Hitachi, Ltd.

Akitsugu Kanda

Etsutaro Akagawa

Yohsuke Ishii

The present invention provides a log management system which is devised so that improper behavior by managers with regard to the log information can easily be discovered. Virtual OS are respectively installed for respective users in a file server that can also be constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS can exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network. The respective networks are separated. As a result of the same log information being managed by multiplex management using separate management devices, it can be detected whether or not there has been any improper behavior with respect to the log information.

File server, file server log management system and file server log management method

A log management system is devised to easily discover improper handling log information by managers. Virtual operation systems (OS) are respectively installed for respective users in a file server constructed as an NAS device. These virtual OS function as virtual NAS. The virtual OS and manager OS exchange information relating to log information via an information exchange part constructed as a kernel. The log information produced in the virtual OS is transmitted to a first log management device via a first communications network, and is also transmitted to a second log management device via a second communications network separated from the first communications network. As a result of the same log information being managed by multiplex management using separate management devices, the system detects whether or not there has been any improper handling of the log information.

To restrict actions such as spoofing and thereby prevent tapping and leakages of data by certifying whether or not each communication device such as a storage device on a communication line is to be connected to the communication line. Upon receipt of a packet that contains an IP address in its IP header and stores a certificate in its certificate payload from a storage device, an authentication devicecompares an IP address that is recorded in the certificate and the IP address that is recorded on the IP header of the packet. If the comparison results in a match of these IP addresses, the authentication devicecan certify that the storage deviceis a device for which a certificate issuing devicehas properly issued the certificate.

Authentication device and computer system

A storage system connected to a network is provided which is capable of managing other devices connected to the network. A storage system () is connected via a switch () to a network () to provide clients () with data. The storage system has a control unit which sets the switch () and a setting command preserving unit which keeps a command for setting the switch (). The control unit uses the preserved command to set the switch ().

Growing community of inventors

Sagamihara, Japan

Akitsugu Kanda