System and methods for host enabled management in a storage system

• US 9,087,201 B2
• Filed: 01/04/2013
• Issued: 07/21/2015
• Est. Priority Date: 01/05/2012
• Status: Expired due to Fees

• Current Assignee: Infinidat Ltd.
• Original Assignee: Infinidat Ltd.
• Inventors: Sandler, Kariel, Rozendorn, Guy, Broido, Jacob
• Primary Examiner(s): Zee, Edward
• Application Number:
  US13/733,971
• Publication Number:
  US 20130179993A1
• Time in Patent Office: 928 Days
• Field of Search: 726/26, 726/27, 726/29, 713/189, 713/190
• US Class Current: 1/1
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/60 Protecting data

Abstract

A storage system that includes a management communication interface coupled to a storage management layer and further includes a data communication interface. Upon receiving a request for accessing the storage management layer, from the host, via the data communication interface, the management layer sends to the host, access information necessary for allowing access of the host to the storage management layer via the management communication interface; and upon receiving a management command, from the host via the management communication interface, the host is provided with access to the storage management layer, in cases where the management command conforms to the access information.

Claims

1. A method of providing management services, the method comprising:

a. in response to receiving by a storage system via a data communication interface of the storage system, a request from a host for accessing a storage resource management service for managing a storage resource related to the host, wherein the storage resource management service is accessible via a management communication interface of the storage system, sending to the host, via said data communication interface, access information for allowing access of the host to the storage system via said management communication interface;

wherein the data communication interface is configured to communicate data access commands, that comply with a data protocol, between the host and storage system;

wherein the access information is sent as a message having a format that complies with the data protocol;

wherein the management communication interface is configured to communicate management commands that comply with a management protocol; and

wherein the management protocol differs from the data protocol; and

b. in response to receiving, by the storage system, from the host via said management communication interface, a management command with regard to the storage resource management service, providing the host access to the storage resource management service via the management communication interface, in cases where the management command conforms to said access information.

2. The method of claim 1, wherein said access information comprises address parameters for enabling communication between the host and the storage system via said management communication interface.

3. The method of claim 1, wherein said access information comprises authentication information for verifying access of the host via the management communication interface.

4. The method of claim 1, wherein said access information is indicative of a management functionality that is available to the host when using the access information.

5. The method of claim 1 comprising generating said access information, wherein the access information is indicative of a management functionality that is available to the host, in accordance with a trust level of the host.

6. The method of claim 1 comprising generating said access information in accordance with a requested management functionality for managing the storage resource, comprised in said request.

7. The method of claim 1, wherein said access information is associated with at least one usage restriction selected from:

a time limitation for using said access information and a maximum number of allowed usages of said access information.

8. The method of claim 1 further comprising denying access via said management communication interface, in case a usage restriction associated with said access information is violated by said management command.

9. The method of claim 1 further comprising denying access via said management communication interface, if a number of times said access information has been used exceeds a maximum number of allowed usages of said access information.

10. The method of claim 1 further comprising denying access via said management communication interface, in case of expiration of a predefined time limitation, associated with said access information.

11. The method of claim 1, wherein said access information is sent to the host using at least two separate messages.

12. The method of claim 1 wherein said data communication interface is a small computer system interface (SCSI) port, configured to operate in compatibility with SCSI standards.

13. The method of claim 1 wherein said request comprises a SCSI vendor specific command.

14. The method of claim 1, wherein the storage resource is selected from a group consisting of:

one or more volumes, one or more snapshots, and one or more consistency groups.

15. A storage system comprising:

a data communication interface for receiving data access requests that comply with a data protocol and addressed to data stored in said storage system;

a management communication interface for receiving management commands that comply with a management protocol;

wherein the management protocol differs from the data protocol; and

a management layer, operatively coupled to said data communication interface and to said management communication interface, and configured to;

receive via said data communication interface a request from a host for accessing a storage resource management service for managing a storage resource related to the host, wherein the storage resource management service is accessible via the management communication interface;

send to the host via said data communication interface, access information for allowing access of the host to the storage system via said management communication interface;

wherein the access information is sent as a message having a format that complies with the data protocol;

receive via said management communication interface a management command of the management commands with regard to the storage resource management service from the host; and

provide the host access to the storage resource management service via the management communication interface, in cases where the management command conforms to said access information.

16. The storage system of claim 15, wherein said access information comprises authentication information for verifying access of the host via the management communication interface.

17. The storage system of claim 16, wherein said management layer is configured to generate said authentication information in accordance with an identity of the host.

18. The storage system of claim 16, wherein said management layer is configured to generate said authentication information in accordance with a requested management functionality, comprised in said request.

19. The storage system of claim 15, wherein said management layer is configured to associate said access information with at least one usage restriction selected from:

a time limitation for using said access information and a number of maximum allowed usages of said access information.

20. The storage system of claim 15, wherein said management layer is configured to deny access via said management communication interface, in cases where a usage restriction associated with said access information is violated by said management command.

21. The storage system of claim 15 wherein said data communication interface is a small computer system interface (SCSI) port, configured to operate in compatibility with SCSI standards.

22. The storage system of claim 15, wherein said management communication interface is a web port operatively coupled to said management layer.

23. A non-transitory computer readable storage medium that stores instructions that when executed by a storage system, cause the storage system to:

a. in response to receiving by the storage system via a data communication interface of the storage system, a request from a host for accessing a storage resource management service for managing a storage resource related to the host, wherein the storage resource management service is accessible via a management communication interface of the storage system, send to the host access information for allowing access of the host to the storage system via said management communication interface;

wherein the data communication interface is configured to communicate data access commands, that comply with a data protocol, between the host and storage system;

wherein the access information is sent as a message having a format that complies with the data protocol;

wherein the management communication interface is configured to communicate management commands that comply with a management protocol; and

wherein the management protocol differs from the data protocol;

b. in response to receiving a management command with regard to the storage resource management service from the host via said management communication interface, provide the host access to the storage resource management service via the management communication interface, in cases where the management command conforms to said access information.