Abstract: A control apparatus of a storage unit having a first and a second communication ports for conducting communication with a computer, a first and a second processors that control respectively the first and the second communication ports, first and second storage devices that store respectively a first and a second queues for storing commands sent from the computer respectively to the first and the second communication ports, and a first nonvolatile memory that the first processor accesses, the first and the second processors executing the commands stored respectively in the first and the second queues to thereby control the communications with the computer, comprising a unit causing the second processor to implement execution of the command stored in the first queue; and a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.

Abstract: In a storage control apparatus employed in a storage system arranged by containing a plurality of storage control apparatus connected via an IP (Internet Protocol) network to each other, the storage control apparatus stores thereinto necessary storage expiration equal to such an expiration during which data is required to be stored under safe condition, this data being stored in a first storage area of the storage control apparatus; stores thereinto first guarantee expiration equal to such an expiration during which the first storage area can store the data under normal condition; and stores thereinto second guarantee expiration equal to such an expiration during which a second storage area can store the data under normal condition, this second storage area being equal to a storage area of another storage control apparatus.

Abstract: A storage control system that makes it possible to integrate the setting of access between initiators and targets connected to a communication network and the setting of LUN security for the targets. The storage control system has: a host computer having one or more initiators; a storage controller having one or more targets and storage areas, and also having a security property-for defining access relationships between-the targets and the storage areas; and a server having a memory for storing correspondence relationships between the initiators and the targets, and a function for notifying the host computer and a storage controller of the correspondence relationships information.

Abstract: The present invention relates to a storage device for supporting an iSCSI protocol as an interface with host devices, wherein, in realizing an authentication function of access control following the iSCSI protocol, presence and absence of an authentication of the host device connected under the same port can coexist. In the storage device that can be connected to a plurality of host devices, access information from the host devices is received through the iSCSI port, and the host devices are identified based on the access information and refers to an authentication control table memorized in a shared memory and associating an iSCSI name for specifying the host device in the unit of iSCSI port, with authentication information of the host device (necessity of authentication, user ID/password), to determine the necessity of the authentication to the iSCSI port from the host device.

Abstract: In a storage control apparatus employed in a storage system arranged by containing a plurality of storage control apparatus connected via an IP (Internet Protocol) network to each other, the storage control apparatus stores thereinto necessary storage expiration equal to such an expiration during which data is required to be stored under safe condition, this data being stored in a first storage area of the storage control apparatus; stores thereinto first guarantee expiration equal to such an expiration during which the first storage area can store the data under normal condition; and stores thereinto second guarantee expiration equal to such an expiration during which a second storage area can store the data under normal condition, this second storage area being equal to a storage area of another storage control apparatus.

Abstract: In a storage control apparatus employed in a storage system arranged by containing a plurality of storage control apparatus connected via an IP (Internet Protocol) network to each other, the storage control apparatus stores thereinto necessary storage expiration equal to such an expiration during which data is required to be stored under safe condition, this data being stored in a first storage area of the storage control apparatus; stores thereinto first guarantee expiration equal to such an expiration during which the first storage area can store the data under normal condition; and stores thereinto second guarantee expiration equal to such an expiration during which a second storage area can store the data under normal condition, this second storage area being equal to a storage area of another storage control apparatus.

Abstract: A control apparatus of a storage unit having a first and a second communication ports for conducting communication with a computer, a first and a second processors that control respectively the first and the second communication ports, first and second storage devices that store respectively a first and a second queues for storing commands sent from the computer respectively to the first and the second communication ports, and a first nonvolatile memory that the first processor accesses, the first and the second processors executing the commands stored respectively in the first and the second queues to thereby control the communications with the computer, comprising a unit causing the second processor to implement execution of the command stored in the first queue; and a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.

Abstract: A control apparatus of a storage unit having a first and a second communication ports for conducting communication with a computer, a first and a second processors that control respectively the first and the second communication ports, first and second storage devices that store respectively a first and a second queues for storing commands sent from the computer respectively to the first and the second communication ports, and a first nonvolatile memory that the first processor accesses, the first and the second processors executing the commands stored respectively in the first and the second queues to thereby control the communications with the computer, comprising a unit causing the second processor to implement execution of the command stored in the first queue; and a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.

Abstract: A storage control system that makes it possible to integrate the setting of access between initiators and targets connected to a communication network and the setting of LUN security for the targets. The storage control system has: a host computer having one or more initiators; a storage controller having one or more targets and storage areas, and also having a security property for defining access relationships between the targets and the storage areas; and a server having a memory for storing correspondence relationships between the initiators and the targets, and a function for notifying the host computer and a storage controller of the correspondence relationships information.

Abstract: A storage system for covering advantages of the “In band method” and the “Out of band method”, including an external storage device having storage data and storage operating data for operating the storage host computer connected to the external storage device on which an application is able to operate, and a storage operating server connected to the external storage device and the host computer, and having a storage operating server program, for obtaining the storage operating data from the external storage device, where the application operates the storage operating data through the storage data server program.

Abstract: A storage system storing data sending/receiving data to/from a plurality of external devices via a common network. The storage system controls access from the plurality of external devices. The storage system accepts accesses according to different protocols from the plurality of external devices via the common network. The storage system analyzes the protocol from the external devices which accessed through the external interface. The storage system sends/receives data based on the analysis result.

Abstract: A control apparatus of a storage unit having a first and a second communication ports for conducting communication with a computer, a first and a second processors that control respectively the first and the second communication ports, first and second storage devices that store respectively a first and a second queues for storing commands sent from the computer respectively to the first and the second communication ports, and a first nonvolatile memory that the first processor accesses, the first and the second processors executing the commands stored respectively in the first and the second queues to thereby control the communications with the computer, comprising a unit causing the second processor to implement execution of the command stored in the first queue; and a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.

Abstract: A storage system has an RMI interface for managing a storage. In starting an access, a WWW server distributes a storage manager program including an authentication function to a WWW browser of a manager. After a manager authentication by using a registered manager information file, an RMI management object dynamically creates an authentication key unique to the manager and an RMI interface having a limited function corresponding to the authentication key, and transmits the authentication key to a storage management program of the manager. An authenticated manager is allowed to imitatively use the RMI interface in accordance with the authentication key.

Abstract: In an access control system, accesses are controlled which are received from not only the same communication network, but also either one or a plurality of other communication networks. In this access control system, a channel processor of a storage control system accepts a log-in request containing a target IP address from a target host apparatus, and compares this target IP address with the own IP address stored in an iSCSI port. Based upon a comparison result, the channel processor judges a network relative logical distance of a target network with respect to a communication network containing the storage control system as to the target network containing a target host apparatus. Then, the channel processor permits an access of a permission access type corresponding to the judged network relative logical distance with respect to a target upper grade apparatus.

Abstract: A control apparatus of a storage unit having a first and a second communication ports for conducting communication with a computer, a first and a second processors that control respectively the first and the second communication ports, first and second storage devices that store respectively a first and a second queues for storing commands sent from the computer respectively to the first and the second communication ports, and a first nonvolatile memory that the first processor accesses, the first and the second processors executing the commands stored respectively in the first and the second queues to thereby control the communications with the computer, comprising a unit causing the second processor to implement execution of the command stored in the first queue; and a unit changing data stored in the first memory while the second processor is being caused to implement execution of the command stored in the first queue.

Abstract: In a storage control apparatus employed in a storage system arranged by containing a plurality of storage control apparatus connected via an IP (Internet Protocol) network to each other, the storage control apparatus stores thereinto necessary storage expiration equal to such an expiration during which data is required to be stored under safe condition, this data being stored in a first storage area of the storage control apparatus; stores thereinto first guarantee expiration equal to such an expiration during which the first storage area can store the data under normal condition; and stores thereinto second guarantee expiration equal to such an expiration during which a second storage area can store the data under normal condition, this second storage area being equal to a storage area of another storage control apparatus.

Abstract: In a storage control apparatus employed in a storage system arranged by containing a plurality of storage control apparatus connected via an IP (Internet Protocol) network to each other, the storage control apparatus stores thereinto necessary storage expiration equal to such an expiration during which data is required to be stored under safe condition, this data being stored in a first storage area of the storage control apparatus; stores thereinto first guarantee expiration equal to such an expiration during which the first storage area can store the data under normal condition; and stores thereinto second guarantee expiration equal to such an expiration during which a second storage area can store the data under normal condition, this second storage area being equal to a storage area of another storage control apparatus.

Abstract: Accesses are controlled which are received on the basis of the iSCSI protocol. A control apparatus which receives an iSCSI name and a log-in request of a host apparatus from the host apparatus via one or a plurality of communication networks, one or more storage apparatus which can be an access destination of the host apparatus, and a storage resource in which one or a plurality of iSCSI names are stored beforehand are provided. The control apparatus refers to the storage resource to judge whether or not the received iSCSI name matches with any of the pre-registered one or a plurality of iSCSI names. When a positive judgment result is obtained, the control apparatus permits a log-in to the host apparatus, and, when a negative judgment result is obtained, does not permit a log-in to the host apparatus in accordance with the received log-in request.

Abstract: The present invention relates to a storage device for supporting an iSCSI protocol as an interface with host devices, wherein, in realizing an authentication function of access control following the iSCSI protocol, presence and absence of an authentication of the host device connected under the same port can coexist. In the storage device that can be connected to a plurality of host devices, access information from the host devices is received through the iSCSI port, and the host devices are identified based on the access information and refers to an authentication control table memorized in a shared memory and associating an iSCSI name for specifying the host device in the unit of iSCSI port, with authentication information of the host device (necessity of authentication, user ID/password), to determine the necessity of the authentication to the iSCSI port from the host device.

Abstract: In an access control system, accesses are controlled which are received from not only the same communication network, but also either one or a plurality of other communication networks. In this access control system, a channel processor of a storage control system accepts a log-in request containing a target IP address from a target host apparatus, and compares this target IP address with the own IP address stored in an iSCSI port. Based upon a comparison result, the channel processor judges a network relative logical distance of a target network with respect to a communication network containing the storage control system as to the target network containing a target host apparatus. Then, the channel processor permits an access of a permission access type corresponding to the judged network relative logical distance with respect to a target upper grade apparatus.