I/O command control apparatus and storage system

A communication interface apparatus comprising:

• a communication interface connectable to a communication network;
• a host interface connectable to a storage device;
• an authorization information extracting unit configured to extract authorization information from data included in a command received through the communication interface, the authorization information indicating whether or not to permit execution of the command, the command being addressed to the storage device;
• an authorization information verifying unit configured to verify whether the extracted authorization information is not tampered with and whether the extracted authorization information is issued from a known authorization server, and verify whether or not the extracted authorization information permits the execution of the command in a case where the extracted authorization information is not tampered with and is issued from the known authorization server;
• an authorization applying unit configured to permit or prohibit the execution of the command based on an authorization result indicating whether or not the extracted authorization information permits the execution of the command;
• a trust base control unit configured to acquire trust information used by the authorization information verifying unit to verify whether the extracted authorization information is not tampered with and whether the extracted authorization information is issued from the known authorization server, and manage the acquired trust information;
• and
• a storage control unit configured to send the command through the host interface when the execution of the command is permitted by the authorization applying unit.