JP2012226585A - Backup/restore method and device for shared disk device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a backup/restore system for increasing the security of a logical volume in a shared disk device.SOLUTION: There is disclosed an initiator installed in a backup host which is registered by a management host associated with a predetermined logical volume in a shared disk device. Only a backup/restore processing part whose use of the initiator registered by the management host is authenticated by an authentication part is configured to backup or restore the predetermined logical volume in the shared disk device.

Description

  The present invention relates to a backup / restore method and apparatus for a shared disk device for backing up or restoring a logical volume in the shared disk device.

  A method using an access management table is widely known as means for preventing unauthorized access to a logical volume on a shared disk device connected by iSCSI from a plurality of hosts.

  The access management table is created in units of iSCSI targets, and access rights can be set in units of logical volumes for each iSCSI initiator that can be connected to the iSCSI target.

  However, since an access right can be set only in the iSCSI target unit in the access management table, there is a problem that unauthorized access from another program using the same iSCSI target cannot be prevented.

  The following documents are related to the present invention.

JP 2002-351703 A JP 2003-256144 A JP 2003-296154 A JP 2005-128731 A Special table 2008-547123

  As shown in FIG. 1, in an IP-SAN (iSCSI) system in which business hosts 1 to 3, a shared disk device 4, and a backup host 5 are connected via a LAN 7, iSCSI targets 421 to 424 are defined for each business host. A method is generally used in which the number of iSCSI initiators that can be connected to each iSCSI target is limited to limit the hosts that can access the logical volume, and data destruction due to unauthorized access from other hosts is prevented.

  For example, in the example of FIG. 1, the logical volume (A) 441 can be accessed only from the iSCSI target A421, and can be connected to the iSCSI target A421 only from the iSCSI initiator A12 of the business host 1 and the iSCSI initiator Z52 of the backup host 5. It has become.

  However, in such a system, the backup restoration processing unit 54 and the business application unit 53 on the backup host 5 use the same iSCSI initiator Z52. A) When an unauthorized access is made to 441, there is a problem that the logical volume is illegally referenced and destroyed.

  It is an object of the present invention to provide a shared disk device backup / restore method and system capable of improving the security of a logical volume in a shared disk device.

  According to the first aspect of the present invention, an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host is used. A backup / restore system for a shared disk device, wherein only the backup / restore processing unit that is authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device. Provided.

  According to the second aspect of the present invention, an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host is used. Provided is a backup / restore method for a shared disk device, wherein only the backup / restore processing unit that is authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device Is done.

  According to a third aspect of the present invention, an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host; There is provided a backup host comprising: a backup / restore processing unit whose use of the initiator is authenticated by an authentication unit.

  According to a fourth aspect of the present invention, an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device, the initiator registered by the management host being There is provided a shared disk device characterized in that only the backup / restore processing unit authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device.

  According to the fifth aspect of the present invention, an initiator provided in a backup host registered by the management host associated with a predetermined logical volume in the shared disk device, the initiator registered by the management host being There is provided a management host characterized in that only the backup / restore processing unit that is authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device.

  According to a sixth aspect of the present invention, an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host; There is provided a program for causing a computer to function as a backup host, comprising: a backup / restore processing unit using the initiator authenticated by an authentication unit.

  According to a seventh aspect of the present invention, there is an initiator provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device, the initiator registered by the management host. To allow a computer to function as a shared disk device, wherein only the backup / restore processing unit that has been authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device. Programs are provided.

  According to the eighth aspect of the present invention, an initiator provided in a backup host registered by the management host associated with a predetermined logical volume in the shared disk device, the initiator registered by the management host being To allow a computer to function as a management host, wherein only the backup / restore processing unit that is authenticated by the authentication unit can back up or restore the predetermined logical volume in the shared disk device A program is provided.

  According to the present invention, it is possible to increase the security of the logical volume in the shared disk device.

It is a block diagram showing a configuration of a normal shared disk device backup / restore system. 1 is a block diagram illustrating a configuration of a backup / restore system for a shared disk device according to an embodiment of the present invention. FIG. FIG. 3 is a detailed view of a backup / restore request management table shown in FIG. 2. FIG. 3 is a detailed view of an iSCSI target management table shown in FIG. 2. 4 is a flowchart illustrating a backup / restore method for a shared disk device according to an embodiment of the present invention. 6 is a flowchart showing details of a backup host information registration step and a backup host information deletion step shown in FIG. 5. 6 is a flowchart showing details of an iSCSI session establishment step shown in FIG. 5. 6 is a flowchart showing details of the iSCSI session disconnection step shown in FIG. 5.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the drawings.

  In an IP-SAN (iSCSI) system in which a business host, backup host, and shared disk device are connected to an IP network, an iSCSI initiator dedicated to backup / restore processing is created on the backup host, and backup / restore is performed using that iSCSI initiator. By performing the processing, unauthorized access to the shared disk device from other applications on the backup host is eliminated.

  The solution according to the present invention will be described with reference to FIGS.

  The shared disk device 4 includes a NIC (Network Interface Card) 41, iSCSI targets 421 to 424, an iSCSI target management unit 425, an iSCSI target management table 426, a logical volume control unit 43, and logical volumes 441 to 444.

  The logical volumes accessible from the iSCSI targets 421 to 424 are set in the logical volume information of the iSCSI target management table 426.

  The management host information on the iSCSI target management table 426 is information related to the business host that manages the iSCSI target. The IP address of the business host and the iSCSI name of the iSCSI initiator used by the business host are registered. Has been.

  The backup host information on the target management table 426 is information related to the backup host 5 that performs backup / restore processing of the logical disk under the iSCSI target, and is used by the IP address of the backup host 5 and the backup host 5. The iSCSI name of the iSCSI initiator α 522 being registered is registered.

  Connection to each iSCSI target 421 to 424 is possible only from the management host information on the iSCSI target management unit 425 and the iSCSI initiator of the host stored in the backup host information.

  The backup host information on the iSCSI target management table 426 is not always registered. At the start of backup / restore processing, the backup host information is temporarily registered by a request from the business host that manages the iSCSI target. At the end of the restore process, it is deleted by a request from the business host that manages the iSCSI target.

  Only the management host registered on the iSCSI target management table 426 has the right to register / delete backup host information on the target management table 426.

  The backup host 5 has a program authentication unit 55, and the iSCSI initiator α 522 cannot be used by anyone other than the backup / restore processing unit 54. The program authentication unit 55 may be a dedicated authentication process using a process ID, for example, or may be a user authentication process that is standardly supported by the OS of the backup host 5.

  Thereby, unauthorized access to the logical volume (A) 441 from the business application 53 on the backup host 5 can be suppressed, and security of the logical volume (A) 441 is ensured.

  Next, the configuration of the embodiment of the present invention will be described in detail with reference to FIGS.

  2 to 4, the embodiment of the present invention includes business hosts 1 to 3, a shared disk device 4, a backup host 5, a backup device 6, and a LAN 7.

  The business hosts 1 to 3 include NICs 11, 21 and 31, iSCSI initiators 12, 22 and 32, business application units 13, 23 and 33, and backup / restore request units 14, 24 and 34, respectively.

  The backup / restore request units 14, 24, 34 request the iSCSI target management unit 425 of the shared disk device 4 to register / delete backup host information in the iSCSI target management table 426 via the LAN 7, Logical volume information for identifying logical volumes 441 to 444 managed by the own host, which is a program for requesting backup / restoration of logical volumes 441 to 444 to the backup / restore processing unit 54 of the backup host 5 , ISCSI target information for identifying iSCSI targets necessary for accessing these logical volumes 441 to 444, and a backup host for identifying the backup host 5 that performs a backup / restore request Backup restore request management table 14, 24, 34 for managing the distribution has a (see FIG. 3).

  The business application units 13, 23, and 33 are applications that perform business of the business hosts 1 to 3, and use logical volumes 441 to 444 managed by each business host. Although the term “business” is used in the sense that it is used for business of a company, the business application is generally an application program.

  The iSCSI initiators 12, 22, and 32 are used for the business application units 13, 23, and 33 to access the logical volumes 441 to 444.

  The NICs 11, 21, and 31 are network interface cards for TCP / IP connection between the business hosts 1 to 3 and the LAN 7.

  The shared disk device 4 includes a NIC 41, iSCSI targets 421 to 424, an iSCSI target management unit 425, an iSCSI target management table 426, a logical volume control unit 43 that controls access to the logical volume, and logical volumes 441 to 441. 444.

  The NIC 41 is a network interface card for TCP / IP connection between the shared disk device 4 and the LAN 7.

  The iSCSI targets 421 to 424 are used for accessing the logical volumes 441 to 444 through the iSCSI interface.

  The iSCSI target management unit 425 is a means for managing the iSCSI target management table 426. In response to a request from a management host that is a business host that manages the iSCSI targets 421 to 424, the iSCSI target management table 426 of backup host information. Register / delete.

  The iSCSI target management table 426 includes logical volume information for identifying logical volumes accessible to the iSCSI targets 421 to 424, management host information for identifying management hosts managing the iSCSI targets 421 to 424, Also, backup host information for identifying backup hosts that perform backup / restore of the logical volumes 441 to 444 using the iSCSI targets 421 to 424 is stored (see FIG. 4).

  The logical volume control unit 43 controls the logical volumes 441 to 411.

  The backup host 5 includes a NIC 51, iSCSI initiators 521 and 522, a program authentication unit 55, a business application 53, and a backup / restore processing unit 54.

  The NIC 51 is a network interface card for TCP / IP connection between the backup host 5 and the LAN 7.

  The iSCSI initiator 521 is used for the business application 53 to access the logical volume 444 through the iSCSI interface.

  The iSCSI initiator 522 is used by the backup / restore request unit 54 to access the logical volume 441 through the iSCSI interface.

  The program authentication unit 55 is a program for authenticating the programs to be used for the iSCSI initiators 521 and 522, respectively. In particular, the program authentication unit 55 permits the iSCSI initiator α522 to be used from the backup / restore processing unit 54. Use from programs other than the restore processing unit 54 (for example, the business application unit 53) is excluded.

  The backup / restore processing unit 54 receives backup / restore requests from the backup / restore request units 14, 24, 34, etc., and backs up the logical volumes 441 to 444 to the backup device 6 via the LAN 7. 6 is a program for restoring from logical volume 6 to logical volumes 441 to 444.

  The business application unit 53 is an application that performs business and uses the logical volume 444 to perform business.

  The backup device 6 is connected to the backup host 5 and is used as a backup device for the logical volumes 441 to 444.

  The business hosts 1 to 3, the shared disk device 4, and the backup host 5 are connected to each other via the LAN 7.

  Next, referring to the flowcharts of FIGS. 5 to 8, the logical volume 441 managed by the business host 1 is backed up or restored with the backup device 6 using the backup host 5 (hereinafter referred to as “backup”). “Restore”. The same applies to the present invention).

  FIG. 5 shows operations of the backup / restore request unit 14, the backup / restore processing unit 54, and the iSCSI target management unit 425 when the backup / restore process is executed.

  During the backup / restore processing of the logical volume (A) 441, the backup / restore request unit 14 of the business host 1 sends the iSCSI initiator used by the backup / restore processing unit 5 to the backup / restore processing unit 54 of the backup host 5. A request to return the iSCSI name of 522 is made (step A1).

  The backup / restore processing unit 54 of the backup host 5 returns the iSCSI name of the iSCSI initiator 522 to the backup / restore request unit 14 of the business host 1 (step A2).

  The backup / restore request unit 14 of the business host 1 registers the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 returned from the backup / restore processing unit 54 of the backup host 5 in the backup / restore request management table 141. (Step A3).

  The backup / restore request unit 14 of the business host 1 requests the iSCSI target management unit 425 of the shared disk device 4 to register the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 in the iSCSI target management table 426. (Step A4).

  The iSCSI target management unit 425 of the shared disk device 4 registers the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 received from the backup / restore request unit 14 of the business host 1 in the iSCSI target management table 426 (step A5). ).

  The backup / restore request unit 14 of the business host 1 requests the backup / restore processing unit 54 of the backup host 5 to start backup / restore processing (step A6).

  The iSCSI initiator α 522 of the backup host 5 establishes an iSCSI session with the iSCSI target A 421 of the shared disk device 4 (step A7).

  The backup / restore processing unit 54 of the backup host 5 executes backup / restore processing of the logical volume (A) 441 (step A8).

  The iSCSI initiator α 522 of the backup host 5 disconnects the iSCSI session with the iSCSI target A 421 of the shared disk device 4 (step A9).

  The backup / restore processing unit 54 of the backup host 5 reports the completion of the backup / restore processing to the backup / restore request unit 14 of the business host 1 (step A10).

  The backup / restore request unit 14 of the business host 1 requests the iSCSI target management unit 425 of the shared disk device 4 to delete the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 from the iSCSI target management table 426. (Step A11).

  The iSCSI target management unit 425 of the shared disk device 4 deletes the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 received from the backup / restore request unit 14 of the business host 1 from the iSCSI target management table 426 (step A12). ).

  The backup / restore request unit 14 of the business host 1 deletes the iSCSI name of the iSCSI initiator 522 and the IP address of the backup host 5 from the backup / restore request management table 141 (step A13).

  FIG. 6 shows the operation of the iSCSI target management unit 425.

  When the iSCSI target management unit 425 receives a request from the backup / restore request unit 14 of the business host 1 (step B1), it determines whether the iSCSI target specified in the request exists in the iSCSI target management table 426. (Step B2).

  If the specified iSCSI target does not exist in the iSCSI target management table 426, a rejection process is performed (step B8), and the request waiting state is returned.

  If the specified iSCSI target exists in the iSCSI target management table 426, it is determined whether or not the request is from a management host registered in the iSCSI target management table 426 (step B3).

  If it is not a request from the management host registered in the iSCSI target management table 426, reject processing is performed (step B8), and the request waiting state is returned.

  In the case of a request from the management host registered in the iSCSI target management table 426, it is determined whether the request is a backup host information registration request or a deletion request (step B4).

  In the case of a backup host information registration request, the backup host information is registered in the iSCSI target management table 426 (step B5). In the case of a deletion request, the backup host information is deleted from the iSCSI target management table 426 (step B6). ), Accept processing (step B7), and return to the request wait state.

  FIG. 7 shows the operation of the iSCSI session establishment process of the iSCSI targets 421 to 424.

  When receiving the iSCSI session establishment request from the iSCSI initiator (step C1), the iSCSI target determines whether the IP address of the requesting iSCSI initiator exists in the backup host information of the iSCSI target management table 426 (step C2). .

  If the IP address of the requesting iSCSI initiator does not exist in the backup host information of the iSCSI target management table 426, a rejection process is performed (step C8), and the request waiting state is returned.

  If the IP address of the requesting iSCSI initiator is present in the backup host information of the iSCSI target management table 426, it is determined whether the iSCSI name of the requesting iSCSI initiator is present in the backup host information of the iSCSI target management table 426. (Step C3).

  If the iSCSI name of the requesting iSCSI initiator does not exist in the backup host information in the iSCSI target management table 426, a rejection process is performed (step C6), and the request waiting state is returned.

  If the iSCSI name of the requesting iSCSI initiator exists in the backup host information of the iSCSI target management table 426, an iSCSI session is established (step C4), an acceptance process is performed (step C5), and the request waiting state is returned.

  FIG. 8 shows the operation of the iSCSI session disconnection processing of the iSCSI targets 421 to 424.

  When receiving the iSCSI session disconnection request from the iSCSI initiator (step D1), the iSCSI target determines whether an iSCSI session has been established with the requesting iSCSI initiator (step D2).

  If no iSCSI session has been established with the requesting iSCSI initiator, a rejection process is performed (step D4), and the request waiting state is returned.

  If an iSCSI session has been established with the requesting iSCSI initiator, the iSCSI session is disconnected (step D2), an acceptance process is performed (step D3), and the request waiting state is returned.

  The effect of this embodiment is that secure backup / restoration processing of a shared disk device connected by iSCSI can be realized.

  The reason is that in order to access a logical volume from a host other than the logical volume management host, it is necessary to open a session between the iSCSI initiator used by the program and the iSCSI target that can access the target logical volume. However, since it is guarded that only the iSCSI initiator used by the backup / restore processing unit cannot be connected to the target iSCSI target, the logical volume cannot be accessed from other than the backup / restore processing unit.

  Furthermore, since the iSCSI initiator information used by the backup / restore processing unit is registered in the iSCSI target management table only during the execution of the backup / restore processing, the backup / restore processing unit is included except during the execution of the backup / restore processing. All programs on the backup host cannot access the logical volume.

  The business host, the shared disk device, and the backup host can be realized by hardware, software, or a combination thereof. The backup / restore method performed by the business host, shared disk, and backup host can also be realized by hardware, software, or a combination thereof. Here, “realized by software” means realized by a computer reading and executing a program.

    The program can be stored and provided to a computer using various types of non-transitory computer readable media. Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD- R, CD-R / W, and semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM (random access memory)). The program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

  A part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
Backup / restore that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and has been authenticated by the authentication unit to use the initiator registered by the management host A backup / restore system for a shared disk device, wherein only the processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 2)
The backup / restore system according to appendix 1,
The backup / restore system, wherein the backup host and the initiator provided in the backup host are registered only when necessary by a request from the management host.

(Appendix 3)
The backup / restore system according to appendix 1 or 2,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore system, wherein the backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 4)
The backup / restore system according to appendix 3,
The target management unit is configured to register a management host including the backup / restore request unit and an initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator provided in the backup host are registered.

(Appendix 5)
The backup / restore system according to appendix 3 or 4,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. A featured backup / restore system.

(Appendix 6)
Backup / restore that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and has been authenticated by the authentication unit to use the initiator registered by the management host A backup / restoration method for a shared disk device, wherein only the processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 7)
The backup / restore method described in appendix 6,
The backup / restoration method, wherein the backup host and the initiator provided in the backup host are registered only when necessary by a request from the management host.

(Appendix 8)
The backup / restoration method according to appendix 6 or 7,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 9)
The backup / restore method described in appendix 8,
The target management unit is configured to register a management host including the backup / restore request unit and an initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 10)
The backup / restore method according to appendix 8 or 9,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. Characteristic backup / restore method.

(Appendix 11)
An initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host;
A backup / restore processing unit that is authenticated by the authentication unit to use the initiator;
A backup host comprising:

(Appendix 12)
The backup host described in appendix 11,
The backup host, wherein the backup host and the initiator provided in the backup host are registered only when necessary by a request from the management host.

(Appendix 13)
The backup host according to appendix 11 or 12,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup host, wherein the backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 14)
The backup host described in appendix 13,
The target management unit is configured to register a management host including the backup / restore request unit and an initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 15)
The backup host according to appendix 13 or 14,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. Feature backup host.

(Appendix 16)
A backup host that is provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A shared disk device, wherein only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 17)
The shared disk device according to appendix 16, wherein
The shared disk device, wherein the backup host and the initiator provided in the backup host are registered by a request from the management host only when necessary.

(Appendix 18)
The shared disk device according to appendix 16 or 17,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The shared disk device, wherein the backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 19)
The shared disk device according to appendix 18, wherein
The target management unit is configured to register the management host including the backup / restore request unit and the initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 20)
The shared disk device according to appendix 18 or 19,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. A characteristic shared disk device.

(Appendix 21)
A backup host that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A management host characterized in that only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 22)
The management host described in appendix 21,
A management host characterized in that the backup host and the initiator provided in the backup host are registered only when necessary by a request from the management host.

(Appendix 23)
The management host according to appendix 21 or 22,
The management host has a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The management host, wherein the backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 24)
The management host according to attachment 23,
The target management unit includes the management host including the backup / restore request unit and the initiator included in the management host registered in the shared disk device in association with the predetermined logical volume in the shared disk device. A management host that registers only the backup host and the initiator provided in the backup host.

(Appendix 25)
The management host according to appendix 23 or 24,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. Feature management host.

(Appendix 26)
An initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host;
A backup / restore processing unit that is authenticated by the authentication unit to use the initiator;
A program for causing a computer to function as a backup host.

(Appendix 27)
The program according to attachment 26, wherein
In the backup host,
The program characterized in that the backup host and the initiator provided in the backup host are registered by a request from the management host only when necessary.

(Appendix 28)
The program according to appendix 26 or 27,
In the backup host,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 29)
The program according to attachment 28, wherein
In the backup host,
The target management unit is configured to register a management host including the backup / restore request unit and an initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 30)
The program according to appendix 28 or 29,
In the backup host,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. A featured program.

(Appendix 31)
A backup host that is provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A program for causing a computer to function as a shared disk device, wherein only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 32)
The program according to attachment 31, wherein
In the shared disk device,
The program characterized in that the backup host and the initiator provided in the backup host are registered by a request from the management host only when necessary.

(Appendix 33)
The program according to appendix 31 or 32,
In the shared disk device,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 34)
The program according to attachment 33,
In the shared disk device,
The target management unit is configured to register the management host including the backup / restore request unit and the initiator included in the management host in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 35)
The program according to appendix 33 or 34,
In the shared disk device,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. A featured program.

(Appendix 36)
A backup host that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A program for causing a computer to function as a management host, wherein only a restore processing unit can back up or restore the predetermined logical volume in the shared disk device.

(Appendix 37)
The program according to attachment 36, wherein
In the management host,
The program characterized in that the backup host and the initiator included in the backup host are registered only when necessary by a request from the management host.

(Appendix 38)
The program according to appendix 36 or 37,
In the management host,
The management host has a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.

(Appendix 39)
The program according to attachment 38, wherein
In the management host,
The target management unit includes the management host including the backup / restore request unit and the initiator included in the management host registered in the shared disk device in association with the predetermined logical volume in the shared disk device. Only, the backup host and the initiator included in the backup host are registered.

(Appendix 40)
The program according to appendix 38 or 39,
In the management host,
The backup / restore processing unit performs the backup or restore only when the backup host and the initiator included in the backup host are registered in association with the predetermined logical volume in the shared disk device. A featured program.

1, 2, 3 Business host 4 Shared disk 5 Backup host 6 Backup device 14 Backup / restore request unit 54 Backup / restore processing unit 55 Program authentication unit 425 iSCSI target management unit 426 iSCSI target management table 441-444 Logical volume 522 iSCSI initiator

Claims (10)

  A backup / restore that is provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device and has been authenticated by the authentication unit to use the initiator registered by the management host A backup / restore system for a shared disk device, wherein only the processing unit can back up or restore the predetermined logical volume in the shared disk device. The backup / restore system according to claim 1,
The backup / restore system, wherein the backup host and the initiator provided in the backup host are registered only when necessary by a request from the management host. The backup / restore system according to claim 1 or 2,
The management host includes a backup / restore request unit,
The backup host includes the backup / restore processing unit,
The shared disk device includes a target management unit,
The target management unit registers the backup host and the initiator included in the backup host according to a request from the backup / restore request unit,
The backup / restore system, wherein the backup / restore processing unit performs the backup or restore in accordance with a request from the backup / restore request unit.   Backup / restore that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and has been authenticated by the authentication unit to use the initiator registered by the management host A backup / restoration method for a shared disk device, wherein only the processing unit can back up or restore the predetermined logical volume in the shared disk device. An initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host;
A backup / restore processing unit that is authenticated by the authentication unit to use the initiator;
A backup host comprising:   A backup host that is provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A shared disk device, wherein only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device.   A backup host that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A management host characterized in that only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device. An initiator provided in a backup host registered by a management host associated with a predetermined logical volume in a shared disk device, the initiator registered by the management host;
A backup / restore processing unit that is authenticated by the authentication unit to use the initiator;
A program for causing a computer to function as a backup host.   A backup host that is provided in a backup host registered by a management host associated with a predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A program for causing a computer to function as a shared disk device, wherein only the restore processing unit can back up or restore the predetermined logical volume in the shared disk device.   A backup host that is provided in the backup host registered by the management host associated with the predetermined logical volume in the shared disk device and that is authenticated by the authentication unit to use the initiator registered by the management host. A program for causing a computer to function as a management host, wherein only a restore processing unit can back up or restore the predetermined logical volume in the shared disk device.

Images