Fiber channel connection magnetic disk device and fiber channel connection magnetic disk controller

[0002] 1. Field of the Invention

[0003] The present invention relates to a fiber channel connection magnetic disk device and a fiber channel connection magnetic disk controller, and particularly to a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers and a fiber channel connection magnetic disk controller (hereinafter properly referred to as “magnetic disk device”).

[0004] 2. Description of the Prior Art

[0005] In a system in which a plurality of hosts are connected to a magnetic disk device through a fiber channel, the following methods have been hitherto known as a logical volume access right managing method for identifying a host and protecting an access to logical volumes in the magnetic disk device.

[0006] For example, in a connection style shown in FIG. 13, a host 100 is connected to a port 310 and a port 320 through a port 110 and a port 120 respectively, and a host 200 is connected to a port 330 and a port 340 through a port 210 and a port 220 respectively, whereby the hosts 100 and 200 are connected to a magnetic disk device 300. In such a connection style, by managing logical volumes 350, 360, 370 and 380 which can be accessed from each of the ports 310, 320, 330, 340, the access right to the logical volumes 350, 360, 370, 380 can be managed.

[0007] Further, in a connection style shown in FIG. 14, the host 100 is connected to the magnetic disk device 300 while the port 110 and the port 120 are connected to the port 310 and the port 320 respectively, and the host 200 is connected to the magnetic disk device 300 while the port 210 and the port 220 are connected to the port 310 and the port 320 respectively. Such a connection style corresponds to Arbitrated Loop topology or Fabric topology in terms of topology of fiber channels. In order to manage the logical volumes 350, 360, 370, 380: which are accessible from each of the hosts 100, 200, the method may be used an access right managing method based on a port identifier (N_Port ID) and an access right managing method based on host identification using a protocol of an upper layer.

[0008] Further, in “FIBER CHANNEL CONNECTION STORAGE CONTROLLER” disclosed in Japanese Laid-open Patent Application No. Hei-10-333839, N_Port_Name information for uniquely identifying a host device is set in a microprocessor of a storage controller before the starting of host devices. When the host devices are started and an issued frame is received by the storage controller, the microprocessor operates comparison to detect whether or not the N_Port_Name information stored in this frame is registered in an N_Port_Name list in a control table already set and held in the microprocessor, and continues a processing based on the instruction of the frame if they are coincident while rejecting the request if they are not coincident, thereby managing the access right.

[0009] However, in the above-described technique, the following problems occur when the management of the access right to the logical volume is performed.

[0010] A first problem resides in that when the magnetic disk device 300 is jointly owned by the hosts 100 and 200 in a system using a fiber channel, the management of the access right to the logical volumes 350, 360, 370, 380 is dependent on the number of ports of the magnetic disk device 300 if the connection style as shown in FIG. 13 is used. This is because the management of the accessible logical volumes 350, 360, 370, 380 is performed every the port 310, 320, 330, 340 of the magnetic disk device 300 without identifying each of the hosts 100, 200.

[0011] A second problem resides in that when the connection of the system is changed in the port-based logical volume access right management method shown in FIG. 13, the access right management of each port 310, 320, 330, 340 of the magnetic disk device 300 is required to be altered, and thus a management miss is liable to occur. This is also because the management of the accessible logical volumes 350, 360, 370, 380 is performed every the port 310, 320, 330, 340 of the magnetic disk device 300 without identifying each of the hosts 100, 200.

[0012] A third problem resides in that when the access right is managed by the port identifier (N_Port ID) in the connection style as shown in FIG. 14, the port identifier is determined through initialization processing on the basis of the specification of the fiber channel, and thus it may be varied due to extension/reduction of hosts, change of the connection of the system or the like, so that it is difficult to manage the access right on the basis of the port identifier. This is because the port identifier is dynamically varied.

[0013] A fourth problem resides in that when the host identification is executed on the basis of the protocol of the upper layer in the connection style as shown in FIG. 14, it is necessary to perform a special-purpose control operation for only the magnetic disk device 300 to be connected to an upper host. This is because the host identification is carried out by using the protocol of the upper layer.

[0014] A fifth problem resides in that it is difficult in the “fiber channel connection storage controller” disclosed in Japanese Laid-open Patent Application No. Hei-10-333839 to support the dynamical alteration of the access right due to extension/reduction of hosts, change of the connection of the system or the like. This is because the N_Port_Name information for uniquely identifying the port of the host device is required to be set in the microprocessor of the storage controller before the starting of the host devices.

[0015] In the specification of the fiber channel, the following identifies are provided as an identifier for identifying a host or port.

[0016] N_Port ID: Identifier for a port used to indicate a transmission source/transmission destination of a frame to be transmitted/received.

[0017] Node Name: Identifier given as a unique value to a node such as a host, a magnetic disk device or the like

[0018] Port Name: Unique identifier for a port which is given every port of node.

[0019] N_Port ID: Identifier for identifying a port of a host determined through initialization processing of a fiber channel, and it is too unstable to surely identify the host even when the system is extended or abnormality occurs.

[0020] Therefore, the identification of hosts or ports by using Node Name/Port Name may be considered.

[0021] In the fiber channel, processing called as “port log-in” in which a port at the transmission/reception side transmits to a communication partner as a port log-in frame Node Name/Port Name which are unique values for each node/each port is indispensable in order to actually access a logical volume in a magnetic disk device. In consideration of this, if a port controller is set to register N_Port ID in a local access right management table by using a global access right management table, even when N_Port ID is afterwards varied, the host must execute the port log-in processing again, so that it is sufficient to merely re-register N_Port ID in the local access right management table by using the global access right management table managed every port at that time.

[0022] Therefore, a first object of the present invention is to provide a fiber channel connection magnetic disk device which performs management of the access right to logical volumes in the magnetic disk device by identifying a host while the host is not required to perform a control operation dependent on the number of ports of the magnetic disk device or on the magnetic disk device on the basis of the fiber channel specification.

[0023] A second object of the present invention is to provide a fiber channel connection magnetic disk device which manages the access right every logical volume, whereby the management can be continuously performed even when a connection condition is varied.

[0024] A third object of the present invention is to provide a fiber channel connection magnetic disk controller which performs management of the access right to logical volumes in the magnetic disk device by identifying a host while the host is not required to perform a control operation dependent on the number of ports of the magnetic disk device or on the magnetic disk device on the basis of the fiber channel specification.

[0025] A fourth object of the present invention is to provide a fiber channel connection magnetic disk controller which manages the access right every logical volume, whereby the management can be continuously performed even when a connection condition is varied.

[0026] A fifth object of the present invention is to provide a logical volume access right management method which performs management of the access right to logical volumes in the magnetic disk device by identifying a host while the host is not required to perform a control operation dependent on the number of ports of the magnetic disk device or on the magnetic disk device on the basis of the fiber channel specification.

[0027] A sixth object of the present invention is to provide a logical volume access right management method which manages the access right every logical volume, whereby the management can be continuously performed even when a connection condition is varied.

[0028] According to a first aspect of the present invention, there is provided a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, comprising: a port controller for managing the relationship between an identifier allocated to each host and a logical volume accessible from the host having the identifier; and a local access right management table memory for storing the management state of a logical volume accessible from an indicated host, said port controller being capable of rejecting an access from hosts other than the indicated host. Particularly, Node Name defined in the fiber channel specification is used as the identifier of the host.

[0029] According to a second aspect of the present invention, there is provided a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, which comprises: a port controller for managing the relationship between an identifier allocated to the port of each host and a logical volume accessible from the port of the host having the identifier; and a local access right management table memory for storing the management state of a logical volume accessible from the port of an indicated host, said port controller being capable of rejecting an access from the ports of hosts other than the port of the indicated host. Particularly, Port Name defined in the fiber channel specification is used as the identifier of the port of the host.

[0030] According to a third aspect of the present invention, there is provided a fiber-channel specification supporting fiber channel connection magnetic disk device, which comprises: a plurality of logical volumes; a volume controller for controlling said logical volumes; a plurality of fiber-channel specification supporting port controllers each of which comprises a fiber channel controller, a local memory, CPU and a common memory access controller; a common memory which are jointly owned by said plural port controllers; a global access right management table memory for storing into said common memory Node Name defined in the fiber channel specification as an identifier of a host having an access right every logical volume; and a local access right management table memory which is formed by obtaining Node Name from said global access right management table memory every logical volume and registering Node Name thus obtained into said local memory by each port controller when power is turned on, wherein when the same Node Name as Node Name in a port log-in frame is registered in a local access right management table memory of said port controller at the reception time of the port log-in frame, said port controller registers N_Port ID in the port log-in frame in connection with the Node Name to perform accept processing, at the reception time of an access command said port controller checks whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of said port controller, and if the same N_Port ID is registered, said port controller recognizes that an access is made from the host of Node Name corresponding to N_Port ID and thus allows the access while if the same N_Port ID is not registered, said port controller rejects the access.

[0031] According to a fourth aspect of the present invention, there is provided a fiber-channel specification supporting fiber channel connection magnetic disk device, which comprises: a plurality of logical volumes; a volume controller for controlling said logical volumes; a plurality of fiber-channel specification supporting port controllers each of which comprises a fiber channel controller, a local memory, CPU and a common memory access controller; a common memory which are jointly owned by said plural port controllers; a global access right management table memory for storing into said common memory Port Name defined in the fiber channel specification as an identifier of a port of a host having an access right every logical volume; and a local access right management table memory which is formed by obtaining Port Name from said global access right management table memory every logical volume and registering Port Name thus obtained into said local memory by each port controller when power is turned on, wherein when the same Port Name as Port Name in a port log-in frame is registered in a local access right management table memory of said port controller at the reception time of the port log-in frame, said port controller registers N_Port ID in the port log-in frame in connection with the Port Name to perform accept processing, at the reception time of an access command said port controller checks whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of said port controller, and if the same N_Port ID is registered, said port controller recognizes that an access is made from a port of the host of Node Name corresponding to N_Port ID and thus allows the access while if the same N_Port ID is not registered, said port controller rejects the access.

[0032] According to a fifth aspect of the present invention, there is provided a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, which comprises: a port controller for managing the relationship between an identifier allocated to each host and a logical volume accessible from the host having the identifier; and a local access right management table memory for storing the management state of a logical volume accessible from an indicated host, said port controller being capable of rejecting an access from hosts other than the indicated host.

[0033] According to a sixth aspect of the present invention, there is provided a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, which comprises: a port controller for managing the relationship between an identifier allocated to the port of each host and a logical volume accessible from the port of the host having the identifier; and a local access right management table memory for storing the management state of a logical volume accessible from the port of an indicated host, said port controller being capable of rejecting an access from the ports of hosts other than the port of the indicated host.

[0034] According to a seventh aspect of the present invention, there is provided a fiber-channel specification supporting fiber channel connection magnetic disk controller, which comprises: a plurality of logical volumes; a volume controller for controlling said logical volumes; a plurality of fiber-channel specification supporting port controllers each of which comprises a fiber channel controller, a local memory, CPU and a common memory access controller; a common memory which are jointly owned by said plural port controllers; a global access right management table memory for storing into said common memory Node Name defined in the fiber channel specification as an identifier of a host having an access right every logical volume; and a local access right management table memory which is formed by obtaining Node Name from said global access right management table memory every logical volume and registering Node Name thus obtained into said local memory by each port controller when power is turned on, wherein when the same Node Name as Node Name in a port log-in frame is registered in a local access right management table memory of said port controller at the reception time of the port log-in frame, said port controller registers N_Port ID in the port log-in frame in connection with the Node Name to perform accept processing, at the reception time of an access command said port controller checks whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of said port controller, and if the same N_Port ID is registered, said port controller recognizes that an access is made from the host of Node Name corresponding to N_Port ID and thus allows the access while if the same N_Port ID is not registered, said port controller rejects the access.

[0035] According to an eighth aspect of the present invention, there is provided a fiber-channel specification supporting fiber channel connection magnetic disk controller, which comprises: a plurality of logical volumes; a volume controller for controlling said logical volumes; a plurality of fiber-channel specification supporting port controllers each of which comprises a fiber channel controller, a local memory, CPU and a common memory access controller; a common memory which are jointly owned by said plural port controllers; a global access right management table memory for storing into said common memory Port Name defined in the fiber channel specification as an identifier of a port of a host having an access right every logical volume; and a local access right management table memory which is formed by obtaining Port Name from said global access right management table memory every logical volume and registering Port Name thus obtained into said local memory by each port controller when power is turned on, wherein when the same Port Name as Port Name in a port log-in frame is registered in a local access right management table memory of said port controller at the reception time of the port log-in frame, said port controller registers N_Port ID in the port log-in frame in connection with the Port Name to perform accept processing, at the reception time of an access command said port controller checks whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of said port controller, and if the same N_Port ID is registered, said port controller recognizes that an access is made from a port of the host of Node Name corresponding to N_Port ID and thus allows the access while if the same N_Port ID is not registered, said port controller rejects the access.

[0036] According to a ninth aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, which is characterized by comprising the steps of: detecting an identifier of each host; managing the relationship between the identifier of each host and a logical volume accessible from the host having the identifier; and rejecting an access from hosts other than an indicated host to a logical volume accessible from the indicated host.

[0037] According to a tenth aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk controller having a plurality of fiber-channel'specification supporting port controllers, which is characterized by comprising the steps of: detecting an identifier of each host; managing the relationship between the identifier of each host and a logical volume accessible from the host having the identifier; and rejecting an access from hosts other than an indicated host to a logical volume accessible from the indicated host.

[0038] According to an eleventh aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, which is characterized by comprising the steps of: obtaining Node Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Node Name thus obtained into a local memory to thereby form a local access right management table memory; if at the reception time of a port log-in frame the same Node Name as Node Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Node Name, thereby performing accept processing; and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a host of Node Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0039] According to a twelfth aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk device having a plurality of fiber-channel specification supporting port controllers, which is characterized by comprising the steps of: obtaining Port Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Port Name thus obtained into a local memory to thereby form a local access right management table memory; if at the reception time of a port log-in frame the same Port Name as Port Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Port Name, thereby performing accept processing: and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a port of Port Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0040] According to a thirteenth aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, characterized by comprising the steps of: obtaining Node Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Node Name thus obtained into a local memory to thereby form a local access right management table memory; if at the reception time of a port log-in frame the same Node Name as Node Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Node Name, thereby performing accept processing; and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a host of Node Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0041] According to a fourteenth aspect of the present invention, there is provided a logical volume access right management method for a fiber channel connection magnetic disk controller having a plurality of fiber-channel specification supporting port controllers, characterized by comprising the steps of: obtaining Port Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Port Name thus obtained into a local memory to thereby form a local access!right management table memory; if at the reception time of a port log-in frame the same Port Name as Port Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Port Name, thereby performing accept processing; and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a port of Port Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0042] According to a fifteenth aspect of the present invention, there is provided a recording medium recorded with a program which is readable by a computer and enables the computer to execute the following steps: obtaining Node Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Node Name thus obtained into a local memory to thereby form a local access right management table memory; if at the reception time of a port log-in frame the same Node Name as Node Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Node Name, thereby performing accept processing; and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a host of Node Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0043] According to a sixteenth aspect of the present invention, there is provided a recording medium recorded with a program which is readable by a computer and enables the computer to execute the following steps: obtaining Port Name from a global access right management table memory on a common memory every logical volume when power is turned on, and registering Port Name thus obtained into a local memory to thereby form a local access right management table memory; if at the reception time of a port log-in frame the same Port Name as Port Name in the port log-in frame is registered in the local access right management table memory of the self port controller, registering N_Port ID in the port log-in frame in connection with the Port Name, thereby performing accept processing; and checking at the reception time of an access command whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory of the self port controller, and recognizing that an access is made from a port of Port Name corresponding to N_Port ID and allowing the access if the same N_Port ID is registered while rejecting the access if the same N_Port ID is not registered.

[0044] FIG. 1 is a block diagram showing the system construction containing a fiber channel connection magnetic disk device according to a first embodiment of the present invention;

[0045] FIG. 2 is a diagram showing the content of a global access right management table memory of FIG. 1;

[0046] FIG. 3 is a diagram showing the content of a local access right management table memory of FIG. 1;

[0047] FIG. 4 is a flowchart showing the processing of a port controller of FIG. 1 when power is turned on;

[0048] FIG. 5 is a flowchart showing port log-in processing in the port controller of FIG. 1;

[0049] FIG. 6 is a flowchart showing the processing of the port controller of FIG. 1 when an access command is received;

[0050] FIG. 7 is a block diagram showing the system construction containing a fiber channel connection magnetic disk device according to a second embodiment of the present invention;

[0051] FIG. 8 is a diagram showing the content of the global access right management table memory of FIG. 7;

[0052] FIG. 9 is a diagram showing the content of the local access right management table memory of FIG. 7;

[0053] FIG. 10 is a flowchart showing port log-in processing in the port controller of FIG. 7;

[0054] FIG. 11 is a block diagram showing the system construction containing a fiber channel connection magnetic disk device according to a third embodiment of the present invention;

[0055] FIG. 12 is a block diagram showing the system construction containing a fiber channel connection magnetic disk device according to a fourth embodiment of the present invention;

[0056] FIG. 13 is a block diagram showing a connection style of a conventional fiber channel connection magnetic disk device; and

[0057] FIG. 14 is a block diagram showing another connection style of the conventional fiber channel connection magnetic disk device.

[0058] Preferred embodiments according to the present invention will be described hereunder with reference to the accompanying drawings.

[0059] FIG. 1 is a block diagram showing a system using a fiber channel connection magnetic disk device according to a first embodiment of the present invention. The system shown in FIG. 1 comprises a plurality of (four in FIG. 1) hosts 1, 2, 3, 4, a magnetic disk device 5, loop hubs 60, 61 and fabric switches 70, 71.

[0060] The host 1 has ports 10, 11, the host 2 has ports 20, 21, the host 3 has ports 30, 31 and the host 4 has ports 40, 41. The magnetic disk device 5 comprises port controllers 50, 51, 52, 53, a common memory 54, a volume controller 55 and plural logical volumes 5601 to 5699. Each of the port controllers 50, 51, 52, 53 comprises a fiber channel controller 501, 511, 521, 531, a local memory 502, 512, 522, 532, CPU (Central Processing Unit) 503, 513, 523, 533 and a common memory access controller 504514, 524, 534, respectively.

[0061] The port 10 of the host 1 is connected through the loop hub 60 to the port controller 50, and the port 11 is connected through the fabric switch 70 to the port controller 51. The port of the host 2 is connected through the loop hub 60 to the port controller 50, and the port 21 is connected through the fabric switch 70 to the port controller 51. The port 30 of the host 3 is connected through the fabric switch 71 to the port controller 52, and the port 31 is connected through the loop hub 61 to the port controller 53. Further, the port 40 of the host 4 is connected through the fabric switch 71 to the port controller 52, and the port 41 is connected through the loop hub 61 to the port controller 53. With such a connection style, each host 1, 2, 3, 4, is designed to have a substitute pass to the magnetic disk device 5.

[0062] A local access right management table memory 5021, 5121, 5221, 5321 is provided on the local memory 502, 512, 522, 532, respectively. A global access right management table memory 541 is provided on the common memory 54.

[0063] Referring to FIG. 2, the global access right management table memory 541 stores an access restriction or non-restriction flag indicating whether an access should be restricted or not every logical volume 5601 to 5699, and Node Name having an access right every logical volume 5601 to 5699. Only one host does not necessarily have an access right to one logical volume, and the access right may be given to plural hosts. In this case, the global access right management table memory 541 stores plural Node Names. For example, in FIG. 2, only the hosts 1 and 3 are registered as hosts having the access right to the logical volume 5601.

[0064] Referring to FIG. 3, the local access right management table memory 5021, 5121, 5221, 5321 manages an access restriction or non-restriction flag for each logical volume 5601 to 5699, the relationship between Source ID in a port log-in frame (N_Port ID of a host transmitting the frame) and Node Name, and a flag indicating validity/non-validity of each N_Port ID (Valid flag). When the valid flag is on, it indicates that N_Port ID is managed, and when the valid flag is off, it indicates that N_Port I is not managed.

[0065] Referring to FIG. 4, the processing of the port controller 50, 51, 52, 53 when power is turned on comprises a step S101 for obtaining the global access right management table memory, and a fiber channel link initializing step S102.

[0066] Referring to FIG. 5, the port log-in processing of the port controller 50, 51, 52, 53 comprises a port log-in frame reception step S201, an ACC response judgment step S202, an access restriction or non-restriction judgment step S203, a Node Name presence or absence judgment step S204, an N_Port ID registering step S205, an all logical volume access right management table memory check completion judgment step S206, an accept processing step S207 and a reject processing step S208.

[0067] Referring to FIG. 6, the processing at the reception time of the access command of the port controller 50, 51, 52, 53 comprises an access command reception step S301, a local access right management table memory confirming step S302, an access allowance judging step S303, an access processing step S304, and an access rejection processing step S305.

[0068] In the fiber channel connection magnetic disk device 5 according to the first embodiment, it is assumed that each host 1,2,3,4 has Node Name N1, N2, N3, N4 respectively, and the port thereof has Port Name P10, P11, P20, P21, P30, P31, P40, P41 respectively as shown in FIG. 1. These values are unique values to each host or port, and they are unvaried through initialization of the system, etc.

[0069] Next, the operation of the fiber channel connection magnetic disk device 5 according to the first embodiment thus constructed will be described.

[0070] When power is turned on in the magnetic disk device 5, the port controller 50, 51, 52, 53 obtains the access right restriction or non-restriction flag and Node Name from the global access right management table memory 541 every logical volume 5601 to 5699, registers them onto the local memory 502, 512, 522, 532 to create the local access right management table memory 5021, 5121, 5221, 5321 (step S101), and executes the initialization on the link of the fiber channel (step S102).

[0071] Thereafter, each port controller 50, 51, 52, 53 waits for an event from the host 1,2,3,4.

[0072] Subsequently, the host 1,2,3,4 executes the port log-in processing of transmitting to a communication partner port Node Name/Port Name which are unique values to each node/each port as a port log-in frame.

[0073] When receiving a port log-in frame from a communication partner port of the host 1, 2,3,4 (step S201), each port controller 50, 51, 52, 53 transmits an accept frame for the port log-in frame to the communication partner port of the host 1,2,3,4.

[0074] Subsequently, each port controller 50, 51, 52, 53 checks the parameter, etc. in the port log-in frame to confirm whether log-in is possible or not (step S202). When ACC (ACCEPT) response is impossible, the port controller 50, 51, 52, 53 executes the reject processing (step S208).

[0075] When ACC response is possible, the port controller 50, 51, 52, 53 judges whether the access restriction or non-restriction flag registered in the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53 indicates access restriction or access non-restriction (step S203). If the flag indicates the access non-restriction, the processing goes to the accept processing of the step S207 to allow an access to logical volumes having no access restriction at all times.

[0076] If the flag indicates the access non restriction, the port controller 50, 51, 52, 53 judges whether the same Node Name as Node Name in the port log-in frame is registered in the local access rights management table memory 5021, 5121, 5221, 5321 (step S204). If it is not registered, the processing goes to the normal processing.

[0077] If the same Node Name as Node Name in the port log-in frame is registered in the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53, the port controller 50, 51, 52, 53 registers Source ID in the port log-in frame (N_Port ID of the port of the host transmitting the frame) into the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51,52,53 in association with its Node Name, and the corresponding valid flag is set to ON (step S205).

[0078] The port controller 50, 51, 52, 53 repeats the same processing for all the logical volumes 5601 to 5699 (step S206) to manage the access right of all the logical volumes 5601 to 5699.

[0079] If the access non-restriction is judged in step S203, and if the check of the local access right management table memory 5021, 5121, 5221, 5321 to all the logical volumes 5601 to 5699 is completed in step S206, the port controller 50, 51, 52, 53 performs the accept processing (step S207), whereby the host 1,2,3,4 is allowed to access the logical volumes 5601 to 5699. That is, an issuance of the access command is allowed.

[0080] In the magnetic disk device 5, when receiving the access command to the logical volume of the host 1,2,3,4 (step S301), the port controller 50, 51, 52, 53 refers to the local access right management table memory 5021, 5121, 5221, 5321 to confirm whether the host issuing the command has an access right to a logical volume serving as an access target (step S302).

[0081] For example, taking the port controller 50 as an example, it first refers to the access restriction or non-restriction flag, and judges that the access is allowed if the access restriction or non-restriction flag indicates the access non-restriction. If the access restriction or non-restriction flag indicates the access restriction, it checks whether the same N_Port ID as N_Port ID in the access command is registered in the local access right management table memory 5021 of the port controller 50 and whether the valid flag is ON. If the same N_Port ID is registered and the valid flag is ON, the port controller recognizes that the access is an access from the host of Node Name corresponding to N_Port ID and allows the access. If the same N_Port ID is not registered or if the valid flag is OFF although the same N_Port ID is registered, the port controller rejects the access. Assuming that the host issuing the access command to the logical volume 5601 is the host 1, the host 1 has the access right to the logical volume 5601 (step S303) as shown in FIG. 3, and thus the port controller 50 performs the normal access processing (step S304). However, assuming that the host issuing the access command to the logical volume 5601 is the host 2, the host 2 has no access right to the logical volume 5601 (step S303), and thus the port controller 50 rejects the access (step S305). The same processing is carried out in the other port controllers 51, 52, 53.

[0082] When the extension/reduction of hosts is carried out on the global access right management table memory 541, in accordance with the extension/reduction, each port controller 50, 51, 52, 53 reads the global access right management table memory 541 onto the local memory 502, 512, 522, 532 again to re-create the local access right management table memory 5021, 5121, 5221, 5321, whereby the host extension/reduction can be more easily performed than the management of Port Name every port controller 50, 51, 52, 53. Further, since Node Names of the hosts 1,2,3,4 are globally managed, the connection change of the system can be easily performed by merely adding/deleting the Node Name of a host whose connection to the global access right management table memory 541 is changed.

[0083] Further, when N_Port ID of a host is changed at the working time of the extension/reduction of the host or the connection change of the system, the magnetic disk device 5 executes port log-out processing. At this time, the relationship between N_Port ID of the previously-used local access right management table memory 5021, 5121, 5221, 5321 and Node Name is invalidated by setting the valid flag to OFF, thereby enabling the continuous management.

[0084] Still further, the port controller 50, 51, 52, 53 executes the port log-in processing, whereby an access to the logical volume can be made even when the connection of the port is replaced by a substitute pass.

[0085] By managing the relationship between N_Port ID and Node Name of the host every port controller 50, 51, 52, 53 in the magnetic disk device 5, the management of the access right can be continuously performed without modification even when N_Port ID is varied.

[0086] In the case of the system construction of FIG. 1, for example, N_Port ID of the port 10, port 20 connected to the loop hub 60 are determined by the initialization processing of the fiber channel executed when the power is turned on in each device. Accordingly, the value of this N_Port ID is varied in accordance with the power-on order to the system or extension (or reduction) of ports (devices) when power is turned off, and it is unsuitable for identification of each port or host.

[0087] For example, it is not necessarily satisfied that the port of each host have the same N_Port ID between the case where after the power-on of the magnetic disk device 5, the power of the host 1 is turned on and then the power of the host 2 is turned on and between the case where the power of the host 2 is turned on before the power of the host 1 is turned on.

[0088] Likewise, with respect to the ports 11, 21, 30, 40 connected to the fabric switches 70, 71, N_Port ID is determined by the configuration of the fabric switches 70, 71 or the topology (Arbitrated Loop or Fabric topology) used between ports connected to the fabric switches 70, 71, and thus it is unsuitable for identification of each port or host.

[0089] Here, when Port Name of the ports of each host 1,2,3,4 is used for the access right management in only each port controller 50, 51, 52, 53, it may be considered that the system connection is changed due to a trouble of the loop hub 61 and the port 31 of the host 3, the port 41 of the host 4 are connected through the loop hub 60 to the magnetic disk device 5. In such a case, only Port Names of the port 10 and the port 20 are recognized as accessible ports in the port controller 50, and thus the access from the port 31 and 41 is impossible.

[0090] However, even when the system connection is required to be changed, the access right management can be continuously performed without carrying out any processing from the external, not by executing the access right management to each logical volume 5601 to 5699 every port of each host 1,2,3,4, but by executing the access right management every host, and not by executing the access right management every port controller 50, 51, 52, 53 at the magnetic disk device 5 side, but by executing the access right management every magnetic disk device 5.

[0091] In the fiber channel connection magnetic disk device 5 according to the first embodiment, the host identification is performed by using Node Name, however, the port identification of the host may be performed by using Port Name.

[0092] Next, a second embodiment of the present invention in which the identification of the port of the host is performed by using Port Name will be described with reference to the drawings.

[0093] FIG. 7 is a block diagram showing a system in which a fiber channel connection magnetic disk device 5′ of a second embodiment of the present invention is disposed.

[0094] In the fiber channel connection magnetic disk device 5′ of this embodiment, the global access right management table memory 541 in which Node Names are registered to identify hosts to which an access is allowed every logical volume 5601 to 5699 in the fiber channel connection magnetic disk device 5 of the first embodiment is changed to a global access right management table memory 541′ in which Port Names are registered to identify ports of hosts to which an access is allowed every logical volume 5601 to 5699 as shown in FIG. 8.

[0095] Further, the local access right management table memorys 5021, 5121, 5221, 5321 in the fiber channel connection magnetic disk device 5 according to the first embodiment are changed to local access right management table memorys 5021′, 5121′, 5221′, 5321′ in which N_Port IDs are registered in association with Port Names as shown in FIG. 9.

[0096] Further, as shown in FIG. 10, the steps S204 and S205 in the port log-in processing of the port controllers 50, 51, 52, 53 shown in FIG. 5 are changed to steps S204′ and S205′ by changing Node Name to Port Name.

[0097] The other elements of the fiber channel connection magnetic disk device 5′ according to the second embodiment are designed in the same construction as the corresponding elements of the fiber channel connection magnetic disk device 5 according to the first embodiment, and thus the detailed description thereof is omitted.

[0098] Next, the operation of the fiber channel connection magnetic disk device 5 of the second embodiment thus constructed will be briefly described while mainly describing the difference from the operation of the fiber channel connection magnetic disk device 5 according to the first embodiment.

[0099] When the power of the magnetic disk device 5 is turned on, the port controller 50, 51, 52, 53 obtains Port Name from the global access right management table memory 541 every logical volume 5601 to 5699 and registers it onto the local memory 502, 512, 522, 532 to create a local access right management table memory 5021′, 5121′, 5221′, 5321′ (step S101) and execute initialization on the link of the fiber channel (step S102). Thereafter, each port controller 50, 51, 52, 53 is kept on standby for an event from the host 1,2,3,4.

[0100] Subsequently, when receiving a port log-in frame from the host 1,2,3,4 (step S201), each port controller 50, 51, 52, 53 checks parameters in the port log-in frame to confirm whether log-in is possible or not (step S202). If ACC (ACCEPT) response is impossible, the port controller 50, 51, 52, 53 executes the reject processing (step S208).

[0101] If ACC response is possible, the port controller 50, 51, 52, 53 judges whether the access restriction or non-restriction flag registered in the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53 indicates access restriction or access non-restriction (step S203). If the flag indicates the access non-restriction, an access to any logical volume having no access restriction is allowed, and thus the processing goes to the accept processing of step S207.

[0102] If the flag indicates the access restriction, the port controller 50, 51, 52, 53 judges whether the same Port Name as Port Name in the port log-in frame is registered in the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53 (step S204′). If the same Port Name is not registered, the processing goes to the normal processing.

[0103] If the same Port Name as Port Name in the port log-in frame is registered in the local access management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53, the port controller 50, 51, 52, 53 registers Source ID in the port log-in frame (N_Port ID of a host transmitting the frame) into the local access right management table memory 5021, 5121, 5221, 5321 of the port controller 50, 51, 52, 53 in association with the Port Name thereof, and sets the corresponding valid flag to ON (step S205′).

[0104] The port controller 50, 51, 52, 53 performs the same processing on all the logical volumes 5601 to 5699 (step S206), thereby managing the access right to all the logical volumes 5601 to 5699.

[0105] If the access non-restriction is judged in step S203, and if the check of the local access right management table memory 5021, 5121, 5221, 5321 to all the logical volumes 5601 to 5699 is completed in step S206, the port controller 50, 51, 52, 53 performs the accept processing (step S207), whereby the host 1,2,3,4 is allowed to access the logical volumes 5601 to 5699. That is, the hosts are allowed to issue the access command.

[0106] According to the fiber channel connection magnetic disk device 5′ of the second embodiment, the ports of the hosts are identified by using Port Name, and thus the logical volume which is accessible every port of host can be set, and thus the access right can be more finely controlled as compared with the fiber channel connection magnetic disk device 5 according to the first embodiment.

[0107] Next, a third embodiment of the present invention will be described in more detail.

[0108] Referring to FIG. 11, a fiber channel connection magnetic disk device 5 according to a third embodiment of the present invention is obtained by equipping the fiber channel connection magnetic disk device 5 of the first embodiment shown in FIG. 1 with a recording medium 800 recorded with a program which executes the processing at the power-on time shown in FIG. 4, the port log-in processing shown in FIG. 5 and the processing shown in FIG. 6 at the reception time of the access command. The recording medium 800 may be a magnetic disk, a semiconductor memory or other recording media.

[0109] The program for executing the processing at the power-on time, the port log-in processing and the processing at the reception time of the access command is read out from the recording medium 800 to the fiber channel connection magnetic disk device 5, and controls the operation of each port controller 50, 51, 52, 53 (particularly, CPU503, 513, 523, 533). The operation of each port controller 50, 51, 52, 53 under the control of the program for executing the processing at the power-on time, the port log-in processing and the processing at the reception time of the access command is the same as the operation in the fiber channel connection magnetic disk device 5, and thus the detailed description thereof is omitted.

[0110] Next, a fourth embodiment of the present invention will be described.

[0111] Referring to FIG. 12, a fiber channel connection magnetic disk device 5′ according to the fourth embodiment of the present invention is obtained by equipping the fiber channel connection magnetic disk device 5′ of the second embodiment shown in FIG. 7 with a recording medium 900 recorded with a program for executing the processing at the power-on time shown in FIG. 4, the port log-in processing shown in FIG. 10 and the processing at the reception time of the access command shown in FIG. 6. This recording medium 900 may be a magnetic disk, a semiconductor memory or other recording media.

[0112] The program for executing the processing at the power-on time, the port log-in processing and the processing at the access command reception time is read out from the recording medium 900 to the fiber channel connection magnetic disk 5′, and controls the operation of each port controller 50, 51, 52, 53 (particularly, CUP 503, 513, 523, 533). The operation of each port controller 50, 51, 52, 53 under the control of the program for executing the processing at the power-on time, the port log-in processing and the processing at the access command reception time is the same as that of the fiber channel connection magnetic disk device 5′ of the second embodiment, and thus the detailed description thereof is omitted.

[0113] In the above-described embodiments, the fiber channel connection magnetic disks 5,5′ are designed so that the logical volumes exist in the housing of the magnetic disk device. However, the present invention may be applied to a fiber channel connection magnetic disk controller which is designed so that the logical volumes exist out of the housing of the magnetic disk device.

[0114] As described above, the present invention has the following effects.

[0115] A first effect resides in that the access right management to the logical volumes can be performed even when plural hosts are connected to ports of the magnetic disk device. This is because one or more Node Name/Port Name are stored in the global access right management table memory every port controller.

[0116] A second effect resides in that even when extension/reduction of hosts, connection change of the system or the like occurs, the access right management for the logical volumes is continued. This is because the global access right management table is referred to and the local access right management table is re-created in synchronism with the processing at the power-on time and the port log-in processing.

[0117] A third effect resides in that the access right management miss can be suppressed by the second effect.

[0118] A fourth effect resides in that a control work exclusively used for the magnetic disk device is not required to the host. This is because the management of the access right to the logical volumes can be executed in the magnetic disk device.