Method and apparatus for controlling access to storage device

• US 20040199736A1
• Filed: 04/21/2004
• Published: 10/07/2004
• Est. Priority Date: 05/24/2000
• Status: Active Grant

• Current Assignee: Kenichi Takamoto, Toshimitsu Kamano
• Original Assignee: Kenichi Takamoto, Toshimitsu Kamano
• Inventors: Takamoto, Kenichi, Kamano, Toshimitsu
• Granted Patent: US 7,130,978 B2
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 2003/0697 device management, e.g. handlers, drivers, I/O schedulers
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/0661 Format or protocol conversion arrangements
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

The storage regions under command of a storage controller can be simply enabled and disabled to access to by automatically registering connected host computers. Such system can be achieved by taking a step of acquiring N_Port_Name information included in a login frame from the host computers, and a step of displaying a table of access right of host computers to a logical unit under command of storage controller. A security table for the storage controller can be generated by supervisor'"'"'s setting the access enable/disable flag information.

Claims

1. A storage system comprising:

a storage control unit for receiving a data write request from a plurality of host computers which configure a plurality of host groups;

at least one storage unit coupled to said storage control unit, said storage unit has a plurality of storage regions for storing data;

wherein said storage control unit has security information indicating relationships between each of said host groups and each of said storage regions accessible for each of said host groups;

wherein said security information is used by said storage control unit to reject accesses from other host groups other than each of said host groups are permitted to access to each of said storage regions; and

wherein said storage control unit receives a Port Login (PLOGI) frame from a newly host computer which is newly coupled to said storage control unit, and acquires a World Wide Name (WWN) and a source identifier (S_ID) contained in said PLOGI frame from said PLOGI frame so that an administrator can select a storage region of said plurality of storage regions to be accessed from a host group belonging to said newly host computer by using said acquired WWN, without inputting a WWN of said newly host computer by said administrator.

2. A storage system according to claim 1, wherein said storage control unit sends Accept (ACC) frame or Link Service Reject (LS_RJT) frame based on said received PLOGI frame.

3. A storage system according to claim 1, wherein said newly host computer is newly started up.

4. A storage system according to claim 1, wherein said storage control unit generates data to display said acquired WWN of said newly host computer.

5. A storage system according to claim 1, wherein said storage control unit provides data to display a table which is relationships between said host group belonging to said newly host computer and said storage region to be accessed from said host group belonging to said newly host computer.

6. A storage system according to claim 1, wherein said administrator can select an access enable right for said newly host computer to access said storage region of said plurality of storage regions.

7. A storage system according to claim 1, wherein said storage region is a logical unit.

8. A storage system comprising:

a storage control unit for receiving a data write request from a plurality of host computers which configure a plurality of host groups;

at least one storage unit coupled to said storage control unit, said storage unit has a plurality of storage regions for storing data;

wherein said storage control unit has security information indicating relationships between each of said host groups and each of said storage regions accessible for each of said host groups;

wherein said security information is used by said storage control unit to reject accesses from other host groups other than each of said host groups are permitted to access to each of said storage regions; and

wherein said storage control unit receives a Port Login (PLOGI) frame from a newly host computer which is newly coupled to said storage control unit, and acquires a source identifier (S_ID) contained in said PLOGI frame from said PLOGI frame so that an administrator can select a storage region of said plurality of storage regions to be accessed from a host group belonging to said newly host computer.

9. A storage system according to claim 8, wherein said storage control unit sends Accept (ACC) frame or Link Service Reject (LS_RJT) frame based on said received PLOGI frame.

10. A storage system according to claim 8, wherein said newly host computer is newly started up.

11. A storage system according to claim 8, wherein said storage control unit acquires a World Wide Name (WWN) contained in said PLOGI frame from said PLOGI frame and generates data to display said acquired WWN of said newly host computer.

12. A storage system according to claim 8, wherein said storage control unit provides data to display a table which is relationships between said host group belonging to said newly host computer and said storage region to be accessed from said host group belonging to said newly host computer.

13. A storage system according to claim 8, wherein said administrator can select an access enable right for said newly host computer to access said storage region of said plurality of storage regions.

14. A storage system according to claim 8, wherein said storage region is a logical unit.

15. A storage system according to claim 8, wherein said storage control unit acquires a World Wide Name (WWN) contained in said PLOGI frame from said PLOGI frame.

16. A storage system comprising:

a storage control unit coupled to a network, said storage control unit receives a data write request from a plurality of host computers which configure a plurality of host groups;

at least one storage unit coupled to said storage control unit, said storage unit has a plurality of logical units for storing data; and

wherein said storage control unit receives a Port Login (PLOGI) frame from a newly host computer which is newly coupled to said network, acquires a source identifier (S_ID) contained in said PLOGI frame from said PLOGI frame, and provides data to display relationships between a newly host group belonging to said newly host computer and a logical unit of said plurality of logical units to be accessed from said newly host group.

17. A storage system according to claim 16, wherein said storage control unit sends Accept (ACC) frame or Link Service Reject (LS_RJT) frame based on said received PLOGI frame.

18. A storage system according to claim 16, wherein said newly host computer is newly started up.

19. A storage system according to claim 16, wherein said storage control unit acquires a World Wide Name (WWN) contained in said PLOGI frame from said PLOGI frame and generates data to display said acquired WWN of said newly host computer.

20. A storage system according to claim 16, wherein said storage control unit makes state that an administrator can select an access enable right for said newly host group to access said logical unit of said plurality of logical units.

21. A storage system according to claim 16, wherein said storage control unit acquires a World Wide Name (WWN) contained in said PLOGI frame from said PLOGI frame.