JP5600015B2 - Backup system and backup method - Google Patents

Description

  The present invention relates to a backup system and a backup method capable of backing up an image file of a virtual machine virtually generated on a physical server, and in particular, easily confirming the consistency of image files backed up on a plurality of recording media. BACKGROUND OF THE INVENTION 1. Field of the Invention

  In recent computer systems, a virtualization technology for generating a virtual machine, which is a logical computer that operates with an independent operating system (OS) on a physical computer server, is employed. It operates in the same manner as a physical computer, and includes its own virtual CPU (Central Processing Unit), virtual memory, and virtual hard disk. This virtual machine is desired to back up a virtual disk like other computer systems, and the following Patent Document 1 is cited as a document describing this backup technology.

JP 2009-533777 A

  Patent Document 1 described above describes a technique for performing backup of a virtual disk that dynamically changes without stopping the system. However, data of the backed up virtual disk is backed up to a plurality of recording media, When the backup data recorded on the recording medium does not match, there is a problem that it is difficult to determine which recording medium has the correct backup data.

  An object of the present invention is to eliminate the above-described problems caused by the prior art, and to provide a backup system and a backup method capable of easily confirming the consistency of image files backed up on a plurality of recording media. .

To achieve the above object, the present invention provides a backup system that compresses an image file of a virtual disk and backs it up to a plurality of recording media.
Backup providing folder having a plurality of backup storage areas, a recording medium management table section for storing the volume identifier and storage free space of the recording medium, management of the storage area name of the backup providing folder and the backup destination recording medium A backup history management table unit for storing information, a backup server having a control unit for verifying the consistency of backup data using a hash function and controlling backup and restoration of an image file to a storage medium,
The control unit of the backup server
A first step of storing the image file in a first storage area of a backup providing folder;
A second step of generating a divided image file obtained by dividing the image file stored in the first step every predetermined value;
A third step of calculating a hash value using a hash function for each divided image file generated in the second step;
A fourth step of generating a divided encrypted compressed image file obtained by encrypting and compressing the divided image file divided by the second step by a predetermined encryption method;
A fifth step of storing backup data obtained by combining the divided encrypted compressed image file generated in the fourth step and the hash value calculated in the third step in the second storage area of the backup providing folder; ,
Whether the restored image file obtained by removing the hash value from the backup data stored in the fifth step and decompressing and decoding the backup data from which the hash value has been removed matches the image file stored in the first storage area A sixth step of copying the backup data stored in the second storage area to the first recording medium when it is determined that they match,
Or a whether determining seventh step and the backup data stored as backup data has been copied by more the sixth Engineering in the second storage area are matched,
An eighth step of copying the backup data copied to the first recording medium in the seventh step to the second recording medium;
It is determined whether the backup data copied to the first recording medium and the backup data copied to the second recording medium match. When it is determined that they do not match, the first recording medium and the second recording medium A divided encrypted compressed image file obtained by removing a hash value from the backup data recorded on the recording medium, a hash value calculated using a hash function based on the generated divided encrypted compressed image file, and the first The first feature is that the ninth step of comparing the hash value of the backup data recorded on the recording medium and the second recording medium to determine the data consistency is executed .

In the backup system according to the present invention, the backup server includes a folder management table unit that stores a maximum number of generations of backup data. When the ninth step is performed, the folder management table unit includes: A second feature is that a step of deleting backup data exceeding the stored maximum generation number from the first and second recording media is executed.

Further, the present invention provides a backup providing folder having a plurality of backup storage areas, a recording medium management table section for storing a volume identifier and storage free space of the recording medium, a storage area name of the backup providing folder, and a backup A backup history management table unit that stores management information of the previous recording medium, and a control unit that verifies the consistency of backup data using the hash function of the virtual disk and controls backup and restoration of the image file to the storage medium a preparative method of backing up virtual disks Bei obtaining computer system servers backup with,
In the control unit of the backup server,
A first step of storing the image file in a first storage area of a backup providing folder;
A second step of generating a divided image file obtained by dividing the image file stored in the first step every predetermined value;
A third step of calculating a hash value using a hash function for each divided image file generated in the second step;
A fourth step of generating a divided encrypted compressed image file obtained by encrypting and compressing the divided image file divided by the second step by a predetermined encryption method;
A fifth step of storing backup data obtained by combining the divided encrypted compressed image file generated in the fourth step and the hash value calculated in the third step in the second storage area of the backup providing folder; ,
Whether the restored image file obtained by removing the hash value from the backup data stored in the fifth step and decompressing and decoding the backup data from which the hash value has been removed matches the image file stored in the first storage area A sixth step of copying the backup data stored in the second storage area to the first recording medium when it is determined that they match,
Or a whether determining seventh step and the backup data stored as backup data has been copied by more the sixth Engineering in the second storage area are matched,
An eighth step of copying the backup data copied to the first recording medium in the seventh step to the second recording medium;
Whether the backup data copied to the first recording medium and the backup data copied to the second recording medium match is determined, and when it is determined that they do not match, the first recording medium and the second recording medium A divided encrypted compressed image file obtained by removing a hash value from the backup data recorded on the recording medium, a hash value calculated using a hash function based on the generated divided encrypted compressed image file, and the first The third feature is that the ninth step of comparing the hash value of the backup data recorded on the recording medium and the second recording medium and determining the consistency of the data is executed.

According to the present invention, in the backup method of the third feature, when the backup server is provided with a folder management table unit for storing the maximum number of generations of backup data, the folder management table A fourth feature is that a step of deleting backup data exceeding the maximum number of generations stored in the storage unit from the first and second recording media is executed.

  A backup system and a backup method according to the present invention generate a divided image file obtained by dividing an image file of a virtual disk by a predetermined value, and store the generated divided image file in a second storage area of a backup providing folder. A hash value is calculated for each of the stored divided image files using a hash function, a divided encrypted compressed image file is generated by encrypting and compressing the generated divided image file by a predetermined encryption method, and the divided cipher The backup data obtained by combining the compressed image file and the calculated hash value are stored in the storage area, the hash value newly calculated from the divided encrypted compressed image file, and the hash value included in the backup data By comparing with It is possible to easily verify the integrity of the image file you backed up.

1 is an overall configuration diagram of a backup system according to an embodiment of the present invention. The figure which shows the HDD management table by embodiment of this invention. The figure which shows the folder management table by embodiment of this invention The figure which shows the backup history management table by embodiment of this invention. The figure which shows the backup data structure by embodiment of this invention Flow diagram of backup operation according to an embodiment of the present invention Flow chart of restore operation according to an embodiment of the present invention The flowchart of the compare operation according to the embodiment of the present invention

Hereinafter, an embodiment of a backup system for realizing a backup method according to the present invention will be described in detail with reference to the drawings.
[Constitution]
As shown in FIG. 1, the backup system according to the present embodiment includes a virtual machine server 100 virtually mounting a virtual machine 110 and a virtual disk 111 for each of a plurality of users, and an image file of the virtual disk 111 of the virtual machine server 100. The backup server 200 controls the backup to the other recording medium and the restoration from the other recording medium by extracting the converted image file 112. Note that image backup refers to backup in units of hard disk sectors, not in units of files, and saving as one file (image file). An image file is a 1 generated for this image backup. One file. The virtual machine server 100 and the backup server 200, like a general computer, include a storage unit such as a CPU, a memory, a magnetic disk device, an input / output device such as a display unit, a keyboard, various interface devices, a basic OS, and various software. Is included.

  The backup server 200 includes a backup providing folder 210 that is a memory having recording areas for each of the plurality of users, USB interface hard disks (hereinafter referred to as HDDs) 310 and 320 that are external recording media, and the backup. For managing the USB interface 220 for connecting to the providing folder 210, the HDD management table unit 240 for storing HDD management information for managing the HDDs 310 and 320, and the storage area of the backup providing folder 210 The folder management table unit 250 for storing the folder management information, the backup history management table unit 260 for storing the backup history management information, the HDDs 310 and 320 and the backup provision with reference to the table unit. And a control unit 230 which includes a VCB (VMware Consolidated Backup) is a function for supporting the backup and restore between use folder 210. USB is an abbreviation for Universal Serial Bus and refers to a data transmission path standard for connecting a computer and peripheral devices.

  The storage area of the backup providing folder 210 is created for each user. For example, the storage area 211 for the user 1 includes a storage area 212 for storing the image file for the virtual machine 1 of the user 1 and the image file. Temporary storage area 213 for temporarily storing backup data and the like subjected to compression and encryption, storage area 215 for the image file for the virtual machine 2 of user 1, and compression and encryption of this image file A temporary storage area 216 for temporarily storing performed data and the like is provided, and an image file storage area and a temporary storage area are similarly provided for the storage areas for other users. Further, in this specification, an example using the storage areas 212 and 213 will be described in this example, but the storage areas corresponding to the virtual machines in the backup providing folder 210 are stored for image file storage, backup data storage, A plurality of storage areas for the restored backup data obtained by decompressing and restoring the backup data stored in the backup data storage area may be formed.

  In the present embodiment, the storage area for one virtual machine in the backup providing folder 210 is described as two types for image files and backup data, but a larger number of storage areas may be formed. The HDDs 310 and 320 of the USB interface are hard disk devices of the same standard, and in this embodiment, the HDD 310 is set as a positive storage medium and the HDD 320 is set as a secondary storage medium.

  As shown in FIG. 2, the HDD management table unit 240 includes an HDD volume (logical area) ID (identification: identifier used to identify a user) for identifying the HDD and a management name of the HDD. As shown in FIG. 3, the folder management table unit 250 stores a management name for a management name and a free space indicating the free space of the HDD. The maximum number of generations for setting the maximum number of generations, the first hierarchy folder name that is the management name of the user name part of the backup target unit, and the management name of the server name part of the backup target unit Each information of the two-layer folder name is stored.

  As shown in FIG. 4, the backup history management table unit 260 includes, as backup history information, a backup management number, a backup target folder that is information on the folder of the backup providing folder 210 that is a backup target, Backup start time indicating the start date of backup, first layer folder name that is the management name of the user name portion of the backup target unit, and VCB indicating the start date of backup by the VCB that supports backup Each information of backup start time, backup destination HDD information, backed up file name, and encryption key set differently for each backup process is stored.

  The backup data to be backed up in the HDDs 310 and 320 is, for example, the image file stored in the backup providing folder 210 is divided into predetermined values (eg, every bit), and the divided image file is compressed and encrypted. It consists of a plurality of divided encrypted compressed image files and a plurality of hash values calculated based on the divided encrypted compressed image files using a hash function. For example, as shown in FIG. 5, the divided encrypted compressed image file D1 , Hash value H1 of this divided encrypted compressed image file D1, divided encrypted compressed image file D2, hash value H2 of this divided encrypted compressed image file D2,... Divided encrypted compressed image file Dn, this encrypted data Like the hash value Hn of Dn, the divided encryption compression event Configured to correspond to the over-di file with the hash value generated in response to the divided encrypted compressed image file.

  That is, the backup data according to the present embodiment includes a step of dividing a virtual machine image file into predetermined values to generate a divided image file, and a step of calculating a hash value from the divided image file using a predetermined hash function. And a step of generating a divided encrypted compressed image file obtained by encrypting and compressing the divided image file by a predetermined encryption method, and a step of generating the divided encrypted compressed image file and a hash value for each predetermined value. By repeating, it is generated as shown in FIG. A hash value is a value obtained by calculating a certain data (numerical value) with a function called a hash function, and it is very unlikely that the same hash value can be obtained from data of different values. Even if the function is known, the basic data cannot be calculated. In the above-described example, the hash value is calculated from the divided image file before encryption compression. However, the hash value may be calculated from the divided encryption compressed image file after encryption compression.

[Operation]
Next, the operation of the backup system according to the present embodiment will be described with reference to FIG.
[Backup operation]
The backup system according to the present embodiment displays the name of the image file stored in the backup providing folder 210 for a predetermined number of days or more when step S501 detects the click of the backup start button from the administrator and the start of backup is detected in step S501. And the step S502 for accepting selection of the image file of the virtual machine to be backed up from the administrator, referring to the HDD management table unit 240, and selecting and displaying the HDD group (primary / secondary HDD) having the largest free capacity. Step S503, step S504 for determining whether or not the selected HDD group is attached to the USB interface 220 based on the HDD volume name, and the like. If it is determined that the selected HDD group is attached in step S504, the virtual machine 110 Step S505 for copying the image file 112 of the connected virtual disk 111 to the storage area 212 of the corresponding user in the backup providing folder 210 of the backup server 200, and the above-described FIG. 5 based on the copied image file. The backup data in which the encryption compression and the hash value are embedded is generated, and the step S506 of storing in the storage area 213 is executed to copy the image file of the selected virtual disk to the backup server 200. It operates to store backup data in which hash values are embedded based on the image file.

Next, the backup system decompresses and decrypts the backup data stored in step S506 and generates a restored image file from which the hash value is removed, and compares the restored image file with the base image file stored in the storage area 212. In step S507, the process proceeds to error processing when there is a mismatch. When it is determined in step S507 that the restored image file and the base image file match, the stored image is stored in the storage area 213. a step S508 of copying backup data to the positive HDD310 via the USB interface, whether to match by comparing the backup data stored as backup data has been copied by the step S508 in the HDD310 in the storage area 213 If it is determined that there is a mismatch, step S509 proceeds to error processing, and if it is determined in step S509 that they match, step S512 is performed to copy the backup data stored in the HDD 310 to the secondary HDD 320, and the HDD 320 is copied using this step S512. The backup data and the backup data stored in the HDD 310 are compared to determine whether or not they match, and the process proceeds to error processing when they do not match, and executes step S13 that ends the process when they match. , Between the virtual disk and the backup providing folder, between the base image file in the backup providing folder and the restored image file after restoration after compression encryption, between the backup providing folder and the HDD 310, and between the HDD 310 and the HD. Verify the integrity of the data after copying and between 320, it is possible to back up the image file reliable virtual disk. The error process is a process for displaying an error to an administrator and stopping the process, and the same applies to the process described later.

[Restore operation]
When the backup data backed up to the HDD is restored, the backup system according to the present embodiment searches the backup history management table unit 260 that accepts the user name and server name input by the administrator, as shown in FIG. Step S602 for displaying history information of the hit backup history management table section 260 and whether the corresponding HDD group has been inserted into the USB interface 220 with reference to the backup destination HDD information included in the displayed history information by the administrator Step S603 for determining whether or not based on the HDD volume name, step S604 for acquiring backup data from the corresponding HDD in step S603, and a hash value read from the hash value calculated from the acquired divided encrypted data Are determined to be identical, and if they do not match, the process proceeds to error processing. If it is determined in step S605 that all hash values match, the image file is decompressed and decrypted. By executing step S606 for restoring the data and step S607 for restoring the restored image file to the virtual disk, it is possible to restore the backup data while confirming the validity of the backup data. Note that the HDD that performs the above restore may be either primary or secondary.

[Compare operation]
Now, according to this embodiment, if an error occurs during the restore described above, the backup data in the primary / secondary HDD may be damaged, so that the backup system restores again from the HDD that has not been restored. However, in order to check which data in the primary / secondary HDD has been damaged, it is possible to execute a backup comparison of the primary / secondary HDD and check which HDD backup is correct. The operation of will be described next.

  As shown in FIG. 8, this comparison operation includes steps S701 for inserting the corresponding HDDs 310 and 320 into the USB interface 220, step S702 for accepting a comparison start by the administrator, and the folder of the backup data stored in both HDDs. A step S703 for deleting old backup data exceeding the number of generations stored in the management table unit 250, a step S704 for executing a comparison for comparing the backup data stored in both HDDs, and the result of this comparison and the backup data for the previous generation are stored. In step S705 for displaying the deleted information, it is determined whether or not a match is obtained as a result of the comparison in step S704. If it is determined that a match is found, the process is terminated in step S706 and this step S706. If it is determined that a match cannot be obtained, the hash value generated based on the encrypted data of the primary and secondary HDDs is compared with the read hash value to check which HDD data is correct, and the correct HDD name is determined. By displaying the data, it is possible to restore the backup data for which the validity is guaranteed or to overwrite the damaged backup data and restore it.

  In the above-described embodiment, an example in which an HDD is used as a backup unit has been described. However, other easily removable recording media such as a USB memory may be used, and the image file division method is divided into predetermined values. The present invention is not limited to this, and the image file may be divided into a predetermined number corresponding to the maximum value of the image file capacity.

100 virtual machine servers, 110 virtual machines, 111 virtual disks,
112 image file, 200 backup server,
210 Folder for providing backup, 211 storage area, 212 storage area,
213 temporary storage area, 215 image file storage area,
216 temporary storage area, 220 USB interface, 230 control unit,
240 management table section, 250 folder management table section,
260 Backup history management table section

Claims (4)

A backup system that compresses a virtual disk image file and backs it up to multiple recording media.
Backup providing folder having a plurality of backup storage areas, a recording medium management table section for storing the volume identifier and storage free space of the recording medium, management of the storage area name of the backup providing folder and the backup destination recording medium A backup history management table unit for storing information, a backup server having a control unit for verifying the consistency of backup data using a hash function and controlling backup and restoration of an image file to a storage medium,
The control unit of the backup server
A first step of storing the image file in a first storage area of a backup providing folder;
A second step of generating a divided image file obtained by dividing the image file stored in the first step every predetermined value;
A third step of calculating a hash value using a hash function for each divided image file generated in the second step;
A fourth step of generating a divided encrypted compressed image file obtained by encrypting and compressing the divided image file divided by the second step by a predetermined encryption method;
A fifth step of storing backup data obtained by combining the divided encrypted compressed image file generated in the fourth step and the hash value calculated in the third step in the second storage area of the backup providing folder; ,
Whether the restored image file obtained by removing the hash value from the backup data stored in the fifth step and decompressing and decoding the backup data from which the hash value has been removed matches the image file stored in the first storage area A sixth step of copying the backup data stored in the second storage area to the first recording medium when it is determined that they match,
Or a whether determining seventh step and the backup data stored as backup data has been copied by more the sixth Engineering in the second storage area are matched,
An eighth step of copying the backup data copied to the first recording medium in the seventh step to the second recording medium;
It is determined whether the backup data copied to the first recording medium and the backup data copied to the second recording medium match. When it is determined that they do not match, the first recording medium and the second recording medium A divided encrypted compressed image file obtained by removing a hash value from the backup data recorded on the recording medium, a hash value calculated using a hash function based on the generated divided encrypted compressed image file, and the first And a ninth step of comparing the hash value of the backup data recorded on the second recording medium and the second recording medium to determine data consistency . The backup server includes a folder management table unit for storing the maximum number of generations of backup data, and when executing the ninth step, backup data exceeding the maximum number of generations stored in the folder management table unit The backup system according to claim 1, wherein the step of deleting from the second recording medium is executed. Backup providing folder having a plurality of backup storage areas, a recording medium management table section for storing the volume identifier and storage free space of the recording medium, management of the storage area name of the backup providing folder and the backup destination recording medium A backup server having a backup history management table unit for storing information and a control unit for verifying the consistency of backup data using a hash function of a virtual disk and controlling backup and restoration of an image file to a storage medium the a backup method of virtual disk of Bei obtain computer system,
In the control unit of the backup server,
A first step of storing the image file in a first storage area of a backup providing folder;
A second step of generating a divided image file obtained by dividing the image file stored in the first step every predetermined value;
A third step of calculating a hash value using a hash function for each divided image file generated in the second step;
A fourth step of generating a divided encrypted compressed image file obtained by encrypting and compressing the divided image file divided by the second step by a predetermined encryption method;
A fifth step of storing backup data obtained by combining the divided encrypted compressed image file generated in the fourth step and the hash value calculated in the third step in the second storage area of the backup providing folder; ,
Whether the restored image file obtained by removing the hash value from the backup data stored in the fifth step and decompressing and decoding the backup data from which the hash value has been removed matches the image file stored in the first storage area A sixth step of copying the backup data stored in the second storage area to the first recording medium when it is determined that they match,
Or a whether determining seventh step and the backup data stored as backup data has been copied by more the sixth Engineering in the second storage area are matched,
An eighth step of copying the backup data copied to the first recording medium in the seventh step to the second recording medium;
Whether the backup data copied to the first recording medium and the backup data copied to the second recording medium match is determined, and when it is determined that they do not match, the first recording medium and the second recording medium A divided encrypted compressed image file obtained by removing a hash value from the backup data recorded on the recording medium, a hash value calculated using a hash function based on the generated divided encrypted compressed image file, and the first And a ninth step of comparing the hash value of the backup data recorded on the second recording medium and the second recording medium to determine data consistency . The backup server is provided with a folder management table unit for storing the maximum number of generations of backup data. When the ninth step is executed, backup data exceeding the maximum number of generations stored in the folder management table unit 4. The backup method according to claim 3, wherein the step of deleting from the second recording medium is executed.

Images