Method and system for time zero backup session security
First Claim
1. A method in a data processing system of securing backup copying of designated datasets stored within at least a first storage subsystem connected to the data processing system by a storage control unit against interference from contemporaneously executing applications within one or more processing units of the data processing system, the method comprising the steps of:
- responsive to initiation of a data backup session by an application executing on a processing unit, generating a unique identifier for the data backup session;
determining all member paths of a group of paths designated by the processing unit for communication between itself and the designated datasets stored within the first storage subsystem;
associating the data backup session unique identifier with the group of paths; and
allowing access to the data backup session only along a member path of the group of paths associated with the data backup session unique identifier.
2 Assignments
0 Petitions
Accused Products
Abstract
A data backup copying session on a data processing system is secured responsive to initiation of the data backup session by an application executing on a processing unit by generating a unique identifier for the data backup session. Thereafter, all member paths of a group of paths designated by the processing unit for communication between itself and the first storage subsystem are identified and associated with the data backup session. Access to the session is thereafter allowed only along a member path of the group of paths associated with the data backup session. The system and method of the invention further provide for fault recovery and protection against excessive demand on storage control unit memory.
225 Citations
14 Claims
-
1. A method in a data processing system of securing backup copying of designated datasets stored within at least a first storage subsystem connected to the data processing system by a storage control unit against interference from contemporaneously executing applications within one or more processing units of the data processing system, the method comprising the steps of:
-
responsive to initiation of a data backup session by an application executing on a processing unit, generating a unique identifier for the data backup session; determining all member paths of a group of paths designated by the processing unit for communication between itself and the designated datasets stored within the first storage subsystem; associating the data backup session unique identifier with the group of paths; and allowing access to the data backup session only along a member path of the group of paths associated with the data backup session unique identifier. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A data processing system for securing data backup copying of datasets designated by an application executing on a processing unit of the data processing system and stored within at least a first storage subsystem, the backup copying occurring during concurrent execution of other applications on one or more processing units of the data processing system, comprising:
-
means responsive to initiation of a data backup session by an application executing on a processing unit for generating a unique identifier for the data backup session; means for determining all member paths of a group of paths designated by the processing unit for communication between itself and the designated dataset stored within the first storage subsystem; means for associating the data backup session unique identifier with the group of paths; and means for blocking access to the data backup session along a path not belonging to the group of paths associated with the data a backup session unique identifier. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
Specification