Apparatus and storage system for controlling acquisition of snapshot

[0001] The application relates to and claims priority from Japanese Patent Application No. 2003-281759 filed on Jul. 29, 2003, the entire disclosure of which is incorporated herein by reference.

[0002] 1. Field of the Invention

[0003] The present invention relates to an apparatus and a method for controlling an operation of acquiring a snapshot of a database built on an external storage of a computer system.

[0004] 2. Background Art

[0005] In operating a database, a mismatch can occur between contents of the database because of a bug in an application that uses the database, an operational error of an operation, or the like. In general, a fault as described above is called a logic fault. In the case of a logic fault, since a database management system (hereinafter referred to as a DBMS) has properly completed the process according to the input, the fault can not be detected by a fault detecting function of the DBMS. A logic fault as described above is detected by database users such as a system manager or operator.

[0006] When a logic fault as described above has occurred, a manager or operator must identify the point in time when the logic fault occurred and restore the contents of the database up to a point in time which precedes the identified time of occurrence of the fault and at which data has consistency.

[0007] When it is stated that data has consistency, what is meant is that the data has been updated in conformity to an operation log recorded in an operation log file managed by a DBMS. A common DBMS reserves a buffer area for temporarily saving the contents of an update on a cache memory of the host computer on which the DBMS is operating, or the like. Even when an operator or the like makes a data update, the contents of the update is not immediately reflected on a data file and is held in the buffer area. In order to bring about a state in which data has consistency, the contents of all updates held on the buffer area must be reflected on the data file that is held in a storage or the like. Since the DBMS assumes that a fault has occurred in the data file when there is no consistency of data, the data file cannot be opened.

[0008] In order to restore the contents of the database up to a point in time when the data has consistency, a snapshot must be acquired in advance in a state in which data has consistency. For this purpose, it is necessary to staticize the database and acquire a snapshot thereof in a state in which data has consistency. Snapshot is to maintain data to be snapshot at a certain point in time in an external storage, and it is a function provided by most storage systems.

[0009] Staticizing a database is to stop a process of updating a data file in the database. Unless the data base is staticized, since an update process may be performed on data to be snapshot, data consistency is lost and, even if the snapshot is acquired, it will be data which cannot be used for data recovery.

[0010] In a nonstop-operated database system in which a database is accessed 24 hours, it is difficult to staticize the database. For this reason, some DBMS provide a function to staticize a database virtually while executing access to a data file (hereinafter referred to as a virtual database staticizing function). However, since the virtual database staticizing function is executed by a DBMS, it increases the load on the host computer on which the DBMS operates. Further, since database stacisization must be executed until data snapshot is completed, it is very much difficult to use it in a large-scale database or environment under a heavy load when influences on regular tasks are taken into consideration.

[0011] As a method for solving to the above-described problems, a method is under study, in which a DBMS cooperates with software operating on a host computer or an external storage to reduce the load on the host computer at the time of data snapshot as much as possible.

[0012] A typical approach is to staticize a virtual database using a virtual database staticizing function of a DBMS and to create a snapshot of a file or logical volume which is to be snapshot at the point in time when the database is staticized. When the creation of the snapshot is completed, the virtual database staticization is canceled, and the DBMS returns to a normal operation. Next, backup software or the like is used to make a copy of the snapshot in a backup device.

[0013] A snapshot can be created by using an LVM (Logical Volume Manager) of an OS, software provided by various vendors, or a snapshot creating function provided by an external storage.

[0014] When a snapshot is to be acquired by an automatic operation utilizing an application such as scheduling software according to this method, the application must request the DBMS to staticize the database to put the database in a consistent state, at a time when a snapshot is to be acquired, and it must create a snapshot while the database is staticized.

[0015] When the LVM or software is used, the LVM or software must have means for requesting a DBMS to staticize a database. The DBMS is also required to have the database staticizing function or an application interface which allows database staticization to be executed according to a request from an external application. This places a limit on software and DBMSs that can be used or necessitates modifications of software or DBMS.

[0016] Further, since the LVM and software operate on a host computer, loads are placed on the host computer not only when a snapshot is created but also by management of the snapshot or the like.

[0017] In order to mitigate the above-described problems, methods for acquiring a snapshot having consistency without placing an unduly heavy load on a host computer are understudy. For example, a method may be employed in which a snapshot function provided by some external storages is used. In this case, a host computer requests an external storage to create a snapshot through an interface provided by the external storage; the external storage creates a snapshot upon receipt of the request; and the management of the snapshot is thus conducted by the external storage. As a result, the host computer is freed from loads other than a load associated with the issue of the snapshot creation request.

[0018] The use of a snapshot acquired according to the above method makes it possible to restore consistent data when a logic fault or the like has occurred. This schematically illustrated in FIG. 1. First, as shown in FIG. 1, data in which a logic fault has occurred is restored to the snapshot data that is closest to the time of occurrence of the fault among snapshots acquired before the occurrence of the logic faults. Next, data updates which have been made to the data until immediately before the occurrence of the logic fault are re-executed (hereinafter referred to as roll forward). The roll forward is a function which is provided by a common DBMS.

[0019] According to the above-described method, in general, a system manager or a program or batch job operating on a host computer requests a DBMS to staticisize the database, and the system manager or the like issues a snapshot creation request to an external memory while the database is staticized. When the creation of a snapshot is completed, the system manager or the like cancels the database staticization and acquires the snapshot. The database staticization is executed by the DBMS. Therefore, a load is placed on the host computer on which the DBMS operates when the database is staticized.

[0020] The above-described method makes it possible to restore data having consistency before the occurrence of a logic fault.

[0021] However, in a nonstop-operated database system, since a reduction in processing performance attributable to a virtual database staticizing process performed for each snapshot can be a problem, it is necessary to acquire snapshots by selecting a time zone in which the host computer has a relatively light load or to keep the frequency of the database staticizing process as low as possible. Such a restriction reduces the number of points at which a logic fault can be recovered. When the number of points where recovery is enabled is reduced, a problem arises in that a long time is required to execute a roll forward process from the data of a snapshot until a state immediately before the occurrence of a logic fault.

[0022] Further, since the database staticizing process may involve a separate interface for each DBMS and some DBMS may not have required functions, it is difficult to manage backup and restoration in an environment where various platforms exist.

[0023] It is therefore an object of the invention to make it possible to acquire a snapshot using a method which does not involve staticization.

[0024] It is another object of the invention to set as large number of points where recovery of the snapshot due to the logic fault is enabled as possible.

[0025] It is another object of the invention to manage backup and restoration in an environment where various platforms exist.

[0026] A snapshot acquisition controller according to one aspect of the invention cooperates with a computer system having a host computer on which a database management program (hereinafter referred to as DBMS) is operating, an external storage which stores data managed by DBMS, and a snapshot function unit for acquiring a snapshot of data on the external storage upon receipt of a snapshot acquisition request, the DBMS intermittently executing a checkpoint process for temporarily storing update data for updating data on the external storage in a buffer and outputting all update data accumulated in the buffer to the external storage according to timing controlled by itself. The snapshot acquisition controller has checkpoint detection means which detects the execution of the checkpoint process that the DBMS intermittently executes according to, timing controlled by itself and snapshot acquisition request means which transmits the snapshot acquisition request to the snapshot function unit when the execution of the checkpoint is detected by the checkpoint detection means.

[0027] In a preferred embodiment, the checkpoint detection means detects the execution of the checkpoint process by monitoring an operation or information that the DBMS externally exhibits.

[0028] In a preferred embodiment, the checkpoint detection means detects the execution of the checkpoint process by monitoring an operation performed on the external storage by the DBMS or information output to the external storage by the same.

[0029] In a preferred embodiment, the checkpoint detection means detects the execution of the checkpoint process by monitoring an operation log that is a record of history of operations including the checkpoint process executed by the DBMS.

[0030] In a preferred embodiment, when the DBMS has a user interface for a manager and outputs information regarding the checkpoint process to the user interface for a manager, the checkpoint detection means detects the execution of the checkpoint process by monitoring information output by the DBMS to the user interface for a manager.

[0031] In a preferred embodiment, when the DBMS executes the checkpoint process at a first time interval, the checkpoint detection means performs a monitoring operation for detecting the checkpoint process at a second time interval shorter than the first time interval.

[0032] In a preferred embodiment, the snapshot acquisition request is transmitted without requesting the DBMS to staticize a database or to staticize a virtual database.

[0033] In a preferred embodiment, the snapshot acquisition controller further has identification information storing means which stores checkpoint identification information for identifying a detected checkpoint process and snapshot identification information for identifying an acquired snapshot in association with each other when the snapshot is acquired as a result of detection of the execution of the checkpoint process.

[0034] In a preferred embodiment, the snapshot acquisition controller further has snapshot restoration instructing means which, upon receipt of a snapshot recovery instruction including the specification of arbitrary checkpoint identification information, acquires snapshot identification information stored in association with the specified checkpoint identification information from the identification information storing means and which transmits a restoration request for a snapshot identified by the acquired snapshot identification information to the snapshot function unit or a predetermined functional unit having a snapshot restoring function.

[0035] A computer program for controlling acquisition of a snapshot according to another aspect of the invention is used in conjunction with a computer system having a host computer on which a DBMS is operating, an external storage which stores data managed by DBMS, and a snapshot function unit for acquiring a snapshot of data on the external storage upon receipt of a snapshot acquisition request, the DBMS intermittently executing a checkpoint process for temporarily storing update data for updating data on the external storage in a buffer and outputting all update data accumulated in the buffer to the external storage according to timing controlled by itself. The computer program causes a computer in or out of the computer system to execute the steps of detecting the execution of the checkpoint process that the DBMS intermittently executes according to timing controlled by itself and transmitting the snapshot acquisition request to the snapshot function unit when the execution of the checkpoint is detected at the step of detecting a checkpoint.

[0036] A storage system used in conjunction with a host computer on which a DBMS operates according to another aspect of the invention has an external storage which stores data in a database managed by the DBMS, a snapshot function unit which acquires a snapshot of data on the external storage upon receipt of a snapshot acquisition request, and a snapshot acquisition control unit for controlling the acquisition of the snapshot. When the DBMS is adapted to temporarily store update data for updating the data on the external storage in a buffer and to intermittently execute a checkpoint process for outputting all update data accumulated in the buffer to the external storage at timing controlled by itself, the snapshot acquisition control unit has checkpoint detecting means which detects the execution of the checkpoint process that the DBMS intermittently executes at timing controlled by itself and snapshot acquisition requesting means which transmits the snapshot acquisition request to the snapshot function means when the execution of the checkpoint is detected by the checkpoint detection means.

[0046] An embodiment of the invention will now be described using the drawings.

[0047] A schematic configuration of a database system which is an embodiment of the invention will be described using FIG. 2. In the figure, the database system is constituted by a host computer 10 and an external storage 20. For example, the host computer 10 and the external storage 20 are connected by an interface in compliance with Fibre Channel Protocol or Internet Protocol. For example, the host computer 10 is a computer such as a general purpose computer or workstation, and a database management system 11 (hereinafter referred to as a DBMS) and a snapshot acquisition control program 13 for detecting a checkpoint and controlling the acquisition of a snapshot are operating under a predetermined operating system. For example, the external storage 20 is a disk array subsystem which provides the DBMS 11 with storage areas of a database such as a data table 31, a Redo log 32, and an operation log 33, for example. Main data of the database are recorded in the data table 31. Information on all changes made to the database is recorded in the Redo log 32. Information on operations of the database is recorded in the operation log 33. The external storage 20 may be provided with a snapshot function unit 41 or the like for acquiring and restoring a snapshot of data in a storage area. Further, the external storage 20 also provides storage areas for data used by the snapshot acquisition control program 13, e.g., areas for a checkpoint-snapshot correspondence management table (hereinafter referred to as a CP-SH correspondence management table) 30 and a snapshot management table (hereinafter referred to as an SH management table) 40.

[0048] The DBMS 11 is a system which manages a database. The DBMS 11 executes a process of updating the database in the external storage 20 according to a request from a client such as a host application or a user which is not shown. The procedure of updating the database is as follows. Specifically, the DBMS 11 stores and accumulates data in a buffer 12 in the host computer 10. The DBMS 11 collectively outputs update data in the buffer to the external storage 20 at points in time that come in a discrete manner according to timing controlled by itself to update the data table 31, the Redo log 32, and the operation log 33 in the external storage 20 (FIG. 2: arrow 101).

[0049] The process of updating the data in the external storage 20 by flushing the data in the buffer 12 in such an intermittent manner is referred to as a checkpoint process. Thus, the data on the buffer 12 of the host computer 10 and the data stored in the external storage are put in a consistent state. The timing for the checkpoint process may be controlled based on a condition set by the user for the DBMS 11 (e.g., a timer setting) or may be controlled based on a particular condition of the DBMS 11 (e.g., buffer full). In either case, the timing is only required to be controlled internally to the DBMS 11, and the DBMS 11 is not required to have any special interface for externally providing information on the control of the timing. This allows various existing DBMSs to be used as the DBMS 11 and the embodiment to be implemented in an environment where various platforms exit.

[0050] The snapshot acquisition control program 13 continuously monitors whether the DBMS 11 has executed the checkpoint process or not (FIG. 2: arrow 102) and requests the snapshot function unit 41 in the external storage 20 to acquire a snapshot when anew checkpoint is detected (FIG. 2: arrow 103). As a specific method for detecting that the checkpoint process has been executed, this embodiment employs a method in which the operation log 33 of the external storage 20 is monitored. Specifically, each time the DBMS 11 executes the checkpoint process, it records so in the operation log 33. Therefore, it is possible to detect the fact that the checkpoint process has been processed by checking the contents of updates of the operation log 33. In this case, when the DBMS 11 executes checkpoint at intervals of t seconds, for example, the snapshot acquisition control program 13 checks the operation log 33 at intervals of T seconds which are shorter than t seconds. For example, the check intervals T may be arbitrarily set by the user.

[0051] When the snapshot acquisition control program 13 detects the execution of a new checkpoint process, it requests acquisition of a snapshot as described above (FIG. 2: arrow 103) and also reads and writes the checkpoint-snapshot correspondence management table (hereinafter referred to CP-SH correspondence management table) 30 in the external storage 20. Specifically, when the snapshot acquisition control program 13 detects the execution of the new checkpoint process, it stores a checkpoint ID for identifying the new checkpoint process in the CP-SH correspondence management table (FIG. 2: arrow 104) and requests the snapshot function unit 41 to acquire a snapshot (FIG. 2: arrow 103). When a snapshot is acquired, the snapshot acquisition control program 13 acquires a snapshot ID for identifying the snapshot acquired from the snapshot function unit 41 (FIG. 2: arrow 105) and stores the snapshot ID in the CP-SH correspondence management table 30 in association with the checkpoint ID (FIG. 2: arrow 6).

[0052] The snapshot acquisition control program 13 performs the above-described control each time the execution of a checkpoint process is detected. Thus, snapshots immediately after points in time when a checkpoint process is executed (points in time when the database is made consistent) are acquired one after another, and there is no need for separately requesting the DBMS 11 to staticize or virtually staticize the database.

[0053] When the snapshot acquisition control program 13 receives a restoration request message including a checkpoint ID to be restored from the system manager at an arbitrary point in time, it refers to the CP-SH correspondence management table 30 to acquire the snapshot ID associated with the checkpoint ID (FIG. 2: 107) and requests the snapshot function unit 41 to restore the snapshot (FIG. 2: 108).

[0054] The external storage 20 has the data table 31, the Redo log 32, the operation log 33, the CP-SH correspondence management table 30, and the snapshot management table (hereinafter referred to as SH management table) 40 for managing snapshots.

[0055] As described above, main data of the database are recorded in the data table 31, and information on data processing such as update and deletion of data, i.e., information on all changes made to the database is recorded in the Redo log 32. Information on operations of the database such as recording of snapshots and recording of checkpoints is recorded in the operation log 33. For example, the operation log 33 has records of an operation ID (e.g., a checkpoint ID) for identifying each process such as a snapshot process or checkpoint process, a time at which the process has been performed, and so on.

[0056] Checkpoint IDs and snapshot IDs are stored in association with each other in the CP-SH correspondence management table 30. FIG. 3 shows an example of data contents of the CP-SH correspondence management table 30. The checkpoint IDs are generated by the DBMS 11. The DBMS 11 uses the checkpoint IDs to manage respective checkpoint processes. The snapshot IDs are used for identifying respective snapshot processes, and the snapshot function unit 41 uses the snapshot IDs to manage the respective snapshots. Thus, the snapshot acquisition program 13 can acquire the ID of a snapshot associated with a checkpoint (performed immediately after the checkpoint process) from the CP-SH correspondence management table 30 and the checkpoint IDs.

[0057] The snapshot function unit 41 acquires (FIG. 2: arrow 109, arrow 110, arrow 111) or restores a snap shot when requested.

[0058] While the function of acquiring a snapshot is provided as a function of the external storage 20 in the present embodiment, it may be provided by software operating on the host computer 10 such as an LVM (Logical Volume Manager) loaded on an operating system of a host apparatus such as the host computer 10.

[0059] In the SH management table 40, the snapshot IDs, the addresses of snapshots 31a of the data table, the addresses of snapshots 32a of the Redo log, and the addresses of snapshots 33a of the operation log are recorded in association with each other. FIG. 4 shows an example of data contents of the SH management table 40. From the snapshot IDs, the external storage 20 can access respective snapshot data (the snapshots 31a of the data table, the snapshots 32a of the Redo log, and the snapshots 33a of the operation log) by referring to the SH management table 40.

[0060] Operations of the database system until it acquires a snapshot will be described using FIGS. 5 and 6.

[0061] FIG. 5 shows a flow chart showing a flow of processes at the time of execution of checkpoint at the DBMS 11.

[0062] When a checkpoint event occurs, the DBMS 11 executes a checkpoint process (FIG. 5: S2). The DBMS 11 generates a checkpoint ID (FIG. 5: S3) and records a checkpoint execution complete log including the checkpoint ID in the operation log 33 (FIG. 5: S4). Referring to the destination of output of the operation log 33, the output may be provided to an interface for management such as a management console.

[0063] FIG. 6 is a flow chart showing a flow of processes for acquiring a snapshot.

[0064] The snapshot acquisition control program 13 checks the operation log 33 at intervals of T seconds (FIG. 6: S11). When the latest checkpoint ID recorded in the operation log 33 agrees with the latest checkpoint ID recorded in the CP-SH correspondence management table 30, it discards the read checkpoint ID and sleeps until the next checkpoint. When the latest checkpoint ID in the operation log 33 is different from the latest checkpoint ID in the CP-SH correspondence management table 30 (FIG. 6: S12) (i.e., when a new checkpoint process different from the recorded checkpoint has been executed), the checkpoint ID is stored in the CP-SH correspondence management table 30 (FIG. 6: S13). Then, a snapshot acquisition request is transmitted to the external storage 20 (FIG. 6: S14).

[0065] When the external storage 20 receives the snapshot acquisition request from the snapshot acquisition control program 13 (FIG. 6: S15), the external storage 20 acquires a snapshot 31a of the data table, a snapshot 32a of the Redo log 32, and a snapshot 33a of the operation log (FIG. 6: S16). The external storage 20 generates a snapshot ID to manage the snapshot and records the snapshot ID and the locations of the respective snapshots (i.e., the snapshot 31a of the data table, the snapshot 32a of the Redo log, and the snapshot 33a of the operation log) in the SH management table 40 in association with each other (FIG. 6: S17). Thus, the external storage 20 can acquire the snapshots (i.e., the snapshot 31a of the data table, the snapshot 32a of the Redo log, and the snapshot 33a of the operation log) from the snap shot ID. The external storage 20 transmits to a snapshot completion report added with the snapshot ID to the snapshot acquisition control program 13 (FIG. 6: S18).

[0066] The snapshot acquisition control program 13 receives the snapshot completion report from the external storage 20 (FIG. 6: S19) and records the snapshot ID in the CP-SH correspondence management table 30 in association with the relevant checkpoint ID (FIG. 6: S20).

[0067] A recovery process at the occurrence of a fault will now be described using FIGS. 7 and 8.

[0068] In FIG. 7, CP represents checkpoint processes; t0, t1, t2, and t3 represent the times of the respective checkpoint processes; tx represents a time at which a logic fault occurs; ty represents a time at which the fault is detected; and 51 to 54 represent snapshots at respective times.

[0069] The DBMS 11 executes checkpoint processes at preset time intervals of t seconds. The snapshot acquisition program 13 checks the contents of the operation log 33 at intervals of T seconds. Although the check interval T may be arbitrarily set as the user specifies, T<t must be true.

[0070] At the time ty, the detection of the logic fault is reported to the system manager according to a report or the like from a database user or an application (FIG. 8: S51). The system manager prohibits access to the relevant data and starts a process of recovering from the logic fault (FIG. 8: S52).

[0071] The system manager checks the Redo log 32 and identifies a process performed at the time tx to be the cause of the logic fault. Further, the system manager acquires the time t1 of the checkpoint immediately before the process at the time tx and the checkpoint ID for the same from the operation log 33 (FIG. 8: S53). The system manager inputs the checkpoint ID acquired from the operation log 33 to the snapshot acquisition control program 13 and requests snapshot restoration (FIG. 8: S54). As a result, a snapshot restoration request event occurs in the snapshot acquisition control program 13 (FIG. 8: S55).

[0072] The input of the checkpoint to the snapshot acquisition control program 13 is carried out by using an interface such as a GUI provided by the same program. The input may alternatively be made from an other program using an API provided by the same program.

[0073] When the snapshot restoration request event occurs (FIG. 8: S55), the snapshot acquisition control program 13 acquires the snapshot ID associated with the checkpoint ID by referring to the CP-SH correspondence management table 30 (FIG. 8: S56). The snapshot acquisition control program 13 requests the external storage 20 (or the snapshot function) to restore the snapshot to which the snapshot ID is assigned (FIG. 8: S57).

[0074] The external storage 20 receives the snapshot restoration request from the snapshot acquisition control program 13 (FIG. 8: S58) and restores the relevant snapshot from the snapshot ID by referring to the SH management table 40 (FIG. 8: S59). When the snapshot restoring process is completed, the external storage 20 transmits a snapshot restoring process completion report to the snapshot acquisition control program 13 (FIG. 8: S60). The snapshot restore completion report may be in any form, e.g., a display of a message to the management console or the like, a report to a separate program or a report to the snapshot acquisition control program 13, as long as the report allows a snapshot restore completion event to be recognized. In the embodiment, the snapshot acquisition control program 13 receives the snapshot restore completion report from the external storage 20 (FIG. 8: S61) and reports the completion of snapshot restoration to the system manager using a GUI (FIG. 8: S62).

[0075] Strictly speaking, the data table for which the snapshot restoring process has been competed is in the state at a time t1′ which is a time later than the time t1 rather than the state at the time t1 (FIG. 7). The reason is that the snapshot acquisition process is not performed simultaneously with the checkpoint, but the snapshot acquisition process is performed when the snapshot acquisition control program 13 detects the execution of a new checkpoint process as a result of checking of the operation log 33 at the intervals of T seconds.

[0076] The data contents may have been updated between the time t1 and the time t1′. When the system manager receives the snapshot restoring process completion report from the snapshot acquisition control program 13. (FIG. 8: S63), it can return the data table 31 to the state at the time t1 by executing a roll back process using a roll back function which the DBMS 11 commonly has (FIG. 8: S64). It is thus possible to restore the data which immediately precedes the occurrence of the logic fault and for which consistency is guaranteed (i.e., the data at the time t1).

[0077] FIG. 9 shows an image of the snapshot restoring process. A snapshot is created for each checkpoint in the data table 31. To restore the snapshot at a certain point in time (FIG. 9: 63), it may be overwritten in the original area of the data table (FIG. 9: 201) or restored (FIG. 9: 202) in a different area (FIG. 9: 31b).

[0078] While a preferred embodiment of the invention has been described above, the examples are only illustrative of the invention, and it is not intended to limit the scope of the invention to this embodiment. The invention may therefore be carried out in various other modes.

[0079] For example, while the data table 31, the Redo log 32, and the operation log 33 are stored in the external storage 20 in the present embodiment, each of them may be stored in a storage other than the external storage 20 or stored on a network on a distributed basis.

[0080] While the data table 31 and the snapshots 31a of the data table are stored in the external storage 20 in the present embodiment, the snapshots may be stored in a storage separate from the external storage 20 in which the data table 31 is stored. While the Redo log 32 and the snapshots 32a of the Redo log 32 are stored in the external storage 20, the snapshots may be stored in a storage separate from the external storage 20 in which the Redo log 32 is stored. Further, while the operation log file 33 and the snapshots 33a of the operation log file are stored in the external storage 20, the snapshots may be stored in a storage separate from the external storage 20 in which the operation log file 33 is stored.

[0081] While the operation log 33 in the external storage 20 is monitored as means for detecting a checkpoint in the present embodiment, the checkpoint process may be monitored using any method such as direct monitoring of the DBMS 11 or monitoring of a checkpoint execution log of the console. In this case, however, it is sufficient to monitor the operation of the external storage 20, and there is no need to know the timing control over the checkpoint process or to conduct the control internally.

[0082] While snapshots of the data table 31, the Redo log 32, and the operation log 33 are acquired in the present embodiment, snapshots may be acquired only for the data table.

[0083] A program other than the system manager or the snapshot acquisition control program 13 may request the snapshot 41 to restore a snapshot based on a checkpoint ID identified by the system manager from the Redo log 32 and using a snapshot ID detected by the snapshot acquisition control program 13.

[0084] The invention makes it possible to acquire a snapshot without conducting staticization or virtual staticization and to acquire snapshots at the same frequency as that of the points in time of checkpoints which constitute the shortest units in which a database can be recovered from a logic fault. Thus, the database can be restored in a short time up to the point in time closest to the time of occurrence of the logic fault.

[0085] According to the invention, since checkpoints and snapshots are managed in association with each other, a database manager or management program can automatically select a necessary snapshot only by specifying a checkpoint, which allows processes to be simplified.

[0086] According to the invention, it is possible to utilize the logic fault recovery function, i.e., the function of restoring to a checkpoint that DBMSs generally have without relying upon specific functions such as a staticizing process or specific interfaces that some DBMSs have.