公开(公告)号：US20080288825A1

公开(公告)日：2008-11-20

申请号：US12181287

申请日：2008-07-28

申请人： Hiroshi FURUKAWA ,  Etsutaro Akagawa

发明人： Hiroshi FURUKAWA ,  Etsutaro Akagawa

IPC分类号： G06F11/07

CPC分类号： H04L63/0236 ,  H04L63/101

摘要： In a storage subsystem which is connected to an IP network, by excluding an improper packet, security is heightened, and a performance of communication to a logical unit of storage subsystem is maintained and secured. In the storage subsystem, a function which carries out filtering of a packet other than an iSCSI packet is provided. With respect to only the packet passed through the function, its accessibility to the logical unit is filtered. Also, traffic of all received packets, and a traffic lob of a packet judged to be discarded by the above filtering is recorded. By using this information, controlling such as a cut-off process of improper communication, QoS securement for normal communication and so on, are carried out.

摘要翻译： 在连接到IP网络的存储子系统中，通过排除不正确的分组，提高安全性，并且保持和保护与存储子系统的逻辑单元的通信的性能。 在存储子系统中，提供对iSCSI分组以外的分组进行滤波的功能。 对于仅通过该功能的分组，其对逻辑单元的可访问性被过滤。 此外，记录所有接收的分组的业务，以及通过上述过滤被判断为丢弃的分组的业务量。 通过使用该信息，进行诸如通信不正当的切断处理，正常通信的QoS保证等的控制。

公开(公告)号：US20070214253A1

公开(公告)日：2007-09-13

申请号：US11798353

申请日：2007-05-14

申请人： Etsutaro Akagawa ,  Hiroshi Furukawa

发明人： Etsutaro Akagawa ,  Hiroshi Furukawa

IPC分类号： G06F15/173

CPC分类号： G06F11/0784 ,  G06F11/0727 ,  H04L41/06 ,  H04L43/00 ,  H04L43/16

摘要： In case a fault has occurred in a volume, it was so far difficult to correctly notify a fault by using a host computer which can access the volumes managed by a management computer that integrally manages a plurality of devices constituting a network. The management program of the invention is executed by the management computer connected to computers and to a plurality of storage devices for managing the volumes connected to the computers through a SAN (storage area network). The management program executes a procedure for receiving a notice of fault in the volume from the storage devices, a procedure for receiving volume access control information from a plurality of storage devices for specifying the computers that can access the volumes, and a procedure for notifying the fault in the volume to the computers that are permitted to access the volumes based on the volume access control information.

公开(公告)号：US07085954B2

公开(公告)日：2006-08-01

申请号：US10649649

申请日：2003-08-28

申请人： Hiroshi Furukawa ,  Etsutaro Akagawa ,  Manabu Kitamura

发明人： Hiroshi Furukawa ,  Etsutaro Akagawa ,  Manabu Kitamura

IPC分类号： G06F12/02

CPC分类号： G06F17/30067 ,  G06Q20/3674

摘要： A storage system according to an embodiment of the present invention has a storage and a controller. The storage has an interface for connecting it to a storage of another storage system via a communication line, and a remote copy module transferring predetermined data to the another storage system, not via the controller, based on a data transfer command from the controller. The controller has a remote copy control module transmitting to the remote copy module, at reception of a notification of account attribute movement from an account monitor module monitoring the account attribute movement, a data transfer command for transferring predetermined data to the other storage system, not via the controller.

摘要翻译： 根据本发明实施例的存储系统具有存储和控制器。 存储器具有用于经由通信线路将其连接到另一存储系统的存储器的接口，以及远程复制模块，其不是经由控制器，基于来自控制器的数据传送命令将预定数据传送到另一个存储系统。 控制器具有远程复制控制模块，其在从监视帐户属性移动的帐户监视模块接收到帐户属性移动通知的同时发送到远程复制模块，用于将预定数据传送到另一存储系统的数据传送命令 通过控制器。

公开(公告)号：US20050120279A1

公开(公告)日：2005-06-02

申请号：US10791452

申请日：2004-03-01

申请人： Hiroshi Furukawa ,  Etsutaro Akagawa

发明人： Hiroshi Furukawa ,  Etsutaro Akagawa

IPC分类号： G06F13/10 ,  G06F3/06 ,  H04L12/28 ,  H04L12/66 ,  H04L29/06 ,  G06F11/00

CPC分类号： H04L63/0236 ,  H04L63/101

摘要： In a storage subsystem which is connected to an IP network, by excluding an improper packet, security is heightened, and a performance of communication to a logical unit of a storage subsystem is maintained and secured. In the storage subsystem according to one embodiment, a function which carries out filtering of a packet other than an iSCSI packet is provided. With respect to only the packet passed through the function, its accessibility to the logical unit is filtered. Also, traffic of all received packets, and traffic of each packet sorted out by the two filtering functions are measured, and a traffic log of a packet judged to be discarded by the above filtering is recorded. By using this information, controlling such as a cut-off process of improper communication, QoS securement for normal communication and so on, are carried out.

摘要翻译： 在连接到IP网络的存储子系统中，通过排除不正确的分组，提高安全性，并且保持和保护与存储子系统的逻辑单元的通信性能。 在根据一个实施例的存储子系统中，提供对iSCSI分组以外的分组进行滤波的功能。 对于仅通过该功能的分组，其对逻辑单元的可访问性被过滤。 此外，测量所有接收到的分组的流量，以及由两个过滤功能分类的每个分组的流量，并且记录通过上述过滤被判断为丢弃的分组的业务日志。 通过使用该信息，进行诸如通信不正当的切断处理，正常通信的QoS保证等的控制。

公开(公告)号：US07234020B2

公开(公告)日：2007-06-19

申请号：US10629554

申请日：2003-07-30

申请人： Etsutaro Akagawa ,  Hiroshi Furukawa

发明人： Etsutaro Akagawa ,  Hiroshi Furukawa

IPC分类号： G06F12/00

CPC分类号： G06F11/0784 ,  G06F11/0727 ,  H04L41/06 ,  H04L43/00 ,  H04L43/16

摘要： In case a fault has occurred in a volume, it was so far difficult to correctly notify a fault by using a host computer which can access the volumes managed by a management computer that integrally manages a plurality of devices constituting a network. The management program of the invention is executed by the management computer connected to computers and to a plurality of storage devices for managing the volumes connected to the computers through a SAN (storage area network). The management program executes a procedure for receiving a notice of fault in the volume from the storage devices, a procedure for receiving volume access control information from a plurality of storage devices for specifying the computers that can access the volumes, and a procedure for notifying the fault in the volume to the computers that are permitted to access the volumes based on the volume access control information.

摘要翻译： 在卷中发生故障的情况下，通过使用能够访问由构成网络的多个设备的管理计算机管理的卷的主机来正确通知故障是困难的。 本发明的管理程序由连接到计算机的管理计算机和多个存储设备执行，用于通过SAN（存储区域网络）管理连接到计算机的卷。 管理程序执行用于从存储装置接收卷中的故障通知的过程，用于从多个存储装置接收用于指定可以访问卷的计算机的卷访问控制信息的过程，以及用于通知 根据卷访问控制信息允许访问卷的计算机的卷的故障。

公开(公告)号：US20050256898A1

公开(公告)日：2005-11-17

申请号：US10902800

申请日：2004-08-02

申请人： Etsutaro Akagawa ,  Hiroshi Furukawa

发明人： Etsutaro Akagawa ,  Hiroshi Furukawa

IPC分类号： G06F12/00 ,  G06F17/30

CPC分类号： G06F16/119

摘要： When a file server migrates from an existing file server to a new file server, data is allowed to migrate and setting information for a file system can migrate, too. At this time, data migration timing can be arbitrarily designated while a file sharing service is executed without stop and while securing system performance. A file migration program of the new file server is connected in a block level to a volume of the existing file server to acquire file sharing configuration and volume setting information of the existing file server. During the migration of the file server, a file read/write request from the file sharing access program of the host computer is executed for the volume through the block access program of the existing file server on the basis of file sharing configuration and volume setting information of the existing file server so acquired.

摘要翻译： 当文件服务器从现有的文件服务器迁移到新的文件服务器时，允许数据迁移，文件系统的设置信息也可以迁移。 此时，可以任意指定数据迁移定时，而不停止执行文件共享服务，同时确保系统性能。 新文件服务器的文件迁移程序以块级连接到现有文件服务器的卷，以获取现有文件服务器的文件共享配置和卷设置信息。 在文件服务器迁移过程中，通过文件共享配置和卷设置信息，通过现有文件服务器的块访问程序对卷进行文件共享访问程序的文件读/写请求 的现有文件服务器如此收购。

公开(公告)号：US20120101995A1

公开(公告)日：2012-04-26

申请号：US12992420

申请日：2010-10-22

申请人： Masakuni Agetsuma ,  Etsutaro Akagawa ,  Yohsuke Ishii

发明人： Masakuni Agetsuma ,  Etsutaro Akagawa ,  Yohsuke Ishii

IPC分类号： G06F17/30 ,  G06F7/00

CPC分类号： G06F17/30079 ,  G06F3/0605 ,  G06F3/062 ,  G06F3/0647 ,  G06F3/0649 ,  G06F3/067 ,  G06F17/30067 ,  G06F17/30221 ,  G06F21/604 ,  G06F2221/2141 ,  H04L67/1097

摘要： A file server stores the storage management information and migration policy information. The storage management information includes the information that indicates a storage attribute for each storage apparatus. The migration policy information includes a plurality of information sets. Each of the information sets includes the information that indicates a condition of a file attribute and the information that indicates a condition of a storage attribute of a storage apparatus that is a migration destination. The file server specifies a migration target file, specifies a storage apparatus that conforms to the storage attribute condition that is indicated by the information set that includes the information that indicates a condition of a file attribute that conforms to of a file attribute of a target file based on the storage management information, and migrates a target file from a storage apparatus that has stored the target file to the storage apparatus that has been specified.

摘要翻译： 文件服务器存储存储管理信息和迁移策略信息。 存储管理信息包括指示每个存储装置的存储属性的信息。 迁移策略信息包括多个信息集。 每个信息集包括指示文件属性的条件的信息和指示作为迁移目的地的存储装置的存储属性的条件的信息。 文件服务器指定迁移目标文件，指定符合包含指示符合目标文件的文件属性的文件属性的条件的信息的信息集所指示的存储属性条件的存储装置 基于存储管理信息，将已经存储了目标文件的存储装置的目标文件迁移到已经指定的存储装置。

公开(公告)号：US20110035409A1

公开(公告)日：2011-02-10

申请号：US12575138

申请日：2009-10-07

申请人： Akio SHIMADA ,  Etsutaro Akagawa ,  Hitoshi Kamei ,  Nobumitsu Takaoka ,  Atsushi Sutoh ,  Masakuni Agetsuma

发明人： Akio SHIMADA ,  Etsutaro Akagawa ,  Hitoshi Kamei ,  Nobumitsu Takaoka ,  Atsushi Sutoh ,  Masakuni Agetsuma

IPC分类号： G06F17/30 ,  G06F12/00

CPC分类号： G06F16/185

摘要： An interface for controlling an inhibition of a recall is prepared for an application, and a judgment of necessity of a recall is informed of to a hierarchical storage before the application executes an access to a file.

摘要翻译： 为应用准备了用于控制召回的抑制的接口，并且在应用程序执行对文件的访问之前，向层级存储器通知对召回的必要性的判断。

公开(公告)号：US20090150455A1

公开(公告)日：2009-06-11

申请号：US12320727

申请日：2009-02-03

申请人： Akitsugu Kanda ,  Etsutaro Akagawa ,  Yohsuke Ishii

发明人： Akitsugu Kanda ,  Etsutaro Akagawa ,  Yohsuke Ishii

IPC分类号： G06F17/30

CPC分类号： G06F17/30067 ,  G06F11/1471 ,  G06F21/53 ,  G06F2221/2101 ,  Y10S707/99953 ,  Y10S707/99955

摘要： The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

摘要翻译： 本发明提供了一种日志管理系统，其被设计成使得管理者关于日志信息的不当行为可以容易地被发现。 虚拟操作系统分别针对也可以构建为NAS设备的文件服务器中的各个用户安装。 这些虚拟操作系统作为虚拟NAS。 虚拟操作系统和管理操作系统可以通过构建为内核的信息交换部分来交换与日志​​信息有关的信息。 在虚拟OS中产生的日志信息经由第一通信网络发送到第一日志管理设备，并且还经由第二通信网络被发送到第二日志管理设备。 相应的网络是分开的。 由于通过使用单独的管理设备的多路复用管理来管理相同的日志信息的结果，可以检测是否存在关于日志信息的不正当行为。

公开(公告)号：US08869285B2

公开(公告)日：2014-10-21

申请号：US12320727

申请日：2009-02-03

申请人： Akitsugu Kanda ,  Etsutaro Akagawa ,  Yohsuke Ishii

发明人： Akitsugu Kanda ,  Etsutaro Akagawa ,  Yohsuke Ishii

IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G06F17/30 ,  G06F21/53 ,  G06F11/14

CPC分类号： G06F17/30067 ,  G06F11/1471 ,  G06F21/53 ,  G06F2221/2101 ,  Y10S707/99953 ,  Y10S707/99955

摘要： The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

摘要翻译： 本发明提供了一种日志管理系统，其被设计成使得管理者关于日志信息的不当行为可以容易地被发现。 虚拟操作系统分别针对也可以构建为NAS设备的文件服务器中的各个用户安装。 这些虚拟操作系统作为虚拟NAS。 虚拟操作系统和管理操作系统可以通过构建为内核的信息交换部分来交换与日志​​信息有关的信息。 在虚拟OS中产生的日志信息经由第一通信网络发送到第一日志管理设备，并且还经由第二通信网络被发送到第二日志管理设备。 相应的网络是分开的。 由于通过使用单独的管理设备的多路复用管理来管理相同的日志信息的结果，可以检测是否存在关于日志信息的不正当行为。