Error recovery and control in a mass storage system

A program-controlled data storage apparatus having a first lower storage level having a multiplicity of addressable first storage locations, a given plurality of said first storage locations addressable as a unit to constitute a given portion of said first level, a second upper storage level having a plurality of greater than said given plurality of second addressable storage locations, volumes of said second addressable storage locations being on movable media which are interchangeably locatable within said second upper level, programmable control means, means for connecting to a plurality of host programmable units including a primary host programmable unit;

• means having a program memory portion and memory means containing recorded control signals indicating associatable data signals in said portions including associating said given portions of said first and second storage levels;
• computer means in said programmable control means responsive to signals from said program memory portion to perform predetermined functions;
• signal transfer means for exchanging signals between said levels and responsive to said recorded control signals via a computer program in said programmable control means to exchange signals between said given portions;
• bistable means indicating that said signal exchange between said given portions is signal transfer to said first given portion from said second given portion;
• the improvement including the combination:
• error means in said second storage level to detect errors therein including errors relatable to said given portion of said second storage level;
• a destage with error program stored in said program memory portion signifying to said computer to execute predetermined functions whenever an upper level error is detected;
• said destage with error program comprising instruction word indicia in said program memory portion representing data storage apparatus operations for:
• a. upon detecting an error, saving the address of said given portion of said second upper level with an indication that such error occurred during movement of data signals from said second level to said first level (FIG. 6);
• b. sending status signals to said primary host indicating errors and error locations only to said primary host and adjusting storage apparatus operation to prevent host access to said given portion of said second level (FIG. 7);
• c. detecting whether or not detected error being processed is the first or second occurrence, if first occurrence, effecting a reconfiguration by moving one of said volumes having said given portion in error to another location within said second upper storage level, and if a second occurrence, initiating a data movement from said second storage level to said first storage level (FIG. 8);
• d. upon completion of said reconfiguration, initiating a destage with error sending status signals thereof to said primary host and making said given portion of said second storage level inaccessible to said hosts (FIGS. 8 and 9);
• and
• e. initiating moving said data signals from said given portion of said second storage level to said first storage level with said errors.

The method of error control in a storage apparatus having a programmed storage control unit, an upper storage level having a plurality of addressable storage locations, a lower storage level having a multiplicity of addressable storage locations, means in each level for addressing said storage locations, means for transferring data signals stored in predetermined ones of said upper level addressable locations to predetermined ones of said lower level addressable storage locations,

• the improved method including the steps of:
• monitoring data signal transfers from said upper level to said lower level for detecting errors in said upper level occurring during such a transfer;
• indicating an error condition in said upper level detected during such a data signal transfer;
• stopping the transfer of data signals;
• signifying said predetermined addressable storage locations of said upper level as being unavailable for data storage operations requested by apparatus external to said storage apparatus;
• and
• transferring data signals with any errors from said predetermined addressable storage locations to said predetermined addressable storage locations of said lower level.

A data storage apparatus having an upper storage level consisting of a plurality of independent storage units, each of said independent storage units having a removable storage medium affixed thereon, each said storage medium capable of being operated upon by any of said independent storage units, control means for accessing addressable portions of each said record media including addressing said units in accordance with address indicia associatable with said record media, a lower storage level having a plurality of addressable locations for containing data signals wherein a given addressable portion of said upper storage level is selectively associatable with a corresponding given portion of said lower storage level, a programmable control means operatively connected to both said storage levels for controlling and operating same including assigning relationships between addressable portions in said second level with addressable portions in said first level, external connection means for connecting the storage apparatus to a plurality of hosts including a primary host and for exchanging data signals with said host independent of each and every other host, means in said storage apparatus for exchanging signals between said levels under control of said programmable means, means in said programmable means for receiving address indicia from each of said hosts in an independent manner and translating said independently received addresses to physical addresses of said second storage level, said physical addresses being defined as RP,

• the improvement including the method having the steps of:
• monitoring data signal transfers from said upper storage level to said lower storage level for detecting errors in said upper storage level occurring during such a transfer;
• memorizing a detected error;
• stopping the transfer of data signals and supplying status signals to said primary host indicating that such internal transfer of data signals has been stopped;
• checking for a previously memorized error signal associatable with a transfer of signals from a given one of said portions of said upper storage level to a corresponding given portion in said lower storage level;
• upon detecting coincidence of a previously memorized error signal, signifying same to said primary host, making said given portion of said upper storage level inaccessible for data operations to any of said hosts and then moving data signals irrespective of error conditions from said given one portion of said upper storage level to the corresponding given portion of said second storage level;
• upon detecting no previous memorized error condition, interchanging a given one of said record media having said given one portion with a second one of said record media;
• and
• reinitiating movement of data signals from said given one portion of said upper storage level and monitoring such transfer for an error, if no error is detected, erasing said memorized error signal.

A data storage apparatus having a lower storage level with a multiplicity of addressable storage locations, an upper storage level with a plurality of addressable storage locations, data signal moving means for selectively exchanging data signals between respective given addressed portions of said storage levels, control means maintaining signal records of where data signals are stored in said storage levels including said given portions,

• the improvement including in combination;
• means monitoring operation of said upper storage level and capable of indicating errors in said given portion of said second level;
• means for counting said errors;
• indicator means responsive to said counting means for indicating data signals in said given portion of said lower level as containing data errors;
• means responsive to said counting means to supply a first indication that less than a given number of errors have been counted;
• vary-off means responsive to said first indication to indicate that a manual storage apparatus reconfiguration is to be effected;
• reinitiate means responsive to a storage apparatus reconfiguration indicated by said vary-off means to reinitiate said moving means;
• error control means responsive to said reinitiate means and said monitoring means indicating no errors to erase said error count;
• means responsive to said reinitiate means and said monitoring means indicating an error to advance said counting means;
• threshold means responsive to said counting means reaching said given number to actuate said indicating means;
• and
• destage with error means responsive to said threshold means to actuate said data signal moving means to move data signals with errors to said given portion of said lower storage level.

A program-controlled data storage apparatus having a first lower storage level having a multiplicity of addressable first storage locations, a given plurality of said first storage locations addressable as a unit to constitute a given portion of said first level, a second upper storage level having a plurality of greater than said given plurality of second addressable storage locations, said given plurality of said second addressable storage locations programmable control;

• means having a program memory portion and memory means containing recorded control signals indicating data signals in said given portions are associatable;
• computer means in said programmable control means responsive to signals therefrom to perform predetermined functions;
• signal transfer means for exchanging signals between said levels and responsive to said recorded control signals via a computer program in said programmable control means to exchange signals between said given portions;
• bistable means indicating that said signal exchange between said given portions is signal transfer to said first and given portion from said second level given portion;
• the improvement including the combination:
• error means in said second storage level to detect errors therein including errors relatable to said given portions of said second storage level;
• a destage with error program stored in said program memory portion signifying to said computer to execute predetermined functions whenever an upper level error is detected, said computer being responsive to said destage with error program to:
• a. upon detecting an error, saving the address of said given portion of said second upper level with an indication that such error occurred during movement of data signals from said second level to said first level (FIG. 6);
• b. sending status signals to said primary host indicating errors and error locations only to said primary host and adjusting storage apparatus operation to prevent host access to said given portion of said second level (FIG. 7);
• c. detecting whether or not detected error being processed is the first or second occurrence, if first occurrence, effecting a reconfiguration by moving one of said volumes having said given portion in error to another location within said second upper storage level, and if a second occurrence, initiating a data movement from said second storage level to said first storage level (FIG. 8);
• d. upon completion of said reconfiguration, initiating a destage with error sending status signals thereof said primary host and making said given portion of said second storage level inaccessible to said hosts (FIGS. 8 and 9);
• and
• e. initiating moving said data signals from said given portion of said second storage level to said first storage level with said errors.