JP4877249B2 - Information processing system - Google Patents

Description

  The present invention relates to an information processing system for storing data stored in a storage device in another storage device.

  There is known an information processing system including a plurality of information processing apparatuses and a storage apparatus in which a plurality of storage areas (for example, logical volumes) for storing data generated by each information processing apparatus are formed. As one of this type of information processing system, in the information processing system described in Patent Document 1, the storage device stores a storage area and device specifying information for specifying the information processing device in association with each other. .

When the storage apparatus receives the read request information from the information processing apparatus, the storage area in which data is read by the read request information and the apparatus specifying information for specifying the information processing apparatus are stored in association with each other. When the data is stored, the data stored in the storage area is read out. Then, the storage device transmits the read data to the information processing device. According to this, it is possible to set an information processing apparatus capable of acquiring data stored in the storage area for each storage area.
JP 2001-14261 A

  By the way, it is conceivable to apply a backup device to the information processing system in order to store the same data as the data stored in the storage device in another storage device. The backup device includes a storage device. Further, the backup device executes read processing by transmitting the read request information to the storage device by executing the backup processing program and storing the received data in the storage device according to the transmitted read request information.

  In this case, the storage device stores the device specifying information for specifying the backup device and each of all the storage areas in association with each other so that the backup device can acquire the data stored in the storage device. To do. According to this, the backup device can acquire all the data stored in the storage device. Therefore, the backup device can execute backup processing.

  By the way, according to such a configuration, when the backup device executes a program other than the backup processing program, there is a possibility that the data stored in the storage device may be illegally acquired by the processing of the program. It was.

  For this reason, an object of the present invention is to provide an information processing system that can solve the above-described problem that “the data stored in the storage device cannot be properly acquired by the backup device”. .

In order to achieve such an object, an information processing system according to one aspect of the present invention provides:
An information processing device that generates data, a storage device that stores data generated by the information processing device, and read request information that includes the storage device and requests transmission of data stored in the storage device. And a backup device having a backup processing unit that executes a backup process for storing the data received in response to the transmitted read request information in the storage device.

Furthermore,
The backup processing unit is configured to transmit, together with the read request information, specific information representing the backup processing unit,
When the storage device receives the read request information from the backup device, the storage device determines whether or not to transmit data stored in the storage device to the backup device based on the specific information received from the backup device. Configured to do.

An access control program according to another embodiment of the present invention is
In the storage device that stores the data generated by the information processing device,
Read request information that includes a storage device and that requests transmission of data stored in the storage device is transmitted to the storage device, and received data is stored in the storage device according to the transmitted read request information. This is a program for realizing an access control means for transmitting data stored in the storage device to the backup device based on information transmitted from a backup device having a backup processing unit for executing backup processing.

Further, the access control means includes
When the storage device receives the read request information from the backup device, the storage device determines whether to transmit the data stored in the storage device to the backup device based on the specific information received from the backup device. Configured as follows.

In addition, an information processing method according to another aspect of the present invention includes:
A read request information requesting that a backup device including a storage device transmit data stored in a storage device that stores data generated by the information processing device is transmitted to the storage device. And a backup process step of executing a backup process for storing the received data in the storage device.

Furthermore,
The backup processing step includes a step of transmitting specific information representing the backup processing step together with the read request information,
When the storage device receives the read request information from the backup device, the storage device determines whether to transmit data stored in the storage device to the backup device based on the specific information received from the backup device. An access control step.

  According to the present invention configured as described above, the data stored in the storage apparatus can be appropriately acquired by the backup apparatus.

An information processing system according to one aspect of the present invention
An information processing device that generates data, a storage device that stores data generated by the information processing device, and read request information that includes the storage device and requests transmission of data stored in the storage device. And a backup device having a backup processing unit that executes a backup process for storing the data received in response to the transmitted read request information in the storage device.

Furthermore,
The backup processing unit is configured to transmit, together with the read request information, specific information representing the backup processing unit,
When the storage device receives the read request information from the backup device, the storage device determines whether or not to transmit data stored in the storage device to the backup device based on the specific information received from the backup device. Configured to do.

According to this, when the read request information is transmitted from the backup device by the backup processing unit, the data stored in the storage device can be transmitted to the backup device. On the other hand, when read request information is transmitted from the backup device by a function other than the backup processing unit in the backup device, data stored in the storage device can be prevented from being transmitted to the backup device.
In this way, the data stored in the storage device can be appropriately acquired by the backup device.

in this case,
The backup device has a restore processing unit that transmits write request information requesting to store data stored in the storage device to the storage device,
The restore processing unit is configured to transmit specific information representing the restore processing unit together with the write request information,
When the write request information is received from the backup device, the storage device is configured to determine whether to store data in the storage device based on the specific information received from the backup device Is preferred.

  According to this, when write request information is transmitted from the backup device by a function other than the restore processing unit of the backup device, it is possible to prevent new data from being stored in the storage device. As a result, it is possible to prevent the data stored in the storage device from being erased by being overwritten.

in this case,
The information processing apparatus is configured to transmit backup request information requesting execution of the backup processing to the backup processing unit,
The backup processing unit is preferably configured to transmit the read request information to the storage device in response to the backup request information.

in this case,
The information processing device is configured to generate key information and transmit the generated key information to each of the storage device and the backup processing unit,
The backup processing unit is configured to use the key information received from the information processing apparatus as the specific information,
The storage device
When the read request information is received from the backup device, the data stored in the storage device is stored when the key information received from the information processing device corresponds to the specific information received from the backup device. Preferably, it is determined to transmit to the backup device, and on the other hand, when the key information does not correspond to the specific information, the data is not transmitted to the backup device.

  According to this, key information generated by the information processing apparatus is used as the specific information. Accordingly, it is possible to further reduce the possibility that the same specific information as the key information received by the storage apparatus is transmitted by a function other than the backup processing unit in the backup apparatus. As a result, when read request information is transmitted from the backup device by a function other than the backup processing unit in the backup device, data stored in the storage device is more reliably prevented from being transmitted to the backup device. can do.

in this case,
The information processing apparatus is preferably configured to generate key information different from previously generated key information.

  According to this, it is possible to further reduce the possibility that the same specific information as the key information received by the storage apparatus is transmitted by a function other than the backup processing unit in the backup apparatus.

in this case,
The storage device
The key information received from the information processing device is stored, and the data stored in the storage device is transmitted to the backup device based on the stored key information and the specific information received from the backup device. It is preferable that the stored key information is erased after the execution of the backup process is completed.

  According to this, even when the specific information identical to the key information received by the storage device is transmitted by a function other than the backup processing unit of the backup device after the execution of the backup processing is completed, It is determined that the key information being used does not correspond to the specific information. As a result, when the read request information is transmitted from the backup device by a function other than the backup processing unit in the backup device, it is even more reliable that the storage device transmits the data stored in the storage device to the backup device. Can be prevented.

In this case, the information processing system
Including a plurality of the information processing devices,
The storage device has a plurality of storage areas associated with at least one of the plurality of information processing devices,
The storage device
When the read request information is received from the backup device, whether or not to transmit the data stored in the storage area to the backup device is received from the information processing device associated with the storage region Preferably, the determination is made based on the key information.

  For example, if the storage device is configured to determine whether or not data stored in an arbitrary storage area can be transmitted based on key information received from an arbitrary information processing device, all storage areas Whether or not to transmit the stored data can be determined by the key information transmitted by one information processing apparatus. Therefore, there is a relatively high possibility that data stored in all the storage areas is illegally acquired.

  On the other hand, according to the above configuration, whether or not data stored in an arbitrary storage area can be transmitted is determined only by the key information transmitted by the information processing apparatus associated with the storage area. As a result, it is possible to reduce the possibility that data stored in all the storage areas is illegally acquired.

An access control program according to another embodiment of the present invention is
In the storage device that stores the data generated by the information processing device,
Read request information that includes a storage device and that requests transmission of data stored in the storage device is transmitted to the storage device, and received data is stored in the storage device according to the transmitted read request information. This is a program for realizing an access control means for transmitting data stored in the storage device to the backup device based on information transmitted from a backup device having a backup processing unit for executing backup processing.

Further, the access control means includes
When the storage device receives the read request information from the backup device, the storage device determines whether to transmit the data stored in the storage device to the backup device based on the specific information received from the backup device. Configured as follows.

in this case,
The access control means is
When the storage device receives the read request information from the backup device, it is stored in the storage device when the key information received from the information processing device corresponds to the specific information received from the backup device. Preferably, the data is determined to be transmitted to the backup device, and when the key information and the specific information do not correspond to each other, the data is determined not to be transmitted to the backup device. It is.

In addition, an information processing method according to another aspect of the present invention includes:
A read request information requesting that a backup device including a storage device transmit data stored in a storage device that stores data generated by the information processing device is transmitted to the storage device. And a backup process step of executing a backup process for storing the received data in the storage device.

Furthermore,
The backup processing step includes a step of transmitting specific information representing the backup processing step together with the read request information,
When the storage device receives the read request information from the backup device, the storage device determines whether to transmit data stored in the storage device to the backup device based on the specific information received from the backup device. An access control step.

In this case, the information processing method is
The information processing apparatus includes a step of generating key information and transmitting the generated key information to each of the storage apparatus and the backup processing unit,
The backup processing step is configured to use key information received from the information processing apparatus as the specific information,
The access control process
When the storage device receives the read request information from the backup device, the storage device stores the key information received from the information processing device and the specific information received from the backup device corresponding to each other. Configured to determine that the stored data is to be transmitted to the backup device, and on the other hand, when the key information does not correspond to the specific information, the data is not transmitted to the backup device. Is preferred.

  Even the invention of the access control program or the information processing method having the configuration described above can achieve the above-described object of the present invention because it has the same operation as the information processing system.

  Hereinafter, embodiments of an information processing system, an access control program, and an information processing method according to the present invention will be described with reference to FIGS.

<Embodiment>
As shown in FIG. 1, the information processing system according to the embodiment includes a plurality of business hosts (information processing devices) 1 to 3, a shared disk device (storage device) 4, a backup host (backup device) 5, A backup storage device 6 and a fiber channel fabric 7 are included.

  The fiber channel fabric 7 includes a fiber channel switch. Each of the business hosts 1 to 3, the shared disk device 4, and the backup host 5 is connected to the fiber channel fabric 7. With such a configuration, the business hosts 1 to 3, the shared disk device 4, and the backup host 5 can communicate with each other via the fiber channel fabric 7. That is, it can be said that the business hosts 1 to 3, the shared disk device 4, and the backup host 5 are connected to a SAN (Storage Area Network).

  Further, the business hosts 1 to 3 and the backup host 5 are connected to a network (in this example, a local area network) 8. Accordingly, the business hosts 1 to 3 and the backup host 5 can communicate with each other via the network 8.

  Each of the business hosts 1 to 3 includes a CPU (Central Processing Unit) and a storage device (in this example, a RAM (Random Access Memory) and a hard disk device (HDD (Hard Disk Drive))) that are not shown. Each of the business hosts 1 to 3 realizes functions to be described later when the CPU executes a program stored in the storage device.

  In this specification, the business host 1 is also expressed as “host A”, the business host 2 is also expressed as “host B”, and the business host 3 is also expressed as “host Y”.

The shared disk device 4 is a disk array device including a plurality of HDDs (not shown). The shared disk device 4 is connected to a management device (not shown). In the shared disk device 4, a plurality of logical volumes (storage areas) 431 to 433 are formed.
In this specification, the logical volume 431 is also expressed as “VA”, the logical volume 432 is also expressed as “VB”, and the logical volume 433 is also expressed as “VY”.

  Further, the shared disk device 4 includes an adapter (not shown) including a CPU, a RAM, and the like. The shared disk device 4 realizes functions to be described later when the CPU executes a program (firmware) stored in the RAM.

The backup host 5 includes a CPU and a storage device that are not shown. The backup host 5 realizes functions to be described later when the CPU executes a program stored in the storage device. Further, a backup storage device 6 is connected to the backup host 5. The backup storage device 6 is an HDD in this example.
In this specification, the backup host 5 is also expressed as “host Z”.

Next, the functions of the business hosts 1 to 3 realized by executing the program will be described.
The functions of the business hosts 1 to 3 include backup / restore request units 10, 20, and 30 and business application processing units (business AP units) 11, 21, and 31.

  The backup / restore request units 10, 20, and 30 generate a random number based on information representing time, and generate an access key (key information) based on the generated random number. As a result, the backup / restore request units 10, 20, and 30 generate an access key different from the previously generated access key. Further, the backup / restore request units 10, 20, 30 transmit key setting request information to the shared disk device 4.

  Here, the key setting request information is information including an access key and logical volume specifying information for specifying a logical volume, and is information that requests to store the access key and the logical volume specifying information in association with each other. It is.

  Further, the backup / restore request units 10, 20, 30 transmit backup request information or restore request information and an access key to the backup host 5 via the network 8.

  Here, the backup request information is information including logical volume specifying information, and the data stored in the shared disk device 4 in the logical volume specified by the logical volume specifying information is stored in the backup storage device 6. This is information requesting (execute backup processing).

  The restore request information is information including logical volume specifying information, and data stored in the backup storage device 6 is stored in the shared disk device 4 in a logical volume specified by the logical volume specifying information ( Information for requesting execution of restore processing.

  Further, the backup / restore request units 10, 20, and 30 each include an access key including at least one set of the logical volume specifying information for specifying the logical volume managed by the own host and the access key shown in FIG. Management tables 101, 201, and 301 are stored in a storage device.

  In this example, the logical volume specifying information for specifying the logical volume VA is expressed as “VA”, the logical volume specifying information for specifying the logical volume VB is expressed as “VB”, and the logical volume specifying the logical volume VC. The specific information is expressed as “VC”, and the logical volume specifying information for specifying the logical volume VY is expressed as “VY”.

Further, the host specifying information for specifying the host A is expressed as “HA”, the host specifying information for specifying the host B is expressed as “HB”, and the host specifying information for specifying the host Y is expressed as “HY”. .
The access key KA is written as “KA”.

  Further, when the access key is generated, the backup / restore request unit 10, 20, 30 updates the access key management tables 101, 201, 301 stored in the storage device with the generated access key.

  Further, when receiving backup completion information or restore completion information from the backup host 5, the backup / restore request units 10, 20, 30 delete the access key from the access key management tables 101, 201, 301 and request a key release request. Information is transmitted to the shared disk device 4.

  Here, the key release request information is information including the logical volume specifying information, and is information requesting to delete the access key stored in association with the logical volume specifying information.

The business application processing units 11, 21 and 31 generate data (for example, customer information).
In addition, the business application processing units 11, 21, 31 transmit write request information to the shared disk device 4. Here, the write request information includes the generated data and logical volume specifying information for specifying the logical volume managed by the own host, and stores the data in the logical volume managed by the own host. Is information requesting.

Further, the business application processing units 11, 21, 31 request to transmit data stored in the shared disk device 4 using the logical volume, including the logical volume specifying information for specifying the logical volume managed by the host. The read request information to be transmitted is transmitted to the shared disk device 4.
That is, the business application processing units 11, 21, 31 use logical volumes managed by the own host.

Next, functions of the shared disk device 4 realized by executing the program will be described.
The functions of the shared disk device 4 include an input / output control unit 40, an access control unit 41, and a logical volume control unit 42.
The input / output control unit 40 controls the fiber channel fabric 7.

The access control unit 41 includes a logical volume access including a plurality of sets (the same number as the number of logical volumes) including the logical volume specifying information, the host specifying information for specifying the business host, and the access key shown in FIG. A control table 411 is stored in the RAM.
That is, each logical volume is associated with one of the business hosts 1 to 3 and the backup host 5.

  Note that the logical volume specifying information and the host specifying information constituting the set included in the logical volume access control table 411 are set in advance by the administrator inputting information using the management apparatus.

  In this example, the host identification information is Node_Name defined in the fiber channel interface standardized by the ANSI (American National Standards Institute) X3T11 subcommittee.

The access control unit 41 includes an access key update unit 412 and an access determination unit 413.
When receiving the key setting request information, the access key update unit 412 includes logical volume specifying information included in the key setting request information and host specifying information for specifying the host that has transmitted the key setting request information. When the included set is included in the logical volume access control table 411, the access key constituting the set is updated to the access key included in the key setting request information. That is, the access key update unit 412 stores the received access key in the RAM. In addition, only the access key transmitted from the host specified by the host specifying information associated with the logical volume specifying information in the logical volume access control table 411 is stored in association with the logical volume specifying information. I can say that.

  When receiving the key release request information, the access key update unit 412 receives the logical volume specifying information included in the key release request information and the host specifying information for specifying the host that has transmitted the key release request information. When the set to be included is included in the logical volume access control table 411, the access key constituting the set is deleted (set to preset information (in this example, information indicating “not set”)).

  When the access determination unit 413 receives the read request information, the access determination unit 413 transmits the data stored in the logical volume specified by the logical volume specifying information included in the read request information to the host that has transmitted the read request information. Decide whether to send.

  Specifically, when the logical volume access control table 411 includes a set including the logical volume specifying information and the host specifying information for specifying the host, the access determination unit 413 stores the data as the host. Decide to send to.

  In addition, when the set is not included in the logical volume access control table 411, the access determination unit 413 acquires an access key constituting the set together with the logical volume specifying information. Then, the access determination unit 413 determines to transmit the data to the host when the access key received together with the read request information and the acquired access key correspond (in this example, match).

  On the other hand, the access determination unit 413 determines not to transmit the data to the host when the received access key does not correspond to the acquired access key or when the access key is not received together with the read request information. To do.

  When the access determination unit 413 determines to transmit the data to the host, the access control unit 41 reads the data and transmits the read data to the host.

  Similarly, when receiving the write request information, the access determination unit 413 stores the data included in the write request information in the logical volume specified by the logical volume specifying information included in the write request information. Decide whether or not to

  Specifically, the access determination unit 413 stores the data when the logical volume access control table 411 includes a set including the logical volume specifying information and the host specifying information for specifying the host. And decide.

  In addition, when the set is not included in the logical volume access control table 411, the access determination unit 413 acquires an access key constituting the set together with the logical volume specifying information. Then, the access determination unit 413 determines to store the data when the access key received together with the write request information matches the acquired access key.

  On the other hand, the access determination unit 413 determines not to store the data when the received access key does not correspond to the acquired access key or when the access key is not received together with the write request information.

If the access determination unit 413 determines to store the data, the access control unit 41 stores the data in the logical volume.
The logical volume control unit 42 controls the logical volumes 431 to 433.

Next, functions of the backup host 5 realized by executing the program will be described.
The functions of the backup host 5 include a backup / restore processing unit (backup processing unit and restore processing unit) 50 and a business application processing unit 51.

  When the backup / restore processing unit 50 receives the backup request information and the access key from the backup / restore request unit 10, 20, 30, it receives the read request information including the logical volume specifying information included in the backup request information, and The access key is transmitted to the shared disk device 4. It can be said that the access key is specific information indicating the backup / restore processing unit 50.

  As a result, the shared disk device 4 reads the data stored in the logical volume specifying information based on the received read request information, and transmits the read data to the backup / restore processing unit 50.

  The backup / restore processing unit 50 receives data from the shared disk device 4 according to the transmitted read request information, and stores the received data in the backup storage device 6. In this way, the backup / restore processing unit 50 executes the backup process. Further, when the execution of the backup process is completed (terminated), the backup / restore processing unit 50 transmits to the backup / restore request unit 10, 20, 30 of the request source (source of backup request information) via the network 8. , Send backup completion information.

  On the other hand, when the backup / restore processing unit 50 receives the restore request information and the access key from the backup / restore request unit 10, 20, 30, the backup / restore processing unit 50 stores the logical volume specifying information included in the restore request information and the backup storage device 6. The write request information including the stored data and the received access key are transmitted to the shared disk device 4.

As a result, the shared disk device 4 stores the data in the logical volume specified by the logical volume specifying information based on the received write request information.
In this way, the backup / restore processing unit 50 executes the restore process. Further, when the execution of the restore process is completed (terminated), the backup / restore processing unit 50 transmits restore completion information to the requesting backup / restore request units 10, 20, and 30 via the network 8.

  The business application processing unit 51 has the same functions as the business application processing units 11, 21, and 31.

  Next, referring to FIGS. 4 to 7, the business host 1 (host A) uses the backup host 5 to back up the data stored in the shared disk device 4 in the logical volume 431 (VA). The operation of the information processing system when storing (backing up) in the storage device 6 will be described.

  The CPUs of the business hosts 1 to 3 execute the backup request program shown in the flowchart of FIG. 4 when instruction information for instructing execution of the backup processing is input by the user.

  Now, the description will be continued assuming that the user inputs instruction information for instructing execution of backup processing for backing up data stored in the logical volume 431 (VA) to the business host 1.

  In this case, the CPU of the business host 1 generates an access key KA in step A1. Next, in step A2, the CPU updates the access key management table 101 with the generated access key KA (registers the generated access key KA in the access key management table 101).

Next, in step A3, the CPU shares key setting request information including the generated access key KA and logical volume specifying information (VA) specifying the logical volume 431 via the fiber channel fabric 7. Transmit to the disk device 4.
As a result, the shared disk device 4 registers the access key KA in the logical volume access control table 411 as will be described later.

Next, in step A4, the CPU sends the access key KA and the backup request information including the logical volume specifying information (VA) for specifying the logical volume 431 via the network 8 to the backup host 5 To the restore processing unit 50).
Next, in step A5, the CPU waits until receiving backup completion information.

  On the other hand, the CPU of the backup host 5 executes the backup processing program shown by the flowchart in FIG. Note that the execution of the processing of the program in FIG. 5 corresponds to the achievement of the function of the backup processing step.

  The CPU of the backup host 5 stands by until it receives backup request information in step B1.

In this state, the CPU of the backup host 5 receives backup request information from the business host 1. Accordingly, the CPU determines “Yes”, proceeds to step B2, and executes the backup process.
Specifically, the CPU transmits the read request information including the logical volume specifying information (VA) included in the received backup request information and the received access key KA to the shared disk device 4.

Thereby, as will be described later, the shared disk device 4 reads the data stored in the logical volume 431 and transmits the read data to the backup host 5.
Next, the CPU of the backup host 5 receives the data and stores the received data in the backup storage device 6. In this way, the backup process is executed.

  In step B3, the CPU transmits backup completion information to the business host 1 via the network 8. Next, the CPU returns to step B1 and repeatedly executes the processes of steps B1 to B3.

  In this state, the business host 1 receives backup completion information. Therefore, the CPU of the business host 1 determines “Yes” in Step A5 and proceeds to Step A6. Then, the CPU transmits key release request information including logical volume specifying information (VA) to the shared disk device 4.

  As a result, as will be described later, the shared disk device 4 deletes (deletes) the access keys that make up the set together with the logical volume specifying information (VA) from the logical volume access control table 411. That is, after the execution of the backup process is completed, the access key stored in the RAM of the adapter of the shared disk device 4 is deleted.

Next, in step A 7, the CPU of the business host 1 deletes the access key that constitutes the set together with the logical volume specifying information (VA) from the access key management table 101.
Then, the CPU ends the execution of this program.

  Note that the CPU of the business host 1 executes a restore request program similar to the backup request program of FIG. 4 in order to request execution of restore processing. Further, the CPU of the backup host 5 executes a restore process program similar to the backup process program of FIG. 5 in order to execute the restore process.

  On the other hand, the CPU of the adapter of the shared disk device 4 is configured to execute the access key update program shown by the flowchart in FIG. Therefore, this CPU waits until it receives key setting request information or key release request information in step C1.

  As described above, the CPU of the business host 1 transmits key setting request information including the access key KA and the logical volume specifying information (VA) to the shared disk device 4 (step A3 in FIG. 4). explain.

  In this case, the shared disk device 4 receives the key setting request information. Accordingly, the CPU of the adapter of the shared disk device 4 determines “Yes” in Step C1 and proceeds to Step C2.

  Then, the CPU acquires host specifying information (Node_Name in this example) that specifies the host (here, the business host 1) that has transmitted the received key setting request information. Further, the CPU includes a set including the acquired host specifying information (HA) and the logical volume specifying information (VA) included in the received key setting request information in the logical volume access control table 411 (existence). Whether or not).

  Now, the description will be continued assuming that the logical volume access control table 411 includes the set shown in FIG. That is, the logical volume access control table 411 includes a set of logical volume specifying information (VA), host specifying information (HA), and “unset” as an access key.

  Accordingly, since the logical volume access control table 411 includes a set including the logical volume specifying information (VA) and the host specifying information (HA), the CPU determines “Yes” and proceeds to step C3. .

Next, the CPU determines whether or not key setting request information has been received. In this state, the CPU determines “Yes” and proceeds to step C4.
Then, the CPU updates (sets) the access key constituting the above set to the access key KA included in the key setting request information. As a result, the logical volume access control table 411 is in the state shown in FIG.

  Next, in step C5, the CPU performs an acceptance process. In this example, the acceptance process is a process of transmitting information indicating that the setting or deletion of the access key is completed to the host that has transmitted the key setting request information or the key release request information.

  Then, the CPU returns to step C1 and repeatedly executes the processes of steps C1 to C7.

  Next, as described above, a case will be described in which the CPU of the business host 1 transmits key release request information including logical volume specifying information (VA) to the shared disk device 4 (step A6 in FIG. 4).

In this case, when the CPU proceeds to step C3, the CPU determines “No” and proceeds to step C6.
Then, the CPU configures a set including logical volume specifying information (VA) included in the received key release request information and host specifying information (HA) specifying the host that has transmitted the key release request information. The access key KA is deleted from the logical volume access control table 411. As a result, the logical volume access control table 411 is in the state shown in FIG.

  In addition, a set including host specifying information for specifying a host that has transmitted key setting request information or key release request information and logical volume specifying information included in the received key setting request information or key release request information is a logical volume. If it is not included in the access control table 411 (for example, if key setting request information including logical volume specifying information (VA) is received from the business host 2), the CPU makes a “No” determination at step C2. Proceeding to step C7, reject processing is performed.

  In this example, the reject process is a process of transmitting information indicating that the access key cannot be set or deleted to the host that has transmitted the key setting request information or the key release request information.

  On the other hand, the CPU of the adapter of the shared disk device 4 executes the access determination program (access control program) shown by the flowchart in FIG. Note that the execution of the processing of the program in FIG. 7 corresponds to the achievement of the functions of the access control step and the access control means.

  This CPU waits until it receives the read request information or the write request information in step D1.

Assume that the logical volume access control table 411 is in the state shown in FIG.
Further, in this case, a case will be described in which the business host 1 transmits access request information (read request information or write request information) including logical volume specifying information (VA) to the shared disk device 4.

  In this case, the CPU of the adapter of the shared disk device 4 determines “Yes” in step D1, and proceeds to step D2.

  Then, the CPU acquires host specifying information (in this example, Node_Name) that specifies the host (here, the business host 1) that has transmitted the received access request information. Further, the CPU determines whether or not a set including the acquired host specifying information (HA) and the logical volume specifying information (VA) included in the received access request information is included in the logical volume access control table 411. judge.

According to the above assumption, the CPU determines “Yes”, proceeds to step D3, and performs an access permission process.
In this example, when the access request information is read request information, the access permission process reads data stored in the logical volume specified by the logical volume specifying information, and reads the read data to the request source (read request information Transmission source) to the host. Further, the access permission process is a process of storing data included in the write request information in the logical volume specified by the logical volume specifying information when the access request information is the write request information.

  Then, the CPU returns to step D1, and repeatedly executes the processing of step D1 to step D6.

Next, a case where the backup host 5 transmits read request information including logical volume specifying information (VA) and an access key KA to the shared disk device 4 (step B2 in FIG. 5) will be described.
In this case, the CPU of the adapter of the shared disk device 4 determines “No” in step D2, and proceeds to step D4.

The CPU determines whether an access key is received together with access request information.
In this state, the CPU receives the access key KA. Therefore, the CPU determines “Yes” and proceeds to step D5.

  Then, the CPU acquires from the logical volume access control table 411 an access key KA that constitutes a set together with the logical volume specifying information (VA) included in the access request information. Further, the CPU determines whether or not the access key KA received together with the access request information matches the acquired access key KA.

  In this state, the received access key KA matches the acquired access key KA. Therefore, the CPU determines “Yes” and proceeds to step D3.

On the other hand, when the shared disk device 4 receives only the access request information from the backup host 5 (ie, does not receive the access key), the CPU makes a “No” determination at step D4 to proceed to step D6. Then, the CPU performs an access prohibition process. In this example, the access prohibition process is a process of transmitting information indicating that access to the logical volume is prohibited to the host of the request source (access request information transmission source).
In other words, data stored in the logical volume is prevented from being transmitted to the backup host 5. It is also possible to prevent new data from being stored in the logical volume.

  Further, for example, when the backup host 5 transmits access request information including logical volume specifying information (VA) and an access key KB different from the access key KA to the shared disk device 4, the CPU of the adapter of the shared disk device 4 Determines “No” in step D5 and proceeds to step D6.

As described above, according to the embodiment of the information processing system of the present invention, when the read request information is transmitted from the backup host 5 by the backup / restore processing unit 50, it is stored in the shared disk device 4. Data can be transmitted to the backup host 5. On the other hand, when read request information is transmitted from the backup host 5 by a function other than the backup / restore processing unit 50 in the backup host 5, the data stored in the shared disk device 4 is transmitted to the backup host 5. This can be prevented.
Thus, the data stored in the shared disk device 4 can be appropriately acquired by the backup host 5.

  In the above embodiment, whether to transmit the data stored in the shared disk device 4 to the backup host 5 is determined based on the access keys generated by the business hosts 1 to 3. Therefore, there is a possibility that the same specific information as the access key (specific information) received by the shared disk device 4 from the business hosts 1 to 3 is transmitted by a function other than the backup / restore processing unit 50 in the backup host 5. This can be further reduced.

  As a result, when read request information is transmitted from the backup host 5 by a function other than the backup / restore processing unit 50 in the backup host 5, the data stored in the shared disk device 4 is transmitted to the backup host 5. This can be prevented more reliably.

  In the above embodiment, the business hosts 1 to 3 generate an access key different from the previously generated access key. According to this, the possibility that the same access key as the access key received by the shared disk device 4 is transmitted by a function other than the backup / restore processing unit 50 in the backup host 5 can be further reduced. .

  Further, in the above embodiment, the access key is deleted from the logical volume access control table 411 after the execution of the backup process is completed. According to this, after the execution of the backup process is completed, the same access key as the access key received by the shared disk device 4 is transmitted by a function other than the backup / restore processing unit 50 in the backup host 5 Even so, it is determined that the access key in the logical volume access control table 411 does not correspond to the transmitted access key.

  As a result, when read request information is transmitted from the backup host 5 by a function other than the backup / restore processing unit 50 in the backup host 5, the shared disk device 4 backs up the data stored in the shared disk device 4. Transmission to the host 5 can be prevented more reliably.

  In the above embodiment, whether or not data stored in an arbitrary logical volume (storage area) can be transmitted is determined by the host associated with the logical volume (that is, the logical volume access control table 411). It is determined only by the access key transmitted by the logical volume specifying information specifying the logical volume and the host specified by the host specifying information constituting the set). As a result, it is possible to reduce the possibility that data stored in all logical volumes is illegally acquired.

  Further, the above embodiment is configured to operate in the same manner as in the case of performing backup processing when performing restoration processing. According to this, when write request information is transmitted from the backup host 5 by a function other than the backup / restore processing unit 50 in the backup host 5, new data is stored in the shared disk device 4. Can be prevented. As a result, it is possible to prevent the data stored in the shared disk device 4 from being erased by being overwritten.

  In addition, this invention is not limited to the said embodiment, A various modification can be employ | adopted within the scope of the present invention. For example, in the above-described embodiment, the communication between the business hosts 1 to 3 and the backup host 5 is configured to be performed via the network 8, but is configured to be performed via the fiber channel fabric 7. May be.

  In the above embodiment, the shared disk device 4 includes a plurality of HDDs as a storage medium. However, the shared disk device 4 may include only one HDD, and other storage media such as a magnetic tape may be used instead of the HDD. You may have.

  Furthermore, in the above embodiment, the backup storage device 6 is an HDD, but it may be another storage medium such as a magnetic tape. Further, the backup storage device 6 may be an information processing device including a CPU or the like.

  The present invention is applicable to a backup system that stores data stored in a storage device connected to a SAN in another storage device.

It is a figure showing the schematic structure of the information processing system which concerns on embodiment of this invention. FIG. 2 is a diagram showing an access key management table stored in the storage device of the business host shown in FIG. 1. FIG. 2 is a diagram showing a logical volume access control table stored in a RAM of an adapter of the shared disk device shown in FIG. 1. 3 is a flowchart showing a backup request program executed by the CPU of the business host shown in FIG. 3 is a flowchart showing a backup processing program executed by the CPU of the backup host shown in FIG. 1. 3 is a flowchart showing an access key update program executed by the CPU of the adapter of the shared disk device shown in FIG. 3 is a flowchart showing an access determination program executed by the CPU of the adapter of the shared disk device shown in FIG. FIG. 2 is a diagram showing a logical volume access control table stored in a RAM of an adapter of the shared disk device shown in FIG. 1.

Explanation of symbols

1-3 Business host 4 Shared disk device 5 Backup host 6 Backup storage device 7 Fiber channel fabric 8 Network 10, 20, 30 Backup / restore request unit 101, 201, 203 Access key management table 11, 21, 31 Application processing unit 40 Input / output control unit 41 Access control unit 411 Logical volume access control table 412 Access key update unit 413 Access determination unit 42 Logical volume control units 431 to 433 Logical volume 50 Backup / restore processing unit 51 Business application processing unit

Claims (8)

An information processing device that generates data, a storage device that stores the data generated by the information processing device, and read request information that includes the storage device and requests transmission of data stored in the storage device. A backup device having a backup processing unit that executes a backup process for storing the data received in response to the read request information transmitted to the storage device and stored in the storage device,
The backup processing unit is configured to transmit specific information representing the backup processing unit together with the read request information,
The information processing device is configured to generate key information and transmit the generated key information to each of the storage device and the backup processing unit,
The backup processing unit is configured to use key information received from the information processing apparatus as the specific information,
The storage device
When the read request information is received from the backup device, the data stored in the storage device when the key information received from the information processing device corresponds to the specific information received from the backup device is stored. An information processing system configured to determine to transmit to the backup device, and to determine not to transmit the data to the backup device when the key information does not correspond to the specific information . The information processing system according to claim 1,
The backup device includes a restore processing unit that transmits write request information for requesting to store data stored in the storage device to the storage device;
The restore processing unit is configured to transmit specific information representing the restore processing unit together with the write request information.
The restore processing unit is configured to use key information received from the information processing apparatus as the specific information,
The storage device
When the write request information is received from the backup device, when the key information received from the information processing device corresponds to the specific information received from the backup device, data is stored in the storage device On the other hand, an information processing system configured to determine not to store the data in the storage device when the key information does not correspond to the specific information . The information processing system according to claim 1 or 2 ,
The information processing apparatus is configured to transmit backup request information requesting execution of the backup processing to the backup processing unit,
The information processing system configured to transmit the read request information to the storage device in accordance with the backup request information. The information processing system according to claim 3 ,
The information processing apparatus is configured to generate key information different from previously generated key information. An information processing system according to claim 3 or claim 4 ,
The storage device
The key information received from the information processing apparatus is stored, and the data stored in the storage apparatus when the stored key information corresponds to the specific information received from the backup apparatus is backed up. It is determined to transmit to the apparatus, and on the other hand, when the key information and the specific information do not correspond to each other, it is configured to determine that the data is not transmitted to the backup apparatus , and the execution of the backup process is completed And an information processing system configured to erase the stored key information. An information processing system according to any one of claims 1 to 5 ,
Including a plurality of the information processing devices;
The storage device has a plurality of storage areas associated with at least one of the plurality of information processing devices,
The storage device
When the read request information is received from the backup device, the key information received from the information processing device associated with the storage area corresponds to the specific information received from the backup device. The data stored in the area is determined to be transmitted to the backup device. On the other hand, when the key information does not correspond to the specific information, the data is determined not to be transmitted to the backup device. Information processing system. In the storage device that stores the data generated by the information processing device,
Read request information including a storage device and requesting transmission of data stored in the storage device is transmitted to the storage device, and received data is stored in the storage device according to the read request information transmitted. An access control program for realizing an access control means for transmitting data stored in the storage device to the backup device based on information transmitted from a backup device having a backup processing unit for executing backup processing. And
The access control means includes
When the storage device receives the read request information from the backup device, it is stored in the storage device when the key information received from the information processing device corresponds to the specific information received from the backup device. An access control program configured to determine that the data to be transmitted to the backup device is determined, and when the key information and the specific information do not correspond to each other, the data is not transmitted to the backup device. . A read request information requesting that a backup device including a storage device transmit data stored in a storage device that stores data generated by the information processing device is transmitted to the storage device. An information processing method including a backup processing step of executing a backup processing for storing data received in response to the storage device,
The backup processing step includes a step of transmitting specific information representing the backup processing step together with the read request information,
The information processing method includes:
The information processing device includes generating key information and transmitting the generated key information to each of the storage device and the backup processing unit;
The backup processing step is configured to use key information received from the information processing apparatus as the specific information,
The information processing method includes:
When the storage device receives the read request information from the backup device, the storage device stores the key information received from the information processing device and the specific information received from the backup device corresponding to each other. Information processing including an access control step for determining to transmit the stored data to the backup device, and determining not to transmit the data to the backup device when the key information does not correspond to the specific information Method.

Images