Array-type disk apparatus preventing lost data and providing improved failure tolerance

• US 7,757,042 B2
• Filed: 02/25/2005
• Issued: 07/13/2010
• Est. Priority Date: 09/26/2003
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Yagisawa, Ikuya, Yamamoto, Akira, Fukuoka, Mikio, Okamoto, Takeki, Takamoto, Kenichi, Matsunami, Naoto, Nakano, Toshio
• Primary Examiner(s): Peugh; Brian R
• Assistant Examiner(s): BRADLEY, MATTHEW A
• Application Number:
  US11/067,085
• Publication Number:
  US 20050166084A1
• Time in Patent Office: 1,964 Days
• Field of Search: 711/114
• US Class Current: 711/114
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 11/1662 the resynchronized component or unit being a persistent storage device re-synchronization of failed mirror storage G06F11/2082; rebuild or reconstruction of parity RAID storage G06F11/1008
• CPC Class Codes: G06F 11/2069 Management of state, configuration or failover
• CPC Class Codes: G06F 11/2089 Redundant storage control functionality
• CPC Class Codes: G06F 11/2094 Redundant storage or storage space G06F11/2056 takes precedence
• CPC Class Codes: G06F 11/2097 maintaining the standby controller/processing unit updated initialisation or re-synchronisation thereof G06F11/1658 and subgroups
• CPC Class Codes: G06F 2201/81 Threshold

Abstract

Disclosed is storage system, that is, an array-type disk apparatus which is provided with an error monitor section which monitors the status of error occurrence in a disk drive and instructs initiation of mirroring between the disk drive and a spare disk drive when the number of errors occurred of the disk drive exceeds a specified value, and a mirror section which performs mirroring between the disk drive and spare disk drive. Storage system, that is, the array-type disk apparatus may be provided with an error monitor section which monitors the status of error occurrence in a disk drive and gives such an instruction as to set the status of the disk drive in a temporary blocked state, and a data restoring section which executes data restoration by reading data from the temporary blocked disk drive when reading from another disk drive constituting a disk array group is not possible during data restoration.

Claims

1. A control method in a storage system, said storage system including:

a controller coupled to a host computer and controlling to read/write data sent from said host computer to at least one storage region,

a plurality of disk drives corresponding to said storage region, said disk drives being used as a RAID group and storing data sent from said host computer and parity data created based on data sent from said host computer,

at least one spare disk drive being used to read/write in a new RAID group with a remainder of disk drives other than a first disk drive,

the control method comprising;

a first step, when said first disk drive whose error occurrence count exceeds a threshold, for reading data from said remainder of disk drives, and creating data based on said read data, and writing said created data to said spare disk drive, and

a second step for judging whether failure has occurred in a first sector in at least one of said remainder of disk drives during said first step, and, in a case that failure has occurred in said first sector in at least one of said remainder of disk drives, attempting to read data from a second sector in said first disk drive, said second sector corresponding to said first sector,

a third step for judging whether said data can be read from said second sector in said first disk drive, and, in a case that data can be read from said second sector in said first disk drive, writing said read data from said second sector in said first drive to said spare disk drive, and, in a case that data cannot be read from said second sector in said first disk drive, data in said second sector in said first disk drive is treated as data lost.

2. A control method in a storage system according to claim 1:

wherein a status of said first drive is a temporarily blocked status while in said first step, second step, and said third step, and

wherein a status of said first drive is a blocked status after said third step.

3. A control method in a storage system according to claim 1, further comprising:

a fourth step for shifting a processing of said first disk drive to said spare disk drive after said first step or second step.

4. A control method in a storage system, said storage system including:

a controller coupled to a host computer and which controls to read/write data sent from said host computer to at least one storage region,

a plurality of disk drives corresponding to said storage region, said disk drives storing data sent from said host computer and parity data created based on data sent from said host computer,

at least one spare disk drive being used to read/write in place of a first disk drive in said disk drives,

the control method comprising;

a first step for reading data from a remainder of disk drives other than said first disk drive, and creating data based on said read data from said remainder of disk drives, and writing said created data to said spare disk drive, and

a second step for judging whether failure has occurred in a first sector in at least one of said remainder of disk drives during said first step, and, in a case that failure has occurred in, said first sector in at least one of said remainder of disk drives, attempting to read data from a second sector in said first disk drive, said second sector corresponding to said first sector, and

a third step for judging whether said data can be read from said second sector in said first disk drive, and, in a case that data can be read from said second sector in said first disk drive, writing said read data from said second sector in said first disk drive to said spare disk drive, and, in a case that data cannot be read from said second sector in said first disk drive, data in said second sector in said first disk drive is treated as data lost.

5. A control method in a storage system according to claim 4:

wherein a status of said first drive is a temporality blocked status while performing said first step, said second step, and said third step,

wherein a status of said first drive is a blocked status after said third step.

6. A control method in a storage system according to claim 5, wherein:

said blocked status is a status in which said first disk drive is disconnected from said controller.

7. A control method in a storage system according to claim 4, further comprising:

a fourth step for shifting a processing of said first disk drive to said spare disk drive after said first step or second step.

8. A control method in a storage system according to claim 5, wherein:

said blocked status is a status in which said first disk drive is not read/written from/to said controller.

9. A control method in a storage system, said storage system having

a controller coupled to a host computer and controlling to read/write data sent from said host computer to at least one storage region,

a plurality of disk drives corresponding to said storage region, said disk drives being used as a RAID (Redundant Array of Inexpensive Disks) group and storing data sent from said host computer and parity data created based on data sent from said host computer,

at least one spare disk drive being used to read/write in a new RAID group with a remainder of disk drives other than a first disk drive,

the control method comprising:

a first step for reading data from said remainder of disk drives, and creating data based on said read data, and writing said created data to said spare disk drive,

a second step for judging whether failure has occurred in a first sector in at least one of said remainder of disk drives during said first step, and, in a case that failure has occurred in said first sector in at least one of said remainder of disk drives, attempting to read data from a second sector in said first disk drive, said second sector corresponding to said first sector, and

a third step for judging whether said data can be read from said second sector in said first disk drive, and, in a case that data can be read from said second sector in said first disk drive, writing said read data from said second sector in said first drive to said spare disk drive, and, in a case that data cannot be read from said second sector in said first disk drive, data in said second sector in said first disk drive is treated as data lost.

10. A storage system comprising:

a plurality of disk drives which forms a RAID group;

a spare disk drive;

a controller which discovers a first disk drive in said plurality of disk drives when an error occurrence count of the first disk drive exceeds a threshold, reads data from a remainder of disk drives which are different from said first disk drive and are included in said plurality of disk drives, and creates data based on said read data, and writes said created data to said spare disk drive,

wherein the controller judges whether failure has occurred in a first sector in at least one of said remainder of disk drives, and, in case that failure has occurred in said first sector in at least one of said remainder of disk drives, the controller attempts to read data from a second sector in said first disk drive, said second sector corresponding to said first sector, and

wherein the controller judges whether said data can be read from said second sector in said first disk drive, and, in case that data can be read from said second sector in said first disk drive, the controller writes said read data from said second sector in said first drive to said spare disk drive, and, in case that data cannot be read from said second sector in said first disk drive, data in said second sector in said first disk drive is treated as data lost.

11. A storage system according to claim 10,

wherein said controller includes a memory storing error management information which manages an error occurrence count of said plurality of disk drives,

wherein said controller monitors the error occurrence count of said plurality of disk drives, and

wherein when an error has occurred in a disk drive in said plurality of disk drives, said controller adds to the error occurrence count of the disk drive in the error management information.

12. A storage system according to claim 11,

wherein said error management information stores a threshold of each of the plurality of disk drives,

wherein said controller discovers said first disk drive in the plurality of disk drives by referring to said error management information.

13. A storage system according to claim 10,

wherein said plurality of disk drives includes a data disk drive which stores data sent from a computer and a parity disk drive which stores parity data,

wherein said first disk drive is said data disk drive,

wherein when said controller receives a write data to said first disk drive from said computer while creating said data, said controller creates a parity based on said received write data and data stored in a second disk drive, and stores said created parity in said parity disk drive, and writes said received write data to said first disk drive.

14. A storage system according to claim 13,

wherein said controller further writes said received write data to said spare disk drive.

15. A storage system according to claim 14,

wherein said plurality of disk drives includes a data disk drive which stores data sent from a computer and a parity disk drive which stores parity data,

wherein said first disk drive is said parity disk drive,

wherein when said controller receives a write data to said second disk drive from said computer while creating said data, the controller creates a parity based on said received write data and data stored in said second disk drive, and writes said created parity in said first disk drive, and writes said received write data to said second disk drive.

16. A storage system according to claim 15,

wherein after data stored in said first disk drive is written to said spare disk drive, said controller changes a write request to said first disk drive from a computer to a write request to said spare disk drive from said host computer.