Secure storage system

A conversion apparatus connected to a storage device, wherein

• the conversion apparatus is connected to a client using the storage device via a virtual private network, wherein the conversion apparatus comprises:
• a protocol conversion means for converting a protocol corresponding to the storage device and a protocol used for the virtual private network;
• and
• a mapping means that stores a virtual private network allocated to the client and an access range of the storage device corresponding to the virtual private network.

A storage access method used for a storage system comprising a storage device, a client connected to a virtual private network, a conversion apparatus that is connected to the client via the virtual private network and converts a protocol for the storage device and a protocol used for the virtual private network, and a backup conversion apparatus that is connected to the conversion apparatus and a backup storage device and converts a protocol for the backup storage device and a protocol used for the conversion apparatus, wherein

• the conversion apparatus, upon reception of an access request from the client via the virtual private network, sends the access request to the backup conversion apparatus specified in the conversion table based on a first check result of identification information about the virtual private network;
• the conversion apparatus writes data to the storage device connected to the conversion apparatus;
• the conversion apparatus, upon reception of a response for write termination from the storage device, returns the response for write termination to the client;
• the backup conversion apparatus, upon reception of an access request from the conversion apparatus, writes data to a backup storage device connected to the backup conversion apparatus based on a second check result of identification information about the virtual private network and, upon reception of a response for write termination from the backup storage device, returns the response for write termination to the conversion apparatus;
• and
• the conversion apparatus, upon reception of a response from the backup conversion apparatus, terminates the process to write data from the client.

A storage access method used for a storage system comprising a storage device, a client connected to a virtual private network, a conversion apparatus that is connected to the client via the virtual private network and converts a protocol for the storage device and a protocol used for the virtual private network, and a backup conversion apparatus that is connected to the conversion apparatus and a backup storage device and converts a protocol for the backup storage device and a protocol used for the conversion apparatus, wherein

• the conversion apparatus, upon reception of an access, request from the client via the virtual private network, sends a request to read data to the storage device connected to the conversion apparatus based on a first check result of identification information about the virtual private network;
• the conversion apparatus, upon unsuccessful reception of data from the storage device, sends an access request to the backup conversion apparatus connected to the conversion apparatus;
• the backup conversion apparatus, upon reception of an access request from the conversion apparatus, reads data from a backup storage device connected to the backup conversion apparatus based on a second check result of identification information about the virtual private network and, upon reception of data from the backup storage device, sends the data from the backup storage device to the conversion apparatus;
• and
• the conversion apparatus, upon reception of data from the backup conversion apparatus, sends the data from the backup storage device to the client.