WO2010142634A1

WO2010142634A1 - Data verification using checksum sidefile

Info

Publication number: WO2010142634A1
Application number: PCT/EP2010/057904
Authority: WO
Inventors: Liran Zvibel
Original assignee: IBM United Kingdom Ltd; International Business Machines Corp
Current assignee: IBM United Kingdom Ltd; International Business Machines Corp
Priority date: 2009-06-10
Filing date: 2010-06-07
Publication date: 2010-12-16
Anticipated expiration: 2011-12-10
Also published as: US20100318887A1; TW201115326A; US8352835B2

Abstract

Exemplary method, system, and computer program product embodiments for data verification in a storage system are provided. A read of data is asynchronously submitted to nonvolatile storage media. A read of a first checksum signature is submitted to a solid state, sidefϊle memory location of a storage controller in the storage subsystem. The first checksum signature is representative of the data previously written to the nonvolatile storage media. A second checksum signature is calculated from the read of the data. The first and second checksum signatures are compared. If a match is not determined, a critical event is reported.

Description

DATA VERIFICATION USING CHECKSUM SIDEFILE

BACKGROUND OF THE INVENTION

Field of the Invention

The present invention relates in general to computers, and more particularly to a method, system, and computer program product for facilitating data verification using a checksum in conjunction with a sidefile in data processing computer storage subsystems.

Description of the Related Art

A checksum or has sum is a fixed-size datum computed from an arbitrary block of digital data for the purpose of detecting accidental errors that may have been introduced during its transmission or storage. The integrity of the data may be checked at any time by recomputing the checksum and comparing it with the stored checksum. If the checksums do not match, the data is determined to be altered.

In data processing computer storage subsystems, a storage controller often computes a checksum signature such as a Cyclic Redundancy Check (CRC). A CRC is an error- detecting code. Its computation resembles a long division operation in which the quotient is discarded and the remainder becomes the result, with the important distinction that the arithmetic used is the carry-less arithmetic of a finite field. The length of the remainder is always less than or equal to the length of the divisor, which therefore determines how long the result can be. The definition of a particular CRC specifies the divisor to be used, among other things.

SUMMARY OF THE INVENTION

In a first aspect, the present invention provides method for data verification in a storage subsystem by at least one processor device in communication with at least one memory device, the method comprising: asynchronous Iy submitting a read of data to nonvolatile storage media; asynchronously submitting a read of a first checksum signature to a solid state, sidefile memory location of a storage controller in the storage subsystem, wherein the first checksum signature is representative of the data previously written to the nonvolatile storage media; calculating a second checksum signature from the read of the data; and comparing the first and second checksum signatures, wherein if a match is not determined, reporting a critical event.

Preferably, asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to at least a portion of a solid state disk (SSD) device in communication with the storage controller. Preferably, asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to at least a portion of a flash memory device in communication with the storage controller. Preferably, asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to a storage module of the storage controller responsible for the nonvolatile storage media, wherein the solid state sidefile memory location is one of an available plurality of solid state sidefile memory locations associated with each of an available plurality of storage modules in the storage controller.

The method may further include, previous to asynchronously submitting the read of the data to the nonvolatile storage media: calculating the first checksum signature representative of the data, asynchronously submitting a write of the data to the nonvolatile storage media, and asynchronously submitting the first checksum signature to the solid state, sidefile memory location. The method may further include, previous to asynchronously submitting the read of the data to the nonvolatile storage media, receiving one of a read and a verify instruction for a logical address.

In a second aspect, there is provided a system for data verification in a storage subsystem having nonvolatile storage media, comprising: a solid state, sidefile device of a storage controller operable in the storage subsystem, the sidefile device providing a memory location in addition to the nonvolatile storage media, wherein the sidefile device is adapted for storing a checksum signature calculated for data written to the nonvolatile storage media. The system may further include a storage module operable in the storage controller, wherein: the sidefile device is further adapted for providing the checksum signature to the storage module for data verification, the storage module is adapted for calculating an additional checksum signature for a subsequent read of the data from the nonvolatile storage media, and the storage module is further adapted for comparing the checksum signature to the additional checksum signature.

Preferably, the storage module is further adapted for, pursuant to comparing the checksum signature to the additional checksum signature, determining if the checksum signature and the additional checksum signature match, wherein if a match is not determined, reporting a critical event. Preferably, the storage module is further adapted for receiving one of a read and a verify instruction for a logical address. Preferably, the data written to the nonvolatile storage media and the checksum signature calculated for the data are mappable by logical address. Preferably, the sidefile device is one of an available plurality of sidefile devices, each associated with one storage module of an available plurality of storage modules of the storage controller. Preferably, the sidefile device comprises a solid state disk (SSD) device.

Preferably, the sidefile device comprises a flash memory device. Preferably, the checksum signature comprises a cyclic redundancy check (CRC).

In a third aspect, there is provided a computer program comprising computer program code to, when loaded into a computer and executed thereon, cause said computer to perform all the steps of the method of the first aspect.

The computer program of the third aspect may be embodied in the form of a computer program product for data verification in a storage subsystem by at least one processor device in communication with at least one memory device, the computer program product comprising a computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising: a first executable portion for asynchronously submitting a read of data to nonvolatile storage media; a second executable portion for asynchronously submitting a read of a first checksum signature to a solid state, sidefile memory location of a storage controller in the storage subsystem, wherein the first checksum signature is representative of the data previously written to the nonvolatile storage media; a third executable portion for calculating a second checksum signature from the read of the data; and a fourth executable portion for comparing the first and second checksum signatures, wherein if a match is not determined, reporting a critical event.

Preferably, the second executable portion for asynchronous Iy submitting the read of the first checksum signature to the solid state, sidefile memory location is further adapted for submitting the read to at least a portion of a solid state disk (SSD) device in communication with the storage controller. Preferably, the second executable portion for asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location is further adapted for submitting the read to at least a portion of a flash memory device in communication with the storage controller. Preferably, the second executable portion for asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location is further adapted for submitting the read to a storage module of the storage controller responsible for the nonvolatile storage media, wherein the solid state sidefile memory location is one of an available plurality of solid state sidefile memory locations associated with each of an available plurality of storage modules in the storage controller.

The computer program product may further include a fifth executable portion for, previous to asynchronously submitting the read of the data to the nonvolatile storage media: calculating the first checksum signature representative of the data, asynchronously submitting a write of the data to the nonvolatile storage media, and asynchronously submitting the first checksum signature to the solid state, sidefile memory location. The computer program product may further include a fifth executable portion for, previous to asynchronously submitting the read of the data to the nonvolatile storage media, receiving one of a read and a verify instruction for a logical address.

In a further embodiment there may be provided a preferred method of manufacturing a system for data verification in a storage subsystem having nonvolatile storage media, comprising: providing a solid state, sidefile device of a storage controller in the storage subsystem, the sidefile device providing a memory location in addition to the nonvolatile storage media, wherein the sidefile device is adapted for storing a checksum signature calculated for data written to the nonvolatile storage media.

The method of manufacture may further include providing a storage module operable in the storage controller, wherein: the sidefile device is further adapted for providing the checksum signature to the storage module for data verification, the storage module is adapted for calculating an additional checksum signature for a subsequent read of the data from the nonvolatile storage media, and the storage module is further adapted for comparing the checksum signature to the additional checksum signature. Preferably, the storage module is further adapted for, pursuant to comparing the checksum signature to the additional checksum signature, determining if the checksum signature and the additional checksum signature match, wherein if a match is not determined, reporting a critical event. Preferably, the sidefile device comprises one of a solid state disk (SSD) device and a flash memory device.

Storage controllers typically place checksum signatures such as CRCs near the stored data, for example on the same nonvolatile storage media as the stored data. As a result, if the data becomes corrupted, the error may not be detectable by the CRC. For example, situations may arise where a write of data and/or the corresponding CRC does not occur

(the data is not written). In such a case, the next read of this data will read the old data and/or the old CRC, and the system may determine that the old data and/or CRC is valid. In view of the foregoing, a need exists for a mechanism whereby checksum signatures such as CRCs may be retained, yet in a storage location apart from the stored data.

Accordingly, various exemplary method, system, and computer program product embodiments for data verification in a storage subsystem are provided. In one such exemplary embodiment, by way of example only, a read of data is asynchronously submitted to nonvolatile storage media. A read of a first checksum signature is submitted to a solid state, sidefile memory location of a storage controller in the storage subsystem.

The first checksum signature is representative of the data previously written to the nonvolatile storage media. A second checksum signature is calculated from the read of the data. The first and second checksum signatures are compared. If a match is not determined, a critical event is reported.

Related system and computer program product embodiments are also disclosed and provide additional advantages.

Brief Description of the Drawings

A preferred embodiment of the present invention will now be described, by way of example only, with reference to the accompanying drawings, in which:

Fig. 1 is a block diagram of an exemplary computing environment including a data processing storage subsystem in which various aspects of the following description and claimed subject matter may be implemented;

Fig. 2A is a flow chart diagram of an exemplary method for submitting a checksum signature to a sidefile;

Fig. 2B is a flow chart diagram of an exemplary method of writing data wherein a data error results;

Fig. 2C is a flow chart diagram of an exemplary method of writing data wherein an additional data error results; and

Fig. 3 is a flow chart diagram of an exemplary method for verifying data using a checksum signature submitted to a solid-state sidefile memory location according to the present invention.

Detailed Description of the Drawings

The illustrated embodiments below provide mechanisms for data verification using a sidefile storage device as a memory location to store checksum signature information in lieu of placing the checksum signatures in close proximity to the stored data. Such a sidefile may be implemented using a small, high-performance and zero-seek time storage device, such as a solid-state drive (SSD) or flash memory device. The sidefile establishes a memory location in addition to the nonvolatile memory location in which the stored data is located. Accordingly, each checksum is recorded in the sidefile instead of being recorded on the storage controller disks. As a result, if data is never written to disk, the corresponding checksum is still written to the sidefile location. The associated error established by the stored checksum is thus ensured to be discovered.

Turning now to the drawings, reference is initially made to Fig. 1, which is a block diagram of an exemplary data processing storage subsystem 10, in accordance with a disclosed embodiment of the invention. The particular subsystem shown in Fig. 1 is presented to facilitate an explanation of the invention. However, as the skilled artisan will appreciate, the invention can be practiced using other storage subsystems with diverse architectures and capabilities.

The storage subsystem 10 receives, from one or more host computers 12, I/O requests, which are commands to read or write data at logical addresses on logical volumes. Any number of host computers 12 are coupled to the storage subsystem 10 by any means known in the art, for example, using a network. Herein, by way of example, the host computers 12 and the storage subsystem 10 are assumed to be coupled by a storage area network (SAN) 16 incorporating data connections 14 and host bus adapters (HBAs) 18. The logical addresses specify a range of data blocks within a logical volume, each block herein being assumed by way of example to contain 512 bytes. For example, a 10 KB data record used in a data processing application on a host computer would require 20 blocks, which the host computer might specify as being stored at a logical address comprising blocks 1000 through 1019 of a logical volume. The storage subsystem 10 typically operates in, or as, a network attached storage (NAS) or a SAN system.

The storage subsystem 10 comprises a clustered storage controller 24 coupled between the

SAN 16 and a private network 36 using data connections 20 and 34, respectively, and incorporating adapters 22 and 32, again respectively. Clustered storage controller 24 implements clusters of storage modules 26, each of whom includes an interface 28 (in communication between adapters 22 and 32), and a cache 30. Each storage module 26 is responsible for a number of disks 40 by way of data connection 38 as shown.

As described previously, each storage module 26 further comprises a cache 30. However, it will be appreciated that the number of caches used in the storage subsystem 10 and in conjunction with clustered storage controller 24 may be any convenient number. While all caches 30 in the storage subsystem 10 may operate in substantially the same manner and to comprise substantially similar elements, this is not a requirement. Each of the caches 30 is typically, but not necessarily approximately equal in size and is assumed to be coupled, by way of example, in a one-to-one correspondence with a set of physical storage units, which are typically disks. In one embodiment, the disks 40 may comprise such disks. Those skilled in the art will be able to adapt the description herein to caches of different sizes, and to caches and storage devices in other correspondences, such as the many-to-many correspondence described in U.S. Patent Application Publication No. 2005/0015566, entitled

"Data Allocation in a Distributed Storage System."

Each set of physical storage comprises multiple slow and/or fast access time mass storage devices, herein below assumed to be multiple hard disks. Fig. 1 shows the caches 30 coupled to respective sets of physical storage. Typically, the sets of physical storage comprise one or more disks 40, which can have different performance characteristics. In response to an I/O command, the cache 30, by way of example, may read or write data at addressable physical locations of physical storage. In the embodiment of Fig. 1, the caches 30 are shown to exercise certain control functions over the physical storage. These control functions may alternatively be realized by hardware devices such as disk controllers, which are linked to the caches 30.

In an embodiment of the present invention, the routing of logical addresses is implemented according to methods described in the above-referenced U.S. Patent Application Publication No. 2005/0015566. Routing records, indicating the association of logical addresses of logical volumes with partitions and the association of the partitions with caches, are distributed by the SAN 16 to one or more generally similar network interfaces 28 of the storage modules 26. It will be understood that the storage subsystem 10, and thereby, the clustered storage controller 24, may comprise any convenient number of network interfaces 28. Subsequent to the formation of the disks 40, the network interfaces 28 receive I/O commands from the host computers 12 specifying logical addresses of the disks 40. The network interfaces use the routing records to break the commands into I/O instructions, or command subsets, that are then distributed among the caches 30.

Each storage module 26 is operative to monitor its state, including the states of associated caches 30, and to transmit configuration information to other components of the storage subsystem 10 for example, configuration changes that result in blocking intervals, or limit the rate at which I/O requests for the sets of physical storage are accepted, as explained in further detail herein below.

Routing of commands and data from the HBAs 18 to the clustered storage controller 24 to each cache 30 is typically performed over a network and/or a switch. Herein, by way of example, the HBAs 18 may be coupled to the storage modules 26 by at least one switch (not shown) of the SAN 16 which can be of any known type having a digital cross-connect function. In additional implementations, the HBAs 18 may be directly connected to the storage modules 26.

Data having contiguous logical addresses are generally distributed among the disks 40. This can be accomplished using the techniques disclosed in the above-referenced U.S. Patent Application Publication No. 2005/0015566. Alternatively, the data can be distributed using other algorithms, e.g., byte or block interleaving. In general, this increases bandwidth, for instance, by allowing a volume in a SAN or a file in network attached storage to be read from or written to more than one disk at a time. However, this technique requires coordination among the various disks, and in practice may require complex provisions for disk failure, and a strategy for dealing with error checking information, e.g., a technique for storing parity information relating to distributed data. Indeed, when logical unit partitions are distributed in sufficiently small granularity, data associated with a single logical unit may span all of the disks 40. While not explicitly shown for purposes of illustrative simplicity, the skilled artisan will appreciate that in some embodiments, the clustered storage controller 24 may be adapted for implementation in conjunction with certain hardware, such as a rack mount system, a midplane, and/or a backplane. Indeed, the private network 36 in one embodiment may be implemented using a backplane. Additional hardware such as the aforementioned switches, processors, controllers, memory devices, and the like may also be incorporated into the clustered storage controller 24 and elsewhere within the storage subsystem 10, again as the skilled artisan will appreciate. Further, a variety of software components, operating systems, firmware, and the like may be integrated.

Each storage module 26 in the clustered storage controller 24 includes a sidefile 42. As previously mentioned, the sidefile 42 may include such storage devices as a solid-state drive (SSD) storage device or a flash memory device such as a Compact Flash (CF) storage device. The storage capacity of the sidefile 42 is not required to be nearly as large as that of the nonvolatile storage disks 40 as the checksums associated with stored write data are correspondingly small in comparison (typically a few bytes). As a result, a small, high- performance device may be implemented in conjunction with each storage module in a cost effective manner.

While the illustrated embodiment shows sidefiles 42 associated with each storage module

26, the skilled artisan will appreciate that other embodiments may implement sidefiles 42 in differing ways. For example, a single sidefile device may store checksum information for data stored in a number of volumes associated with a number of storage modules.

Figs. 2A-2C, and 3, following depict exemplary methods for implementing sidefile mechanisms to improve data verification. As one skilled in the art will appreciate, various steps in the methods may be implemented in differing ways to suit a particular application. In addition, the described methods may be implemented by various means, such as hardware, software, firmware, or a combination thereof operational on or otherwise associated with the computing environment. For example, the methods may be implemented at least partially as a computer program product including a computer-readable storage medium having computer-readable program code portions stored therein. The computer- readable storage medium may include disk drives, flash memory, digital versatile disks (DVDs), compact disks (CDs), and other types of storage mediums.

Turning to Fig. 2A, reference is made to an exemplary method 50 for performing data writes implementing the sidefϊle device illustrated in Fig. 1, previously. Method 50 begins (step

52) with a write being received for a certain logical address (step 54). A checksum signature is calculated by the system for the write (step 56). The write is asynchronous Iy submitted to nonvolatile storage media, mappable by the logical address (step 58). In addition, the checksum is asynchronously submitted to the sidefϊle to be recorded (step 60). Both steps 58 and 60 occur asynchronously with each other so as to allow for increased system performance. The checksum signature is also mappable by logical address. Method 50 queries whether the write of the data and the checksum signature have been acknowledged (step 62). If no, the system waits (step 64) until this is the case. The method 50 then ends (step 66).

Turning now to Figs. 2B and 2C, reference is made to an exemplary methods for writing data in which a data error occurs. In both exemplary methods, the data errors may be not discoverable but for the mechanisms of the present invention implementing the side file device previously described. Turning first to Fig. 2B, method 100 begins (step 102) with a write received for a logical address (step 104). The applicable checksum is calculated for the write (step 106), and the write is asynchronously submitted to the nonvolatile storage media, mappable by the logical address (step 108). In the present example however, the data is not written, yet an acknowledgement is received (step 110). Asynchronous with the write of the data, the checksum signature is submitted to the sidefϊle for storage (again mappable by the logical address) (step 112). The system waits until the writes of both data and checksum are acknowledged (steps 114, 116), and then the method 100 ends.

Turning now to Fig. 2C, method 150 begins (step 152) with a write received for a logical address (step 154). The applicable checksum is calculated for the write (step 156), and the write is asynchronously submitted to the nonvolatile storage media, mappable by the logical address (step 158). Asynchronous with the write of the data, the checksum signature is submitted to the sidefϊle for storage (again mappable by the logical address) (step 160). Subsequent to the submittal of the checksum signature, and in similar fashion to the previous example, the data is not written, yet an acknowledgement is received that the data was written (step 162). The system waits until the writes of both data and checksum are acknowledged (steps 164, 166), and then the method 150 ends.

Turning now to Fig. 3, an exemplary method 200 for data verification using the sidefϊle mechanisms previously described is now shown. Method 200 allows for the detection of data errors resulting from either of the previous examples set forth in Figs. 2B and 2C, where write errors prevent data from being written, yet an acknowledgement is received that the data was written. Method 200 begins (step 202) with the receipt of a read/verify instruction for a logical address (step 204). The read is asynchronously submitted to the nonvolatile storage media, mappable by the logical address (step 206) while the read of the stored checksum, also mappable by the logical address, is asynchronously submitted to the sidefϊle location (step 208).

As a next step, the method 200 queries whether the read of data and checksum signature information is acknowledged (step 210), and waits (step 212) until this is the case. Next, an additional checksum signature is calculated for the read of data (step 214). The stored checksum is then compared against the checksum calculated for the read (step 216). If the two checksums match, then the data is verified and the method 200 ends (step 218). If not, then a critical event that system data has been corrupted is reported (step 220). The corrupted data is locked (step 222), and a read/verify error is reported (step 224). The method 200 ends (again, step 218).

Use of a sidefile location in conjunction with a storage controller to store checksum signature information provides an efficient and effective mechanism to improve data reliability in storage subsystems.

Some of the functional units described in this specification have been labeled as modules in order to more particularly emphasize their implementation independence. For example, a module may be implemented as a hardware circuit comprising custom VLSI circuits or gate arrays, off-the-shelf semiconductors such as logic chips, transistors, or other discrete components. A module may also be implemented in programmable hardware devices such as field programmable gate arrays, programmable array logic, programmable logic devices, or the like.

Modules may also be implemented in software for storage for execution by various types of processors. An identified module of executable code may, for instance, comprise one or more physical or logical blocks of computer instructions, which may, for instance, be organized as an object, procedure, or function. Nevertheless, the executables of an identified module need not be physically located together, but may comprise disparate instructions stored in different locations which, when joined logically together, comprise the module and achieve the stated purpose for the module.

Indeed, a module of executable code may be a single instruction, or many instructions, and may even be distributed over several different code segments, among different programs, and across several memory devices. Similarly, operational data may be identified and illustrated herein within modules, and may be embodied in any suitable form and organized within any suitable type of data structure. The operational data may be collected as a single data set, or may be distributed over different locations including over different storage devices, and may exist, at least partially, as electronic signals on a system or network.

While one or more embodiments of the present invention have been illustrated in detail, the skilled artisan will appreciate that modifications and adaptations to those embodiments may be made without departing from the scope of the present invention as set forth in the following claims.

Claims

1. A method for data verification in a storage subsystem by at least one processor device in communication with at least one memory device, the method comprising: asynchronously submitting a read of data to nonvolatile storage media; asynchronously submitting a read of a first checksum signature to a solid state, side file memory location of a storage controller in the storage subsystem, wherein the first checksum signature is representative of the data previously written to the nonvolatile storage media; calculating a second checksum signature from the read of the data; and comparing the first and second checksum signatures, wherein if a match is not determined, reporting a critical event.

2. The method of claim 1, wherein asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to at least a portion of a solid state disk (SSD) device in communication with the storage controller.

3. The method of claim 1, wherein asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to at least a portion of a flash memory device in communication with the storage controller.

4. The method of claim 1, wherein asynchronously submitting the read of the first checksum signature to the solid state, sidefile memory location includes submitting the read to a storage module of the storage controller responsible for the nonvolatile storage media, wherein the solid state sidefile memory location is one of an available plurality of solid state sidefile memory locations associated with each of an available plurality of storage modules in the storage controller.

5. The method of any preceding claim, further including, previous to asynchronously submitting the read of the data to the nonvolatile storage media: calculating the first checksum signature representative of the data, asynchronously submitting a write of the data to the nonvolatile storage media, and asynchronously submitting the first checksum signature to the solid state, sidefile memory location.

6. The method of any preceding claim, further including, previous to asynchronously submitting the read of the data to the nonvolatile storage media, receiving one of a read and a verify instruction for a logical address.

7. A system for data verification in a storage subsystem having nonvolatile storage media, comprising: a solid state, sidefile device of a storage controller operable in the storage subsystem, the sidefile device providing a memory location in addition to the nonvolatile storage media, wherein the sidefile device is adapted for storing a checksum signature calculated for data written to the nonvolatile storage media.

8. The system of claim 7, further including a storage module operable in the storage controller, wherein: the sidefile device is further adapted for providing the checksum signature to the storage module for data verification, the storage module is adapted for calculating an additional checksum signature for a subsequent read of the data from the nonvolatile storage media, and the storage module is further adapted for comparing the checksum signature to the additional checksum signature.

9. The system of claim 8, wherein the storage module is further adapted for, pursuant to comparing the checksum signature to the additional checksum signature, determining if the checksum signature and the additional checksum signature match, wherein if a match is not determined, reporting a critical event.

10. The system of claim 8 or claim 9, wherein the storage module is further adapted for receiving one of a read and a verify instruction for a logical address.

11. The system of any of claims 7 to 10, wherein the data written to the nonvolatile storage media and the checksum signature calculated for the data are mappable by logical address.

12. The system of any of claims 7 to 11, wherein the sidefile device is one of an available plurality of sidefile devices, each associated with one storage module of an available plurality of storage modules of the storage controller.

13. The system of any of claims 7 to 12, wherein the sidefile device comprises one of a solid state disk (SSD) device or a flash memory device.

14. The system of any of claims 7 to 13, wherein the checksum signature comprises a cyclic redundancy check (CRC).

15. A computer program comprising computer program code to, when loaded into a computer system and executed thereon, cause said computer system to perform all the steps of the method of any of claims 1 to 6.