Patent ID: 7353542
Filing Date: 2008-04-01
Classification: G06F,H04L

Abstract:
1. A storage system having a plurality of storing areas that can be accessed from a plurality of computers connected to the storage system through a network, comprising: a control unit; and a plurality of disk devices that constitute said plurality of storing areas and are connected to said control unit, wherein said control unit comprises: a first interface connected to said network, a memory, and a second interface connected to said plurality of disk devices, wherein said memory stores an authorization table which stores a combination of a computer identifier that identifies a computer among said plurality of computers and a storing area identifier that specifies a storing area accessible from the computer identified by said computer identifier, an authentication table which stores a combination of a user identifier that identifies a user who uses one of said plurality of computers and authentication information that authenticates said user, and an authentication name authorization table which stores a combination of an user identifier and a storing area identifier of a storing area that an user identified by said user identifier is permitted to access, and wherein said control unit uses said authorization table to authorize a computer that accesses a storing area, uses said authentication table to authenticate a user who accesses said storage system, uses said authentication name authorization table to judge whether the authenticated user who accesses a storing area from the authorized computer has a valid access right to said storing area, and permits access by said user only when said user has a valid access right.