System and method for controlling access to a device allocated to a logical information processing device

• US 9,160,715 B2
• Filed: 02/24/2014
• Issued: 10/13/2015
• Est. Priority Date: 03/28/2013
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Iwamatsu, Noboru, Konishi, Yotaro
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US14/187,672
• Publication Number:
  US 20140298444A1
• Time in Patent Office: 596 Days
• Field of Search: 709/220, 709/223, 709/224, 726/1, 726/12
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A logical information-processing device is allocated based on a request from a terminal device. In an information-processing device, one of plural storage devices is connected to one of plural processing devices each including a managing unit. First correspondence information stores physical identification information identifying the information-processing device in association with address information of the managing unit. Second correspondence information stores the physical identification information in association with logical identification information identifying the logical information-processing device. A managing device obtains address information of the managing unit of the information-processing device corresponding to the logical information-processing device allocated to the terminal device, by using the physical identification information obtained, based on the logical identification information included in the request, from the second correspondence information. A proxy device accesses the managing unit of the corresponding information-processing device based on the address information obtained by the managing device.

Claims

1. A system where a logical information processing device is allocated based on a request from a terminal device, the system comprising:

an information processing device in which one of a plurality of storage devices is connected to one of a plurality of processing devices each including a managing unit;

a first storage unit configured to store first correspondence information that stores physical identification information identifying the information processing device in association with address information of the managing unit;

a second storage unit configured to store second correspondence information that stores the physical identification information in association with logical identification information identifying the logical information processing device;

a managing device configured to acquire address information of the managing unit of the information processing device corresponding to the logical information processing device allocated to the terminal device, by using the physical identification information that is obtained from the second correspondence information based on the logical identification information included in the request; and

a proxy device configured to access the managing unit of the corresponding information processing device, based on the address information acquired by the managing device.

2. The system of claim 1, wherein

the managing device further includes a connection changing unit configured to change the second correspondence information in response to a change of a connection between the storage device and the processing device.

3. The system of claim 2, wherein

when the storage device corresponding to the logical information processing device is connected to a predetermined one of the processing devices in response to the request, the connection changing unit changes the second correspondence information so that the logical identification information of the logical information processing device corresponding to the connected storage device is associated with the physical identification information of the connected information processing device.

4. The system of claim 3, wherein

when a connection between the storage device corresponding to the logical information processing device and the predetermined one of the processing devices is cancelled based on the request, the connection changing unit changes the second correspondence information so that a correspondence between the logical identification information of the logical information processing device corresponding to the storage device for which the connection has been cancelled and the physical identification information of the information processing device for which the connection has been cancelled is cancelled.

5. The system of claim 1, further comprising:

a third storage unit configured to store authority information for giving the terminal device authority to use the managing unit, wherein

the proxy device includes an authenticating unit configured to authenticate the terminal device based on the authority information; and

when the authentication is successful, the managing device acquires, from the first correspondence information, the address information of the managing unit of the information processing device corresponding to the logical information processing device allocated to the terminal device, by using the physical identification information that is obtained from the second correspondence information, based on the logical identification information included in the request.

6. The system of claim 5, wherein

the proxy device:

further includes a substituting unit configured to substitute to log in from the terminal device to the managing unit corresponding to the obtained address information; and

provides an interface for accessing the managing unit of the corresponding information processing device, in a login state, based on the address information acquired by the managing device.

7. The system of claim 1, wherein

the proxy device:

further includes a first setting unit configured to set use authority to the managing unit corresponding to the address information; and

accesses the managing unit of the corresponding information processing device with the set use authority, based on the address information acquired by the managing device.

8. The system of claim 1, further comprising:

a firewall configured to connect a connection network of a network interface of the processing devices and a connection network of a network interface of the managing unit, wherein

the proxy device;

further includes a second setting unit configured to set the firewall so as to permit access from the network interface of the processing device to the managing unit of the corresponding information processing device; and

provides information for accessing the managing unit of the corresponding information processing device from the network interface of the access-permitted processing device.

9. A method for controlling a system in which a logical information processing device is allocated based on a request from a terminal device, the system including:

an information processing device in which one of a plurality of storage devices is connected to one of a plurality of processing devices each including a managing unit,

a first storage unit configured to store first correspondence information that stores physical identification information identifying the information processing device in association with address information of the managing unit, and

a second storage unit configured to store second correspondence information that stores the physical identification information in association with logical identification information identifying a logical information processing device, the method comprising;

acquiring, by a managing device included in the system, address information of the managing unit of the information processing device corresponding to the logical information processing device allocated to the terminal device, by using the physical identification information that is obtained from the second correspondence information based on the logical identification information included in the request; and

accessing, by a proxy device included in the system, the managing unit of the corresponding information processing device based on the address information acquired by the managing device.

10. The method of claim 9, wherein

a connection changing unit included in the managing device changes the second correspondence information in response to a change of a connection between the storage device and the processing device.

11. The method of claim 10, wherein

when the storage device corresponding to the logical information processing device is connected to a predetermined one of the processing devices in response to the request, the connection changing unit changes the second correspondence information so that the logical identification information of the logical information processing device corresponding to the connected storage device is associated with the physical identification information of the connected information processing device.

12. The method of claim 11, wherein

when a connection between the storage device corresponding to the logical information processing device and the predetermined one of the processing devices is cancelled based on the request, the connection changing unit changes the second correspondence information so that a correspondence between the logical identification information of the logical information processing device corresponding to the storage device for which the connection has been cancelled and the physical identification information of the information processing device for which the connection has been cancelled is cancelled.

13. The method of claim 9, further comprising:

authenticating, by an authenticating unit included in the proxy device, the terminal device, based on authority information for giving the terminal device authority to use the managing unit, wherein

when the authentication is successful, the managing device acquires, from the first correspondence information, the address information of the managing unit of the information processing device corresponding to the logical information processing device allocated to the terminal device, by using the physical identification information that is obtained from the second correspondence information based on the logical identification information included in the request.

14. The method of claim 13, further comprising:

substituting, by a substituting unit, to log in from the terminal device to the managing unit corresponding to the obtained address information; and

providing, by the proxy device, an interface for accessing the managing unit of the corresponding information processing device, in a login state, based on the address information acquired by the managing device.

15. The method of claim 9, further comprising:

setting, by a first setting unit included in the proxy device, use authority to the managing unit corresponding to the address information; and

accessing, by the proxy device, the managing unit of the corresponding information processing device with the set use authority, based on the address information acquired by the managing device.