JP2009151635A - Operation continuation system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To hold actual data at a secondary site even if a test using a primary site is under execution, and to rapidly synchronize the secondary site with the primary site after resuming operation. <P>SOLUTION: The primary site 10 comprises a storage device 15 having a storage medium 17 and a management part 19, and a DBMS 13. The management part 19 generates difference data 50 when the data of the storage medium 17 is updated according to instructions of the DBMS 13. The secondary site 30 comprises a storage device 35 having a storage medium 37 and a management part 39; an intermediate storage device 40 having a storage medium 41 and a management part 43, and a DBMS 33. The management part 43 updates the storage medium 41 based on the difference data 50, and outputs the difference data 60. The management part 39 updates the storage medium 37 based on the difference data 60. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a business continuation system including a primary site and a secondary site, and more particularly to a technique for synchronizing data of a primary site and a secondary site.

  In recent years, even if a company encounters an unforeseen emergency such as a natural disaster such as a typhoon or a major earthquake, or a major accident such as a terrorist attack or a fire, it can minimize damage and recover quickly to continue its core operations. Efforts have been made to formulate a business continuity plan in advance.

  In particular, in a computer system, a business continuation system is known in which a secondary site, which is a backup of the primary site, is provided at a geographically distant point from the primary site used for normal business. In this business continuity system, data of the primary site is also retained at the secondary site, and the functions of the primary site can be backed up at the secondary site at any time. For this reason, every time the data at the primary site is updated, the update content (difference data) is notified to the secondary site to synchronize the data at the secondary site (as needed).

  In this business continuity system, a test may be executed using the primary site. In other words, this test is performed with the primary site temporarily suspended. At the time of this test, it is necessary to execute a test by replacing the actual data stored in the data storage device at the primary site with the test data, and to restore the actual data again after the test is completed.

  Therefore, if copying is performed at any time while the test is being executed, the data at the secondary site is also replaced with the test data during the test. If a disaster occurs at this time and the primary site is damaged, test data is stored in the storage device at the secondary site, and the secondary site cannot be operated immediately.

  Therefore, copying can be stopped at any time before the test is started, and copying can be restarted at any time after the test is completed. In this way, even if the primary site is damaged during the test, the data before the start of the test remains in the storage device at the secondary site, so that the secondary site can be operated immediately.

  However, when copying is resumed at any time after the end of the test, it is necessary to send differential data to the secondary site from the primary site for replacement with test data, test execution, and recovery to actual data. However, the data amount of the difference data is enormous, and it takes a long time to transfer the data (the process for reflecting the difference data at the secondary site does not take much time). That is, the transfer of the differential data and the data update for catching up with the primary site are not preferable because it takes a long time after the operation of the primary site is resumed.

  Therefore, an object of the present invention is to hold actual data at the secondary site even while a test using the primary site is being performed, and to quickly synchronize the secondary site with the primary site after the operation is resumed.

  A business continuity system according to an embodiment of the present invention includes a primary site and a secondary site that is a backup site of the primary site, and a system that continues business at the secondary site when a failure occurs at the primary site It is. The primary site includes a first storage device and a first database management system that manages a database configured on the first storage device. The first storage device reads and writes data to and from the first storage medium in accordance with instructions from the first database management system and the first database management system. And a first medium management unit that outputs difference data when written. The secondary site includes a second storage device, a second database management system that manages a database configured on the second storage device, and an intermediate storage device. The intermediate storage device writes to the third storage medium based on the third storage medium that stores data and the difference data generated by the first medium management unit, and the first storage medium and the third storage medium A third medium management unit that synchronizes with the storage medium and outputs difference data when writing to the third storage medium; The second storage device reads and writes data to and from the second storage medium that stores data, and the second storage medium in accordance with an instruction from the second database management system. A second medium management unit configured to perform writing to the second storage medium based on the difference data generated by the medium management unit and to synchronize the third storage medium and the second storage medium;

  In a preferred embodiment, when the first medium management unit and the third medium management unit operate and the first recording medium and the third recording medium are synchronized, the second medium management unit It may be possible to pause the operation.

  Hereinafter, a business continuation system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of a business continuity system according to this embodiment. The system includes a primary site 10 and a secondary site 30 that are connected to each other via a network 9. This system is operated so that when the primary site 10 is stopped due to a natural disaster such as a large-scale earthquake or a hardware trouble, the secondary site 30 operates quickly and the user's business can be continued. It is a system aiming at.

  The primary site 10 and the secondary site 30 are both configured by, for example, a general-purpose computer system, and individual components or functions in the primary site 10 and the secondary site 30 described below execute, for example, a computer program. It is realized by.

  The primary site 10 includes a business processing unit 11 that performs various business processes, a database management system (DBMS) 13, and a storage device 15. The storage device 15 includes a storage medium 17 that stores data, and a management unit 19 that manages the storage medium 17.

  The storage device 15 may be configured by a storage system having a RAID (Redundant Arrays of Independent Disks) function, for example.

  The database management system 13 writes and reads data to and from the database built in the storage device 15 in accordance with instructions from the business processing unit 11.

  In the storage device 15, the management unit 19 manages where in the storage medium 17 data is stored. Then, the management unit 19 writes and reads data to and from the storage medium 17. In addition, when the data stored in the storage medium 17 is changed by writing data to the storage medium 17, the management unit 19 generates difference data 50 indicating the change. The difference data 50 is sent to the secondary site 30 via the network 9.

  Since the secondary site 30 is a backup site of the primary site 10, it has at least the same configuration as the primary site 10. That is, the secondary site 30 includes a business processing unit 31 that performs various business processes, a database management system (DBMS) 33, and a storage device 35. The storage device 35 includes a storage medium 37 that stores data, and a management unit 39 that manages the storage medium 37.

  The secondary site 30 further includes an intermediate storage device 40. The intermediate storage device 40 includes a storage medium 41 that stores data, and a management unit 43 that manages the storage medium 41.

  The storage device 35 and the intermediate storage device 40 may be configured by a storage system having, for example, a RAID (Redundant Arrays of Inexpensive Disks) function.

  In the secondary site 30, when the difference data 50 is acquired from the primary site 10, first, the difference data 50 is reflected in the intermediate storage device 40. That is, the management unit 43 takes in the difference data 50 and updates the storage medium 41 based on this. Thereby, the storage medium 41 is synchronized with the storage medium 17. Therefore, if the differential data 50 is immediately transferred from the primary site 10, copying is performed as needed to synchronize the storage medium 41 with the storage medium 17 with a delay of about the time required for the transfer of the network 9. Note that, when the storage medium 41 is updated, the management unit 43 generates difference data 60 indicating a change in data in the storage medium 41.

  The storage device 35 takes in the difference data 60 and reflects the data change. That is, the management unit 39 takes in the difference data 60 and updates the storage medium 37 based on this. Thereby, the storage medium 37 is synchronized with the storage medium 41. That is, the storage medium 37 is synchronized with the storage medium 17. The storage device 35 can temporarily stop the update process performed by taking in the difference data 60 at an arbitrary timing.

  Next, data synchronization processing in the business continuity system according to the present embodiment will be described with reference to FIG.

  First, FIG. 5A shows a data saving process during normal operation. That is, when the database management system 13 instructs the storage device 15 to write the data “A”, the storage device 15 stores the data “A” in the storage medium 17 and generates the difference data 50 a of the data “A”. To do. The difference data 50 a generated here is transferred to the secondary site 30 and first stored in the intermediate storage device 40. That is, in the secondary site 30, the management unit 43 stores the data “A” in the storage medium 41. At this time, the management unit 43 generates difference data 60a. Based on the difference data 60 a, the management unit 39 saves the data “A” in the storage medium 37, thereby saving the data “A” in the storage device 35.

  During normal operation, the processing shown in FIG. 2A is performed at any time, and whenever the data in the storage medium 17 is updated, the updated contents are reflected in the storage medium 41 and the storage medium 37 and stored in the storage medium 17 and the storage medium 17. The storage contents of the medium 41 and the storage medium 37 are the same (copying as needed).

  By the way, in the primary site 10, the operation may be temporarily stopped and a test may be performed. Before starting this test, the secondary site 30 temporarily stops the update process of the storage medium 37 based on the difference data 60a. That is, at the secondary site 30, the management unit 39 does not update the storage medium 37 even if the difference data 60 a is generated. When a test is performed at the primary site 10 in this state, the operation shown in FIG.

  That is, during the test execution, when the database management system 13 instructs the storage device 15 to write the data “B” at the primary site 10, as shown in FIG. The data “B” is stored in the data and the difference data 50b of the data “B” is generated. In the secondary site 30, the management unit 43 stores the data “B” in the storage medium 41 according to the difference data 50 b. At this time, the management unit 43 generates the difference data 60b, but since the writing process to the storage medium 37 by the management unit 39 is temporarily stopped, the management unit 39 does not update the storage medium 37 based on the difference data 60b. .

  Further, in the primary site 10, when the database management system 13 instructs the storage device 15 to write the data “C”, the management unit 19 stores the data “C” in the storage medium 17 and stores the data “C”. Difference data 50c is generated. In the secondary site 30, the data “C” is stored in the storage medium 41 based on the difference data 50 c. At this time, since the data “B” is not yet reflected in the storage medium 37, the difference data 60b of the data “B” exists. Therefore, the management unit 43 adds data indicating that the data “C” is further added to the existing difference data 60b. At this time, since the writing process to the storage medium 37 by the management unit 39 is still suspended, the management unit 39 does not update the storage medium 37 based on the difference data 60b.

  As a result, while the test is being performed at the primary site 10, the data update under test is reflected on the storage medium 41 of the intermediate storage device 40 at any time at the secondary site 30, whereas the storage device 35 The storage medium 37 holds actual data before the start of the test. Therefore, even if the primary site 10 is damaged during the test, the secondary site 30 can quickly resume operations.

  Next, after the end of the test, when the suspension of the writing process to the storage medium 37 by the management unit 39 is cancelled, as shown in FIG. 2C, the management unit 39 is based on the difference data 60b. Update the data. In the present embodiment, since the transfer process of the differential data 50 from the primary site 10 to the secondary site 30 that requires a relatively long time is completed during the execution of the test, the transfer to the storage medium 37 of the differential data 60b performed after the test is completed. Reflection ends in a relatively short time. Therefore, according to the present embodiment, even when a test is executed at the primary site 10 and copying at any time to the storage device 35 at the secondary site 30 is temporarily stopped, it is possible to quickly catch up and return to normal operation. .

  The above-described embodiments of the present invention are examples for explaining the present invention, and are not intended to limit the scope of the present invention only to those embodiments. Those skilled in the art can implement the present invention in various other modes without departing from the gist of the present invention.

  For example, in the above-described embodiment, the copy at any time to the storage device at the primary site is temporarily suspended in order to execute the test at the primary site, but the copy is temporarily suspended for other purposes. But the same is true.

It is a block diagram of the business continuation system which concerns on one Embodiment of this invention. 3 shows data synchronization processing in the business continuity system according to the present invention.

Explanation of symbols

10 Primary site 11, 31 Business processing unit 13, 33 Database management system 15, 35 Storage device 17, 37, 41 Storage medium 19, 39, 43 Management unit 30 Secondary site 40 Intermediate storage device 50, 60 Differential data

Claims (3)

A system that includes a primary site and a secondary site that is a backup site of the primary site, and that continues operations at the secondary site when a failure occurs at the primary site,
The primary site is
A first storage device;
A first database management system for managing a database configured on the first storage device,
The first storage device
A first storage medium for storing data;
A first medium management unit that reads and writes data to and from the first storage medium in accordance with instructions from the first database management system, and outputs differential data when the data is written to the first storage medium; With
The secondary site is
A second storage device;
A second database management system for managing a database configured on the second storage device;
An intermediate storage device,
The intermediate storage device
A third storage medium for storing data;
Writing to the third storage medium based on the difference data generated by the first medium management unit to synchronize the first storage medium and the third storage medium, and for the third storage medium A third medium management unit that outputs difference data when written,
The second storage device
A second storage medium for storing data;
Data is read from and written to the second storage medium in accordance with instructions from the second database management system, and written to the second storage medium based on the difference data generated by the third medium management unit And a second medium management unit that synchronizes the third storage medium with the second storage medium.   When the first medium management unit and the third medium management unit operate and the first recording medium and the third recording medium are synchronized, the operation of the second medium management unit is temporarily stopped. The business continuity system according to claim 1, wherein In a system that includes a primary site and a secondary site that is a backup site for the primary site, and that continues operations at the secondary site when a failure occurs at the primary site, the data on the primary site and the secondary site are synchronized A method of
The primary site is
A first storage device having a first storage medium;
A first database management system for managing a database configured on the first storage device,
The secondary site is
A second storage device having a second storage medium;
A second database management system for managing a database configured on the second storage device;
An intermediate storage device having a third storage medium,
The first storage device at the primary site writes data to the first storage medium according to an instruction from the first database management system, and outputs first differential data when the data is written,
The intermediate storage device of the secondary site writes to the third storage medium based on the first difference data, synchronizes the first storage medium and the third storage medium, and also stores the third storage Output the second difference data when written to the medium,
The second storage device at the secondary site writes to the second storage medium based on the second difference data, and synchronizes the third storage medium and the second storage medium. how to.

Images