KR102669856B1 - System for verifying and correcting consistency of database management system table in separated network environment disconnected network between server - Google Patents

Abstract

The purpose of the present invention is to provide a server that enables consistency verification and correction by transmitting only data that has completed security verification through a separate security verification server rather than direct communication between SW agents in a network separation environment where direct communication between SW agents is not possible. It provides a DBMS table consistency verification and correction system in a network separation environment where the inter-network is disconnected.
In order to achieve the above object, the DBMS table consistency verification and correction system in a network separation environment in which the network between servers is disconnected according to the present invention includes a source DBMS in a network separation environment in which the network between servers is disconnected; A security verification system that securely verifies change data transmitted from the DBMS; and a target DBMS in which replicated data for which security verification has been completed from the security verification system is reflected; a first consistency verification unit that extracts source data for consistency verification from the source DBMS in order to verify consistency of the replicated data. It is characterized by including a tool.

Description

DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected {SYSTEM FOR VERIFYING AND CORRECTING CONSISTENCY OF DATABASE MANAGEMENT SYSTEM TABLE IN SEPARATED NETWORK ENVIRONMENT DISCONNECTED NETWORK BETWEEN SERVER}

The present invention relates to a DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected, and more specifically, to a CDC (Change Data System) that replicates change data between a source DBMS (DataBase Management System) and a target DBMS in real time. When applying a computer-type SW solution, the direct network between the source DBMS and the target DBMS is completely separated, and the inter-server network is disconnected to verify and correct data consistency in an environment where direct communication between SW agents is impossible. This relates to a DBMS table consistency verification and correction system in a separated environment.

Computer and computer network technology is developing rapidly.

Based on technological advancements, technology is also developing where multiple computers are connected through internal and external networks to share important data.

In other words, technologies for sharing and protecting data through networks are developing.

Network networks have many positive functions, including enabling multiple people to collaborate by sharing data.

However, as important data is shared, there is also a problem that important data can be easily leaked when the network is attacked from the outside and important data can be infected with malicious programs.

In general, network separation refers to dividing the business use and the Internet by duplicating the network to protect internal computing resources from external intrusions such as hacking or malicious code.

In the case of systems that require strong security, this network separation is applied by completely separating the network physically.

Recently, security issues have become more important than ever, and the number of cases of building major systems in a network separation environment is rapidly increasing.

In order to transfer data between the source server and the target server in a physically separated network environment, a separate server is established to inspect the data for security and malicious code, and only data that has completed security verification through this security server is installed. We are building major systems to deliver this.

However, in the existing consistency verification and correction, the SW Agent installed in the target DBMS brings data to the target DBMS through direct communication with the source DBMS and compares and corrects real-time data, so it cannot be applied to this network separation environment. There was a problem that wasn't there.

Republic of Korea Patent Publication No. 10-1904786 (announced on October 8, 2018)

The purpose of the present invention to solve the conventional problems described above is to only use data for which security verification has been completed through a separate security verification server rather than direct communication between SW agents in a network separation environment where direct communication between SW agents is impossible. It provides a DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected to enable consistency verification and correction.

In order to achieve the above object, the DBMS table consistency verification and correction system in a network separation environment in which the network between servers is disconnected according to the present invention includes a source DBMS in a network separation environment in which the network between servers is disconnected; A security verification system that securely verifies change data transmitted from the DBMS; and a target DBMS in which replicated data for which security verification has been completed from the security verification system is reflected; a first consistency verification unit that extracts source data for consistency verification from the source DBMS in order to verify consistency of the replicated data. It is characterized by including a tool.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, a second consistency verification and correction is performed by comparing the source data and the replicated data reflected in the target DBMS. It is characterized by including a verification tool.

In addition, the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention includes a first CDC replication agent that uploads the source data to the security verification system through FTP connection. Do it as

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the source data for which security verification has been completed from the security verification system is downloaded through FTP connection and then reflected in the target DBMS. Characterized in that it comprises a second CDC replication agent.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the consistency verification is performed on a row (ROW) basis or a table (Table) basis.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the first consistency verification tool extracts source data from the original table when the consistency verification is performed on a row basis. It is characterized by extracting and inserting into a table for source data transmission.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the second consistency verification tool generates a source data checksum table from the source data transmission table and , After generating a target data checksum table from the target table of the replicated data reflected in the target DBMS, consistency verification is performed by comparing the generated source data checksum table and the target data checksum table, respectively.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the second consistency verification tool deletes or inserts the data checksum table as a result of the consistency verification. ) is characterized in that data correction is performed on the target data in the same way as the source data.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected according to the present invention, the first consistency verification tool performs consistency verification on the original table when the consistency verification is performed on a table basis. It is characterized by extracting the checksum for and inserting it into the source checksum transmission table.

In addition, in the DBMS table consistency verification and correction system in a network separation environment where the inter-server network is disconnected according to the present invention, the second consistency verification tool creates a source data table from the source checksum transmission table, and the target DBMS After generating a target table checksum table from the target table of the replicated data reflected in , consistency verification is performed by comparing the generated source data table and the target data checksum table, respectively.

Specific details of other embodiments are included in “Specific Details for Carrying Out the Invention” and the attached “Drawings.”

The advantages and/or features of the present invention and methods for achieving them will become clear by referring to the various embodiments described in detail below along with the accompanying drawings.

However, the present invention is not limited to the configuration of each embodiment disclosed below, but may also be implemented in various different forms. However, each embodiment disclosed in this specification ensures that the disclosure of the present invention is complete, and the present invention It is provided to fully inform those skilled in the art of the present invention, and it should be noted that the present invention is only defined by the scope of each claim.

According to the present invention, in a network separation environment where direct communication between SW agents is not possible, only data that has completed security verification is transmitted through a separate server for security verification rather than through direct communication between SW agents, enabling consistency verification and correction. There is.

Figure 1 is a block diagram showing the overall configuration of a DBMS table consistency verification and correction system in a network partition environment according to the present invention.
Figure 2 is a block diagram showing the detailed configuration of the first consistency verification tool of the source DBMS in the ROW unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.
Figure 3 is a block diagram showing the detailed configuration of the second consistency verification tool of the target DBMS in the ROW unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.
Figure 4 is a block diagram showing the detailed configuration of the first consistency verification tool of the source DBMS in the TABLE unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.
Figure 5 is a block diagram showing the detailed configuration of the second consistency verification tool of the target DBMS in the TABLE unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.
Figure 6 is a block diagram showing consistency verification in the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Before explaining the present invention in detail, the terms or words used in this specification should not be construed as unconditionally limited to their ordinary or dictionary meanings, and the inventor of the present invention should not use the terms or words in order to explain his invention in the best way. It should be noted that the concepts of various terms can be appropriately defined and used, and furthermore, that these terms and words should be interpreted with meanings and concepts consistent with the technical idea of the present invention.

That is, the terms used in this specification are only used to describe preferred embodiments of the present invention, and are not used with the intention of specifically limiting the content of the present invention, and these terms refer to various possibilities of the present invention. It is important to note that this is a term defined with consideration in mind.

In addition, it should be noted that in this specification, singular expressions may include plural expressions, unless the context clearly indicates a different meaning, and may include singular meanings even if similarly expressed in plural. .

Throughout this specification, when a component is described as “including” another component, it does not exclude any other component, but includes any other component, unless specifically stated to the contrary. It could mean that you can do it.

Furthermore, if a component is described as being "installed within or connected to" another component, it means that this component may be installed in direct connection or contact with the other component and may be installed in contact with the other component and may be installed in contact with the other component. It may be installed at a certain distance, and in the case where it is installed at a certain distance, there may be a third component or means for fixing or connecting the component to another component. It should be noted that the description of the components or means of 3 may be omitted.

On the other hand, when a component is described as being “directly connected” or “directly connected” to another component, it should be understood that no third component or means is present.

Likewise, other expressions that describe the relationship between each component, such as "between" and "immediately between", or "neighboring" and "directly neighboring", have the same meaning. It should be interpreted as

In addition, in this specification, terms such as "one side", "other side", "one side", "the other side", "first", "second", etc., if used, refer to one component. It is used to clearly distinguish it from other components, and it should be noted that the meaning of the component is not limited by this term.

In addition, in this specification, terms related to position such as "top", "bottom", "left", "right", etc., if used, should be understood as indicating the relative position of the corresponding component in the corresponding drawing. Unless the absolute location is specified, these location-related terms should not be understood as referring to the absolute location.

In addition, in this specification, when specifying the reference numeral for each component in each drawing, the same component has the same reference number even if the component is shown in different drawings, that is, the same reference is made throughout the specification. The symbols indicate the same component.

In the drawings attached to this specification, the size, position, connection relationship, etc. of each component constituting the present invention is exaggerated, reduced, or omitted in order to convey the idea of the present invention sufficiently clearly or for convenience of explanation. It may be described, and therefore its proportions or scale may not be exact.

In addition, hereinafter, in describing the present invention, detailed descriptions of configurations that are judged to unnecessarily obscure the gist of the present invention, for example, known technologies including prior art, may be omitted.

Hereinafter, embodiments of the present invention will be described in detail with reference to the related drawings.

Figure 1 is a block diagram showing the overall configuration of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 1, the DBMS table consistency verification and correction system 1000 in a network separation environment where the network between servers is disconnected according to the present invention includes a source DBMS 100, a first consistency verification tool 200, and a first consistency verification tool. It includes a CDC replication agent 300, a security verification system 400, a second CDC replication agent 500, a second consistency verification tool 600, and a target DBMS 700.

The DBMS table consistency verification and correction system 1000 in a network separation environment where the network between servers is disconnected according to the present invention is a consistency verification and correction system in a network separation environment where the network between servers is disconnected.

Here, network separation is attracting attention as the best technology to prevent hacking such as computer network paralysis.

Network separation refers to dividing the network into business and personal use by duplicating the network to protect internal computing resources from external intrusion.

This network separation is largely divided into physical network separation and logical network separation.

Physical network separation includes using two PCs per person, separating the network with a transfer switch, or using a PC equipped with two network cards.

Until now, most organizations have implemented physical network separation using two PCs for security reasons.

This is because the safety of the internal network is evaluated to be high as complete network separation is supported.

However, using two PCs per person is expensive and has the disadvantage of not being able to reuse the built infrastructure when relocating.

Additionally, as the number of PCs increases physically, the work environment worsens due to heat generation.

Accordingly, there is a recent trend of preferring logical network separation over physical network separation.

Logical network separation is a type of network separation in the virtualization area, and is a method of separating the internal network and external network on one PC per person.

Therefore, the management and operation costs for building the infrastructure are cheaper than physical network separation.

However, there is a security risk that worms or viruses can be introduced and that connections can be made directly from the internal network to the Internet network.

Logical network separation is further divided into a VDI method using virtualization technology and an OS kernel separation method that separates the PC operating system.

VDI is a method of virtualizing the desktop and using computer resources from the server, and is classified into network separation through business VDI conversion and network separation through personal VDI conversion.

In the case of business VDI deployment, the strengths are maintaining security through centralized control of information resources by bringing all computing resources from the server, smart work that allows work to be done on a personal terminal anytime, anywhere, and efficient PC management.

However, network separation through business VDI conversion has the disadvantage of being expensive due to virtualization of the entire business.

The concept that emerged from this is network separation through personal VDI conversion.

Since only the parts used for personal purposes are virtualized, the cost is relatively low.

This VDI concept exists only in Korea and is a policy created by Citrix and VDI deployment vendors.

Most organizations currently carrying out network separation projects are choosing personal VDI as a network separation solution.

However, benefits such as centralized management, smart work, and security, which are considered advantages of VDI, do not apply to personal VDI.

Unlike the VDI method, an OS kernel separation solution that logically separates the network by duplicating the operating system is also widely used.

This solution is mainly provided by AhnLab and Mirageworks, and is created according to the operating system for business and personal use and connected to the network.

The OS kernel separation solution is much cheaper than deploying VDI.

In particular, VDI suffers damage to all users in the event of a system failure, but the OS kernel separation method is excellent in terms of risk management because only one PC fails.

However, in a situation where the PC's operating system is continuously updated from Windows XP to Windows 7, Windows 8, etc., the problem of continuously ensuring OS separation and the need to verify compatibility every time an application is added to the PC are pointed out as disadvantages. .

There is also the problem of not being able to support the transition to a flexible work system such as smart work.

As such, each network separation has its pros and cons.

A careful decision is necessary because the risk of cyber terrorism can vary depending on which method is chosen.

Change Data Capture (CDC) is a collection of software design patterns used to determine and track data that has changed in a database so that actions can be taken.

CDC is an approach to data integration based on identifying, capturing, and transmitting changes to enterprise data sources.

CDC occurs primarily in data warehouse environments because capturing and preserving data state over time is one of the core functions of a data warehouse.

However, CDC can be used in all databases and data storage systems.

DBMS (Data Base Management System) is enterprise software that systematically manages vast amounts of various information stored in the form of a database (DB).

As corporate informatization progresses rapidly with the development of the Internet, DBMS is recognized as an important software comparable to a computer operating system (OS).

The source DBMS 100 is a DBMS that includes the original database to transfer data to the target DBMS 700.

The target DBMS 700 is a DBMS to which the original database of the source DBMS 100 is transferred.

That is, the source DBMS 100 is a DBMS for transferring large amounts of data, and the target DBMS 700 is a DBMS that receives large amounts of data from the source DBMS 100.

The security verification system 400 security verifies the change data transmitted from the source DBMS 100.

The target DBMS 700 reflects the change data for which security verification has been completed from the security verification system 400.

In addition, in the DBMS table consistency verification and correction system 1000 in a network separation environment where the network between servers is disconnected according to the present invention, the first CDC replication agent 300 extracts change data from the source DBMS 100 in real time, The extracted data is converted into duplicate data in the form of a file and then uploaded to the security verification system 400 through FTP connection.

The second CDC replication agent 500 downloads the replication data for which security verification has been completed from the security verification system 400 through an FTP connection and then reflects the changed data in the target DBMS 700.

In other words, in a network separation environment where the network between servers is disconnected, the first CDC replication agent 300 extracts change data from the source DBMS 100 in real time, changes the extracted change data into replication data in the form of a file, and then , uploaded to the security verification system 400 through FTP connection.

The second CDC replication agent 500 downloads the replication data for which security verification has been completed in the security verification system 400 through FTP connection and then reflects the changed data in the target DBMS 700.

That is, since direct communication is impossible between the source DBMS 100 and the target DBMS 700, data is transferred from the source DBMS 100 to a separate security verification system 400 using an FTP connection, and then security verification is performed. Only this completed data is received from the target DBMS (700) using an FTP connection and reflected in the target DBMS (700).

In particular, the security verification system 400 includes a transmission storage 410 and a reception storage 420.

Here, data transmitted from the source DBMS 100 is uploaded to the transmission storage 410.

The receiving storage 420 performs security verification on the uploaded data and receives only data for which security verification has been completed.

The first consistency verification tool 200 extracts source data for consistency verification from the source DBMS 100 in order to verify the consistency of replicated data.

The second consistency verification tool 600 performs consistency verification and correction by comparing source data and replicated data reflected in the target DBMS 700.

In the DBMS table consistency verification and correction system 1000 in a network separation environment where the network between servers is disconnected according to the present invention, the consistency verification of the first consistency verification tool 200 and the second consistency verification tool 600 is performed. It is performed on a row-by-row or table-by-table basis.

The characteristics of consistency verification and correction tool modules such as the first consistency verification tool 200 and the second consistency verification tool 600 are as follows.

By adding a specific condition (WHERE clause) to the table, only some data can be extracted for comparison and consistency verification in large tables.

The first consistency verification tool 200 and the second consistency verification tool 600 will be described in more detail with reference to FIGS. 2 to 5.

Figure 2 is a block diagram showing the detailed configuration of the first consistency verification tool of the source DBMS in the ROW unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 2, in the row (ROW) unit consistency verification mode, the first consistency verification tool 200 includes an original table 210 and a table 220 for source data transmission.

The original table 210 is a table extracted in real time from the source DBMS 100.

The source data transmission table 220 is a replication-registered data transmission table created to verify consistency in advance when building a replication system.

That is, source data is extracted from the original table 210 and inserted into the source data transmission table 220.

In other words, data to be verified for consistency, that is, source data that serves as a standard for data consistency, is extracted from the source DBMS 100 and transmitted to the target DBMS 700 through the CDC replication solution.

This enables detailed and accurate consistency verification and correction by transmitting and comparing the source data itself.

Figure 3 is a block diagram showing the detailed configuration of the second consistency verification tool of the target DBMS in the ROW unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 3, the second consistency verification tool 600 includes a source data transmission table 610, a source data checksum table 620, a target table 630, and a target data checksum table 640. Includes CDC Master Agent 670.

Here, checksum refers to the total obtained by adding up each number of one number or a group, regardless of meaning, position, or weight.

This total is compared to a pre-determined value to prove that no error occurred.

In the present invention, the checksum of the source data and the checksum of the target table are compared in row units.

Additionally, the source data transmission table 220 of the first consistency verification tool 200 is the same table as the source data transmission table 610 of the second consistency verification tool 600.

That is, the source data transmission table 610 is a data reception table created to verify consistency in advance when building a replication system.

That is, the second consistency verification tool 600 generates the source data checksum table 620 from the source data transmission table 610 and the target data checksum table 630 of the replication data reflected in the target DBMS 700. Create table 640.

At this time, the source data checksum table 620 and the target data checksum table 640 may be temporarily created.

Consistency verification is performed by comparing the source data checksum table 620 and the target data checksum table 640 created in this way.

Here, consistency verification can be performed by a minus operation.

That is, after subtracting the target data checksum table 640 from the source data checksum table 620, the first temporary table 1 can be created by this subtraction.

Additionally, after subtracting the source data checksum table 620 from the target data checksum table 640, the second temporary table 2 can be generated by this subtraction.

Consistency verification is performed by comparing the first temporary table (1) and the second temporary table (2) created in this way.

At this time, the second consistency verification tool 600 compares the consistency verification results of the first temporary table 1 and the second temporary table 2, and the data checksum table with the source data through Delete or Insert. In the same way, data correction for target data can be performed.

CDC master agent 670 is a module that reports results through GUI.

This CDC master agent 670 can provide a GUI monitoring screen for data transmitted from the source.

Additionally, the CDC master agent 670 is capable of providing a GUI report screen for consistency verification results.

In other words, checksums of each of the data in the received source data table and target table are obtained to create a temporary table.

Data is compared (Minus) using a checksum, and data with inconsistent consistency is reflected in the target DBMS 700 in the form of SQL statements (Delete/Insert) based on the received source data to correct the target data.

In this way, in the row-level consistency verification mode, the second consistency verification tool 600 compares all values for each row of table data, enabling detailed and accurate consistency verification.

The source DBMS (100) extracts consistency verification data from the original data and transmits it to the target DBMS (700).

The target DBMS 700 compares the transmitted original data with the target data in row units and performs the role of correcting the target data based on the original data.

Figure 4 is a block diagram showing the detailed configuration of the first consistency verification tool of the source DBMS in the TABLE unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 4, in the TABLE unit consistency verification mode, the first consistency verification tool 200 includes an original table 210 and a table 230 for source checksum transmission.

The original table 210 is a table extracted in real time from the source DBMS 100.

The source checksum transmission table 230 is a replication-registered checksum transmission table created to verify consistency in advance when building a replication system.

The checksum for consistency verification is extracted from the source table 210 and inserted into the source checksum transmission table 230.

That is, when consistency verification is performed on a table basis, the checksum for consistency verification is extracted from the source table 210 and inserted into the source checksum transmission table 230.

In other words, the checksum of the table on which consistency verification is to be performed is extracted from the source DBMS 100 and transmitted to the target DBMS 700 through the CDC replication solution.

By transmitting only one checksum for all data in the table, consistency verification for the table can be compared at high speed.

Figure 5 is a block diagram showing the detailed configuration of the second consistency verification tool of the target DBMS in the TABLE unit consistency verification mode of the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 5, the second consistency verification tool 600 includes a target table 630, a target data checksum table 640, a source checksum transmission table 650, a source data table 660, and a CDC Includes a master agent 670.

Here, the source checksum transmission table 230 of the first consistency verification tool 200 is the same table as the source checksum transmission table 650 of the second consistency verification tool 600.

That is, the source checksum transmission table 650 is a checksum reception table created to verify consistency in advance when building a replication system.

The second consistency verification tool 600 creates a source data table 660 from the source checksum transmission table 650 and a target data checksum table 640 from the target table 630 of the replication data reflected in the target DBMS 700. ) is created.

Afterwards, consistency verification is performed by comparing the checksums of the generated source data table 660 and the target data checksum table 640.

The catalog table based on the checksum comparison results can be saved and the verification results can be checked through the UI.

In other words, the CDC master agent 670 is a module that reports results through a GUI.

This CDC master agent 670 can provide a GUI monitoring screen for data transmitted from the source.

Additionally, the CDC master agent 670 is capable of providing a GUI report screen for consistency verification results.

In other words, the checksum of the received source data is compared with the checksum of the target table to check for consistency.

In this way, in the table-level consistency verification mode, the second consistency verification tool 600 can verify table consistency at high speed by transmitting/receiving only one checksum value for all data in the table.

The source DBMS (100) extracts the checksum for the original table and transmits it to the target DBMS (700).

The target DBMS 700 extracts the checksum for the target table and verifies the table consistency by comparing it with the checksum of the transmitted original table.

Figure 6 is a block diagram showing consistency verification in the DBMS table consistency verification and correction system in a network partition environment according to the present invention.

Referring to FIG. 6, row-level consistency verification and table-level high-speed consistency verification are possible.

That is, in row-level consistency verification, consistency verification and correction are possible by comparing the hash values of the source table and the target table.

Additionally, in high-speed consistency verification at the table level, high-speed consistency verification is possible by comparing the hash values of the source table and the target table.

In this way, according to the present invention, in a network separation environment where direct communication between SW agents is not possible, consistency verification and correction are possible by transmitting only data that has completed security verification through a separate security verification server rather than direct communication between SW agents. There is an effect.

Above, various preferred embodiments of the present invention have been described by giving some examples, but the description of the various embodiments described in the "Detailed Contents for Carrying out the Invention" section is merely illustrative and the present invention Those skilled in the art will understand from the above description that the present invention can be implemented with various modifications or equivalent implementations of the present invention.

In addition, since the present invention can be implemented in various other forms, the present invention is not limited by the above description, and the above description is intended to make the disclosure of the present invention complete and is commonly used in the technical field to which the present invention pertains. It is provided only to fully inform those with knowledge of the scope of the present invention, and it should be noted that the present invention is only defined by each claim in the claims.

100: Source DBMS
200: First consistency verification tool
210: Original table
220: Table for source data transmission
230: Table for source checksum transmission
300: 1st CDC replication agent
400: Security verification system
410: Transmission storage
420 ; receiving storage
500: 2nd CDC replication agent
600: Second consistency verification tool
610: Table for source data transmission
620: Source data checksum table
630: target table
640: Target data checksum table
650: table for source checksum transmission
660: Source data table
670: CDC Master Agent
700: Target DBMS
1000: DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected

Claims (10)

In a network separation environment where the network between servers is disconnected,
Source DBMS; A security verification system that securely verifies change data transmitted from the DBMS; and a target DBMS in which replication data for which security verification has been completed from the security verification system is reflected; In order to verify the consistency of the replicated data, a DBMS table consistency verification and correction system in a network separation environment where the inter-server network is disconnected, including a first consistency verification tool that extracts source data for consistency verification from the source DBMS. ;
It further includes a second consistency verification tool that performs consistency verification and correction by comparing the source data with the replicated data reflected in the target DBMS;
further comprising a first CDC replication agent for uploading the source data to the secure verification system through an FTP connection;
Characterized in that it further comprises a second CDC replication agent that downloads the source data for which security verification has been completed from the security verification system through an FTP connection and then reflects it in the target DBMS,
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected. delete delete delete According to claim 1,
Characterized in that the consistency verification is performed on a row basis or table basis.
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.
According to claim 5,
The first consistency verification tool is,
When the consistency verification is performed on a row basis, source data is extracted from the original table and inserted into the source data transmission table.
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.
According to claim 6,
The second consistency verification tool is,
After creating a source data checksum table from the source data transmission table and a target data checksum table from the target table of the replicated data reflected in the target DBMS, the generated source data checksum table and the target data checksum table are Characterized by performing consistency verification by comparing each,
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.
According to claim 7,
The second consistency verification tool is,
As a result of the consistency verification, the data checksum table is characterized in that data correction is performed on the target data in the same way as the source data through deletion or insertion.
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.
According to claim 5,
The first consistency verification tool is,
When the consistency verification is performed on a table basis, the checksum for consistency verification is extracted from the original table and inserted into the source checksum transmission table.
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.
According to clause 9,
The second consistency verification tool is,
After creating a source data table from the source checksum transmission table and creating a target table checksum table from the target table of the replicated data reflected in the target DBMS, consistency is verified by comparing the generated source data table and the target data checksum table, respectively. Characterized by performing,
DBMS table consistency verification and correction system in a network separation environment where the network between servers is disconnected.

Images