Authenticating a processing system accessing a resource

• US 9,442,762 B2
• Filed: 12/13/2013
• Issued: 09/13/2016
• Est. Priority Date: 02/12/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Brice, Frank W. Jr., Chambliss, David D., Kalos, Matthew J., Yudenfriend, Harry M.
• Primary Examiner(s): NGUYEN, PHIL K
• Application Number:
  US14/106,605
• Publication Number:
  US 20140101667A1
• Time in Patent Office: 1,005 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/0683 Plurality of storage devices
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/46 Multiprogramming arrangements
• CPC Class Codes: G06F 9/5005 to service a request

Abstract

Provided are a method, system, and article of manufacture for authenticating a processing system accessing a resource. An association of processing system identifiers with resources, including a first and second resources, is maintained. A request from a requesting processing system in a host is received for use of a first resource that provides access to a second resource, wherein the request is generated by processing system software and wherein the request further includes a submitted processing system identifier included in the request by host hardware in the host. A determination is made as to whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources. The requesting processing system is provided access to the first resource that the processing system uses to access the second resource.

Claims

1. A method, comprising:

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from a requesting processing system in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the request is generated by processing system software in the host and wherein a host identifier is included in the received request by host hardware in the host;

determining whether the submitted processing system identifier is associated with the first and second resources; and

providing the requesting processing system access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is associated with the first and second resources, wherein the first resource provides the host identified by the host identifier access to the second resource or an element identified by the second resource.

2. The method of claim 1, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

3. A method, comprising:

maintaining an association of processing system identifiers with base and alias addresses;

receiving a request from a requesting processing system in a host for use of the alias address that provides access to the base address, wherein the request includes a submitted processing system identifier, and wherein the request is associated with a path group identifier identifying a path group, wherein base and alias addresses are associated with a path group identifier;

determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request;

determining whether the submitted processing system identifier is associated with the path group identifier in response to determining that the path group identifier associated with the request is associated with the base and alias addresses in the request; and

providing the requesting processing system access to the alias address that the processing system uses to access the base address in response to determining that the submitted processing system identifier is associated with the path group identifier associated with the base and alias address in the request.

4. The method of claim 3, further comprising:

determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier is associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host is associated with the path group identifier associated with the request.

13. The method of claim 3, wherein the determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request comprises determining whether a path group control block identified by the path group identifier in the request indicates the base and alias addresses in the request, and wherein the determining whether the submitted processing system identifier is associated with the path group identifier comprises determining whether path group control block indicates the submitted processing system identifier.

14. The method of claim 4, wherein the determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request comprises determining whether a path group control block identified by the path group identifier indicated in the request indicates the host identifier indicated in the request match.

5. A system in communication with processing systems in a host, wherein each processing system includes processing system software, comprising:

a computer readable storage medium including an association of processing system identifiers with resources, including a first and second resources;

an Input/Output (“

I/O”

) manager to perform operations, the operations comprising;

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from a requesting processing system in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the request is generated by processing system software in the host and wherein a host identifier is included in the received request by host hardware in the host;

determining whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources; and

providing the requesting processing system access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is associated with the first and second resources, wherein the first resource provides the host identified by the host identifier access to the second resource or an element identified by the second resource.

6. The system of claim 5, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

8. The system of claim 6, wherein the operations further comprise:

determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier is associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host is associated with the path group identifier associated with the request.

16. The system of claim 8, wherein the determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request comprises determining whether a path group control block identified by the path group identifier indicated in the request indicates the host identifier indicated in the request match.

7. A system in communication with processing systems in a host, wherein each processing system includes processing system software, comprising:

a computer readable storage medium including an association of processing system identifiers with resources, including a first and second resources;

an Input/Output (“

I/O”

) manager to perform operations, the operations comprising;

maintaining an association of processing system identifiers with base and alias addresses;

receiving a request from a requesting processing system in a host for use of the alias address that provides access to the base address, wherein the request includes a submitted processing system identifier, and wherein the request is associated with a path group identifier identifying a path group, wherein base and alias addresses are associated with a path group identifier;

determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request;

determining whether the submitted processing system identifier is associated with the path group identifier in response to determining that the path group identifier associated with the request is associated with the base and alias addresses in the request; and

providing the requesting processing system access to the alias address that the processing system uses to access the base address in response to determining that the submitted processing system identifier is associated with the path group identifier associated with the base and alias address in the request.

15. The system of claim 7, wherein the determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request comprises determining whether a path group control block identified by the path group identifier in the request indicates the base and alias addresses in the request, and wherein the determining whether the submitted processing system identifier is associated with the path group identifier comprises determining whether path group control block indicates the submitted processing system identifier.

9. An article of manufacture comprising a non-transitory computer readable storage medium implementing an Input/Output (I/O) manager in communication with processing systems in a host, wherein each processing system includes processing system software, wherein the I/O manager is executed to cause operations, the operations comprising:

maintaining an association of processing system identifiers with resources, including a first and second resources;

receiving a request from a requesting processing system in a host for use of the first resource that provides access to the second resource, and wherein the request includes a submitted processing system identifier, wherein the request is generated by processing system software in the host and wherein a host identifier is included in the received request by host hardware in the host;

determining whether the submitted processing system identifier is one of the processing system identifiers associated with the first and second resources; and

providing the requesting processing system access to the first resource that the processing system uses to access the second resource in response to determining that the submitted processing system identifier is associated with the first and second resources, wherein the first resource provides the host identified by the host identifier access to the second resource or an element identified by the second resource.

10. The article of manufacture of claim 9, wherein the second resource comprises a base address of a volume, wherein the first resource comprises an alias address to use to access the base address.

11. An article of manufacture comprising a non-transitory computer readable storage medium implementing an Input/Output (I/O) manager in communication with processing systems in a host, wherein each processing system includes processing system software, wherein the I/O manager is executed to cause operations, the operations comprising:

maintaining an association of processing system identifiers with base and alias addresses;

receiving a request from a requesting processing system in a host for use of the alias address that provides access to the base address, wherein the request includes a submitted processing system identifier, wherein the request is associated with a path group identifier identifying a path group, wherein base and alias addresses are associated with a path group identifier;

determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request;

determining whether the submitted processing system identifier is associated with the path group identifier in response to determining that the path group identifier associated with the request is associated with the base and alias addresses in the request; and

providing the requesting processing system access to the alias address that the processing system uses to access the base address in response to determining that the submitted processing system identifier is associated with the path group identifier associated with the base and alias address in the request.

12. The article of manufacture of claim 11, wherein the operations further comprise:

determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request in response to determining that the submitted processing system identifier is associated with the path group identifier, wherein the request to use the alias address to access the base address indicated in the request is granted in response to determining that the host identifier of the host is associated with the path group identifier associated with the request.

17. The article of manufacture of claim 11, wherein the determining whether the path group identifier associated with the request is associated with the base and alias addresses in the request comprises determining whether a path group control block identified by the path group identifier in the request indicates the base and alias addresses in the request, and wherein the determining whether the submitted processing system identifier is associated with the path group identifier comprises determining whether path group control block indicates the submitted processing system identifier.

18. The article of manufacture of claim 12, wherein the determining whether the host identifier indicated in the request is associated with the path group identifier associated with the request comprises determining whether a path group control block identified by the path group identifier indicated in the request indicates the host identifier indicated in the request match.