Storage system, encryption path switching system, encryption path switching program, and recording medium thereof

An encryption path switching method in a storage system which comprises:

• at least a storage device which stores data;
• at least a server which writes data in and reads out data from the storage device;
• an encryption device which encrypts data to be written in the storage device by the server and decrypts data to be read out from the storage device by the server;
• and a switch device which has a plurality of ports to which at least a server, a storage device, and the encryption device are connected, and switches a plurality of paths connecting the plurality of ports according to setting from the outside of the switch device, the method comprising:
• the server inputting encryption setting information each of which designates a server resource corresponding to an element of the storage device to be encrypted;
• the server storing the inputted encryption setting information;
• and
• the server setting connection between the plurality of ports of the switch device on a basis of the stored encryption setting information such that a path on which encryption is performed passes through the encryption device and a path on which encryption is not performed does not pass through the encryption device.

An encryption path switching program executed by a computer of a server in a storage system which comprises:

• at least a storage device which stores data;
• at least a server which writes data in and reads out data from the storage device;
• an encryption device which encrypts data to be written in the storage device by the server and decrypts data to be read out from the storage device by the server;
• and a switch device which has a plurality of ports to which at least a server, a storage device, and the encryption device are connected, and switches a plurality of paths connecting the plurality of ports according to setting from the outside of the switch device, the program causing the computer to execute:
• inputting encryption setting information each of which designates a server resource corresponding to an element of the storage device to be encrypted;
• storing the inputted encryption setting information;
• and
• setting connection between the plurality of ports of the switch device on a basis of the stored encryption setting information such that a path on which encryption is performed passes through the encryption device and a path on which encryption is not performed does not pass through the encryption device.

A computer readable recording medium recording an encryption path switching program executed by a computer of a server in a storage system which comprises:

• at least a storage device which stores data;
• at least a server which writes data in and reads out data from the storage device;
• an encryption device which encrypts data to be written in the storage device by the server and decrypts data to be read out from the storage device by the server;
• and a switch device which has a plurality of ports to which at least a server, a storage device, and the encryption device are connected, and switches a plurality of paths connecting the plurality of ports according to setting from the outside of the switch device, the program causing the computer to execute:
• inputting encryption setting information each of which designates a server resource corresponding to an element of the storage device to be encrypted;
• storing the inputted encryption setting information;
• and
• setting connection between the plurality of ports of the switch device on a basis of the stored encryption setting information such that a path on which encryption is performed passes through the encryption device and a path on which encryption is not performed does not pass through the encryption device.