Computer, hard disk device, disk device sharing system composed of the plural said computers and shared hard disk device, and sharing method applied to the said sharing system

• US 20030217278A1
• Filed: 01/28/2003
• Published: 11/20/2003
• Est. Priority Date: 05/20/2002
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kimura, Shinji, Sato, Masahide, Karasaki, Teiji, Oshima, Satoshi
• Application Number:
  US10/352,108
• Publication Number:
  US 20030217278A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 3/0614 Improving the reliability of storage systems
• CPC Class Codes: G06F 3/0655 Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 3/0676 Magnetic disk device
• CPC Class Codes: G06F 9/4416 Network booting; Remote initial program loading [RIPL]

Abstract

There is provided a disk device sharing system which, in an environment in which plural computers and a shared hard disk device are interconnected via a network, can realize safe data communication between the computers and the hard disk device and can reduce the operation cost needed for maintenance of the computers.

One computer is equipped with two OSs. One is a first OS executing an application program. The other is a second OS performing communication processing with a shared hard disk device. Access from the application program to the shared hard disk device must be done via the second OS. The application program and the first OS are controlled so as not to directly access the hard disk device.

Claims

1. A disk device sharing system having plural computers executing an application program and a hard disk device shared by the plural said computers in which the plural said computers and the said hard disk device are interconnected via a network, wherein

the plural said computers have a first operating system executing the said application program and a second operating system performing communication processing between the said computers and the said hard disk device, the said first operating system and the said second operating system being executed to be independent from each other.

2. The disk device sharing system according to claim 1, wherein the said first operating system is a user processing OS controlling the said application program executed by a user in the said computer, the said second operating system is a communication processing OS controlling communication processing between the said computers and the said hard disk device, and the plural said computers are not provided with an incorporated disk.

3. The disk device sharing system according to claim 2, wherein the said hard disk device has key-generation data and encrypts communication data between the plural said computers and the said hard disk device.

4. The disk device sharing system according to claim 3, wherein the plural said computers program boot the said first operating system, the said second operating system and the said application program from the said hard disk device via the said network.

5. The disk device sharing system according to claim 3, wherein the plural said computers program boot the said first operating system and the said second operating system from the said hard disk device via the said network and load the said application program as data from the said hard disk device.

6. The disk device sharing system according to claim 5, wherein the said hard disk device generates key data based on the said key-generation data to encrypt communication data between the plural said computers and the said hard disk device and delivers the said key-generation data or the said key data to the plural said computers at the said program boot.

7. A computer having a first OS and a second OS, wherein the said first OS and the said second OS are executed to be independent from each other, the said computer has application software used by a user and a communication processing part, data obtained after the said user executes the said application software by control of the said first OS is encrypted by control of the said second OS in an encryption processing unit of the said communication processing part, and the said encrypted data is transmitted via a network part controlled by the said second OS to the hard disk device connected to an external interface.

8. The computer according to claim 7, wherein the said second OS controls the said communication processing part, and the said encryption processing unit generates key data based on key-generation data delivered from the said hard disk device to perform the said encryption of the said data.

9. The computer according to claim 8, wherein the said first OS is a user processing OS controlling the said application software, and the said second OS is a communication processing OS performing communication of the said encrypted data with the said hard disk device via the said network part.

10. A hard disk device having a CPU, a memory, a hard disk unit and a network part, wherein

the said CPU includes a boot processing part, an authentication program unit, a communication processing part and a disk management part controlling the said hard disk unit;

the said communication processing part has an encryption processing unit and key-generation data;

the said authentication program unit holds hardware information of each of plural computers connected via the said network part and user information managing said computer;

the said hard disk unit has plural areas in which the said hardware information for each of the plural said computers is stored; and

the said encryption processing unit processes a boot request transmitted from the said computer in the said boot processing part, generates key data based on the said key-generation data, and adds the said key-generation data or key data to the said hardware information to deliver it to the said computer transmitting the said boot request.

11. The hard disk device according to claim 10, wherein the said hardware information includes a user processing OS and a communication processing OS stored in each of the said computers and an application program used by a user, and the said user information is authentication information for identifying the user.

12. The hard disk device according to claim 11, wherein the said authentication information is information of the name of a user using the said computer, the password of the said user, and a data storing disk used by the said user.

13. The hard disk device according to claim 10, wherein the said key data is generated by a key data part of the said encryption processing unit, and the said key data part holds inherent data and encryption information for identifying the computer.

14. The hard disk device according to claim 13, wherein the said inherent data and encryption information is information including a network address of the said computer, the said key-generation data, the said key data, and generation time of the said key data.

15. The hard disk device according to claim 10, wherein according to control of the said disk management part, the said encrypted communication data transmitted from the said computer is processed by the said communication processing part so as to store the said encrypted communication data in any one of the plural said areas of the said hard disk unit.

16. The hard disk device according to claim 15, wherein according to control of the said disk management part, the said encrypted communication data transmitted from the said computer is returned to unencrypted original data using the said key data of the said encryption processing unit so as to store the said original data in any one of the plural said areas.

17. A disk device sharing method in a computer system having plural computers and a hard disk device shared by the plural said computers in which the plural said computers and the said hard disk device are interconnected via a network, comprising:

a step in which the said computer system performs boot processing;

a step in which after the said boot processing, the said computer generates authentication to transmit it to the said hard disk device after a user inputs an authentication ID;

a step in which the said hard disk device performs authentication processing of the said authentication and an encryption processing part of the said hard disk device generates key data to the plural said computers; and

a step in which the said key data is delivered to the said computer together with an operating system necessary for execution of the said computer and application software used by the said user.

18. The disk device sharing method according to claim 17, wherein the said hard disk device has key-generation data and a key data part, and in the said generation step, the said key data is generated based on the said key-generation data, and the said key data part stores the said key data needed when communication data between the plural said computers and the said hard disk device are encrypted by the said encryption processing part.

19. The disk device sharing method according to claim 18, wherein the said operating system includes a user processing OS and a communication processing OS, and in the said delivering step, the said key-generation data or key data is transmitted to the said computer together with the said operating system and application software.

20. The disk device sharing method according to claim 17, further comprising a step in which using the said key data, the said computer encrypts data obtained after executing the application software used by the said user, transferring it via the said network to the said hard disk device.