Abstract: In a system which manages path information and status of network with respect to a path being used for access to a storage apparatus and has a redundant path, when a fault occurs in the network, whether or not the path can be recovered by rerouting in network apparatuses is discriminated, thereby performing proper path switching. Construction information and the path information of the network are managed as information of the path which is being used for a storage access by a management server. Further, when the access path is made redundant, the management server obtains fault information in the network and information showing whether or not the path is being reconstructed from the network apparatuses, thereby discriminating the necessity of the path switching. If the path switching is necessary, the management server notifies a host computer and the storage apparatus of it and each apparatus executes a switching process.

Abstract: The present invention decreases the burden of operation required for specifying the continuity status and the cause of failure of a network storage device. A host computer accepts the specification of the device identifier, that is an identifier of the network storage device in the host protocol which positions in a higher hierarchy than the network communication protocol, and a volume identifier, that is an identifier of the volume. Then based on the specified device identifier, the host computer specifies the network identifier, that is an identifier of the network storage device in the network communication protocol. And continuity is confirmed in the network communication protocol in which the specified network identifier is the destination. Also continuity is confirmed in the host protocol in which the device identifier is the destination. And the volume specified by the volume identifier is accessed.

Abstract: Provided is a priority control method for controlling a priority of data transmission in a computer system including a storage system that has a plurality of volumes, a host computer that uses the volumes, a management computer that sets a priority of data transmission between each volume and the host computer, and a network that is composed of a network device controls the priority of data transmission and provides a connection path between the storage system and the host computer.

Abstract: A computer system for providing a remote access service includes a unit for acquiring information on a relation between a terminal and a user using the terminal, a unit for acquiring network information about the terminal, a unit for acquiring network information about a blade that the terminal will access, a unit for acquiring information on a relation between the blade and a storage area, and a management server for extracting information on the user and its usage information and providing these information in real time. The management server also has a unit for permitting an administrator of the management server, persons other than the user and a management program to use the blade.

Abstract: In order to remove security vulnerability in an IP-SAN and eliminate unauthorized access by spoofing, firewalls are installed in valid user servers and storage devices, and a distributed firewall manager for managing the firewalls integrally is provided in the IP-SAN. The distributed firewall manager obtains discovery domain information from an iSNS server, determines nodes registered in the iSNS server as the nodes of valid users, and autocreates a security policy according to sets consisting of an iSCSI name and portal information. This security policy is distributed to all of the firewalls as a common policy, whereupon access control is executed to deny TCP connection requests from unauthorized access sources.

Abstract: A sender of a message can transmit a message to an unspecified user merely by specifying a condition of space without specifying a recipient of the message, using an information processing terminal transmitting a message not with a user address to specify a user but with an area address (a condition of space) to specify an area within an electric wave reachable range of a radio base station; and a server converting the area address to a user address which specifies a PHS terminal currently located in the area represented by said area address and transmitting the message with a converted address to a switching equipment.

Abstract: An access control system and an access control server using Terminal Services or the like, which prevents information from being leaked are provided. The access control system includes one or more computer units, one or more terminals, and the access control server that controls a hub. The one or more terminals are coupled with the one or more computer units through a network and the hub. The hub controls access from the one or more terminals to the one or more computer units. In accordance with the result of the authentication, the access control server authenticates a user who operates one of the terminals and sets the hub so that a network link for a particular protocol is established between the terminal operated by the user and a particular one of the computer units.

Abstract: A sender of a message can transmit a message to an unspecified user merely by specifying a condition of space without specifying a recipient of the message, using an information processing terminal transmitting a message not with a user address to specify a user but with an area address (a condition of space) to specify an area within an electric wave reachable range of a radio base station; and a server converting the area address to a user address which specifies a PHS terminal currently located in the area represented by said area address and transmitting the message with a converted address to a switching equipment.

Abstract: To effectively allocate a computer resource in an environment where the number of computer resources is smaller than the number of users. It is provided with a section for monitoring the utilization state of the computer resources and a section for registering the condition of the possibility of release depending on the user attributes and the computer resource attributes, where when a new allocation request comes up in the state where all the computer resources are allocated, the unused computer resource is identified, released and allocated depending on the utilization state and the condition of the possibility of release.

Abstract: In an IP-SAN, instead of the presence or absence of mount/unmount requests, the actual mount/unmount status of storages is determined by monitoring session information of the storage apparatus and communicated to a mount reservation server. Change of access status is communicated in an accurate and real-time manner to the user terminal or management server that uses disk resources. This solves a problem that stoppage of access cannot be detected when the presence or absence of access to the storage apparatus is determined only by the mount/unmount request. The invention also solves a problem that, when the mounting is broken down due to any failure, a computer requesting to use the disk resources cannot access the disk despite its mount request.

Abstract: Provided is a priority control method for controlling a priority of data transmission in a computer system including a storage system that has a plurality of volumes, a host computer that uses the volumes, a management computer that sets a priority of data transmission between each volume and the host computer, and a network that is composed of a network device controls the priority of data transmission and provides a connection path between the storage system and the host computer.

Abstract: According to the invention, techniques for controlling the quality of each communication service in a network automatically according to measured information of network traffic are provided. In a representative embodiment, a network measurement controlling system is provided according to the present invention, which comprises a control server, a router, and a meter connected to a network. The meter receives packets from a network and measures the number of packets, and the like, according to preset measurement rules, and transfers measured data to a control server. The control server holds control rules including its control policy for assuring the quality of each communication service, analyzes measured data transferred from the meter, and transmits control commands. The router controls the QoS automatically in real time according to the status of the network by receiving control commands and controlling communication service quality.

Abstract: To provide an access control service and control server for protecting a computer from an Illegal access such as a password cracking, in a terminal service and other related services. An access server 3 includes an authentication manager 7 for authenticating a user to operate a terminal, and an ACE manager 9 for setting a network link that enables communication between a terminal 1 that the user operates and a specific computer unit 2, to a hub 4 in accordance with a result of the authentication. Information on each user and information on the specific computer unit 2 that the each user can use are associated with each other and registered in the ACE manager 9.

Abstract: In a storage session management system in a storage area network, the session information blocks periodically collected from the storage devices in the network are grouped based on the information indicating the relation between sessions. That is, since a storage session management server in the management system integrally manages constitution information and operation information, when there is a possibility that circumstances such as a failure and the deterioration of performance occur in information devices, a failure notification module displays such circumstances and makes notification of them to a minimum necessary range that is consolidated by a session consolidation module, thereby a storage session can be managed without applying loads on the respective information devices and the network.

Abstract: A sender of a message can transmit a message to an unspecified user merely by specifying a condition of space without specifying a recipient of the message, using an information processing terminal transmitting a message not with a user address to specify a user but with an area address (a condition of space) to specify an area within an electric wave reachable range of a radio base station; and a server converting the area address to a user address which specifies a PHS terminal currently located in the area represented by said area address and transmitting the message with a converted address to a switching equipment.

Abstract: A sender of a message can transmit a message to an unspecified user merely by specifying a condition of space without specifying a recipient of the message, using an information processing terminal transmitting a message not with a user address to specify a user but with an area address (a condition of space) to specify an area within an electric wave reachable range of a radio base station; and a server converting the area address to a user address which specifies a PHS terminal currently located in the area represented by said area address and transmitting the message with a converted address to a switching equipment.

Abstract: The invention provides a management system solving the problems of the storage area network shared among plural devices, which was incapable of guaranteeing communication performances due to varied response time, and which required unstable time for accessing volumes.

Abstract: The band controller 500 included in the computer system 1000 regularly acquires map information and IF information, etc. from the work server 100, the storage device 200, and the routers 300 and 400, and based on these pieces of information, detects iSCSI sessions for which the communication band is insufficient. When an iSCSI session with insufficient band is detected, the band controller 500 selects another iSCSI session to perform band allocation based on the iSCSI session importance level or the circuit use-rate. The band controller 500 allocates at least part of the communication band of the network route used by the iSCSI session selected in this way to the iSCSI session with insufficient band. The computer system 1000 performs efficient data transfer in storage area networks on which many variations of communication band exist.

Abstract: In a system which manages path information and status of network with respect to a path being used for access to a storage apparatus and has a redundant path, when a fault occurs in the network, whether or not the path can be recovered by rerouting in network apparatuses is discriminated, thereby performing proper path switching. Construction information and the path information of the network are managed as information of the path which is being used for a storage access by a management server. Further, when the access path is made redundant, the management server obtains fault information in the network and information showing whether or not the path is being reconstructed from the network apparatuses, thereby discriminating the necessity of the path switching. If the path switching is necessary, the management server notifies a host computer and the storage apparatus of it and each apparatus executes a switching process.

Abstract: To provide a storage connection changing method for a storage management system of setting and releasing an external connection between a primary storage system and an external storage system in a storage system, the storage management system includes a computer, the primary storage system, the external storage system, a network device, and a management device which manages the computer, the primary storage system, the external storage system, and the network device. The management device obtains a communication group information for limiting a communicable range between the computer and the storage systems from the network device, upon receiving of a request for changing an external connection state, And the management device generates a communication group information after the changing of the external connection state based on the request for changing the external connection state and the obtained communication group information.