MANAGEMENT SYSTEM, PROGRAM RECORDING MEDIUM, AND PROGRAM DISTRIBUTION APPARATUS

• US 20110231901A1
• Filed: 05/26/2009
• Published: 09/22/2011
• Est. Priority Date: 05/26/2009
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakamura, Yusaku, Maki, Nobuhiro, Nagai, Takayuki, Shinohara, Daisuke, Kuroda, Takaki
• Granted Patent: US 8,402,534 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

The management system of the present invention is capable of efficiently discovering each apparatus coupled to a communication network. The management server 1 judges a type of an apparatus coupled to a communication network 5 on the basis of service utilization information T1, which is acquired from a discovered device or acquired from a device (an iSNS server 4, for example) having a name server function for resolving an address from a public name, and on the basis of discovery management information prepared beforehand (S1, S2). The management server 1 acquires a communication protocol in accordance with the type of the apparatus from protocol selection rules T3, and attempts authentication of the apparatus by using the communication protocol (S3).

Claims

1. A management system for managing a plurality of apparatuses coupled to a communication network, comprising:

a memory area;

a microprocessor executing predetermined processing using the memory area; and

a communication interface with which the microprocessor communicates with each of the apparatuses via the communication network,

wherein the microprocessor acquires access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the apparatuses via the communication network, judges a type of the monitoring target apparatus, and acquires composition information from the monitoring target apparatus on the basis of the judged type, and protocol selection rules.

2. A management system according to claim 1,

wherein the plurality of apparatuses coupled to the communication network include at least:

a plurality of apparatuses having a storage area; and

a plurality of apparatuses that use the storage area,

wherein the memory area stores at least;

monitoring target address management information for pre-storing the IP address of the monitoring target apparatus;

device coupling management information created by associating a referencing/referenced relationship of public names of apparatus associated with the storage area, with apparatus names corresponding to the public names; and

communication protocol selection information that stores type judgment information for judging the type of the monitoring target apparatus, and communication protocols corresponding to the judged apparatus type, and

wherein, in a case where the communication network includes a name management apparatus that manages, for the respective apparatuses, a public name and an address of the apparatus, and a type of a public name that represents a name assigned to a referenced apparatus or a name assigned to a referencing apparatus, the microprocessor;

(1a) detects a predetermined storage area with which the apparatus name is not associated, by using the device coupling management information;

(1b) in cases where a reference source of public name referencing has been configured in the predetermined storage area, acquires an address corresponding to the reference source from the name management information;

(1c) in cases where the address corresponding to the reference source is registered in the monitoring target address management information, judges the apparatus referencing the predetermined storage area to be a reference source apparatus, and registers this apparatus in the type judgment information;

(1d) acquires a communication protocol prepared beforehand for the apparatus from the communication protocol selection information, and uses the communication protocol to execute authentication of the predetermined apparatus;

(1e) in cases where the reference source has not been configured in the predetermined storage area, issues a request to all addresses defined in the name management information to send apparatus composition information indicating a composition of the reference source apparatus;

(1f) judges an apparatus that sends reference source apparatus composition information in response to the request to be a reference source apparatus, and registers the apparatus in the type judgment information; and

(1g) uses the reference source apparatus communication protocol to execute authentication of the apparatus that sent the reference source apparatus composition information,

wherein, in cases where the name management apparatus is not included in the communication network, the microprocessor;

(2a) issues a request to all addresses included in the monitoring target address management information to send composition information of the reference source apparatus;

(2b) judges an apparatus that sends the apparatus composition information in response to the request to be the reference source apparatus, and registers the apparatus in the type judgment information; and

(2c) uses the reference source apparatus communication protocol to execute authentication of the apparatus that sent the apparatus composition information,

wherein the microprocessor;

acquires, by authenticating a registered apparatus registered in the type judgment information, configuration information relating to another apparatus which uses the registered apparatus, from the registered apparatus;

judges the type of the other apparatus on the basis of the configuration information, and registers the type in the type judgment information; and

acquires a communication protocol prepared beforehand according to the type of the other apparatus from the communication protocol selection information, and uses the communication protocol to execute authentication of the other apparatus, and

wherein, when executing each authentication, in cases where authentication fails in the use of the communication protocol acquired from the communication protocol selection information, the microprocessor re-attempts the authentication by using another communication protocol prepared beforehand for another apparatus type that belongs to the same group as the communication protocol.

3. A management system according to claim 1, wherein, in cases where authentication of the monitoring target apparatus fails, the microprocessor re-attempts authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

4. A management system according to claim 3, wherein, after authenticating the monitoring target apparatus, the microprocessor acquires configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and authenticates the other apparatus on the basis of the type of the other apparatus.

5. A management system according to claim 3,

wherein the microprocessor is capable of executing a first discovery mode and a second discovery mode,

wherein the first discovery mode being configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode being configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.

6. A management system according to claim 3, wherein the network service utilization information is supplied by an iSNS server coupled to the communication network.

7. A computer-readable recording medium recorded with a computer program causing a computer to function as a management apparatus for managing a plurality of apparatuses coupled to a communication network,

wherein the computer program causes the computer to:

acquire access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the respective apparatuses via the communication network;

judge the type of the monitoring target apparatus; and

authenticate the monitoring target apparatus on the basis of the judged type.

8. A computer-readable recording medium according to claim 7, wherein a computer program recorded on the medium causes the computer, in cases where the computer fails to authenticate the monitoring target apparatus, to re-attempt authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

9. A computer-readable recording medium according to claim 7, wherein a computer program recorded on the medium causes the computer, after the monitoring target apparatus is authenticated, to acquire configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and to authenticate the other apparatus on the basis of the type of the other apparatus.

10. A computer-readable recording medium according to claim 7, which is recorded with a computer program causing the computer to execute a first discovery mode and a second discovery mode,

wherein the first discovery mode is configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode is configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.

11. A computer-readable recording medium according to claim 7, wherein the network service utilization information is supplied by an iSNS server coupled to the communication network.

12. A program distribution apparatus for distributing a management computer program that is executed by a management apparatus for managing a plurality of apparatuses coupled to a communication network,

wherein the management apparatus includes:

a memory area;

a microprocessor executing predetermined processing by using the memory area; and

a communication interface with which the microprocessor communicates with each of the apparatuses via the communication network, and

the management computer program causes the microprocessor to;

acquire access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the apparatuses via the communication network;

judge a type of the monitoring target apparatus; and

authenticate the monitoring target apparatus on the basis of the judged type.

13. The program distribution apparatus according to claim 12, wherein, in cases where the microprocessor fails to authenticate the monitoring target apparatus, the microprocessor re-attempts authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

14. The program distribution apparatus according to claim 12, wherein, after the monitoring target apparatus is authenticated, the microprocessor acquires configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and authenticates the other apparatus on the basis of the type of the other apparatus.

15. The program distribution apparatus according to claim 12, which distributes a computer program that causes the microprocessor to execute a first discovery mode and a second discovery mode,

wherein the first discovery mode is configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode is configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.