Method and system for securing control-device-lun-mediated access to luns provided by a mass storage device

摘要

Method and system for securing control-device LUN-mediated operation requests within a mass storage device coupled to one or more remote computers via a communications medium. Control-device-mediated operations represent a class of operations that may manipulate or access a number of different LUNs that are specified as part of the requests for the operations. The present invention employs an access table that a controller within a mass storage device may consult in order to authorize a request for an operation directed to a specific target CDLUN, and employs a supplementary access table to check that the target CDLUN is authorized to access or manipulate any other LUNs specified as part of the request.