Abstract: A secure data mirroring capability in a storage system includes encrypting data blocks in a primary volume in preparation for a data mirroring operation. The encrypted data blocks are mirrored to a secure secondary volume. Host systems provide keys from which encryption keys are produced for encrypting the data blocks. Access to data on the secure secondary volume requires decryption using the key that was used to produce the encrypted data blocks.

Abstract: Provided is an access right managing method for a resource of a storage system, in which a management computer stores access right definition information of the resource, and resource correspondence information including information on a management program which manages another resource related to the resource managed by the management program. In case of which receiving an updating request of an access right of the resource, the management computer updates an access right based on the updating request of the access right, selects a management program of the resource whose access right is requested to be updated based on the resource correspondence information, transmits an updating request of an access right for a relative resource to a management computer which executes the selected management program, and in case of which the access right updating request of the related resource is received, updates the access right of the relative resource.

Abstract: Data stored in a data storage system is hashed to generate a hash value. The hash value and a request for a time stamp are then sent to a time stamping authority. A time stamp token and/or a time stamp certificate is received from the time stamping authority. The time stamp token includes a time stamp and the hash value, and may be encrypted using a private key of the time stamping authority. The time stamp token and/or time stamp certificate is then stored with, for example, a reference to the data being stored in the data storage system. The time stamp token and/or time stamp certificate may then be used to validate the data being stored and the time stamp.

Abstract: Exercising integral management of storage apparatuses even when SANs are integrated or when the scale of a SAN expands. In response to an operation request from a management terminal, an integrated management computer collects the management information for storage apparatuses from management computers; selects, based on the collected management information, one or more management computers, to which the task of performing the requested operation is to be assigned; provides the selected management computer(s) with the ability to manage the storage apparatuses which are the management target for the management computer(s); collects pieces of process information from the management computer(s) with the management ability; and integrates and manages the collected pieces of process information.

Abstract: A storage system where storage devices themselves have WORM functionality that can be set at any time. The storage system includes storage devices, and a controller for controlling data transmission between the storage devices and an information processor. Each storage device has a storage cell and a fuse at a midpoint on a write control line, and the controller applies a voltage to the fuse to blow it to set WORM for the storage cell.

Abstract: A method for operating a storage system configured to provide a Write Once and Read Many (WORM) function includes receiving a first command at a storage subsystem from a host. At least a portion of the first command is stored on a WORM storage device coupled to the storage subsystem. A second command is received at the storage subsystem. The second command is examined using a command filter, the filter being provided with a predetermined rule for filtering selected types of commands. At least a portion of the second command is stored if the second command satisfies the predetermined rule. The WORM storage device is used to verify the WORM function of the storage system.

Abstract: Provided is an access right managing method for a resource of a storage system, in which a management computer stores access right definition information of the resource, and resource correspondence information including information on a management program which manages another resource related to the resource managed by the management program. In case of which receiving an updating request of an access right of the resource, the management computer updates an access right based on the updating request of the access right, selects a management program of the resource whose access right is requested to be updated based on the resource correspondence information, transmits an updating request of an access right for a relative resource to a management computer which executes the selected management program, and in case of which the access right updating request of the related resource is received, updates the access right of the relative resource.

Abstract: A method for copying data to multiple remote sites includes transmitting data from a first volume in a primary storage system to a back-up volume provided in a secondary storage system. The primary storage system is located at a primary site, and the secondary storage system is located at a first remote site from the primary site. The data from the first volume in the primary storage system is copied to a second volume in the primary storage system using a point in time (PiT) as a reference point of time for the copying. The second volume is provided with a first time consistent image of the first volume with respect to the reference point of time. The data from the second volume in the primary storage system is transferred to a third volume in a ternary storage system at a second remote site.

Abstract: A system is provided for storage of journal data from a primary site to a secondary site with a predefined quality of service. In one implementation, the primary storage system stores information for updating data stored on the primary disk array in the form of a history of updates made to the data. The primary storage system is configured to transfer this journal information to the secondary storage system. The user can specify the quality of service desired using a variety of measures, for example, a recovery point objective or a recovery time objective. In response, a copy manager within one of the storage systems determines the capacity of the various primary and secondary volumes, and determines the copy rate available, typically dependent upon the bandwidth between the primary and secondary systems. The copy manager then copies journal data to the remote site where it is stored.

Abstract: A method for copying data to multiple remote sites includes transmitting data from a first volume in a primary storage system to a back-up volume provided in a secondary storage system. The primary storage system is located at a primary site, and the secondary storage system is located at a first remote site from the primary site. The data from the first volume in the primary storage system is copied to a second volume in the primary storage system using a point in time (PiT) as a reference point of time for the copying. The second volume is provided with a first time consistent image of the first volume with respect to the reference point of time. The data from the second volume in the primary storage system is transferred to a third volume in a ternary storage system at a second remote site.

Abstract: Groups of volumes having a certain amount of commonality of data are identified within a storage system. For each group, the process defines a base volume, such as the volume containing the most commonality with the other volumes. For each volume in the group, the process extracts differential data between the base volume and each other volume, saves the differential data in a pool volume, and updates a mapping table. Commonality between volumes in the group is managed in the base volume, the pool volume, and the mapping table. Then the original volumes except the base volume and the pool volume may be deleted, and the original volumes are replaced with virtual volumes accessible through the mapping table. As a result, the amount of data in a storage system can be reduced while maintaining data integrity and accessibility.

Abstract: A method and a system for implementing the method are disclosed relating to archival storage of information in large numbers of disk units. The reliability of the stored information is checked periodically using data verification operations whose results are saved. These results establish the veracity of the data and enable compliance with various regulatory requirements. The techniques described enable the use of low cost disk drive technology, yet provide high assurance of data veracity. In a typical system, management information storage is provided in which data entries are associated with each of the disk drives to provide information with respect to the condition of the data on that drive and its last verification. The data verification operations are performed on the data during time periods when I/O accesses are not required.

Abstract: A system for enabling more efficient processing of query operation of a database includes a query provider coupled to a database system, by a network. A storage system is coupled to each of the query provider and the database system. The database system includes a return path selector which chooses whether to return the results of queries to the query provider by storing the results into the shared storage system, or by sending them over the network. There may also be provided the capability of storing query data in the storage system for use by the database in executing the queries. A key is used to locate the results or the query data in the storage system, and another information field is used to control access to the stored query data and/or results.

Abstract: Groups of volumes having a certain amount of commonality of data are identified within a storage system. For each group, the process defines a base volume, such as the volume containing the most commonality with the other volumes. For each volume in the group, the process extracts differential data between the base volume and each other volume, saves the differential data in a pool volume, and updates a mapping table. Commonality between volumes in the group is managed in the base volume, the pool volume, and the mapping table. Then the original volumes except the base volume and the pool volume may be deleted, and the original volumes are replaced with virtual volumes accessible through the mapping table. As a result, the amount of data in a storage system can be reduced while maintaining data integrity and accessibility.

Abstract: A system and method for watermarking data that includes a client device, a file system manager, a file server, and a storage network. The file system manager sets watermark control information. The file server includes: (1) a file writing process including a file watermark examination procedure and an action procedure, the action procedure determining an action based on a result of the file watermark examination; and (2) a file reading process including a watermark definition procedure, a file handle/memory preparation procedure, a file data copy procedure, and a watermark insertion procedure. During a read request the watermark definition procedure determines whether a file to be read is to be watermarked based on a user at the client device that requested to read the file. Whether a write request is processed or not is based on the user and whether the file to be written contains a watermark.

Abstract: Data stored in a data storage system is hashed to generate a hash value. The hash value and a request for a time stamp are then sent to a time stamping authority. A time stamp token and/or a time stamp certificate is received from the time stamping authority. The time stamp token includes a time stamp and the hash value, and may be encrypted using a private key of the time stamping authority. The time stamp token and/or time stamp certificate is then stored with, for example, a reference to the data being stored in the data storage system. The time stamp token and/or time stamp certificate may then be used to validate the data being stored and the time stamp.

Abstract: A remote copy system includes a first storage system including a first storage controller and a first data volume. The first storage controller is configured to control data access requests to the first data volume. The first storage system is configured to store write data in the first data volume upon receiving a write request from a first host that is associated with the first storage system. A second storage system includes a second data volume and configured to receive first copy data sent from the first storage system and store the first copy data in the second data volume, the first copy data corresponding to the write data stored in the first data volume. A third storage system includes a second storage controller and a third data volume and configured to receive second copy data from the second storage system and store the second copy data to the third data volume, the second copy data corresponding to the first copy data, the third data volume mirroring the first data volume.

Abstract: In order to limit host computers permitted to control a storage area from host computers, provided is a storage management computer coupled to one or more host computers for providing services and one or more storage systems, in which the storage management computer judges whether the host computer is permitted to control the storage area based on data indicating the configuration information of the storage system and service management information for managing the services provided by the host computers, and in case of which it is judged that the host computer is permitted to control the storage area, the storage management computer sets access control data to permit the host computer to control the storage area.

Abstract: Data at a primary storage system is encrypted and remote copied to a secondary storage system. A Remote Copy Configuration Information (RCCI) is created that identifies the encryption mechanism, keys, data source volume, and target volume for the remote copy. The RCCI is backed up on a trusted computer system. In one embodiment, the secondary storage system is an off-site data storage system managed by a third party. Upon detection of a failure in the primary storage system, the encrypted data and RCCI are transferred to a tertiary server, which is optionally created upon detection of the failure, and operations of the failed primary server are resumed by the tertiary server. In one embodiment, the failure is detected by loss of a heart beat signal transmitted from the primary storage system to a management server that initiates the transfers to the tertiary server.

Abstract: A storage system where storage devices themselves have WORM functionality that can be set at any time. The storage system includes storage devices, and a controller for controlling data transmission between the storage devices and an information processor. Each storage device has a storage cell and a fuse at a midpoint on a write control line, and the controller applies a voltage to the fuse to blow it to set WORM for the storage cell.