Patent ID: 8195904

Claim:
A storage system comprising: a controller receiving a plurality of access commands via a fibre channel from a plurality of host groups each including a plurality of host computers ; a plurality of disk drives being coupled to said controller, said controller providing a plurality of logical storage regions corresponding to said plurality of disk drives to said plurality of host computers; and a panel adapted to display a first host group identifier, related to a first host group of said plurality of host groups, and a first logical storage region of said plurality of logical storage regions, so that a security information of said first logical storage region can be set for said first host group identifier by a user on a host group basis via the panel, wherein said panel is adapted to display a first host identifier, related to a first host computer of said plurality of host computers, and said first logical storage region, so that said security information of said first logical storage region can be set for said first host identifier on a host computer basis via the panel, wherein if said first logical storage region is set as an accessible logical storage region for said first host group identifier by said user via said panel, in response to an access command sent from any of said plurality of host computers included in said first host group to said first logical storage region, said controller controls to send information indicating that access to data stored in said first logical storage region is permitted, wherein if said first logical storage region is set as an inaccessible logical storage region for said first host group identifier by said user, in response to an access command sent from any of said plurality of host computers included in said first host group to said first logical storage region, said controller controls to send information indicating that access to data stored in said first logical storage region is not permitted, wherein if said first logical storage region is set as an accessible logical storage region for said first host identifier by said user, in response to an access command sent from said first host computer to said first logical storage region, said controller controls to send information indicating that access to data stored in said first logical storage region is permitted, and wherein if said first logical storage region is set as an inaccessible logical storage region for said first host identifier by said user, in response to an access command sent from said first host computer to said first logical storage region, said controller controls to send information indicating that access to data stored in said first logical storage region is not permitted.