according to the recovery scenario input in the recovery scenario input step (S10). do.

When the backup server 100 is in a normal state or when the backup server 100 needs to perform a patch, test, or the like, abnormal state information may be transmitted to the manager server 200. Therefore, it is preferable to restore the backup server 100 when receiving a server recovery request from the remote terminal 300.

In addition, the manager server 200 may determine whether the backup server 100 is abnormal based on the state information of the backup server 100, and restore the backup server 100.

At this time, the server recovery step (S40) may be characterized in that the manager server 200 transmits a recovery progress status result of restoring the backup server 100 to the remote management terminal 300 according to the recovery scenario. .

Although a method for recovering a remote server in case of a server failure according to an embodiment of the present invention has been described above, a computer-readable recording medium storing a program for implementing a method for recovering a remote server in case of a server failure and a method for recovering a remote server in case of a server failure Of course, the program stored in the computer-readable recording medium for implementation may also be implemented.

That is, those skilled in the art can easily understand that the method for recovering a remote server in the case of the above-described server failure may be provided by being included in a recording medium that can be read through a computer by program of instructions for implementing the same. will be.

In other words, it may be embodied in the form of program instructions that can be executed by various computer means, and recorded on a computer-readable recording medium. The computer-readable recording medium may include program instructions, data files, data structures, etc. alone or in combination.

The program instructions recorded on the computer-readable recording medium may be those specially designed and configured for the present invention, or may be known and available to those skilled in computer software. Examples of such computer-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and floptical disks. Magneto-optical media, and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, USB memory, and the like.

The computer-readable recording medium may be a transmission medium such as an optical or metal wire, a waveguide, or the like including a carrier wave for transmitting a signal specifying a program command, a data structure, or the like. Examples of program instructions include not only machine code generated by a compiler, but also high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The present invention is not limited to the above-described embodiments, and the scope of application is of course various modifications may be made without departing from the gist of the present invention as claimed in the claims.

100: backup server

200: manager server

300: remote management terminal

S10: Enter Recovery Scenario

S20: socket communication step

S30: Monitoring step

S40: Server Recovery Steps

According to the remote server recovery system and method in case of server failure of the present invention, it is possible to maintain a smooth flow of work by performing a quick recovery according to a preset recovery scenario with a simple operation.

In addition, by managing the backup server through the manager server, when accessing the backup server from the outside, double security can be strengthened. In the event of a server failure due to sudden disaster, etc., the server can be quickly recovered from a long distance.

In addition, it is possible to promptly respond to sudden disasters during holidays or weekends to solve problems such as company's production line paralysis, and minimize server recovery work offline by enabling automatic server recovery remotely.

Claims (10)

Backup server 100 in which the agent program is installed; A preset recovery scenario is inputted and receives a status information of the corresponding backup server 100 from an agent program installed in the backup server 100; And It includes a remote management terminal 300 for monitoring and controlling the backup server 100 through the socket communication with the manager server 200 using a server port (Port) approved by the server manager, When the remote management terminal 300 accesses the manager server 200 to monitor the backup server 100, and the remote management terminal 300 requests a recovery to the backup server 100, the manager Remote server recovery system in the event of a server failure, characterized in that the server 200 remotely recovers the backup server 100 based on the recovery scenario. The method of claim 1, The agent program is a remote server recovery system in the event of a server failure, characterized in that developed in Java (JAVA). The method of claim 1, The socket communication is a TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol) characterized in that the remote server recovery system in the event of a server failure. In the form of a program executed by the operation processing means including a computer, in the case of server failure remote server recovery method using a remote server recovery system, A recovery scenario input step (S10) in which the manager server 200 receives the recovery scenario; The manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300, and uses the server port (Port) approved by the remote management terminal 300 and the server administrator is completed authentication A socket communication step of performing socket communication (S20); A monitoring step (S30) in which the manager server 200 receives the status information through the agent program installed in the backup server 100 and transmits the status information to the remote management terminal 300; And When the manager server 200 receives the server recovery request from the remote management terminal 300, the server recovery step (S40) for recovering the backup server 100 according to the recovery scenario input in the recovery scenario input step (S10). Remote server recovery method in case of server failure comprising a. The method of claim 4, wherein The socket communication is TCP / IP (Transfer Control Protocol / Internet Protocol) or UDP (User Datagram Protocol) characterized in that the remote server recovery method in the event of a server failure. The method of claim 4, wherein The agent program is a remote server recovery method in the event of a server failure, characterized in that developed in Java (JAVA). The method of claim 4, wherein The unique identification information includes a specific IP, public certificate, ID (ID) and password (password), access control list (ACL), MAC address (MAC), international mobile device identification code ( IMEI, International Mobile Station Equipment Identity (UDEI), Unique Device Identification (UDID: User Device IDentification), Universally Unique ID (UUID: Universally Unique IDentifier) and a remote server recovery method in case of server failure, characterized in that at least one selected from the telephone number . The method of claim 4, wherein The server recovery step (S40) is remote when the server failure, characterized in that the manager server 200 transmits the recovery progress status results for restoring the backup server 100 in accordance with the recovery scenario to the remote management terminal (300). How to recover your server. A computer-readable recording medium having stored thereon a program for implementing a remote server recovery method in the event of a server failure according to any one of claims 4 to 8. A program stored in a computer-readable recording medium for implementing a remote server recovery method in the event of a server failure according to any one of claims 4 to 8.

Images