公开(公告)号：US20050240609A1

公开(公告)日：2005-10-27

申请号：US10892213

申请日：2004-07-16

申请人： Jun Mizuno ,  Takeshi Ishizaki ,  Kiminori Sugauchi ,  Atsushi Ueoka ,  Emiko Kobayashi ,  Toui Miyawaki

发明人： Jun Mizuno ,  Takeshi Ishizaki ,  Kiminori Sugauchi ,  Atsushi Ueoka ,  Emiko Kobayashi ,  Toui Miyawaki

IPC分类号： G06F13/10 ,  G06F3/06 ,  G06F12/00 ,  G06F17/00 ,  H04L12/44 ,  H04L12/70

CPC分类号： H04L67/1097

摘要： Storage groups are generated using group information previously set to a switch 3. In a group information acquisition step, group information, which is previously set to the switch 3 and relates to computers 4 and storage devices 5, is acquired from the switch 3, and the acquired group information is stored in a storing means 16. In a node information acquisition step, node information required for connecting to a network is acquired from each of the computers 4 and the storage devices 5, and acquired node information is stored in the storing means 16. In a group generation step, the storage groups are generated based on the group information stored in the storing means 16. And, in a registration step, the generated storage groups and the node information stored in the storing means 16 are registered at a storage name solving server 2.

摘要翻译： 存储组是使用事先设定为交换机3的组信息来生成的。在组信息获取步骤中，从交换机3获取预先设置到交换机3并与计算机4和存储装置5相关的组信息， 所获取的组信息被存储在存储装置16中。 在节点信息获取步骤中，从计算机4和存储装置5中获取连接到网络所需的节点信息，并且将获取的节点信息存储在存储装置16中。 在组生成步骤中，基于存储在存储装置16中的组信息生成存储组。 并且，在登记步骤中，存储在存储装置16中的所生成的存储组和节点信息被登记在存储名称解析服务器2。

公开(公告)号：US20050210291A1

公开(公告)日：2005-09-22

申请号：US10852400

申请日：2004-05-25

申请人： Toui Miyawaki ,  Takeshi Ishizaki ,  Emiko Kobayashi

发明人： Toui Miyawaki ,  Takeshi Ishizaki ,  Emiko Kobayashi

IPC分类号： G06F13/10 ,  G06F3/06 ,  G06F12/00 ,  G06F12/14 ,  G06F13/00 ,  G06F21/24 ,  H04L9/00 ,  H04L12/66 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12

CPC分类号： H04L29/12113 ,  H04L29/12066 ,  H04L61/1511 ,  H04L61/1541 ,  H04L63/0209 ,  H04L63/0218 ,  H04L63/102 ,  H04L63/1441 ,  H04L67/1097

摘要： In order to remove security vulnerability in an IP-SAN and eliminate unauthorized access by spoofing firewalls are installed in valid user servers and storage devices, and a distributed firewall manager for managing the firewalls integrally is provided in the IP-SAN. The distributed firewall manager obtains discovery domain information from an iSNS server, determines nodes registered in the iSNS server as the nodes of valid users, and autocreates a security policy according to sets consisting of an iSCSI name and portal information. This security policy is distributed to all of the firewalls as a common policy, whereupon access control is executed to deny TCP connection requests from unauthorized access sources.

摘要翻译： 为了消除IP-SAN中的安全漏洞，通过欺骗消除未经授权的访问，防火墙安装在有效的用户服务器和存储设备中，并在IP-SAN中提供了一体化管理防火墙的分布式防火墙管理器。 分布式防火墙管理员从iSNS服务器获取发现域信息，将在iSNS服务器中注册的节点确定为有效用户的节点，并根据iSCSI名称和门户信息组合自动创建安全策略。 该安全策略作为通用策略分发给所有防火墙，由此执行访问控制以拒绝来自未经授权的访问源的TCP连接请求。

公开(公告)号：US20050198224A1

公开(公告)日：2005-09-08

申请号：US10874330

申请日：2004-06-24

申请人： Emiko Kobayashi ,  Takeshi Ishizaki ,  Kiminori Sugauchi ,  Atsushi Ueoka ,  Toui Miyawaki ,  Jun Mizuno

发明人： Emiko Kobayashi ,  Takeshi Ishizaki ,  Kiminori Sugauchi ,  Atsushi Ueoka ,  Toui Miyawaki ,  Jun Mizuno

IPC分类号： G06F13/10 ,  G06F3/06 ,  G06F12/00 ,  G06F15/173 ,  H04L12/721 ,  H04L12/851

CPC分类号： H04L67/1097 ,  H04L67/322

摘要： A control condition is automatically generated by using a discovery domain managed by an iSNS server as a network communication quality control unit and set in a network device. Thus, it is possible to realize communication whose quality is effectively controlled in storage data transmission. A network configuration server automatically acquires discovery domain information which groups a host and a storage apparatus managed by a name management server. The network configuration server sets a flow identification condition so as to identify the flow per discovery domain according to the information acquired, assigns a service class performing a control of quality of communication service to the flow, and sets transmission rule for the service class to routers.

摘要翻译： 通过使用由iSNS服务器管理的发现域作为网络通信质量控制单元并在网络设备中设置来自动生成控制条件。 因此，可以实现在存储数据传输中有效控制质量的通信。 网络配置服务器自动获取由名称管理服务器管理的主机和存储设备分组的发现域信息。 网络配置服务器设置流识别条件，以根据获取的信息识别每个发现域的流量，分配对流量进行通信服务质量控制的服务类，并将服务类的传输规则设置为路由器 。

公开(公告)号：US20060282628A1

公开(公告)日：2006-12-14

申请号：US11195111

申请日：2005-08-01

申请人： Atsushi Ueoka ,  Takeshi Ishizaki ,  Emiko Kobayashi

发明人： Atsushi Ueoka ,  Takeshi Ishizaki ,  Emiko Kobayashi

IPC分类号： G06F13/28

CPC分类号： H04L67/1097

摘要： Provided is a priority control method for controlling a priority of data transmission in a computer system including a storage system that has a plurality of volumes, a host computer that uses the volumes, a management computer that sets a priority of data transmission between each volume and the host computer, and a network that is composed of a network device controls the priority of data transmission and provides a connection path between the storage system and the host computer. Executed in the method are a first step of obtaining from the storage system information on a first priority assigned to each volume in the storage system and a capacity of a cache memory allocated to each volume, a second step of determining a second priority of the volume on the connection path through the network by referring the obtained information, a third step of notifying the host computer of the determined second priority, a fourth step of obtaining identification of the connection path corresponding to the determined second priority of the volume, and a fifth step of setting the obtained identification to the network device.

摘要翻译： 提供了一种用于控制包括具有多个卷的存储系统的计算机系统中的数据传输的优先级的优先级控制方法，使用该卷的主计算机，管理计算机，其设置每个卷之间的数据传输的优先级， 主机和由网络设备组成的网络控制数据传输的优先级，并提供存储系统与主机之间的连接路径。 在该方法中执行的第一步是从存储系统获得关于分配给存储系统中的每个卷的第一优先级和分配给每个卷的高速缓存的容量的信息，确定卷的第二优先级的第二步骤 在通过参考所获得的信息的通过网络的连接路径上，第三步骤，通知主计算机所确定的第二优先级;第四步骤，获得与所确定的第二优先级对应的连接路径的识别;以及第五步骤 将获得的标识设置到网络设备的步骤。

公开(公告)号：US20060248142A1

公开(公告)日：2006-11-02

申请号：US11479495

申请日：2006-06-30

申请人： Takeshi Ishizaki ,  Shigeru Miyake

发明人： Takeshi Ishizaki ,  Shigeru Miyake

IPC分类号： G06F15/16

CPC分类号： H04L41/082 ,  H04L12/4641 ,  H04L12/4675 ,  H04L41/5035 ,  H04L41/5061

摘要： The present invention provides techniques for creation, operation and management of network-based storage services. Specific embodiments provide improved efficiency of the service management tasks used for designing, operating and accounting the robust and profitable network services, for example. In representative embodiments, techniques for constructing integrated network and storage services are provided. In a specific embodiment, the service comprises of three major service components: virtual private networks (VPN), application servers and storage area networks (SAN). Each of these service components has its own customer identification information, such as VPN identifier for VPN services, process identifier for application servers and logical unit number (LUN) for storage devices.

公开(公告)号：US20060070063A1

公开(公告)日：2006-03-30

申请号：US11062877

申请日：2005-02-23

申请人： Souichi Takashige ,  Shigeru Miyake ,  Takeshi Ishizaki ,  Hideki Takano

发明人： Souichi Takashige ,  Shigeru Miyake ,  Takeshi Ishizaki ,  Hideki Takano

IPC分类号： G06F9/445

CPC分类号： G06F8/60

摘要： A computer system is composed of a plurality of hosts and provides a sole function. The computer system includes software packages over the hosts, those software packages often depending upon each other. The computer system predefines a name to be read by a person and to be usable according to a function of each host computer and describes a dependency among the software packages across the plural hosts through the use of the name. When installing the software package, the computer system corresponds a name that represents a general-purpose function with a real host in the target host, recursively execute a process of automatically determining the destination host to which the software package is to be installed.

摘要翻译： 计算机系统由多个主机组成并提供唯一的功能。 计算机系统包括主机上的软件包，这些软件包通常依赖于彼此。 计算机系统预先定义要由人读取的名称，并根据每台主机的功能使用，并通过使用该名称描述多个主机之间的软件包之间的依赖关系。 在安装软件包时，计算机系统将一个表示通用功能的名称与目标主机中的真实主机对应，递归地执行自动确定要安装软件包的目标主机的过程。

公开(公告)号：US07617271B2

公开(公告)日：2009-11-10

申请号：US11479495

申请日：2006-06-30

申请人： Takeshi Ishizaki ,  Shigeru Miyake

发明人： Takeshi Ishizaki ,  Shigeru Miyake

IPC分类号： G06F15/16

CPC分类号： H04L41/082 ,  H04L12/4641 ,  H04L12/4675 ,  H04L41/5035 ,  H04L41/5061

摘要： The present invention provides techniques for creation, operation and management of network-based storage services. Specific embodiments provide improved efficiency of the service management tasks used for designing, operating and accounting the robust and profitable network services, for example. In representative embodiments, techniques for constructing integrated network and storage services are provided. In a specific embodiment, the service comprises of three major service components: virtual private networks (VPN), application servers and storage area networks (SAN). Each of these service components has its own customer identification information, such as VPN identifier for VPN services, process identifier for application servers and logical unit number (LUN) for storage devices.

公开(公告)号：US07962601B2

公开(公告)日：2011-06-14

申请号：US12705538

申请日：2010-02-12

申请人： Takeshi Ishizaki ,  Shigeru Miyake

发明人： Takeshi Ishizaki ,  Shigeru Miyake

IPC分类号： G06F15/173

CPC分类号： H04L12/4641 ,  H04L41/0816

摘要： The present invention provides techniques for creation, operation, management, and access control of network-based storage services. Specific embodiments provide improved efficiency of the service management tasks used for designing, operating and accounting the robust and profitable network services, for example. In representative embodiments, techniques for constructing integrated network and storage services are provided. In a specific embodiment, the service comprises of three major service components: virtual private networks (VPN), application servers and storage area networks (SAN). Each of these service components has its own customer identification information, such as VPN identifier for VPN services, process identifier for application servers and logical unit number (LUN) for storage devices.

摘要翻译： 本发明提供了用于基于网络的存储服务的创建，操作，管理和访问控制的技术。 具体实施例例如提供了用于设计，操作和计算稳健且有利可图的网络服务的服务管理任务的改进效率。 在代表性的实施例中，提供了用于构建集成网络和存储服务的技术。 在具体实施例中，服务包括三个主要服务组件：虚拟专用网络（VPN），应用服务器和存储区域网络（SAN）。 这些服务组件中的每一个都有自己的客户识别信息，如VPN服务的VPN标识符，应用服务器的进程标识符和存储设备的逻辑单元号（LUN）。

公开(公告)号：US07693980B2

公开(公告)日：2010-04-06

申请号：US11923587

申请日：2007-10-24

申请人： Takeshi Ishizaki ,  Shigeru Miyake

发明人： Takeshi Ishizaki ,  Shigeru Miyake

IPC分类号： G06F15/173

CPC分类号： H04L12/4641 ,  H04L41/0816

摘要： The present invention provides techniques for creation, operation, management, and access control of network-based storage services. Specific embodiments provide improved efficiency of the service management tasks used for designing, operating and accounting the robust and profitable network services, for example. In representative embodiments, techniques for constructing integrated network and storage services are provided. In a specific embodiment, the service comprises of three major service components: virtual private networks (VPN), application servers and storage area networks (SAN). Each of these service components has its own customer identification information, such as VPN identifier for VPN services, process identifier for application servers and logical unit number (LUN) for storage devices.

摘要翻译： 本发明提供了用于基于网络的存储服务的创建，操作，管理和访问控制的技术。 具体实施例例如提供了用于设计，操作和计算稳健且有利可图的网络服务的服务管理任务的改进效率。 在代表性的实施例中，提供了用于构建集成网络和存储服务的技术。 在具体实施例中，服务包括三个主要服务组件：虚拟专用网络（VPN），应用服务器和存储区域网络（SAN）。 这些服务组件中的每一个都有自己的客户识别信息，如VPN服务的VPN标识符，应用服务器的进程标识符和存储设备的逻辑单元号（LUN）。

公开(公告)号：US07085827B2

公开(公告)日：2006-08-01

申请号：US09956635

申请日：2001-09-20

申请人： Takeshi Ishizaki ,  Shigeru Miyake ,  Hideyuki Yamamoto ,  Koichiro Otani

发明人： Takeshi Ishizaki ,  Shigeru Miyake ,  Hideyuki Yamamoto ,  Koichiro Otani

IPC分类号： G06F15/173 ,  G06F7/00 ,  G06F15/16 ,  G06F17/30

CPC分类号： H04L63/0272 ,  G06Q10/06 ,  H04L29/06 ,  H04L67/1097 ,  H04L67/327 ,  H04L69/329

摘要： Techniques for creation, operation, management, and access control of network-based storage services are described. Specific embodiments provide improved efficiency of the service management tasks used for designing, operating and accounting the robust and profitable network services, for example. In representative embodiments, techniques for constructing integrated network and storage services are provided. In a specific embodiment, the service comprises of three major service components: virtual private networks (VPN), applications servers and storage area networks (SAN). Each of these service components has its own customer identification information, such as VPN identifier for VPN services, process identifier for application servers and logical unit number (LUN) for storage devices.

摘要翻译： 描述了基于网络的存储服务的创建，操作，管理和访问控制的技术。 具体实施例例如提供了用于设计，操作和计算稳健且有利可图的网络服务的服务管理任务的改进效率。 在代表性的实施例中，提供了用于构建集成网络和存储服务的技术。 在具体实施例中，该服务包括三个主要服务组件：虚拟专用网（VPN），应用服务器和存储区域网络（SAN）。 这些服务组件中的每一个都有自己的客户识别信息，如VPN服务的VPN标识符，应用服务器的进程标识符和存储设备的逻辑单元号（LUN）。