JP2004220415A - Remote maintenance system, method and program, and electronic computer system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a remote maintenance system capable of ensuring the security of a business electronic computer to be maintained when remotely maintaining the computer via a network. <P>SOLUTION: This system comprises a maintenance electronic computer 13 for investigating failure cause of the business electronic computer 10, a storing device 14 being added to the maintenance electronic computer 13 and storing information regarding the failure cause, a switch 12 installed between the business electronic computer 10 and the maintenance electronic computer 13, a maintenance terminal 300A for access to the maintenance electronic computer 10 via the network 200, and a modem 15 providing a cut-off command to the switch 12 operatively responding to a log-in of the maintenance electronic computer 13 at the time of maintenance of the business electronic computer 10 and providing a connection commend to the switch 12 operatively responding to a log-off. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a remote maintenance system, a method and a program for remotely maintaining a business computer to be maintained from a remote place, and a computer system.
[0002]
[Prior art]
As a remote maintenance method of the computer system, a remote maintenance worker logs in to the business computer to be maintained using a telephone communication line or a dedicated communication line, and records a failure occurrence record of the business computer, There is a method of investigating failure analysis information such as operation records and memory dumps.
[0003]
From the viewpoint of security by the administrator of the business computer in this manner, there is a demand to limit the data and network range accessible by a third-party maintenance worker. Normally, these are realized in software by software for operating system functions and security control of the business computer.
[0004]
[Problems to be solved by the invention]
However, there has been a problem that the expected security may not be completely realized in practice due to the lack or inadequacy of the functions of the operating system and the security control software, and the setting mistake of the operator.
[0005]
An object of the present invention is to provide a remote maintenance system, a method, a program, and a computer system capable of ensuring security of a business computer to be maintained when the business computer to be maintained is remotely maintained via a network. is there.
[0006]
[Means for Solving the Problems]
To achieve the above object, the present invention provides a remote maintenance system for remotely maintaining a computer to be maintained via a network,
A computer for maintenance work for investigating a cause of failure of the computer to be maintained,
Storage means that is attached to the maintenance work computer and holds information related to the cause of failure of the maintenance target computer;
Switch means provided between the maintenance target computer and the maintenance work computer,
A relay unit that gives a disconnection command to the switch unit by a carrier signal at the time of log-in of the maintenance work computer and a connection command to the switch unit by a carrier signal at the time of log-off when the maintenance target computer is maintained; And a remote maintenance system comprising:
[0007]
As described above, according to the present invention, at the time of maintenance of the business computer to be maintained, the maintenance computer uses login and logoff to the maintenance computer, and the business computer by the maintenance computer is used. Since access to the computer is restricted, security of the computer for business use can be ensured even if software functions are lacking, inadequate, or misconfigured.
[0008]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, a remote maintenance system, a method, a program, and a computer system according to the present invention will be described.
[0009]
(1st Embodiment)
FIG. 1 shows a configuration in which a user 100 having a business computer 10 to be maintained is remotely monitored at a maintenance center 300 via a network 200. A maintenance terminal 300A at the maintenance center 300 is operated by a maintenance person. The operation is performed to maintain the business computer 10 of the user 100.
[0010]
FIG. 2 shows a configuration of one user 100 and a maintenance center 300 in FIG. 1, and the user 100 is provided with a business computer 10 to be maintained.
[0011]
In FIG. 2, a storage device 11 that stores failure cause information of the business computer 10 is connected to the business computer 10, and a maintenance computer 13 is connected via a switch 12 by a communication line 30. Have been. The storage device 14 is connected to the maintenance computer 13 for investigating the cause of the failure of the business computer 10 and is connected to the modem (relay device) 15 via the communication line 31 and the maintenance terminal 300A via the network 200. ing. Here, the information stored in the storage device 11 of the business computer 10 is copied to the storage device 14 of the maintenance computer 13 when the switch 12 is in the connected state in accordance with the processing described later.
[0012]
The modem 15 accesses the maintenance work computer 13 by logging in and logging off from the maintenance terminal 300A. The switch 12 is disconnected / connected by a carrier signal when the modem 15 logs in and logs off.
[0013]
FIG. 3 is a software configuration diagram of the system according to the present embodiment. The business computer 10 has a transmission task 10A for transmitting the failure cause information to the maintenance computer 13. The reception task 13A receives the failure cause information sent from the business computer 10 and stores it in a storage device 14 connected to the maintenance computer 13.
[0014]
FIG. 4 is a processing flowchart of the transmission task, and FIG. 5 is a processing flowchart of the reception task. FIG. 6 is a processing flowchart of the hardware switch controlled by the modem.
[0015]
2 to 6, the transmission task 10A in the business computer 10 waits for an event in which information necessary for maintenance is generated due to a failure or the like (step S1 in FIG. 4). For example, when the operating system of the business computer 10 detects inconsistency in hardware and data in the operating system, the memory information at that time is stored in the storage device 11 and the business computer 10 is restarted.
[0016]
Next, the transmission task in the business computer 10 detects that the memory information at the time of the occurrence of the failure is stored in the storage device 11 (step S2 in FIG. 4), and stores this memory information in the maintenance computer 13. (Step S3 in FIG. 4).
[0017]
Next, when the failure task investigation information is sent from the business computer 10 (step T1 in FIG. 5), the reception task 13A in the maintenance work computer 13 stores it on the storage device 14 (step T1 in FIG. 5). Step T2 in FIG. 5).
[0018]
As described above, the information stored in the storage device 11 of the business computer 10 is copied to the storage device 14 of the maintenance computer 13.
[0019]
Next, a case in which the maintenance center 300 performs remote maintenance on the business computer 10 will be described. First, a maintenance worker of the maintenance center 300, which is performing maintenance of the business computer 10, is notified of the occurrence of a failure by any method, for example, communication means such as telephone and e-mail when the above event occurs. Is Next, the notified maintenance worker operates the maintenance terminal 300A and logs in to the maintenance work computer 13 via the modem 15 to investigate the cause of the failure.
[0020]
Next, when the modem 15 detects a carrier signal (step U1 in FIG. 6), a signal related to the detection is sent to the switch 12, and the switch 12 between the maintenance computer and the business computer 13 communicates. The line 30 is disconnected (step U2 in FIG. 6).
[0021]
Next, the maintenance worker logs in to the maintenance work computer 13 and performs failure analysis with reference to the failure information. When the analysis is completed or temporarily stopped, the user logs off from the maintenance computer 13 and the connection via the communication line 30 is disconnected.
[0022]
Next, the modem 15 detects the OFF of the carrier signal (Step U3 in FIG. 6), and connects the communication line 30 by the switch 12 between the maintenance computer 13 and the business computer 10 (Step in FIG. 6). U4). Here, communication between the business computer 10 and the maintenance computer 13 is enabled again.
[0023]
As described above, in the present embodiment, when the maintenance worker logs in to the maintenance computer 13 from a remote place to investigate the cause of the failure, the communication line between the business computer 10 and the maintenance computer 13 Since 30 is cut off, the access range of the maintenance worker can be limited to only the maintenance work computer 13.
[0024]
In addition, since the access range is limited by electrically disconnecting the communication line 30, an operating system for restricting access from a maintenance worker to the business computer 10 from the viewpoint of ensuring security and the like. Solves the problem that sufficient security may not be achieved due to inadequate or lack of functions such as an operating system for providing these access restrictions, or human error of the operator setting, without the need for setting up software or setting software can do.
[0025]
(2nd Embodiment)
FIG. 7 is a hardware configuration diagram of the second embodiment of the present invention. The shared storage device controller 16 stores failure analysis data from the business computer 10 and stores the data in the maintenance computer. 13 can be accessed.
[0026]
The shared storage device controller 16 is connected to a master storage device 17 managed by the shared storage device controller 16 and a duplicate storage device 18 managed by the shared storage device controller 16.
[0027]
FIG. 8 shows a register configuration in the shared storage controller 16 in FIG. 7, and is composed of a master storage device access flag 16A, a duplicate storage device access flag 16B, and a synchronization completion flag 16C.
[0028]
The master storage device access flag 16A is set to ON when the master storage device 17 is being accessed from the business computer 10.
[0029]
The replication storage device access flag 16B is set to ON when the replication storage device 18 is being accessed from the maintenance computer 13.
[0030]
The synchronization completion flag 16C is set to ON when the synchronization processing between the master storage device 17 and the replication storage device 18 has been completed and the contents of the master storage device 17 and the replication storage device 18 match.
[0031]
As a method of synchronizing the master storage device 17 and the duplicate storage device 18 so that the same content as the master storage device 17 can be accessed when the duplicate storage device 18 is accessed, for example, the master storage device 17 Or a method of copying all the contents of the storage device 18 to the duplicate storage device 18.
[0032]
Next, the operation of the present embodiment will be described with reference to FIGS.
[0033]
The initial state is a state in which there is no access from the business computer 10 and the maintenance computer 13, and the master storage device access flag 16A and the duplicate storage device access flag 16B on the shared storage device controller 16 are turned off. I have. Further, the contents of the master storage device 17 and the duplicate storage device 18 match, and the synchronization completion flag 16C on the shared storage device controller 16 is ON.
[0034]
Next, when information necessary for maintenance is generated due to a failure or the like, the business computer 10 writes the information to the shared storage device controller 16.
[0035]
For example, when the operating system of the business computer 10 detects inconsistency of hardware and data in the operating system, the memory information at that time is temporarily written in the storage device 11 and the business computer 10 is restarted.
[0036]
At the time of restart, the business computer 10 reads the memory information from the storage device 11 and writes it to the shared storage device controller 16. At the time of writing, first, the business computer 10 requests the access right to the master storage device 17 from the shared storage device controller 16 (step V1 in FIG. 9).
[0037]
Next, the shared storage controller 16 requested to write the master storage device 17 from the business computer 10 turns on the master storage device access flag 16A in the controller (step V2 in FIG. 9). Access right to the computer 10 for use.
[0038]
Next, the business computer 10 given the access right to the master storage device 17 from the shared storage device controller 16 writes data to the shared storage device controller 16. The shared storage device controller 16 checks the duplicate storage device access flag 16B. If the duplicate storage device access flag 16B is OFF (step V3 in FIG. 9), the data written by the business computer 10 is transferred to the master storage device 17B. Is written to the duplicate storage device 18 (step V4 in FIG. 9). On the other hand, when the copy storage device access flag 16B is ON, the data written from the business computer 10 is written only to the copy storage device 18. Further, since the writing causes a mismatch between the contents of the master storage device 17 and the contents of the duplicate storage device 18, the synchronization completion flag 16C is set to OFF (step V5 in FIG. 9).
[0039]
Next, when the data writing is completed (step V6 in FIG. 9), the business computer 10 relinquishes the access right to the shared storage controller 16.
[0040]
Next, in response to the relinquishing of the access right from the business computer 10, the shared storage device controller 16 turns off the master storage device access flag 16A in the controller (step V7 in FIG. 9).
[0041]
On the other hand, when an event such as a failure occurs on the business computer 10, a notification of the occurrence of the failure is given to the maintenance worker who is maintaining the business computer 10 by any method. The maintenance worker accesses the maintenance work computer 13 to investigate the cause of the failure. The maintenance computer 13 requests the shared storage controller 16 for an access right to the duplicate storage device 18 in order to access the data written from the business computer 10 (step W1 in FIG. 10).
[0042]
Next, the shared storage controller 16 requested by the maintenance work computer 13 to access the duplicate storage 18 first checks the synchronization completion flag 16C (step W2 in FIG. 10). The shared storage device controller 16 performs synchronization processing between the master storage device 17 and the duplicate storage device 18 as necessary in order to make the data in the master storage device 17 and the data in the duplicate storage device 18 coincident. When the access right to the device 18 is requested, it is first checked whether the synchronization processing has been completed and the contents of the master storage device 17 and the contents of the duplicate storage device 18 match.
[0043]
If the synchronization completion flag 16C is OFF, the synchronization has not been completed yet, and the contents of the master storage device 17 and the duplicate storage device 18 do not match. .
[0044]
Next, the shared storage controller 16 confirms the completion of the data synchronization processing of the master storage device 17 and the duplicate storage device 18 by the synchronization completion flag 16C, and then checks the master storage device access flag 16A (FIG. 10). Step W3). Here, if the master storage device access flag 16A is ON, it means that data is currently being written from the business-use computer 10, so the process waits until the master storage device access flag 16A is turned OFF.
[0045]
As described above, the shared storage device controller 16 confirms that the data synchronization process of the master storage device 17 and the duplicate storage device 18 has been completed and that the data write process from the business computer 10 has been completed. Then, the copy storage device access flag 16B is set (step W4 in FIG. 10), and the maintenance work computer 13 is given an access right to the copy storage device 18 (step W5 in FIG. 10).
[0046]
Next, when the replication storage device access flag 16B is set to ON, when writing is performed from the business computer 10 to the shared storage device controller 16, writing to the master storage device 17 is performed. No writing is performed on the duplicate storage device 18. Therefore, the data consistency in the duplicate storage device 18 being accessed from the maintenance computer 13 is not lost, but the contents of the master storage device 17 and the duplicate storage device 18 are different. Therefore, when the duplication storage device access flag 16B is set to ON and writing is performed from the business computer 10, the synchronization completion flag 16C is set to OFF (step W6 in FIG. 10).
[0047]
Next, when the access to the duplicate storage device 18 is completed, the maintenance work computer 13 relinquishes the access right to the duplicate storage device 18.
[0048]
Next, in response to the release of the access right to the duplicate storage device 18 from the maintenance work computer 13, the shared storage device controller 16 turns off the duplicate storage device access flag 16B and checks the synchronization completion flag 16C (FIG. Ten steps W7). When the synchronization completion flag 16C is OFF, the writing from the business computer 10 to the master storage device 17 is performed during the access from the maintenance computer 13 to the replication storage device 18, and the replication to the master storage device 17 is performed. The contents of the storage device 18 do not match. Therefore, the data synchronization process between the master storage device 17 and the duplicate storage device 18 is started (step W8 in FIG. 10), and after the synchronization process is completed, the synchronization completion flag 16C is set to ON (step W9 in FIG. 10). ).
[0049]
As described above, in the present embodiment, it is not necessary to access the business computer 10 when accessing the failure analysis information of the business computer 10. Also, the storage device 11 in which the business computer 10 writes the failure analysis data is not directly accessed from the maintenance computer 13. Therefore, there is no need to set an operating system or software for restricting access from the maintenance worker on the side of the business computer 10 from the viewpoint of ensuring security or the like. This solves the problem that sufficient security may not be realized due to inadequate / missing functions or an error in human setting by the operator.
[0050]
Further, the shared storage controller 16 connected to the business computer 10 and the maintenance computer 13 duplicates the data written from the business computer 10 as necessary, and the maintenance computer 13 Since the copied data is accessed, even if a new failure occurs while accessing the failure analysis data from the maintenance work computer 13, the access from the maintenance work computer 13 is not stopped, and the business electronic computer 13 is not stopped. New failure analysis information can be written from the computer 10.
[0051]
(Third embodiment)
Next, a third embodiment of the present invention will be described with reference to FIG. In the present embodiment, the functions of the shared storage device controller 16 in FIG. 7 are divided to provide a master storage device controller 19 and a duplicate storage device controller 20, and a master storage device controller between the business computer 10 and the network 200. 19 is provided.
[0052]
According to such a configuration, as in the second embodiment, the master storage device controller 19 and the duplicate storage device controller 20 connected to the business computer 10 and the maintenance work computer 13 are used for the business computer 10 as necessary. Since the data written from the computer 10 is duplicated and the maintenance computer 13 accesses the copied data, a new failure occurs while accessing the failure analysis data from the maintenance computer 13. Also, it is possible to write new failure analysis information from the business computer 10 without stopping access from the maintenance work computer 13, and to access the failure analysis information of the business computer 10. It is possible to remotely maintain the business computer 10 to be maintained without having to access the business computer 10. That.
[0053]
In the above description, the switch 12, the maintenance work computer 13, the storage device 14, and the modem 15, excluding the business computer 10 and the storage device 11, which are maintenance targets, are new or existing computers or servers as individual hardware. In addition to being able to utilize and configure, it can be configured as a hardware or software function by a method or a program by one or two computers or a system in which a communication device or the like is added to the computer. In this case, the operations equivalent to those described above can be achieved by describing the operation of each embodiment by a program and executing the program on a computer.
[0054]
【The invention's effect】
As described above, according to the present invention, the accessible range of a third-party maintenance worker can be limited physically or by hardware, and security is reduced due to lack or inadequacy of software functions, incorrect setting, and the like. The present invention provides a remote maintenance system, a method, a program, and a computer system capable of securing security of a business computer to be maintained when remote maintenance of the business computer is performed. be able to.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of an electronic computer system according to the present invention.
FIG. 2 is a diagram showing a hardware configuration of the remote maintenance system according to the first embodiment of the present invention.
FIG. 3 is an exemplary view showing a software configuration of the remote maintenance system according to the embodiment;
FIG. 4 is a processing flowchart of a transmission task in the embodiment.
FIG. 5 is a processing flowchart of a reception task in the embodiment.
FIG. 6 is a processing flowchart of a hardware switch controlled by a modem in the embodiment.
FIG. 7 is a diagram showing a hardware configuration of a remote maintenance system according to a second embodiment of the present invention.
FIG. 8 is a view showing a register configuration of a shared storage device controller in the embodiment.
FIG. 9 is an exemplary process flowchart from the business computer in the embodiment.
FIG. 10 is an exemplary process flowchart from the maintenance business computer in the embodiment.
FIG. 11 is a diagram showing a hardware configuration of a remote maintenance system according to a third embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 10 ... Business computer 11 ... Storage device 12 ... Switch 13 ... Maintenance work computer 14 ... Storage device 15 ... Modem 16 ... Shared storage device controller 17 ... Master storage device 18 ... Replica storage device 19 ... Master storage device controller 20 ... Replication storage device controller 100 ... User 200 ... Network 300 ... Maintenance center 300A ... Maintenance terminal

Claims (8)

In a remote maintenance system for remotely maintaining a computer to be maintained via a network,
A computer for maintenance work for investigating a cause of failure of the computer to be maintained,
Storage means attached to the computer for maintenance work and holding information relating to the cause of failure of the computer to be maintained;
Switch means provided between the maintenance target computer and the maintenance work computer,
A maintenance terminal that accesses the maintenance work computer via the network,
A remote maintenance system for providing a disconnection and connection command to the switch in response to login and logoff of the maintenance computer. In a remote maintenance system for remotely maintaining a computer to be maintained via a network,
A computer for maintenance work for investigating a cause of failure of the computer to be maintained,
Storage means that is attached to the maintenance work computer and holds information related to the cause of failure of the maintenance target computer;
Switch means provided between the maintenance target computer and the maintenance work computer,
A relay unit that gives a disconnection command to the switch unit by a carrier signal at the time of log-in of the maintenance work computer and a connection command to the switch unit by a carrier signal at the time of log-off when the maintenance target computer is maintained; And a remote maintenance system. Investigating the cause of the failure of the computer to be maintained and retaining information on the cause of the failure;
Disconnecting from the computer to be maintained in response to an external login, and connecting to the computer to be maintained in response to logoff. A computer that remotely maintains the computer to be maintained
A procedure for investigating the cause of the failure of the maintenance target computer and holding information on the cause of the failure
A remote maintenance program for disconnecting from the maintenance target computer in response to an external login and connecting to the maintenance target computer in response to a logoff. A commercial computer,
A computer for maintenance work that investigates the cause of the failure of the business computer;
Storage means attached to the maintenance work computer and holding information relating to a cause of failure of the business use computer;
Switch means provided between the business computer and the maintenance computer,
A maintenance terminal that accesses the maintenance work computer via a network,
Relay means for providing a disconnection command to the switch means in response to the login of the maintenance work computer during maintenance of the maintenance target computer, and providing a connection command to the switch means in response to logoff. An electronic computer system comprising: In a remote maintenance system for remotely maintaining a computer to be maintained via a network,
First storage means for storing information relating to the cause of failure of the maintenance target computer;
A second storage unit that duplicates and holds the information held in the first storage unit;
Control means for synchronizing and de-synchronizing the information held in the first and second storage means;
A remote maintenance system comprising: a maintenance work computer that investigates a cause of failure of the maintenance target computer by referring to information held in the second storage unit. Holding information relating to the cause of the failure of the computer to be maintained;
Duplicating and retaining the retained information at this stage;
Synchronizing and de-synchronizing the information held by the two steps;
Investigating the cause of the failure of the computer to be maintained by referring to the duplicated and held information. A computer that remotely maintains the computer to be maintained
A procedure for retaining information relating to a cause of failure of the maintenance target computer,
A procedure for duplicating and retaining the retained information according to this procedure;
A procedure for synchronizing and de-synchronizing the information held by the two procedures,
A procedure for investigating the cause of the failure of the maintenance target computer by referring to the duplicated and held information.

Images