Command processing system by a management agent

A storage subsystem comprising:

• a data storage area,
• an interface unit that receives management commands from a management computer, and
• a control unit that determines whether to permit execution of the management commands against the data storage area, based on whether an assigned security level of a communication path meets or exceeds an execution security level required for the execution of the management commands, wherein the level of security of the communication path is determined by a kind of cipher algorithm selected in establishing the communication path between the management computer and the storage subsystem.

A management computer for managing a computer, a storage subsystem, and a connection control unit that controls a connection between the computer and the storage subsystem, each of these three being generically called a device, the management computer comprising:

• a control unit that issues management commands for managing the device, and
• an interface unit that sends the management commands to the device, the control unit being configured to determine whether to send the commands to the device for execution, based on whether a security level assigned to a communication path to and from the device meets or exceeds an execution security level required for execution of the management commands, wherein the level of security of the communication path is determined by a kind of cipher algorithm selected in establishing the communication path between the management computer and the storage subsystem.

An access management method for managing access requests for a storage subsystem comprising:

• receiving management commands from a management computer;
• determining whether to permit execution of the management commands against a storage area of the storage subsystem based on whether an assigned security level of the communication path to and from the management computer meets or exceeds an execution security level required for the execution of the management commands, the assigned security level being determined by a kind of cipher algorithm selected in establishing the communication path between the management computer and the storage subsystem;
• and executing the management commands against the storage area when the execution is determined to be permitted.