Method and apparatus for data storage
AssigneeHitachi, Ltd.
InventorNobuyuki Osaki
Life of this patent
Estimating the term…
Abstract
An apparatus, system, and method for avoiding unexpected exposure of important data in a storage system include a table that contains permission and conversion information regarding data transfer. When a storage system transfers a certain set of data from one logical device or volume to another area, e.g., a host, a tape storage or another logical device or volume inside or outside of the storage system, the storage system refers to the table to determine if transfer is permitted and whether conversion of the data is required before transfer. A storage controller converts the data if necessary, and transfers the data to the target destination if permitted. Keys are maintained within the storage system so that the management of securing data is centralized.
Claims51
A storage system comprising:
- a plurality of logical devices;
- and
- a disk controller having access to said plurality of logical devices, said disk controller controlling a transfer of data stored in one device selected from the plurality of logical devices to another device selected from the plurality of logical devices or an additional device to which the disk controller is coupled;
- and
- a conversion definition table to be examined by said disk controller prior to the transfer of the data, the conversion definition table containing rules regarding the transfer of the data between said one device and said another device,
- wherein the conversion definition table contains information including Ha state of the data stored in said one device and information as to whether said another device has access permission to the data stored in said one device.
A method for storing and transferring data from a location inside a storage system to a target inside or outside of the storage system, said method comprising:
- receiving a request to transfer the data from said location to said target;
- providing a first table which describes permission and conversion requirements for transfer of the data to a plurality targets, including said target;
- examining said first table to determine if the transfer of the data from said location to said target is permitted;
- if the transfer of the data to said target is permitted, examining said first table to determine if conversion of the data is required, and, if conversion is required, converting the data to converted data;
- and
- transferring the data to said target if the transfer is permitted and conversion is not required, or if the transfer is permitted and conversion is also required, transferring the converted data to said target.
A system for storing and transferring data comprising:
- a server;
- and
- a storage system, the storage system comprising:
- a plurality of logical devices;
- a disk controller coupled to said server and said plurality of logical devices;
- and
- a conversion definition table to be examined by said disk controller prior to a transfer of data, the conversion definition table containing rules regarding if and how the data can be transferred between the server and any of the plurality of logical devices, between one logical device and another logical device, or between one logical device or the server and an external device,
- wherein the conversion definition table contains information including a conversion state of data stored in one device selected from the plurality of the logical devices or said server, and whether another device selected from the plurality of logical devices, said server or the external device has access permission for such data.
A method, implemented in a storage system, of transferring data between one device and another device comprising the steps of:
- storing in a conversion definition table information regarding transferring of the data between said one device and said another device;
- receiving a notification of a transfer request from said another device requesting a transfer of the data from said one device;
- retrieving said information regarding the transfer from said conversion definition table;
- if the information indicates that the transfer is not permitted, then not transferring the data;
- and
- if the information indicates that the transfer is permitted, then determining one or more parameters by which the data is to be transferred, said parameters including whether encryption/decryption or compression/decompression is required, and applying said parameters during the transfer of the data.
Dependencies are inferred from the claim text.