Data protection method, authentication method, and program therefor

• US 7,979,465 B2
• Filed: 10/30/2007
• Issued: 07/12/2011
• Est. Priority Date: 03/24/2004
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Saika, Nobuyuki
• Primary Examiner(s): Alam; Shahid A
• Assistant Examiner(s): LAWSON, DONALD L
• Application Number:
  US11/927,966
• Publication Number:
  US 20080072319A1
• Time in Patent Office: 1,351 Days
• Field of Search: 714/6, 707/781, 707/786
• US Class Current: 707/781
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A data protection method for accepting an access request for a file stored in a file system of a storage device and referring or updating to the file based on the access request, including the steps of: determining whether a current time is within a preset monitoring period; obtaining a snapshot of the file system when the time reaches the monitoring period; and updating the file system with the snapshot when the time reaches end of the monitoring period.

Claims

1. A data protection method for accepting an access request for a file stored in a file system of a storage device and referring or updating to the file based on the access request, comprising the steps of:

relating a first user to a first kind of permitted access class which restrictively permits the first user to access for maintenance of the file during a preset monitoring period, relating a second user to a second kind of permitted access class which permits the second user to access without restriction during the monitoring period, and relating a third user to a third kind of permitted access class which rejects any access from the third user to during the monitoring period;

determining whether a current time is within the monitoring period;

obtaining a snapshot of the file system at the time of start of the monitoring period after the current time reaches the start of the monitoring period;

writing an update file as an object of an update request into the file system during the monitoring period in response to the write request accepted from the first user;

writing an updated file as an object of an update request into a temporary storage area during the monitoring period in response to the update request accepted from the second user, the temporary storage area is provided with a storage device and being different from the file system;

rejecting an update request accept from the third user during the monitoring period;

restoring the file system with the snapshot of the file system at the time of start of the monitoring period to revoke the file updated by the first user during the monitoring period, after the current time reaches to the end of monitoring period; and

writing, after the restoring with the snapshot, the updated file in the temporary storage area written by the second user into the file system.

2. The data protection method according to claim 1, further comprising:

referring to a file as an object of a reference request from the file system in response to a reference request accepted from the first user during the monitoring period; and

referring to a file as an object of a reference request from the temporary storage area in response to the reference request accepted from the second user during the monitoring period.

3. The data protection method according to claim 2,

wherein the referring to a file as an object of a reference request from the temporary storage area in response to the reference request accepted from the first user comprises referring to the requested file from the snapshot when the requested file is not found in the temporary storage area.

4. The data protection method according to claim 1,

wherein the first kind of permitted access class or the second kind of permitted access class is set based on a type of a authentication information or each user, the authentication information includes reliability and update frequency of each user.