Method and apparatus for setting access restriction information

• US 8,806,657 B2
• Filed: 03/21/2012
• Issued: 08/12/2014
• Est. Priority Date: 11/26/2003
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Mimatsu, Yasuyuki, Shimooka, Kenichi, Yamamoto, Masayuki
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): DOAN, TRANG T
• Application Number:
  US13/425,457
• Publication Number:
  US 20120179888A1
• Time in Patent Office: 874 Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 3/0607 by facilitating the process of upgrading existing storage systems, e.g. for improving compatibility between host and storage device
• CPC Class Codes: G06F 3/0647 Migration mechanisms
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/9994 Distributed or remote access

Abstract

The storage system includes a host computer; a management computer coupled to the host computer; a first storage device coupled to the host computer and the management computer, and including first port management information; and a second storage device coupled to the host computer, the management computer and the first storage device, and including second port management information. The first port management information and the second port management information include an identifier of a port on each storage device, an identifier of a volume in each storage device, an access restriction and an identifier of a port permitted access from the host computer to each storage device.

Claims

1. A storage system comprising:

a host computer;

a management computer coupled to the host computer;

a first storage device coupled to the host computer and the management computer, and including first port management information; and

a second storage device coupled to the host computer, the management computer and the first storage device, and including second port management information;

wherein the first port management information and the second port management information include an identifier of a port on each storage device, an identifier of a volume in each storage device, an access restriction and an identifier of a port permitted access from the host computer to each storage device, and

wherein the management computer is configured to;

transfer a volume from the first storage device to the second storage device;

set the second port management information so that the access restriction and the identifier of the port corresponding to the identifier of the transferred volume are changed to permit the second storage device to be accessed by the port which is permitted access from the host computer to the first storage device; and

set the first port management information so that the access restriction and the identifier of the port corresponding to the identifier of the transferred volume are changed to be canceled.

2. A storage management method for a storage system comprising:

a host computer;

a management computer coupled to the host computer;

a first storage device coupled to the host computer and the management computer, and including first port management information; and

a second storage device coupled to the host computer, the management computer and the first storage device, and including second port management information;

wherein the first port management information and the second port management information include an identifier of a port on each storage device, an identifier of a volume in each storage device, an access restriction and an identifier of a port permitted access from the host computer to each storage device,

the storage management method comprising the steps of;

transferring a volume from the first storage device to the second storage device;

setting the second port management information so that the access restriction and the identifier of the port corresponding to the identifier of the transferred volume are changed to permit the second storage device to be accessed by the port which is permitted access from the host computer to the first storage device; and

setting the first port management information so that the access restriction and the identifier of the port corresponding to the identifier of the transferred volume are changed to be canceled.