Method and apparatus for providing multi-view of files depending on authorization

• US 20070011166A1
• Filed: 08/29/2005
• Published: 01/11/2007
• Est. Priority Date: 07/05/2005
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakamura, Takaki
• Application Number:
  US11/212,665
• Publication Number:
  US 20070011166A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1416 by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights G06F12/1458 takes precedence
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

This invention provides a file system capable of finely changing the view of a file based on an access authorization. A file providing method for providing file data corresponding to an access authorization for an access source, satisfies: setting an access authorization for each of data in a predetermined region of a file; concatenating the data satisfying the access authorization for the access source according to a predetermined combination; and providing the access source with the concatenated data.

Claims

1. A file providing method for providing file data corresponding to an access authorization for an access source, comprising:

setting an access authorization for each of data in a predetermined region of a file;

concatenating the data satisfying the access authorization for the access source according to a predetermined combination; and

providing the access source with the concatenated data.

2. The file providing method according to claim 1, further comprising:

setting identifiers designating the predetermined combination and access authorization for each identifier;

selecting one of the identifiers satisfying the access authorization for the access source;

concatenating the data according to a combination designated by the selected identifiers; and

providing the access source with the concatenated data.

3. The file providing method according to claim 2, wherein the identifier comprises:

a block position in a file of the data;

a sequence number designating an order in which the data are concatenated; and

a stream number designating a combination of the data.

4. The file providing method according to claim 1, further comprising:

setting a block position in the file of the data, a sequence number designating an order in which the data are concatenated, a stream number designating a combination of the data, and an access authorization for each stream numbers;

selecting a stream number satisfying the access authorization for the access source;

concatenating the data according to a combination designated by the selected stream number; and

providing the access source with the concatenated data.

5. The file providing method according to claim 4, further comprising:

setting a first stream number as a basic stream number and an order of priority of the stream numbers;

determining whether or not the access authorization for the access source satisfies an access authorization for the first stream number; and

then, determining whether or not the access authorization for the access source satisfying the access authorization for each stream number based on the order of priority.

6. The file providing method according to claim 4, further comprising:

setting a first stream number as a basic stream number based on one of an access time, a client of the access source, and a process name of the access source and an order of priority of the stream numbers;

determining whether or not the access authorization for the access source satisfies an access authorization for the first stream number; and

then, determining whether or not the access authorization for the access source satisfying the access authorization for each stream number based on the order of priority.

7. The file providing method according to claim 4, further comprising setting a new stream number by designating at least one of an information including a start offset and an end offset and an information including a sequence number.

8. The file providing method according to claim 4, further comprising deleting the stream number by designating at least one of an information including the stream number, an information including a start offset and an end offset, and an information including a sequence number.

9. The file providing method according to claim 4, further comprising:

setting a first stream number as a basic stream number and an order of priority of the stream numbers;

determining whether or not there is a designation of the first stream number as the basic stream number from the access source;

changing the first stream number into a stream number regarding the designation;

determining whether or not the access authorization for the access source satisfies an access authorization for the first stream number; and

then, determining whether or not the access authorization for the access source satisfying the access authorization for each stream number based on the order of priority.

10. The file providing method according to claim 4, wherein the block position, the sequence number, the stream number, and the access authorization for each stream number are stored in metadata for managing the file.

11. The file providing method according to claim 4, further comprising:

inserting data into the file by designating an offset and the data to be inserted; and

changing the sequence number corresponding to existing data stored behind a position of the offset based on a capacity of the inserted data.

12. The file providing method according to claim 4, further comprising:

deleting data by designating an offset and a data length;

calculating a sum of the offset and the data length; and

changing the sequence numbers of existing data stored behind a position of the calculated sum based on the data length.

13. A file providing method for providing file data corresponding to an access authorization for an access source, comprising:

setting an order in which files are concatenated, combination of the files, and an access authorization for each combination;

concatenating the files according to the combination satisfying the access authorization for the access source; and

providing the access source with the concatenated files.

14. The file providing method according to claim 13, further comprising:

setting access authorizations for the respective files;

concatenating the files satisfying the access authorization for the access source according to the combination; and

providing the access source with the concatenated files.

15. A storage system for providing, based on a request from the host computer, file data stored in a disk drive comprising:

a network interface communicating with a host computer;

a disk interface communicating with the disk drive; and

a control module,

wherein a control module;

sets access authorizations for respective data in a predetermined region of a file in the storage system;

concatenates the data satisfying an access authorization regarding the request according to a predetermined combination; and

provides a source of the request with the concatenated data.

16. The storage system according to claim 15, wherein the control module:

sets a block position in the file of the data, a sequence number designating a position in which the data are concatenated, a stream number designating a combination of the data, and access authorizations for the respective stream numbers;

selects the stream number satisfying the access authorization for the source of the request;

concatenates the data according to a combination designated by the selected stream number; and

provides the source of the request with the concatenated data.

17. A file providing program for providing, based on a request from a host computer, file data stored in a disk device in a storage system including a network interface communicating with the host computer a disk interface communicating with the disk device and a control module, the file providing program comprising:

a first procedure of setting access authorizations for respective data in a predetermined region of a file in the storage system;

a second procedure of concatenating the data satisfying an access authorization regarding the request according to a predetermined combination; and

a third procedure of providing a source of the request with the concatenated data.

18. The file providing program according to claim 17, further comprising:

a fourth procedure of setting a block position in the file of the data, a sequence number designating an order in which the data are concatenated, a stream number designating a combination of the data, and an access authorization for each stream number;

a fifth procedure of selecting the stream number satisfying the access authorization for the source of the request; and

a sixth procedure of concatenating the data according to a combination designated by the selected stream number.