Storage device and method of setting configuration information of same

• US 20070038747A1
• Filed: 10/18/2006
• Published: 02/15/2007
• Est. Priority Date: 10/18/2002
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Igarashi, Yoshinori, Yagi, Shuichi, Kishimoto, Toshimichi
• Granted Patent: US 7,562,160 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/1402 Saving, restoring, recovering or retrying
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

Configuration information settings for a storage device are made highly reliable and facilitated. The storage device includes a service processor for setting storage device configuration information, and a terminal device connected to the service processor via a private line to send a command group, received from an operator and related to the storage device configuration information, to the service processor. The service processor also includes a device for determining approval or denial of execution of the command group prior to execution of the command group received from the terminal device.

Claims

1-6. -6. (canceled)

7. A storage device comprising:

a service processor configured to set configuration information of the storage device,

wherein the service processor receives, from a terminal device, a command group described on a script sheet related to the configuration information of the storage device and first digest data based on the command group described on the script sheet, creates second digest data based on the command group described on the script sheet received from the terminal device, compares the first digest data with the second digest data, and determines approval or denial of execution of the command group, based on results of the comparison, prior to execution of the command group received from the terminal device.

8. The storage device according to claim 7, wherein the service processor decrypts, by using a secret key, the first digest data that is encrypted by using the secret key at the terminal device.

9. The storage device according to claim 7, wherein the command group is used by the service processor to set a structure of the storage device.

10. The storage device according to claim 7, wherein the command group contains variable required for execution of commands by the service processor.

11. The storage device according to claim 7, wherein the script sheet includes a group of operations relating to addition and deletion of path definition information for connection of a host device and a logical volume of the storage device.

12. The storage device according to claim 7, wherein the script sheet includes a setting procedure that describes respective settings as argument parameters for setting nomenclatures and information required for settings thereof.

13. The storage device according to claim 7, wherein the script sheet includes the command group is determined to be valid by a reliable operator guaranteeing that no tampering has occurred before input into the storage device.

14. The storage device according to claim 7, wherein the digest data and the second digest data is created by compressing the script sheet containing the command group.

15. A method of setting configuration information of a storage device comprising:

creating first digest data based on a command group described on a script sheet related to the configuration information of the storage device at a terminal device;

sending, to a service processor, the command group described on the script sheet and the first digest data;

receiving, at the service processor, the command group described on the script sheet and the first digest data,

creating second digest data based on the command group described on the script sheet received from the terminal device;

comparing the first digest data with the second digest data; and

determining approval or denial of execution of the command group, based on results of the comparison, prior to execution of the command group received from the terminal device.

16. The method according to claim 15, further comprising:

decrypting, by using a secret key, the first digest data that is encrypted by using the secret key at the terminal device.