Patent ID: 7130978

Claim:
A storage system comprising: a control unit for receiving a data write request from a plurality of host computers which configure a plurality of host groups; and at least one storage unit coupled to said control unit, said storage unit has a plurality of storage regions for storing data, wherein said control unit has security information indicating relationships between each of said host groups and each of said storage regions accessible for each of said host groups; wherein said security information is used by said control unit to reject accesses from other host groups other than each of said host groups that are permitted to access to each of said storage regions, wherein said control unit receives a Port Login (PLOGI) frame from a new host computer which is newly coupled to said control unit, and acquires a World Wide Name (WWN) and a source identifier (S_ID) contained in said PLOGI frame from said PLOGI frame so that an administrator can select a storage region of said plurality of storage regions to be accessed from a host group to which said new host computer belongs by using said acquired WWN, wherein setting/alteration of access permit/deny to storage regions from said host computers is carried out on an identifier basis, said identifier being selectable to be either an identifier designating a plurality of host computers collectively, or an identifier designating one of said host computers, wherein when setting/alteration of access permit/deny to storage regions using an identifier designating a plurality of host computers is selected, collectively is selected, the identifier designating said host computers collectively including said new host computer and storage regions are displayed on a display, and wherein when setting/alteration of access permit/deny to storage regions using an identifier designating one of said host computers is selected, the identifier designating said new host computer and storage regions are displayed on the display.