Patent ID: 6845387

Claim:
A method for creating virtual private connections between end points in a shared storage area network (SAN), the method comprising: providing a virtual connection architecture for a host initiator operatively connected thereto, the virtual connection architecture having a virtual connection manager and a virtual connection cache, the virtual connection cache having a list of existing and previously established virtual connections, wherein an existing virtual connection is indicated between a specific host initiator and a specific target storage device, or a specific logical portion thereof, to provide a one-to-one relationship between a host initiator and a target storage device, or a logical portion thereof, for each virtual connection in the virtual connection cache, the host initiator generating and transmitting I/O commands to the virtual connection manager of the virtual connection architecture; determining from the virtual connection cache whether a previously established virtual connection exists between the source and destination; and when the previously established virtual connection does not exist in the virtual connection cache, then comparing, by the virtual connection manager, source and destination information from the I/O commands to a predetermined list of allowable connections; and when the source and destination information matches the predetermined list of allowable connections, creating a data connection between the host initiator and the storage device, or a logical portion thereof, operatively connected to the virtual connection architecture, thereby establishing a virtual private SAN; but when the virtual connection exists, using a virtual private SAN indicated by the previously established virtual connection in the virtual connection cache without again determining whether the data connection between the host initiator and the storage device indicated by the destination information is allowable.