Fiber channel connection magnetic disk device and fiber channel connection magnetic disk controller

• US 6,745,281 B1
• Filed: 06/28/2000
• Issued: 06/01/2004
• Est. Priority Date: 06/30/1999
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Saegusa, Takuya
• Primary Examiner(s): Kim, Matthew
• Assistant Examiner(s): Li, Zhuo H.
• Application Number:
  US09/604,914
• Time in Patent Office: 1,434 Days
• Field of Search: 711/114, 711/100, 711/112, 711/152, 711/153, 711/163, 709/220, 709/225, 709/215, 709/213, 709/216
• US Class Current: 711/112
• CPC Class Codes: G06F 2003/0697 device management, e.g. handlers, drivers, I/O schedulers
• CPC Class Codes: G06F 21/805 using a security table for the storage sub-system
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Fiber channel connection magnetic disk device and controller which have a plurality of fiber-channel specification supporting port controllers, comprising: a port controller for managing the relationship between an identifier allocated to each host and a logical volume accessible from the host having the identifier; and a local access right management table memory for storing the management state of a logical volume accessible from an indicated host, the port controller being capable of rejecting an access from hosts other than the indicated host.

Claims

1. A fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers,

each of said port controllers managing a respective local access right management table representing relationships between host identifiers and logical volumes accessible by hosts corresponding to said host identifiers, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller, and

each of said port controllers rejecting access to logical volumes from hosts other than the hosts indicated to have access to said logical volumes in the port controller'"'"'s local access right management table.

2. The fiber channel connection magnetic disk device as claimed in claim 1, wherein a Node Name defined in the fiber channel specification is used as a host identifier.

3. A fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers,

each of said port controllers managing a respective local access right management table representing relationships between host port identifiers and logical volumes accessible by host ports corresponding to said host port identifiers, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller, and

each of said port controllers rejecting access to logical volumes from host ports other than the host ports indicated to have access to said logical volumes in the port controller'"'"'s local access right management table.

4. The fiber channel connection magnetic disk device as claimed in claim 3, wherein a Port Name defined in the fiber channel specification is used as a host port identifier.

5. A fiber-channel specification supporting fiber channel connection magnetic disk device, comprising:

a plurality of logical volumes;

a volume controller for controlling said logical volumes;

a plurality of fiber-channel specification supporting port controllers, each of which comprises a fiber channel controller, a local memory, a CPU and a common memory access controller;

a common memory that is jointly owned by said plurality of port controllers;

a global access right management table stored in said common memory, the global access right management table storing, for each logical volume, Node Names defined in the fiber channel specification as identifiers of hosts having an access right to said logical volume; and

each port controller further comprising a local access right management table which is formed by obtaining from said global access right management table, for each logical volume, Node Names of hosts having access to each logical volume, and registering each Node Name thus obtained into said local access right management table,

wherein, when a port log-in frame received by a port controller includes a Node Name contained in the local access right management table of said port controller, said port controller registers an N_Port ID of the port log-in frame as a host identifier in connection with said Node Name in said local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller, and

wherein, when an access command received by a port controller includes an N_Port ID that is registered as a host identifier in the local access right management table of said port controller in association with a Node Name, said port controller recognizes that said access command is received from the host corresponding to said Node Name and thus allows access, while if said N_Port ID is not registered, said port controller rejects access.

6. A fiber-channel specification supporting fiber channel connection magnetic disk device, comprising:

a plurality of logical volumes;

a volume controller for controlling said logical volumes;

a plurality of fiber-channel specification supporting port controllers, each of which comprises a fiber channel controller, a local memory, a CPU and a common memory access controller;

a common memory that is jointly owned by said plurality of port controllers;

a global access right management table stored in said common memory, the global access right management table storing, for each logical volume, Port Names defined in the fiber channel specification as identifiers of host ports having an access right to said logical volume; and

each port controller further comprising a local access right management table which is formed by obtaining from said global access right management table, for each logical volume, Port Names of host ports having access to each logical volume, and registering each Port Name thus obtained into said local access right management table,

wherein, when a port log-in frame received by a port controller includes a Port Name contained in the local access right management table of said port controller, said port controller registers an N_Port ID of the port log-in frame as a host identifier in connection with said Port Name in said local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller, and

wherein, when an access command received by a port controller includes an N_Port ID that is registered as a host identifier in the local access right management table of said port controller in association with a Port Name, said port controller recognizes that said access command is received from a host port corresponding to said Port Name and thus allows access, while if said N_Port ID is not registered, said port controller rejects access.

7. A fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers,

each of said port controllers managing a respective local access right management table representing relationships between host identifiers and logical volumes accessible by hosts corresponding to said host identifiers, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller, and

each of said port controllers rejecting access to logical volumes from hosts other than the hosts indicated to have access to said logical volumes in the port controller'"'"'s local access right management table.

8. The fiber channel connection magnetic disk controller as claimed in claim 7, wherein a Node Name defined in the fiber channel specification is used as a host identifier.

9. A fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers,

each of said port controllers managing a respective local access right management table representing relationships between host port identifiers and logical volumes accessible by host ports corresponding to said host port identifiers, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller, and

each of said port controllers rejecting access to logical volumes from host ports other than the host ports indicated to have access to said logical volumes in the port controller'"'"'s local access right management table.

10. The fiber channel connection magnetic disk controller as claimed in claim 9, wherein a Port Name defined in the fiber channel specification is used as a host port identifier.

11. A fiber-channel specification supporting fiber channel connection magnetic disk controller, comprising:

a plurality of logical volumes;

a volume controller for controlling said logical volumes;

a plurality of fiber-channel specification supporting port controllers, each of which comprises a fiber channel controller, a local memory, a CPU and a common memory access controller;

a common memory that is jointly owned by said plurality of port controllers;

a global access right management table stored in said common memory, the global access right management table storing, for each logical volume, Node Names defined in the fiber channel specification as identifiers of hosts having an access right to said logical volume; and

each port controller further comprising a local access right management table which is formed by obtaining from said global access right management table, for each logical volume, Node Names of hosts having access to each logical volume, and registering each Node Name thus obtained into said local access right management table,

wherein, when a port log-in frame received by a port controller includes a Node Name contained in the local access right management table of said port controller, said port controller registers an N_Port ID of the port log-in frame as a host port identifier in connection with said Node Name in said local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller, and

wherein, when an access command received by a port controller includes an N_Port ID that is registered as a host port identifier in the local access right management table of said port controller in association with a Node Name, said port controller recognizes that said access command is received from the host corresponding to said Node Name and thus allows access, while if said N_Port ID is not registered, said port controller rejects access.

12. A fiber-channel specification supporting fiber channel connection magnetic disk controller, comprising:

a plurality of logical volumes;

a volume controller for controlling said logical volumes;

a plurality of fiber-channel specification supporting port controllers, each of which comprises a fiber channel controller, a local memory, a CPU and a common memory access controller;

a common memory that is jointly owned by said plurality of port controllers;

a global access right management table stored in said common memory, the global access right management table storing, for each logical volume, Port Names defined in the fiber channel specification as identifiers of host ports having an access right to said logical volume; and

each port controller further comprising a local access right management table which is formed by obtaining from said global access right management table, for each logical volume, Port Names of host ports having access to each logical volume, and registering each Port Name thus obtained into said local access right management table,

wherein when a port log-in frame received by a port controller includes a Port Name contained in the local access right management table of said port controller, said port controller registers an N_Port ID of the port log-in frame as a host port identifier in connection with said Port Name in said local access right management table, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller, and

wherein, when an access command received by a port controller includes an N_Port ID that is registered as a host port identifier in the local access right management table of said port controller in association with a Port Name, said port controller recognizes that said access command is received from a host port corresponding to said Port Name and thus allows access, while if said N_Port ID is not registered, said port controller rejects access.

13. A logical volume access right management method for a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, comprising:

detecting an identifier of each host coupled to the fiber channel;

managing a relationship between the identifier of each host and logical volumes accessible by the host in a global access right management table; and

rejecting access by a host to a logical volume in a port controller receiving an access request from said host in accordance with an access right represented in a local access right management table of said port controller, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller.

14. A logical volume access right management method for a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, comprising:

detecting an identifier of each host port coupled to the fiber channel;

managing a relationship between the identifier of each host port and logical volumes accessible by the host port in a global access right management table; and

rejecting access by a host port to a logical volume in a port controller receiving an access request from said host port in accordance with an access right represented in a local access right management table of said port controller, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller.

15. A logical volume access right management method for a port controller of a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, comprising:

obtaining from a global access right management table, for each logical volume of the disk device, Node Names representing hosts having access to respective logical volumes, and registering each Node Name and corresponding logical volume thus obtained into a local memory of said port controller to thereby form a local access right management table;

if a Node Name included in a port log-in frame received by the port controller is registered in the local access right management table of the port controller, registering an N_Port ID of the port log-in frame in connection with the Node Name in the local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller; and

if an N_Port ID included in an access command received by the port controller is registered in the local access right management table of the port controller in association with a Node Name, recognizing that said access command is received from a host corresponding to said Node Name and allowing access, and rejecting access if said N_Port ID is not registered in the local access right management table.

16. A logical volume access right management method for a port controller of a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, comprising:

obtaining from a global access right management table, for each logical volume of the disk device, Port Names representing host ports having access to respective logical volumes, and registering each Port Name and corresponding logical volume thus obtained into a local memory of said port controller to thereby form a local access right management table;

if a Port Name included in a port log-in frame received by the port controller is registered in the local access right management table of the port controller, registering an N_Port ID of the port log-in frame in connection with the Port Name in the local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller; and

if an N_Port ID included in an access command received by the port controller is registered in the local access right management table of the port controller in association with a Port Name, recognizing that said access command is received from a host port corresponding to said Port Name and allowing access, and rejecting access if said N_Port ID is not registered in the local access right management table.

17. A recording medium recorded with a program which is readable by a computer and enables the computer to execute a logical volume access right management method for a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, the method comprising:

detecting an identifier of each host coupled to the fiber channel;

managing a relationship between the identifier of each host and logical volumes accessible by the host having the identifier in a global access right management table; and

rejecting an access from by a hosts other than an indicated host to a logical volume of a logical volume accessible from the indicated host in a port controller receiving an access request from said host in accordance with an access right represented in a local access right management table of said port controller, said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller.

18. A recording medium recorded with a program which is readable by a computer and enables the computer to execute a logical volume access right management method for a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, the method comprising:

detecting an identifier of each host port coupled to the fiber channel;

managing a relationship between the identifier of each host port and logical volumes accessible by the host port in a global access right management table; and

rejecting access by a host port to a logical volume in a port controller receiving an access request from said host port in accordance with an access right represented in a local access right management table of said port controller said local access right management table comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller.

19. A recording medium recorded with a program which is readable by a computer and enables the computer to execute the following steps:

obtaining from a global access right management table, for each logical volume of a disk device, Node Names representing hosts having access to respective logical volumes, and registering each Node Name and corresponding logical volume thus obtained into a local memory of a port controller to thereby form a local access right management table;

if a Node Name included in a port log-in frame received by the port controller is registered in the local access right management table of the port controller, registering an N_Port ID of the port log-in frame in connection with the Node Name in the local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Node Names of hosts having access to a corresponding logical volume and a list of host identifiers corresponding to hosts in said list of Node Names that are logged into said port controller; and

if an N_Port ID included in an access command received by the port controller is registered in the local access right management table of the port controller in association with a Node Name, recognizing that said access command is received from a host corresponding to said Node Name and allowing access, and rejecting access if said N_Port ID is not registered in the local access right management table.

20. A recording medium recorded with a program which is readable by a computer and enables the computer to execute the following steps:

obtaining from a global access right management table, for each logical volume of a disk device, Port Names representing host ports having access to respective logical volumes, and registering each Port Name and corresponding logical volume thus obtained into a local memory of a port controller to thereby form a local access right management table;

if a Port Name included in a port log-in frame received by the port controller is registered in the local access right management table of the port controller, registering an N_Port ID of the port log-in frame in connection with the Port Name in the local access right management table, said local access right management table thereby comprising, for each of said logical volumes, an access restriction flag indicating whether access to a corresponding logical volume is restricted, and, for each of said logical volumes to which access is restricted, a list of Port Names of host ports having access to a corresponding logical volume and a list of host port identifiers corresponding to host ports in said list of Port Names that are logged into said port controller; and

if an N_Port ID included in an access command received by the port controller is registered in the local access right management table of the port controller in association with a Port Name, recognizing that said access command is received from a host port corresponding to said Port Name and allowing access, and rejecting access if said N_Port ID is not registered in the local access right management table.