System and Methods for Host Enabled Management in a Storage System

• US 20130179993A1
• Filed: 01/04/2013
• Published: 07/11/2013
• Est. Priority Date: 01/05/2012
• Status: Active Grant

• Current Assignee: Infinidat Ltd.
• Original Assignee: Infinidat Ltd.
• Inventors: Sandler, Kariel, Rozendorn, Guy, Broido, Jacob
• Granted Patent: US 9,087,201 B2
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/60 Protecting data

Abstract

A storage system that includes a management communication interface coupled to a storage management layer and further includes a data communication interface. Upon receiving a request for accessing the storage management layer, from the host, via the data communication interface, the management layer sends to the host, access information necessary for allowing access of the host to the storage management layer via the management communication interface; and upon receiving a management command, from the host via the management communication interface, the host is provided with access to the storage management layer, in cases where the management command conforms to the access information.

Claims

1. A method of operating a storage system comprising a data communication interface and a management communication interface operatively coupled to a storage management layer, the method comprising:

a. responsive to receiving via said data communication interface a request from a host for accessing said storage management layer, sending to the host, via said data communication interface, access information necessary for allowing access of the host to said storage management layer via said management communication interface; and

b. responsive to receiving a management command from the host via said management communication interface, providing the host with access to said storage management layer, in cases where the management command conforms to said access information.

2. The method of claim 1, wherein said access information comprises address parameters for addressing said management communication interface.

3. The method of claim 1, wherein said access information comprises authentication information for verifying access of the host to said storage management layer.

4. The method of claim 1, wherein said access information is indicative of a management functionality that is accessible to the host using the access information.

5. The method of claim 1 comprising generating said access information indicative of a management functionality, in accordance with a classification of the host.

6. The method of claim 1 comprising generating said access information in accordance with a requested management functionality, comprised in said request.

7. The method of claim 1, wherein said access information is associated with at least one usage restriction selected from:

a time limitation for using said access information and a maximum number of allowed usages of said access information.

8. The method of claim 1 further comprising denying access to said storage management layer, in case a usage restriction associated with said access information is violated by said management command.

9. The method of claim 1 further comprising denying access to said storage management layer, in case said access information is being reused.

10. The method of claim 1 further comprising denying access to said storage management layer, in case of expiration of a predefined time limitation, associated with said access information.

11. The method of claim 1, wherein said access information is sent to the host using at least two separate messages.

12. The method of claim 1 wherein said data communication interface is a small computer system interface (SCSI) port, configured to operate in compatibility with SCSI standards.

13. The method of claim 1 wherein said request for accessing said storage management layer comprises a SCSI vendor specific command.

14. The method of claim 1, wherein said management command is related to controlling a storage resource related to the host.

15. The method of claim 1, wherein the management command is related to control operations selected from a group consisting of:

operations with regard to volumes, operations with regard to snapshots, operations with regard to snapshot families, and operations with regard to consistency groups.

16. A storage system comprising:

a data communication interface for receiving data access requests addressed to data stored in said storage system;

a management communication interface for receiving management commands; and

a management layer, operatively coupled to said data communication interface and to said management communication interface, and configured to;

receive via said data communication interface a request from a host for accessing said management layer;

send to the host via said data communication interface, access information necessary for allowing access of the host to said management layer, via said management communication interface;

receive via said management communication interface a management command from the host; and

provide the host with access to said storage management layer, in cases where the management command conforms to said access information.

17. The storage system of claim 16, wherein said access information comprises authentication information for verifying access of the host to said storage management layer.

18. The storage system of claim 17, wherein said management layer is configured to generate said authentication information in accordance with a classification of the host.

19. The storage system of claim 17, wherein said management layer is configured to generate said authentication information in accordance with a requested management functionality, comprised in said request.

20. The storage system of claim 16, wherein said management layer is configured to associate said access information with at least one usage restriction selected from:

a time limitation for using said access information and a number of maximum allowed usages of said access information.

21. The storage system of claim 16, wherein said management layer is configured to deny said access, in cases where a usage restriction associated with said access information is violated by said management command.

22. The storage system of claim 16 wherein said data communication interface is a small computer system interface (SCSI) port, configured to operate in compatibility with SCSI standards.

23. The storage system of claim 16, wherein said management communication interface is a web port operatively coupled to said management layer.

24. A non-transitory computer readable storage medium that stores instructions to be executed by a storage system comprising a data communication interface and a management communication interface operatively coupled to a storage management layer;

the instructions comprising;

a. instructions causing the storage system, responsive to receiving a request for accessing said storage management layer from a host via said data communication interface, to send to the host access information necessary for allowing access of the host to said storage management layer via said management communication interface;

b. instructions causing the storage system, responsive to receiving a management command from the host via said management communication interface, to provide the host with access to said storage management layer, in cases where the management command conforms to said access information.