网络环境下容灾备份技术在国税系统中的应用研究
|
摘要
国税系统信息化建设力度的不断增强和电子税务的快速发展,对信息数据的完整性和系统运行的持续性提出了更为严格的要求。数据量的海量增长和信息存储模式的网络化使得税收数据的重要性日益凸显,单靠目前简单的分布式存储方式和传统的磁盘备份技术已难于满足日益发展的数据安全和持续运营需求。在税收信息建设安全管理需求的推动下,税务容灾备份系统的实现对信息系统的正常运行和日常征管工作的持续开展有着不可忽视的重大意义。
本文通过对国税系统业务和数据安全的隐患分析,针对当前系统内存在的信息孤岛、存储瓶颈和低抗灾等级问题,设计并实现了一个税务容灾备份系统。该系统共包括三大子模块:本地数据存储子系统、远程数据备份子系统和异构数据整合子系统。其中,本地数据存储子系统采用ISCSI协议构建了税务数据网络存储模式,消除了传统总线型存储模式下数据存储性能和存储需求之间的失衡现象,在集控管理模式下为税务系统提供了超大数据容量、高数据传输率和高可用性的信息存取和共享服务;远程数据备份子系统通过在异地构建一个和本地数据中心IT基础架构完全一致的备份数据中心,利用远程数据中心在地理上的分散性,基于LVR软件复制技术实现了本地和远程数据中心之间信息的实时同步,改变了过去单一数据中心模式下对大型灾难事件的零抗灾能力,提高了税务系统内应用和数据对灾难性事件的抵御能力;异构数据整合子系统采用异类数据源动态复制技术,成功屏蔽了目前系统内存在的各项异构成分。在远程数据中心直接建立的税务综合资源库,为联机分析处理、数据仓库、数据挖掘等数据增值业务提供了负载分析操作的数据土壤。三大子系统环环相扣,相互依赖,相互作用,基于分层D/R解决方案为税务系统提供不同级别的数据容灾和应用容灾保护,确保税务系统内数据的安全存储和业务的持续运营,彻底改变了过去国税部门容灾体系基础薄弱的现状。
通过在益阳市国税局中心机房搭建系统实验环境,本文对税务容灾备份系统的三大子系统分别进行了功能测试,测试结果表明该系统的设计完全达到预期目标。系统的实现改进了国税系统内信息数据的存储方式和容灾备份的恢复等级,通过降低征管等关键业务的运行风险,最大限度地保护了各项业务数据的实时性、完整性和一致性。
The steady rise of the informatization in the state administration of taxation and the rapid development of the electronic taxation provide more strict demands for the integrality of the data and the continuity of the systems. The great growth of the data volume and the netlization of the informational storage pattern make the importance of the taxation data more and more apparent. Only with the present simple distributivity storage pattern and the traditional disk backup technology, we can not fulfill the demand of the data security and the service continuity. Under the force of the security management demand in the taxation informatization, the accomplishment of the taxation disaster recovery backup system has a nonnegligible and significant meaning for the normal operation of the information systems and the continuous unfolding of the daily collection and management work.By analyzing the hidden secure trouble of the business and data in the state administration of taxation and aiming at the problems in the present system, for example, the informational isolated island, storage bottle-neck, low anti-disaster grade and so on, this paper designs and implements a taxation disaster recovery backup system. The system includes three sub-systems: the local data storage sub-system, the remote data backup sub-system and the heterogeneous data conformity sub-system. Therein, by adopting the ISCSI protocol, the local data storage sub-system constructs the circuital access pattern of the taxation data. The system eliminates the unbalance phenomena between the capability and the demand of the data storage under the traditional bus storage pattern. Under the centralized control pattern, it provides the information access and shares service with the great data volume, the high speed of data transportation and the high availability for the taxation system. By remotely building a backup data center that is totally consistent with the local data center on the IT foundational fabric, the remote data backup sub-system uses the geographical dispersibility of the remote data center and adopts the LVR software replication technology. It implements the synchronous data replication between the local and
remote data center, changes the zero standing capability on the great disaster event under the single data center pattern and raises the standing capability on the disaster events for the application and data in the taxation system. By adopting the dynamic replication technology between the heterogeneous data source, the heterogeneous data conformity sub-system successfully shields the various heterogeneous ingredients of the present system. The taxation integrated resource warehouse, which is directly built in the remote data center, provides the data soil loading the analytical operation for the online operative transaction, data warehouse, data mining and other data incremental services. The three sub-systems link by link, depend on each other and act on each other. Based on the layered D/R settle project, they provide data recovery and business recovery on different tiers for the taxation system, ensure the safe storage of the system data and the continuous run of the business, thoroughly change the sick status of the foundation of the disaster recovery system in the state administration of taxation.By constructing the experimental environment of the system in the central apparatus room of the Yi Yang State Administration of Taxation, this paper respectively tests the three sub-systems of the taxation disaster recovery backup system. The result indicates that the system's design totally achieves the prospective aim. The accomplishment of the system ameliorates the storage model of the informational data and the recovery grade of the disaster backup in the state administration of taxation. By reducing the running risk of the pivotal business, for example, collection and management, the system farthest protects the real time, the integrity and the consistency of the various business data.
本文通过对国税系统业务和数据安全的隐患分析,针对当前系统内存在的信息孤岛、存储瓶颈和低抗灾等级问题,设计并实现了一个税务容灾备份系统。该系统共包括三大子模块:本地数据存储子系统、远程数据备份子系统和异构数据整合子系统。其中,本地数据存储子系统采用ISCSI协议构建了税务数据网络存储模式,消除了传统总线型存储模式下数据存储性能和存储需求之间的失衡现象,在集控管理模式下为税务系统提供了超大数据容量、高数据传输率和高可用性的信息存取和共享服务;远程数据备份子系统通过在异地构建一个和本地数据中心IT基础架构完全一致的备份数据中心,利用远程数据中心在地理上的分散性,基于LVR软件复制技术实现了本地和远程数据中心之间信息的实时同步,改变了过去单一数据中心模式下对大型灾难事件的零抗灾能力,提高了税务系统内应用和数据对灾难性事件的抵御能力;异构数据整合子系统采用异类数据源动态复制技术,成功屏蔽了目前系统内存在的各项异构成分。在远程数据中心直接建立的税务综合资源库,为联机分析处理、数据仓库、数据挖掘等数据增值业务提供了负载分析操作的数据土壤。三大子系统环环相扣,相互依赖,相互作用,基于分层D/R解决方案为税务系统提供不同级别的数据容灾和应用容灾保护,确保税务系统内数据的安全存储和业务的持续运营,彻底改变了过去国税部门容灾体系基础薄弱的现状。
通过在益阳市国税局中心机房搭建系统实验环境,本文对税务容灾备份系统的三大子系统分别进行了功能测试,测试结果表明该系统的设计完全达到预期目标。系统的实现改进了国税系统内信息数据的存储方式和容灾备份的恢复等级,通过降低征管等关键业务的运行风险,最大限度地保护了各项业务数据的实时性、完整性和一致性。
The steady rise of the informatization in the state administration of taxation and the rapid development of the electronic taxation provide more strict demands for the integrality of the data and the continuity of the systems. The great growth of the data volume and the netlization of the informational storage pattern make the importance of the taxation data more and more apparent. Only with the present simple distributivity storage pattern and the traditional disk backup technology, we can not fulfill the demand of the data security and the service continuity. Under the force of the security management demand in the taxation informatization, the accomplishment of the taxation disaster recovery backup system has a nonnegligible and significant meaning for the normal operation of the information systems and the continuous unfolding of the daily collection and management work.By analyzing the hidden secure trouble of the business and data in the state administration of taxation and aiming at the problems in the present system, for example, the informational isolated island, storage bottle-neck, low anti-disaster grade and so on, this paper designs and implements a taxation disaster recovery backup system. The system includes three sub-systems: the local data storage sub-system, the remote data backup sub-system and the heterogeneous data conformity sub-system. Therein, by adopting the ISCSI protocol, the local data storage sub-system constructs the circuital access pattern of the taxation data. The system eliminates the unbalance phenomena between the capability and the demand of the data storage under the traditional bus storage pattern. Under the centralized control pattern, it provides the information access and shares service with the great data volume, the high speed of data transportation and the high availability for the taxation system. By remotely building a backup data center that is totally consistent with the local data center on the IT foundational fabric, the remote data backup sub-system uses the geographical dispersibility of the remote data center and adopts the LVR software replication technology. It implements the synchronous data replication between the local and
remote data center, changes the zero standing capability on the great disaster event under the single data center pattern and raises the standing capability on the disaster events for the application and data in the taxation system. By adopting the dynamic replication technology between the heterogeneous data source, the heterogeneous data conformity sub-system successfully shields the various heterogeneous ingredients of the present system. The taxation integrated resource warehouse, which is directly built in the remote data center, provides the data soil loading the analytical operation for the online operative transaction, data warehouse, data mining and other data incremental services. The three sub-systems link by link, depend on each other and act on each other. Based on the layered D/R settle project, they provide data recovery and business recovery on different tiers for the taxation system, ensure the safe storage of the system data and the continuous run of the business, thoroughly change the sick status of the foundation of the disaster recovery system in the state administration of taxation.By constructing the experimental environment of the system in the central apparatus room of the Yi Yang State Administration of Taxation, this paper respectively tests the three sub-systems of the taxation disaster recovery backup system. The result indicates that the system's design totally achieves the prospective aim. The accomplishment of the system ameliorates the storage model of the informational data and the recovery grade of the disaster backup in the state administration of taxation. By reducing the running risk of the pivotal business, for example, collection and management, the system farthest protects the real time, the integrity and the consistency of the various business data.
引文
[1] 李铁,赵政文.基于SAN的存储管理新技术的实现与研究:[硕士学位论文].西安:西北工业大学,2005
[2] 王胜航.容灾白皮书.北京:IBM中国信息支持中心,2005.18-29
[3] 程朝阳.电子政务应用建设的可持续性发展研究.计算机工程,2004,30(5):84-86
[4] 余彤,戴宗坤,王巍.灾难备份/恢复技术在银行中的应用:[工程硕士学位论文].成都:四川大学,2004
[5] 高龙华.网络存储技术的分析与比较.现代通信,2002,12:12-13
[6] Dorian Cougias, E L Heiberger, Karsten Koop. The Backup Book: Disaster Recovery from Desktop to Data Center. New York: the network frontiers, 2003
[7] W Curtis Preton. Unix Backup&Recovery. New York: O'Reilly Press, 1999
[8] Anonymous. The Dual Disorders Recovery Book. America: Hazelden PES, 1993
[9] 赵奎,李涛.基于Internet的容灾系统及其管理工具的研究与实现:[硕士学位论文].成都:四川大学,2004
[10] SANRAD白皮书.利用ISCSI实现FC SAN投资回报最大化.Israel:SANRAD公司,2004.1-9
[11]马天蔚.灾难备份预防到业务连续技术发展推动容灾普及,http://www.dostor.com/a/experience/2005-07-27/0003824707.shtml
[12] Azagury, A C Factor, Micka. Advanced functions for storage subsystems: supporting continuous availability. IBM Systems Journal, 2003, 42(2): 268-279
[13] Paul Hrabal. Disaster Recovery White Paper. http://www.usdatatrust.com,2004.1
[14] Anon, Blackouts. Treat of terrorism spur disaster recovery planning, international journal of Micrographics and Optical technology, 2003,21 (4): 2-5
[15] 刘贤楷.网络存储方案的选择.信息技术,2005,4:88-92
[16] 夏巧利,高宇,燕东渭.省级数据库应用系统常见故障及对策与维护技巧.http://www.metech.org.cn/lwj/kjlwj1/lwj48.html
[17] 联想神州数码公司.中国税收征管信息系统操作手册.北京:国家税务总局,2002.10-15
[18] 联想神州数码公司.中国税收征管信息系统操作简易手册.北京:国家税务总局,2005.8-10
[19] 张志柳,李晓明.多异构电力信息系统动态数据复制与链接技术的研究[硕士学位论文].武汉:武汉大学.2004
[20] P.A.Alsberg, J.D.Day. A principal for resilient sharing of distributed resources. Proceedings of the 2nd IEEE intemational conference on software engineering(ICSE), 1976, 10:627-644
[21] John Wang. Data Mining: Opportunities and Challenges. New York: Idea Group Inc. Press, 2003. 27-28
[22] Thomas G, Hartman. Heterogeneous distributed database systems for product on use. ACM computing surveys, 1990, 22(3): 237-266
[23] Sushmita Mitra, Tinku Acharya, Data Mining: Multimedia, Soft Computing, and Bioinformatics, John Wiley and Sons Inc. Press, 2003: 18-24
[24] Michael Wallace, Lawrence Webber. The Disaster Recovery Handbook: A Step-By-Step Plan to Ensure Business Continuity and Protect Vital Operations, facilities and assets. New York: Library of Congress Cataloging-in-Publication Data, 2004. 3-28
[25] 王仁福,刘立国.山东省农村信用社数据异地备份系统的设计与实现[硕士学位论文].济南:山东大学.2004
[26] 李洋,刘真.一个灾难恢复系统的研究与实现[硕士学位论文].长沙:国防科学技术大学.2003
[27] 陈康,向重伦,蔡学望.税务管理信息系统研究[硕士学位论文].成都:西南财经大学.2000
[28] 汤永,吕英杰.数据容灾技术介绍.邮电设计技术,2002,10:40-44
[29] 廖竣楷,伍良福,李涛.基于Internet的容灾系统的设计与实现[硕士学位论文].成都:四川大学.2003
[30] 候自强.存储网络技术综述:存储网络的产生与未来发展.http://www.dostor.com/info/tech/2005-02-25/0001723008.shtml
[31] 何玲娜,史烈,陈小平.IP SAN备份技术及安全机制的研究[硕士学位论文].杭州:浙江大学.2005
[32] 李立松,刘卫平.ISCSI存储协议及其实现.微型机与应用,2005,2:34-36
[33] Robert Horst. IP Storage and the CPU Consumption Myth: Network computing and Applications. IEEE intemational symposium, 2001:194-200
[34] 张新蕾,史烈,陈小平.基于ISCSI的IP SAN研究及实现[硕士学位论文].杭州:浙江大学.2005
[35] 杨雨春,余胜生,周敬利.SAN系统中存储空间共享冲突问题的研究.计算机工程,2002,28(3):32-34
[36] 韩得志,汪洋,李怀洋.远程备份及关键技术研究.计算机工程,2004,30(22):34-37
[37] 潘群华,景宁.数据复制及备份技术研究[硕士学位论文].长沙:国防科学技术大学.2002
[38] 蒲静,黎明.网格环境下有关数据复制及容错的研究[硕士学位论文].成都:西南石油学院.2004
[39] 杜洪涛,李战怀.基于SAN的存储管理软件的研究及开发[硕士学位论文].西安:西北工业大学.2004
[40] 石维胜,康慕宁.逻辑卷复制器的研究与实现[硕士学位论文].西安:西北工业大学.2005
[41] H.M.Gladney. Data Replicas in Distributed Information Services. ACM Transaction on Database Systems, 1989, 14(1): 75-97
[42] William Premerlani, Michael Blaha. An approach for reverse engineering of relational database. Communications ACM, 1994, 37(5): 42-49
[43] Microsoft Corporation. Microsoft SQL Server 2000 data operation and replication. America: Microsoft Press, 2001. 3-51
[2] 王胜航.容灾白皮书.北京:IBM中国信息支持中心,2005.18-29
[3] 程朝阳.电子政务应用建设的可持续性发展研究.计算机工程,2004,30(5):84-86
[4] 余彤,戴宗坤,王巍.灾难备份/恢复技术在银行中的应用:[工程硕士学位论文].成都:四川大学,2004
[5] 高龙华.网络存储技术的分析与比较.现代通信,2002,12:12-13
[6] Dorian Cougias, E L Heiberger, Karsten Koop. The Backup Book: Disaster Recovery from Desktop to Data Center. New York: the network frontiers, 2003
[7] W Curtis Preton. Unix Backup&Recovery. New York: O'Reilly Press, 1999
[8] Anonymous. The Dual Disorders Recovery Book. America: Hazelden PES, 1993
[9] 赵奎,李涛.基于Internet的容灾系统及其管理工具的研究与实现:[硕士学位论文].成都:四川大学,2004
[10] SANRAD白皮书.利用ISCSI实现FC SAN投资回报最大化.Israel:SANRAD公司,2004.1-9
[11]马天蔚.灾难备份预防到业务连续技术发展推动容灾普及,http://www.dostor.com/a/experience/2005-07-27/0003824707.shtml
[12] Azagury, A C Factor, Micka. Advanced functions for storage subsystems: supporting continuous availability. IBM Systems Journal, 2003, 42(2): 268-279
[13] Paul Hrabal. Disaster Recovery White Paper. http://www.usdatatrust.com,2004.1
[14] Anon, Blackouts. Treat of terrorism spur disaster recovery planning, international journal of Micrographics and Optical technology, 2003,21 (4): 2-5
[15] 刘贤楷.网络存储方案的选择.信息技术,2005,4:88-92
[16] 夏巧利,高宇,燕东渭.省级数据库应用系统常见故障及对策与维护技巧.http://www.metech.org.cn/lwj/kjlwj1/lwj48.html
[17] 联想神州数码公司.中国税收征管信息系统操作手册.北京:国家税务总局,2002.10-15
[18] 联想神州数码公司.中国税收征管信息系统操作简易手册.北京:国家税务总局,2005.8-10
[19] 张志柳,李晓明.多异构电力信息系统动态数据复制与链接技术的研究[硕士学位论文].武汉:武汉大学.2004
[20] P.A.Alsberg, J.D.Day. A principal for resilient sharing of distributed resources. Proceedings of the 2nd IEEE intemational conference on software engineering(ICSE), 1976, 10:627-644
[21] John Wang. Data Mining: Opportunities and Challenges. New York: Idea Group Inc. Press, 2003. 27-28
[22] Thomas G, Hartman. Heterogeneous distributed database systems for product on use. ACM computing surveys, 1990, 22(3): 237-266
[23] Sushmita Mitra, Tinku Acharya, Data Mining: Multimedia, Soft Computing, and Bioinformatics, John Wiley and Sons Inc. Press, 2003: 18-24
[24] Michael Wallace, Lawrence Webber. The Disaster Recovery Handbook: A Step-By-Step Plan to Ensure Business Continuity and Protect Vital Operations, facilities and assets. New York: Library of Congress Cataloging-in-Publication Data, 2004. 3-28
[25] 王仁福,刘立国.山东省农村信用社数据异地备份系统的设计与实现[硕士学位论文].济南:山东大学.2004
[26] 李洋,刘真.一个灾难恢复系统的研究与实现[硕士学位论文].长沙:国防科学技术大学.2003
[27] 陈康,向重伦,蔡学望.税务管理信息系统研究[硕士学位论文].成都:西南财经大学.2000
[28] 汤永,吕英杰.数据容灾技术介绍.邮电设计技术,2002,10:40-44
[29] 廖竣楷,伍良福,李涛.基于Internet的容灾系统的设计与实现[硕士学位论文].成都:四川大学.2003
[30] 候自强.存储网络技术综述:存储网络的产生与未来发展.http://www.dostor.com/info/tech/2005-02-25/0001723008.shtml
[31] 何玲娜,史烈,陈小平.IP SAN备份技术及安全机制的研究[硕士学位论文].杭州:浙江大学.2005
[32] 李立松,刘卫平.ISCSI存储协议及其实现.微型机与应用,2005,2:34-36
[33] Robert Horst. IP Storage and the CPU Consumption Myth: Network computing and Applications. IEEE intemational symposium, 2001:194-200
[34] 张新蕾,史烈,陈小平.基于ISCSI的IP SAN研究及实现[硕士学位论文].杭州:浙江大学.2005
[35] 杨雨春,余胜生,周敬利.SAN系统中存储空间共享冲突问题的研究.计算机工程,2002,28(3):32-34
[36] 韩得志,汪洋,李怀洋.远程备份及关键技术研究.计算机工程,2004,30(22):34-37
[37] 潘群华,景宁.数据复制及备份技术研究[硕士学位论文].长沙:国防科学技术大学.2002
[38] 蒲静,黎明.网格环境下有关数据复制及容错的研究[硕士学位论文].成都:西南石油学院.2004
[39] 杜洪涛,李战怀.基于SAN的存储管理软件的研究及开发[硕士学位论文].西安:西北工业大学.2004
[40] 石维胜,康慕宁.逻辑卷复制器的研究与实现[硕士学位论文].西安:西北工业大学.2005
[41] H.M.Gladney. Data Replicas in Distributed Information Services. ACM Transaction on Database Systems, 1989, 14(1): 75-97
[42] William Premerlani, Michael Blaha. An approach for reverse engineering of relational database. Communications ACM, 1994, 37(5): 42-49
[43] Microsoft Corporation. Microsoft SQL Server 2000 data operation and replication. America: Microsoft Press, 2001. 3-51