专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090177895A1 CONTROLLER FOR CONTROLLING LOGICAL VOLUME-RELATED SETTINGS 审中-公开
标题翻译：用于控制逻辑音量相关设置的控制器
公开(公告)号：US20090177895A1
公开(公告)日：2009-07-09
申请号：US12038991
申请日：2008-02-28
申请人： Koichi Murayama , Nobuyuki Osaki , Daisuke Kito
发明人： Koichi Murayama , Nobuyuki Osaki , Daisuke Kito
IPC分类号： G06F12/14 , G06F12/00
CPC分类号： G06F21/6236 , G06F3/0622 , G06F3/0637 , G06F3/067
摘要： A controller carries out a first determination as to whether or not data to be stored in a target logical volume can be used by a plurality of access devices. The controller carries out a second determination as to whether or not the access devices comprise data encryption units respectively when the result of the first determination is affirmative. The controller controls a setting related to the target logical volume for one access device of the plurality of access devices, based on the result of the second determination.
摘要翻译：控制器执行关于是否可以由多个接入设备使用要存储在目标逻辑卷中的数据的第一确定。当第一确定的结果是肯定时，控制器执行关于接入设备是否分别包括数据加密单元的第二确定。控制器基于第二确定的结果控制与多个接入设备中的一个接入设备的目标逻辑卷有关的设置。

2. 发明授权

US08281157B2 Storage system, control method therefor, and program 有权
标题翻译：存储系统及其控制方法和程序
公开(公告)号：US08281157B2
公开(公告)日：2012-10-02
申请号：US12527665
申请日：2009-04-22
申请人： Daisuke Kito , Nobuyuki Osaki
发明人： Daisuke Kito , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/805
摘要： It is made possible to correctly decrypt data in a storage area in a computer system (storage system) having various encryption execution sections (such as a storage device or encryption appliance having an encryption function). In the case where storage areas may be encrypted by the various encryption execution sections, there is a possibility that, when a storage area is copied or the configuration of the computer system is changed, the storage area cannot be correctly decrypted unless it is managed where the storage area has been encrypted or whether the storage area is not encrypted. To prevent this, a management computer manages the key and the encryption execution section for each storage area in the system. Furthermore, when copying a storage area or the like is performed, the management computer determines which storage area's state and key should be changed together with performing the copy operation is performed, and instructs the encryption execution section to change the state and key for the storage area if it is necessary to change it.
摘要翻译：能够正确解密具有各种加密执行部（例如具有加密功能的存储装置或加密装置）的计算机系统（存储系统）的存储区域中的数据。在存储区域可以被各种加密执行部分加密的情况下，存在这样的可能性：当存储区域被复制或计算机系统的配置改变时，存储区域不能被正确解密，除非它被管理在哪里存储区域已被加密或存储区域是否未被加密。为了防止这种情况，管理计算机管理系统中的每个存储区域的密钥和加密执行部分。此外，当执行复制存储区域等时，管理计算机确定执行复制操作时哪个存储区域的状态和密钥应该改变，并且指示加密执行部分改变用于存储的状态和密钥如果有必要改变它的区域。

3. 发明授权

US08612775B2 Computer system for managing storage area state of a storage system 失效
公开(公告)号：US08612775B2
公开(公告)日：2013-12-17
申请号：US12155356
申请日：2008-06-03
申请人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
发明人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/80
摘要： There is provided a computer system, having a host and at least one storage system. The at least one storage system provides storage area includes at least one of an encrypted storage area and a plaintext storage area The at least one storage system is configured to: receive an instruction about what type of storage area is available to the host computer; present the encrypted storage area to the host as an available storage area separate from unavailable storage areas in the case of the type of storage area being available according to the instruction indicating “encrypted”; and present, in the case of the type of storage area being available according to the instruction indicating other than “encrypted”, one of both the encrypted storage area and the plaintext storage area to the host computer as available storage areas, and only the plaintext storage area as an available storage area.

4. 发明授权

US08041959B2 Computer system, storage system and management computer for backing up and restore encryption key for storage system incorporating therein a stored data encryption function 有权
标题翻译：计算机系统，存储系统和管理计算机，用于备份和恢复在其中并入存储的数据加密功能的存储系统的加密密钥
公开(公告)号：US08041959B2
公开(公告)日：2011-10-18
申请号：US12025189
申请日：2008-02-04
申请人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
发明人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/602 , G06F11/1435 , G06F11/1456 , G06F11/1469 , G06F21/78 , G06F2221/2117
摘要： To protect data from corruption due to restoration of an encryption key to a wrong storage system, there is provided a computer system including a first storage system and a second storage system, wherein: the first storage system, upon receiving a request to write first data to a first area in the first storage system, encrypts the first data by using a first key and writes the first data in the first area, and, upon receiving a request to write second data to a third area, encrypts the second data by using a second key and transmits a request to write the encrypted second data in a second area in the second storage system; and the computer system holds the first key, an identifier of the first storage system associated with the first key, the second key, and an identifier of the second storage system associated with the second key.
摘要翻译：为了防止由于将加密密钥恢复到错误的存储系统而导致的数据不被破坏，提供了一种包括第一存储系统和第二存储系统的计算机系统，其中：第一存储系统在接收到写入第一数据的请求时到第一存储系统中的第一区域，通过使用第一密钥对第一数据进行加密，并将第一数据写入第一区域，并且在接收到向第三区域写入第二数据的请求时，通过使用第二密钥，并且在第二存储系统中的第二区域中发送写入加密的第二数据的请求; 并且计算机系统保存第一密钥，与第一密钥相关联的第一存储系统的标识符，第二密钥以及与第二密钥相关联的第二存储系统的标识符。

5. 发明申请

US20110185192A1 STORAGE SYSTEM, CONTROL METHOD THEREFOR, AND PROGRAM 有权
标题翻译：存储系统，其控制方法和程序
公开(公告)号：US20110185192A1
公开(公告)日：2011-07-28
申请号：US12527665
申请日：2009-04-22
申请人： Daisuke Kito , Nobuyuki Osaki
发明人： Daisuke Kito , Nobuyuki Osaki
IPC分类号： G06F12/14
CPC分类号： G06F21/805
摘要： It is made possible to correctly decrypt data in a storage area in a computer system (storage system) having various encryption execution sections (such as a storage device or encryption appliance having an encryption function). In the case where storage areas may be encrypted by the various encryption execution sections, there is a possibility that, when a storage area is copied or the configuration of the computer system is changed, the storage area cannot be correctly decrypted unless it is managed where the storage area has been encrypted or whether the storage area is not encrypted. To prevent this, a management computer manages the key and the encryption execution section for each storage area in the system. Furthermore, when copying a storage area or the like is performed, the management computer determines which storage area's state and key should be changed together with performing the copy operation is performed, and instructs the encryption execution section to change the state and key for the storage area if it is necessary to change it.
摘要翻译：能够正确解密具有各种加密执行部（例如具有加密功能的存储装置或加密装置）的计算机系统（存储系统）的存储区域中的数据。在存储区域可以被各种加密执行部分加密的情况下，存在这样的可能性：当存储区域被复制或者计算机系统的配置改变时，存储区域不能被正确解密，除非它被管理在哪里存储区域已被加密或存储区域是否未被加密。为了防止这种情况，管理计算机管理系统中的每个存储区域的密钥和加密执行部分。此外，当执行复制存储区域等时，管理计算机确定执行复制操作时哪个存储区域的状态和密钥应该改变，并且指示加密执行部分改变用于存储的状态和密钥如果有必要改变它的区域。

6. 发明申请

US20100031058A1 Computer System, Storage System and Management Computer for Backing Up and Restore Encryption Key for Storage System Incorporating Therein a Stored Data Encryption Function 有权
标题翻译：计算机系统，存储系统和管理计算机，用于备份和恢复存储系统加密密钥，存储数据加密功能
公开(公告)号：US20100031058A1
公开(公告)日：2010-02-04
申请号：US12025189
申请日：2008-02-04
申请人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
发明人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
IPC分类号： G06F12/14 , H04L9/14
CPC分类号： G06F21/602 , G06F11/1435 , G06F11/1456 , G06F11/1469 , G06F21/78 , G06F2221/2117
摘要： To protect data from corruption due to restoration of an encryption key to a wrong storage system, there is provided a computer system including a first storage system and a second storage system, wherein: the first storage system, upon receiving a request to write first data to a first area in the first storage system, encrypts the first data by using a first key and writes the first data in the first area, and, upon receiving a request to write second data to a third area, encrypts the second data by using a second key and transmits a request to write the encrypted second data in a second area in the second storage system; and the computer system holds the first key, an identifier of the first storage system associated with the first key, the second key, and an identifier of the second storage system associated with the second key.
摘要翻译：为了防止由于将加密密钥恢复到错误的存储系统而导致的数据不被破坏，提供了一种包括第一存储系统和第二存储系统的计算机系统，其中：第一存储系统在接收到写入第一数据的请求时到第一存储系统中的第一区域，通过使用第一密钥对第一数据进行加密，并将第一数据写入第一区域，并且在接收到向第三区域写入第二数据的请求时，通过使用第二密钥，并且在第二存储系统中的第二区域中发送写入加密的第二数据的请求; 并且计算机系统保存第一密钥，与第一密钥相关联的第一存储系统的标识符，第二密钥以及与第二密钥相关联的第二存储系统的标识符。

7. 发明申请

US20090327757A1 Computer system for managing storage area state of a storage system 失效
标题翻译：用于管理存储系统的存储区域状态的计算机系统
公开(公告)号：US20090327757A1
公开(公告)日：2009-12-31
申请号：US12155356
申请日：2008-06-03
申请人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
发明人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
IPC分类号： G06F12/14
CPC分类号： G06F21/80
摘要： There is provided a computer system, having a host and at least one storage system. The at least one storage system provides storage area includes at least one of an encrypted storage area and a plaintext storage area The at least one storage system is configured to: receive an instruction about what type of storage area is available to the host computer; present the encrypted storage area to the host as an available storage area separate from unavailable storage areas in the case of the type of storage area being available according to the instruction indicating “encrypted”; and present, in the case of the type of storage area being available according to the instruction indicating other than “encrypted”, one of both the encrypted storage area and the plaintext storage area to the host computer as available storage areas, and only the plaintext storage area as an available storage area.
摘要翻译：提供了一种具有主机和至少一个存储系统的计算机系统。所述至少一个存储系统提供存储区域，其包括加密存储区域和明文存储区域中的至少一个。所述至少一个存储系统被配置为：接收关于所述主机计算机可用的什么类型的存储区域的指令; 根据指示“加密”的指令，在存储区域类型可用的情况下，将加密的存储区域作为可用存储区域与可用存储区域分离; 并且在根据指示“加密”以外的指示的存储区域的类型的情况下，存在于主计算机的加密存储区域和明文存储区域之一作为可用存储区域，并且仅存在明文存储区域作为可用存储区域。

8. 发明申请

US20090164780A1 VOLUME MANAGEMENT METHOD IN A STORAGE APPARATUS HAVING ENCRYPTION FEATURE 审中-公开
标题翻译：具有加密功能的存储设备的体积管理方法
公开(公告)号：US20090164780A1
公开(公告)日：2009-06-25
申请号：US12043612
申请日：2008-03-06
申请人： Koichi Murayama , Nobuyuki Osaki
发明人： Koichi Murayama , Nobuyuki Osaki
IPC分类号： H04L9/00
CPC分类号： G06F3/065 , G06F3/0604 , G06F3/062 , G06F3/0631 , G06F3/067 , G06F3/0683 , G06F21/805
摘要： The invention provides a computer system including a storage apparatus having an encryption feature, a management computer for running a management program for managing the storage apparatus, and an application host computer, wherein when allocating a logical volume or creating a copy pair, the management program selects, from the storage apparatus, a logical volume that satisfies a security level required by an application program that uses the logical volume to allocate the logical volume or create a copy pair.
摘要翻译：本发明提供一种计算机系统，包括具有加密特征的存储装置，用于运行用于管理存储装置的管理程序的管理计算机以及应用主机计算机，其中当分配逻辑卷或创建副本对时，管理程序从存储装置中选择满足使用逻辑卷来分配逻辑卷或创建副本对的应用程序所需的安全级别的逻辑卷。

9. 发明申请

US20080222374A1 Computer system, management computer, storage system and volume management method 审中-公开
标题翻译：计算机系统，管理计算机，存储系统和卷管理方法
公开(公告)号：US20080222374A1
公开(公告)日：2008-09-11
申请号：US12010494
申请日：2008-01-25
申请人： Yuri Hiraiwa , Koichi Murayama , Nobuyuki Osaki
发明人： Yuri Hiraiwa , Koichi Murayama , Nobuyuki Osaki
IPC分类号： G06F12/16
CPC分类号： G06F11/2058 , G06F11/2069 , G06F11/2074 , G06F11/2076 , G06F11/2082
摘要： To provide a computer system in which the primary site administrator for managing all the sites can make the configuration of the authority to be granted beforehand for the administrator of each site to fill in for a part of its own authority, even during the absence such as at the time of disaster. The computer system includes one or more storage systems 1500 having a volume usable from a host computer 1100 and a management computer 1200 for managing the storage systems 1500, in which a plurality of users can use the same volume, wherein if a certain user makes an operation request to the volume with the copy configuration in which it is associated in source and destination with another volume, the management computer 1200 decides an operation authority to the user for the volume susceptible to the operation request, based on an attribute of the volume susceptible to the operation request, an attribute concerning the copy configuration of another volume with a still another volume, and an attribute of another volume, and suppresses the execution of the operation request, when the operation request is out of a permissible range of the operation authority.
摘要翻译：提供一种计算机系统，其中主站点管理员用于管理所有站点可以使得每个站点的管理员预先授予权限的配置以填补其自身权限的一部分，即使在缺少诸如在灾难发生时。计算机系统包括具有可从主机1100使用的卷的一个或多个存储系统1500和用于管理存储系统1500的管理计算机1200，其中多个用户可以使用相同的卷，其中如果某个用户做出对具有其在源和目的地与其他卷相关联的复制配置的卷的操作请求，管理计算机1200基于容易受到该卷的容量的属性来决定对易受操作请求影响的卷的用户的操作权限与操作请求相关的属性，关于具有另一卷的另一卷的复制配置的属性和另一卷的属性，并且当操作请求超出操作权限的允许范围时，抑制操作请求的执行。

10. 发明授权

US08341425B2 Storage device and its control method 有权
标题翻译：存储设备及其控制方法
公开(公告)号：US08341425B2
公开(公告)日：2012-12-25
申请号：US12527160
申请日：2009-05-25
申请人： Hirotaka Nakagawa , Masayasu Asano , Takeki Okamoto , Nobuyuki Osaki
发明人： Hirotaka Nakagawa , Masayasu Asano , Takeki Okamoto , Nobuyuki Osaki
IPC分类号： G06F11/30 , G06F12/14
CPC分类号： G06F12/1408 , G06F11/0727 , G06F11/1008 , G06F11/2094 , G06F21/78 , G06F21/805 , G06F2221/2107 , G06F2221/2151 , H04L9/0891 , H04L63/0464 , H04L63/065 , H04L67/1097 , H04L69/40
摘要： Provided is a storage device which partitions data from a host into multiple partitioned data and distributes, encrypts and stores them together with a parity to and in multiple memory mediums. This storage device executes processing of restoring the partitioned data or the parity stored in a memory medium to be subject to encryption re-key based on decrypted data of the partitioned data or the parity stored in each memory medium other than the memory medium to be subject to encryption re-key among the multiple memory mediums, storing the restored partitioned data or the parity in a backup memory medium while encrypting the restored partitioned data or the parity with a new encryption key, and thereafter interchanging the backup memory medium and the memory medium to be subject to encryption re-key so that the backup memory medium will be a memory medium configuring the parity group and the memory medium to be subject to encryption re-key will be the backup memory medium.
摘要翻译：提供了一种存储设备，其将来自主机的数据分割成多个分区数据，并以奇偶校验向多个存储介质分发，加密和存储在一起。该存储装置执行基于分割数据的解密数据的解密数据或除存储介质以外的每个存储介质中存储的奇偶校验，将存储在存储介质中的分割数据或奇偶校验恢复为加密重新进行的处理，在多个存储介质之间加密重新键入，将恢复的分区数据或奇偶校验存储在备用存储介质中，同时用新的加密密钥加密恢复的分区数据或奇偶校验，然后将备份存储介质和存储介质要进行加密重新密钥，以便备份存储介质将是配置奇偶校验组的存储介质和要加密的存储介质，密钥将是备份存储介质。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式