Computer system

1. A computer system comprising:

a first device comprising:

a first volatile storage device that stores a rule management program and a key management program; and

a first processor configured to execute the rule management program and key management program to set predetermined rules and encryption keys to a second device via a network; and

the second device comprising:

a second processor;

a second volatile storage device that stores a program to be executed by the second processor; and

a plurality of nonvolatile storage devices that store data, wherein

each of the plurality of nonvolatile storage devices holds encryption keys for encrypting and decrypting data set according to the key management program, the encryption keys held at each of the plurality of nonvolatile storage devices comprises at least a first encryption key for encrypting and decrypting first data, and

each nonvolatile storage device in the plurality of nonvolatile storage devices holds predetermined rules for determining a state of data at a time of transfer set according to the rule management program, each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in an encrypted or unencrypted state, the encrypted or unencrypted state determined according to the predetermined rules, wherein

according to a predetermined rule of the predetermined rules held at a first nonvolatile storage device in the plurality of nonvolatile storage devices, the first nonvolatile storage device

decrypts the first data received in the encrypted state with the first encryption key,

encrypts the decrypted first data with the first encryption key after compression, and

stores the compressed and encrypted first data.

2. The computer system according to claim 1 , wherein

the predetermined rule indicates that the first data is transferred in the unencrypted state from each nonvolatile storage device in the plurality of nonvolatile storage devices to the second volatile storage device.

3. A computer system comprising:

a first device comprising:

a first volatile storage device that stores a rule management program and a key management program; and

a first processor configured to execute the rule management program and key management program to set predetermined rules and encryption keys to a second device via a network; and

the second device comprising:

a second processor;

a second volatile storage device that stores a program to be executed by the second processor; and

a plurality of nonvolatile storage devices that store data, wherein

each of the plurality of nonvolatile storage devices holds encryption keys for encrypting and decrypting data set according to the key management program, the encryption keys held at each of the plurality of nonvolatile storage devices comprises at least a first encryption key for encrypting and decrypting first data, and

each nonvolatile storage device in the plurality of nonvolatile storage devices holds predetermined rules for determining a state of data at a time of transfer set according to the rule management program, each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in an encrypted or unencrypted state, the encrypted or unencrypted state determined according to the predetermined rules, wherein

the predetermined rules indicate a compressed or uncompressed state of data to be transferred, and

each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in the compressed or uncompressed state, the compressed or uncompressed state determined according to the predetermined rules.

4. A computer system comprising:

a first device comprising:

a first volatile storage device that stores a rule management program and a key management program; and

a first processor configured to execute the rule management program and key management program to set predetermined rules and encryption keys to a second device via a network; and

the second device comprising:

a second processor;

a second volatile storage device that stores a program to be executed by the second processor; and

a plurality of nonvolatile storage devices that store data, wherein

each of the plurality of nonvolatile storage devices holds encryption keys for encrypting and decrypting data set according to the key management program, the encryption keys held at each of the plurality of nonvolatile storage devices comprises at least a first encryption key for encrypting and decrypting first data, and

each nonvolatile storage device in the plurality of nonvolatile storage devices holds predetermined rules for determining a state of data at a time of transfer set according to the rule management program, each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in an encrypted or unencrypted state, the encrypted or unencrypted state determined according to the predetermined rules, wherein

the predetermined rules indicate the encrypted or unencrypted state associated with a plurality of address ranges, and

each nonvolatile storage device in the plurality of nonvolatile storage devices transfers, in the encrypted or unencrypted state associated with each address range that store data according to the predetermined rules, the data in the each address ranges to another nonvolatile storage device in the plurality of nonvolatile storage devices.

5. The computer system according to claim 4 , wherein

each nonvolatile storage device in the plurality of nonvolatile storage devices uses an encryption key associated with the each address range in encryption and decryption of the data in the each address range.

6. The computer system according to claim 4 , wherein

the encrypted or unencrypted state in data transfer is preset for an address range of a volume for the each address range.

7. A computer system comprising:

a first device comprising:

a first volatile storage device that stores a rule management program and a key management program; and

a first processor configured to execute the rule management program and key management program to set predetermined rules and encryption keys to a second device via a network; and

the second device comprising:

a second processor;

a second volatile storage device that stores a program to be executed by the second processor; and

a plurality of nonvolatile storage devices that store data, wherein

each of the plurality of nonvolatile storage devices holds encryption keys for encrypting and decrypting data set according to the key management program, the encryption keys held at each of the plurality of nonvolatile storage devices comprises at least a first encryption key for encrypting and decrypting first data, and

each nonvolatile storage device in the plurality of nonvolatile storage devices holds predetermined rules for determining a state of data at a time of transfer set according to the rule management program, each nonvolatile storage device in the plurality of nonvolatile storage devices transfers the first data to another nonvolatile storage device in the plurality of nonvolatile storage devices in an encrypted or unencrypted state, the encrypted or unencrypted state determined according to the predetermined rules, wherein

the processor executes hierarchical control based on an I/O frequency of data stored in a volume,

each of the plurality of nonvolatile storage devices belongs to a separate layer of a plurality of layers based on the I/O frequency of data, and

the first data is transferred between the plurality of nonvolatile storage devices by the hierarchical control.

8. The computer system according to claim 7 , wherein

the second processor

stops data transfer by the hierarchical control before starting change of an encryption key in the plurality of nonvolatile storage devices, and

resumes the data transfer by the hierarchical control after change of the encryption key in all the nonvolatile storage devices in which the encryption key is changed.