VPN环境下CRM系统的开发与集成
摘要
随着网络技术的高速发展,拥有分支机构的企业大多使用VPN技术来构造企业的通信与网络系统,从而实现高效透明的信息共享与数据访问。由于安全性和价格低廉,VPN技术已经成为Internet网上广泛应用的业务之一,提高VPN的数据传输的效率和安全性就有着重要的意义和作用。
本文在研究企业VPN的特点及安全机制的基础上,提出了在其上实施应用系统的解决方案。以CRM系统的开发为背景,详细阐述了在大数据量传输与数据访问效率方面做出了改进:通过数据分页、对象序列化、修改防火墙配置等技术实现了对数据传输效率和安全性的平衡;并且通过使用Socket异步机制,获取并解析用户的Http请求数据包,实现了应用程序中的VPN用户验证。为大多数基于VPN环境中小型企业的信息化提出了优化的解决方案和开发模式。
采用敏捷开发技术,通过与企业业务人员的密切合作形成了联合开发团队,经过多轮的"设计-开发-测试-修改-交付"的迭代过程,最终形成了以B/S架构为基础的可用、高效的CRM系统。在企业的VPN网络环境之上,通过DTS、远程访问等技术,实现CRM系统与已经运行的ERP系统部分模块的逻辑集成和数据集成。
作者在项目开发中担任客户管理、营销团队、售后服务、营销活动管理模块的开发,以及系统的安装部署和用户培训工作。在迭代开发过程中参与系统调研,与客户进行业务逻辑的设计和协商。
Along with the rapid development of computer networks, the enterprises which have branches all over the country are building the telecommunication and internet system with VPN technology to attain data accessing and information sharing in a transparent way. Because of the security and low cost, VPN has been became the most widespread application on Internet. It is more important that improves the efficiency and security of data transportation.
After researching the features and security of VPN system, this paper came up with a solution about deploying an application system on the VPN system. The improvements of the transportation of great quantity of data and efficiency of data access have been taken base on the development of CRM system: These techniques such as data page-division, boject serialization, and fixing the configuration of the firewall have been working to implemented that the balance of efficiency and secutiry; the asynchronous socket has been working to implemented that the VPN customer verification in the application system with catching and analyzing the http request datagram. Advanced solution and development parttern for information system base on VPN environment has been found by this paper.
The flexible and available CRM system which based on B/S architecture, during many iteration processes about "design - develop -test - fix - provide", has been developed by the combined team which include the software develop engineers and business staffs with the skill of agile develop technology. The integration of CRM system and ERP system in parts of modules has been achieved with technology of DTS and remote access.
Besides system deployment and user training, the modules of customer management, marketing team management and service of the CRM system project have been developed by the Author. In the process of iteration, I took part in the research, system design and coordinate with the customer about the system requirement.
本文在研究企业VPN的特点及安全机制的基础上,提出了在其上实施应用系统的解决方案。以CRM系统的开发为背景,详细阐述了在大数据量传输与数据访问效率方面做出了改进:通过数据分页、对象序列化、修改防火墙配置等技术实现了对数据传输效率和安全性的平衡;并且通过使用Socket异步机制,获取并解析用户的Http请求数据包,实现了应用程序中的VPN用户验证。为大多数基于VPN环境中小型企业的信息化提出了优化的解决方案和开发模式。
采用敏捷开发技术,通过与企业业务人员的密切合作形成了联合开发团队,经过多轮的"设计-开发-测试-修改-交付"的迭代过程,最终形成了以B/S架构为基础的可用、高效的CRM系统。在企业的VPN网络环境之上,通过DTS、远程访问等技术,实现CRM系统与已经运行的ERP系统部分模块的逻辑集成和数据集成。
作者在项目开发中担任客户管理、营销团队、售后服务、营销活动管理模块的开发,以及系统的安装部署和用户培训工作。在迭代开发过程中参与系统调研,与客户进行业务逻辑的设计和协商。
Along with the rapid development of computer networks, the enterprises which have branches all over the country are building the telecommunication and internet system with VPN technology to attain data accessing and information sharing in a transparent way. Because of the security and low cost, VPN has been became the most widespread application on Internet. It is more important that improves the efficiency and security of data transportation.
After researching the features and security of VPN system, this paper came up with a solution about deploying an application system on the VPN system. The improvements of the transportation of great quantity of data and efficiency of data access have been taken base on the development of CRM system: These techniques such as data page-division, boject serialization, and fixing the configuration of the firewall have been working to implemented that the balance of efficiency and secutiry; the asynchronous socket has been working to implemented that the VPN customer verification in the application system with catching and analyzing the http request datagram. Advanced solution and development parttern for information system base on VPN environment has been found by this paper.
The flexible and available CRM system which based on B/S architecture, during many iteration processes about "design - develop -test - fix - provide", has been developed by the combined team which include the software develop engineers and business staffs with the skill of agile develop technology. The integration of CRM system and ERP system in parts of modules has been achieved with technology of DTS and remote access.
Besides system deployment and user training, the modules of customer management, marketing team management and service of the CRM system project have been developed by the Author. In the process of iteration, I took part in the research, system design and coordinate with the customer about the system requirement.
引文
[1]周玉清,ERP理论、方法与实践,北京,电子工业出版社,2006.1,P34-P40
[2]HE Ting,LU Hao,XU Xiao-Fei,Research on the key technology of mobile ERP,Journal of Harbin Institute of Technology,2007.4
[3]程越,ERP系统的发展现状和对策分析,计算机应用与软件,2007.10
[4]Henning Gebert,Malte Geib,Lutz Kolbe,Towards Customer Knowledge Management:Integrating Customer Relationship Management and Knowledge Management Concepts,The Second International Conference on Electronic Business,2002
[5]Oracle ERP/CRM,http://www.bposystems.com/html/OracleERPCRM.htm
[6]Romano Jr.Customer relaions management in information systems research[C]Proceeding of America'S Conference on Information Systems(AIS2000),Longbeach,California,USA,2000,P215-P219
[7]何荣勤,CRM原理、设计、实践,北京,电子工业出版社,2003.1,P8-P56
[8]王达,虚拟专用网(VPN)精解,北京,清华大学出版社,2004.1,P23-P51
[9]杨燕,谭成翔,赵宏福,基于IPSec VPN的安全短消息系统,计算机安全,2007.10
[10]Vafa D.Izadinia,D.G Kourie,J.H.P.Eloff,Uncovering identities:A study into VPN tunnel fingerprinting,Computers and security,2006
[11]Aqun Z,Yuan Y,Yi J,Guanqun G.Research on tunneling techniques in virtual private networks,Correspondence Journal 2000
[12]Ivan Pepenlnjak,Jim Guinchard,MPLS和VPN体系结构,北京,人民邮电出版社,2004.3,P56-P62
[13]王建民,MPLS VPN与传统专用网络的应用比较,通讯世界,2003.4
[14]杜荔,陈忠根,王光兴,MPLS VPN应用与ATM环境中的两个关键技术, 东北大学博士论文,辽宁,东北大学,2001
[15]Stephen Ken,Extended Sequence,Number Addendum to IPSec DOI for ISAKMP,Internet Draft,July 2002
[16]Fabrizio Grandoni,Volker Kaibel,Gianpaolo Oriolo,Martin Skutella,A shortproofof the VPN Tree Routing Conjecture on ring networks,Science Direct,2007.10
[17]陈凤,宋玲,BGP/MPLS IP VPN的IPv6扩展研究,计算机技术与发展,2007.10
[18]郭铃,李伟生,SSL VPN的设计与实现,计算机技术与发展,2007.8
[19]夏国俊,全面整合CRM与ERP的五种方法,黑龙江,哈尔滨地图出版社,2004.5
[20]黄天东,基于Internet的ERP与CRM系统集成研究,武汉理工大学,2004
[21]SaaS-中小型企业的解决之道,http://blog.sina.com.cn,2006.3
[22]C.A.J.Hurkens,J.C.M.Keijsper,L.Stougie,Virtual private network design:A proof of the tree routing conjecture on ring networks,SIAM Journal on Discrete Mathematics 21(2007)482-503.
[23]C.Shue at al,Analysis of IPSec overheads for VPN servers,IEEE,November 2005
[24]李春泉,周德俭,吴兆华,VPN技术及其在企业网络安全技术中的应用,桂林工学院学报,2004.7
[25]N.Goyal,N.Olver,F.B.Shepherd,The VPN Conjecture is true,2007
[26]S.Kent and R.Atkinson,IP Authentication Header(AH),RFC 2402,1998.11
[27]S.Kent and R.Atkinson,IP Encapsulating Security Payload(ESP),RFC 2406,1998.11
[28]Fabrizio Grandoni,Volker Kaibel,Gianpaolo Oriolo,Martin Skutella,A short proof of the VPN Tree Routing Conjecture on ring networks,Science Direct,October 2007
[29]陈选育,李灿平IPv6下基于IPSec的VPN的研究与性能分析,广东通信技术,2007.1
[30]田春岐,王立明,蔡勉,IPSEC VPN的研究和分析,计算机工程与应,2004.4
[31]徐鸣亮,谭成翔,汪海航,Linux下基于IPSec的VPN的研究与实现,计算机安全,2007.11
[32]Gee-Swee Poo,Haibo Wang,Multi-path routing versus tree routing for VPN bandwidth provisioning in the hose modal,Computer Networks 51(2007)1725-1743
[33]李乐昆,卢定,基于IPSec的VPN网络安全的实现,实验科学与技术,2007.5
[34]吴松洋,谭成翔,基于IPSecVPN的移动安全系统的设计与实现,计算机应用,2007.9
[35]陈选育,李灿平,IPv6下基于IPSec的VPN的研究与性能分析,广东通信技术,2007.1
[36]胡海斌,陈亚军,基于虚拟专用网(VPN)的局域网的远程访问,西华师范大学学报,2007.9
[37]Paul Wouters,Ken Bantoft,Building and Integrating Virtual Private Networks with Openswan,Packt publishing,2006.02
[38]陈性元,基于虚拟子网的安全VPN技术研究,解放军信息工程大学,2003
[39]王海军 王中心等,VPN技术与解决方案[J],计算机系统应用,1999.11
[40]蔡国林,李永树,杨骏,GIS与ERP集成技术探讨,计算机应用研究,2007.10
[41]霍夫曼,C#.Net技术内幕,北京,清华大学出版社,2006.4,P96-P106
[42]如何使IPSec通讯能够通过防火墙,http://support.microsoft.com
[43]SQL Server 2000中的数据转换服务(DTS),http://www.microsofl.com/china/technet/prodtechnol/sql/2000/deploy/dtssql2k.mspx
[44]Romano Jr.Customer relations management in information system research Proceeding of America's Conference on Information Systems(AIS2000),Longbeach,California,USA,2000:811-819
[45]刘丹,高长元,基于CRM理念的ERP订单管理系统,哈尔滨理工大学学报,2007.4
[46]郝刚,ASP.net 2.0开发指南,北京,人民邮电出版社,2006.5,P96-P129
[47]房国志,基于AJAX技术的B/S结构CRM系统的设计与实现,哈尔滨理 工大学学报,2007.3
[48]David Flanagan,Javascript权威指南,北京,机械工业出版社2007.8
[49]全面剖析XML Http Request对象,http://www.zc2008.com/blog/post/15.html
[50]张静,赵雷等,ERP系统中查询子系统的柔性化设计,计算机应用与软件2007.10
[51]孙卫琴,精通Hibernate,北京,电子工业出版社,2005,P54-P76
[52]Robert C.Martin,敏捷软件开发,北京,清华大学出版社,2003
[53]邓靖颖,黄穗,敏捷开发:极限编程在管理信息系统开发中的实践探讨,计算机工程,2004.12
[2]HE Ting,LU Hao,XU Xiao-Fei,Research on the key technology of mobile ERP,Journal of Harbin Institute of Technology,2007.4
[3]程越,ERP系统的发展现状和对策分析,计算机应用与软件,2007.10
[4]Henning Gebert,Malte Geib,Lutz Kolbe,Towards Customer Knowledge Management:Integrating Customer Relationship Management and Knowledge Management Concepts,The Second International Conference on Electronic Business,2002
[5]Oracle ERP/CRM,http://www.bposystems.com/html/OracleERPCRM.htm
[6]Romano Jr.Customer relaions management in information systems research[C]Proceeding of America'S Conference on Information Systems(AIS2000),Longbeach,California,USA,2000,P215-P219
[7]何荣勤,CRM原理、设计、实践,北京,电子工业出版社,2003.1,P8-P56
[8]王达,虚拟专用网(VPN)精解,北京,清华大学出版社,2004.1,P23-P51
[9]杨燕,谭成翔,赵宏福,基于IPSec VPN的安全短消息系统,计算机安全,2007.10
[10]Vafa D.Izadinia,D.G Kourie,J.H.P.Eloff,Uncovering identities:A study into VPN tunnel fingerprinting,Computers and security,2006
[11]Aqun Z,Yuan Y,Yi J,Guanqun G.Research on tunneling techniques in virtual private networks,Correspondence Journal 2000
[12]Ivan Pepenlnjak,Jim Guinchard,MPLS和VPN体系结构,北京,人民邮电出版社,2004.3,P56-P62
[13]王建民,MPLS VPN与传统专用网络的应用比较,通讯世界,2003.4
[14]杜荔,陈忠根,王光兴,MPLS VPN应用与ATM环境中的两个关键技术, 东北大学博士论文,辽宁,东北大学,2001
[15]Stephen Ken,Extended Sequence,Number Addendum to IPSec DOI for ISAKMP,Internet Draft,July 2002
[16]Fabrizio Grandoni,Volker Kaibel,Gianpaolo Oriolo,Martin Skutella,A shortproofof the VPN Tree Routing Conjecture on ring networks,Science Direct,2007.10
[17]陈凤,宋玲,BGP/MPLS IP VPN的IPv6扩展研究,计算机技术与发展,2007.10
[18]郭铃,李伟生,SSL VPN的设计与实现,计算机技术与发展,2007.8
[19]夏国俊,全面整合CRM与ERP的五种方法,黑龙江,哈尔滨地图出版社,2004.5
[20]黄天东,基于Internet的ERP与CRM系统集成研究,武汉理工大学,2004
[21]SaaS-中小型企业的解决之道,http://blog.sina.com.cn,2006.3
[22]C.A.J.Hurkens,J.C.M.Keijsper,L.Stougie,Virtual private network design:A proof of the tree routing conjecture on ring networks,SIAM Journal on Discrete Mathematics 21(2007)482-503.
[23]C.Shue at al,Analysis of IPSec overheads for VPN servers,IEEE,November 2005
[24]李春泉,周德俭,吴兆华,VPN技术及其在企业网络安全技术中的应用,桂林工学院学报,2004.7
[25]N.Goyal,N.Olver,F.B.Shepherd,The VPN Conjecture is true,2007
[26]S.Kent and R.Atkinson,IP Authentication Header(AH),RFC 2402,1998.11
[27]S.Kent and R.Atkinson,IP Encapsulating Security Payload(ESP),RFC 2406,1998.11
[28]Fabrizio Grandoni,Volker Kaibel,Gianpaolo Oriolo,Martin Skutella,A short proof of the VPN Tree Routing Conjecture on ring networks,Science Direct,October 2007
[29]陈选育,李灿平IPv6下基于IPSec的VPN的研究与性能分析,广东通信技术,2007.1
[30]田春岐,王立明,蔡勉,IPSEC VPN的研究和分析,计算机工程与应,2004.4
[31]徐鸣亮,谭成翔,汪海航,Linux下基于IPSec的VPN的研究与实现,计算机安全,2007.11
[32]Gee-Swee Poo,Haibo Wang,Multi-path routing versus tree routing for VPN bandwidth provisioning in the hose modal,Computer Networks 51(2007)1725-1743
[33]李乐昆,卢定,基于IPSec的VPN网络安全的实现,实验科学与技术,2007.5
[34]吴松洋,谭成翔,基于IPSecVPN的移动安全系统的设计与实现,计算机应用,2007.9
[35]陈选育,李灿平,IPv6下基于IPSec的VPN的研究与性能分析,广东通信技术,2007.1
[36]胡海斌,陈亚军,基于虚拟专用网(VPN)的局域网的远程访问,西华师范大学学报,2007.9
[37]Paul Wouters,Ken Bantoft,Building and Integrating Virtual Private Networks with Openswan,Packt publishing,2006.02
[38]陈性元,基于虚拟子网的安全VPN技术研究,解放军信息工程大学,2003
[39]王海军 王中心等,VPN技术与解决方案[J],计算机系统应用,1999.11
[40]蔡国林,李永树,杨骏,GIS与ERP集成技术探讨,计算机应用研究,2007.10
[41]霍夫曼,C#.Net技术内幕,北京,清华大学出版社,2006.4,P96-P106
[42]如何使IPSec通讯能够通过防火墙,http://support.microsoft.com
[43]SQL Server 2000中的数据转换服务(DTS),http://www.microsofl.com/china/technet/prodtechnol/sql/2000/deploy/dtssql2k.mspx
[44]Romano Jr.Customer relations management in information system research Proceeding of America's Conference on Information Systems(AIS2000),Longbeach,California,USA,2000:811-819
[45]刘丹,高长元,基于CRM理念的ERP订单管理系统,哈尔滨理工大学学报,2007.4
[46]郝刚,ASP.net 2.0开发指南,北京,人民邮电出版社,2006.5,P96-P129
[47]房国志,基于AJAX技术的B/S结构CRM系统的设计与实现,哈尔滨理 工大学学报,2007.3
[48]David Flanagan,Javascript权威指南,北京,机械工业出版社2007.8
[49]全面剖析XML Http Request对象,http://www.zc2008.com/blog/post/15.html
[50]张静,赵雷等,ERP系统中查询子系统的柔性化设计,计算机应用与软件2007.10
[51]孙卫琴,精通Hibernate,北京,电子工业出版社,2005,P54-P76
[52]Robert C.Martin,敏捷软件开发,北京,清华大学出版社,2003
[53]邓靖颖,黄穗,敏捷开发:极限编程在管理信息系统开发中的实践探讨,计算机工程,2004.12