System and Method for Managing Authentication and Coherency in a Storage Area Network

Abstract

A data management system for storage area networks (SANs) includes an authentication and directory service that integrates the management of cache coherency and synchronization into an authentication mechanism, referred to herein as a ticket. The data in the system is notionally classified into colors. When a principal computer requests a read or a write access to data of a particular “color”, the service determines whether the principal is authorized for the requested access, and if so, the service issues a ticket to the principal that specifies a data color that the bearer of the ticket is authorized to access using the type of access mechanism specified on the ticket. A hidden “hue” can also be specified on the ticket. The service can variously inform principals to cancel tickets based on color or time of issue and can also variously inform storage devices not to honor tickets of a certain hue or time of issue as appropriate to thereby maintain cache coherency and data consistency.