WO2019182345A1

WO2019182345A1 - Method of automatically searching for and registering controlled application in distributed environment

Info

Publication number: WO2019182345A1
Application number: PCT/KR2019/003230
Authority: WO
Inventors: Geon Woo Lee; Young Joon Kang
Original assignee: Doi Labs. Inc.
Priority date: 2018-03-22
Filing date: 2019-03-20
Publication date: 2019-09-26
Also published as: KR101874418B1

Abstract

Disclosed is provided a method of automatically searching for and registering a controlled application in a distributed environment, the method including: (1) receiving, by the control service providing server, a parameter to transmit the parameter to the controlled server; (2) searching for, by the controlled server, the controlled application by using the parameter received at the step (1); and (3) extracting, by the controlled server, registration item information of the controlled application searched at the step (2) to transmit the registration item information to the control service providing server. With the method, all setting operations of a control service are automatically supported to provide an efficient integrated control service. Even though an administrator does not have expertise in related settings, it is possible to search for and register a controlled application easily and conveniently, and to efficiently provide a detailed control service for more items even in a distributed environment.

Description

METHOD OF AUTOMATICALLY SEARCHING FOR AND REGISTERING CONTROLLED APPLICATION IN DISTRIBUTED ENVIRONMENT

The present invention relates generally to a method of automatically searching for and registering a controlled application. More particularly, the present invention relates to a method of automatically searching for and registering a controlled application in a distributed environment.

Generally, in an information technology (IT) field, a control service means a service in which operation and management of customer's information technology resources are performed. Regarding this control service, demands for cloud technology have increased, so that operation and management services are provided for devices and applications on a network.

Simple Network Management Protocol (SNMP) is an Internet Standard protocol for collecting and managing information from devices on a network and for modifying settings to change device behavior. SNMP is widely used in network management because it supports remote management of states and settings of a system that is managed in a management information base (MIB). Here, each system runs a software element named agent to transmit information through SNMP.

However, SNMP has a problem that individual setting for the systems is complex and MIB codes vary with each version. Therefore, in order to change the settings of the systems through the network, it is necessary to access the systems individually and to set the systems individually according to the environment of the system. Particularly, the MIB code for detailed control needs to be installed by source compilation, so that the administrator needs to have expertise in related settings.

In order to solve this problem, generally, a control service enterprise uses its own developed agent. However, this agent needs to be manually set because setting information is not automatically set in conjunction with a server of the control service enterprise. Therefore, the administrator needs to install the agents individually on servers to be controlled and needs to manually set the same.

However, in this manual setting structure, it is difficult to actively respond to control and security environments. The manual setting structure is very inefficient in terms of maintenance because the more controlled servers, controlled applications, or log objects, the longer it takes to configure the control service. Therefore, the control service enterprise cannot provide more detailed control service in a distributed environment, such as a cloud service including multiple servers.

As described above, the conventional control service structure has a problem that quick response is impossible and the cost of introduction of the control service is enormous due to labor costs and time. Further, in a distributed environment, when the number of detailed control items increases, the number of setting items also increases in the conventional control service structure. Therefore, due to increase in labor costs and configuration time, it is impossible to provide proper services in the profit structure of the control service enterprise.

The present invention is intended to propose a method of automatically searching for and registering a controlled application in a distributed environment, wherein all setting operations of a control service, such as individual setting of a complex agent, an individual agent upgrade, and individual setting of a controlled application, are automatically supported to provide an efficient integrated control service.

Also, the present invention is intended to propose a method of automatically searching for and registering a controlled application in a distributed environment, wherein even though an administrator does not have expertise in related settings, it is possible to search for and register a controlled application easily and conveniently, and to efficiently provide a detailed control service for more items even in a distributed environment, such as a cloud service, which includes multiple servers.

According to an embodiment, there is provided a method of automatically searching for and registering a controlled application in a distributed environment, the method including:

(1) receiving, by a control service providing server, a parameter to transmit the parameter to a controlled server;

(2) searching for, by the controlled server, the controlled application by using the parameter received at the step (1); and

(3) extracting, by the controlled server, registration item information of the controlled application searched at the step (2) to transmit the registration item information to the control service providing server.

With the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment, all setting operations of a control service, such as individual setting of a complex agent, an individual agent upgrade, and individual setting of a controlled application, are automatically supported to provide an efficient integrated control service.

Also, with the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment, even though an administrator does not have expertise in related settings, it is possible to search for and register a controlled application easily and conveniently, and to efficiently provide a detailed control service for more items even in a distributed environment, such as a cloud service, which includes multiple servers.

FIG. 1 is a diagram illustrating a configuration of a system to which a method of automatically searching for and registering a controlled application in a distributed environment is applied according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating steps S100 to S300 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 3 is a diagram illustrating, in terms of each performer, steps S100 to S300 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 4 is a diagram illustrating steps S400 to S700 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 5 is a diagram illustrating, in terms of each performer, steps S400 to S700 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 6 is a diagram illustrating an operation of searching for and registering a controlled application in multiple controlled servers in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a configuration of a database module in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

FIG. 8 is a diagram illustrating a configuration of an agent in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention.

It is noted that the present invention is not limited to the following embodiments and may be embodied in different ways. The embodiments are given to provide complete disclosure of the invention and to provide a thorough understanding of the invention to those skilled in the art.

The terms used in the present specification are merely used to describe the embodiments, and are not intended to limit the present invention. In this specification, it is noted that the term “comprise”, and the like specify the presence of combinations of states features, and the like, but does not preclude the presence of addition of one or more other features, or combinations thereof.

Hereinbelow, when the detailed description of known configurations of functions related with the present invention are obvious to those skilled in the art, the detailed description thereof will be omitted if they may make the gist of the present invention unclear.

FIG. 1 is a diagram illustrating a configuration of a system to which a method of automatically searching for and registering a controlled application in a distributed environment is applied according to an embodiment of the present invention. As shown in FIG. 1, the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention may be performed in a control service providing server 100 and a controlled server 200. Here, the distributed environment may include an environment in which multiple single servers or cloud servers run.

The control service providing server 100 may provide control services for multiple controlled servers 200 in a distributed environment and a controlled application running on the controlled server 200. The control service providing server 100 may transmit and receive data from the controlled server 200 over a network, and may make a request for searching for a controlled application running on the controlled server 200, and may register the controlled application. The control service providing server 100 may use registration item information on the registered controlled application to control the controlled application. Further, the control service providing server 100 may monitor a system of the controlled server.

The control service providing server 100 may be provided with an agent installed thereon, which has instructions in which the method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention is implemented. Accordingly, the user is able to monitor a system of the controlled server 200 through the agent by the control service providing server 100, or is able to control controlled applications running on multiple controlled servers 200 in an integrated manner by searching for and registering the controlled applications.

The controlled server 200 may be a server on which the controlled application runs. The controlled server 200 may transmit and receive data from the control service providing server 100 over a network to search for a controlled application installed thereon. Further, the setting of the system or the installed controlled application may be changed according to a request from the control service providing server 100.

The controlled server 200 may be provided with an agent installed thereon, which has instructions in which the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention is implemented. Therefore, when receiving the request for searching for the controlled application from the service providing server 100, the controlled server 200 searches for the controlled application through the agent. Further, the controlled server 200 may generate system data (CPU, memory, disk, disk input/output, and network traffic) and system log data.

There may be multiple controlled servers 200. Therefore, in the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, the user uses the control service providing server 100 to search for and register the controlled applications running on the multiple controlled servers 200 at once. That is, an integrated control service may be provided in a distributed environment including the multiple controlled servers 200.

In this specification, examples of the network may include a wide-area network (WAN), a local area network (LAN), a personal area network (PAN), and a mobile radio communication network. Here, data transmitted and received over the network between the control service providing server 100 and the controlled server 200 may be encrypted.

FIG. 2 is a diagram illustrating steps S100 to S300 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. As shown in FIG. 2, according to the embodiment of the present invention, there is provided a method of automatically searching for and registering a controlled application in a distributed environment that includes the control service providing server 100 providing the control service and the multiple controlled servers 200 with controlled applications installed, the method may include: (1) receiving, by the control service providing server 100 at step S100, a parameter to transmit the parameter to the controlled server 200; (2) searching for, by the controlled server 200 at step S200, the controlled application by using the parameter received at step S100; and (3) transmitting, by the controlled server 200 at step S300, registration item information of the controlled application searched at step S200 to the control service providing server 100. Hereinafter, each configuration of steps S100 to S300 in the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention will be described in detail.

FIG. 3 is a diagram illustrating, in terms of each performer, steps S100 to S300 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. Referring to FIG. 3, at step S100, the control service providing server 100 may receive a parameter and may transmit the parameter to the controlled server 200. At step S100, the control service providing server 100 may receive the parameter from the user. Here, the parameter may include at least one among a process name of an application, a process network port of an application, a resource usage request keyword, an application service name, and application vendor name. This parameter may be used as information for searching for the controlled application in the controlled server 200.

The process may be an application running on the controlled server 200. Hereinafter, the term “application” may be used as the meaning that includes “a process” running on the controlled server 200.

At step S100, the parameter may be transmitted to all of the multiple controlled servers 200. That is, at step S100, the control service providing server 100 may transmit the parameter to one of the multiple controlled servers 200 individually, or may transmit the parameter to all of the multiple controlled servers 200 at once. Accordingly, for the user, it is possible to search for a controlled application in a particular controlled server 200, or it is possible to search for a controlled application in all the multiple controlled servers 200 at once.

At step S200, the controlled server 200 may uses the parameter received at step S100 to search for the controlled application. Here, at step S200, the controlled server 200 may search for the controlled application using at least one among the process name of the application, the process network port of the application, the resource usage, the application process name of the application, and the application vendor name according to the parameter.

At step S200, the process name of the application, a process identifier (PID), and a parent process ID (PPID) that are in use by an OS kernel of the controlled server 200 are used to trace the process network port of the application. That is, when the control service providing server 100 receives the parameter including the process network port of the application from the user, the controlled server 200 uses the process network port of the application to search for the controlled application. For example, when the control service providing server 100 receives “80” as the process network port of the application from the user, the controlled server 200 traces the process network port of the application and searches for a controlled application using “80” as the process network port at step S200.

When the control service providing server 100 receives a parameter including the process name of the application from the user, the controlled server 200 uses the process name of the application included in the parameter to search for the controlled application at step S200. At step S200, a method of searching for the controlled application using the application service name or the application vendor name may also be applied in the same manner. For example, when receiving a parameter including a keyword, such as “web”, “database”, or “mail”, the controlled application of which the service name of the application corresponds to the keyword is searched at step S200. Further, when receiving a parameter including a keyword, such as “Tomcat”, and “Oracle”, the controlled application of which the application vendor name corresponds to the keyword is searched at step S200.

When the control service providing server 100 receives parameters including the process name of the application and the process network port of the application, the controlled server 200 uses both the process name of the application and the process network port of the application that are included in the parameters to search for the controlled application.

When the control service providing server 100 receives the parameter including the resource usage request keyword from the user, the controlled server 200 arranges applications in order of resource usage to search for the controlled application at step S200. Here, the resource usage request keyword may be a pre-determined keyword for requesting the resource usage of the application installed on the controlled server 200. That is, at step S200, the controlled server 200 may search for an application that uses the most resources. Here, the resources may include CPU usage or memory usage. However, without being limited thereto, the resources may include resource usage of other systems depending on the user's request.

That is, at step S200, the controlled server 200 may search for the controlled application by combining the process name of the application, the process network port of the application, the resource usage, the application service name, and the application vendor name.

At step S300, the controlled server 200 may extract registration item information of the controlled application searched at step S200 to transmit the registration item information to the control service providing server 100. Here, the registration item information may be information used for controlling the controlled application. That is, the registration item information may include system information of the controlled server 200 on which the controlled application is installed, and information on states and settings of the controlled application. Accordingly, the control service providing server 100 may use the registration item information of the controlled application extracted at step S300 to check the state of the controlled application running on the controlled server 200 or to control the setting of the same.

More specifically, at step S300, the controlled server 200 may check at least one among the name of the controlled application, the user who starts the controlled application, a command line of the controlled application, the type (fork or thread) of controlled application, information on a file that the controlled application executes, the protocol type (TCP or UDP) of controlled application, and the network port of the controlled application. Accordingly, at step S300, the controlled server 200 may extract the registration item information of the controlled application searched at step S200.

Particularly, the registration item information may vary according to the type of controlled application searched at step S200. The state to be checked and the setting that may be changed vary according to the type of controlled application. Accordingly, at step S300, the controlled server 200 may extract the registration item information according to the type of controlled application. For example, when the type of controlled application corresponds to the fork, registration item information for controlling the application of the fork type is extracted. However, when the type of controlled application corresponds to the thread, registration item information for controlling the application of the thread type is extracted.

More specifically, at step S300, an OS kernel of the controlled server 200 is inquired to trace a parent process of the process of the controlled application, and the type of controlled application is detected using the process identifier (PID) and the parent process ID (PPID) of the parent process. The controlled application running on the controlled server 200 has, as a standard structure, a standard process structure, a multi fork process structure, or a thread structure, so that the type of controlled application is detected by back-tracing the structure of the application in the OS kernel.

Particularly, at step S300, a packet of the process network port of the controlled application may be analyzed to automatically determine whether the controlled application corresponds to a web service. At step S300, when analyzing the packet that is transmitted and received through the process network port of the application by using header information, the controlled server 200 is able to determine whether the controlled application corresponds to the web service. Here, at step S300, it is possible to analyze the packet that is transmitted and received through the process network port of the application traced at step S200. Accordingly, at step S300, when the controlled application corresponds to a web service, detailed registration item information for controlling the web service is extracted.

Further, at step S300, the process name of the controlled application may be used to automatically determine whether the controlled application corresponds to a database service. When the process name of the application corresponding to the database service is determined according to a pre-determined rule, whether the controlled application corresponds to the database service is automatically determined using the pre-determined rule at step S300. Alternatively, at step S300, whether the controlled application corresponds to the database service may be automatically determined by inquiring a database module that stores whether the controlled application corresponds to the database service according to the process name of the application. Accordingly, at step S300, when the controlled application corresponds to the database service, detailed registration item information for controlling the database service is extracted.

In the meantime, the controlled server 200 may collect the search keyword included in the parameter and the registration item information of the controlled application according to the search keyword, and may transmit the controlled application and the registration item information that are pre-determined according to the search keyword, to the control service providing server 100. More specifically, at step S200, a parameter including a particular keyword that is input from multiple users and a particular controlled application searched using the keyword are collected in an accumulative manner. Further, at step S300, the registration item information of the searched particular controlled application may be collected in an accumulative manner. When using the data collected in an accumulative manner at steps S200 and S300, a particular controlled application searched using a particular keyword and registration item information corresponding thereto are pre-determined. The pre-determined registration item information may be registration item information extracted by analyzing a particular controlled application that is searched using a particular keyword. Accordingly, when the user inputs a parameter including the particular keyword, a controlled application that is pre-determined with respect to the keyword is found at step S200, and registration item information that is pre-determined for the controlled application is extracted at step S300.

As the IT market develops rapidly, numerous applications are developed and updated. Therefore, in response to the developed and updated applications, an active control service needs to be provided. In the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, data of a controlled application that is searched using a particular keyword common to multiple users, and a pre-determined registration item information may be extracted. Therefore, in response to the developed and updated applications in the rapidly changing IT market, active and detailed control services may be provided.

In the meantime, referring to FIG. 3, the control service providing server 100 may output the registration item information received at step S300. This registration item information may be output through WEB or the agent installed on the control service providing server 100. Therefore, the user is able to check the controlled application and the registration item information that are searched according to the input parameter.

FIG. 4 is a diagram illustrating steps S400 to S700 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. As shown in FIG. 4, the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention may further include: (4) registering, by the control service providing server 100 at step S400, at least one controlled application by using the registration item information received at step S300; (5) searching for, by the control service providing server 100 at step S500, the registration item information in the controlled application registered at step S400 and receiving a setting value for the searched registration item information to transmit the setting value to the controlled server 200; (6) storing, by the controlled server 200 at step S600, the setting value received at step S500 in a memory of the controlled server 200 and transmitting a storage value stored in the memory to the control service providing server 100; and (7) updating, by the control service providing server 100 at step S700, the registration item information by using the storage value received at step S600. Hereinafter, each configuration of steps S400 to S700 in the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention will be described in detail.

FIG. 5 is a diagram illustrating, in terms of each performer, steps S400 to S700 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. Referring to FIG. 5, at step S400, the control service providing server 100 may register at least one controlled application using the registration item information received at step S300. That is, the control service providing server 100 may register the controlled application searched in the controlled server 200. When multiple controlled applications are searched, the control service providing server 100 registers the controlled application selected by the user. Here, the registration item information of the controlled application may be matched with the controlled application and may be registered in the control service providing server 100.

FIG. 6 is a diagram illustrating an operation of searching for and registering a controlled application in multiple controlled servers 200 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. In the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, a controlled application may be searched and registered in multiple controlled servers 200 at once. In the example shown in FIG. 6, it is assumed that an application 1 which is a controlled application, is installed on all of a controlled server 1, a controlled server 2, and a controlled server 3. At step S100, the control service providing server 100 may transmit a parameter to all of the controlled server 1, the controlled server 2, and the controlled server 3. Then, each of the controlled server 1, the controlled server 2, and the controlled server 3 may search for an application 1 installed thereon to extract registration item information, and may transmit the resulting information(the extracted registration item information) to the control service providing server 100. Next, the control service providing server 100 may register the application 1 installed on each of the controlled server 1, the controlled server 2, and the controlled server 3, at once.

The conventional control service is unable to set multiple controlled servers 200 at once, so that it manually sets multiple controlled servers individually. However, in the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, controlled applications may be searched and registered individually or at once according to the method of transmitting the parameter to the controlled server 200 at step S100. Accordingly, without expertise of the user in related settings, it is possible to easily search for and register a controlled application in a distributed environment including multiple controlled servers 200.

Particularly, at step S400, the control service providing server 100 may store registration item information of the controlled application in the database module. This database module may be included in the control service providing server 100. However, depending on an embodiment, the database module may be included in a separate server.

FIG. 7 is a diagram illustrating a configuration of a database module in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. At step S400, according to a user account pre-stored in the database module, the registration item information of the controlled application may be stored. Accordingly, at step S400, even when searching for controlled applications by multiple users, the controlled application is registered according to each user account. In the example shown in FIG. 7, it is assumed that there are “a user A” and “a user B” as user accounts pre-stored in the database module. Further, it is assumed that user A receives and selects the result of searching for application 1, application 2, and application 3 in “the controlled server 1 (200)”. Further, it is assumed that the user B receives and selects the result of searching for application 1 in “the controlled server 1 (200)” and for application 4 and application 5 in “the controlled server 2 (200)”. Referring to FIG. 6, at step S400, registration item information of application 1, application 2, and application 3 that are selected by the user A is registered in the user A's account of the database module. Registration item information of application 1, application 4, and application 5 that are selected by the user B is registered in the user B's account. Accordingly, even in a distributed environment with multiple controlled servers 200, the user A and the user B are able to search for and register controlled applications individually.

At step S500, the control service providing server 100 may search for registration item information in the controlled application registered at step S400, and may receive a setting value for the searched registration item information to transmit the result(the received setting value) to the controlled server 200 on which the controlled application is installed. Since the registration item information of the controlled application is matched with the controlled application and registered in the control service providing server 100, the control service providing server 100 may search for registration item information of the controlled application selected by the user among the controlled applications registered at step S400. Further, the control service providing server 100 may use the searched registration item information to transmit the setting value received from the user to the controlled server 200 on which the controlled application is installed.

At step S600, the controlled server 200 may store the setting value received at step S500 in the memory of the controlled server 200, and may transmit the storage value in the memory to the control service providing server 100. That is, the controlled server 200 may directly make the setting value for the controlled application running on the controlled server 200 resident on a memory of the controlled server 200. Therefore, in method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, the controlled server 200 stores the setting value in the memory of the controlled server 200, so that unlike the conventional control service, a separate setting file for storing the setting value is not generated. Accordingly, without modifying the setting file by the user, control of the controlled application of the controlled server 200 may be automatically performed in the control service providing server 100.

At step S600, the controlled server 200 may transmit the storage value, which is the setting value stored in the memory, to the control service providing server 100. That is, the setting value may correspond to an input value for registration item information of a controlled application, which is received from the user, and the storage value may correspond to an output value applied to the controlled application running on the controlled server 200.

At step S700, the control service providing server 100 may update the registration item information using the storage value that is received at step S600. At step S700, when the setting value is stored rather than the storage value, it does not match with the storage value stored in the memory of the actual controlled server 200, which may result an error in controlling the controlled application. For example, it is assumed that a value of one variable of the registration item information of the controlled application searched at step S500 is “A” and the user has inputted “B” as the setting value for the variable. Here, a case in which during transmission of the setting value “B” to the controlled server 200 at step S500, the setting value “B” to be changed is not stored in the memory of the actual controlled server 200 due to the network error may occur. That is, when “A” is stored in the memory of the actual controlled server 200 rather than “B”, the setting value (namely, “B”) does not match with the storage value (namely, “A”) stored in the memory. In other words, at step S700, the control service providing server 100 may update the registration item information using the storage value stored in the actual controlled server 200, and the registration item information updated by the control service providing server 100 may be based on the storage value. That is, the registration item information updated by the control service providing server 100 may be updated only when the registration item information is actually changed on the controlled server 200.

In the meantime, referring to FIG. 5, the control service providing server 100 may output the storage value that is received at step S600. This registration item information may be output through WEB or the agent installed on the control service providing server 100. Accordingly, the user may check whether the input setting value is applied to the actual controlled server 200.

FIG. 8 is a diagram illustrating a configuration of an agent 300 in a method of automatically searching for and registering a controlled application in a distributed environment according to an embodiment of the present invention. The agent 300 may be installed on the control service providing server 100 and on the controlled server 200. The agent 300 may have instructions in which the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention is implemented.

Referring to FIG. 8, the agent 300 may include a system control module 310, a system log control module 311, an application search module 312, an application control module 313, an application log control module 314, a security control module 315, a web service control module 316, a database control module 317, and a host firewall management module 318. Particularly, the agent 300 installed on the controlled server 200 may generate control data for the controlled server 200 and the controlled application, which is generated by each module, and transmit the control data to the control service providing server 100. Accordingly, the control service providing server 100 may provide, through the agent 300 installed on the control service providing server 100, control services for normal operation of the application running on the controlled server 200, redundant execution, the CPU usage for each process type, the memory usage, a fork process count state, a thread process count state, port listen state normality, an application network simultaneous access state, a web service state, and a database query state.

Further, the agent 300 may further include an alarm module 319. The alarm module 319 may give an alarm when failure, overload, and recovery states of the controlled application occur. Further, the alarm module 319 may generate a report on failure, overload, and recovery states of the controlled application. Failure and overload states of the controlled application may be detected by control data generated in the system control module 310, the system log control module 311, the controlled application search module 312, the controlled application control module 313, the controlled application log control module 314, the security control module 315, the web service control module 316, the database control module 317, and the host firewall management module 318 of the agent 300. Therefore, the control service providing server 100 may determine failure, overload, and recovery states of the controlled application by using the control data received from the agent 300 that is installed on the controlled server 200.

According to the embodiment, the alarm module 319 may be included in the agent 300 that is installed on the control service providing server 100. Therefore, the alarm module 319 may provide the user with a service to inform of failure, overload, and recovery states of the controlled application in an integrated manner, and to generate a report thereon in the control service providing server 100.

The controlled server 200 may receive upgrade information from the control service providing server 100 to upgrade the agent 300 installed on the controlled server 200. When agent upgrade information is uploaded to the control service providing server 100, the controlled server 200 receives an agent upgrade file to upgrade the agent 300. Therefore, in the case in which the upgrade of the agent 300 is required according to the development of the additional control service, when uploading upgrade information only to the control service providing server 100, upgrade of the agent 300 installed on the controlled server 200 is also executed. That is, unlike the conventional method, it is unnecessary to upgrade the agents 300 on the controlled servers 200 individually, and the agents 300 may be upgraded at once in a distributed environment.

In the method of automatically searching for and registering a controlled application in a distributed environment according to the embodiment of the present invention, the control service providing server 100 may provide a system control service (CPU, memory, disk, disk input/output, and network traffic) of the multiple controlled servers 200 and a system log control service. Further, integrated monitoring and control functions for the multiple controlled servers 200 may be provided with control of the controlled application, controlled application log control, security control, web service control, database control, and host firewall control services. Particularly, operations of searching for and registering the controlled application to provide a control service are automated, so that all settings for the multiple controlled servers 200 may be controlled at once by the control service providing server 100.

The embodiments disclosed in this specification are illustrative only, and the present invention may be embodied with various modifications by those skilled in the art. Therefore, the scope of the present invention is not limited to the description and the expression in the disclosed embodiments.

Description of main reference numerals of drawings

100: Control service providing server

200: Controlled server

300: Agent

310: System control module

311: System log control module

312: Controlled application search module

313: Controlled application control module

314: Controlled application log control module

315: Security control module

316: Web service control module

317: Database control module

318: Host firewall control module

319: Alarm module

S100: Receiving, by control service providing server, parameter to transmit parameter to controlled server

S200: Searching for, by controlled server, controlled application by using parameter received at step S100

S300: Transmitting, by controlled server, registration item information of controlled application searched at step S200 to control service providing server

S400: Registering, by control service providing server, at least one controlled application by using registration item information received at step S300

S500: Searching for, by control service providing server, registration item information in controlled application registered at step S400 and receiving setting value for searched registration item information to transmit setting value to controlled server

S600: Storing, by controlled server, setting value received at step S500 in memory of controlled server and transmitting storage value stored in memory to control service providing server

S700: Updating, by control service providing server, registration item information by using storage value received at step S600

Claims

A method of automatically searching for and registering a controlled application in a distributed environment that includes a control service providing server providing a control service and multiple controlled servers with controlled applications installed, the method comprising:

(1) receiving, by the control service providing server, a parameter to transmit the parameter to the controlled server;

(2) searching for, by the controlled server, the controlled application by using the parameter received at the step (1); and

(3) extracting, by the controlled server, registration item information of the controlled application searched at the step (2) to transmit the registration item information to the control service providing server.
The method of claim 1, wherein at the step (1), the parameter is transmitted to all of the multiple controlled servers.
The method of claim 1, wherein at the step (2), according to the parameter, at least one among a process name of an application, a process network port of an application, resource usage, an application service name, and an application vendor name is used to search for the controlled application.
The method of claim 3, wherein at the step (2), the process name of the application, a process identifier (PID), and a parent process ID (PPID) that are in use by an OS kernel of the controlled server are used to trace the process network port of the application.
The method of claim 1, wherein the registration item information varies according to a type of the controlled application searched at the step (2).
The method of claim 5, wherein at the step (3), an OS kernel of the controlled server is inquired to trace a parent process of a process of the controlled application, and the type of the controlled application is detected using a process identifier (PID) and a parent process ID (PPID) of the parent process.
The method of claim 5, wherein at the step (3), a packet of a process network port of the controlled application is analyzed to automatically determine whether the controlled application corresponds to a web service.
The method of claim 5, wherein at the step (3), a process name of the controlled application is used to automatically determine whether the controlled application corresponds to a database service.
The method of claim 1, wherein the controlled server collects a search keyword included in the parameter and the registration item information of the controlled application according to the search keyword, and transmits the controlled application and the registration item information that are pre-determined according to the search keyword, to the control service providing server.
The method of claim 1, further comprising:

(4) registering, by the control service providing server, at least one controlled application by using the registration item information received at the step (3).
The method of claim 10, wherein at the step (4), the control service providing server stores the registration item information of the controlled application in a database module according to a pre-stored user account.
The method of claim 10, further comprising:

(5) searching for, by the control service providing server, the registration item information in the controlled application registered at the step (4) and receiving a setting value for the searched registration item information to transmit the setting value to the controlled server on which the controlled application is installed.
The method of claim 12, further comprising:

(6) storing, by the controlled server, the setting value received at the step (5) in a memory of the controlled server and transmitting a storage value stored in the memory to the control service providing server.
The method of claim 13, further comprising:

(7) updating, by the control service providing server, the registration item information by using the storage value received at the step (6).
The method of any one of claims 1 to 14, wherein an agent, in which the control service is implemented, is installed on the control service providing server and the controlled server.
The method of claim 15, wherein the controlled server receives upgrade information from the control service providing server to upgrade the agent installed on the controlled server.