Logical unit security for clustered storage area networks
AssigneeHitachi, Ltd.
InventorYuichi Taguchi
Life of this patent
Estimating the term…
Abstract
A system is described in which a plurality of host computers are coupled to a storage system for storing and retrieving data in the storage system. The storage system includes individually addressable units of storage such as volumes or logical unit numbers. A security management system controls access to each of the individually addressable units of storage based upon the identification of the host permitted to access that unit of storage.
Claims9
1-20. (canceled)
In a system having primary and secondary host computers coupled to a storage system, wherein the storage system includes an access control function therein so that a predetermined host computer of the system can access a portion of disk drives in the storage system, wherein the primary and the secondary host computers communicate using a heartbeat communication protocol, a method comprising:
- changing access control information in the storage system, by the storage system using the access control function therein, for disabling the primary host computer to access the portion of disk drives and enabling the secondary host computer to access the portion of disk drives based upon a request for changing the access control information;
- wherein the request is issued in connection with communication between the primary and the secondary host computers using the heartbeat communication protocol.
In a storage system coupled to a primary host computer and a secondary host computer which communicate using a heartbeat communication protocol, wherein the storage system has an access control function therein so that a predetermined host computer of the primary host computer and the secondary host computer can access a portion of disk drives in the storage system, a method comprising:
- managing access control by the access control function so that the storage system permits access to the portion of disk drives from the primary host computer and denies access to the portion of disk drives from the secondary host computer;
- and
- changing the access control by the access control function so that the storage system permits access to the portion of disk drives from the secondary host computer based upon a request, the request being issued in connection with communication between the primary and the secondary host computers using the heartbeat communication protocol.
Dependencies are inferred from the claim text.