KR100932122B1 - Cluster system and its program management method - Google Patents

Abstract

The present invention relates to a cluster system, and more particularly, to a cluster system and a program management method thereof, which can prevent the operation of an operating system or program modified by external intrusion. To this end, the present invention is a cluster system for integrating and operating a program of one or more nodes having a similarity, the cluster system comprising: one or more nodes that are assigned a unique ID and operate the program; Provided are a cluster system including a security management server for allocating the unique ID, adding a signature to the program, and distributing the signature to the node, and a method for managing a program of a cluster performed therethrough.

Cluster, OS Program, Operation Program, Node

Description

Cluster system and program management method {CLUSTER SYSTEM AND METHOD FOR ADMINISTRATING PROGRAM THEREOF}

The present invention relates to a cluster system, and more particularly, to a cluster system and a program management method thereof, which can prevent the operation of an operating system or program modified by external intrusion.

The present invention is derived from the research conducted as part of the IT new growth engine core technology development project of the Ministry of Information and Communication and the Ministry of Information and Communication Research and Development. [Task Management Number: 2007-S-016-01] Development skills].

In general, a cluster system refers to a system that integrates and operates a program of a virtual image by classifying a plurality of nodes having similarities into groups.

The conventional cluster system is mostly closed because it is intended to provide a high performance computing function for a specific purpose, but is currently operating as an open type to provide a remote service through a connection of the Internet. Also, as web services are diversified and large in capacity, they are widely used as a platform for web services such as web portals.

The conventional cluster system recognizes a user authenticated in one node as an identically authenticated user when accessing other node resources using a user-centered authentication method.

Therefore, the conventional cluster system uses an authentication method in an environment in which many nodes are integrated to provide a program of a virtual image. Therefore, the cluster system is inevitably exposed to security threats, which causes problems in safe operation of the cluster system. Occurred.

The present invention has been made in view of the above problems, and an object thereof is to provide a cluster system and a program management method thereof, which can prevent the use of program forgery / modulation and illegal programs for the purpose of leaking user information. .

Another object of the present invention is to provide a cluster system and a program management method thereof for managing an operating system and an operating program for safe operation of each node of the cluster system.

Complementary management server according to an aspect of the present invention for achieving the above object is a security management server of the cluster system integrating and operating a program of one or more nodes, the memory for storing the unique information of the node; And a control unit for assigning a unique ID to each node and controlling the overall operation of adding the signature to the program and distributing the same to the node.

According to another aspect of the present invention, a cluster system includes: a cluster system integrating and operating a program of one or more nodes having similarities, the cluster system comprising: one or more nodes which are assigned a unique ID and operate the program; And a security management server that allocates the unique ID and adds a signature to the program and distributes the signature to the node.

The security management server recognizes that the corresponding program has been distributed to the node that has transmitted the distribution success message according to the distribution success message of the node, and updates the management data structure.

The security management server recognizes that the program is not normally distributed according to the redistribution request message of the security agent of the node, and redistributes the program to the node that transmitted the redistribution request message.

The security management server includes a node ID list of node-specific information registered in the security management server, a program ID list under each node ID entry, version information under each program ID entry, a distribution count, and a distribution success field. It uses the structure to grasp the operation status of the node and to manage the program.

In addition, a method for managing a cluster system according to another aspect of the present invention for achieving the above object is a cluster provided with one or more nodes having similarities, and a security management server that integrates and operates the nodes in a program with enhanced security. A program management method of a system, comprising: distributing a signature to a program by a security management server to each node of a cluster; The security agent of the node performs authentication through signature verification on the distributed program, and determining whether to redistribute the program of the security management server according to the authentication result.

In addition, a method for managing a cluster system according to another aspect of the present invention for achieving the above object is a cluster system provided with one or more nodes having similarities and a security management server that integrates and operates the node with a security-enhanced program. A method of managing a program, the method comprising: a security management server distributing a signature to each node of a cluster by adding a signature to an upgraded upgrade program; The node performs authentication through signature verification on the distributed program, and determines whether to redistribute the upgrade program of the security management server according to the authentication result.

When the cluster is operated, the present invention has the advantage of providing a safe operating environment in the cluster by preventing illegal programs from being installed or executed due to external intrusion by operating the cluster. Especially in the environment where personal information is handled such as web services, the protection of each user's information becomes a very important function, which can prevent the use of program forgery / modulation and illegal programs for the purpose of leaking user information.

The cluster system of the present invention and its program management method is provided with a security management server to distribute the program added to the signature of the security management server from the security management server to each node to use only the program managed by the security management server Have a gist. In addition, the present invention has a technical gist to be able to authenticate the signature of the security management server by adding an authentication server for preventing the camouflage of the security management server. This is to prove that the security management server is the original server without disguising the authentication server.

Hereinafter, with reference to the accompanying drawings, preferred embodiments of the present invention will be described in detail, focusing on the parts necessary to understand the operation and action according to the present invention.

In the following description, specific details of the cluster system and the program management method thereof of the present invention are shown to provide a more general understanding of the present invention, and the present invention may be easily implemented without these specific details and by their modifications. It will be apparent to those of ordinary skill in the art.

1 is a configuration diagram illustrating a cluster system of the present invention. In FIG. 1, for convenience of description, a case in which the number of servers constituting the cluster 130 is 5 will be described. However, the cluster may be configured regardless of the number of servers more than or less and the server type. to be.

The cluster system of the present invention includes a security management server 110, an authentication server 120, and a cluster 130.

First, the security management server 110 is a DNS server 131, a web service server 132, a system management server 133, a file server 134 and a database server 135 (hereinafter, nodes) constituting the cluster 130. It is in charge of distribution of OS program and operation program. At this time, the security management server 110 adds the signature of the security management server 110 to all distributed programs so as to recognize that they are distributed from the security management server 110. In addition, the security management server 110 manages each node 131 ˜ 135 by assigning a unique ID to each node 131 ˜ 135 of the cluster 130. In addition, the security management server 110 recognizes that a program is distributed to a specific node that has transmitted a distribution success message according to the distribution success message received. In addition, the security management server 110 recognizes that the program is not normally distributed according to the received redistribution request message, and redistributes the program to a specific node that has transmitted the redistribution request message.

The authentication server 120 is provided to enhance the server security function, and authenticates the signature of the security management server 110.

The cluster 130 is composed of a plurality of nodes 131 to 135 for a specific service and receives a unique ID from the security management server 110 to operate the corresponding program. In addition, the cluster 130 includes security agent units 131a to 135a which perform authentication of a program by a security agent program that enables authentication of a program distributed from the security management server 110. In addition, the cluster 130 transmits a guide message according to the authentication success of the distributed program to the security management server (110). In this case, the guide message includes a distribution success message indicating a successful distribution, and includes a distribution success message index, a corresponding node ID, a distributed program ID, and version information of a distributed program. In addition, the cluster 130 transmits a redistribution request message to the security management server 110 when the program distribution fails. The redistribution request message includes a redistribution request message index, a corresponding node ID, a program ID to be re-requested, and version information of a program.

The operation of the cluster system with enhanced security will be described with reference to FIG. 1.

Shows a form in which the security management server 110 and the authentication server 120 is added for secure cluster operation. The configuration of the cluster 130 is slightly different in appearance depending on each purpose. 1 illustrates representative functions in a cluster 130 configuration for a web portal service as a group.

The security management server 110 is in charge of the distribution of the OS program and the operating program operating in the nodes (131 ~ 135) constituting the cluster 130, at this time distributed to recognize that it has been distributed in the security management server 110 Add the signature of the security management server 110 to all the programs.

Thereafter, the security management server 110 distributes the signed program to each of the nodes 131 to 135 so that only the program managed by the security management server 110 can be used. At this time, only the local (except the remote) connection is allowed so that the security management server 110 is not exposed to external intrusion. It also adds a separate server security feature to ensure that programs are safely managed.

In addition to the security management server 110 to place the authentication server 120 within the cluster management range to be able to authenticate the signature of the security management server 110. The security agent of the security program is stored in each node 131 to 135 of the cluster 130 for interworking with the security management server 110. Security agent is an important program that is in charge of the security management of each node (131 ~ 135). Since the security agent is an important program, it is preferable to directly install the nodes 131 to 135 when the nodes are operated for the first time in order to prevent damage. The security agent is stored in storage means called security agent units 131a to 135a in each of the nodes 131 to 135.

2 is a conceptual diagram showing a program authentication information management structure of each node in the security management server of the present invention.

Each node 131 ˜ 136 is assigned a unique ID from the security management server 110 when it is first connected to the cluster system, and used for managing the cluster 130. There are two main categories of distributed programs: OS and general program. In the present invention, an ID of the highest priority (for example, "1") is assigned to the OS program. That is, if the distribution success in the structure having the program ID of 1 is a failure, the corresponding node may be regarded as not operating normally in the unit of the node, not in the program unit. Other IDs are considered to be general programs.

The following describes each information constituting the management data structure.

There is a node ID information field of unique information registered in the security management server 110 as a whole, and each node ID information field has a list of program ID fields. At this time, the program ID field is determined corresponding to the number of programs used in one node. Each program ID information is composed of version information for update management, a distribution number of distribution of a program that has failed again in authentication, and a distribution success information field indicating whether program authentication succeeds. In the successful distribution, the authentication success may be regarded as a normal program distributed by the corresponding security management server 110.

However, if the distribution fails, the security management server 110 again attempts to distribute the number of times settable in advance. In this case, if the program is distributed more than the number of times available for distribution, but fails, the program is assumed to be inoperable in the node.

3 is a flowchart illustrating a program management method of the cluster system of the present invention.

First, the security management server 110 adds the signature of the security management server for authentication to the program to be distributed (S301). To this end, the security management server 110 must have a public key pair. In this case, a certificate signed with a key of the authentication server 120 may be used instead of the public key of the security management server 110 to enhance security.

Thereafter, the security management server 110 distributes the program made of the signed image to each node of the cluster 130 (S303). The program includes a node ID, a program ID, version information, a signature program image, a public key of the security management server 110, or a certificate of the authentication server 120, as described above. Detailed description thereof has been described above and thus will be omitted.

The cluster 130 receives the distributed program (S305), and performs authentication through signature verification on the distributed signature program image (S307).

As a result of performing the authentication, if the authentication is successful, the cluster 130 transmits a distribution success message to the security management server 110 informing that the authentication is successful and the distribution of the program is successful (S309). Then, the security management server 110 updates the distribution information of the program to success (S311).

Thereafter, the cluster 130 executes the transaction currently in progress by the transmitted program and then re-executes the corresponding program (S313). If the distributed program is an OS program, the node of the cluster 130 reboots after authentication.

On the other hand, when the cluster 130 fails to authenticate according to the signature verification of the distributed signature program image, the cluster 130 requests retransmission of the corresponding program to the security management server 110 (S315). At this time, the cluster 130 transmits a redistribution request message to request retransmission of the program.

The security management server 110 then increases the number of distributions of the corresponding program corresponding to the node (S317), and determines whether the increased number of distributions is less than or equal to the number of distributions allowed (S319). The number of distribution may be set by the security management server 110 to reduce the load of the security management server 110.

As a result of the determination, if the increased number of distribution is less than or equal to the allowable number of distribution, the supplementary management server 110 returns to S303 of the reference numeral and repeats the above-described process.

However, as a result of the determination, if the increased number of distributions is greater than the number of distributions allowed, the security management server 110 updates the distribution information of the corresponding program as a failure (S321). Here, the security management server 110 withholds the distribution of the program for a predetermined time, and repeats the above-described process when the program redistribution request is received from the node of the cluster 130, and transmits the corresponding program to the cluster 130 again.

 The distribution state information may be used to manage the cluster 130 such as a node in normal operation and a program operation state.

On the other hand, the OS and operating programs to be used for each node (131 ~ 136) of the cluster 130 can be improved version through the function and security updates. The upgrade program is distributed through the security management server 110, the upgraded version of the program is made of a signed image through the signature of the security management server (110).

Thereafter, the security management server 110 distributes the upgrade program to the security agent units 131a to 135a of each node. The security agent units 131a to 135a of each of the nodes 131 to 136 are always waiting for the program reception of the security management server 110 and receive the corresponding image when the program image is transmitted.

Meanwhile, in the detailed description of the present invention, specific embodiments have been described, but various modifications are possible without departing from the scope of the present invention. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the scope of the following claims, but also by the equivalents of the claims.

1 is a block diagram for explaining a cluster system of the present invention.

2 is a conceptual diagram showing a program authentication information management structure of each node in the security management server of the present invention.

3 is a flow chart showing a program management method of the cluster system of the present invention.

Claims (17)

In the security management server of the cluster system to manage the integrated program running on one or more nodes, A memory for storing unique information of the node; Control unit for assigning a unique ID for each node, and controls the operation of distributing to the program by adding a signature to indicate that the program is distributed from the security management server Security management server comprising a. The method of claim 1, wherein the control unit, Node ID list of node specific information registered in the security management server, program ID list under each node ID entry, version information of the program under each program ID entry, distribution frequency, the program successfully distributed through authentication Security management server characterized in that it uses the management data structure consisting of a distribution success or failure field indicating whether or not the operation status of the node is managed and the program is managed. The method of claim 1, wherein the control unit, Management data including a distribution success field for recognizing that the corresponding program has been distributed to the node that has transmitted the distribution successful message according to the node's successful distribution message and indicating whether the program has been successfully distributed through authentication of each node. Security management server, characterized in that for updating the structure. The method of claim 3, wherein the distribution success message, Security management server, characterized in that consisting of the distribution success message index, the node ID, distributed program ID, version information of the distributed program. The method of claim 1, wherein the control unit Security management server, characterized in that to give the highest priority to the operating system (OS) program of the program. The method of claim 1, wherein the control unit, Recognizing that the program is not normally distributed according to the redistribution request message of the security agent of the node, and redistributes the program to the node that transmitted the redistribution request message. The method of claim 6, wherein the redistribution request message, Redistribution request message index, the corresponding node ID, the program ID to be re-requested, security management server comprising the version information of the program. In a cluster system that collectively manages a program running on one or more nodes, At least one node assigned with a unique ID to operate the program; A security management server assigning the unique ID and adding a signature to the program and distributing it to the node; The signature is to indicate that the program is to be distributed from the security management server. In the program management method of a cluster system provided with at least one node and a security management server for integrally managing the programs running on the node, The security management server adding a signature to the program and distributing the signature to each node of the cluster; The security agent of the node to perform the authentication through the signature verification for the distributed program, and transmitting a message according to the result of performing the authentication, The signature is for indicating that the program is to be distributed from the security management server. The method of claim 9, wherein the transmitting of the message according to the authentication result is performed. And upon successful authentication, transmitting a distribution success message to the security management server. The program management method of claim 10, further comprising updating, by the security management server, a successful distribution field of a program of a corresponding node with success when receiving a successful distribution message. The method of claim 10, wherein upon successful authentication, rebooting the node when the distributed program is an operating system program. The method of claim 9, wherein the transmitting of the message according to the authentication result is performed. And transmitting a redistribution request message to the security management server when authentication fails as a result of performing the authentication. The method of claim 13, Updating, by the security management server, a distribution success status field of a program of a corresponding node that has transmitted the redistribution request message to failure; Redistributing the program to the node by the security management server; The node receives the program Program management method of a cluster system, characterized in that it further comprises. 15. The method of claim 14, wherein redistributing the program comprises: Counting a redistribution number of the corresponding program when the redistribution request message is received; Comparing the number of redistribution times with the number of allowable distribution times and redistributing the corresponding program to the corresponding nodes according to the comparison result; Program management method of a cluster system comprising a. 16. The method of claim 15, wherein the redistributing the program to the node according to the comparison result comprises: redistributing the program after a predetermined time when the redistribution frequency exceeds the allowable distribution number. Program management method of the cluster system characterized in that. The method of claim 9, The program management method of the cluster system, wherein the upgraded version of the upgrade program is managed by performing the steps of distributing to each node and transmitting the message.

Images