Storage device and method of setting configuration information of same

• US 7,877,520 B2
• Filed: 06/08/2009
• Issued: 01/25/2011
• Est. Priority Date: 10/18/2002
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kishimoto, Toshimichi, Igarashi, Yoshinori, Yagi, Shuichi
• Primary Examiner(s): Kindred; Alford W
• Assistant Examiner(s): Abad; Farley J
• Application Number:
  US12/479,952
• Publication Number:
  US 20090248905A1
• Time in Patent Office: 596 Days
• Field of Search: 710/8, 709220-222, 713/191
• US Class Current: 710/8
• CPC Class Codes: G06F 11/1402 Saving, restoring, recovering or retrying
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

Configuration information settings for a storage device are made highly reliable and facilitated. The storage device includes a service processor for setting storage device configuration information, and a terminal device connected to the service processor via a private line to send a command group, received from an operator and related to the storage device configuration information, to the service processor. The service processor also includes a device for determining approval or denial of execution of the command group prior to execution of the command group received from the terminal device.

Claims

1. A storage device, which receives demands for writing and reading data from host devices to control writing and reading data from logical volumes in said storage device, comprising:

a storage media configured to provide said logical volumes,

a service processor configured to set configuration information of the storage device, and connected to a terminal device,

wherein said terminal device receives a command group described on a script sheet, checks a validity of said command group, if said command group is valid, encrypts said command group, and sends said command group and said encrypted command group to said service processor,

wherein said service processor receives said command group and said encrypted command group from said terminal device, decrypts said encrypted command group, compares said received command group with said decrypted command group, and determines approval or denial of execution of said command group based on results of the comparison prior to execution of the command group received from the terminal device

wherein said command group is related to the configuration information of the storage device; and

wherein said storage device maintains, with a history management module, information about command groups for which execution is denied.

2. A storage device according to claim 1, wherein said service processor is connected to said terminal processor via private line.

3. The storage device according to claim 1,

wherein said service processor decrypts, by using a secret key, said encrypted command group that is encrypted by using said secret key at the terminal device.

4. The storage device according to claim 1, wherein the command group is used by said service processor to set a structure of the storage device.

5. The storage device according to claim 1,

wherein the command group contains variables required for execution of commands by the service processor.

6. The storage device according to claim 1,

wherein said command group includes a group of operations relating to addition and deletion of path definition information for connection of said host device and said logical volumes of the storage device.

7. The storage device according to claim 1,

wherein said command group includes a setting procedure that describes respective setting as argument parameters for setting nomenclatures and information required for settings thereof.

8. The storage device according to claim 1,

wherein said command group is determined to be valid by a reliable operator guaranteeing that no tampering has occurred before input into the storage device.

9. A method of setting configuration information of a storage device, said storage device receives demands for writing and reading data from host devices to control writing and reading data from logical volumes provided with a storage media in said storage device and includes a service processor configured to set configuration information of the storage device and connected to a terminal device, said method comprising:

receiving a command group described on a script sheet by said terminal device, checking a validity of said command group, encrypting said command group if said command group is valid based on said checking, sending said command group and said encrypted command group from said terminal device to said service processor, receiving said command group and said encrypted command group by said service processor, decrypting said encrypted command group, comparing said received command group with said decrypted command group, determining approval or denial of execution of said command group based on results of the comparison prior to execution of the command group received from the terminal device,

wherein said command group is related to the configuration information of the storage device; and

wherein said storage device maintains, with a history management module, information about command groups for which execution is denied.