Christopher J Hackett

US Patent:

6449652, Sep 10, 2002

Filed:

Jan 4, 1999

Appl. No.:

09/224789

Inventors:

Steven M. Blumenau - Holliston MA
Christopher J. Hackett - Boylston MA
Matthew J. DErrico - Southboro MA

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 1516

US Classification:

709229, 711164

Abstract:

Method and apparatus for managing access to one of a plurality of raw storage devices in a computer system including a host computer and a storage system that is coupled to the host computer and that stores data accessed by the host computer. The computer system includes a plurality of logical volumes of data that are visible to the host computer and the storage system and are perceived by the host computer as comprising the plurality of raw storage devices. In accordance with one aspect of the invention, a request to perform an action on the one of the plurality of raw storage devices can be granted, even when the requester has less than system administrator access privileges. In accordance with another aspect of the invention, the one of the plurality of raw storage devices may have associated access privileges information. The access privileges information associated with the one of the plurality of raw storage devices may be compared with information descriptive of the requester, and the request may be granted when the access privileges information associated with the one of the plurality of raw storage devices indicates that the requester is privileged to perform the action on the one of the plurality of raw storage devices.

US Patent:

6993581, Jan 31, 2006

Filed:

Sep 10, 2002

Appl. No.:

10/238219

Inventors:

Steven M. Blumenau - Holliston MA, US
Christopher J. Hackett - Boylston MA, US
Matthew J. D'Errico - Southboro MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 12/14

US Classification:

709225, 709229, 711163

Abstract:

Methods and apparatus for managing access to a plurality of storage resources in a computer system including a host computer and a storage system. The host computer comprises an application layer including at least one application program, and the computer system includes a plurality of storage resources visible to the application layer. The computer system has an access facility that grants access to the plurality of storage resources and requires a privilege level for the at least one application program to be granted access. In one aspect, requests to access one of the plurality of storage resources from the application layer are intercepted, and at least one of the intercepted requests is modified in a manner that will impact the access facility in determining whether the requestor satisfies the privilege level to be granted access to the one of the plurality of storage resources. Another aspect is directed to a computer system comprising a file system/LVM layer, wherein at least some requests from the application layer to access the plurality of storage resources are directed to the file system/LVM layer for processing and are intercepted, at least one of the intercepted requests is modified to create a modified access request, and a modified access request is sent to the file system/LVM layer in place of the intercepted request.

US Patent:

6993589, Jan 31, 2006

Filed:

Sep 10, 2002

Appl. No.:

10/238806

Inventors:

Steven M Blumenau - Holliston MA, US
Christopher J. Hackett - Boylston MA, US
Matthew J. D'Errico - Southboro MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 15/16

US Classification:

709229, 711164

Abstract:

Method and apparatus for managing access to one of a plurality of raw storage devices in a computer system including a host computer and a storage system. The computer system includes a plurality of logical volumes of data that are visible to the host computer and the storage system and are perceived by the host computer as comprising a plurality of raw storage devices. The host computer includes a file system/LVM mapping layer. In accordance with one aspect of the invention, a request, from a requester having less than system administrator access privileges, to perform an action directly on the one of the plurality of raw storage devices is granted, so that a logical channel is provided to directly access the one of the plurality of raw storage devices without the logical channel being mapped by the file system/LVM mapping layer. Another aspect is directed to a computer system including a host computer comprising an application layer including at least one application program. A plurality of volumes of storage are visible to the application layer, and access privileges less than the root access privileges are assigned to the at least one application program to access the plurality of volumes of storage.

US Patent:

7860986, Dec 28, 2010

Filed:

Oct 24, 2005

Appl. No.:

11/257223

Inventors:

Steven M. Blumenau - Holliston MA, US
Christopher Hackett - Boylston MA, US
Matthew Derrico - Southboro MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 15/177

US Classification:

709229, 709216, 709246

Abstract:

Method and apparatus for managing access to a plurality of volumes of storage in a computer system including a host computer. The host computer includes an application layer that includes at least one application program. The application layer is presented with the plurality of volumes of storage that are visible to the application layer. The method of managing access to at least one of the plurality of volumes of storage includes assigning limited access privileges to the application program to access the plurality of volumes of storage. The limited access privileges are less than root access privileges and the at least one of the plurality of volumes of storage is mapped indirectly to one or more physical storage devices so that the at least one of the plurality of volumes of storage does not correspond directly to an actual physical storage device.