Abstract: A backup control apparatus which references duplication management information which includes first stored location information indicating the stored location of first information resource and second stored location information indicating the stored location of a second information resource which duplicates the first information resource, and identifies, from among a plurality of information resources belonging to a backup region. The first information resource stored in the location indicated by the first stored location information, and a second information resource stored in the location indicated by the second stored location information corresponding to the first stored location information. The backup control apparatus replaces the identified second information resource with linked information indicating a link to the identified first information resource, and backs up the backup region in which the second information resource is replaced with the linked information.

Abstract: A backup control apparatus which references duplication management information which includes first stored location information indicating the stored location of first information resource and second stored location information indicating the stored location of a second information resource which duplicates the first information resource, and identifies, from among a plurality of information resources belonging to a backup region. The first information resource stored in the location indicated by the first stored location information, and a second information resource stored in the location indicated by the second stored location information corresponding to the first stored location information. The backup control apparatus replaces the identified second information resource with linked information indicating a link to the identified first information resource, and backs up the backup region in which the second information resource is replaced with the linked information.

Abstract: A storage system, including: a client that issues a file write request or a file read request; an archive server that is connected to the client via a network, and processes the request issued from the client; a storage device that is connected to the archive server, and records files; and a disk drive connected to the client. The arrangement utilizes an archived date management table and archive dates to conduct operations.

Abstract: Provided is a control computer coupled to a storage apparatus for storing a plurality of information resources and a search computer for receiving a search request containing a search condition and transmitting information resource list information containing at least one piece of information regarding an information resource corresponding to the search condition as a search result, the control computer includes a cache memory for storing at least one of the plurality of information resources, in which the control computer is configured to: receive the information resource list information from the search computer; calculate cache priority for each of the information resources based on the received information resource list information; decide at least one information resource to be stored in the cache memory based on the calculated cache priority; and store the decided at least one information resource in the cache memory.

Abstract: When a file server is to create data that does not permit falsification in an external storage, it is not possible to guarantee that the rewriting of this data can be prevented from a computer connected to the external storage without going through a file server. Provided is a storage system configured from a first storage having a file I/O processing unit and a second storage connected to this first storage, wherein the first storage includes a unit for requesting a change of access authority to the storage area in the own storage and in the second storage provided to the own storage. An access request to a storage area in a second storage from a computer connected to a second storage without going through a file I/O processing unit is restricted based on the change of access authority executed by the second storage upon receiving the request from the first storage.

Abstract: Erroneous deletion of data due to a collision of digest information during data de-duplication using digest information is prevented. When backup data is stored on a backup server 1100, digest information of the backup data is generated and stored in a digest information management table 4200. In addition, when a backup data storage request is made to the backup server 1100, a digest information verification control sub-program 1127 generates digest information of data to be backed up, and performs verification against the digest information of the backed up data already stored on the backup server 1100. If, by this verification, it is found that backed up data having the same digest information is already stored, de-duplication is realized by reusing the existing backed up data without newly storing the data to be backed up.

Abstract: A wide area distributed storage system checks for erasure of WORM (Write-Once Read-Many) files. A first management server acquires a storage location of a second file on a second disk apparatus which corresponds to a first file stored on a first disk apparatus, of which a retention period has expired, and queries a second management server about a retention period of the second file whose storage location has been acquired. The queried second management server refers to a file table and indicates existence or non-existence of the second file on the second disk apparatus and whether the retention period of the second file has expired or not. The system avoids unintended deletion of files by querying a plurality of file management servers about whether a file with an expired retention period should be set as a deletable object.

Abstract: Provided is a storage system for solving the problem in that, when the registration of a nonexistent user is deleted, only a system administrator can access files that the user left, so that a load placed on the administrator increases at the time of an audit. The authentication program for permitting a user, who is attempting to log in to a storage system, to access a file recorded in the storage system, the program including: a first step for receiving a user name and a password from the user; a second step for referring to a validity term corresponding to a pair of the user name and the password recorded in the storage system; and a third step for permitting access by the user to a file corresponding to the validity term based on a result of the second step, the first to third steps being executed by a processor.

Abstract: There is provided a computer system comprising: a storage system for storing data; and a management server coupled to the storage system. The storage system comprises a first interface, a first processor and a first memory. The management server comprises a second interface, a second processor and a second memory. In the case of which a first storage system stops receiving a process request, the management server selects a second storage system which receives a process request directed to the first storage system in place of the first storage system to be stopped. The second storage system instructs the first storage system to change an identifier of the first storage system, and receives a process request directed to the first storage system by assigning the identifier of the first storage system before the change to the second storage system.

Abstract: The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

Abstract: A file system access control which carries WORM commitment for files in a single transaction is provided. The file system access control apparatus includes command files that support WORM commitment, interprets WORM commitment command which is registered in command files by means of a daemon process module and executes WORM commitment in a file. A plurality of files and those under management of directories are changed of the file access modes to meet WORM. In addition, a system that allows WRITE command for the command files by means of a standard interface of the file system. The results of WORM commitment is registered in the repository files under the system regarding the present invention.

Abstract: Provided is a controller in a computer system, the computer system including a plurality of data storage systems, and at least one controller for controlling access to data stored in the plurality of data storage systems, the each controller including: an interface coupled to the network; a processor coupled to the interface; and a storage unit coupled to the processor, in which: the storage unit holds attribute information indicating whether to permit access to the data; and the processor is configured to: receive a writing request of the data from a client computer coupled to the network; judge whether each of the each controller permits the requested writing based on the held attribute information and information of a location where the each controller is installed; and write the data in a data storage system controlled by a controller judged to permit the writing.

Abstract: When a file server is to create data that does not permit falsification in an external storage, it is not possible to guarantee that the rewriting of this data can be prevented from a computer connected to the external storage without going through a file server. Provided is a storage system configured from a first storage having a file I/O processing unit and a second storage connected to this first storage, wherein the first storage includes a unit for requesting a change of access authority to the storage area in the own storage and in the second storage provided to the own storage. An access request to a storage area in a second storage from a computer connected to a second storage without going through a file I/O processing unit is restricted based on the change of access authority executed by the second storage upon receiving the request from the first storage.

Abstract: A log management system is devised to easily discover improper handling log information by managers. Virtual operation systems (OS) are respectively installed for respective users in a file server constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network separated from the first communications network. As a result of the same log information being managed by multiplex management using separate management devices, the system detects whether or not there has been any improper handling of the log information.

Abstract: Provided are a storage system, a data management apparatus, and a data management method capable of facilitating the add-on procedures of data management apparatuses for managing data groups such as directory groups. In a storage system comprising a plurality of data management apparatuses for managing storage destination management information of a data group stored in a storage extent of a prescribed storage controller, at least one of the data management apparatuses decides the respective data management apparatuses to newly manage the data group for each of the data groups based on the importance of each of the data groups or the loaded condition of each of the data management apparatuses, and migrates storage destination management information containing information regarding the storage destination of the data group to the data management apparatus to newly manage the data group based on the decision as necessary.

Abstract: When a file server is to create data that does not permit falsification in an external storage, it is not possible to guarantee that the rewriting of this data can be prevented from a computer connected to the external storage without going through a file server. Provided is a storage system configured from a first storage having a file I/O processing unit and a second storage connected to this first storage, wherein the first storage includes a unit for requesting a change of access authority to the storage area in the own storage and in the second storage provided to the own storage. An access request to a storage area in a second storage from a computer connected to a second storage without going through a file I/O processing unit is restricted based on the change of access authority executed by the second storage upon receiving the request from the first storage.

Abstract: Provided is a control computer coupled to a storage apparatus for storing a plurality of information resources and a search computer for receiving a search request containing a search condition and transmitting information resource list information containing at least one piece of information regarding an information resource corresponding to the search condition as a search result, the control computer includes a cache memory for storing at least one of the plurality of information resources, in which the control computer is configured to: receive the information resource list information from the search computer; calculate cache priority for each of the information resources based on the received information resource list information; decide at least one information resource to be stored in the cache memory based on the calculated cache priority; and store the decided at least one information resource in the cache memory.

Abstract: Providing an information processing apparatus and information processing method that prevent the occurrence of inconsistencies between restored files and other files, thereby improving ease of use. When restoring a backup virtual tree, the owner of each file and directory belonging to the backup virtual tree is identified; and when it is found, based on the identification result, that the owner of any of the files or directories is not a target user and the update time and/or version of the backup file or directory is older than that of the corresponding present file or directory, the backup file or directory is restored back into a special directory accessible for the target user with the tree structure of the original virtual tree intact.

Abstract: This invention addresses to execute an emergency access interception in a widely distributed environment. An access controller 100 manages an access control list (ACL) 110 recording access right to each object, and a black list (BL) 120 recording user information corresponding to the emergency access interception. The access controller 100 receives a request for authentication to access right and judges whether or not the access right is proper, first according to the BL 120 then ACL110. In case where the user information corresponding to the request is recorded in the BL 120, the access controller 100 sends out the user information to other access controllers and instructs them to register it in the black list. This invention effectively actualizes the emergency access interception under the widely distributed environment in case where the interception is required for any user.

Abstract: A backup control apparatus references duplication management information comprising first stored location information indicating the stored location of a first information resource and second stored location information indicating the stored location of a second information resource which duplicates the first information resource, and identifies, from among a plurality of information resources belonging to a backup region, the first information resource stored in the location indicated by the first stored location information, and a second information resource stored in the location indicated by the second stored location information corresponding to the first stored location information. Then the backup control apparatus replaces the identified second information resource with linked information indicating a link to the identified first information resource, and backs up the backup region in which the second information resource is replaced with the linked information.