Multi-environment data consistency

[0002] 1. Field of the Invention

[0003] The present invention relates to a method and system for insuring that data is stored in a consistent and sequential manner.

[0004] 2. Description of the Related Art

[0005] Disaster recovery systems typically address two types of failures, a sudden catastrophic failure at a single point in time or data loss over a period of time. In the second type of gradual disaster, updates to volumes may be lost. To assist in recovery of data updates, a copy of data may be provided at a remote location. Such dual or shadow copies are typically made as the application system is writing new data to a primary storage device. International Business Machines Corporation (IBM), the assignee of the subject patent application, provides two systems for maintaining remote copies of data at a secondary site, extended remote copy (XRC) and peer-to-peer remote copy (PPRC). These systems provide a method for recovering data updates between a last, safe backup and a system failure. Such data shadowing systems can also provide an additional remote copy for non-recovery purposes, such as local access at a remote site. These IBM of XRC and PPRC systems are described in IBM publication “Remote Copy: Administrator's Guide and Reference,” IBM document no. SC35-0169-02 (IBM Copyright 1994, 1996), which publication is incorporated herein by reference in its entirety.

[0006] In such backup systems, data is maintained in volume pairs. A volume pair is comprised of a volume in a primary storage device and a corresponding volume in a secondary storage device that includes an identical copy of the data maintained in the primary volume. Typically, the primary volume of the pair will be maintained in a primary direct access storage device (DASD) and the secondary volume of the pair is maintained in a secondary DASD shadowing the data on the primary DASD. A primary storage controller may be provided to control access to the primary DASD and a secondary storage controller may be provided to control access to the secondary DASD.

[0007] In the XRC environment, the application system writing data to the primary volumes includes a sysplex timer which provides a time-of-day (TOD) value as a time stamp to data writes. The application system time stamps data sets when writing such data sets to volumes in the primary DASD. The integrity of data updates is related to insuring that updates are done at the secondary volumes in the volume pair in the same order as they were done on the primary volume. In the XRC and other prior art systems, the time stamp provided by the application program determines the logical sequence of data updates. In many application programs, such as database systems, certain writes cannot occur unless a previous write occurred; otherwise the data integrity would be jeopardized. Such a data write whose integrity is dependent on the occurrence of a previous data writes is known as a dependent write. For instance, if a customer opens an account, deposits $400, and then withdraws $300, the withdrawal update to the system is dependent on the occurrence of the other writes, the opening of the account and the deposit. When such dependent transactions are copied from the primary volumes to secondary volumes, the transaction order must be maintained to maintain the integrity of the dependent write operation.

[0008] Volumes in the primary and secondary DASDs are consistent when all writes have been transferred in their logical order, i.e., all dependent writes transferred first before the writes dependent thereon. In the banking example, this means that the deposit is written to the secondary volume before the withdrawal. A consistency group is a collection of updates to the primary volumes such that dependent writes are secured in a consistent manner. For instance, in the banking example, this means that the withdrawal transaction is in the same consistency group as the deposit or in a later group; the withdrawal cannot be in an earlier consistency group. Consistency groups maintain data consistency across volumes. For instance, if a failure occurs, the deposit will be written to the secondary volume before the withdrawal. Thus, when data is recovered from the secondary volumes, the recovered data will be consistent.

[0009] A consistency time is a time the system derives from the application system's time stamp to the data set. A consistency group has a consistency time for all data writes in a consistency group having a time stamp equal or earlier than the consistency time stamp. In the IBM XRC environment, the consistency time is the latest time to which the system guarantees that updates to the secondary volumes are consistent. As long as the application program is writing data to the primary volume, the consistency time increases. However, if update activity ceases, then the consistency time does not change as there are no data sets with time stamps to provide a time reference for further consistency groups. If all the records in the consistency group are written to secondary volumes, then the reported consistency time reflects the latest time stamp of all records in the consistency group. Methods for maintaining the sequential consistency of data writes and forming consistency groups to maintain sequential consistency in the transfer of data between a primary DASD and secondary DASD are described in U.S. Pat. Nos. 5,615,329 and 5,504,861, which are, assigned to IBM, the assignee of the subject patent application, and which are incorporated herein by reference in their entirety.

[0010] Consistency groups are formed under the following assumptions:

[0011] (A) application writes that are independent can be performed in any order;

[0012] (B) application writes that are dependent must be performed in time stamp order;

[0013] (C) a second write of a first and second dependent write pair will always be either in the same record set consistency group as a first write with a later time stamp or in a subsequent record consistency group.

[0014] In prior art systems, to generate reports for the current data, the user would have to take the application system off-line and stop updating data to the primary volumes. The user could then run reports on the current volumes in the secondary DASD. To insure the consistency of the report at a specific time, the user would break the volume pair and not allow any updates or writes to the primary or secondary volume of those volumes pairs being tested. This allows the user to insure that all writes are consistent as of a specified time. However, with such a system, the primary volume cannot receive updates from the application program until the reports on the secondary volumes are completed and the secondary volumes are brought back on-line to shadow writes to the primary volumes.

[0015] To overcome the limitations in the prior art described above, the present invention discloses a system for maintaining consistency of data across storage devices. A cut-off time value is provided to the system. The system then obtains information on data writes to a first storage device, including information on time stamp values associated with the data writes indicating an order of the data writes to the first storage device. At least one group of data writes having time stamp values earlier in time than the cut-off time value is then formed. The system then transfers the data writes in the groups to a second storage device for storage therein.

[0016] In further embodiments, the system includes information on at least one volume pair to which the cut-off time applies. A volume pair comprises a volume in the second storage device and a corresponding volume in the first storage device. The volume in the second storage device includes a copy of data in the corresponding volume in the first storage device, wherein the groups only include data writes to the provided volume pairs.

[0017] In yet further embodiments, information is obtained and data groups are formed multiple times until the time stamp value of the data writes is determined to be at or later in time than the cut-off time value. If the process of obtaining information reveals that there were no data writes to the first storage device since the previous instance of obtaining information, then a time stamp value is calculated by adding a predetermined time value to the time stamp value of a previously formed group of data writes.

[0018] Preferred embodiments of the present invention provide a system for insuring the consistency of data writes to a first storage device that are shadowed in a secondary device at a user specified cut-off time. The preferred embodiments allow the user to specify a cut-off time at which the secondary storage will be current, i.e., include all data writes having time stamp values earlier in time than the user specified cut-off time. After the secondary storage is consistent as of a user specified cut-off time, the user may run reports on the data knowing that the data in the secondary storage is current and does not include data writes having time stamp values subsequent to the user specified cut-off time. Moreover, with preferred embodiments, data writes can still be made to the volumes in the first primary device even though such data writes are not being provided, for the time being, to the secondary storage device.

[0019] Preferred embodiments further provide a system for calculating a subsequent time stamp value in the event that there were no data writes since the last time information on data writes was obtained. The system may then increment the time stamp value to the user specified cut-off time even if no data writes were made to the primary storage device. This allows the system to keep track of the time stamp values.

[0020] Referring now to the drawings in which like reference numbers represent corresponding parts throughout:

[0021] FIG. 1 is a block diagram illustrating a software and hardware environment in which preferred embodiments of the present invention are implemented; and

[0022] FIG. 2 illustrates a flowchart illustrating logic for sequentially transferring data in a logical order from a first storage device to a second storage device in accordance with preferred embodiments of the present invention.

[0023] In the following description, reference is made to the accompanying drawings which form a part hereof, and which is shown, by way of illustration, several embodiments of the present invention. It is understood that other embodiments may be utilized and structural changes may be made without departing from the scope of the present invention.

[0024] FIG. 1 illustrates the hardware and software environment in which preferred embodiments of the present invention are implemented. Preferred embodiments include an application system 2, a primary 4 and secondary 6 storage controllers, a primary 8 and secondary 10 direct access storage devices (DASD), and a host system 12. Communication lines 14 provide communication between the host system 12 and the primary 4 and secondary 6 storage controllers.

[0025] Storage is maintained at two sites, a primary site and a secondary site. The primary site may include the application system 2, the primary storage controller 4, and the primary DASD 8. The secondary site may include the secondary storage controller 6 and the secondary DASD 10. The host system 12 may be at the secondary or primary site, or an alternative geographical location. In certain embodiments, the primary and secondary sites could be separated by considerable distances, such as several miles.

[0026] At the primary site, the application system 2, such as a database program or any other application program, writes data to the primary DASD 8. In preferred embodiments, the application system 2 includes a sysplex timer to provide a time stamp to any data writes the application system 2 sends to the primary storage controller 4. A backup copy of certain volumes in the primary DASD 8 is maintained in the secondary DASD 10. Volumes in the primary DASD 8 being shadowed in the secondary DASD 10 are referred to as “volume pairs.” The secondary DASD 10 may provide a shadow copy of the data for data recovery purposes.

[0027] The primary 4 and secondary 6 controllers control access to the primary 8 and secondary 10 DASDs, respectively. In the embodiment of FIG. 1, data is transferred from the primary DASD 8, to the primary controller 4, to the host system 12, then to the secondary DASD 10 via the secondary controller 6. In this preferred mode of data transfer, data is transferred between controllers 4, 6 through the host system 12 address space. The primary 4 and secondary 6 storage controllers may be any suitable storage subsystem controller known in the art, such as the IBM 3990 Model 6 storage controller. The host system 12 may be any suitable computer system known in the art, such as a mainframe, desktop, workstation, etc., including an operating system such as WINDOWS®V, AIX®, UNIX®, MVS™, etc. AIX is a registered trademark of IBM; MVS is a trademark of IBM; WINDOWS is a registered trademark of Microsoft Corporation; and UNIX is a registered trademark licensed by the X/Open Company LTD. The communication lines 14 may be comprised of any suitable network technology known in the art, such as LAN, WAN, SNA networks, TCP/IP, the Internet, etc. Alternatively, the communication line may be comprised of ESCON® technology. ESCON is a registered trademark of IBM.

[0028] In preferred embodiments, the host system 12 includes software to automatically read information on data writes to the primary DASD 8 by the application system 2 and transfer the data writes to the secondary DASD 10 for those volume pairs being shadowed at the secondary site. As mentioned, the host system 12 may include software including the functionality of data mover software included in storage management programs known in the art that manage the transfer of data between storage systems. Such data movement software is implemented in the IBM DFSMS software and XRC components implemented in the IBM MVS operating system. In addition to including data mover logic known in the art, the software in the host system 12 would further include additional program instructions and logic to perform the operations of the preferred embodiments of the present invention. The data mover software may be implemented within the operating system of the host systems 2, 4 or as separate, installed application programs. The host system 12 includes various memory areas, such as volatile and non-volatile memory areas, for storing data structures and logic used in implementing the preferred embodiments of the present invention.

[0029] In preferred embodiments, the user enters a command including as parameters a target cut-off time and a set of volume pairs or session including a plurality of volume pairs. This command would cause the system to insure that the data is consistent for the volumes specified in the command at the user specified cut-off time. This means that for the volumes indicated in the command, all consistency groups with a consistency time at or earlier in time than the cut-off time are updated to the secondary volume. After insuring data consistency at this future cut-off time, the user could then suspend the consistent volume pairs and tests data and run various reports on the secondary volume pairs in the secondary DASD 10 knowing that the secondary DASD 10 would be consistent up until the cut-off time. The host system 12 maintains a journal record including control information necessary for forming consistency groups to control the transfer of data sets and volumes from the host system 12 to the secondary DASD 10.

[0030] FIG. 2 illustrates logic implemented as software and/or hardware logic in the host system 12 for insuring data consistency at a user specified cut-off time. Control begins at block 20 which represents a user entering a command at the host system 12 to insure data consistency at a user specified cut-off time. The data would be consistent for volume pairs specified by the user in the command. The user may also specify a command to perform at the cut-off time, such as suspending the specified volumes to prevent further data updates from being transferred from the primary 8 to secondary 10 DASDs or delete the volume pairs from the current session after the cut-off time.

[0031] Control then transfers to block 22 which represents the host system 12 querying the primary controllers 4 to obtain any data writes and metadata describing the data writes received by the primary controllers 4 from the application system 2, including the time stamp information, since the last consistency group was formed. In preferred embodiments, the primary storage controller 4 would independently and immediately sequentially transfer data writes to the primary DASD 8. The time stamp is a time or value provided by the application system 2 specifying a temporal order of data writes. The time stamp value may be a time value or an integer value that is incremented or otherwise modified to reflect the passage of time. Control transfers to block 24 which represents the host system 12 determining whether the query yielded new data writes to the primary controllers subsequent to the formation of the latest consistency group. If so, control transfers to block 26; otherwise, control transfers to block 28. If, at block 24, the query did not locate any recent data writes, then at block 28, the host system 12 calculates a subsequent consistency time by adding the polling time, i.e., time between which the host system 12 queries the primary storage controllers 4 for recent data writes, to the last consistency time for the last consistency group formed.

[0032] Control then transfers to block 30 which represents the host system 12 determining whether the calculated consistency time is at or later in time than the cut-off time. If so, then control transfers to block 32 which represents the host system 12 suspending the volume pairs indicated in the command from being updated. The user may then run various reports or perform tests on the volumes in the secondary DASD 10 subject to the suspend command. Because activity is suspended to the pairs, the reports are generated under the assumption that data is consistent as of the user specified cut-off target time. In alternative embodiments, the command concerning the consistent pairs may be a delete command deleting volume pairs from the session.

[0033] The steps from blocks 24 through 32 allow the host system 12 to generate consistency time stamps to reach the cut-off time when there are no data writes from the application system 2. By generating further consistency times in the absence of data writes, the host system 12 can determine when the target cut-off time is reached and then perform the user specified command, e.g., suspend or delete volume pairs, with the data being consistent in the secondary DASD 10 as of the user specified target cut-off time.

[0034] If, at block 24, there were data writes indicated in the query as of the last consistency time, then control transfers to block 26 which represents the host system 12 determining the maximum time stamps of data writes for all primary controllers 12 in the system, i.e., the most recent time stamp for each primary controller 12. Typically, the maximum (most recent) time stamp for a primary storage controller is the last update or data write received by the storage controller. There may be one or more primary controllers receiving data writes from the application system 2. If there is only one primary controller 4, then there would only be one maximum time stamp for all data writes to such primary storage controller 4. As discussed, in preferred embodiments, the host system 12 makes such determinations on the data after receiving the writes from the primary storage controllers 4. Control then transfers to block 34 which is a decision block representing the host system 12 determining the minimum (oldest) of all the maximum time stamps and then determining whether the minimum of the maximum time stamps is at or later in time than the user specified target cut-off time. If so, control transfers to block 36; otherwise, control transfers to block 38. If the minimum of the maximum time stamps is later in time than the user specified cut-off time, then this indicates that there are data writes subsequent to the user specified cut-off time for the secondary DASD 10.

[0035] If the minimum of the maximum of the time stamps is earlier in time than the target cut-off time, then, at block 38, the host system 12 forms a consistency group including all data writes having time stamps between the last consistency group time and the minimum (oldest) of the maximum (most recent) of the time stamps. Control then transfers to block 40 which represents the host system 12 transferring the data writes to the secondary DASD 10 via the secondary storage controller 6. The secondary storage controller 6 applies the data writes to the secondary DASD in sequential order. From block 40, control transfers back to block 22 et seq. to query the primary controllers to obtain information on any recent data writes and form the necessary consistency groups.

[0036] If the minimum of the maximum time stamps is at or later in time than the target cut-off time, then control transfers to block 36 which represents the host system 12 forming a consistency group including all recent data writes from all primary storage controllers 4 having time stamps between the last consistency group consistency time and the target cut-off time. Any data writes time stamped after the target cut-off time are placed in the subsequent consistency group. Control then transfers to block 42 which represents the host system 12 transferring the data writes to the secondary DASD 10, via the secondary storage controller 6. The secondary storage controller 6 applies the data writes to the secondary DASD in sequential order. Control then transfers to block 32 which represents the host system 12 suspending activity for those volume pairs specified in the user command.

[0037] The user may then generate reports on the suspended volume pairs from the data maintained in the secondary DASD. With the preferred embodiments, the application system 2 can still write data to the primary DASD 8 even though the data is not being shadowed at the secondary DASD 10 during the time the volume pairs are suspended or rendered inactive. This allows a user to generate reports on data in the secondary DASD 10 wherein the data is consistent across a user specified target cut-off time without having to take the application system 2 off-line. Thus, with preferred embodiments, only updates to the secondary DASD 10 are suspended for the specific volume pairs involved, and the entire system does not have to be taken off-line to generate the various reports.

[0038] The preferred embodiments may be implemented as a method, apparatus or article of manufacture using standard programming and/or engineering techniques to produce software, firmware, hardware, or any combination thereof The term “article of manufacture” (or alternatively, “computer program product”) as used herein is intended to encompass one or more computer programs and data files accessible from one or more computer-readable devices, carriers, or media, such as a magnetic storage media, “floppy disk,” CD-ROM, a file server providing access to the programs via a network transmission line, holographic unit, etc. Of course, those skilled in the art will recognize that many modifications may be made to this configuration without departing from the scope of the present invention.

[0039] This concludes the description of the preferred embodiments of the invention. The following describes some alternative embodiments for accomplishing the present invention.

[0040] Preferred embodiments were described with respect to a time stamp generated by a sysplex timer in the application program. In alternative embodiments, the time stamp may be any counter value indicating the sequential order of data writes.

[0041] Preferred embodiments were described with respect to a system in which a host system controlled the movement of data between a primary 8 and secondary 10 DASDs. However, in alternative embodiments some or all of the logic described as implemented in the host system 12 may be implemented in the primary 4 and/or secondary 6 controllers. In yet further embodiments, the functions and operations described with respect to the host system 12 may be performed across multiple processing units and/or host systems.

[0042] Preferred embodiments were described with respect to data writes to one or more primary storage controllers 4 and a single secondary storage controller 6. In alternative embodiments, there may be a plurality of secondary storage controllers 6 and any number of primary storage controller(s) 4.

[0043] The logic concerning the formation of consistency groups and sequentially transferring data from the primary 8 to the secondary 10 DASDs was described as being implemented in software within the host system 12. This logic may be part of the operating system of the host system 12 or an application program such as the IBM DFSMS storage management software. In yet further embodiments, this logic may be maintained in storage areas managed by the controllers 4, 6 or in a read only memory or other hardwired type of device.

[0044] In summary, preferred embodiments in accordance with the present invention disclose a system for maintaining consistency of data across storage devices. A cut-off time value is provided to the system. The system then obtains information on data writes to a first storage device, including information on time stamp values associated with the data writes indicating an order of the data writes to the first storage device. At least one group of data writes having time stamp values earlier in time than the cut-off time value is then formed. The system then transfers the data writes in the groups to a second storage device for storage therein.

[0045] The foregoing description of the preferred embodiments of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of the above teaching. It is intended that the scope of the invention be limited not by this detailed description, but rather by the claims appended hereto. The above specification, examples and data provide a complete description of the manufacture and use of the composition of the invention. Since many embodiments of the invention can be made without departing from the spirit and scope of the invention, the invention resides in the claims hereinafter appended.