Patent ID: 8566948

Claim:
A storage system comprising: computers configured to be used by users; and a storage device shared by the computers, the storage device comprising logical units corresponding to the users, each of the computers comprising: an acquisition unit configured to acquire a first initiator identification in accordance with an operation by a user when the user uses a first computer, the first initiator identification including a user identification identifying the user and a first computer identification identifying the first computer; and a transmitter unit configured to transmit the first initiator identification acquired by the acquisition unit to the storage device when the first initiator identification is acquired by the acquisition unit and the first computer is connected to the storage device, and the storage device comprising: a receiver unit configured to receive the first initiator identification transmitted by the transmitter unit; a database configured to store information in association with user identifications of the users, the information indicating the logical units corresponding to the users identified by the user identifications; a masking unit configured to refer to the database in order to determine a logical unit corresponding to the user identification included in the first initiator identification, and further configured to restrict access from the first computer, when the first initiator identification is received by the receiver unit; a data structure configured to store a second initiator identification corresponding to the logical unit determined by the masking unit, the second initiator identification including a second computer identification identifying a second computer having permission of access to the logical unit; and an access control unit configured to refuse access by the first computer when a comparison of the first initiator identifier with the second initiator identifier determines that the first initiator identification differs from the second initiator identification.