Method and apparatus for controlling access to storage device

• US 20030196055A1
• Filed: 04/30/2003
• Published: 10/16/2003
• Est. Priority Date: 05/24/2000
• Status: Active Grant

• Current Assignee: Kenichi Takamoto, Toshimitsu Kamano
• Original Assignee: Kenichi Takamoto, Toshimitsu Kamano
• Inventors: Takamoto, Kenichi, Kamano, Toshimitsu
• Granted Patent: US 6,968,434 B2
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 2003/0697 device management, e.g. handlers, drivers, I/O schedulers
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/0661 Format or protocol conversion arrangements
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

The storage regions under command of a storage controller can be simply enabled and disabled to access to by automatically registering connected host computers. Such system can be achieved by taking a step of acquiring N_Port_Name information included in a login frame from the host computers, and a step of displaying a table of access right of host computers to a logical unit under command of storage controller. A security table for the storage controller can be generated by supervisor'"'"'s setting the access enable/disable flag information.

Claims

1. A storage system comprising:

a storage control unit for receiving a data write request from a plurality of host computers via a plurality of I/O ports; and

at least one storage unit coupled to said storage control unit and having storage regions for storing data,

wherein said storage control unit comprises;

a control module for separating information including a Company Identifier (ID) and a World Wide Name (WWN) of a host computer from a frame included in a login request from said host computer,

a control memory including an enable/disable table which indicates, on a vender basis, whether or not a vender has an access right to each of said I/O ports, and

a monitor for displaying a set of said WWN and said access right of said host computer to said I/O ports, and

wherein said monitor further displays a condition of said access right of said host computer to said I/O ports as default obtained by referring to said enable/disable table.

2. A storage system comprising:

a plurality of host computers;

a plurality of storage control units each for receiving a data write request from a host computer;

a network which couples said host computers and said storage control units to each other;

a storage area network (SAN) manager coupled to said network; and

a fiber channel which couples said host computers, and said storage control units to each other; and

at least one storage unit connected to each of said storage control units and having storage regions for storing data,

wherein said SAN manager separates information including a Company Identifier (ID) and a World Wide Name (WWN) of a host computer from a frame included in a login request from said host computer,

wherein each storage control unit comprises;

a control module which receives said WWN of said host computer from said SAN manager, and

wherein said SAN manager comprises;

a control memory including an enable/disable table which indicates, on a vendor basis, whether or not a vendor has an access right to each of said storage regions in said at least one storage unit, and

a monitor for displaying a set of said WWN of said host computer and said storage regions.

3. The storage system according to claim 2, wherein said SAN manager displays on said monitor conditions of said access right of said host computer to said storage regions as default obtained by referring to said enable/disable table.

4. The storage system according to claim 3, wherein said conditions are alterable by an operator from said monitor.