Hewlett-packard Development Company, L.P.

Paul D Guttormson

Michael D Walker

James Edwin Pherson

Stephen J Sicola

Susan Gaye Elkington

Diana Shen

Richard Franklin Lary

A method for implementing security management in a storage area network by controlling access to network resources. Initially, a resource provider communicates with potential resource users, such as host computers, servers, and workstations, to allow the users to discover the resources available on the storage area network. Resource users that have not previously logged in to a particular resource supply identification information to the resource provider, which places the information in a 'not yet approved entity' table. The 'not yet approved entity' table is made available to a management station. An administrator, using the management station, then determines whether to authorize use of resources. If access to the requested resource is allowed, the resource user identification information is stored in an &#x2018;approved entity&#x2019; table. A login is then allowed by the resource user to the selected resource. Once a resource user has initially logged in, connection information is maintained in the &#x2018;approved entity&#x2019; table facilitating subsequent log-in attempts by the resource user.

File security management

System for controlling access to resources in a storage area network

A system which provides a completely redundant configuration including dual Fibre Channel fabric links interconnecting each of the components of two data storage sites, wherein each site comprises a host computer and associated data storage array, with redundant array controllers and adapters. The array controllers perform a command and data logging function which stores all host write commands and data 'missed' by the backup storage array during a situation wherein the links between the sites are down, the remote site is down, or where a site failover to the remote site has occurred. Log units are used to store, in order, all commands and data for every transaction which was 'missed' by the backup storage array when one of the above system error conditions has occurred. The system provides rapid and accurate recovery of backup data at the remote site by sending all logged commands and data from the logging site over the link to the backup site in order, while avoiding the overhead of a full copy operation.

Controller-based transaction logging system for data recovery in a storage area network

A data replication system having a redundant configuration including dual Fibre Channel fabric links interconnecting each of the components of two data storage sites, wherein each site comprises a host computer and associated data storage array, with redundant array controllers and adapters. Each array controller in the system is capable of performing all of the data replication functions, and each host 'sees' remote data as if it were local. Each array controller has a dedicated link via a fabric to a partner on the remote side of the long-distance link between fabric elements. Each dedicated link does not appear to any host as an available link to them for data access; however, it is visible to the partner array controllers involved in data replication operations. These links are managed by each partner array controller as if being 'clustered' with a reliable data link between them.

System for data replication using redundant pairs of storage controllers, fibre channel fabrics and links therebetween

Growing community of inventors

Colorado Springs, CO, United States of America

Paul D Guttormson