基于Oracle分布式数据库远程数据的维护和安全性的研究
|
摘要
随着社会和计算机技术的发展，数据信息的存储越来越离不开数据库系统的支持，而Oracle数据库以其强大的数据处理能力，从众多数据库系统中脱颖而出，在各行各业得到了广泛的应用，尤其在很多电子商务和电子政务的大型系统中。所以我就提出了“基于Oracle分布式数据库远程数据的维护和安全性的研究”这样一个研究课题，并且结合实际项目进行了一定的研究，对一些关键技术进行了实现，为以后更好的进行系统开发做一个铺垫。
“Oracle分布式数据库远程数据的维护和安全性的研究”要解决的关键技术有多层次架构的实现与如何组织、工作流技术在办公自动化中如何实现、信息加密与保护技术的实现、业务监控与审计技术、信息保护和共享技术等地实现是解决这一问题的基本要素。所以本文从这几个关键技术入手，从软件工程的角度出发，结合多个实际项目和以前开发的系统为基础，从系统设计的基本思想、思路出发，结合一些基本依据分别以组件中间件、多媒体大数据对象、数据库的链接与快照、分布式数据库数据的处理、分布式数据库数据的安全问题、数据库的备份和恢复以及数据审计等具体问题进行比较详细的论述，并且将得到研究结果在项目和系统中予以实现加以验证。
多层次架构的实现，我们在实际项目中采用Oracle的中间层服务9ias来实现，在论述中描述了Oracle9iAS的体系结构，并且用EJB来加强数据库链接的安全性；多媒体大对象的维护我们通过对其进行研究，发现其特殊性，采用OracleDBMS_LOB包中的PL／SQL过程来对其进行实现，并且用加密的形式存储在数据库中；分布式数据库的数据的同步问题，是我们在项目开发过程中常常碰到的一个问题，对此问题我们采用了Oracle数据库中的快照来进行实现。在实现中对数据传输过程中的数据进行加密传送；分布式数据库的维护中数据库的备份和恢复是一个必须面对的问题，虽然只有数据库出现故障时，才会用到它，但是备份是保证数据库正常运行的不可缺少的一个功能；对于数据库的安全可能大家对这个问题的认识，远没有操作系统的安全那么重要，但是当数据库里存储的数据涉及商业机密信息时，一旦被盗用，由此将产生不可估量的损失。本文针对这一现象
广东工业大学工学硕士学位论文
提出了基于Oracle数据库的数据安全性研究及解决方案并在开发的系统中予以实
现。
Oracle 分布式数据库远程数据的维护和安全性是一个很重要也很现实的问
题，对文中所举示例都在 Oracle st 8．1．7和 Oraclegi 9．2刀．4，OraclegiAS 9．0．4中
得到实现，并且在所开发的项目和系统中得到验证。
Along with the development of the society and the computer technologies, the storage of data information can not get away from the sustainment of database system. The database system of Oracle has powerful abilities for data management which talent showing itself. Now the application of Oracle database has been widely introduced into broad areas, and particularly in most systems for the electronic commerce and electronic governmental affairs. Therefore I raised such an issue as the maintenance and safety research of remote data based on Oracle Distributed Database, and did some researches on this topic to certain extension and implements some key technologies, for better system development hereafter.
The key technologies, in my research, include how to organize and implement "Multi-Layered" structures, how to achieve "Work Flow" in "Office Automatization", how to implement the technology on the information communion, encryption and protection, the technology on business guidance and audit, and the technology on the information protection and sharing. This article starts with and dissertate these key technologies such as Middle Component, multimedia large object, connection and snap shop of database, data transactions of distributed databases, data security issue in distributed databases, data backup and recovery of databases and data audit in detail. The discussion would be done combining with some practical projects and previously developed systems from the software engineering point of view and achieve research results which had been applied and validated in the projects and systems.
In the practical project, we adopt the Oracle Middle Layer Service 9ias to implement multi-layer structures. We described the Oracel9iAS system construction in the treatise, and the strengthened safety characteristic of the Database Connection by using EJB; We discovered the specialty on Multimedia Large Object through the maintenance on it, found that it is implemented by adopting PL/SQL process in the Oracle DBMS_LOB package and stored its encrypted data form in the database. In our
development process, we usually met with the problem with data synchronous in distributed databases. To solve this, we adopted the snap shot function provided by the Oracle database. It is essential for distributed databases to have backup and recovery functions to ensure it is properly running, though they are only be invoked when problems occur in database. The database's safety issue is not cognized as much important as operating system's. However, in case of the datum in the database involved some business secret information, once they were stolen, the potential loss would be considerable. Therefore, I aimed at this phenomenon to bring up a research in my thesis according to the data safety in Oracle database and provided practical solutions which have been implemented in the developed system.
The maintenance and safety on remote data of Oracle Distributed Database are every important and realistic problem. All examples in my article are tested in Oracle 8i 8.1.7, Oracel9i 9.2.0.4 and Oracel9iAS, and verified in the developing projects and systems.
“Oracle分布式数据库远程数据的维护和安全性的研究”要解决的关键技术有多层次架构的实现与如何组织、工作流技术在办公自动化中如何实现、信息加密与保护技术的实现、业务监控与审计技术、信息保护和共享技术等地实现是解决这一问题的基本要素。所以本文从这几个关键技术入手，从软件工程的角度出发，结合多个实际项目和以前开发的系统为基础，从系统设计的基本思想、思路出发，结合一些基本依据分别以组件中间件、多媒体大数据对象、数据库的链接与快照、分布式数据库数据的处理、分布式数据库数据的安全问题、数据库的备份和恢复以及数据审计等具体问题进行比较详细的论述，并且将得到研究结果在项目和系统中予以实现加以验证。
多层次架构的实现，我们在实际项目中采用Oracle的中间层服务9ias来实现，在论述中描述了Oracle9iAS的体系结构，并且用EJB来加强数据库链接的安全性；多媒体大对象的维护我们通过对其进行研究，发现其特殊性，采用OracleDBMS_LOB包中的PL／SQL过程来对其进行实现，并且用加密的形式存储在数据库中；分布式数据库的数据的同步问题，是我们在项目开发过程中常常碰到的一个问题，对此问题我们采用了Oracle数据库中的快照来进行实现。在实现中对数据传输过程中的数据进行加密传送；分布式数据库的维护中数据库的备份和恢复是一个必须面对的问题，虽然只有数据库出现故障时，才会用到它，但是备份是保证数据库正常运行的不可缺少的一个功能；对于数据库的安全可能大家对这个问题的认识，远没有操作系统的安全那么重要，但是当数据库里存储的数据涉及商业机密信息时，一旦被盗用，由此将产生不可估量的损失。本文针对这一现象
广东工业大学工学硕士学位论文
提出了基于Oracle数据库的数据安全性研究及解决方案并在开发的系统中予以实
现。
Oracle 分布式数据库远程数据的维护和安全性是一个很重要也很现实的问
题，对文中所举示例都在 Oracle st 8．1．7和 Oraclegi 9．2刀．4，OraclegiAS 9．0．4中
得到实现，并且在所开发的项目和系统中得到验证。
Along with the development of the society and the computer technologies, the storage of data information can not get away from the sustainment of database system. The database system of Oracle has powerful abilities for data management which talent showing itself. Now the application of Oracle database has been widely introduced into broad areas, and particularly in most systems for the electronic commerce and electronic governmental affairs. Therefore I raised such an issue as the maintenance and safety research of remote data based on Oracle Distributed Database, and did some researches on this topic to certain extension and implements some key technologies, for better system development hereafter.
The key technologies, in my research, include how to organize and implement "Multi-Layered" structures, how to achieve "Work Flow" in "Office Automatization", how to implement the technology on the information communion, encryption and protection, the technology on business guidance and audit, and the technology on the information protection and sharing. This article starts with and dissertate these key technologies such as Middle Component, multimedia large object, connection and snap shop of database, data transactions of distributed databases, data security issue in distributed databases, data backup and recovery of databases and data audit in detail. The discussion would be done combining with some practical projects and previously developed systems from the software engineering point of view and achieve research results which had been applied and validated in the projects and systems.
In the practical project, we adopt the Oracle Middle Layer Service 9ias to implement multi-layer structures. We described the Oracel9iAS system construction in the treatise, and the strengthened safety characteristic of the Database Connection by using EJB; We discovered the specialty on Multimedia Large Object through the maintenance on it, found that it is implemented by adopting PL/SQL process in the Oracle DBMS_LOB package and stored its encrypted data form in the database. In our
development process, we usually met with the problem with data synchronous in distributed databases. To solve this, we adopted the snap shot function provided by the Oracle database. It is essential for distributed databases to have backup and recovery functions to ensure it is properly running, though they are only be invoked when problems occur in database. The database's safety issue is not cognized as much important as operating system's. However, in case of the datum in the database involved some business secret information, once they were stolen, the potential loss would be considerable. Therefore, I aimed at this phenomenon to bring up a research in my thesis according to the data safety in Oracle database and provided practical solutions which have been implemented in the developed system.
The maintenance and safety on remote data of Oracle Distributed Database are every important and realistic problem. All examples in my article are tested in Oracle 8i 8.1.7, Oracel9i 9.2.0.4 and Oracel9iAS, and verified in the developing projects and systems.
引文
[1]．刘谦等译．Oracle8i SQL编程指南．北京：机械工业出版社，2000．
[2]．武欣等译．Oracle8i Java组件编程．北京：机械工业出版社，2002．
[3]．田勇等著．最新JBuilder开发人员指南．北京：机械工业出版社，2001．
[4]．王华驹等译．Oracle Developer使用指南．北京：机械工业出版社，2000．
[5]. Oracle JavaServer Pages Developer's Guide and Reference. Part No A83726-01
[6]．Joe Greene. Oracle 8 服务器技术精粹[M]．北京：清华大学出版社，1999．
[7]．William G Page. Oracle 8/8i开发使用手册[M]．北京：机械工业出版社，2000．
[8]．Gorge Koch. Oracle8完全参考手册[M]．北京：机械工业出版社，1998．
[9]．王孝忱．Oracle数据库管理实务，北京：人民邮电出版社，2001年
[10]．王兰成等译，Oracle数据库管理员基础教授．北京：机械工业出版社，2000年
[11]．付继彬等，Oracle8入门与提高，北京：清华大学出版社，2000年
[12]．(美)Kevin Loney. Oracle DBA Handbook．李晓军译．北京：机械工业出版社，1998
[13]. Oracle8 Replication[Oracle Documents for DBA].
[14]．Steve B．Oracle8i for Linux使用指南[M]．北京：机械工业出版社，2001．
[15]．Sumit S. Oracle数据库管理员技术指南[M]．北京：机械工业出版社，2001．
[16]．Kevin L, Marlene T. Oracle8i数据库管理员手册[M]．北京：机械工业出版社，2000．
[17]．http://www.Oraclefan.net/ [Oracle爱好者之家论坛]
[18]．http://www.Oracle.com/ [Oracle公司网站]
[19]．Oracle应用服务器和中间件构想．Oracle技术白皮书，2002．10
[20]．Oracle InterMedia：管理多媒体内容．Oracle技术白皮书，2001．3
[21]．John Heimann.Oracle9i应用服务器第二版的安全性．Oracle公司
[22]．Oracle 9i Data Guard. Oracle技术白皮书，2001．7
[23]．Oracle 9i应用服务器：Oracle Forms Services. Oracle技术白皮书，2000．11
[24]. Oracle 8i Oracle Servlet Engine Release Notes.
[25]. Oracle8i Java Stored Procedures Developer's Guide Release 2 (8.1.6).
[26]. Oracle8i JDBC Developer's Guide and Reference Release 3 (8.1.7).
[27]. Oracle8i Supplied Java Packages Reference Release 3 (8.1.7).
[28]. PL/SQL User's Guide and Reference Release 8.1.6.
[29]. Oracle8i Enterprise JavaBeans Developer's Guide and Reference Release 3(8.1.7).
[30]. Oracle8i Application Developer's Guide - Large Objects (LOBs) Using Java Release 2 (8.1.6).
[31]. Oracle8i Application Developer's Guide - Advanced Queuing.
[32]．Oracle超级查找体系结构技术．Oracle技白皮书，2001．5
[33]．(美)Bradley D．Brown等著．Oracle9i Web开发指南．武欣等译．北京：机械工业出版社，2003
[34]．李昭原，罗晓沛．数据库新技术[M]．北京：清华大学出版社，1997．
[35]．(美)Dr. Paul Dorsey, Peter Koletzke著．Oracle JDeveloper 3使用手册．周琦，宋琳等译．北京：机械工业出版社，2002．
[36]．陈向辉，王敬乐．基于Oracle的应用软件系统检索性能的优化．天津：河北科技大学学报，2002，23，1：60～63
[37]．Venkat S, Devraj. Oracle24~*7技术与技巧——数据库高可用性实现方案[M]．胡季红译．北京：机械工业出版社．2000
[38]．翁正科，王新英．Oracle8. X For WindowsNT实用教程[M]．北京：清华大学出版社，1998．
[39]．Micheal J. Corey. Oracle优化技术[M]．刘晓霞译．北京：机械工业出版社，1998．
[40]．王坚强，王群．Oracle数据库管理技术与应用探讨．科技情报开发与经济，2002，12，4：97～98
[41]．张俊红．Oracle数据库性能优化的主要方法[J]．计算机系统应用，2001(8)：59～62
[42]．贾建荣．论信息时代的网络安全问题．邮电企业管理．1999，7
[43]. Oracle9i Application Server Release 2. 2002
[44]．王晓萍．Oracle数据库安全控制策略．计算机技术与自动化，2000，3
[45]．邵佩英．数据库安全应用服务器的研究与实现．软件学报，2001
[46]．邵佩英．分布式数据库系统及其应用．北京：科学出版社，2000
[47]．陈越，张斌，王亚第．多级安全数据库修改过程中的安全约束处理方法．密码与信息，1997
[48]．陈越，张斌，王育民．多级安全系统中访问控制新方案．计算机研究与发展，2001．6
[49]．员建厦，杨会琴，王元春．Oracle数据库的安全性讨论．河北工业科技，2000
[50]．洪帆，余祥宣，倪晓俊．多级安全RDBMS的安全策略．1996．1
[51]．孙莉．数据库的安全性及其监督方法．中国纺织大学学报，1996
[52]. Oraclea Enterprise Manager Database Tuning with the Oracle Tuning Pack Release 9.0.1. 2001.6, Part No.A86647-01
[53]. Oracle9i OLAP Services Developer's Guide to the OLAP DML Release 1 (9.0.1). 2001.6, Part No.A86720-01
[54]. Oracle9i Replication Release 1 (9.0.1) 2001.7, Part No. A87499-02
[55]. Oracle9i Replication Management API Reference Release 1 (9.0.1). 2001.6, Part No.A87502-01
[56]. Oracle9i Database Performance Guide and Reference Release 1(9.0.1). 2001.6, Part No. A87503-02
[57]. Oracle9i Database Performance Methods Release 1 (9.0.1). 2001.6, Part No. A87504-02
[58]. Oracle Enterprise Manager Administrator's Guide Release 9.0.1. 2001.7, Part No. A88767-02
[59]. Oracle Enterprise Manager Configuration Guide Release 9.0.1. 2001.6, Part No. A88769-01
[60]. Oracle interMedia Annotator User's Guide Release 9.0.1. 2001.6, Part No. A88784-01
[61]. Oracle interMedia User's Guide and Reference Release 9.0.1. 2001.6, Part No. A88786-01
[62]. Oracle9i Database Error Messages Release 1(9.0.1). 2001.7, Part No. A90202-02
[63]. Oracle9i Database Administrator's Guide Releasel(9.0.1) for Windows. 2001, Part No. A90164-01
[64]. Oracle9iAS Containers for J2EE Enterprise JavaBeans Developer's Guide and Reference Release 2 (9.0.2). Part No. A95881-01
[65]. Oracle9i Application Server mod_plsql User's Guide Release 2 (9.0.2). Part No.A90855-01
[66]. Oracle9i Application Server PL/SQL Web Toolkit Reference Release 1.0.2.2. Part No. A90101-01
[67]. Oracle9iAS Containers for J2EE Enterprise JavaBeans Developer's Guide Release 2(9.0.3). Part No.A97677-01
[2]．武欣等译．Oracle8i Java组件编程．北京：机械工业出版社，2002．
[3]．田勇等著．最新JBuilder开发人员指南．北京：机械工业出版社，2001．
[4]．王华驹等译．Oracle Developer使用指南．北京：机械工业出版社，2000．
[5]. Oracle JavaServer Pages Developer's Guide and Reference. Part No A83726-01
[6]．Joe Greene. Oracle 8 服务器技术精粹[M]．北京：清华大学出版社，1999．
[7]．William G Page. Oracle 8/8i开发使用手册[M]．北京：机械工业出版社，2000．
[8]．Gorge Koch. Oracle8完全参考手册[M]．北京：机械工业出版社，1998．
[9]．王孝忱．Oracle数据库管理实务，北京：人民邮电出版社，2001年
[10]．王兰成等译，Oracle数据库管理员基础教授．北京：机械工业出版社，2000年
[11]．付继彬等，Oracle8入门与提高，北京：清华大学出版社，2000年
[12]．(美)Kevin Loney. Oracle DBA Handbook．李晓军译．北京：机械工业出版社，1998
[13]. Oracle8 Replication[Oracle Documents for DBA].
[14]．Steve B．Oracle8i for Linux使用指南[M]．北京：机械工业出版社，2001．
[15]．Sumit S. Oracle数据库管理员技术指南[M]．北京：机械工业出版社，2001．
[16]．Kevin L, Marlene T. Oracle8i数据库管理员手册[M]．北京：机械工业出版社，2000．
[17]．http://www.Oraclefan.net/ [Oracle爱好者之家论坛]
[18]．http://www.Oracle.com/ [Oracle公司网站]
[19]．Oracle应用服务器和中间件构想．Oracle技术白皮书，2002．10
[20]．Oracle InterMedia：管理多媒体内容．Oracle技术白皮书，2001．3
[21]．John Heimann.Oracle9i应用服务器第二版的安全性．Oracle公司
[22]．Oracle 9i Data Guard. Oracle技术白皮书，2001．7
[23]．Oracle 9i应用服务器：Oracle Forms Services. Oracle技术白皮书，2000．11
[24]. Oracle 8i Oracle Servlet Engine Release Notes.
[25]. Oracle8i Java Stored Procedures Developer's Guide Release 2 (8.1.6).
[26]. Oracle8i JDBC Developer's Guide and Reference Release 3 (8.1.7).
[27]. Oracle8i Supplied Java Packages Reference Release 3 (8.1.7).
[28]. PL/SQL User's Guide and Reference Release 8.1.6.
[29]. Oracle8i Enterprise JavaBeans Developer's Guide and Reference Release 3(8.1.7).
[30]. Oracle8i Application Developer's Guide - Large Objects (LOBs) Using Java Release 2 (8.1.6).
[31]. Oracle8i Application Developer's Guide - Advanced Queuing.
[32]．Oracle超级查找体系结构技术．Oracle技白皮书，2001．5
[33]．(美)Bradley D．Brown等著．Oracle9i Web开发指南．武欣等译．北京：机械工业出版社，2003
[34]．李昭原，罗晓沛．数据库新技术[M]．北京：清华大学出版社，1997．
[35]．(美)Dr. Paul Dorsey, Peter Koletzke著．Oracle JDeveloper 3使用手册．周琦，宋琳等译．北京：机械工业出版社，2002．
[36]．陈向辉，王敬乐．基于Oracle的应用软件系统检索性能的优化．天津：河北科技大学学报，2002，23，1：60～63
[37]．Venkat S, Devraj. Oracle24~*7技术与技巧——数据库高可用性实现方案[M]．胡季红译．北京：机械工业出版社．2000
[38]．翁正科，王新英．Oracle8. X For WindowsNT实用教程[M]．北京：清华大学出版社，1998．
[39]．Micheal J. Corey. Oracle优化技术[M]．刘晓霞译．北京：机械工业出版社，1998．
[40]．王坚强，王群．Oracle数据库管理技术与应用探讨．科技情报开发与经济，2002，12，4：97～98
[41]．张俊红．Oracle数据库性能优化的主要方法[J]．计算机系统应用，2001(8)：59～62
[42]．贾建荣．论信息时代的网络安全问题．邮电企业管理．1999，7
[43]. Oracle9i Application Server Release 2. 2002
[44]．王晓萍．Oracle数据库安全控制策略．计算机技术与自动化，2000，3
[45]．邵佩英．数据库安全应用服务器的研究与实现．软件学报，2001
[46]．邵佩英．分布式数据库系统及其应用．北京：科学出版社，2000
[47]．陈越，张斌，王亚第．多级安全数据库修改过程中的安全约束处理方法．密码与信息，1997
[48]．陈越，张斌，王育民．多级安全系统中访问控制新方案．计算机研究与发展，2001．6
[49]．员建厦，杨会琴，王元春．Oracle数据库的安全性讨论．河北工业科技，2000
[50]．洪帆，余祥宣，倪晓俊．多级安全RDBMS的安全策略．1996．1
[51]．孙莉．数据库的安全性及其监督方法．中国纺织大学学报，1996
[52]. Oraclea Enterprise Manager Database Tuning with the Oracle Tuning Pack Release 9.0.1. 2001.6, Part No.A86647-01
[53]. Oracle9i OLAP Services Developer's Guide to the OLAP DML Release 1 (9.0.1). 2001.6, Part No.A86720-01
[54]. Oracle9i Replication Release 1 (9.0.1) 2001.7, Part No. A87499-02
[55]. Oracle9i Replication Management API Reference Release 1 (9.0.1). 2001.6, Part No.A87502-01
[56]. Oracle9i Database Performance Guide and Reference Release 1(9.0.1). 2001.6, Part No. A87503-02
[57]. Oracle9i Database Performance Methods Release 1 (9.0.1). 2001.6, Part No. A87504-02
[58]. Oracle Enterprise Manager Administrator's Guide Release 9.0.1. 2001.7, Part No. A88767-02
[59]. Oracle Enterprise Manager Configuration Guide Release 9.0.1. 2001.6, Part No. A88769-01
[60]. Oracle interMedia Annotator User's Guide Release 9.0.1. 2001.6, Part No. A88784-01
[61]. Oracle interMedia User's Guide and Reference Release 9.0.1. 2001.6, Part No. A88786-01
[62]. Oracle9i Database Error Messages Release 1(9.0.1). 2001.7, Part No. A90202-02
[63]. Oracle9i Database Administrator's Guide Releasel(9.0.1) for Windows. 2001, Part No. A90164-01
[64]. Oracle9iAS Containers for J2EE Enterprise JavaBeans Developer's Guide and Reference Release 2 (9.0.2). Part No. A95881-01
[65]. Oracle9i Application Server mod_plsql User's Guide Release 2 (9.0.2). Part No.A90855-01
[66]. Oracle9i Application Server PL/SQL Web Toolkit Reference Release 1.0.2.2. Part No. A90101-01
[67]. Oracle9iAS Containers for J2EE Enterprise JavaBeans Developer's Guide Release 2(9.0.3). Part No.A97677-01