KR100970211B1 - Method and Apparatus for Monitoring Service Status Via Special Message Watcher in Authentication Service System - Google Patents

Abstract

The present invention collects only common monitoring data from the authentication server through a separate message watcher without performing the monitoring logic directly in the authentication server performing the authentication process for the mobile communication service, and statistics the status of the authentication service and sets the criteria. The present invention relates to a service state monitoring method and apparatus for notifying an operator of an alarm when an outgoing monitoring data is generated to deal with a failure. The service status monitoring method according to the present invention comprises the steps of transmitting a monitoring message including monitoring data for each business process that is the basis of service status determination in a server performing a business process for a mobile communication service and a separate message monitor Extracting monitoring data of each business process from the monitoring message to update statistical data, and generating service state information by performing monitoring logic to compare the statistical data with reference data.

Service status monitoring through separate watcher that collects monitoring data without performing monitoring logic for MMDB, RDB, authentication process

Description

Method and Apparatus for Monitoring Service Status Via Special Message Watcher in Authentication Service System}

The present invention relates to a service state monitoring method and apparatus, and more particularly, to common monitoring from an authentication server through a separate message watcher without performing monitoring logic directly in an authentication server performing an authentication process for a mobile communication service. The present invention relates to a service state monitoring method and apparatus that collects only data to certify the status of an authentication service and notify an operator of an alarm when an out-of-standard monitoring data occurs so that an error can be handled.

Here, the present method and apparatus for monitoring the state of the service perform authentication of performing high-speed authentication service based on MMDB (Main Memory Database) and performing stable authentication service based on relational database (RDB) which is automatically switched through an L4 switch of a transport layer in case of a failure. Although described by way of example, it can be applied to an authentication service system that can provide an uninterrupted mobile communication service by operating service duplication, but the present invention is not limited thereto, and is based on monitoring data generated for each work process by performing a plurality of work processes. Applied to all systems that perform the monitoring logic of the system, for monitoring by simply changing the monitoring status logic in a separate monitor without changing the source code of the entire system to change the monitoring logic corresponding to each business process. Freely change the required logic Can.

In order to provide a mobile communication service, each mobile service provider server performs necessary authentication for an incoming service and links the service according to the authentication success. For example, a mobile service provider server may provide an authentication service for determining an authentication request, determining whether a subscriber is provided, whether additional service is supported, whether a terminal standard is appropriate, whether or not to join or terminate a specific service, and returning a result. By doing so, the subsequent procedure can be determined according to the authentication result. That is, if the subscriber is not a subscriber to the call connection request, an authentication failure occurs for the call connection request, and accordingly, the call connection request is returned to the call connection request. On the contrary, if the subscriber is a qualitative subscriber to the call connection request, authentication is successful for the call connection request. Accordingly, the call connection session is established to the destination exchange through the source exchange for the call connection request. You can make a call with

Based on such authentication, as well as call connection, various mobile communication services such as text message service, wireless Internet, data service, DMB, etc. are made, so stabilization of the authentication system is very important. In general, the authentication system is operated based on a large memory in order to database, maintain and manage a lot of data related to subscribers, terminals, services, and the like. In order to process a large amount of traffic related to a large amount of authentication requests for a mobile communication service at a high speed, such a large memory is being accelerated.

However, even in the case of high speed, if there is an obstacle in the processing for authentication, the use of the accelerated large-capacity memory becomes useless, and the mobile communication service is interrupted and the customer's dissatisfaction becomes large. Therefore, in order to provide a seamless mobile communication service despite the failure of the authentication system, a backup scheme of a stable and efficient authentication system is required. In this case, when the authentication server starts the monitoring logic for each authentication process, Even if it is changed, it is difficult to change the source code for the whole system. Therefore, it is necessary to efficiently monitor the status of the authentication service.

Accordingly, an object of the present invention is to solve the above-described problems, and an object of the present invention is to perform common monitoring from an authentication server through a separate monitor without performing monitoring logic directly in an authentication server performing an authentication process for a mobile communication service. By collecting only the data to certify the status of the authentication service and notifying the operator of alarms when monitoring data is out of the standard, it is possible to change the source code of the entire system to change the monitoring logic corresponding to each authentication process. It is to provide a service status monitoring method and apparatus that can freely change the logic required for monitoring by simply changing the monitoring status logic in a separate monitor.

Another object of the present invention is to use a heterogeneous DB to automatically switch from MMDB based authentication to RDB based authentication in order to provide a service without interruption by providing an authentication process for providing a mobile communication service without interruption. An authentication service redundancy system implemented and a service status monitoring method and apparatus for efficiently monitoring the status of authentication services in such authentication service duplication system are provided.

First, to summarize the features of the present invention, the service state monitoring method according to an aspect of the present invention for achieving the above object of the present invention, the basis of the service state determination in the server performing a business process for mobile communication services Transmitting a monitoring message including monitoring data for each business process to be; And extracting monitoring data of each work process from the monitoring message by updating a statistical data in a separate message monitor, and generating service state information by performing monitoring logic for comparing the statistical data with reference data. .

The transmitting may include periodically generating a monitoring message including a process name, a number of service provisions, and a message transmission time, wherein the number of service provisions includes a number of receiving a request message for an authentication process and a success response. Includes the number, failure response, average response time, or DB connection failure.

In addition, the message monitoring server according to another aspect of the present invention, receiving monitoring data for each business process that is the basis of the service status determination from the server performing the business process for the mobile communication service, the monitoring logic based on the monitoring data A server for monitoring the service status of the plurality of business processes by integrally managing the plurality of business processes, comprising: a data receiving unit for receiving a monitoring message including the monitoring data; A statistics unit which extracts monitoring data of each business process from the monitoring message and updates statistical data in the storage means; And a determination unit configured to generate service state information by performing monitoring logic for comparing the statistical data with reference data.

In addition, the authentication service method through a backup scheme according to another aspect of the present invention, (A) updating the basic information to the first authentication server, and backing up to the second authentication server; (B) While performing authentication based on the updated basic information in the first authentication server, in case of failure of the first authentication server, it is automatically switched to the second authentication server and based on the backed up basic information. Performing authentication on an authentication request at the second authentication server; And (C) generating a monitoring message including monitoring data for each business process that is a basis of service status determination as a result of processing an authentication process in the first authentication server or the second authentication server. In addition, a separate message monitor that manages monitoring logics for a plurality of business processes may monitor a service state of the plurality of business processes based on the monitoring data.

After the step (C), (D) receiving the monitoring message from the message monitor to extract the monitoring data of each business process from the monitoring message to update the statistical data, monitoring for comparing the statistical data and the reference data The method may further include generating service state information by performing logic.

In the step (B), the first authentication server performs high-speed authentication using a semiconductor memory-based storage means of MMDB standard, and the second authentication server uses the disk-based storage means of RDB standard for the first authentication. Slower authentication may be performed than the first authentication server temporarily until the failure of the server is recovered.

In the step (B), the first authentication server distributes the authentication using at least two servers including storage means for updating the basic information and an application for operating the storage means for updating, and 2 The authentication server may distribute the authentication using at least two servers including a storage means for backing up the basic information and an application operating the backup means.

The authentication service system through a backup scheme according to another aspect of the present invention includes a first authentication server that updates and stores basic information and performs authentication based on the updated basic information; A second authentication server which backs up the basic information and starts authentication according to a switching signal when the first authentication server fails and performs authentication based on the backed-up basic information; And a message monitoring server that receives a monitoring message generated as a result of processing the authentication process in the first authentication server or the second authentication server, wherein the monitoring message is for each business process that is the basis of service status determination. Including monitoring data, the message monitoring server may integrally manage the monitoring logic for a plurality of business processes, and monitor the service status of the plurality of business processes based on the monitoring data.

The message monitoring server receives the monitoring message, extracts monitoring data of each business process from the monitoring message, updates statistical data, and performs monitoring logic to compare the statistical data with reference data to provide service status information. Can be generated.

The first authentication server distributes authentication by using at least two servers including an MMDB standard semiconductor memory based storage means for updating the basic information and an application for operating the semiconductor memory based storage means, and The second authentication server may distribute the authentication by using at least two servers including an RDB standard disk-based storage means for backing up the basic information and an application operating the disk-based storage means.

According to the service state monitoring method and apparatus according to the present invention, the authentication service state by collecting only the common monitoring data from the authentication server through a separate monitor without performing the monitoring logic directly in the authentication server performing the authentication process for the mobile communication service The fault handling can be facilitated by statistic analysis and notification of alarms to operators upon occurrence of out-of-standard monitoring data.

In addition, according to the service state monitoring method and apparatus according to the present invention, in order to change the monitoring logic corresponding to each authentication process, monitoring is simply performed by simply changing the monitoring state logic in a separate monitor without changing the source code of the entire system. You can freely change the logic required for this purpose.

In addition, according to the service state monitoring method and apparatus according to the present invention, by applying the above separate monitor to the authentication service duplication system implemented using heterogeneous DB to automatically switch from MMDB-based authentication to RDB-based authentication In addition, through the switching of non-stop authentication, the mobile communication service can be provided without interruption, and the status of the authentication service for the authentication process can be efficiently monitored.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout. Like reference numerals in the drawings denote like elements.

1 is a view for explaining the authentication service system 100 according to an embodiment of the present invention. Referring to Figure 1, the authentication service system 100 according to an embodiment of the present invention, MMDB-based authentication server (110, 120), RDB-based authentication server (130, 140), statistics server 150 ), And the current server 160. These servers can be connected to each other based on the L2 switch of the data link layer to send and receive signals to each other.Storage Area Network (SAN) switches can store data from the hard disk drive (HDD) -based shared storage and You can receive data and update the database.

The MMDB-based authentication servers 110 and 120 may be a database to read and write necessary data using a semiconductor memory-based storage means of the MMDB (Main Memory DataBase) standard. On the other hand, the RDB-based authentication servers 130 and 140, the statistics server 150, and the current server 160 may make a database to read and write necessary data using a disk-based storage means of RDB (Relational DataBase) standard. Can be. Since MMDB uses semiconductor memory, high-speed data processing is possible, but there is an expensive disadvantage. RDB uses a storage means such as an optical disk, so the processing speed is slow but inexpensive.

In the present invention, MMDB-based authentication servers 110 and 120 as a first authentication server for an authentication service request flowing through an L4 switch of a transport layer in normal times, that is, when there is no failure such as an equipment failure or failure. Fast authentication can be performed using. At this time, the authentication servers 110 and 120 receive information necessary for the authentication updated by the current server 160 on the shared storage and use it for authentication, and the statistical server 150 uses the authentication servers 110 and 120 as the authentication server. The log data about the attempt or result of the authentication performed is collected and statistically processed at a predetermined time, such as 2,4..am, at a predetermined time, which is determined as relatively low traffic during the day. RDB03). In particular, the MMDB-based authentication servers (110, 120) is a message monitoring server containing a monitoring message for each business process that is the basis of the service state determination that is generated as a result of processing the authentication process message monitoring server (FIG. 2) (See 180 of the above), the message monitoring server, which integrates the monitoring logic for each business process, can apply the monitoring data collected from the authentication servers to the monitoring logic to monitor the service status of each business process. . That is, the authentication servers 110 and 120 that perform the authentication process for the mobile communication service do not directly perform the monitoring logic, and are common from the authentication servers 110 and 120 through a message monitoring server that is a separate watcher. Only the monitoring data can be collected to certify the status of the authentication service, and when an out-of-standard monitoring data occurs, an alarm can be notified to the operator so that the failure can be handled. Accordingly, in order to change the monitoring logic corresponding to each authentication process, monitoring is simply performed by simply changing the corresponding monitoring state logic in the message monitoring server without changing the entire source code for activation of the authentication servers 110 and 120. You can freely change the logic required for this purpose.

Meanwhile, while the MMDB-based authentication servers 110 and 120 perform an authentication service, the MMDB-based authentication servers 110 and 120 have a failure, and thus, the MMDB-based authentication servers 110 and 120 may cause further failures. When the above authentication service cannot be performed, the low-speed authentication is performed using the RDB-based authentication servers 130 and 140, which are the second authentication server, for the incoming authentication service request, but the service can be performed without interruption. Automatic switching to RDB-based authentication servers (130, 140) can be made in the L4 switch, the authentication service through the RDB-based authentication servers (130, 140) of the MMDB-based authentication servers (110, 120) This can be done temporarily until the fault is recovered. In this case, the authentication servers 130 and 140 basically receive the information necessary for the authentication updated by the current server 160 in the shared storage and use the authentication server. The statistics server 150 may use the authentication servers 130 and 140 as an authentication server. The log data about the attempt or result of the authentication performed by the) can be collected and statistically managed at a predetermined time as the traffic of the day is relatively small and managed in the database (RDB03). In this case, the RDB-based authentication servers 130 and 140 also perform an authentication process in order to freely change the logic required for monitoring by simply changing the corresponding monitoring state logic in the message monitoring server (see 180 of FIG. 2). By notifying the message monitoring server with the monitoring message including the monitoring data for each business process that is the basis of service status determination generated as a result of processing the message, the message monitoring server sends the monitoring data collected from the authentication servers to the corresponding monitoring logic. The service status of each business process can be monitored.

Here, the MMDB-based authentication server (110, 120) and RDB-based authentication server (130, 140) each is an example of operating two servers containing the DB and the application, but is not limited to this It may be operated as one, or 3, 4, 5. etc., depending on the traffic load.

In order to provide authentication services for various services such as mobile communication services, for example, call connection, text message service, wireless Internet, data service, DMB, and the like, the authentication servers are based on a large capacity memory for subscribers, terminals, and service requests. Database, maintenance and management of a lot of data related to the details. Here, the process of performing authentication services by the authentication server is a general authentication process or additional process that returns the result by determining whether the subscriber, additional service support, whether the terminal standard is appropriate, whether to subscribe / unsubscribe to a specific service, etc. Performing an authentication process according to a process of approving and responding to a service, for example, a user who accesses the wireless Internet through a game / subscription. In order to process a large amount of authentication-related traffic generated in order to provide such various mobile communication services at high speed, the MMDB-based authentication servers 110 and 120 are usually applied. However, in the case of realizing the authentication server as a backup scheme based on the MMDB, it becomes expensive. Therefore, RDB based authentication servers are obtained from MMDB based authentication by the MMDB based authentication servers 110 and 120 at the time of failure. It is possible to automatically switch to RDB-based authentication by (130, 140) to realize reliable and cost-effective duplication of authentication services and to resolve customer complaints by non-disruptive services.

Hereinafter, in the authentication service system 100 according to the present invention with reference to FIGS. 2 to 6, a method of realizing service state monitoring of a business process through the message monitoring server 180 together with an uninterrupted duplication service will be described in more detail. .

2 is a diagram illustrating an authentication server, shared storage, and a message monitoring server according to an exemplary embodiment of the present invention.

Referring to FIG. 2, the authentication servers 110, 120, 130, and 140 according to an embodiment of the present invention are each dissipator 111 or a business process unit regardless of whether they are based on MMDB or RDB. Application servers (APP01, APP02 / APP03, APP04), including (Business Process Unit: Bizprocess) 112, Server Monitoring Agent 113, and Log Process Unit: Logprocess 114; Databases (MMDB01, MMDB02 / RDB01, RDB02) for storing and managing basic information necessary for authentication, such as subscriber information, service information, terminal information, and subscription / cancellation. Shared storage for sharing the necessary data in the authentication server (110, 120, 130, 140) is authentication-related log storage and other statistics to store log data for the various services that occur during the authentication process in the authentication server It may include a database storage for storing and managing the data generated during the statistical processing results or the current process of the server.

Data may be transmitted and received between the business process unit 112 and the database according to the Transmission Control Protocol (TCP) protocol, and the log processing unit 114 may transmit data according to the IPC protocol from the distributor 111 and the business process unit 112. Can be received. In addition, data can be transmitted and received between the distributor 111 and the business process unit 112 according to the Inter Processor Channel (IPC) protocol. The server monitoring agent 113 may receive necessary data from the distributor 111, the business process unit 112, or the log process unit 114 according to the User Datagram Protocol (UDP) protocol.

When there is no obstacle in normal operation, the L4 switch may load balance the incoming authentication service requests to properly distribute traffic to the MMDB-based authentication servers 110 and 120 of the first authentication server. Accordingly, the MMDB-based authentication servers 110 and 120 perform authentication services through the corresponding DBs MMDB01 and MMDB02 and the application servers APP01 and APP02 managing them (see S510 of FIG. 5). The authentication service of the authentication servers 110 and 120 is performed based on basic information necessary for authentication updated by the current server 160 to the shared storage.

For example, a user of a mobile communication service may request a subscription / change / deletion of a service at a customer service center or a sales office. Accordingly, basic information necessary for authentication such as new information, change, deletion, etc. of the subscriber, the terminal, the service application history, etc. may be introduced into the current server 160 through the corresponding branch terminal. The current server 160 may update and store the basic information introduced while operating the DB (RDB04) in shared storage, and the basic information may be activated by the shared storage based on the MMDB based authentication servers 110 and 120. It can be updated in the corresponding DB (MMDB01, MMDB02) of the, and also can be updated and backed up in the corresponding DB (RDB01, RDB02) of the RDB-based authentication server (130, 140).

While performing authentication by the MMDB-based authentication servers 110 and 120, a failure may occur when equipment of the corresponding server fails or no longer authenticates, such as repair or replacement. At this time, for the incoming authentication service request, the L4 switch determines whether the MMDB-based authentication servers 110 and 120 have failed based on the authentication processing success rate or failure rate of the MMDB-based authentication servers 110 and 120 and other failure report messages. Can be determined (see S520 of FIG. 5). In this case, when it is determined that the failure is performed, the L4 switch may generate a switching signal so that the RDB-based authentication servers 130 and 140 may be started and automatically switched (see S530 of FIG. 5).

Accordingly, the L4 switch can properly distribute the traffic to the RDB-based authentication servers 130 and 140 of the second authentication server, so that the RDB-based authentication servers 130 and 140 respectively correspond to the corresponding DB and the DB. Authentication service can be performed through an application server. If it is not a failure, the authentication performed by the MMDB based authentication servers 110 and 120 continues, and the L4 switch may continuously monitor whether or not the MMDB based authentication servers 110 and 120 fail.

In response to the authentication service request flowing through the L4 switch from above, the distributor 111 transmits the corresponding authentication service request to various business process units 112 that may be grouped and operated for various services (see S540 of FIG. 5). ).

Accordingly, in the MMDB-based authentication servers 110 and 120 and the RDB-based authentication servers 130 and 140, the current server 160 is connected to the shared storage through the corresponding business process unit (eg, 112). Authentication may be performed based on the basic information necessary for the updated authentication (see S550 of FIG. 5). The business process unit (for example, 112) is the basic information (e.g., new, changed, deleted, etc. for the subscriber, terminal, service request history, etc.) updated or backed up to the corresponding DBs for the authentication service request. Based on the information required for authentication), and determine whether the subscriber, additional service support, whether the terminal standard is reasonable, whether to subscribe / unsubscribe to a specific service, and return the result, call connection, text message service, wireless The user terminal that requests the Internet, data service, DMB service, etc., can receive the service normally. For example, in the authentication of the call connection request, if the user of the request is not a subscriber, an authentication failure occurs for the call connection request, and accordingly, it may return that the call connection request has been failed for the call connection request. On the contrary, in the authentication of the call connection request, when the user of the request is a normal subscriber, by returning a successful authentication message for the call connection request, the call connection session to the destination exchange through the source exchange for the call connection request is returned. This setting can be made to make a call with the called party.

The business process unit (for example, 112) is the main in relation to the authentication service request flowing into the corresponding process received the authentication request from the distributor 111 among the processes (A, B, C ..) for the authentication of various services. Authentication can be performed by distributing threads to multiple work threads. Depending on the task thread for authentication, the finite state machine (FSM) starts up and performs the necessary logics to authenticate subscriber information / service information / terminal information / subscription or termination information, and to verify success or failure according to the corresponding process. You can respond by creating a message that informs you. In this case, whenever a new authentication is added to a business process unit (for example, 112), a code for a new process can be added to enable the corresponding process easily. In each process, various logics prepared through a plug-in module can be used in the FSM. It can be operated to refer to and use.

In addition, the MMDB based authentication servers 110 and 120 and the RDB based authentication servers 130 and 140 may manage data for statistics of the authentication process through the log processing unit 114 (FIG. 5). See S560). For example, the MMDB-based authentication servers 110 and 120 may store log data about an attempt or result of authentication performed in a corresponding database or other storage means such as an HDD. Similarly, even when the RDB-based authentication servers 130 and 140 are operating, the RDB-based authentication servers 130 and 140 may log log data on an attempt or result of authentication performed by another database or HDD. Can be stored in the storage means.

While the MMDB-based authentication servers 110 and 120 or the RDB-based authentication servers 130 and 140 perform the authentication, a predetermined time, which is predetermined as relatively low traffic during the day, for example, 2 am 3, .. When the most leisurely time, such as the hour, the current server 160 and the statistics server 150 using the database of the same standard (RDB standard) can collect the log data and use it for statistical processing. . The statistical server 150 may process statistics on authentication type, authentication time, success / failure, processing time, etc. based on the log data, and may transmit corresponding data when requested by the operation terminal. As such, the result of statistical processing managed by the statistics server 150 may be stored as shared storage, and accordingly, the current operation among the MMDB-based authentication servers 110 and 120 or the RDB-based authentication servers 130 and 140 may be performed. If the server in question is required to perform the authentication process, the statistics processing results can be used from the shared storage.

In particular, the MMDB based authentication servers 110 and 120 or the RDB based authentication servers 130 and 140, through the server monitoring agent 113, the basic data to be used for monitoring, for example, the number of authentication requests, The monitoring message including monitoring data such as the authentication success response number, the authentication failure response number, the average response time, and the connection failure number to the DB is transmitted to the message monitoring server 180 (see S570 of FIG. 5). That is, the server monitoring agent 113 in accordance with the UDP protocol from the spreader 111, the business process unit 112, and the log process unit 114 in each authentication process, for example, authentication success / failure, By receiving the response time for authentication, etc., such information can be processed and analyzed as shown in FIG. 3, and the necessary data can be counted, and the process name for the corresponding authentication process (including an additional service subscription / cancellation process) and the number of service provisions (eg For example, the monitoring message including the number of requests received, the success response, the failure response, the average response time, or the DB connection failure for the authentication process) and the message transmission time may be periodically checked. For example, it may be generated every few seconds, minutes, or hours, and transmitted to the message monitoring server 180.

As described above, the message monitoring server 180 monitors data (for example, a process) for each business process that is a basis of service status determination through monitoring messages from authentication servers performing various business processes for authentication for a mobile communication service. Name, the number of service provisions, and message transmission time, etc.), so that the message monitoring server 180, which collectively manages the monitoring logic for each business process, statistics the monitoring data and sends the monitoring logic to the monitoring logic. By applying the monitoring data, the service state of each business process may be monitored to generate service state information such as an alarm and notify the operation terminal 190 (see S580 of FIG. 5).

4 is a view for explaining the message monitoring server 180 according to an embodiment of the present invention in detail.

Referring to FIG. 4, the message monitoring server 180 according to an embodiment of the present invention may include a data receiver 181, a storage 182, a statistics unit 182, and a determination unit 184. .

The data receiving unit 181 may periodically receive the monitoring message including the monitoring data from the authentication servers performing each business process and store the monitoring message in the storage unit 182 (see S581 and S582 of FIG. 5). For example, the data receiver 181 may classify a process name and store the number of service provisions and a message transmission time.

The statistics unit 182 may extract monitoring data of each business process from the monitoring message stored in the storage unit 182 and update the statistical data in the storage unit 182 (see S581 and S582 of FIG. 5). The statistics unit 182 may store the result in the storage unit 182 by analyzing the number of service provisions corresponding to the process name and the message transmission time and performing statistical processing. For example, the number of times a request (authentication service request) message was received for the corresponding authentication process, the success response (response as successful to the authentication service request), and the failure response (authentication service request) for each time period based on the message transmission time. Number of cases, the average response time (average time to successful or failed response to the authentication service request), or DB (MMDB / RDB) connection failure (subscription to the authentication service request, service, terminal, etc.) Attempts to connect to a DB for retrieval of information about the method fail, and the like may be statistically analyzed and stored in the storage unit 182. When there is a request for statistical data from the operation terminal 190, the statistics unit 182 may extract the corresponding data based on the information stored in the storage unit 182 and return it to the operation terminal 190.

The determination unit 184 may generate service state information such as an alarm by performing monitoring logic for comparing the statistical data processed by the statistics unit 182 with predetermined reference data. The reference data corresponds to the conditions for server monitoring. For example, as illustrated in FIG. 6, the amounts processed by the authentication servers for the authentication service request traffic may vary with time. That is, there is a lot of traffic during the day from the time before and after the public's rush hour, and the traffic volume decreases at the dawn time. The number of requests for receiving the full text of the monitoring data, the success response, the average response time, or the number of DB (MMDB / RDB) connection failures can also vary over time, with each average of these data in the absence of server equipment failure. The calculated value can be used as reference data. By comparing each of the predetermined reference data and the statistical data on the corresponding monitoring data in this way, when there is a large difference, the determination unit 184 can determine that the maintenance needs to be an error, and an alarm signal informing of this. To notify the operation terminal 190. In addition, in order to allow the operator to know the reason for the corresponding alarm, the determination unit 184 notifies the operation terminal 190 as service status information including the corresponding statistical data when the corresponding alarm occurs in addition to the alarm signal. It may be. According to the service state information notified by the determination unit 184 to the operation terminal 190, the operator may perform necessary subsequent processing for resolving a failure such as maintenance.

By performing predetermined monitoring logic, the authentication failure rate or success rate during the authentication process and other conditions for monitoring the server may be determined to report whether the corresponding servers are operating normally to the operation terminal. Or basic data to be used for monitoring in a separate message watcher without applying monitoring logic through the server monitoring agent 113 to each authentication process module, for example, the number of authentication requests, the number of successful authentication responses, It is also convenient to manage source code of the authentication process by collecting the number of authentication failure response, average response time, connection failure to the DB, and having the message watcher replace all the logic to be executed in the monitoring logic. This is because the task of changing the source code of the entire authentication work process in order to change the monitoring logic, not the change of the authentication work process may require a lot of effort and time and effort. It is also possible to collect monitoring data and determine whether there is an error in the authentication process according to the monitoring conditions.

The authentication service method and system according to an embodiment of the present invention described above implements the authentication service duplication by the MMDB and the RDB in order to provide an uninterrupted mobile communication service, and usually performs the quick authentication service based on the MMDB. In the event of a failure, it is possible to provide uninterrupted mobile communication services to reduce customer complaints stably and inexpensively by automatically switching uninterrupted with RDB-based authentication. At this time, it is possible to conveniently manage the source code of the authentication process by having the message monitor replace all the logic to be performed in the monitoring logic of the authentication server. As such, this avoids the task of changing source code for the entire authentication business process to change the monitoring logic, not the change of the authentication business process, and the message watcher collects the monitoring data and according to the monitoring conditions. By determining whether there is an error in the authentication process, it is possible to reduce the work load and time for debugging and compiling source code required for the authentication server.

The functions used in the methods and systems disclosed herein may be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, USB memory, hard disk drive, and also carrier wave (for example, transmission over the Internet). It also includes the implementation in the form of. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

1 is a view for explaining an authentication service system according to an embodiment of the present invention.

2 is a diagram illustrating an authentication server, shared storage, and a message monitoring server according to an exemplary embodiment of the present invention.

3 is a view for explaining the relationship between the authentication server and the message monitoring server.

4 is a view for explaining a message monitoring server according to an embodiment of the present invention in detail.

5 is a flowchart illustrating an operation of an authentication service system according to an embodiment of the present invention.

6 is an example illustrating a statistical value of monitoring data.

Claims (10)

Transmitting a monitoring message including monitoring data for each business process that is a basis of service state determination in a server performing a business process for a mobile communication service; And Extracting monitoring data of each business process from the monitoring message in a separate message monitor to update statistical data, and generating service status information by performing monitoring logic for comparing the statistical data with reference data; The monitoring message, service status monitoring method characterized in that it comprises a process name and the number of service provision. The method of claim 1, The monitoring message further includes a message transmission time, The number of times the service is provided, A service status monitoring method comprising the number of requests received for the authentication process, success response, failure response, average response time, or DB connection failure. Receiving monitoring data for each business process that is the basis of service status determination from a server performing a business process for a mobile communication service, and monitoring the logic based on the monitoring data integrated management for a plurality of business processes to the plurality A server that monitors the service status of business processes in A data receiver configured to receive a monitoring message including the monitoring data; A statistics unit which extracts monitoring data of each business process from the monitoring message and updates statistical data in the storage means; And Determination unit for generating service state information by performing the monitoring logic for comparing the statistical data and the reference data Message monitoring server comprising a. In the authentication service method through a backup scheme, (A) updating the basic information to the first authentication server and backing up to the second authentication server; (B) While performing authentication based on the updated basic information in the first authentication server, in case of failure of the first authentication server, it is automatically switched to the second authentication server and based on the backed up basic information. Performing authentication on an authentication request at the second authentication server; And (C) generating a monitoring message including monitoring data for each business process that is a basis of service status determination as a result of processing the authentication process in the first authentication server or the second authentication server; Including, And a separate message monitor that integrally manages monitoring logics for a plurality of business processes, and monitors a service state of the plurality of business processes based on the monitoring data. The method of claim 4, wherein after step (C), (D) receiving the monitoring message from the message monitor, extracting monitoring data of each business process from the monitoring message, updating statistical data, and performing monitoring logic to compare the statistical data with reference data to perform service status information. Steps to generate Authentication service method further comprising. The method of claim 4, wherein in the step (B), The first authentication server performs a high speed authentication using a semiconductor memory-based storage means of the MMDB standard, And the second authentication server performs slower authentication than the first authentication server temporarily until the failure of the first authentication server is recovered by using a disk-based storage means of an RDB standard. The method of claim 4, wherein in the step (B), The first authentication server distributes the authentication using at least two servers including a storage means for updating the basic information and an application for operating the storage means for updating the basic information, And the second authentication server distributes the authentication using at least two servers including a storage means for backing up the basic information and an application for operating the storage means for backing up the basic information. In the authentication service system through a backup scheme, A first authentication server for updating and storing basic information and performing authentication based on the updated basic information; A second authentication server which backs up the basic information and starts authentication according to a switching signal when the first authentication server fails and performs authentication based on the backed-up basic information; And Message monitoring server for receiving a monitoring message generated as a result of processing the authentication process in the first authentication server or the second authentication server Including, The monitoring message includes monitoring data for each business process that is the basis of the service status determination, The message monitoring server integrally manages monitoring logics for a plurality of business processes, and monitors the service status of the plurality of business processes based on the monitoring data. The method of claim 8, wherein the message monitoring server, Receiving the monitoring message, extracting monitoring data of each business process from the monitoring message to update statistical data, and performing monitoring logic to compare the statistical data with reference data to generate service state information; Authentication service system. The method of claim 8, The first authentication server, Authentication processing is distributed using at least two servers including a semiconductor memory-based storage means of the MMDB standard for updating the basic information and an application for operating the semiconductor memory-based storage means, The second authentication server, Authentication processing system characterized in that the authentication is distributed using at least two servers including an RDB standard disk-based storage means for backing up the basic information and an application that operates the disk-based storage means.

Images