# US 2016/0253186 A1 · Securing peer zoning > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2016/0253186 A1 - Document ID: US20160253186A1 - Status: Published application - Kind: A1 - Application number: 14/634,839 - Filed: 2015-03-01 - Published: 2016-09-01 - Earliest claimed: 2015-03-01 - Assignees: Infinidat Ltd. - Applicants: Infinidat LTD. - Inventors: Eran Brown - Web page: https://patentgrep.com/patent/US20160253186A1 ## CPC - G06F 9/44505: {Configuring for program initiating, e.g. using registry, configuration files} - G06F 13/4022: {using switching circuits, e.g. switching matrix, connection or expansion network (G06F13/4009 takes precedence)} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 63/10: {for controlling access to devices or network resources} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method that may include receiving, by a storage system, storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports; sending, by the storage system, in response to the storage system configuration information and to at least a first switch of a group of switches that is coupled to the storage system, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports; determining, by the storage system, to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern; and sending, by the storage system and to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port. ## Claims ### Claim 1 A method, comprising: receiving, by a storage system, storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports; sending, by the storage system, in response to the storage system configuration information and to at least a first switch of a group of switches that is coupled to the storage system, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports; determining, by the storage system, to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern; and sending, by the storage system and to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port. ### Claim 2 (depends on 1) The method according to claim 1 wherein the determining is responsive to login information indicative of a login status of the certain host computer port; wherein the login information is generated by one or more switches of the group of switches. ### Claim 3 (depends on 1) The method according to claim 1 wherein the at least first switch forms a first sub-group of switches, wherein the at least second switch forms a second sub-group of switches; wherein the first sub-group of switches comprises the second sub-group of switches. ### Claim 4 (depends on 1) The method according to claim 1 wherein the first switch differs from the second switch. ### Claim 5 (depends on 1) The method according to claim 1 wherein the first switch is the second switch. ### Claim 6 (depends on 1) The method according to claim 1 wherein the at least first switch forms the group of switches. ### Claim 7 (depends on 1) The method according to claim 1 wherein the certain host computer port failed to follow the predefined login pattern when the certain host computer port was not logged to a certain switch during a certain period. ### Claim 8 (depends on 7) The method according to claim 7 wherein the certain switch is the second switch. ### Claim 9 (depends on 1) The method according to claim 1 wherein the group of switches belongs to one or more switching fabrics, wherein a certain host computer port failed to follow the predefined login pattern when the certain host computer port was not logged to a certain switching fabric during a certain period. ### Claim 10 (depends on 9) The method according to claim 9 wherein the certain switching fabric comprises the at least second switch. ### Claim 11 (depends on 1) The method according to claim 1 wherein the access permission requests are add-zone messages. ### Claim 12 (depends on 1) The method according to claim 1 wherein the request to revoke the access permission is a remove-zone message. ### Claim 13 A non-transitory computer readable medium that stores instructions that once executed by a storage system causes the storage system to execute the stages of: receiving storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports; sending in response to the storage system configuration information and to at least a first switch of a group of switches that is coupled to the storage system and, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports; determining to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern; and sending to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port. ### Claim 14 (depends on 13) The non-transitory computer readable medium according to claim 13 wherein the certain host computer port failed to follow the predefined login pattern when the certain host computer port was not logged to a certain switch during a certain period. ### Claim 15 (depends on 14) The non-transitory computer readable medium according to claim 14 wherein the certain switch is the second switch. ### Claim 16 (depends on 13) The non-transitory computer readable medium according to claim 13 wherein the group of switches belongs to one or more switching fabrics, wherein a certain host computer port failed to follow the predefined login pattern when the certain host computer port was not logged to a certain switching fabric during a certain period. ### Claim 17 A storage system that comprises a controller and an interface; wherein the storage system is configured to receive storage system configuration information that is indicative of access permissions of multiple host computer ports to storage logical units that are associated with a certain set of storage system ports; wherein the controller is configured to generate, in response to the storage system configuration information, access permission requests for allowing the multiple host computer ports to access the certain set of storage system ports; wherein the interface is configured to send the access permission requests to at least a first switch of a group of switches that is coupled to the storage system; wherein the controller is configured to determine to revoke an access permission from a certain host computer port of the multiple host computer hosts, when the certain host computer port failed to follow a predefined login pattern; and wherein the interface is configured to send to at least a second switch of the group of switches, a request to revoke the access permission of the certain host computer port.