公开(公告)号：US07130900B2

公开(公告)日：2006-10-31

申请号：US10664891

申请日：2003-09-22

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F15/173

CPC分类号： G06F17/302 ,  G06F3/0601 ,  G06F2003/0697 ,  H04L29/12009 ,  H04L29/12018 ,  H04L29/12028 ,  H04L61/103 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/10 ,  H04L67/1097

摘要： In a computer system having a storage device, switches and hosts respectively connected by a network, in accordance with an ID of a logical volume of the storage device and an IP address of a host, access control configuration of the logical volume is performed relative to the storage device, the IP address of the host is converted into a MAC address, the MAC address of the host is converted into a port ID of the switch connected to the host, and addition of the port to virtual local area network (VLAN) is performed for the switch. Logical unit number (LUN) masking and VLAN configuration essential for security countermeasure of IP-SAN (Internet protocol-storage area network) can be managed collectively by a system administrator so that the running cost of IP-SAN can be lowered.

摘要翻译： 在具有根据存储装置的逻辑卷的ID和主机的IP地址的分别由网络连接的存储装置，交换机和主机的计算机系统中，对于逻辑卷的访问控制配置相对于 存储设备将主机的IP地址转换为MAC地址，将主机的MAC地址转换为与主机连接的交换机的端口号，并将端口加入虚拟局域网（VLAN） 被执行为开关。 IP-SAN（因特网协议存储区域网）的安全对策所必需的逻辑单元号（LUN）掩码和VLAN配置可以由系统管理员共同管理，从而降低IP-SAN的运行成本。

公开(公告)号：US20050257274A1

公开(公告)日：2005-11-17

申请号：US10878186

申请日：2004-06-29

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Daiki Nakatsuka ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Daiki Nakatsuka ,  Keisei Fujiwara

IPC分类号： G06F13/10 ,  G06F3/06 ,  G06F12/00 ,  G06F12/14 ,  G06F21/00 ,  G06F21/24 ,  H04L29/06 ,  H04L9/00

CPC分类号： H04L63/101 ,  G06F21/31 ,  G06F21/6218 ,  G06F21/805

摘要： In a computer system in which one or more computers on which one or more initiators operate and a storage device on which one or more targets operate are connected with each other through a network, an authentication table for authenticating validity of a user of a computer is associated with an authorization table for authorizing access of an initiator to a certain target, to limit such accesses.

摘要翻译： 在其中一个或多个启动器操作的一个或多个计算机和一个或多个目标操作的存储设备通过网络彼此连接的计算机系统中，用于验证计算机的用户的有效性的认证表是 与用于授权将启动器访问某个目标的授权表相关联，以限制这种访问。

公开(公告)号：US20050240681A1

公开(公告)日：2005-10-27

申请号：US10884474

申请日：2004-07-01

申请人： Keisei Fujiwara ,  Kenta Shiga ,  Atsuya Kumagai

发明人： Keisei Fujiwara ,  Kenta Shiga ,  Atsuya Kumagai

IPC分类号： H04L12/801 ,  G06F7/00 ,  H04L12/709 ,  H04L12/863 ,  H04L12/911

CPC分类号： H04L67/1095 ,  H04L67/1097

摘要： Each of the storage devices 1, 2 is provided with transmission queues 306a, 306b with respect to each of transmission paths A and B. The storage device 1 stores identical request data in each of the transmission queues 306a and 306b, and transmits each data to the counterpart storage device 2, respectively via the transmission path A and B (S811, 812). The storage device 2, being a counterpart, stores the request data or response data arrived earlier in the receive history information table 300 (S817), and discards the request data arrived later (S903, 904). Furthermore, if the storage device 1, being a transmission source, receives at least one response data against the request data, the storage device 1 searches the transmission queues 306a, 306b, and if there remains request data in any of the transmission queue, deletes the request data (S909).

摘要翻译： 每个存储设备1,2相对于传输路径A和B中的每一个设置有传输队列306a，306b。存储设备1在每个传输队列306a和306b中存储相同的请求数据，以及 分别经由传输路径A和B将每个数据发送到对方存储设备2（S 811,812）。 作为对方的存储装置2存储先前在接收历史信息表300中到达的请求数据或响应数据（S 817），并丢弃稍后到达的请求数据（S903,904）。 此外，作为发送源的存储装置1如果接收到针对请求数据的至少一个响应数据，则存储装置1在发送队列306a，306b中进行搜索，如果在发送队列中存在请求数据 删除请求数据（S909）。

公开(公告)号：US07464184B2

公开(公告)日：2008-12-09

申请号：US11493531

申请日：2006-07-27

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F15/16

CPC分类号： G06F17/302 ,  G06F3/0601 ,  G06F2003/0697 ,  H04L29/12009 ,  H04L29/12018 ,  H04L29/12028 ,  H04L61/103 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/10 ,  H04L67/1097

摘要： In a computer system having a storage device, switches and hosts respectively connected by a network, in accordance with an ID of a logical volume of the storage device and an IP address of a host, access control configuration of the logical volume is performed relative to the storage device, the IP address of the host is converted into a MAC address, the MAC address of the host is converted into a port ID of the switch connected to the host, and addition of the port to virtual local area network (VLAN) is performed for the switch. Logical unit number (LUN) masking and VLAN configuration essential for security countermeasure of IP-SAN (Internet protocol-storage area network) can be managed collectively by a system administrator so that the running cost of IP-SAN can be lowered.

摘要翻译： 在具有根据存储装置的逻辑卷的ID和主机的IP地址的分别由网络连接的存储装置，交换机和主机的计算机系统中，对于逻辑卷的访问控制配置相对于 存储设备将主机的IP地址转换为MAC地址，将主机的MAC地址转换为与主机连接的交换机的端口号，并将端口加入虚拟局域网（VLAN） 被执行为开关。 IP-SAN（因特网协议存储区域网）的安全对策所必需的逻辑单元号（LUN）掩码和VLAN配置可以由系统管理员共同管理，从而降低IP-SAN的运行成本。

公开(公告)号：US20050188109A1

公开(公告)日：2005-08-25

申请号：US10801720

申请日：2004-03-17

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F13/10 ,  G06F3/06 ,  H04L12/46 ,  H04L12/66 ,  H04L12/707 ,  H04L12/803 ,  H04L12/825 ,  G06F15/173

CPC分类号： H04L47/10 ,  H04L41/0803 ,  H04L41/22 ,  H04L47/263 ,  Y02D50/10

摘要： In a computer system in which a computer, storage devices, and a storage management device are connected by a network, the computer or a first storage device accesses a second storage device using a plurality of paths in the network, and the computer or the first storage device performs load balancing among the plurality of paths on the basis of a ratio set in advance, it is detected that congestion has occurred on a path, a ratio at the time of congestion of the path is calculated, and a difference between the ratio at the time of congestion and the ratio set in advance is allocated to a ratio of the other paths between the computer or the first storage device and the second storage device.

摘要翻译： 在计算机，存储设备和存储管理设备通过网络连接的计算机系统中，计算机或第一存储设备使用网络中的多个路径访问第二存储设备，并且计算机或第一 存储装置基于预先设定的比率，在多个路径之间进行负载平衡，检测到路径上发生拥塞，计算路径拥塞时的比例，以及比率 在拥塞时，预先设定的比例被分配给计算机或第一存储装置与第二存储装置之间的其他路径的比率。

公开(公告)号：US07451204B2

公开(公告)日：2008-11-11

申请号：US11480383

申请日：2006-07-05

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F15/173

CPC分类号： G06F17/302 ,  G06F3/0601 ,  G06F2003/0697 ,  H04L29/12009 ,  H04L29/12018 ,  H04L29/12028 ,  H04L61/103 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/10 ,  H04L67/1097

摘要： In a computer system having a storage device switches and hosts respectively connected by a network, in accordance with an ID of a logical volume of the storage device and an IP address of a host, access control configuration of the logical volume is performed relative to the storage device, the IP address of the host is converted into a MAC address, the MAC address of the host is converted into a port ID of the switch connected to the host, and addition of the port to virtual local area network (VLAN) is performed for the switch. Logical unit number (LUN) masking and VLAN configuration essential for security countermeasure of IP-SAN (Internet protocol-storage area network) can be managed collectively by a system administrator so that the running cost of IP-SAN can be lowered.

摘要翻译： 在具有存储设备的计算机系统中，交换机和主机分别由网络连接，根据存储设备的逻辑卷的ID和主机的IP地址，执行逻辑卷的访问控制配置 存储设备，将主机的IP地址转换为MAC地址，将主机的MAC地址转换为连接到主机的交换机的端口号，并将端口加入虚拟局域网（VLAN）为 为交换机执行。 IP-SAN（因特网协议存储区域网）的安全对策所必需的逻辑单元号（LUN）掩码和VLAN配置可以由系统管理员共同管理，从而降低IP-SAN的运行成本。

公开(公告)号：US07380019B2

公开(公告)日：2008-05-27

申请号：US10801720

申请日：2004-03-17

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F15/173

CPC分类号： H04L47/10 ,  H04L41/0803 ,  H04L41/22 ,  H04L47/263 ,  Y02D50/10

摘要： In a computer system in which a computer, storage devices, and a storage management device are connected by a network, the computer or a first storage device accesses a second storage device using a plurality of paths in the network, and the computer or the first storage device performs load balancing among the plurality of paths on the basis of a ratio set in advance, it is detected that congestion has occurred on a path, a ratio at the time of congestion of the path is calculated, and a difference between the ratio at the time of congestion and the ratio set in advance is allocated to a ratio of the other paths between the computer or the first storage device and the second storage device.

摘要翻译： 在计算机，存储设备和存储管理设备通过网络连接的计算机系统中，计算机或第一存储设备使用网络中的多个路径访问第二存储设备，并且计算机或第一 存储装置基于预先设定的比率，在多个路径之间进行负载平衡，检测到路径上发生拥塞，计算路径拥塞时的比例，以及比率 在拥塞时，预先设定的比例被分配给计算机或第一存储装置与第二存储装置之间的其他路径的比率。

公开(公告)号：US07353542B2

公开(公告)日：2008-04-01

申请号：US10878186

申请日：2004-06-29

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Daiki Nakatsuka ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Daiki Nakatsuka ,  Keisei Fujiwara

IPC分类号： H04L29/00

CPC分类号： H04L63/101 ,  G06F21/31 ,  G06F21/6218 ,  G06F21/805

摘要： In a computer system in which one or more computers on which one or more initiators operate and a storage device on which one or more targets operate are connected with each other through a network, an authentication table for authenticating validity of a user of a computer is associated with an authorization table for authorizing access of an initiator to a certain target, to limit such accesses.

摘要翻译： 在其中一个或多个启动器操作的一个或多个计算机和一个或多个目标操作的存储设备通过网络彼此连接的计算机系统中，用于验证计算机的用户的有效性的认证表是 与用于授权将启动器访问某个目标的授权表相关联，以限制这种访问。

公开(公告)号：US07092982B2

公开(公告)日：2006-08-15

申请号：US10884474

申请日：2004-07-01

申请人： Keisei Fujiwara ,  Kenta Shiga ,  Atsuya Kumagai

发明人： Keisei Fujiwara ,  Kenta Shiga ,  Atsuya Kumagai

IPC分类号： G06F15/16 ,  G06F11/00 ,  G06F12/00

CPC分类号： H04L67/1095 ,  H04L67/1097

摘要： Each of the storage devices 1, 2 is provided with transmission queues 306a, 306b with respect to each of transmission paths A and B. The storage device 1 stores identical request data in each of the transmission queues 306a and 306b, and transmits each data to the counterpart storage device 2, respectively via the transmission path A and B (S811, 812). The storage device 2, being a counterpart, stores the request data or response data arrived earlier in the receive history information table 300 (S817), and discards the request data arrived later (S903, 904). Furthermore, if the storage device 1, being a transmission source, receives at least one response data against the request data, the storage device 1 searches the transmission queues 306a, 306b, and if there remains request data in any of the transmission queue, deletes the request data (S909).

摘要翻译： 每个存储设备1,2相对于传输路径A和B中的每一个设置有传输队列306a，306b。存储设备1在每个传输队列306a和306b中存储相同的请求数据，以及 分别经由传输路径A和B将每个数据发送到对方存储设备2（S 811,812）。 作为对方的存储装置2存储先前在接收历史信息表300中到达的请求数据或响应数据（S 817），并丢弃稍后到达的请求数据（S903,904）。 此外，作为发送源的存储装置1如果接收到针对请求数据的至少一个响应数据，则存储装置1在发送队列306a，306b中进行搜索，如果在发送队列中存在请求数据 删除请求数据（S909）。

公开(公告)号：US20050044199A1

公开(公告)日：2005-02-24

申请号：US10664891

申请日：2003-09-22

申请人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

发明人： Kenta Shiga ,  Atsuya Kumagai ,  Keisei Fujiwara

IPC分类号： G06F13/10 ,  G06F12/00 ,  G06F15/173 ,  H04L12/44 ,  H04L12/46 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12

CPC分类号： G06F17/302 ,  G06F3/0601 ,  G06F2003/0697 ,  H04L29/12009 ,  H04L29/12018 ,  H04L29/12028 ,  H04L61/103 ,  H04L63/0272 ,  H04L63/0428 ,  H04L63/10 ,  H04L67/1097

摘要： In a computer system having a storage device, switches and hosts respectively connected by a network, in accordance with an ID of a logical volume of the storage device and an IP address of a host, access control configuration of the logical volume is performed relative to the storage device, the IP address of the host is converted into a MAC address, the MAC address of the host is converted into a port ID of the switch connected to the host, and addition of the port to virtual local area network (VLAN) is performed for the switch. Logical unit number (LUN) masking and VLAN configuration essential for security countermeasure of IP-SAN (Internet protocol-storage area network) can be managed collectively by a system administrator so that the running cost of IP-SAN can be lowered.

摘要翻译： 在具有根据存储装置的逻辑卷的ID和主机的IP地址的分别由网络连接的存储装置，交换机和主机的计算机系统中，对于逻辑卷的访问控制配置相对于 存储设备将主机的IP地址转换为MAC地址，将主机的MAC地址转换为与主机连接的交换机的端口号，并将端口加入虚拟局域网（VLAN） 被执行为开关。 IP-SAN（因特网协议存储区域网）的安全对策所必需的逻辑单元号（LUN）掩码和VLAN配置可以由系统管理员共同管理，从而降低IP-SAN的运行成本。