The Improving Research Of IPv4 Geolocation Database In IP Comprehensive Information System

The development of the Internet has brought the demand of IP geolocation. The goal of IP address geolocation is to get the actual geographical using position only in the case that knowing the IP address of the user or equipment under the condition of network where users and devices join, thereby helping the Internet service providers separate users geographically to provide more related items for regional service.IPCIS System (IP Comprehensive Information System) is the subsystem of CERNET (China education and research computer network security System). The aim of IPCIS is to provide the General Information of the required IP addresses for NBOS (Network Behavior Observing System) and the CHAIRS (Cooperative Hybrid Aided incidence Response System) in security system. IPCIS is in the basis of the guarantee system of CERNET database layer, providing the information of ownership, geolocation, type of service, features of communication, activity history and some basic query service of IP addresses. IP geolocation database is used to provide the required geolocation service of the operation management and security requirements of CERNET, so that it can support the system to query the using location of some active IP addresses or security status IP addresses in the system, it can also enable system to analyze users behavior in late period, and plays an important role in the aspect of flow scheduling, network security, network service quality monitoring and etc.Considering CERNET IPCIS security system as the research background, the research content of this dissertation is based on the assistant database-IP geolocation database in IPCIS, aiming to study on reliability and operation maintenance of IP geolocation database, and ensure the good performance both on automatic running and accurate, reliable, convenient data query service.This dissertation first analyzed the defects of IP address geolocation database in credibility, and three aspects -- data validity, coverage and granularity were evaluated respectively. Then, implemented some promotion methods, including validity checks of data and completeness checks of data.Secondly, the dissertation improved the IP address geolocation database on the overall system structure, maintenance function, and the query service of position by analyzing the role of the database in IPCIS and the functions required. The improvement mainly included designing and implementing a conflict resolution based on the election algorithm in updating, establishing the automatic updating mechanism, and creating the query API of RESTful Web services. Consequently, both coverage and accuracy of IP geolocation database have been improved, and at the same time, the integration between IPCIS and IP geolocation database is much better than before. In the CERNET network management and security monitoring system, location query enables the IPCIS to capture the traffic data for helping the network administrator to analyze data effectively, and to predict threat source for monitoring the network security situation.