Authenticating a processing system accessing a resource via a resource alias address

• US 8,640,138 B2
• Filed: 04/30/2012
• Issued: 01/28/2014
• Est. Priority Date: 02/12/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Chambliss, David Darden, Kalos, Matthew Joseph, Yudenfriend, Harry Morris, Brice, Frank William
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): NGUYEN, PHIL K
• Application Number:
  US13/460,316
• Publication Number:
  US 20120216211A1
• Time in Patent Office: 638 Days
• Field of Search: 718/1, 718/104, 718/105
• US Class Current: 718/104
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/0683 Plurality of storage devices
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/46 Multiprogramming arrangements
• CPC Class Codes: G06F 9/5005 to service a request

Abstract

Provided are a method, system, and article of manufacture for authenticating a processing system accessing a resource. An association of processing system identifiers with resources, including a first and second resources, is maintained. A request from a requesting processing system in a host is received for use of a first resource that provides access to a second resource, wherein the request is generated by processing system software and wherein the request further includes a submitted processing system identifier included in the request by host hardware in the host. A determination is made as to whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources. The requesting processing system is provided access to the first resource that the processing system uses to access the second resource.

Claims

1. A method, comprising:

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from requesting processing system software in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the received request is associated with a path group identifier provided by the requesting processing system software;

determining whether the path group identifier associated with the request matches a path group identifier associated with the first and second resources;

determining whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources; and

providing the requesting processing system software access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources and determining that the path group identifier associated with the request matches the path group identifier associated with the first and second resources, wherein the first resource provides access to the second resource or an element identified by the second resource.

2. The method of claim 1, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

3. The method of claim 2, wherein base and alias addresses are associated with path group identifiers such that the processing system associated with one path group identifier is provided access to the base volumes associated with that path group identifier, further comprising:

determining whether the path group identifier associated with the request matches the path group identifier associated with the base and alias address in the request, wherein the determination of whether the submitted processing system identifier matches the processing system identifier associated with the path group identifier is performed in response to determining that the path group identifier associated with the request matches the path group identifier associated with the requested base and alias addresses.

4. The method of claim 2, wherein the request indicates a host identifier, further comprising:

determining whether the host identifier indicated in the request matches a host identifier associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier matches the processing system identifier associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host matches the host identifier associated with the path group identifier associated with the request.

5. The method of claim 1, wherein the host identifier is included in the submitted request by the host hardware.

6. A system in communication with processing systems in a host, wherein each processing system includes processing system software, comprising:

a computer readable storage medium including an association of processing system identifiers with resources, including a first and second resources;

an Input/Output (“

I/O”

) manager to perform operations, the operations comprising;

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from requesting processing system software in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the received request is associated with a path group identifier provided by the requesting processing system software;

determining whether the path group identifier associated with the request matches a path group identifier associated with the first and second resources;

determining whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources; and

providing the requesting processing system access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources and determining that the path group identifier associated with the request matches the path group identifier associated with the first and second resources, wherein the first resource provides access to the second resource or an element identified by the second resource.

7. The system of claim 6, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

8. The system of claim 7, wherein base and alias addresses are associated with path group identifiers such that the processing system associated with one path group identifier is provided access to the base volumes associated with that path group identifier, wherein the operations further comprise:

determining whether the path group identifier associated with the request matches the path group identifier associated with the base and alias address in the request, wherein the determination of whether the submitted processing system identifier matches the processing system identifier associated with the path group identifier is performed in response to determining that the path group identifier associated with the request matches the path group identifier associated with the requested base and alias addresses.

9. The system of claim 7, wherein the request indicates a host identifier, wherein the operations further comprise:

determining whether the host identifier indicated in the request matches a host identifier associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier matches the processing system identifier associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host matches the host identifier associated with the path group identifier associated with the request.

10. The system of claim 6, wherein the host identifier is included in the submitted request by the host hardware.

11. An article of manufacture comprising a computer readable storage medium implementing an Input/Output (I/O) manager in communication with processing systems in a host, wherein each processing system includes processing system software, wherein the I/O manager is executed to cause operations, the operations comprising:

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from requesting processing system software in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the received request is associated with a path group identifier provided by the requesting processing system software;

determining whether the path group identifier associated with the request matches a path group identifier associated with the first and second resources;

determining whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources; and

providing the requesting processing system software access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources and determining that the path group identifier associated with the request matches the path group identifier associated with the first and second resources, wherein the first resource provides access to the second resource or an element identified by the second resource.

12. The article of manufacture of claim 11, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

13. The article of manufacture of claim 12, wherein base and alias addresses are associated with path group identifiers such that the processing system associated with one path group identifier is provided access to the base volumes associated with that path group identifier, wherein the operations further comprise:

determining whether the path group identifier associated with the request matches the path group identifier associated with the base and alias address in the request, wherein the determination of whether the submitted processing system identifier matches the processing system identifier associated with the path group identifier is performed in response to determining that the path group identifier associated with the request matches the path group identifier associated with the requested base and alias addresses.

14. The article of manufacture of claim 12, wherein the request indicates a host identifier, wherein the operations further comprise:

determining whether the host identifier indicated in the request matches a host identifier associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier matches the processing system identifier associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host matches the host identifier associated with the path group identifier associated with the request.

15. The article of manufacture of claim 11, wherein the host identifier is included in the submitted request by the host hardware.