1. A data processing apparatus for processing a three-dimensional bit map data in a desired processing manner, said data processing apparatus comprising:
a storing device capable of associating and storing a three-dimensional bit map data, a scale-down three-dimensional bit map data obtained by scaling down said three-dimensional bit map data, and a history data of procedural operations of a first desired processing applied to said three-dimensional bit map data;
a data processing device for a scale-down three-dimensional bit map data, wherein said data processing device applies a second desired processing to said scale-down three-dimensional bit map data stored in said storing device, and sends to a data processing unit a history data of procedural operations of said second desired processing applied to said scale-down three-dimensional bit map data, and sends to a display device said scale-down three-dimensional bit map data after processing, and sends to said storing device said associated data comprised of said three-dimensional bit map data, said history data of procedural operations of said second desired processing, and said scale-down three-dimensional bit map data after processing, in order to store in said storing device so that it can be selected which processing written in said history data of procedural operations is carried out;
said data processing unit which processes said three-dimensional bit map data with said history data of procedural operations of said second desired processing and sends to said display device said three-dimensional bit map data after processing; and
said display device displaying said scale-down three-dimensional bit map data after processing and said three-dimensional bit map data.
2. A data processing apparatus for processing a three-dimensional bit map data in a desired processing manner, said data processing apparatus comprising:
a storing device capable of associating and storing a three-dimensional bit map data, a scale-down three-dimensional bit map data obtained by scaling down said three-dimensional bit map data, and a history data of procedural operations of a first desired processing applied to said three-dimensional bit map data;
a data processing device for a scale-down three-dimensional bit map data, wherein said data processing device applies a second desired processing to said scale-down three-dimensional bit map data stored in said storing device, sends to a data processing unit a history data of procedural operations of said second desired processing applied to said scale-down three-dimensional bit map data, sends said scale-down three dimensional bit map data after processing to a display device for scale-down three-dimensional bit map data, and sends to said storing device said associated data comprised of said three-dimensional bit map data, said history data of procedural operations of said second desired processing, and said scale-down three-dimensional bit map data after processing, in order to store them in said storing device so that it can be selected that which processing written in said history data of procedural operation is carried out;
said display device for a scale-down three-dimensional bit map data which sends to a display device said scale-down three-dimensional bit map data received from said data processing device for a scale-down three-dimensional bit map data;
a scale-down three-dimensional bit map data choosing means for choosing said scale-down three-dimensional bit map data displayed on said display device;
a data processing unit which processes said three-dimensional bit map data stored in said storing device with said history data of procedural operations of said second desired processing associated with said scale-down three-dimensional bit map data selected and sends to said display device said three-dimensional bit map data after processing; and
said display device displaying said three-dimensional bit map data received from said data processing unit.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A computer system comprising:
a first storage system coupled to a computer;
a second storage system coupled to the first storage system; and
a management computer coupled to the first storage system and the second storage system,
wherein the first storage system comprises:
a plurality of first volumes that stores data accessed by the computer;
a first control unit which controls the plurality of first volumes based on access from the computer; and
a first data encryption module which encrypts or decrypts data stored on one of the plurality of first volumes based on a first encryption method;
wherein the second storage system comprises:
a plurality of second volumes that stores data accessed by the computer;
a second control unit which controls the plurality of second volumes based on access from the computer; and
a second data encryption module which encrypts or decrypts data stored on one of the plurality of second volumes based on a second encryption method,
wherein the management computer comprises a memory that stores encryption method compatibility information which indicates compatibility between a plurality of encryption methods including the first encryption method and the second encryption method,
wherein when the management computer receives a migration instruction of data migration of encrypted data stored in one of the plurality of first volumes, the management computer searches the encryption method compatibility information for an encryption method which has compatibility with the first encryption method used in the first data encryption module included in the first storage system, and
wherein when the second encryption method which is used in the second data encryption module included in the second storage system is compatible with the first encryption method, the management computer selects the second storage system as a destination of the data migration, and instructs to migrate the encrypted data stored in the one of the plurality of first volumes, for which the migration instruction was received, to one of the plurality of second volumes.
2. A computer system according to claim 1,
wherein the first storage system includes a first memory configured to temporarily store encrypted data which is stored on one of the plurality of first volumes,
wherein the first control unit updates the first encryption method of the first data encryption module corresponding to one of the plurality of first volumes in which encrypted data is stored from the first encryption method to the second encryption method,
wherein encrypted data to be stored on one of the plurality of first volumes is temporarily store stored in the first memory,
wherein the encrypted data is decrypted within the first memory by the first data encryption module, and
wherein, after the decrypted data is encrypted again based on the second encryption method of the second data encryption module which has been updated, the data is written in the one of the plurality of first volumes.
3. A computer system according to claim 1,
wherein the second control unit creates a virtual volume within the second storage system, and associates one of the plurality of first volumes in which encrypted data is stored, with the virtual volume, and
wherein after the second control unit associates the virtual volume with the one of the plurality of first volumes in which encrypted data is stored, the management computer instructs to migrate the encrypted data stored in the one of the plurality of first volumes to one of the plurality of second volumes.
4. A data migration method in a computer system, the computer system comprising a first storage system coupled to a computer, a second storage system coupled to the first storage system, and
a management computer coupled to the first storage system and the second storage system, wherein the first storage system comprises a plurality of first volumes, a first control unit, and a first data encryption module, wherein the second storage system comprises a plurality of second volumes, a second control unit, and a second data encryption module, and wherein the management computer comprises a memory, the data migration method comprising:
storing data accessed by the computer in the plurality of first volumes;
controlling, by the first control unit, the plurality of first volumes based on access from the computer;
encrypting or decrypting, by the first data encryption module, data stored on one of the plurality of first volumes based on a first encryption method;
storing data accessed by the computer in the plurality of second volumes;
controlling, by the second control unit, the plurality of second volumes based on access from the computer;
encrypting or decrypting, by the second data encryption module, data stored on one of the plurality of second volumes based on a second encryption method;
storing encryption method compatibility information which indicates compatibility between a plurality of encryption methods including the first encryption method and the second encryption method in the memory of the management computer;
when the management computer receives a migration instruction of data migration of encrypted data stored in one of the plurality of first volumes, searching, by the management computer, the encryption method compatibility information for an encryption method which has compatibility with the first encryption method used in the first data encryption module included in the first storage system; and
when the second encryption method which is used in the second data encryption module included in the second storage system is compatible with the first encryption method, selecting, by the management computer, the second storage system as a destination of the data migration, and instructing, by the management computer, to migrate the encrypted data stored in the one of the plurality of first volumes, for which the migration instruction was received, to one of the plurality of second volumes.
5. A data migration method according to claim 4, wherein the data migration is executed between storage systems as a migration from one of the plurality first volumes of the first storage system to one of the plurality of second volumes of the second storage system.
6. A data migration method according to claim 4, wherein the data migration is a migration from a first one of the plurality of first volumes of the first storage system to a second one of the plurality of first volumes of the first storage system, or from a first one of the plurality of second volumes of the second storage system to a second one of the plurality of second volumes of the second storage system.
7. A data migration method according to claim 4,
wherein the first storage system includes a first memory that temporarily stores encrypted data stored on one of the plurality of first volumes;
wherein the encrypted data is decrypted within the first memory;
wherein the decrypted data decrypted by the second encryption method having the first encryption method updated is encrypted again based on the second encryption method; and
wherein the encrypted data is then written in one of the plurality of first volumes.
8. A data migration method according to claim 7, further comprising:
creating a virtual volume within the second storage system, and associating one of the plurality of first volumes in which encrypted data is stored, with the virtual volume; and
after the virtual volume is associated with the one of the plurality of first volumes in which encrypted data is stored, instructing to migrate the encrypted data stored in the one of the plurality of first volumes to one of the plurality of second volumes.
9. A data migration method according to claim 4, further comprising:
at the time of deleting data encryption processing based on the first encryption method which handles encryption processing and decryption processing of encrypted data, investigating an influence arisen from the deletion of the data encryption processing based on the first encryption method; and
when there exists encrypted data which cannot be decrypted due to the deletion of the data encryption processing based on the first encryption method, providing a warning regarding the deletion of the data encryption processing based on the first encryption method in order to urge an interruption of the deletion processing.
10. A data migration method according to claim 9, further comprising:
before deleting the data encryption processing based on the first encryption method, as to a volume having the encrypted data which cannot be decrypted after deleting the data encryption processing based on the first encryption method, rewriting the encrypted data into encrypted data encrypted by the second encryption method by converting the data encrypted by the data encryption processing based on the first encryption method into data encrypted by data encryption processing based on the second encryption method.
11. A management computer coupled to a first storage system and a second storage system, the first storage system having a first volume and a first data encryption module which encrypts or decrypts data stored on the first volume based on a first encryption method, and the second storage system having a second volume and a second data encryption module which encrypts or decrypts data stored on the second volume based on a second encryption method, wherein the management computer comprises:
a memory that stores encryption method compatibility information which indicates compatibility between a plurality of encryption methods including the first encryption method and the second encryption method;
a judgment means for determining the compatibility between the first encryption method, which corresponds to the first volume of the first storage system, and the second encryption method, which corresponds to the second volume of the second storage system,
wherein when the management computer receives a migration instruction of data migration of encrypted data stored in the first volume, the management computer searches the encryption method compatibility information for an encryption method which has compatibility with the first encryption method used in the first data encryption module included in the first storage system, and
wherein when the second encryption method which is used in the second storage system is compatible with the first encryption method, the management computer selects the second storage system as a destination of the data migration, and instructs to migrate the encrypted data stored in the first volume, for which the migration instruction was received, to the second volume.
12. A management computer according to claim 11, further comprising:
a retrieval means for retrieving the second volume corresponding to the second encryption method which is compatible with the first encryption method corresponding to the first volume and which is capable of decrypting data encrypted by the first encryption method corresponding to the first volume in order to migrate encrypted data stored on the first volume to the second volume based on volume configuration information stored in a volume configuration information memory means; and
an update command means for providing a command to update the second encryption method corresponding to the second volume which becomes the data migration destination in accordance with a result of retrieval by the retrieval means.
13. A management computer according to claim 11,
wherein at the time of removing the first encryption method for performing encryption processing and decryption processing of encrypted data, an influence arisen from the removal of the first encryption method is investigated, and
wherein when there exists encrypted data which cannot be decrypted due to the removal of the first encryption method, a warning regarding the removal of the first encryption method is provided to urge an interruption of the removal processing.
14. A management computer according to claim 13,
wherein prior to the removal of the first encryption method, as to a volume having encrypted data which cannot be decrypted after removal of the first encryption method, the encrypted data is re-written into encrypted data encrypted by another encryption method by converting the data encrypted by the first encryption method into data encrypted by the another encryption method.
15. A management computer according to claim 13, wherein the investigation of the influence arisen from the removal of the first encryption method is made based on asset management information relating to a data encryption method for a volume.