Method for device security in a heterogeneous storage network environment
    1.
    发明授权
    Method for device security in a heterogeneous storage network environment 有权
    异构存储网络环境中设备安全的方法

    公开(公告)号:US08966081B1

    公开(公告)日:2015-02-24

    申请号:US11864868

    申请日:2007-09-28

    IPC分类号: H04L9/00

    CPC分类号: H04L9/32 H04L67/1097

    摘要: An automated, policy-based system and method provides information security at various levels in the network, including at the baseline inventory, device, network frame, and command level. This approach improves over the conventional distributed security model by centralizing security in one multi-level management structure. Embodiments of the present invention may also provide a scheme for mapping vendor-unique opcodes to access rights.

    摘要翻译: 自动化的基于策略的系统和方法在网络中的各个级别提供信息安全性,包括在基线库存,设备,网络框架和命令级别。 这种方法通过在一个多级管理结构中集中安全性来改进传统的分布式安全模型。 本发明的实施例还可以提供用于将供应商唯一操作码映射到访问权限的方案。

    Method for device security in a heterogeneous storage network environment
    2.
    发明授权
    Method for device security in a heterogeneous storage network environment 有权
    异构存储网络环境中设备安全的方法

    公开(公告)号:US07272848B1

    公开(公告)日:2007-09-18

    申请号:US10076878

    申请日:2002-02-13

    IPC分类号: H04L9/00

    CPC分类号: G06F21/805 G06F21/6236

    摘要: An automated, policy-based system and method provides information security at various levels in the network, including at the baseline inventory, device, network frame, and command level. This approach improves over the conventional distributed security model by centralizing security in one multi-level management structure. Embodiments of the present invention may also provide a scheme for mapping vendor-unique opcodes to access rights.

    摘要翻译: 自动化的基于策略的系统和方法在网络中的各个级别提供信息安全性,包括在基线库存,设备,网络框架和命令级别。 这种方法通过在一个多级管理结构中集中安全性来改进传统的分布式安全模型。 本发明的实施例还可以提供用于将供应商唯一操作码映射到访问权限的方案。

    High-speed data transfer in a storage virtualization controller
    3.
    发明授权
    High-speed data transfer in a storage virtualization controller 有权
    存储虚拟化控制器中的高速数据传输

    公开(公告)号:US07774465B1

    公开(公告)日:2010-08-10

    申请号:US11946658

    申请日:2007-11-28

    IPC分类号: G06F15/16 G06F12/00

    CPC分类号: G06F17/30067

    摘要: A storage virtualization controller for transferring data between a host and a storage device at a wire-speed data transfer rate. A downstream processing element adapted for connection to the storage device is configurable coupled to an upstream processing element adapted for connection to the host. A central processing element coupled to the upstream processing element grants permission to the upstream processing element to transfer the data at the wire-speed rate without further involvement by the central processing element.

    摘要翻译: 一种存储虚拟化控制器,用于以线速数据传输速率在主机和存储设备之间传送数据。 适于连接到存储设备的下游处理元件可配置为耦合到适于连接到主机的上游处理元件。 耦合到上游处理元件的中央处理元件允许上游处理元件以线速率传输数据,而不需要中央处理元件的进一步参与。

    High-speed data transfer in a storage virtualization controller
    4.
    发明授权
    High-speed data transfer in a storage virtualization controller 有权
    存储虚拟化控制器中的高速数据传输

    公开(公告)号:US07330892B2

    公开(公告)日:2008-02-12

    申请号:US10238713

    申请日:2002-09-09

    IPC分类号: G06F15/173 G06F12/00

    摘要: A storage virtualization controller for transferring data between a host and a storage device at a wire-speed data transfer rate. A downstream processing element adapted for connection to the storage device is configurable coupled to an upstream processing element adapted for connection to the host. A central processing element coupled to the upstream processing element grants permission to the upstream processing element to transfer the data at the wire-speed rate without further involvement by the central processing element.

    摘要翻译: 一种存储虚拟化控制器,用于以线速数据传输速率在主机和存储设备之间传送数据。 适于连接到存储设备的下游处理元件可配置为耦合到适于连接到主机的上游处理元件。 耦合到上游处理元件的中央处理元件允许上游处理元件以线速率传输数据,而不需要中央处理元件的进一步参与。

    Method and apparatus for network storage flow control
    5.
    发明授权
    Method and apparatus for network storage flow control 有权
    网络存储流量控制的方法和装置

    公开(公告)号:US07725568B2

    公开(公告)日:2010-05-25

    申请号:US10238409

    申请日:2002-09-09

    IPC分类号: G06F15/173

    摘要: A method and apparatus for collecting information from ports on a storage network and performing flow control is provided. The data collection method and apparatus includes, identifying a data type transported on the storage network, selecting a port-storage identifier to measure the data type transported across the storage network, monitoring the port-storage identifier on the storage network for the data type, and enumerating occurrences of the data type associated with the port-storage identifier while monitoring the port-storage identifier and the data type. The flow-control operation receives information on a data type passing through the storage network according to a port-storage identifier, compares a threshold with the data type passing through the storage network according to a port-storage identifier, determines when the threshold associated with the data type has been exceeded in consideration of the information received, queues in response to the determination the data type scheduled to pass through one or more ports and storage devices identified according to the port-storage identifier on the storage network.

    摘要翻译: 提供一种用于从存储网络上的端口收集信息并执行流量控制的方法和装置。 数据收集方法和装置包括:识别在存储网络上传输的数据类型,选择端口存储标识符以测量跨过存储网络传输的数据类型,监视存储网络上用于数据类型的端口存储标识符, 并且在监视端口存储标识符和数据类型的同时枚举与端口存储标识符相关联的数据类型的出现。 流量控制操作根据端口存储标识符接收通过存储网络的数据类型的信息,根据端口存储标识符将阈值与通过存储网络的数据类型进行比较,确定何时与 考虑到接收到的信息,已经超过了数据类型,响应于确定通过根据存储网络上的端口存储标识符识别的一个或多个端口和存储设备的数据类型的确定排队。

    Method and system for managing time-out events in a storage area network
    6.
    发明申请
    Method and system for managing time-out events in a storage area network 有权
    用于管理存储区域网络中的超时事件的方法和系统

    公开(公告)号:US20070022192A1

    公开(公告)日:2007-01-25

    申请号:US10695888

    申请日:2003-10-28

    IPC分类号: G06F15/173

    摘要: A method and system to enter a time out interval in a storage area network includes identifying a time slot in a sequence of time slots to insert a time out event for the event in the storage area network, determining if other events in the storage network already have corresponding other time out events in the same time slot and inserting the time out event for the event in the identified time slot along with the other time out events and the other corresponding events. Monitoring time out intervals for the events includes receiving a request to determine if events in the storage area network have timed out, identifying events associated with a current time slot, determining if the identified current time slot is empty, removing events from the identified current time slot in response to the determination and notifying a time-out handler to perform appropriate time-out related processing.

    摘要翻译: 在存储区域网络中输入超时间隔的方法和系统包括识别时隙序列中的时隙以在存储区域网络中插入事件的超时事件,确定存储网络中的其他事件是否已经被存储 在相同的时隙中具有对应的其他超时事件,并且在识别的时隙中插入事件的超时事件以及其他超时事件和其他相应的事件。 监视事件的超时间隔包括接收确定存储区域网络中的事件是否超时的请求,识别与当前时隙相关联的事件,确定所识别的当前时隙是否为空,从所识别的当前时间中移除事件 响应于确定并通知超时处理程序来执行适当的超时相关处理。

    Data mover mechanism to achieve SAN RAID at wire speed
    7.
    发明授权
    Data mover mechanism to achieve SAN RAID at wire speed 有权
    数据移动器机制以线速实现SAN RAID

    公开(公告)号:US06880062B1

    公开(公告)日:2005-04-12

    申请号:US10224618

    申请日:2002-08-19

    IPC分类号: G06F12/00

    摘要: A Virtual Storage Server is provided for transferring data between a source storage device and one or more destination storage devices. A write command is issued to the one or more destinations for an amount of data. In response, one or more Transfer Ready Responses are returned indicating the amount of data the destinations are prepared to receive. The Virtual Storage Server then sends a read command to the source for an amount of data based on the amounts of data in the Transfer Ready Responses. The data is then transferred from the source storage device through the Virtual Storage Server to the one or more destination storage devices. Because data is transferred only in amounts that the destination is ready to receive, the Virtual Storage Server does not need a large buffer, and can basically send data received at wire speed. This process continues until the amount of data in the write command is transferred to the one or more destination storage devices.

    摘要翻译: 提供虚拟存储服务器用于在源存储设备和一个或多个目标存储设备之间传输数据。 向一个或多个目的地发出一个数据量的写入命令。 作为响应,返回一个或多个传送就绪响应,指示目的地准备接收的数据量。 然后,虚拟存储服务器根据“转移就绪响应”中的数据量向源发送一个读取数据量的数据。 然后将数据从源存储设备通过虚拟存储服务器传输到一个或多个目标存储设备。 由于数据仅以目的地准备好接收的量传输,所以虚拟存储服务器不需要大的缓冲区,并且基本上可以以线速发送接收到的数据。 该过程一直持续到写入命令中的数据量传送到一个或多个目标存储设备。

    Method and system for managing time-out events in a storage area network
    9.
    发明授权
    Method and system for managing time-out events in a storage area network 有权
    用于管理存储区域网络中的超时事件的方法和系统

    公开(公告)号:US07543195B2

    公开(公告)日:2009-06-02

    申请号:US10695888

    申请日:2003-10-28

    IPC分类号: G06F11/00

    摘要: A method and system to enter a time out interval in a storage area network includes identifying a time slot in a sequence of time slots to insert a time out event for the event in the storage area network, determining if other events in the storage network already have corresponding other time out events in the same time slot and inserting the time out event for the event in the identified time slot along with the other time out events and the other corresponding events. Monitoring time out intervals for the events includes receiving a request to determine if events in the storage area network have timed out, identifying events associated with a current time slot, determining if the identified current time slot is empty, removing events from the identified current time slot in response to the determination and notifying a time-out handler to perform appropriate time-out related processing.

    摘要翻译: 在存储区域网络中输入超时间隔的方法和系统包括识别时隙序列中的时隙以在存储区域网络中插入事件的超时事件,确定存储网络中的其他事件是否已经被存储 在相同的时隙中具有对应的其他超时事件,并且在识别的时隙中插入事件的超时事件以及其他超时事件和其他相应的事件。 监视事件的超时间隔包括接收确定存储区域网络中的事件是否超时的请求,识别与当前时隙相关联的事件,确定所识别的当前时隙是否为空,从所识别的当前时间中移除事件 响应于确定并通知超时处理程序来执行适当的超时相关处理。

    Apparatus to flow control frames in a networked storage virtualization using multiple streaming protocols
    10.
    发明授权
    Apparatus to flow control frames in a networked storage virtualization using multiple streaming protocols 有权
    使用多个流协议在网络存储虚拟化中流控制帧的装置

    公开(公告)号:US07689708B1

    公开(公告)日:2010-03-30

    申请号:US10690924

    申请日:2003-10-21

    IPC分类号: G06F15/16 H04L12/24

    摘要: A storage server includes various components that monitor and control the data flow therebetween. If an egress (downstream) port becomes congested, that information is propagated upstream to the egress components such as the port manager, the traffic manager processor, and the egress storage processor, which are each configured to control their data flow to prevent dropped data frames. In addition, the egress storage processor can communicate the congestion information to the ingress storage processor, which further propagates the congestion information to the ingress components such as the traffic manager processor and the port manager processor. The ingress port manager processor can then direct the ingress port to stop accepting ingress data for the storage server to process until the congestion has been addressed.

    摘要翻译: 存储服务器包括监视和控制它们之间的数据流的各种组件。 如果出口(下游)端口变得拥塞,则该信息在上游传播到出口组件,例如端口管理器,流量管理器处理器和出口存储处理器,其被配置为控制其数据流以防止丢失的数据帧 。 此外,出口存储处理器可以将拥塞信息传送到入口存储处理器,这进一步将拥塞信息传播到诸如流量管理器处理器和端口管理器处理器之类的入口组件。 入口端口管理器处理器然后可以引导入口端口停止接收存储服务器的入口数据,直到拥塞得到解决。