KR101592323B1 - System and method for remote server recovery - Google Patents

Abstract

The present invention relates to a system and method for remotely recovering a server during a failure of the server. More specifically, the present invention provides the system and method for remotely recovering a server during a failure of the server; a recording medium storing a program for providing the same; and a computer program stored in the medium to provide the same wherein smooth workflow can be maintained by rapidly performing recovery according to a recovery scenario inputted in a manger server by a simple operation when a failure occurs in the server. The system for remotely recovering a server during a failure of the server includes: a backup server (100); the manager server (200) which is inputted preset recovery scenario, and receives status information of the backup server (100) from an agent program installed in the backup server (100); and a remote management terminal (300).

Description

SYSTEM AND METHOD FOR REMOTE SERVER RECOVERY BACKGROUND OF THE INVENTION [0001]

The present invention relates to a system and method for recovering a remote server in the event of a server failure, and more particularly, to a system and method for recovering a remote server in the event of a server failure capable of automatic recovery according to a recovery scenario input to the manager server, And a computer program stored on a medium for implementing the same.

Distributed Denial of Service (DDoS) is also called 'distributed denial of service' or 'distributed denial of service attack'. It is one of the hacking methods that attack specific sites by distributing and deploying multiple attackers simultaneously.

It is a way to impair network performance or paralyze a system by planting tools for attacking services on multiple computers and overflowing a huge amount of packets simultaneously so that the site's computer system can not handle the attack target.

A DDoS attack does not penetrate a particular computer and delete or steal data, but it prevents the target server from receiving other legitimate signals. It is a technique to paralyze a computer by causing a mass connection.

In order to attack a specific site, a hacker puts tools for attacking a service on several computers, flooding a huge amount of packets simultaneously that the computer system of the target site can not handle, resulting in network performance degradation or system paralysis. As a result, system overload will make normal customers inaccessible.

Sudden server failures due to such disasters such as DDoS attacks and other unpredictable disasters often cause paralysis of major servers of an institution.

Conventionally, in order to recover from such a server failure, a worker has been directly inputting the data to restore the data in an off-line manner. In addition, server failures such as nighttime and public holidays are difficult to recover quickly from offline. Therefore, there is a need for a technique to remotely solve problems by monitoring the status of a server in case of a server failure due to a disaster such as an unpredictable disaster.

Korean Patent No. 10-0734110 discloses a method of recovering a server error in a TCP terminal.

Korean Patent Publication No. 10-0734110B1

Disclosure of Invention Technical Problem [8] The present invention has been made to solve the above problems of the prior art, and it is an object of the present invention to provide a system and method for preventing a server malfunction caused by a disaster disaster such as a DDoS attack by performing a quick recovery according to a recovery scenario preset by a simple operation, The present invention provides a remote server recovery system and method.

According to an aspect of the present invention, there is provided a remote server recovery system in the event of a server failure comprising: a backup server (100) in which an agent program is installed; A manager server 200 receiving a preset recovery scenario and receiving status information of the backup server 100 from an agent program installed in the backup server 100; And a remote management terminal (300) monitoring and controlling the backup server (100) through socket communication with the manager server (200) using a server port approved by the server manager, wherein the remote management terminal The terminal 300 accesses the manager server 200 and monitors the backup server 100. When the remote management terminal 300 requests a recovery of the backup server 100, ) Remotely restores the backup server (100) based on the recovery scenario.

In one embodiment of the present invention, the agent program is developed in Java.

In one embodiment of the present invention, the socket communication is characterized by being a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).

A method for recovering a remote server in the event of a server failure using a remote server recovery system in the event of a server failure, the method comprising: receiving a recovery scenario from the manager server (200) A recovery scenario input step S10; The manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300 and uses the server port approved by the server manager 300 and the authenticated remote management terminal 300 A socket communication step (S20) for performing socket communication; A monitoring step (S30) in which the manager server (200) receives status information through an agent program installed in the backup server (100) and transmits the status information to the remote management terminal (300); (S40) for recovering the backup server 100 according to the recovery scenario input in the recovery scenario input step S10 when the manager server 200 receives the server recovery request from the remote management terminal 300 ) In the case of a server failure.

In one embodiment of the present invention, the socket communication is characterized by being a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).

In one embodiment of the present invention, the agent program is developed in Java.

In one embodiment of the present invention, the unique identification information includes a specific IP, a public certificate, an ID and a password, an access control list (ACL), a media access control (MAC) (UDID), Universally Unique IDentifier (UUID), and a telephone number of a mobile communication terminal equipment (UE), an Internet address, an Internet address, an International Mobile Station Equipment Identity (IMEI) .

In one embodiment of the present invention, the server restoring step S40 may include transmitting a restoration progress status result of restoring the backup server 100 to the remote management terminal 300 according to a restoration scenario .

The present invention also provides a computer-readable recording medium on which a program for implementing a remote server recovery method in the event of a server failure is stored.

In addition, the present invention provides a program stored in a computer-readable recording medium for implementing a remote server recovery method in case of the server failure.

According to the remote server restoration system and method in the case of the server failure according to the present invention, it is possible to perform a quick recovery according to a preset recovery scenario by a simple operation, and to maintain a smooth work flow.

In addition, by managing the backup server through the manager server, security can be doubled when connecting to the backup server from the outside, and it is possible to recover the server quickly even when the server is disturbed due to a sudden disaster.

In addition, it is possible to quickly solve problems such as the paralysis of the production line by enabling prompt response when a sudden disaster occurs in the event of a holiday or a weekend, and it is possible to minimize the server restoration work in offline by enabling automatic server recovery remotely .

In addition, it can prevent the overload of each server by simple operation method, and it has the effect of customizing time and manpower input cost reduction.

1 is a block diagram of a remote server recovery system in the event of a server failure according to an embodiment of the present invention;
Figs. 2 and 3 are data flow charts for explaining Figs. 1 and 2. Fig.
4 is a flowchart of a method of recovering a remote server in case of a server failure according to an embodiment of the present invention;

BRIEF DESCRIPTION OF THE DRAWINGS FIG. The terms and words used in the present specification are merely illustrative in order to explain the present invention more specifically and to facilitate understanding of the ordinary artisan, and the scope of the present invention should not be construed as being limited thereto.

Technical terms and scientific terms used in the present invention mean what the person skilled in the art would normally understand unless otherwise defined.

FIG. 1 is a block diagram of a remote server recovery system in case of a server failure according to an embodiment of the present invention. FIGS. 2 to 3 are data flow diagrams for explaining FIG. 1, A flowchart of how to recover a remote server in the event of a server failure.

Prior to explanation, the terms used in this specification will be briefly described.

Disaster Disasters is a term used to describe a series of things that prevent a server from functioning. For example, email disruptions, logic bombs, DDoS attacks, other cyber terrorism, .

1 to 3, the present invention provides a remote server recovery system in case of a server failure, the backup server 100 having an agent program installed therein; A manager server 200 receiving a preset recovery scenario and receiving status information of the backup server 100 from an agent program installed in the backup server 100; And a remote management terminal (300) monitoring and controlling the backup server (100) through socket communication with the manager server (200) using a server port approved by the server manager, wherein the remote management terminal The terminal 300 accesses the manager server 200 and monitors the backup server 100. When the remote management terminal 300 requests a recovery of the backup server 100, ) Remotely restores the backup server (100) based on the recovery scenario.

The backup server 100 monitors the normal operation of the administrator, and installs an agent program to remotely monitor and control (manage) a situation in which it is difficult for an administrator to monitor.

In order for a manager to remotely access the backup server 100, connection information that can be connected to the backup server 100 is required. However, when such access information is exposed to the outside, there is a possibility that a risk of hacking may occur Accessing the backup server 100 through the access information has a risk. To prevent this, an agent program capable of communicating with the manager server 200 is installed.

That is, in order for a manager to access from a remote location, only unique identification information for accessing the manager server 200 is required.

The manager server 200 receives preset recovery scenarios and receives the status information of the backup server 100 from the agent program installed in the backup server 100. [

The manager server 200 can communicate with the backup server 100 through an agent program installed in the backup server 100.

As described above, in order to enhance the security of the backup server 100, the manager server 200 acting as an intermediary medium is provided.

At this time, the agent program may be developed as Java.

When a piece of software is produced, the cost of producing the software is high, but the maintenance cost is enormous. The Java language was designed with this in mind. The Java language was developed based on C ++, but it removed the confusing part of C ++. For example, operator overloading, multiple inheritance, and so on. And I overcame the memory management problem in C ++ as an auto garbage collection. So the programmer does not have to worry about this anymore.

Java is object-oriented. We can not go into detail about object-oriented language here, but there is a simple example of inheritance. Child objects inherit from parent object. If the child object inherits from the parent object, it means that the parent object's data and methods can be used. Therefore, when developing software, it has many advantages in terms of recycling.

Java is a language originally designed for use in a distributed computing environment. Because the network environment is an environment where security is emphasized rather than other environments, Java focuses on security. Java can restrict access to data from memory with a structure that the virus can not penetrate. If access is not allowed, access to the application's data structure or data is impossible. That is, it is strong in security.

A network consists of various types of computers and various platforms (for example, operating systems such as Windows NT, Solaris, and Macintosh OS) and various hardware. Java compiles Java code source to produce bytecode, which is interpreted by the Java interpreter installed on various platforms, so it can run on any platform. Therefore, if a new machine has only the Java interpreter installed, it can interpret the bytecode.

Existing languages use slightly different code for each platform due to numerical computation problems. Java, however, is portable and can use the same code on other operating systems and on different CPUs. The disadvantage of high portability is that it does not take into account the characteristics of each system and therefore can not achieve optimal performance. Java is a language that overcomes this.

In summary, Java is an object-oriented programming language that is highly secure, and compiled code is provided as a class for use by other operating systems. It supports the distributed environment and is more efficient, while taking advantage of the object-oriented nature of the object-oriented C ++ language.

The socket communication may be a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).

TCP / IP is a network transport protocol that can be used to transfer data between computers that use different operating systems and is used as a standard protocol for information transmission on the Internet. TCP is a protocol for dividing and packing transmission data by a certain unit, and IP is a protocol for directly exchanging data. All computers on the Internet follow protocols established by the Internet Standards Committee, the Internet standard protocol being TCP / IP. A protocol is simply a device for sending data completely from one computer to another. In TCP / IP, IP first refers to a header with a start and destination address and passes data to the destination via the network. However, in this process, data may be mis-transmitted or corrupted, and data may not be transmitted in the order in which it was sent. TCP is the complement to this disadvantage. In other words, if IP loses or corrupts a data packet, TCP has a task of notifying that a problem has occurred and retransmitting the data appropriately. In the process of recovering from TCP error, the host that receives the data always receives the data in order without error.

UDP is an abbreviation of user datagram protocol. It is a communication protocol that transmits data unilaterally from the sender without signaling that the information is sent or received when the information is exchanged on the Internet. On the sending side, it is a protocol that is made so that it can not check whether the recipient has received or not received the data, nor does it need to check.

This concept is opposed to the transmission control protocol (TCP), which is a communication protocol designed to automatically communicate with a central computer server at the same time as pressing the Internet icon, so that the transmitting side and the receiving side can communicate with each other. For example, when sending and receiving an e-mail, 'receipt' confirms whether the other party has read or not read the mail because the sending and receiving parties can exchange data with each other.

In this way, the transmitting and receiving sides exchange data with each other, and UDP is a method in which only data is transmitted from the transmitting side regardless of whether the receiving side sees the data. In other words, UDP is a method in which data is sent unilaterally from a transmitting side without going through a connection procedure with a receiving side. Such a service is called an unrelated service, and the communication protocol of this unrelated service is UDP.

Therefore, unlike TCP, UDP is not responsible for receiving data. This means that the sender has sent the information, but the sender does not have to care about whether the information arrived at the receiver in time or if the information content was reversed. It is also slower than TCP in terms of stability, but it is much faster.

The remote management terminal 300 monitors and controls the backup server 100 through socket communication with the manager server 200 using a server port approved by the server manager.

At this time, the remote management terminal 300 refers to a general terminal (a computer, a mobile device, a smart device, or the like) that can be connected to the Internet by wire or wirelessly.

All access attempts from the Internet (external network) to the firewall are determined internally according to the access control list, which is a security rule preset in the firewall. Basically, the firewall follows a method of denying all accesses and then allowing / permitting access only in a gradual way. For example, the path through which data travels over the network is called a port. By default, the firewall blocks all of the approximately 65,000 communication ports and opens only certain ports that allow access. That is, if you provide a web service (http) to operate the homepage, you need to access 80 port. If you provide FTP service (ftp), you have to allow 20/21 port. It can decide whether to access or deny not only the communication port but also the IP address accessed from the outside or the specific program. All these security rule settings are included in the access control list and applied in batch.

As shown in FIG. 4, the remote server recovery method in case of a server failure according to an embodiment of the present invention is implemented by a program executed by an arithmetic processing means including a computer. In the case of a server failure, A remote server recovery method in case of a server failure includes a recovery scenario input step (S10), a socket communication step (S20), a monitoring step (S30), and a server recovery step (S40).

In the recovery scenario input step (S10), the manager server 200 receives the recovery scenario.

The restoration scenario refers to a procedure for restoring a backup server when a problem occurs in the backup server 100. For example, data backup-data restoration-server rebooting-reinstallation of operation programs-operation program execution and settings (Data interlock) - Normal operation of backup server 100, etc.

This recovery scenario may be set to a number of depending on the type of the problem situation that may occur in the backup server 100. [

That is, various restoration scenarios such as rebooting only, rebooting, program execution, rebooting, program execution and data interlocking can be inputted in advance, and recovery can be selected by selecting a recovery scenario according to the situation.

For example, if a simple program is down, the server will be restored only after the program is executed after the reboot. If a problem occurs due to a DDoS attack, the DDoS attack is blocked, the IP is blocked, The server can be restored by taking measures such as unlocking the port after the restoration.

In the socket communication step S20, the manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300, and the remote management terminal 300 that has been authenticated and the server Socket communication is performed using a server port.

In this case, the socket communication may be a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).

The unique identification information may include a specific IP, a public certificate, an ID and a password, an access control list (ACL), a MAC address (media access control) (IMEI), a User Device IDentification (UDID), a Universally Unique IDentifier (UUID), and a telephone number.

The network firewall basically allows or blocks incoming packets according to the security rules (ACL, Access Control List, and Access Control List) set by the administrator in advance. Generally, it is located between the internal network and the external network (Internet) to perform such packet control functions. Firewalls can be deployed as needed to enhance security.

Firewall access control lists are usually displayed in an intuitive form for easy configuration and configuration by the administrator, and are provided so that the results can be checked immediately after applying security rules. However, access control lists and firewall settings require a lot of knowledge and experience related to security, so they must be done accurately and systematically by security experts.

For example, in the case of a computer, member authentication can be performed using a specific IP, a public certificate, an ID and a password, a MAC address, etc. In the case of a mobile device, a smart device, (MAC) address, an International Mobile Station Equipment Identity (IMEI), a User Device IDentification (UDID), a Universally Unique IDentifier (UUID) The member authentication can be performed by using the number.

A MAC address (media access control) address is an address of a network device in the MAC layer in a network structure, and is usually stored in the ROM of the network card.

A User Device IDentification (UDID) is an identifier for identifying a user device. It is a kind of serial number.

A Universally Unique Identifier (UUID) is a 128-bit number used to identify an object or entity on the Internet. It is a nearly uniquely identifiable identifier made up of a combination of space and time (up to about 3400 years), and is used for a variety of purposes ranging from extremely short time objects to permanent object identification. There is no registration procedure for certification bodies, but only a unique identification number of the generic single identifier generation program is required. For example, storing a MAC address of a certain product in a specific server may cause a problem such as leakage of personal information, so that it can be used as an identifier for storing and storing a MAC address.

Various unique identification information (identifiers) have been described above, and one device can have a plurality of unique identification information.

For example, if the mobile phone is capable of Wi-Fi and Bluetooth communication, it may have various unique identification information such as an identifier (UDID) of the mobile phone device itself, a MAC address for the Wi-Fi chip, and a MAC address for the Bluetooth chip.

In step S30, the manager server 200 receives the status information through the agent program installed in the backup server 100, and transmits the status information to the remote management terminal 300. [

That is, the status of the backup server 100 can be checked (monitored) by using the remote management terminal 300.

At this time, the agent program may be developed as Java.

As shown in FIG. 2, the monitoring step S30 can check the current state of the backup server 100 in real time from the time when the remote management terminal 300 accesses the manager server in real time, 3, the manager server 200 always stores status information received from the agent program of the backup server 100 and provides status information for each event according to a request of the remote management terminal 300 It is also possible to do.

The server recovery step S40 is a step in which when the manager server 200 receives the server recovery request from the remote management terminal 300, the backup server 100 is recovered according to the recovery scenario input in the recovery scenario input step S10 do.

There may be a case where unhealthy status information is transmitted to the manager server 200 because the backup server 100 is in a normal state or when performing operations such as patching and testing of the backup server 100 It is preferable to restore the backup server 100 when receiving a server recovery request from the remote terminal 300.

It is also possible that the manager server 200 determines whether the backup server 100 is abnormal based on the status information of the backup server 100 and restores the backup server 100.

At this time, the server recovery step S40 may be such that the manager server 200 transmits a recovery progress status result of restoring the backup server 100 to the remote management terminal 300 according to the recovery scenario .

Although the remote server recovery method in the case of the server failure according to the embodiment of the present invention has been described above, the computer readable recording medium storing the program for implementing the remote server recovery method in case of server failure and the remote server recovery method in case of server failure It goes without saying that a program stored in a computer-readable recording medium for implementation may also be implemented.

That is, the remote server recovery method in the case of the server failure described above can be easily understood by those of ordinary skill in the art that a program of the instructions for implementing the remote server recovery method can be tangibly embodied and provided in a recording medium readable by a computer will be.

In other words, it can be implemented in the form of a program command that can be executed through various computer means, and can be recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, and the like, alone or in combination.

The program instructions recorded on the computer-readable recording medium may be those specially designed and constructed for the present invention or may be those known and available to those skilled in the computer software. Examples of the computer-readable medium include magnetic media such as hard disks, floppy disks and magnetic tape, optical media such as CD-ROMs and DVDs, and optical disks such as floppy disks. Magneto-optical media and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, USB memory, and the like.

The computer-readable recording medium may be a transmission medium such as a light or metal line, a wave guide, or the like, including a carrier wave for transmitting a signal designating a program command, a data structure, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the scope of the present invention as defined by the appended claims.

100: Backup server
200: manager server
300: remote management terminal
S10: Enter recovery scenario
S20: Socket communication phase
S30: Monitoring step
S40: Server recovery steps

Claims (10)

A backup server 100 in which an agent program is installed;
A manager server 200 receiving a preset recovery scenario and receiving status information of the backup server 100 from an agent program installed in the backup server 100; And
And a remote management terminal (300) monitoring and controlling the backup server (100) through a socket communication with the manager server (200) using a server port approved by the server manager,
The remote management terminal 300 accesses the manager server 200 to monitor the backup server 100,
When the remote management terminal 300 requests the recovery of the backup server 100, the manager server 200 remotely restores the backup server 100 based on the recovery scenario,
The remote management terminal 300 confirms the current status of the backup server 100 in real time from the time when the remote management terminal 300 is connected to the manager server 200 or receives status information received from the agent program of the backup server 100, The status information of the backup server 100 stored at all times by the server 200 and stored at the request of the remote management terminal 300,
The manager server 200 transmits a recovery progress status result for restoring the backup server 100 to the remote management terminal 300 according to a recovery scenario,
The agent program is characterized by being developed in Java (JAVA)
Wherein the socket communication is a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).
delete delete A method for restoring a remote server in the event of a server failure using a remote server recovery system in the event of a server failure, the method comprising the steps of:
A recovery scenario input step (S10) in which the manager server (200) receives a recovery scenario;
The manager server 200 performs the authentication procedure based on the unique identification information input from the remote management terminal 300 and uses the server port approved by the server manager 300 and the authenticated remote management terminal 300 A socket communication step (S20) for performing socket communication;
A monitoring step (S30) in which the manager server (200) receives status information through an agent program installed in the backup server (100) and transmits the status information to the remote management terminal (300); And
A server recovery step S40 for recovering the backup server 100 according to a recovery scenario input in the recovery scenario input step S10 when the manager server 200 receives a server recovery request from the remote management terminal 300, / RTI >
The monitoring step S30 may include checking the current state of the backup server 100 in real time from the time when the remote management terminal 300 accesses the manager server 200, The manager server 200 always stores status information received from the remote management terminal 300 and provides status information of the backup server 100 stored at the request of the remote management terminal 300,
The server recovery step S40 is a step in which the manager server 200 transmits a recovery progress status result of restoring the backup server 100 to the remote management terminal 300 according to the recovery scenario. How to repair a remote server.
5. The method of claim 4,
Wherein the socket communication is a TCP / IP (Transmission Control Protocol / Internet Protocol) or a UDP (User Datagram Protocol).
5. The method of claim 4,
Wherein the agent program is developed in Java (JAVA).
5. The method of claim 4,
The unique identification information includes a specific IP, a public certificate, an ID and a password, an access control list (ACL), a MAC address (media access control) Wherein the remote server is at least one selected from the group consisting of an International Mobile Station Equipment Identity (IMEI), a User Device IDentification (UDID), a Universally Unique IDentifier (UUID) .
delete A computer-readable recording medium storing a program for implementing a remote server recovery method in a server failure according to any one of claims 4 to 7.
A program stored in a computer-readable recording medium for implementing a remote server recovery method in a server failure according to any one of claims 4 to 7.

Images