KR100970212B1 - Method and System of Dual Authentication Service for Measuring Obstacle using Dynamic Query Switch of Heterogeneous DB - Google Patents

Abstract

The present invention can provide an uninterrupted mobile communication service by operating the MMDB-based high-speed authentication service and the authentication service duplication of performing the automatic switching RDB-based authentication service through the L4 switch of the transport layer in the event of a failure. The present invention relates to an authentication service duplication method and system that can automatically fail over by allowing each SQL query to control heterogeneous DBs to be easily and quickly dynamically converted to different DBs. In the authentication service method through the backup scheme according to the present invention, the first authentication server and the second authentication server which is transferred to the second authentication server in case of failure of the first authentication server correspond to each other for connection to each heterogeneous database. Using a SQL query pair, and performing authentication at the first authentication server using any one of the SQL query pairs before the switching, and using a SQL query dynamically converted to another one of the SQL query pairs according to the switching. The authentication may be performed by the second authentication server.

Main memory DB (MMDB), relational DB (RDB), service redundancy dynamic query

Description

Method and System of Dual Authentication Service for Measuring Obstacle using Dynamic Query Switch of Heterogeneous DB}

The present invention relates to an authentication method and system for a mobile communication service, and in particular, to performing a fast authentication service based on MMDB (Main Memory DataBase) and to RDB (Relational DataBase) based on automatic switching through an L4 switch of a transport layer in case of a failure. It is possible to provide non-stop mobile communication service by operating authentication service redundancy of performing authentication service of each, and to control heterogeneous DB with different structured query language (SQL) statement for heterogeneous DB (MMDB / RDB) as above. The present invention relates to an authentication service redundancy method and system that can automatically fail over by allowing SQL queries to be converted quickly and easily.

In order to provide a mobile communication service, each mobile service provider server performs necessary authentication for an incoming service and links the service according to the authentication success. For example, a mobile service provider server may provide an authentication service for determining an authentication request, determining whether a subscriber is provided, whether additional service is supported, whether a terminal standard is appropriate, whether or not to join or terminate a specific service, and returning a result. By doing so, the subsequent procedure can be determined according to the authentication result. That is, if the subscriber is not a subscriber to the call connection request, an authentication failure occurs for the call connection request, and accordingly, the call connection request is returned to the call connection request. On the contrary, if the subscriber is a qualitative subscriber to the call connection request, authentication is successful for the call connection request. Accordingly, the call connection session is established to the destination exchange through the source exchange for the call connection request. You can make a call with

Based on such authentication, as well as call connection, various mobile communication services such as text message service, wireless Internet, data service, DMB, etc. are made, so stabilization of the authentication system is very important. In general, the authentication system is operated based on a large memory in order to database, maintain and manage a lot of data related to subscribers, terminals, services, and the like. In order to process a large amount of traffic related to a large amount of authentication requests for a mobile communication service at a high speed, such a large memory is being accelerated.

However, even in the case of high speed, if there is an obstacle in the processing for authentication, the use of the accelerated large-capacity memory becomes useless, and the mobile communication service is interrupted and the customer's dissatisfaction becomes large. Therefore, in order to provide a seamless mobile communication service despite the failure of the authentication system, a backup system of a reliable and efficient authentication system is required. In the case of using a different SQL statement for the duplication of the DB, a query is executed. Since it is difficult to configure separately and perform query transformation when switching, quantum query needs to be easily converted.

Accordingly, an object of the present invention is to solve the above-described problem, and an object of the present invention is to provide a service without interruption by providing an authentication process for providing a mobile communication service without interruption. Implement authentication service redundancy using heterogeneous DB so that automatic switchover is possible, and each SQL query for controlling MMDB and RDB is controlled by DB manager process through configuration for process configuration. It is to provide an authentication service redundancy method and system that can automatically handle failures by allowing a quick and dynamic changeover to be used.

First, to summarize the features of the present invention, the authentication service method through a backup scheme according to an aspect of the present invention for achieving the above object of the present invention, the second authentication server when the failure of the first authentication server is transferred to Wherein the first authentication server and the second authentication server use a pair of SQL queries corresponding to each other for connecting to each heterogeneous database, and use the one of the pairs of SQL queries before the switching, in the first authentication server. Performing authentication; And performing authentication at the second authentication server by using the SQL query dynamically converted to another one of the SQL query pairs according to the switching.

The first authentication server and the second authentication server use a process configuration configuration to control the overall configuration of the authentication process, in order to control the process configuration of the DB manager including the SQL query pair, Authentication may be performed by dynamically switching to a corresponding SQL query of the second authentication server at the time of the switching, according to a predetermined code with respect to the DB manager of the process configuration configuration.

The first authentication server performs fast authentication using a semiconductor memory-based storage means of MMDB standard, and the second authentication server uses a disk-based storage means of RDB standard until the failure of the first authentication server is recovered. It is possible to temporarily perform slower authentication than the first authentication server.

The first authentication server distributes the authentication using at least two servers including a storage means for updating the basic information and an application operating the storage means for updating the basic information, and the second authentication server performs the basic information. Authentication may be distributed using at least two servers including a storage means for backing up and an application operating the storage means for backing up.

The authentication service system through a backup scheme according to another aspect of the present invention includes a first authentication server that updates and stores basic information and performs authentication based on the updated basic information; And a second authentication server which backs up the basic information and performs authentication based on the backed up basic information which is activated by a switching signal in the event of failure of the first authentication server. 2 The authentication server uses a pair of SQL queries corresponding to each other for connecting to each heterogeneous database, the first authentication server performs authentication using any one of the SQL query pair, and the second authentication server According to the switching signal, authentication may be performed using a SQL query that is dynamically switched to another one of the SQL query pairs.

The authentication service system includes means for process configuration configuration that controls an overall configuration of an authentication process; And a DB manager including the SQL query pair, wherein the means for configuration of the process configuration configuration generates the transfer signal according to a code pre-specified with respect to the DB manager to control the process configuration of the DB manager. At the time of the dynamic conversion to the corresponding SQL query of the second authentication server can be performed authentication.

The first authentication server distributes authentication by using at least two servers including an MMDB standard semiconductor memory based storage means for updating the basic information and an application for operating the semiconductor memory based storage means, and The second authentication server may distribute the authentication by using at least two servers including an RDB standard disk-based storage means for backing up the basic information and an application operating the disk-based storage means.

According to the authentication service method and system according to the present invention, it is possible to implement authentication service redundancy using heterogeneous DB so that the automatic switchover from MMDB based authentication to RDB based authentication, and each SQL for controlling MMDB and RDB. An authentication process for automatically failing and providing a mobile communication service by allowing a query to be switched quickly and easily using a DB manager process whose process configuration is controlled through a configuration for process configuration. This can be done without interruption and provide services seamlessly.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Reference will now be made in detail to the preferred embodiments of the present invention, examples of which are illustrated in the accompanying drawings, wherein like reference numerals refer to the like elements throughout. Like reference numerals in the drawings denote like elements.

1 is a view for explaining the authentication service system 100 according to an embodiment of the present invention. Referring to Figure 1, the authentication service system 100 according to an embodiment of the present invention, MMDB-based authentication server (110, 120), RDB-based authentication server (130, 140), statistics server 150 ), And the current server 160. These servers can be connected to each other based on the L2 switch of the data link layer to send and receive signals to each other.Storage Area Network (SAN) switches can store data from the hard disk drive (HDD) -based shared storage and You can receive data and update the database.

The MMDB-based authentication servers 110 and 120 may be a database to read and write necessary data using a semiconductor memory-based storage means of MMDB (Main Memory DataBase) standard. On the other hand, the RDB-based authentication servers 130 and 140, the statistics server 150, and the current server 160 may make a database to read and write necessary data using a disk-based storage means of RDB (Relational DataBase) standard. Can be. Since MMDB uses semiconductor memory, high-speed data processing is possible, but there is an expensive disadvantage. RDB uses a storage means such as an optical disk, so the processing speed is slow but inexpensive.

In the present invention, MMDB-based authentication servers 110 and 120 as a first authentication server for an authentication service request flowing through an L4 switch of a transport layer in normal times, that is, when there is no failure such as an equipment failure or failure. Fast authentication can be performed using. At this time, the authentication servers 110 and 120 receive information necessary for the authentication updated by the current server 160 on the shared storage and use it for authentication, and the statistical server 150 uses the authentication servers 110 and 120 as the authentication server. The log data about the attempt or result of the authentication performed is collected and statistically processed at a predetermined time, such as 2,4..am, at a predetermined time, which is determined as relatively low traffic during the day. RDB03). At this time, the MMDB based authentication servers 110 and 120 are SQL queries and RDB based authentication servers 130 for connecting to the corresponding MMDB (MMDB01 / MMDB02) operated by the MMDB based authentication servers 110 and 120. Manages all SQL query pairs consisting of corresponding SQL queries for connection to the corresponding RDB (RDB01 / RDB02) operated by the DB manager, and uses the SQL query for connection to the MMDB (MMDB01 / MMDB02). Authentication can be performed.

Meanwhile, while the MMDB-based authentication servers 110 and 120 perform an authentication service, the MMDB-based authentication servers 110 and 120 have a failure, and thus, the MMDB-based authentication servers 110 and 120 may cause further failures. When the above authentication service cannot be performed, the low-speed authentication is performed using the RDB-based authentication servers 130 and 140, which are the second authentication server, for the incoming authentication service request, but the service can be performed without interruption. Automatic switching to RDB-based authentication servers (130, 140) can be made in the L4 switch, the authentication service through the RDB-based authentication servers (130, 140) of the MMDB-based authentication servers (110, 120) This can be done temporarily until the fault is recovered. In this case, the authentication servers 130 and 140 basically receive the information necessary for the authentication updated by the current server 160 in the shared storage and use the authentication server. The statistics server 150 may use the authentication servers 130 and 140 as an authentication server. The log data about the attempt or result of the authentication performed by the) can be collected and statistically managed at a predetermined time as the traffic of the day is relatively small and managed in the database (RDB03). At this time, the RDB-based authentication servers (130, 140) also the SQL query for connecting to the MMDB (MMDB01 / MMDB02) operating in the MMDB-based authentication servers (110, 120) and RDB-based authentication servers ( All SQL query pairs consisting of corresponding SQL queries for connecting to the corresponding RDB (RDB01 / RDB02) operated in the DB (130, 140) can be managed in the DB Manager, among which SQL queries for connecting to the RDB (RDB01 / RDB02) Authentication can be performed using. That is, while the MMDB-based authentication servers 110 and 120 use an SQL query for connecting to the MMDB (MMDB01 / MMDB02), when the switching signal is generated at the L4 switch, the RDB-based authentication servers 130 are immediately available. , 140) attempted to realize the duplication of authentication services that can be automatically failed by allowing the user to easily and quickly dynamically switch to authentication using SQL queries for connecting to RDB (RDB01 / RDB02).

Here, the MMDB-based authentication server (110, 120) and RDB-based authentication server (130, 140) each is an example of operating two servers containing the DB and the application, but is not limited to this It may be operated as one, or 3, 4, 5. etc., depending on the traffic load.

In order to provide authentication services for various services such as mobile communication services, for example, call connection, text message service, wireless Internet, data service, DMB, and the like, the authentication servers are based on a large capacity memory for subscribers, terminals, and service requests. Database, maintenance and management of a lot of data related to the details. In order to process a large amount of authentication-related traffic generated in order to provide such various mobile communication services at high speed, the MMDB-based authentication servers 110 and 120 are usually applied. However, in the case of realizing the authentication server as a backup scheme based on the MMDB, it becomes expensive. Therefore, RDB based authentication servers are obtained from MMDB based authentication by the MMDB based authentication servers 110 and 120 at the time of failure. Automatic switching to RDB-based authentication by (130, 140), but dynamic switching of SQL (Structured Query Language) queries through the DB Manager enables reliable and cost-effective duplication of authentication services through automatic failover We tried to solve customer complaints by non-stop service.

Hereinafter, a method of realizing automatic failure coping and non-stop service through a DB manager in duplication of authentication service according to the present invention will be described in more detail with reference to FIGS. 2 to 5.

2 is a detailed block diagram of an authentication server and shared storage according to an embodiment of the present invention.

Referring to FIG. 2, the authentication servers 110, 120, 130, and 140 according to an embodiment of the present invention are each dissipator 111 or a business process unit regardless of whether they are based on MMDB or RDB. Application server and subscriber information, service information, terminal information, including (Business Process Unit: Bizprocess) 112, Server Monitoring Agent (113), and Log Process Unit (Logprocess) (114). Databases (MMDB01, MMDB02 / RDB01, RDB02) for storing and managing basic information required for authentication such as subscription / cancellation are included. Shared storage for sharing the necessary data in the authentication server (110, 120, 130, 140) is authentication-related log storage and other statistics to store log data for the various services that occur during the authentication process in the authentication server It may include a database storage for storing and managing the data generated during the statistical processing results or the current process of the server.

Data may be transmitted and received between the business process unit 112 and the database according to the Transmission Control Protocol (TCP) protocol, and the log processing unit 114 may transmit data according to the IPC protocol from the distributor 111 and the business process unit 112. Can be received. In addition, data can be transmitted and received between the distributor 111 and the business process unit 112 according to the Inter Processor Channel (IPC) protocol. The server monitoring agent 113 may receive necessary data from the distributor 111, the business process unit 112, or the log process unit 114 according to the User Datagram Protocol (UDP) protocol.

When there is no obstacle in normal operation, the L4 switch may load balance the incoming authentication service requests to properly distribute traffic to the MMDB-based authentication servers 110 and 120 of the first authentication server. Accordingly, the MMDB based authentication servers 110 and 120 perform authentication services through the corresponding DBs MMDB01 and MMDB02 and the application servers APP01 and APP02 that operate them (see S510 of FIG. 5). The authentication service of the authentication servers 110 and 120 is performed based on basic information necessary for authentication updated by the current server 160 to the shared storage.

For example, a user of a mobile communication service may request a subscription / change / deletion of a service at a customer service center or a sales office. Accordingly, basic information necessary for authentication such as new information, change, deletion, etc. of the subscriber, the terminal, the service application history, etc. may be introduced into the current server 160 through the corresponding branch terminal. The current server 160 may update and store the basic information introduced while operating the DB (RDB04) in shared storage, and the basic information may be activated by the shared storage based on the MMDB based authentication servers 110 and 120. It can be updated in the corresponding DBs (MMDB01, MMDB02) of the, and also can be updated in the corresponding DBs (RDB01, RDB02) of the RDB-based authentication server (130, 140).

While performing authentication by the MMDB-based authentication servers 110 and 120, a failure may occur when equipment of the corresponding server fails or no longer authenticates, such as repair or replacement. At this time, for the incoming authentication service request, the L4 switch determines whether the MMDB-based authentication servers 110 and 120 have failed based on the authentication processing success rate or failure rate of the MMDB-based authentication servers 110 and 120 and other failure report messages. Can be determined (see S520 of FIG. 5). In this case, when it is determined that the failure is performed, the L4 switch may generate a switching signal so that the RDB-based authentication servers 130 and 140 may be started and automatically switched (see S530 of FIG. 5).

Accordingly, the L4 switch can properly distribute the traffic to the RDB-based authentication servers 130 and 140 of the second authentication server, so that the RDB-based authentication servers 130 and 140 respectively correspond to the corresponding DB and the DB. Authentication service can be performed through an application server. If it is not a failure, the authentication performed by the MMDB based authentication servers 110 and 120 continues, and the L4 switch may continuously monitor whether or not the MMDB based authentication servers 110 and 120 fail.

In response to the authentication service request flowing through the L4 switch from above, the distributor 111 transmits the corresponding authentication service request to various business process units 112 that may be grouped and operated for various services (see S540 of FIG. 5). ).

Accordingly, in the MMDB-based authentication servers 110 and 120 and the RDB-based authentication servers 130 and 140, the current server 160 is connected to the shared storage through the corresponding business process unit (eg, 112). Authentication may be performed based on the basic information necessary for the updated authentication (see S550 of FIG. 5). The business process unit (for example, 112) is the basic information (e.g., new, changed, deleted, etc. for the subscriber, terminal, service request history, etc.) updated or backed up to the corresponding DBs for the authentication service request. Based on the information required for authentication), determine whether the subscriber, additional service support, whether the terminal standard is reasonable, whether to subscribe / unsubscribe to a specific service, and return the result, call connection, text message service, wireless The user terminal that requests the Internet, data service, DMB service, etc., can receive the service normally. For example, in the authentication of the call connection request, if the user of the request is not a subscriber, an authentication failure occurs for the call connection request, and accordingly, it may return that the call connection request has been failed for the call connection request. On the contrary, in the authentication of the call connection request, when the user of the request is a normal subscriber, by returning a successful authentication message for the call connection request, the call connection session to the destination exchange through the source exchange for the call connection request is returned. This setting can be made to make a call with the called party.

The business process unit (for example, 112) is the main in relation to the authentication service request flowing into the corresponding process received the authentication request from the distributor 111 among the processes (A, B, C ..) for the authentication of various services. Authentication may be performed by distributing a thread into a plurality of work threads (see S551 in FIG. 5). Depending on the task thread for authentication, the finite state machine (FSM) starts up and performs the necessary logics to authenticate subscriber information / service information / terminal information / subscription or termination information, and to verify success or failure according to the corresponding process. You can respond by creating a message that informs you. In this case, whenever a new authentication is added to a business process unit (for example, 112), a code for a new process can be added to enable the corresponding process easily. In each process, various logics prepared through a plug-in module can be used in the FSM. It can be operated to refer to and use.

In particular, not only the MMDB-based authentication servers 110 and 120 according to an embodiment of the present invention, but also the RDB-based authentication servers 130 and 140 connect to a corresponding MMDB (MMDB01 / MMDB02) to a business process unit. A SQL query pair consisting of a SQL query for the DB server and a corresponding SQL query for connection to the corresponding RDB (RDB01 / RDB02) operated by the RDB-based authentication servers 130 and 140 can be managed in the DB manager. As shown in FIG. 3, an SQL query for connecting to an MMDB (MMDB01 / MMDB02) can be managed by an MMDB connection pool manager, and an RDB (RDB01 / RDB02) is connected to an RDB connection manager. You can manage the corresponding SQL query for the connection.

As shown in FIG. 4, the MMDB connection manager and the RDB connection manager may manage SQL statements corresponding to the corresponding format in order to read or write data required by accessing the corresponding DB. For example, the SQL statement for accessing the DB for subscriber authentication may require the syntax 'SELECT', 'FROM', 'WHERE', etc. In this case, the query or command insertion format used for each statement to connect to heterogeneous DB is not the same but slightly different. In order to eliminate the trouble of converting these differences every time during automatic switching, for example, the MMDB connection manager stores pre-stored SQL statements (A, B, C, D .. in FIG. 4) for connecting to the MMDB. In addition, the Oracle DB corresponding to these SQL statements, that is, the SQL statements (A ', B', C ', D' .. of FIG. 4) for connecting to the RDB may be stored and managed in advance in the RDB connection manager.

Control of the overall configuration of the authentication process performed in the business process unit as shown in FIG. 3 as well as the DB manager may be performed by a predetermined process configuration configuration means called TASK INFO. According to the code change included in TASK INFO, process addition / deletion, number of threads per process, process argument designation, process IPC communication parameter designation, process startup or the like can be controlled. In addition, the TASK INFO may control the process configuration of the DB manager by using a predetermined code in relation to the DB manager. Accordingly, when the transfer signal is generated in step S520 of FIG. 5, the RDB-based authentication servers 130 and 140 may be used. You can make dynamic conversion to SQL query needed easily and quickly.

For example, before the failure, the MMDB-based authentication servers 110 and 120 determine that the MMDB connection manager uses an SQL query for connecting to the MMDB (MMDB01 / MMDB02), and connects to the MMDB using the corresponding SQL query. The necessary data can be retrieved and used for authentication (see S552 and S553 in Fig. 5). However, when a switchover signal occurs in the L4 switch, the RDB-based authentication servers 130 and 140 immediately determine that the SQL query is used to connect to the RDB (RDB01 / RDB02) from the RDB connection manager. By connecting to the RDB via a query, the necessary data can be retrieved, read, and used for authentication (see S554 of FIG. 5). As a result, automatic switching from the MMDB to the heterogeneous RDB can be easily and quickly dynamically switched, and facilitating failure handling.

After each authentication server searches for the DB and performs an authentication process, the server may generate and respond to a system requesting authentication, indicating a success or failure according to the process (see S555 in FIG. 5). ).

Meanwhile, the MMDB-based authentication servers 110 and 120 or the RDB-based authentication servers 130 and 140 perform predetermined monitoring logic through the server monitoring agent 113 to generate an authentication failure rate or success rate during the authentication process. The condition for monitoring may be determined to report whether the corresponding servers are operating normally to the operating terminal (see S560 of FIG. 5). Or basic data to be used for monitoring in a separate message watcher without applying monitoring logic through the server monitoring agent 113 to each authentication process module, for example, the number of authentication requests, the number of successful authentication responses, It is also convenient to manage source code of the authentication process by collecting the number of authentication failure response, average response time, connection failure to the DB, and having the message watcher replace all the logic to be executed in the monitoring logic. This is because the task of changing the source code of the entire authentication work process in order to change the monitoring logic, not the change of the authentication work process may require a lot of effort and time and effort. It is also possible to collect monitoring data and determine whether there is an error in the authentication process depending on the monitoring conditions.

In addition, the MMDB based authentication servers 110 and 120 and the RDB based authentication servers 130 and 140 may manage data for statistics of the authentication process through the log processing unit 114 (FIG. 5). See S570). For example, the MMDB-based authentication servers 110 and 120 may store log data about an attempt or result of authentication performed in a corresponding database or other storage means such as an HDD. Similarly, even when the RDB-based authentication servers 130 and 140 are operating, the RDB-based authentication servers 130 and 140 may log log data on an attempt or result of authentication performed by another database or HDD. Can be stored in the storage means.

While the MMDB-based authentication servers 110 and 120 or the RDB-based authentication servers 130 and 140 perform the authentication, a predetermined time, which is predetermined as relatively low traffic during the day, for example, 2 am 3, .. When the most leisurely time, such as the hour, the current server 160 and the statistics server 150 using the database of the same standard (RDB standard) can collect the log data and use it for statistical processing. . The statistical server 150 may process statistics on authentication type, authentication time, success / failure, processing time, etc. based on the log data, and may transmit corresponding data when requested by the operation terminal. As such, the result of statistical processing managed by the statistics server 150 may be stored as shared storage, and accordingly, the current operation among the MMDB-based authentication servers 110 and 120 or the RDB-based authentication servers 130 and 140 may be performed. If the server in question is required to perform the authentication process, the statistics processing results can be used from the shared storage.

The authentication service method and system according to an embodiment of the present invention described above implements the authentication service duplication by the MMDB and the RDB in order to provide an uninterrupted mobile communication service, and usually performs the quick authentication service based on the MMDB. In the event of a failure, it is possible to provide uninterrupted mobile communication services to reduce customer complaints stably and inexpensively by automatically switching uninterrupted with RDB-based authentication. At this time, each SQL query for controlling the MMDB and RDB can be automatically and quickly changed by using DB manager process whose process configuration is controlled through configuration for process configuration. It was made possible.

The functions used in the methods and systems disclosed herein may be embodied as computer readable code on a computer readable recording medium. The computer-readable recording medium includes all kinds of recording devices in which data that can be read by a computer system is stored. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, USB memory, hard disk drive, and also carrier wave (for example, transmission over the Internet). It also includes the implementation in the form of. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

As described above, the present invention has been described by way of limited embodiments and drawings, but the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible. For example, in the embodiment of the present invention has been described an example of switching from MMDB-based authentication to RDB-based authentication, it can also be applied in a similar manner for the transfer in the reverse direction. Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

1 is a view for explaining an authentication service system according to an embodiment of the present invention.

2 is a detailed block diagram of an authentication server and shared storage according to an embodiment of the present invention.

3 is a view for explaining a specific configuration of the beads process.

4 is a diagram for explaining an SQL query pair included in a DB manager.

5 is a flowchart illustrating an operation of an authentication service system according to an embodiment of the present invention.

Claims (7)

In the authentication service method through a backup scheme, The first authentication server and the second authentication server, which are transferred to the second authentication server in the event of a failure of the first authentication server, use pairs of SQL queries corresponding to each other for connecting to heterogeneous databases, Performing authentication at the first authentication server using any one of the SQL query pairs before the transfer; And Performing authentication at the second authentication server using a SQL query dynamically switched to another one of the SQL query pairs according to the switching Authentication service method comprising a. The method of claim 1, The first authentication server and the second authentication server use a process configuration configuration that controls the overall configuration of the authentication process, in order to control the process configuration of the DB manager including the SQL query pair, And the authentication is performed by dynamically switching to a corresponding SQL query of the second authentication server at the time of the switching, according to a predetermined code related to the DB manager of the process configuration configuration. The method of claim 1, The first authentication server performs a high speed authentication using a semiconductor memory-based storage means of the MMDB standard, And the second authentication server performs slower authentication than the first authentication server temporarily until the failure of the first authentication server is recovered by using a disk-based storage means of an RDB standard. The method of claim 1, The first authentication server distributes authentication by using at least two servers including storage means for updating basic information and an application for operating the storage means for updating, and And the second authentication server distributes the authentication using at least two servers including a storage means for backing up the basic information and an application for operating the storage means for backing up the basic information. In the authentication service system through a backup scheme, A first authentication server for updating and storing basic information and performing authentication based on the updated basic information; And A second authentication server which backs up the basic information and starts authentication according to a switching signal when the first authentication server fails and performs authentication based on the backed-up basic information; The first authentication server and the second authentication server uses a pair of SQL queries corresponding to each other for connecting to each heterogeneous database, The first authentication server performs authentication using any one of the SQL query pairs, and the second authentication server performs authentication using a SQL query dynamically switched to another one of the SQL query pairs according to the switching signal. Authentication service system, characterized in that. The method of claim 5, Means for process configuration configuration that controls the overall configuration of the authentication process; And Further including a DB manager including the SQL query pair, The means for configuring the process configuration is configured to dynamically switch to the corresponding SQL query of the second authentication server when the transfer signal is generated, according to a code previously designated with respect to the DB manager to control the process configuration of the DB manager. Authentication service system, characterized in that the authentication is performed. The method of claim 5, The first authentication server, Authentication processing is distributed using at least two servers including a semiconductor memory-based storage means of the MMDB standard for updating the basic information and an application for operating the semiconductor memory-based storage means, The second authentication server, Authentication processing system characterized in that the authentication is distributed using at least two servers including an RDB standard disk-based storage means for backing up the basic information and an application that operates the disk-based storage means.

Images