Data processing system and method

• US 20060155939A1
• Filed: 03/03/2005
• Published: 07/13/2006
• Est. Priority Date: 12/24/2004
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Homma, Hisao, Kawamura, Shunji, Nagasoe, Yasuyuki
• Granted Patent: US 7,243,189 B2
• Time in Patent Office: Days
• US Class Current: 711/152
• CPC Class Codes: G06F 12/0866 for peripheral storage systems, e.g. disk cache
• CPC Class Codes: G06F 3/062 Securing storage systems
• CPC Class Codes: G06F 3/0631 by allocating resources to storage systems
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99955 Archiving or backup

Abstract

An access control attribute that can be established for an extent that is provided in a storage device may be any access control attribute signifying write permission, read permission, and write prohibition, but an access control attribute signifying read prohibition is not supported. In cases where a read request for read target data is received from a communication device that transmits the read request, the data processing system reads read target data from a read source extent without retrieving an access control attribute of the read source extent according to the read request from among a plurality of access control attributes.

Claims

1. A data processing system that is connected to a communication device, comprising:

at least one computer;

a program storage area that stores at least one computer program that is read by the at least one computer;

a storage device that comprises a plurality of extents constituting subareas that are able to store data; and

an attribute storage area for storing a plurality of access control attributes corresponding with the plurality of extents,

wherein the access control attributes corresponding with the extents are access control attributes of a type that is selected from among a plurality of types of access control attributes;

the plurality of types of access control attributes do not include an access control attribute signifying read prohibition but include an access control attribute signifying write permission, an access control attribute signifying read permission, and an access control attribute signifying write prohibition; and

the at least one computer that reads the at least one computer program retrieves, when a write request is received from a communication device that transmits write target data and the write request, an access control attribute of a write-destination extent according to the write request from among the plurality of access control attributes, judges whether the access control attribute thus retrieved is an access control attribute signifying write prohibition, and controls whether the write target data is written to the write destination extent in accordance with the result of the judgment; and

,

when a read request for read target data is received from a communication device that transmits the read request, reads the read target data from a read source extent without retrieving the access control attribute of the read source extent according to the read request from among the plurality of access control attributes.

2. The data processing system according to claim 1, wherein the at least one computer executes the processing of (1) or (2) below in response to a request from the communication device:

(1) processing that renders an area, which includes an area having at least one write target data item that is written to the storage device between a first time and a second time, one extent, and stores the access control attribute for the extent in the attribute storage area;

(2) processing that establishes one extent at a first time, and stores in the attribute storage area an access control attribute for the extent thus set at a second time after write target data has been stored in the extent thus established.

3. A data processing system that is connected to a communication device, comprising:

at least one computer;

a program storage area that stores at least one computer program that is read by the at least one computer;

a plurality of storage devices that store data;

a plurality of extents provided in at least one storage device of the plurality of storage devices;

a cache memory area that temporarily stores data that is exchanged between the storage devices and the communication device;

a control memory area that stores information for controlling the exchange of the data;

a first management area that stores a plurality of access control attributes that correspond with the plurality of extents respectively; and

a second management area that stores, for each storage device, information on the existence of a write prohibition extent that indicates whether a write prohibition extent, which is an extent that corresponds with an access control attribute signifying write prohibition, is included in the plurality of extents,

wherein the first management area exists in the storage device that comprises the plurality of extents;

the second management area exists in at least one of the cache memory area and the control memory area; and

the at least one computer that reads the at least one computer program;

judges, when a write request is received from a communication device that transmits write target data and the write request, whether the write prohibition extent exists in a write-destination storage device by accessing the second management area and referencing information on the existence of the write prohibition extent that corresponds with the write-destination storage device according to the write request; and

,

when it is judged that the write prohibition extent exists in the write destination storage device, accesses the first management area that is provided in the write destination storage device, retrieves, from among the plurality of access control attributes, an access control attribute that corresponds with the write-destination extent among a plurality of extents provided in the write destination storage device, judges whether the access control attribute thus retrieved is an access control attribute signifying write prohibition, and controls whether the write target data is written to the write destination extent in accordance with the result of the judgment.

4. The data processing system according to claim 3, wherein the second management area stores, for each storage device, information on the existence of a read prohibition extent that indicates whether a read prohibition extent, which is an extent corresponding with an access control attribute signifying read prohibition, is included in the plurality of extents;

and

the at least one computer;

judges, when a read request for read target data is received from a communication device that transmits the read request, whether the read prohibition extent exists in a read source storage device by accessing the second management area and referencing information on the existence of a read prohibition extent that corresponds with the read source storage device according to the read request; and

,

when it is judged that the read prohibition extent exists in the read source storage device, accesses the first management area that is provided in the read source storage device, retrieves, from among the plurality of access control attributes, an access control attribute that corresponds with a read source extent among a plurality of extents that are provided in the read source storage device, judges whether the access control attribute thus retrieved is an access control attribute signifying read prohibition, and controls whether the read target data is read from the read source extent in accordance with the result of the judgment.

5. The data processing system according to claim 3, wherein the data that is exchanged via the cache memory between the communication device and the storage devices includes:

management information that includes a variety of management information elements for managing the storage device; and

host data constituting data that is read or written by a host computer constituting one of the communication devices; and

the at least one computer preferentially retains, in the cache memory area, a management information element included in the management information among data that is retained in the cache memory area, which is data that is written to the storage device, and erases the host data from the cache memory area first.

6. The data processing system according to claim 3, wherein the storage device comprises a management information storage area for storing a variety of management information items relating to the constitution of the storage device and a host storage area for storing host data, which is data that is read or written by the host computer constituting one of the communication devices;

the control memory area stores, for each storage device, an update status indicating whether the management information storage area is being updated and an update number that is changed when the management information storage area has been updated; and

the at least one computer;

sets a lock indicating that the writing of data to a certain storage device is prohibited when management information is received from a communication device that transmits the management information for storage in the certain storage device;

changes the update status of the certain storage device to an update in progress status indicating that an update is in progress;

writes the received management information to the management information storage area of the certain storage device;

changes the update number corresponding with the certain storage device when the writing of the management information is complete;

changes the update status of the certain storage device to a no update status indicating that there is no update in progress;

references the update status and update number of the certain storage device;

reads management information from the management information storage area of the certain storage device after referencing the update status and update number of the certain storage device;

references the update status and update number of the certain storage device again after reading the management information; and

judges that the management information thus read is valid when neither of the update statuses that are referenced before and after reading the management information are the update in progress status and the update numbers that are referenced before and after reading the management information are both the same number.

7. The data processing system according to claim 3, wherein, of a management information storage area for storing a variety of management information items relating to the constitution of the storage device and a host storage area for storing host data, which is data that is read or written by the host computer constituting one of the communication devices, the storage device comprises at least the host storage area;

and,

in the event of compliance with a predetermined condition, the at least one computer prohibits at least one of the establishment of the management information storage area for the certain storage device and the removal of the management information storage area from the certain storage device.

8. The data processing system according to claim 7, wherein the predetermined condition is at least one of the conditions that the certain storage device be connected to the host computer and that at least one extent be established for the certain storage device.

9. The data processing system according to claim 3, wherein another storage device that has the same storage size as the storage device exists;

the storage device comprises a management information storage area for storing a variety of management information items relating to the constitution of the storage device and a host storage area for storing host data, which is data that is read or written by the host computer constituting one of the communication devices;

the other storage device comprises another management information storage area with the same storage capacity as the management information storage area in the same location as the location where the management information storage area of the storage device exists; and

the at least one computer copies all the information in the storage device to the other storage device in which the other management information storage area is prepared.

10. The data processing system according to claim 3, wherein another storage device that has the same storage size as the storage device exists;

the storage device comprises a management information storage area for storing a variety of management information items relating to the constitution of the storage device and a host storage area for storing host data, which is data that is read or written by the host computer constituting one of the communication devices;

the other storage device comprises another host storage area but does not comprise another management information storage area; and

the at least one computer;

copies all the information in the storage device to the other storage device in which the other management information storage area is prepared; and

adjusts the address of the other host storage area of the other storage device.

11. The data processing system according to claim 3, wherein another storage device that has the same storage size as the storage device exists;

the storage device comprises a management information storage area for storing a variety of management information items relating to the constitution of the storage device and a host storage area for storing host data, which is data that is read or written by the host computer constituting one of the communication devices; and

the at least one computer prohibits the establishment of information in the storage device for the copy destination when the other storage device conforms to a predetermined condition.

12. The data processing system according to claim 11, wherein the predetermined condition is that at least one extent be established for the other storage device.

13. A data processing method in which there are a plurality of access control attributes each corresponding with a plurality of extents provided in a storage device, the access control attributes corresponding with the extents being access control attributes of a type that is selected from among a plurality of types of access control attributes and in which the plurality of types of access control attributes do not include an access control attribute signifying read prohibition but include an access control attribute signifying write permission, an access control attribute signifying read permission, and an access control attribute signifying write prohibition, comprising the steps of:

receiving a write request from a host computer that transmits write target data and the write request;

retrieving an access control attribute of a write destination extent according to the received write request from among a plurality of access control attributes that each correspond with a plurality of extents provided in the storage device;

judging whether the access control attribute thus retrieved is an access control attribute signifying write prohibition;

controlling whether the write target data is written to the write destination extent in accordance with the result of the judgment;

receiving the read request from a host computer that transmits a read request for read target data; and

reading the read target data from a read source extent without retrieving the access control attribute of the read source extent according to the received read request from among the plurality of access control attributes.

14. The data processing method according to claim 13, wherein the processing of (1) or (2) below is executed in response to a request from the communication device:

(1) processing that renders an area, which includes an area having at least one write target data item that is written to the storage device between a first time and a second time, one extent, and stores the access control attribute for the extent in the attribute storage area;

(2) processing that establishes one extent at a first time, and stores in the attribute storage area an access control attribute for the extent thus set at a second time after write target data has been stored in the extent thus established.

15. A data processing method, where in a plurality of extents provided in at least one storage device of the plurality of storage devices, a cache memory area that temporarily stores data that is exchanged between the storage devices and the communication device, a control memory area that stores information for controlling the exchange of the data, a first management area that stores a plurality of access control attributes that correspond with the plurality of extents respectively, and a second management area that stores, for each storage device, information on the existence of a write prohibition extent that indicates whether a write prohibition extent, which is an extent that corresponds with an access control attribute signifying write prohibition, is included in the plurality of extents, are provided;

the first management area exists in the storage device that comprises the plurality of extents;

the second management area exists in at least one of the cache memory area and the control memory area;

when a write request is received from a communication device that transmits write target data and the write request, a judgment of whether the write prohibition extent exists in a write-destination storage device is performed by accessing the second management area and referencing information on the existence of the write prohibition extent that corresponds with the write-destination storage device according to the write request; and

,

when it is judged that the write prohibition extent exists in the write destination storage device, the first management area that is provided in the write destination storage device is accessed, an access control attribute that corresponds with a write-destination extent among a plurality of extents provided in the write destination storage device is retrieved from among the plurality of access control attributes, a judgment of whether the access control attribute thus retrieved is an access control attribute signifying write prohibition is performed, and control of whether the write target data is written to the write destination extent is performed in accordance with the result of the judgment.