专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090327757A1 Computer system for managing storage area state of a storage system 失效
标题翻译：用于管理存储系统的存储区域状态的计算机系统
公开(公告)号：US20090327757A1
公开(公告)日：2009-12-31
申请号：US12155356
申请日：2008-06-03
申请人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
发明人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
IPC分类号： G06F12/14
CPC分类号： G06F21/80
摘要： There is provided a computer system, having a host and at least one storage system. The at least one storage system provides storage area includes at least one of an encrypted storage area and a plaintext storage area The at least one storage system is configured to: receive an instruction about what type of storage area is available to the host computer; present the encrypted storage area to the host as an available storage area separate from unavailable storage areas in the case of the type of storage area being available according to the instruction indicating “encrypted”; and present, in the case of the type of storage area being available according to the instruction indicating other than “encrypted”, one of both the encrypted storage area and the plaintext storage area to the host computer as available storage areas, and only the plaintext storage area as an available storage area.
摘要翻译：提供了一种具有主机和至少一个存储系统的计算机系统。所述至少一个存储系统提供存储区域，其包括加密存储区域和明文存储区域中的至少一个。所述至少一个存储系统被配置为：接收关于所述主机计算机可用的什么类型的存储区域的指令; 根据指示“加密”的指令，在存储区域类型可用的情况下，将加密的存储区域作为可用存储区域与可用存储区域分离; 并且在根据指示“加密”以外的指示的存储区域的类型的情况下，存在于主计算机的加密存储区域和明文存储区域之一作为可用存储区域，并且仅存在明文存储区域作为可用存储区域。

2. 发明授权

US08612775B2 Computer system for managing storage area state of a storage system 失效
公开(公告)号：US08612775B2
公开(公告)日：2013-12-17
申请号：US12155356
申请日：2008-06-03
申请人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
发明人： Daisuke Kito , Kyoko Mikami , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/80
摘要： There is provided a computer system, having a host and at least one storage system. The at least one storage system provides storage area includes at least one of an encrypted storage area and a plaintext storage area The at least one storage system is configured to: receive an instruction about what type of storage area is available to the host computer; present the encrypted storage area to the host as an available storage area separate from unavailable storage areas in the case of the type of storage area being available according to the instruction indicating “encrypted”; and present, in the case of the type of storage area being available according to the instruction indicating other than “encrypted”, one of both the encrypted storage area and the plaintext storage area to the host computer as available storage areas, and only the plaintext storage area as an available storage area.

3. 发明授权

US08281157B2 Storage system, control method therefor, and program 有权
标题翻译：存储系统及其控制方法和程序
公开(公告)号：US08281157B2
公开(公告)日：2012-10-02
申请号：US12527665
申请日：2009-04-22
申请人： Daisuke Kito , Nobuyuki Osaki
发明人： Daisuke Kito , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/805
摘要： It is made possible to correctly decrypt data in a storage area in a computer system (storage system) having various encryption execution sections (such as a storage device or encryption appliance having an encryption function). In the case where storage areas may be encrypted by the various encryption execution sections, there is a possibility that, when a storage area is copied or the configuration of the computer system is changed, the storage area cannot be correctly decrypted unless it is managed where the storage area has been encrypted or whether the storage area is not encrypted. To prevent this, a management computer manages the key and the encryption execution section for each storage area in the system. Furthermore, when copying a storage area or the like is performed, the management computer determines which storage area's state and key should be changed together with performing the copy operation is performed, and instructs the encryption execution section to change the state and key for the storage area if it is necessary to change it.
摘要翻译：能够正确解密具有各种加密执行部（例如具有加密功能的存储装置或加密装置）的计算机系统（存储系统）的存储区域中的数据。在存储区域可以被各种加密执行部分加密的情况下，存在这样的可能性：当存储区域被复制或计算机系统的配置改变时，存储区域不能被正确解密，除非它被管理在哪里存储区域已被加密或存储区域是否未被加密。为了防止这种情况，管理计算机管理系统中的每个存储区域的密钥和加密执行部分。此外，当执行复制存储区域等时，管理计算机确定执行复制操作时哪个存储区域的状态和密钥应该改变，并且指示加密执行部分改变用于存储的状态和密钥如果有必要改变它的区域。

4. 发明申请

US20090177895A1 CONTROLLER FOR CONTROLLING LOGICAL VOLUME-RELATED SETTINGS 审中-公开
标题翻译：用于控制逻辑音量相关设置的控制器
公开(公告)号：US20090177895A1
公开(公告)日：2009-07-09
申请号：US12038991
申请日：2008-02-28
申请人： Koichi Murayama , Nobuyuki Osaki , Daisuke Kito
发明人： Koichi Murayama , Nobuyuki Osaki , Daisuke Kito
IPC分类号： G06F12/14 , G06F12/00
CPC分类号： G06F21/6236 , G06F3/0622 , G06F3/0637 , G06F3/067
摘要： A controller carries out a first determination as to whether or not data to be stored in a target logical volume can be used by a plurality of access devices. The controller carries out a second determination as to whether or not the access devices comprise data encryption units respectively when the result of the first determination is affirmative. The controller controls a setting related to the target logical volume for one access device of the plurality of access devices, based on the result of the second determination.
摘要翻译：控制器执行关于是否可以由多个接入设备使用要存储在目标逻辑卷中的数据的第一确定。当第一确定的结果是肯定时，控制器执行关于接入设备是否分别包括数据加密单元的第二确定。控制器基于第二确定的结果控制与多个接入设备中的一个接入设备的目标逻辑卷有关的设置。

5. 发明授权

US08041959B2 Computer system, storage system and management computer for backing up and restore encryption key for storage system incorporating therein a stored data encryption function 有权
标题翻译：计算机系统，存储系统和管理计算机，用于备份和恢复在其中并入存储的数据加密功能的存储系统的加密密钥
公开(公告)号：US08041959B2
公开(公告)日：2011-10-18
申请号：US12025189
申请日：2008-02-04
申请人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
发明人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
IPC分类号： G06F21/00
CPC分类号： G06F21/602 , G06F11/1435 , G06F11/1456 , G06F11/1469 , G06F21/78 , G06F2221/2117
摘要： To protect data from corruption due to restoration of an encryption key to a wrong storage system, there is provided a computer system including a first storage system and a second storage system, wherein: the first storage system, upon receiving a request to write first data to a first area in the first storage system, encrypts the first data by using a first key and writes the first data in the first area, and, upon receiving a request to write second data to a third area, encrypts the second data by using a second key and transmits a request to write the encrypted second data in a second area in the second storage system; and the computer system holds the first key, an identifier of the first storage system associated with the first key, the second key, and an identifier of the second storage system associated with the second key.
摘要翻译：为了防止由于将加密密钥恢复到错误的存储系统而导致的数据不被破坏，提供了一种包括第一存储系统和第二存储系统的计算机系统，其中：第一存储系统在接收到写入第一数据的请求时到第一存储系统中的第一区域，通过使用第一密钥对第一数据进行加密，并将第一数据写入第一区域，并且在接收到向第三区域写入第二数据的请求时，通过使用第二密钥，并且在第二存储系统中的第二区域中发送写入加密的第二数据的请求; 并且计算机系统保存第一密钥，与第一密钥相关联的第一存储系统的标识符，第二密钥以及与第二密钥相关联的第二存储系统的标识符。

6. 发明申请

US20110185192A1 STORAGE SYSTEM, CONTROL METHOD THEREFOR, AND PROGRAM 有权
标题翻译：存储系统，其控制方法和程序
公开(公告)号：US20110185192A1
公开(公告)日：2011-07-28
申请号：US12527665
申请日：2009-04-22
申请人： Daisuke Kito , Nobuyuki Osaki
发明人： Daisuke Kito , Nobuyuki Osaki
IPC分类号： G06F12/14
CPC分类号： G06F21/805
摘要： It is made possible to correctly decrypt data in a storage area in a computer system (storage system) having various encryption execution sections (such as a storage device or encryption appliance having an encryption function). In the case where storage areas may be encrypted by the various encryption execution sections, there is a possibility that, when a storage area is copied or the configuration of the computer system is changed, the storage area cannot be correctly decrypted unless it is managed where the storage area has been encrypted or whether the storage area is not encrypted. To prevent this, a management computer manages the key and the encryption execution section for each storage area in the system. Furthermore, when copying a storage area or the like is performed, the management computer determines which storage area's state and key should be changed together with performing the copy operation is performed, and instructs the encryption execution section to change the state and key for the storage area if it is necessary to change it.
摘要翻译：能够正确解密具有各种加密执行部（例如具有加密功能的存储装置或加密装置）的计算机系统（存储系统）的存储区域中的数据。在存储区域可以被各种加密执行部分加密的情况下，存在这样的可能性：当存储区域被复制或者计算机系统的配置改变时，存储区域不能被正确解密，除非它被管理在哪里存储区域已被加密或存储区域是否未被加密。为了防止这种情况，管理计算机管理系统中的每个存储区域的密钥和加密执行部分。此外，当执行复制存储区域等时，管理计算机确定执行复制操作时哪个存储区域的状态和密钥应该改变，并且指示加密执行部分改变用于存储的状态和密钥如果有必要改变它的区域。

7. 发明申请

US20100031058A1 Computer System, Storage System and Management Computer for Backing Up and Restore Encryption Key for Storage System Incorporating Therein a Stored Data Encryption Function 有权
标题翻译：计算机系统，存储系统和管理计算机，用于备份和恢复存储系统加密密钥，存储数据加密功能
公开(公告)号：US20100031058A1
公开(公告)日：2010-02-04
申请号：US12025189
申请日：2008-02-04
申请人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
发明人： Daisuke Kito , Kenji Fujii , Nobuyuki Osaki
IPC分类号： G06F12/14 , H04L9/14
CPC分类号： G06F21/602 , G06F11/1435 , G06F11/1456 , G06F11/1469 , G06F21/78 , G06F2221/2117
摘要： To protect data from corruption due to restoration of an encryption key to a wrong storage system, there is provided a computer system including a first storage system and a second storage system, wherein: the first storage system, upon receiving a request to write first data to a first area in the first storage system, encrypts the first data by using a first key and writes the first data in the first area, and, upon receiving a request to write second data to a third area, encrypts the second data by using a second key and transmits a request to write the encrypted second data in a second area in the second storage system; and the computer system holds the first key, an identifier of the first storage system associated with the first key, the second key, and an identifier of the second storage system associated with the second key.
摘要翻译：为了防止由于将加密密钥恢复到错误的存储系统而导致的数据不被破坏，提供了一种包括第一存储系统和第二存储系统的计算机系统，其中：第一存储系统在接收到写入第一数据的请求时到第一存储系统中的第一区域，通过使用第一密钥对第一数据进行加密，并将第一数据写入第一区域，并且在接收到向第三区域写入第二数据的请求时，通过使用第二密钥，并且在第二存储系统中的第二区域中发送写入加密的第二数据的请求; 并且计算机系统保存第一密钥，与第一密钥相关联的第一存储系统的标识符，第二密钥以及与第二密钥相关联的第二存储系统的标识符。

8. 发明申请

US20090271619A1 External storage apparatus and method of preventing information leakage 有权
标题翻译：外部存储装置和防止信息泄漏的方法
公开(公告)号：US20090271619A1
公开(公告)日：2009-10-29
申请号：US12007460
申请日：2008-01-10
申请人： Kenji Fujii , Daisuke Kito , Manabu Kitamura
发明人： Kenji Fujii , Daisuke Kito , Manabu Kitamura
IPC分类号： H04L9/00 , G06F12/14 , H04L9/14
CPC分类号： G06F21/78 , G06F21/88 , G06F2221/2143
摘要： Proposed is an apparatus and method of preventing the leakage of information from an external storage apparatus even when such external storage apparatus is stolen or accessed from an unauthorized host computer. This external storage apparatus accessible from a host computer or another external storage apparatus via a network encrypts or decrypts data written from a host computer to be stored in the storage area, sends a request for existence confirmation to the host computer or the other external storage apparatus every predetermined period of time, and zeroizes an encryption key to be used in the encryption calculation for encrypting or decrypting data to be performed by the encryption calculation unit based on the result of a response from the host computer or the other external storage apparatus in reply to the request.
摘要翻译：提出了即使当这种外部存储装置从未授权的主计算机被盗或访问时，也可以防止信息从外部存储装置泄露的装置和方法。可以通过网络从主机或其他外部存储装置访问的该外部存储装置对从主计算机写入的要存储在存储区域中的数据进行加密或解密，向主计算机或其他外部存储装置发送存在确认请求并根据来自主机或其他外部存储装置的响应结果，对由加密计算单元进行加密或解密的数据进行加密运算时使用的加密密钥归零要求。

9. 发明申请

US20070260806A1 Storage system 有权
标题翻译：存储系统
公开(公告)号：US20070260806A1
公开(公告)日：2007-11-08
申请号：US11475971
申请日：2006-06-28
申请人： Daisuke Kito , Kenji Fujii , Yasunori Kaneda , Masato Arai
发明人： Daisuke Kito , Kenji Fujii , Yasunori Kaneda , Masato Arai
IPC分类号： G06F12/00
CPC分类号： G06F3/0644 , G06F3/0605 , G06F3/0607 , G06F3/0619 , G06F3/0637 , G06F3/0685
摘要： In a computer system including a plurality of data storage apparatuses and a management computer, a given data storage apparatus, upon receipt of a control request for a local data storage apparatus from a management computer, accesses the hierarchical relation information between the storage areas in the local data storage apparatus and the storage areas of the other data storage apparatuses, and in the case where a storage area in the local data storage apparatus is set to correspond to a level lower than the other data storage apparatuses, transmits an approval request to the other data storage apparatuses. The given data storage apparatus, upon receipt of the approval from the other data storage apparatuses, executes the control request of the management computer.
摘要翻译：在包括多个数据存储装置和管理计算机的计算机系统中，给定数据存储装置在从管理计算机接收到对本地数据存储装置的控制请求时，访问所述存储区域中的分层关系信息本地数据存储装置和其他数据存储装置的存储区域，并且在本地数据存储装置中的存储区域被设置为对应于低于其他数据存储装置的级别的情况下，将批准请求发送到其他数据存储装置。给定数据存储装置在接收到来自其他数据存储装置的批准之后，执行管理计算机的控制请求。

10. 发明授权

US08650374B2 Storage system 失效
标题翻译：存储系统
公开(公告)号：US08650374B2
公开(公告)日：2014-02-11
申请号：US12983374
申请日：2011-01-03
申请人： Daisuke Kito , Kenji Fujii , Yasunori Kaneda , Masato Arai
发明人： Daisuke Kito , Kenji Fujii , Yasunori Kaneda , Masato Arai
IPC分类号： G06F12/08
CPC分类号： G06F3/0644 , G06F3/0605 , G06F3/0607 , G06F3/0619 , G06F3/0637 , G06F3/0685
摘要： In a computer system including a plurality of data storage apparatuses and a management computer, a given data storage apparatus, upon receipt of a control request for a local data storage apparatus from a management computer, accesses the hierarchical relation information between the storage areas in the local data storage apparatus and the storage areas of the other data storage apparatuses, and in the case where a storage area in the local data storage apparatus is set to correspond to a level lower than the other data storage apparatuses, transmits an approval request to the other data storage apparatuses. The given data storage apparatus, upon receipt of the approval from the other data storage apparatuses, executes the control request of the management computer.
摘要翻译：在包括多个数据存储装置和管理计算机的计算机系统中，给定数据存储装置在从管理计算机接收到对本地数据存储装置的控制请求时，访问所述存储区域中的分层关系信息本地数据存储装置和其他数据存储装置的存储区域，并且在本地数据存储装置中的存储区域被设置为对应于低于其他数据存储装置的级别的情况下，将批准请求发送到其他数据存储装置。给定数据存储装置在接收到来自其他数据存储装置的批准之后，执行管理计算机的控制请求。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式