Storage device and method of setting configuration information of same

• US 7,136,939 B2
• Filed: 08/05/2003
• Issued: 11/14/2006
• Est. Priority Date: 10/18/2002
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Igarashi, Yoshinori, Yagi, Shuichi, Kishimoto, Toshimichi
• Primary Examiner(s): Fleming, Fritz
• Assistant Examiner(s): Patel, Niketa I.
• Application Number:
  US10/635,739
• Publication Number:
  US 20040078583A1
• Time in Patent Office: 1,197 Days
• Field of Search: None
• US Class Current: 710/8
• CPC Class Codes: G06F 11/1402 Saving, restoring, recovering or retrying
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

Configuration information settings for a storage device are made highly reliable and facilitated. The storage device includes a service processor for setting storage device configuration information, and a terminal device connected to the service processor via a private line to send a command group, received from an operator and related to the storage device configuration information, to the service processor. The service processor also includes a device for determining approval or denial of execution of the command group prior to execution of the command group received from the terminal device.

Claims

1. A storage device to receive demands for writing and reading data from host devices to control writing and reading of data from storage media, the storage device comprising:

a service processor configured to set configuration information of the storage device; and

a terminal device connected to the service processor via a private line to send a command group described on a script sheet, which is received from an operator and related to the configuration information of the storage device, to the service processor, the terminal device creating a digest of the command group after determining that the command group is valid, the terminal device using a secret key to encrypt the digest created, and sending to the service processor a digest data of the digest encrypted using the secret key and the command group described on the script sheet;

wherein the service processor decrypts the encrypted digest data received and compares the decrypted digest data with a digest data of the digest created from the command group received, and determines approval or denial of execution of the command group, based on results of comparison between the decrypted digest data and the digest data of the digest created from the command group, prior to execution of the command group received from the terminal device.

2. The storage device according to claim 1, wherein the terminal device sends encryption command information, which is given by encrypting the command group with a secret key, together with the command group when the command group is sent, and

the service processor decrypts the received encryption command information to determine whether a command group obtained by the decryption corresponds to the received command group, and executes the command group in the case of correspondency.

3. The storage device according to claim 2, wherein the command group is subjected to a digest processing to be encrypted to provide the encryption command information, and

the service processor determines whether information subjected to the digest processing with the use of the command group received from the terminal device corresponds to information, which is obtained by decryption of the received encryption command information and subjected to the digest processing, and executes the command group in the case of correspondency.

4. The storage device according to claim 1, wherein the command group is used by the service processor to set the structure of the storage device.

5. The storage device according to claim 1, wherein the command group contains variable required for execution of commands by the service processor.

6. The storage device according to claim 1, wherein the command group is described on a script sheet.

7. The storage device according to claim 6, wherein the script sheet includes a group of operations relating to addition and deletion of path definition information for connection of a host device and logical volumes of the storage device.

8. The storage device according to claim 7, wherein the script sheet includes a setting procedure that describes respective settings as argument parameters for setting nomenclatures and information required for setting thereof.

9. The storage device according to claim 6, wherein the script sheet including the command group is determined to be valid by a reliable operator guaranteeing that no tampering has occurred before input into the storage device.

10. The storage device according to claim 6, wherein the digest is created by compressing the script sheet containing the command group.

11. A method of setting a configuration information of a storage device to receive demands for writing and reading of data from host devices to control writing and reading of data from storage media, the storage device including a service processor for setting of configuration information of the storage device, and a terminal device connected to the service processor to send a command group received from an operator and related to the configuration information, the method comprising

sending the command group via the terminal device;

receiving the command group at the service processor;

creating a digest of the command group when the command group is determined to be valid;

using a secret key to encrypt the digest created;

sending by the terminal device to the service processor a digest data of the digest encrypted using the secret key and the command group;

creating a digest from the command group received by the service processor;

decrypting the encrypted digest data received by the service processor to compare the decrypted digest data with a digest data of the digest created from the command group received by the service processor; and

executing the command group to set a structure of the storage device in the case where results of comparison between the decrypted digest data and the digest data of the digest created from the command group indicates correspondency.

12. The method according to claim 11, further comprising using a secret key to encrypt the command group sent prior to sending thereof to the service processor to generate encryption command information, and

wherein the encryption command information together with the command group is sent to the service processor;

decrypting the received encryption command information to generate the command group to enable a comparison as to whether the received command group and the command group obtained by the decryption correspond to each other, thus determining approval or denial of execution of the received command group, and

executing the command group to set a structure of the storage device in the case where the command group obtained by the decryption and the received command group correspond to each other.

13. A method of setting configuration information of a storage device comprising a service processor for setting of configuration information of the storage device, and a terminal device connected to the service processor to give and take information from the service processor, the method comprising:

determining by a storage management terminal validity of a command group described on a script sheet, the command group related to the configuration information of the storage device;

creating a digest of the command group when the command group is determined to be valid;

using a secret key to encrypt the digest created;

sending by the terminal device to the service processor a digest data of the digest encrypted using the secret key and the command group described on the script sheet;

creating a digest from the command group received by the service processor;

decrypting the encrypted digest data received by the service processor to compare the decrypted digest data with a digest data of the digest created from the command group received by the service processor; and

executing the command group described on the received script sheet to set a structure of the storage device in the case where results of comparison between the decrypted digest data and the digest data of the digest created from the command group indicates correspondency.