贵州移动业务支撑系统数据信息安全的研究与实现
|
摘要
贵州移动业务支撑系统承载着贵州移动的营业收费、用户入网、新业务实现、为经营决策者提供数据分析等很多重要的市场营销功能，拥有着贵州全省400多万的移动用户资料，所以该系统的数据信息安全对贵州移动至关重要。
论文在对国内外数据保护技术研究的基础上，采用远程容灾技术即一个生产中心和一个备中心分处在两个不的地理位置，并对贵州移动业务支撑系统对数据安全及业务恢复的需求，提出了适合该系统的容灾方案建议和思考。
贵州移动业务支撑系统目前采用的数据保护技术是磁盘阵列做RAIDO+1保护，主机系统双机冷备，和LANFREE的磁盘库备份。但这些传统的数据保护技术，已经不能满足当生产地点发生灾难如水火、火灾、地震及其他机房事故等时，系统能及时恢复，并对业务影响很小、数据零丢失。
论文在对国内外相似的系统信息数据安全研究基础上，推出用远程容灾技术解决该系统的数据信息保护。论文明确了容灾的指标RPO和RTO定义，容灾保护数据有有三种方式：软件级解决方式、物理级解决方式和交换机解决方式，本文详细介绍了物理级解决方案及基于智能磁盘阵列的数据复制技术，并指出了该技术的缺陷，在贵州移动业务支撑系统容灾建设中的改进，并提出了数据恢复技术、系统切换技术和资源复用技术在容灾建设中的结合应用。针对贵州移动业务支撑系统数据信息的复杂性，和实际业务的需求，并遵循容灾指标，建立了适合贵州移动业务支撑系统数据信息的容灾系统。
China mobile Guizhou branch business operation support system has many functions, such as creating new account for incoming customer, real-time billing and support new operation for marketing need. These systems also provide analyze data for decision-maker, it has four million customer' s information data, so this system is very important to china mobile Guizhou branch company. We face to protect this system information data as security as possible.
Many accidents can lose data; traditional use tape backup data do not match up the company need. Systems must recover and lose zero data after disaster happen, but tape backup data can not reach, this protect data lose lots of data and recover need a daytime, even system lose all data. So disaster recovery (DR) technology use in many modern companies to protect data. The disaster recover technology has two objectives, one is Recovery Point Objective and another is recovery time objective. Build disaster recovery system include four technology, data replication, data recovery, system resource alternation and multiuse system resource. Introduce the four technology strong point and shortcoming. Finally I find the best way to establish the disaster recovery model for Guizhou business operation support system (BOSS).
论文在对国内外数据保护技术研究的基础上，采用远程容灾技术即一个生产中心和一个备中心分处在两个不的地理位置，并对贵州移动业务支撑系统对数据安全及业务恢复的需求，提出了适合该系统的容灾方案建议和思考。
贵州移动业务支撑系统目前采用的数据保护技术是磁盘阵列做RAIDO+1保护，主机系统双机冷备，和LANFREE的磁盘库备份。但这些传统的数据保护技术，已经不能满足当生产地点发生灾难如水火、火灾、地震及其他机房事故等时，系统能及时恢复，并对业务影响很小、数据零丢失。
论文在对国内外相似的系统信息数据安全研究基础上，推出用远程容灾技术解决该系统的数据信息保护。论文明确了容灾的指标RPO和RTO定义，容灾保护数据有有三种方式：软件级解决方式、物理级解决方式和交换机解决方式，本文详细介绍了物理级解决方案及基于智能磁盘阵列的数据复制技术，并指出了该技术的缺陷，在贵州移动业务支撑系统容灾建设中的改进，并提出了数据恢复技术、系统切换技术和资源复用技术在容灾建设中的结合应用。针对贵州移动业务支撑系统数据信息的复杂性，和实际业务的需求，并遵循容灾指标，建立了适合贵州移动业务支撑系统数据信息的容灾系统。
China mobile Guizhou branch business operation support system has many functions, such as creating new account for incoming customer, real-time billing and support new operation for marketing need. These systems also provide analyze data for decision-maker, it has four million customer' s information data, so this system is very important to china mobile Guizhou branch company. We face to protect this system information data as security as possible.
Many accidents can lose data; traditional use tape backup data do not match up the company need. Systems must recover and lose zero data after disaster happen, but tape backup data can not reach, this protect data lose lots of data and recover need a daytime, even system lose all data. So disaster recovery (DR) technology use in many modern companies to protect data. The disaster recover technology has two objectives, one is Recovery Point Objective and another is recovery time objective. Build disaster recovery system include four technology, data replication, data recovery, system resource alternation and multiuse system resource. Introduce the four technology strong point and shortcoming. Finally I find the best way to establish the disaster recovery model for Guizhou business operation support system (BOSS).
引文
[1] 王达 服务器与数据存储[M] 电子工业出版社，2005，9(6)：32-34
[2] W．Curtis Preston著 邓劲生，等 译 使用SAN与NAS，2003，3(9)101：120
[3] Derek Vadala著，LINUX RAID管理(影印版)，2003，7(2)23：80
[4] Designing Storage Area Networks: A Practical Reference for Implementing Fibre Channel and IP SANs, Second Edition by Tom Clark
[5] Storage Area Networks for Dummies by Christopher Poelker, Alex Nikitin
[6] Storage Area Networking Essentials: A Complete Guide to Understanding & Implementing SANs by Richard Barker, Paul Massiglia
[7] Storage Networks Explained: Basics and Application of Fibre Channel SAN, NAS iSCSI and InfiniBand by Ulf Troppens, et al
[8] Storage Virtualization: Technologies for Simplifying Data Storage and Management by Tom Clark
[9] Storage Security: Protecting, SANs, NAS and DAS by John Chirillo, et al
[10] Storage Solutions (Do It Now*Do It Fast*Do It Right) by Roy Barnhart, et al
[11] How to protect your business from disasters: An article from: Cost Engineering [HTML]by Joel Betterly
[12] Tape turning: protect against data loss. (first in/first out): An article from: Computer Technology Review [HTML] by Rich Harada
[13] Evaluating diatomaceous earth, silica-aerogel dusts, and malathion to protect stored wheat from insects (Marketing research report) by Gailen D White[14] Resilient Storage Networks: Designing Flexible Scalable Data Infrastructures (Digital Press Storage Technology (Paperback))by Greg Schulz
[15] Perfect Order: Simple Storage Solutions by Elizabeth Hilliard, et al
[16] 存储杂志封面报道：容灾技术中的数据一致性，DoSTOR特约作者／刘刚◎2005-05-13 13：19《信息存储》杂志 http://www.dostor.com/magazine/2005-05-13/0000923973.shtml
[17] 康春荣、苏武荣，数据安全项目案例：存储与备份SAN与NAS容错与容灾[M]，科学出版社，2004，7(3，5，6)50：150
[18] 徐晖，直面数据灾难 关注BOSS容灾，http://www.asiainfo.com.cn/cn/news/special/html/20030927 06.shtml
[19] Abraham Silberschatz，Henry E Korth，S．Sudarshan，数据库系统概念[M]，机械工业出版社，2003，3(1，3，6)5：90
[20] THOMAS M．CONNOLLY；CAROLYN E．BEGG，数据库设计教程[M]，机械工业出版社，2003，6
[21] REGIS J．BATES，DONALD W．GREGORY，语音与数据通信(第四版)[M]，人民邮电出版社，2005，7
[22] BEHROUZ FOROUZAM，数据通信与网络(英文版)[M]，机械工业出版社，1999，5
[23] (德)MARTIN P．CLARK，数据网络、IP与INTERNET技术[M]，电子工业出版社，2004，6
[24] WILLIAM STALLINGS，数据通信--原理、技术与应用(第5版)[M]，清华大学出版社，2005，10
[25] 高传善 钱松荣 毛迪林，数据通信与计算机网络[M]，高等教育出版社，2003，2
[26] (英)FRED HALSALL，数据通信、计算机网络与开放系统(原书第4版)[M]，2004，1
[27] 陈光军，数据通信技术与应用[M]，2005，8
[28] 译作者：林闯／单志广／任丰原，计算机网络的服务质量(QoS)[M]，清华大学出版社，2004，4
[29] 谢希仁，计算机网络(第4版)[M]，电子工业出版社，2003，6
[30] ANDREW S．TANENBAUM，VRUE UNIVERSITEIT，AMSTERDAM，THE NETHERLANDS，计算机网络(第4版)(英文影印版)[M]，清华大学出版社，2004，1
[31] SEAN CONVERY，CCIE NO.4232，网络安全体系结构[M]，人民邮电出版社，2005，6
[32] ATAELAHI，网络通信技术(英文影印版)[M]，科学出版社，2004，6
[33] JERRYPEEK，GRACE TODINO & JOHN STRANG，UNIX操作系统(第四版)[M]，2000，1
[34] W．RICHARD STEVENS，TCP／IP详解卷三：TCP事务协议，HTTP，NNTP和UNIX域协议[M]，2000，9
[35] MAURICE J．BACH，UNIX操作系统设计[M]，机械工业出版社，2000，4
[36] JEFF HORWITZ，UNIX系统管理[M]，人民邮电出版社，2003，4
[37] 于宁斌，IBM UNIX&LINUX—AIX 5L系统管理技术[M]，2003，10
[2] W．Curtis Preston著 邓劲生，等 译 使用SAN与NAS，2003，3(9)101：120
[3] Derek Vadala著，LINUX RAID管理(影印版)，2003，7(2)23：80
[4] Designing Storage Area Networks: A Practical Reference for Implementing Fibre Channel and IP SANs, Second Edition by Tom Clark
[5] Storage Area Networks for Dummies by Christopher Poelker, Alex Nikitin
[6] Storage Area Networking Essentials: A Complete Guide to Understanding & Implementing SANs by Richard Barker, Paul Massiglia
[7] Storage Networks Explained: Basics and Application of Fibre Channel SAN, NAS iSCSI and InfiniBand by Ulf Troppens, et al
[8] Storage Virtualization: Technologies for Simplifying Data Storage and Management by Tom Clark
[9] Storage Security: Protecting, SANs, NAS and DAS by John Chirillo, et al
[10] Storage Solutions (Do It Now*Do It Fast*Do It Right) by Roy Barnhart, et al
[11] How to protect your business from disasters: An article from: Cost Engineering [HTML]by Joel Betterly
[12] Tape turning: protect against data loss. (first in/first out): An article from: Computer Technology Review [HTML] by Rich Harada
[13] Evaluating diatomaceous earth, silica-aerogel dusts, and malathion to protect stored wheat from insects (Marketing research report) by Gailen D White[14] Resilient Storage Networks: Designing Flexible Scalable Data Infrastructures (Digital Press Storage Technology (Paperback))by Greg Schulz
[15] Perfect Order: Simple Storage Solutions by Elizabeth Hilliard, et al
[16] 存储杂志封面报道：容灾技术中的数据一致性，DoSTOR特约作者／刘刚◎2005-05-13 13：19《信息存储》杂志 http://www.dostor.com/magazine/2005-05-13/0000923973.shtml
[17] 康春荣、苏武荣，数据安全项目案例：存储与备份SAN与NAS容错与容灾[M]，科学出版社，2004，7(3，5，6)50：150
[18] 徐晖，直面数据灾难 关注BOSS容灾，http://www.asiainfo.com.cn/cn/news/special/html/20030927 06.shtml
[19] Abraham Silberschatz，Henry E Korth，S．Sudarshan，数据库系统概念[M]，机械工业出版社，2003，3(1，3，6)5：90
[20] THOMAS M．CONNOLLY；CAROLYN E．BEGG，数据库设计教程[M]，机械工业出版社，2003，6
[21] REGIS J．BATES，DONALD W．GREGORY，语音与数据通信(第四版)[M]，人民邮电出版社，2005，7
[22] BEHROUZ FOROUZAM，数据通信与网络(英文版)[M]，机械工业出版社，1999，5
[23] (德)MARTIN P．CLARK，数据网络、IP与INTERNET技术[M]，电子工业出版社，2004，6
[24] WILLIAM STALLINGS，数据通信--原理、技术与应用(第5版)[M]，清华大学出版社，2005，10
[25] 高传善 钱松荣 毛迪林，数据通信与计算机网络[M]，高等教育出版社，2003，2
[26] (英)FRED HALSALL，数据通信、计算机网络与开放系统(原书第4版)[M]，2004，1
[27] 陈光军，数据通信技术与应用[M]，2005，8
[28] 译作者：林闯／单志广／任丰原，计算机网络的服务质量(QoS)[M]，清华大学出版社，2004，4
[29] 谢希仁，计算机网络(第4版)[M]，电子工业出版社，2003，6
[30] ANDREW S．TANENBAUM，VRUE UNIVERSITEIT，AMSTERDAM，THE NETHERLANDS，计算机网络(第4版)(英文影印版)[M]，清华大学出版社，2004，1
[31] SEAN CONVERY，CCIE NO.4232，网络安全体系结构[M]，人民邮电出版社，2005，6
[32] ATAELAHI，网络通信技术(英文影印版)[M]，科学出版社，2004，6
[33] JERRYPEEK，GRACE TODINO & JOHN STRANG，UNIX操作系统(第四版)[M]，2000，1
[34] W．RICHARD STEVENS，TCP／IP详解卷三：TCP事务协议，HTTP，NNTP和UNIX域协议[M]，2000，9
[35] MAURICE J．BACH，UNIX操作系统设计[M]，机械工业出版社，2000，4
[36] JEFF HORWITZ，UNIX系统管理[M]，人民邮电出版社，2003，4
[37] 于宁斌，IBM UNIX&LINUX—AIX 5L系统管理技术[M]，2003，10