Access control method, storage apparatus and storage medium

• US 6,738,877 B1
• Filed: 03/31/1999
• Issued: 05/18/2004
• Est. Priority Date: 04/08/1998
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Yamakawa, Teruji, Imamura, Kiyomi
• Primary Examiner(s): GOODARZI, NASSER MOAZZAMI
• Application Number:
  US09/283,123
• Time in Patent Office: 1,875 Days
• Field of Search: 711/1, 711/163-164, 709/249, 340/439, 713/202
• US Class Current: 711/164
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00

Abstract

A storage apparatus which writes information on a portable storage medium in response to a request from at least one host unit is provided with a writing part for writing on the detachable storage medium, a user password and a master password which limit access to the portable storage medium, and an access control part which permits a modification of the user password by specifying the master password, permits access to a data region on the portable storage medium by specifying the user password which is provided in common with respect to a plurality of users, and prohibits at least one of write and read with respect to each of the plurality of users.

Claims

1. An access control method for a storage apparatus which writes information on a portable storage medium in response to a request from at least one host unit, comprising the steps of:

writing on the portable storage medium a user password which limits access to the portable storage medium, and

said user password is common to a plurality of users and permits access to a data region on the portable storage medium by specifying user information and the user password, and prohibits at least one of write and read with respect to each of the plurality of users according to the specified user information and user password,

wherein said user information includes at least one of read permit information and write permit information.

2. The access control method as claimed in claim 1, wherein:

the storage apparatus is coupled to a plurality of host units via a plurality of paths,

path information related to the paths is added to the user password, and

access to the data region on the portable storage medium is permitted by specifying the user password and the path information.

3. The access control method as claimed in claim 1, wherein prohibiting at least one of the write and read is set independently with respect to each of the plurality of users.

5. The access control method as claimed in claim 1, wherein:

the storage apparatus is coupled to a plurality of host units via a plurality of paths,

path information related to the paths is added to the user password, and

across to the data region on the portable storage medium is permitted by specifying the user password and the path information.

16. The access control method as claimed in claim 1, wherein said specified user information includes a flag for indicating an access right of a user.

19. The access control method as claimed in claim 1, wherein said step of writing writes on the portable storage medium a master password which limits access to the portable storage medium, and a modification of the user password is permitted by specifying the master password.

4. An access control method for a storage apparatus which reads information from a portable storage medium in response to a request from at least one host unit, comprising the steps of:

reading from the portable storage medium a user password which limits access to the portable storage medium, and

said user password is common to a plurality of users and permits access to a data region on the portable storage medium by specifying user information and the user password, and prohibits at least one of write and read with respect to each of the plurality of users according to the specified user information and user password,

wherein said user information includes at least one of read permit information and write permit information.

6. The access control method as claimed in claim 4, wherein prohibiting at least one of the write and read us set independently with respect to each of the plurality of users.

17. The access control method as claimed in claim 4, wherein said specified user information includes a flag for indicating an access right of a user.

20. The access control method as claimed in claim 4, wherein said step of writing writes on the portable storage medium a master password which limits access to the portable storage medium, and a modification of the user password is permitted by specifying the master password.

7. A storage apparatus which writes information on a portable storage medium in response to a request form at least one host unit, comprising:

a writing unit for writing on the portable storage medium a user password which limits access to the portable storage medium; and

an access control part which permits access to a data region on the portable storage medium by specifying user information and the user password which is common to a plurality of users, and prohibits at least one of write and read with respect to each of the plurality of users according to the specified user information and user passwords,

wherein said user information includes at least one of read permit information and write permit information.

8. The storage apparatus as claimed in claim 7, wherein

the storage apparatus is coupled to a plurality of host units via a plurality of paths,

path information related to the paths is added to the user password, and

access to the data region on the portable storage medium is permitted by specifying the user password and the path information.

9. The storage apparatus as claimed in claim 7, wherein prohibiting at least one of the write and read is set independently with respect to each of the plurality of users.

18. The storage apparatus as claimed in claim 7, wherein said specified user information includes a flag for indicating an access right of a user.

21. The access control method as claimed in claim 7, wherein said step of writing writes on the portable storage medium a master password which limits access to the portable storage medium, and a modification of the user password is permitted by specifying the master password.

10. A storage apparatus which reads information from a portable storage medium in response to a request from at least one host unit, comprising:

a reading unit for reading from the portable storage medium user information and a user password which limit access to the portable storage medium; and

an access control part which permits access to a data region on the portable storage medium by specifying the user information and the user password which is common to a plurality of users, and prohibits at least one of write and read with respect to each of the plurality of users according to the specified user information and user password,

wherein said user information includes at least one of read permit information and write permit information.

11. The storage apparatus as claimed in claim 10, wherein

the storage apparatus is coupled to a plurality of host units via a plurality of paths,

path information related to the paths is added to the user password, and

access to the data region on the portable storage medium is permitted by specifying the user password and the path information.

12. The storage apparatus as claimed in claim 10, wherein prohibiting at least one of the write and read is set independently with respect to each of the plurality of users.

22. The access control method as claimed in claim 10, wherein said step of writing writes on the portable storage medium a master password which limits access to the portable storage medium, and a modification of the user password is permitted by specifying the master password.

13. A storage medium comprising:

a data region storing data; and

a region other than said data region, storing at least one user information and a user password which limit access to the storage medium, and

the user password is common to a plurality of users and permits access to a data region on the storage medium by specifying the user information and the user password, and prohibits at least one of write and read with respect to each of the plurality of users according to the specified user information and user password,

wherein said user information includes at least one of read permit information and write permit information.

14. The storage medium as claimed in claim 13, wherein

path information related to the path is added to the user password, and

the user password and the path information are provided to permit access to said data region by specifying the user password and the path information.

15. The storage medium as claimed in claim 13, wherein prohibiting at least one of the write and read is set independently with respect to each of the plurality of users.

23. The access control method as claimed in claim 13, wherein said step of writing writes on the portable storage medium a master password which limits access to the portable storage medium, and a modification of the user password is permitted by specifying the master password.