Management system, program recording medium, and program distribution apparatus

• US 8,402,534 B2
• Filed: 05/26/2009
• Issued: 03/19/2013
• Est. Priority Date: 05/26/2009
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakamura, Yusaku, Kuroda, Takaki, Nagai, Takayuki, Maki, Nobuhiro, Shinohara, Daisuke
• Primary Examiner(s): Chea, Philip
• Assistant Examiner(s): ABEDIN, SHANTO
• Application Number:
  US12/529,516
• Publication Number:
  US 20110231901A1
• Time in Patent Office: 1,393 Days
• Field of Search: 726 2- 6, 726 26- 27, 726/21, 709/205, 709224-229, 711/163
• US Class Current: 726/21
• CPC Class Codes: G06F 13/385 for adaptation of a particular data processing system to different peripheral devices
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services

Abstract

The management system of the present invention is capable of efficiently discovering each apparatus coupled to a communication network. The management server 1 judges a type of an apparatus coupled to a communication network 5 on the basis of service utilization information T1, which is acquired from a discovered device or acquired from a device (an iSNS server 4, for example) having a name server function for resolving an address from a public name, and on the basis of discovery management information prepared beforehand (S1, S2). The management server 1 acquires a communication protocol in accordance with the type of the apparatus from protocol selection rules T3, and attempts authentication of the apparatus by using the communication protocol (S3).

Claims

1. A management system for managing a plurality of apparatuses coupled to a communication network, comprising:

a memory area;

a microprocessor configured to execute predetermined processing using the memory area; and

a communication interface with which the microprocessor is configured to communicate with each of the apparatuses via the communication network,

wherein the microprocessor is configured to;

acquire access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the apparatuses via the communication network,

judge a type of the monitoring target apparatus, and

acquire composition information from the monitoring target apparatus on the basis of the judged type and protocol selection rules;

wherein the plurality of apparatuses coupled to the communication network includes at least;

a plurality of apparatuses having a storage area; and

a plurality of apparatuses configured to use the storage area,

wherein the memory area is configured to store at least;

monitoring target address management information for pre-storing the IP address of the monitoring target apparatus;

device coupling management information created by associating a referencing/referenced relationship of public names of apparatus associated with the storage area with apparatus names corresponding to the public names; and

communication protocol selection information configured to store type judgment information for judging the type of the monitoring target apparatus, and communication protocols corresponding to the judged apparatus type, and

wherein, in a case where the communication network includes a name management apparatus configured to manage, for the respective apparatuses, a public name and an address of the apparatus, and a type of a public name that represents a name assigned to a referenced apparatus or a name assigned to a referencing apparatus, the microprocessor is configured to;

(1a) detect a predetermined storage area with which the apparatus name is not associated by using the device coupling management information;

(1b) in cases where a reference source of public name referencing has been configured in the predetermined storage area, acquire an address corresponding to the reference source from the name management information;

(1c) in cases where the address corresponding to the reference source is registered in the monitoring target address management information, judge the apparatus referencing the predetermined storage area to be a reference source apparatus and register this apparatus in the type judgment information;

(1d) acquire a communication protocol prepared beforehand for the apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the predetermined apparatus;

(1e) in cases where the reference source has not been configured in the predetermined storage area, issue a request to all addresses defined in the name management information to send apparatus composition information indicating a composition of the reference source apparatus;

(1f) judge an apparatus that sends reference source apparatus composition information in response to the request to be a reference source apparatus and register the apparatus in the type judgment information; and

(1g) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the reference source apparatus composition information,

wherein, in cases where the name management apparatus is not included in the communication network, the microprocessor is configured to;

(2a) issue a request to all addresses included in the monitoring target address management information to send composition information of the reference source apparatus;

(2b) judge an apparatus that sends the apparatus composition information in response to the request to be the reference source apparatus and register the apparatus in the type judgment information; and

(2c) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the apparatus composition information,

wherein the microprocessor is configured to;

acquire, by authenticating a registered apparatus registered in the type judgment information, configuration information relating to another apparatus which uses the registered apparatus, from the registered apparatus;

judge the type of the other apparatus on the basis of the configuration information and register the type in the type judgment information; and

acquire a communication protocol prepared beforehand according to the type of the other apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the other apparatus; and

wherein, when executing each authentication, in cases where authentication fails in the use of the communication protocol acquired from the communication protocol selection information, the microprocessor is configured to re-attempt the authentication by using another communication protocol prepared beforehand for another apparatus type that belongs to the same group as the communication protocol.

2. A management system according to claim 1, wherein, in cases where authentication of the monitoring target apparatus fails, the microprocessor is configured to re-attempt authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

3. A management system according to claim 2, wherein, after authenticating the monitoring target apparatus, the microprocessor is configured to acquire configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and to authenticate the other apparatus on the basis of the type of the other apparatus.

4. A management system according to claim 2,

wherein the microprocessor is configured to execute a first discovery mode and a second discovery mode,

wherein the first discovery mode is configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode is configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.

5. A management system according to claim 2, wherein the network service utilization information is supplied by an iSNS server coupled to the communication network.

6. A non-transitory computer-readable recording medium recorded with a computer program causing a computer to function as a management apparatus configured to manage a plurality of apparatuses coupled to a communication network,

wherein the computer program causes, when executed, the computer to:

acquire access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the respective apparatuses via the communication network;

judge the type of the monitoring target apparatus; and

authenticate the monitoring target apparatus on the basis of the judged type;

wherein the management apparatus includes;

a memory area;

a microprocessor configured to execute predetermined processing using the memory area; and

a communication interface with which the microprocessor is configured to communicate with each of the apparatuses via the communication network;

wherein the plurality of apparatuses coupled to the communication network includes at least;

a plurality of apparatuses having a storage area; and

a plurality of apparatuses configured to use the storage area,

wherein the memory area is configured to store at least;

monitoring target address management information for pre-storing the IP address of the monitoring target apparatus;

device coupling management information created by associating a referencing/referenced relationship of public names of apparatus associated with the storage area with apparatus names corresponding to the public names; and

communication protocol selection information configured to store type judgment information for judging the type of the monitoring target apparatus, and communication protocols corresponding to the judged apparatus type, and

wherein, in a case where the communication network includes a name management apparatus configured to manage, for the respective apparatuses, a public name and an address of the apparatus, and a type of a public name that represents a name assigned to a referenced apparatus or a name assigned to a referencing apparatus, the microprocessor is configured by the computer program to;

(1a) detect a predetermined storage area with which the apparatus name is not associated by using the device coupling management information;

(1b) in cases where a reference source of public name referencing has been configured in the predetermined storage area, acquire an address corresponding to the reference source from the name management information;

(1c) in cases where the address corresponding to the reference source is registered in the monitoring target address management information, judge the apparatus referencing the predetermined storage area to be a reference source apparatus and register this apparatus in the type judgment information;

(1d) acquire a communication protocol prepared beforehand for the apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the predetermined apparatus;

(1e) in cases where the reference source has not been configured in the predetermined storage area, issue a request to all addresses defined in the name management information to send apparatus composition information indicating a composition of the reference source apparatus;

(1f) judge an apparatus that sends reference source apparatus composition information in response to the request to be a reference source apparatus and register the apparatus in the type judgment information; and

(1g) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the reference source apparatus composition information,

wherein, in cases where the name management apparatus computer not included in the communication network, the microprocessor is configured by the computer program to;

(2a) issue a request to all addresses included in the monitoring target address management information to send composition information of the reference source apparatus;

(2b) judge an apparatus that sends the apparatus composition information in response to the request to be the reference source apparatus and register the apparatus in the type judgment information; and

(2c) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the apparatus composition information,

wherein the microprocessor is configured by the computer program to;

acquire, by authenticating a registered apparatus registered in the type judgment information, configuration information relating to another apparatus which uses the registered apparatus, from the registered apparatus;

judge the type of the other apparatus on the basis of the configuration information and register the type in the type judgment information; and

acquire a communication protocol prepared beforehand according to the type of the other apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the other apparatus; and

wherein, when executing each authentication, in cases where authentication fails in the use of the communication protocol acquired from the communication protocol selection information, the microprocessor is configured by the computer program to re-attempt the authentication by using another communication protocol prepared beforehand for another apparatus type that belongs to the same group as the communication protocol.

7. The non-transitory computer-readable recording medium according to claim 6, wherein a computer program recorded on the medium causes the computer, in cases where the computer fails to authenticate the monitoring target apparatus, to re-attempt authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

8. The non-transitory computer-readable recording medium according to claim 6, wherein a computer program recorded on the medium causes the computer, after the monitoring target apparatus is authenticated, to acquire configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and to authenticate the other apparatus on the basis of the type of the other apparatus.

9. The non-transitory computer-readable recording medium according to claim 6, which is recorded with a computer program causing the computer to execute a first discovery mode and a second discovery mode,

wherein the first discovery mode is configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode is configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.

10. The non-transitory computer-readable recording medium according to claim 6, wherein the network service utilization information is supplied by an iSNS server coupled to the communication network.

11. A program distribution apparatus for distributing a management computer program that is executed by a management apparatus for managing a plurality of apparatuses coupled to a communication network,

wherein the management apparatus includes:

a memory area;

a microprocessor executing predetermined processing by using the memory area; and

a communication interface with which the microprocessor communicates with each of the apparatuses via the communication network, and

the management computer program causes the microprocessor to;

acquire access information that can be used to access a monitoring target apparatus on the basis of network service utilization information relating to services used between the apparatuses via the communication network;

judge a type of the monitoring target apparatus; and

authenticate the monitoring target apparatus on the basis of the judged type;

wherein the plurality of apparatuses coupled to the communication network includes at least;

a plurality of apparatuses having a storage area; and

a plurality of apparatuses configured to use the storage area,

wherein the memory area is configured to store at least;

monitoring target address management information for pre-storing the IP address of the monitoring target apparatus;

device coupling management information created by associating a referencing/referenced relationship of public names of apparatus associated with the storage area with apparatus names corresponding to the public names; and

communication protocol selection information configured to store type judgment information for judging the type of the monitoring target apparatus, and communication protocols corresponding to the judged apparatus type, and

wherein, in a case where the communication network includes a name management apparatus configured to manage, for the respective apparatuses, a public name and an address of the apparatus, and a type of a public name that represents a name assigned to a referenced apparatus or a name assigned to a referencing apparatus, the microprocessor is configured to;

(1a) detect a predetermined storage area with which the apparatus name is not associated by using the device coupling management information;

(1b) in cases where a reference source of public name referencing has been configured in the predetermined storage area, acquire an address corresponding to the reference source from the name management information;

(1c) in cases where the address corresponding to the reference source is registered in the monitoring target address management information, judge the apparatus referencing the predetermined storage area to be a reference source apparatus and register this apparatus in the type judgment information;

(1d) acquire a communication protocol prepared beforehand for the apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the predetermined apparatus;

(1e) in cases where the reference source has not been configured in the predetermined storage area, issue a request to all addresses defined in the name management information to send apparatus composition information indicating a composition of the reference source apparatus;

(1f) judge an apparatus that sends reference source apparatus composition information in response to the request to be a reference source apparatus and register the apparatus in the type judgment information; and

(1g) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the reference source apparatus composition information,

wherein, in cases where the name management apparatus is not included in the communication network, the microprocessor is configured to;

(2a) issue a request to all addresses included in the monitoring target address management information to send composition information of the reference source apparatus;

(2b) judge an apparatus that sends the apparatus composition information in response to the request to be the reference source apparatus and register the apparatus in the type judgment information; and

(2c) use the reference source apparatus communication protocol to execute authentication of the apparatus that sent the apparatus composition information,

wherein the microprocessor is configured to;

acquire, by authenticating a registered apparatus registered in the type judgment information, configuration information relating to another apparatus which uses the registered apparatus, from the registered apparatus;

judge the type of the other apparatus on the basis of the configuration information and register the type in the type judgment information; and

acquire a communication protocol prepared beforehand according to the type of the other apparatus from the communication protocol selection information and use the communication protocol to execute authentication of the other apparatus; and

wherein, when executing each authentication, in cases where authentication fails in the use of the communication protocol acquired from the communication protocol selection information, the microprocessor is configured to re-attempt the authentication by using another communication protocol prepared beforehand for another apparatus type that belongs to the same group as the communication protocol.

12. The program distribution apparatus according to claim 11, wherein, in cases where the microprocessor fails to authenticate the monitoring target apparatus, the microprocessor is configured to re-attempt authentication of the monitoring target apparatus on the basis of another type that is pre-associated with the judged type.

13. The program distribution apparatus according to claim 11, wherein, after the monitoring target apparatus is authenticated, the microprocessor is configured to acquire configuration information relating to another apparatus that uses the monitoring target apparatus from the monitoring target apparatus, and to authenticate the other apparatus on the basis of the type of the other apparatus.

14. The program distribution apparatus according to claim 11, which is configured to distribute a computer program that causes the microprocessor to execute a first discovery mode and a second discovery mode,

wherein the first discovery mode is configured such that the monitoring target apparatus is authenticated on the basis of the judged type, and

wherein the second discovery mode is configured such that the monitoring target apparatus is authenticated by sequentially testing a plurality of communication protocols prepared beforehand.