Method for updating security information, client, server and management computer therefor

• US 7,225,461 B2
• Filed: 09/04/2003
• Issued: 05/29/2007
• Est. Priority Date: 09/04/2002
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Sato, Masahide, Oshima, Satoshi
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US10/656,507
• Publication Number:
  US 20040111641A1
• Time in Patent Office: 1,363 Days
• Field of Search: 713/200, 713/201, 709217-219, 709/223, 709/224, 707/1, 707/9, 707/10, 707200-204, 717168-178
• US Class Current: 726/3
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A method for updating information on security , in which the client is connected with a server through a network, the server including a storage device that is managed by the client, the storage device storing security information, the method comprising updating the security information stored in the storage device that the client manages in the server.

Claims

1. A method for updating information on security, in which a plurality of clients are connected with a storage apparatus through a network, said storage apparatus storing security information, said method comprising:

storing operation systems, application programs, and data of said plurality of clients in said storage apparatus;

sending said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients; and

updating said security information stored in said storage apparatus,

wherein said plurality of clients do not include a local disk device, and

said storage apparatus includes a program configured to update security information of said plurality of clients before said plurality of clients are initiated.

2. A method for updating information on security according to claim 1, wherein said storage apparatus is connected to a management computer through said network and wherein said updating said security information is conducted by said management computer.

3. A method for updating information on security according to claim 1, wherein said storage apparatus stores files that said clients use, and

wherein said security information includes attributes relating to said files that said clients use.

4. A method for updating information on security according to claim 1, wherein said clients reference said security information of said clients.

5. A method for updating information on security, in which a plurality of clients are connected with a storge apparatus through a network, said storage apparatus storing security information, said method comprising:

storing operation systems, application programs, and data of said plurality of clients in said storage apparatus;

sending said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients; and

updating said security information stored in said storage apparatus,

wherein said plurality of clients do not include a local disk device, and

said storage apparatus includes a program configured to update security information of said plurality of clients regardless of whether or not said plurality of clients are initiated;

wherein said storage apparatus stores files that said clients use, and wherein said security information includes attributes relating to said files that said clients use;

wherein said security information includes access control information with respect to said files that said clients use.

6. A method for updating information on security, in which a plurality of clients are connected with a storage apparatus through a network, said storage apparatus storing security information, said method comprising:

storing operation systems, application programs, and data of said plurality of clients in said storage apparatus;

sending said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients; and

updating said security information stored in said storage apparatus,

wherein said plurality of clients do not include a local disk device, and

said storage apparatus includes a program configured to update security information of said plurality of clients regardless of whether or not said plurality of clients are initiated;

wherein said clients reference said security information of said clients;

wherein said security information includes authentication information for permitting use of said clients by a user.

7. A plurality of clients connected through a network, said plurality of clients comprising:

a storage apparatus storing security information, said storage apparatus including a program configured to update security information of a plurality of clients before said plurality of clients are initiated; and

a unit referencing said security information,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients.

8. A plurality of clients according to claim 7, wherein a management computer is connected to said storage apparatus through said network and said security information of said clients is updated by said management computer.

9. A plurality of clients according to claim 7, wherein said storage apparatus stores files that said clients use, and wherein said security information includes attributes relating to said files that said clients use.

10. A plurality of clients connected through a network, said plurality of clients comprising:

a storage apparatus storing security information, said storage apparatus including a program configured to update security information of a plurality of clients regardless of whether or not said plurality of clients are initiated; and

a unit referencing said security information,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients;

wherein said storage apparatus stores files that said clients use, and wherein said security information includes attributes relating to said files that said clients use;

wherein said security information of said clients includes access control information with respect to said files that said clients use.

11. A plurality of clients connected through a network, said plurality of clients comprising:

a storage apparatus storing security information, said storage apparatus including a program configured to update security information of a plurality of clients regardless of whether or not said plurality of clients are initiated; and

a unit referencing said security information,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients;

wherein said security information includes authentication information for permitting use of said clients by a user.

12. A storage apparatus connected to a plurality of clients through a network, said storage apparatus comprising:

a unit communicating with said plurality of clients through said network,

wherein said storage apparatus includes a program configured to update security information of said plurality of clients before said plurality of clients are initiated;

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients.

13. A storage apparatus according to claim 12, wherein a management computer is connected to said storage apparatus through said network and said security information is updated by said management computer.

14. A storage apparatus according to claim 12, wherein said storage apparatus stores files that said clients use, and wherein said security information includes attributes relating to said files that said clients use.

15. A storage apparatus according to claim 12, wherein said security information is referenced by said clients.

16. A storage apparatus according to claim 15, wherein said security information includes authentication information for permitting use of said clients by a user.

17. A storage apparatus connected to a plurality of clients through a network, said storage apparatus comprising:

a unit communicating with said plurality of clients through said network,

wherein said storage apparatus includes a program configured to update security information of said plurality of clients regardless of whether or not said plurality of clients are initiated,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients;

wherein said storage apparatus stores files that said clients use, and wherein said security information includes attributes relating to said files that said clients use;

wherein said security information includes access control information with respect to said files that said clients use.

18. A management computer connected through a network to a storage apparatus and a plurality of clients, said storage apparatus storing security information, said management computer comprising:

a unit communicating with said storage apparatus through said network,

wherein said storage apparatus includes a program configured to update security information of said plurality of clients before said plurality of clients are initiated,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients.

19. A method for updating information on security in a plurality of clients and a storage apparatus connected with each other through a network, said storage apparatus configured to store a file to be accessed by said clients and security information to be used in access control for said file, said method comprising:

in said storage apparatus, receiving security information from a management computer connected via the network, and updating said security information stored in said storage apparatus to the received security information, and

in said plurality of clients, each time said plurality of clients access said file stored in said storage apparatus, referencing said security information stored in said storage apparatus, and performing access control for said file based on said security information,

wherein said storage apparatus includes a program configured to update security information of said plurality of clients before said plurality of clients are initiated,

wherein said plurality of clients do not include a local disk device, and said storage apparatus is configured to store operation systems, application programs, and data of said plurality of clients in said storage apparatus; and

to send said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients.

20. A method for updating information on security, in which a plurality of clients are connected with a storage apparatus through a network, said storage apparatus storing security information, said method comprising:

storing operation systems, application programs, and data of said plurality of clients in said storage apparatus;

sending said operation systems and said application programs to said plurality of clients when said plurality of clients are initiated in response to requests from said plurality of clients; and

updating said security information stored in said storage apparatus,

wherein said plurality of clients do not include a local disk device, and

said storage apparatus includes a program configured to update security information of said plurality of clients before said plurality of clients are initiated;

wherein said security information includes access control information with respect to said files that said clients use;

wherein said security information includes authentication information for permitting use of said clients by a user.