WO2012089490A1 - Method for updating a file system storage from a remote update server - Google Patents

Method for updating a file system storage from a remote update server Download PDF

Info

Publication number
WO2012089490A1
WO2012089490A1 PCT/EP2011/072461 EP2011072461W WO2012089490A1 WO 2012089490 A1 WO2012089490 A1 WO 2012089490A1 EP 2011072461 W EP2011072461 W EP 2011072461W WO 2012089490 A1 WO2012089490 A1 WO 2012089490A1
Authority
WO
WIPO (PCT)
Prior art keywords
file system
system storage
areas
file
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/EP2011/072461
Other languages
French (fr)
Inventor
Stéphane Durand
François-Xavier Marseille
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Thales DIS France SA
Original Assignee
Gemalto SA
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Gemalto SA filed Critical Gemalto SA
Publication of WO2012089490A1 publication Critical patent/WO2012089490A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B27/00—Editing; Indexing; Addressing; Timing or synchronising; Monitoring; Measuring tape travel
    • G11B27/10—Indexing; Addressing; Timing or synchronising; Measuring tape travel
    • G11B27/11—Indexing; Addressing; Timing or synchronising; Measuring tape travel by using information not detectable on the record carrier
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B2220/00—Record carriers by type
    • G11B2220/20—Disc-shaped record carriers
    • G11B2220/21—Disc-shaped record carriers characterised in that the disc is of read-only, rewritable, or recordable type
    • G11B2220/213—Read-only discs
    • G—PHYSICS
    • G11—INFORMATION STORAGE
    • G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B2220/00—Record carriers by type
    • G11B2220/20—Disc-shaped record carriers
    • G11B2220/25—Disc-shaped record carriers characterised in that the disc is based on a specific recording technology
    • G11B2220/2537—Optical discs
    • G11B2220/2545—CDs

Definitions

  • the present invention relates generally to the update of secure token and more specifically to the update of a file system storage.
  • One of the prospected markets is to supply service providers with smart tokens that act as a secure mobile front-end to their online services. These tokens embed secured internal software as well as public software to be run on a computer.
  • the public software is generally exposed over a mass storage device in the token, mostly featured inside a file storage system such as a CDRO image.
  • a CDROM image is as a non-editable object, with file system structures , that are not designed to be modified. Therefore for updating a CDROM image, it is necessary to replace all the data. It is generally known to update a CDROM image Over The Internet or Over The Air, which requires a large network bandwidth as there are a lot of data to broadcast to many devices. Such requirement leads to expensive network infrastructure .
  • the present invention provides a token comprising a secure application and mass storage partitions, said mass storage partitions comprising a file system storage, said file system storage comprising areas of ordered metadata, and file content areas, characterized in that the file system storage has a structure adapted for remote partial updates.
  • the file system storage may comprise free spaces between metadata areas
  • the file system storage may be a CDROM image
  • the invention also provides a method for updating data of a file system storage from a remote update server, said file system storage being stored in a token and areas of ordered metadata, and file content areas, characterized in that it comprises updating only the most recent parts of data.
  • the method may comprise leaving growth space between areas liable, to grow during an update.
  • the method may comprise comparing the version of data in the remote server and the version of data in the file system storage.
  • the method may comprise relocating updated data within the file storage system if an area reaches its growth limit.
  • FIG.l schematically shows an architecture of a CDROM image according to the present invention.
  • An USB token features a microcont oler capable of running software and . mass storage partitions.
  • One of the mass storage partitions is a CDROM image 1 which holds public applications and data.
  • the CDROM image access may be controled by the microcont roler or not.
  • Some applications may embed secure mechanisms validated by the m l crocon role r or not.
  • the CDROM image 1 comprises several areas of ordered metadata, and file content areas.
  • Metatada are stored in two groups: the metadata relating to the paths and the metadata concerning all other information about a file such as the size, the name, dates, etc...
  • the metadata relating to paths are ordered by name.
  • the initial CDROM image 1 delivered with the token is structured to allow remote partial updates, for example by leaving growth space between all areas liable to grow during an update. Then there are free spaces Dstween metadata areas which allows these areas to grow or shrink, and thus to be modified in regard of the global structuring of the file system.
  • the update consists in modifying a file, new content, and, if the size is changed, the associated metadata (directory entry) are concerned. If the file grows and needs to be relocated, this is notified as the associated metadata are modified.
  • only the parts that are more recent in a CDROM image are updated, i.e. only parts which are new such as new files, modified files, and the metadata accordingly modified including moved or deleted files, new directories, etc., are transported over the network.
  • a secure application in the USB token holds a version number associated with the CD-ROM content.
  • a public application allows connecting the server to the secure application, and the data exchange between the update server and the secure application.
  • the public application holds the address of a remote ' update server, which address is for example stored in the secure application.
  • the update server holds the most recent version number and the high level description of updates from any version number to the most recent one.
  • the public application gueries the version number of the CDROM from the secure application and sends it to the update server.
  • the update server compares the version number of the CDROM with the latest version number. If the received version number is older than the latest version number, the update server sends to the public application, high level description of the operations to perform in order to align both versions, as well as the new version number, such as delete/create directory, add/remove file, etc...
  • the public application then sends the high level description to the secure application. It does not need to decrypt or verify the signature when present .
  • the secure application decrypts or verifies the signature of the high level description when applicable, and performs the associated operations. If no error is detected, it updates its version number to the one sent by the update server.
  • the migration from the current version of the token is done with a new "initial" CDROM image and an updated upaate server that computes necessary update instead of sending the whole raw CDROM image.
  • a prior step to transporting the updating data is to compute them. Based on the CDROM version in the token and the new set of file (content and tree), areas to be modified, shrunk, expanded or moved are identified, and only these data are included in the update bundle as well as instructions to apply the modifications.
  • the versioning system depends on the implementation, and is not described here but is advantageously designed to easily build update bundles without heavy server-side image storage overhead.
  • the number of modifications on the file system during the update is limited and the modifica ions do not propagate .

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Databases & Information Systems (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)

Abstract

The invention relates to a token comprising a secure application and mass storage partitions, said mass storage partitions comprising a file system storage, said file system storage comprising areas of ordered metadata, and file content areas, characterized in that the file system storage has a structure adapted for remote partial updates.

Description

METHOD FOR UPDATING A FILE SYSTEM STORAGE FROM A REMOTE UPDATE SERVER
FIELD OF THE INVENTION
The present invention relates generally to the update of secure token and more specifically to the update of a file system storage.
BACKGROUND OF THE INVENTION
One of the prospected markets is to supply service providers with smart tokens that act as a secure mobile front-end to their online services. These tokens embed secured internal software as well as public software to be run on a computer. The public software is generally exposed over a mass storage device in the token, mostly featured inside a file storage system such as a CDRO image.
Due to the evolution of the proposed services, and of the distributed software, it is necessary to update the content of the CDROM image, as an application on the CDROM can evolve due a bug correction, enhancements, new features, branding, etc...
A CDROM image is as a non-editable object, with file system structures, that are not designed to be modified. Therefore for updating a CDROM image, it is necessary to replace all the data. It is generally known to update a CDROM image Over The Internet or Over The Air, which requires a large network bandwidth as there are a lot of data to broadcast to many devices. Such requirement leads to expensive network infrastructure .
A possible solution is to use a stock file system. Nevertheless, with a stock file system, the modifications propagate, e.g. if a table grows, all the data behind the table shift accordingly, and the references to this data accordingly are also updated in turn. This method requires more memory, and the process might be very difficult to carry out on a portable object.
There is then a need for lessen the amount of data to transport over the network in the scope of such update and thus to reduce the cost of the updating.
It is then an object of the invention to provide a new architecture of a CDROM image and a method for updating such CDROM image.
Thereto, the present invention provides a token comprising a secure application and mass storage partitions, said mass storage partitions comprising a file system storage, said file system storage comprising areas of ordered metadata, and file content areas, characterized in that the file system storage has a structure adapted for remote partial updates.
According to another aspect of the invention, the file system storage may comprise free spaces between metadata areas;
According to another aspect of the invention the file system storage may be a CDROM image;
The invention also provides a method for updating data of a file system storage from a remote update server, said file system storage being stored in a token and areas of ordered metadata, and file content areas, characterized in that it comprises updating only the most recent parts of data.
According to another aspect of the invention, the method may comprise leaving growth space between areas liable, to grow during an update. According to another aspect of the invention, the method may comprise comparing the version of data in the remote server and the version of data in the file system storage.
According to another aspect of the invention, the method may comprise relocating updated data within the file storage system if an area reaches its growth limit.
When the said. CDROM image architecture and the update method are combined, it is advantageously possible to perform an update of the CDROM image that will only consider the modifications of the existing image. All information contained in the CDROM image that is invariant with respect to the prospected update will not be carried in the update bundle whereas all changing informations will be concisely described. The final benefit is savings in both server data storage and network resources.
The various aspects, features and advantages of the invention will become more fully apparent to those having ordinary skill in the art upon careful consideration of the following Detailed Description, given by way of example thereof, with the accompanying drawing described below:
FIG.l schematically shows an architecture of a CDROM image according to the present invention.
DETAILED DESCRIPTION The present invention may be understood according to the detailed description provided herein.
An USB token (not represented) features a microcont oler capable of running software and . mass storage partitions. One of the mass storage partitions is a CDROM image 1 which holds public applications and data. The CDROM image access may be controled by the microcont roler or not. Some applications may embed secure mechanisms validated by the m l crocon role r or not.
Shown in Fiq.l is an architecture of the CDROM image 1.
The CDROM image 1 comprises several areas of ordered metadata, and file content areas.
Ordered metadata follow a certain order according to the specification of their format. Metatada are stored in two groups: the metadata relating to the paths and the metadata concerning all other information about a file such as the size, the name, dates, etc... The metadata relating to paths are ordered by name. As represented, there are two path tables 11,12.
According to the invention, the initial CDROM image 1 delivered with the token is structured to allow remote partial updates, for example by leaving growth space between all areas liable to grow during an update. Then there are free spaces Dstween metadata areas which allows these areas to grow or shrink, and thus to be modified in regard of the global structuring of the file system.
When the update consists in adding a new file, both content and associated file metadata are concerned. Entries are added in the file system metadata area co esponding to the directory where the file is located and in the two path table 11,12.
When the update consists in deleting a file, associated metadata are concerned. Entries are removed in the directory where the file was located and in the two path tables 11,12.
When the update consists in modifying a file, new content, and, if the size is changed, the associated metadata (directory entry) are concerned. If the file grows and needs to be relocated, this is notified as the associated metadata are modified.
According to the method of the invention, only the parts that are more recent in a CDROM image are updated, i.e. only parts which are new such as new files, modified files, and the metadata accordingly modified including moved or deleted files, new directories, etc., are transported over the network.
In an embodiment, a secure application in the USB token holds a version number associated with the CD-ROM content.
A public application allows connecting the server to the secure application, and the data exchange between the update server and the secure application.
The public application holds the address of a remote' update server, which address is for example stored in the secure application. The update server holds the most recent version number and the high level description of updates from any version number to the most recent one.
Upon connection to the update server, the public application gueries the version number of the CDROM from the secure application and sends it to the update server.
The update server compares the version number of the CDROM with the latest version number. If the received version number is older than the latest version number, the update server sends to the public application, high level description of the operations to perform in order to align both versions, as well as the new version number, such as delete/create directory, add/remove file, etc...
It will be well understood that the exchange between the update server and the public application may be or not encrypted and or signed.
The public application then sends the high level description to the secure application. It does not need to decrypt or verify the signature when present .
The secure application decrypts or verifies the signature of the high level description when applicable, and performs the associated operations. If no error is detected, it updates its version number to the one sent by the update server. The migration from the current version of the token is done with a new "initial" CDROM image and an updated upaate server that computes necessary update instead of sending the whole raw CDROM image.
It will be well understood that if an area reaches its growth limit, it can be relocated within the CDROM volume, its base address being modified in the referring structure ( s ) .
In another embodiment, a prior step to transporting the updating data is to compute them. Based on the CDROM version in the token and the new set of file (content and tree), areas to be modified, shrunk, expanded or moved are identified, and only these data are included in the update bundle as well as instructions to apply the modifications.
The versioning system depends on the implementation, and is not described here but is advantageously designed to easily build update bundles without heavy server-side image storage overhead.
Thanks to the invention, the number of modifications on the file system during the update is limited and the modifica ions do not propagate .
It will be well understood that other file system storage may be updated with this method.

Claims

1. Token comprising a secure application and mass storage partitions, said mass storage partitions comprising a file system storage, said file system storage comprising areas of ordered metadata, and file content areas, characte ized in that the file system storage has a structure adapted for remote partial updates.
2. Token according to claim 2, characterized in that the file system storage comprises free spaces between metadata areas.
3. Token according to claim 1 to 2, characterized in that the file system storage is a CDROM image.
4. Method for updating data of a file system storage from a remote update server, said file system storage being stored in a token and areas of ordered metadata, and file content areas, characterized in that it comprises updating only the most recent parts of data.
5. Method according to claim 4, characterized in that it comprises leaving growth space between areas liable to grow during an update.
6. Method according to claim 4 to 5, characterized in that it comprises comparing -the version of data in the remote server and the version of data in the file system storage.
7. Method according to previous claims 4 to 6, characterized in that it comprises relocating updated data within the file storage system if an area reaches its growth limit.
PCT/EP2011/072461 2010-12-28 2011-12-12 Method for updating a file system storage from a remote update server Ceased WO2012089490A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
EP10306530.6 2010-12-28
EP10306530A EP2472414A1 (en) 2010-12-28 2010-12-28 Method for updating a file system storage from a remote update server

Publications (1)

Publication Number Publication Date
WO2012089490A1 true WO2012089490A1 (en) 2012-07-05

Family

ID=43901591

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2011/072461 Ceased WO2012089490A1 (en) 2010-12-28 2011-12-12 Method for updating a file system storage from a remote update server

Country Status (2)

Country Link
EP (1) EP2472414A1 (en)
WO (1) WO2012089490A1 (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6108285A (en) * 1989-03-20 2000-08-22 International Business Machines Corporation Directory structure for worm optical media
US20050216746A1 (en) * 2004-03-24 2005-09-29 Nobuyuki Saika Data protection method, authentication method, and program therefor
US20060112113A1 (en) * 2004-11-08 2006-05-25 Jinsheng Gu Static file system differencing and updating
US20100114853A1 (en) * 2008-11-06 2010-05-06 Deluxe Digital Studios, Inc. Methods, systems and apparatuses for use in updating a portable storage medium

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6108285A (en) * 1989-03-20 2000-08-22 International Business Machines Corporation Directory structure for worm optical media
US20050216746A1 (en) * 2004-03-24 2005-09-29 Nobuyuki Saika Data protection method, authentication method, and program therefor
US20060112113A1 (en) * 2004-11-08 2006-05-25 Jinsheng Gu Static file system differencing and updating
US20100114853A1 (en) * 2008-11-06 2010-05-06 Deluxe Digital Studios, Inc. Methods, systems and apparatuses for use in updating a portable storage medium

Also Published As

Publication number Publication date
EP2472414A1 (en) 2012-07-04

Similar Documents

Publication Publication Date Title
CN103810257B (en) A kind of method, apparatus and equipment of upgrading software database
US9778926B2 (en) Minimizing image copying during partition updates
JP5696018B2 (en) Target data placement method, target data placement system, and server device, client device, and program thereof
JP5560212B2 (en) Map data distribution server and map data distribution method
US20200142690A1 (en) Shared Software Libraries for Computing Devices
US9160817B2 (en) Page server for navigation data
US8549350B1 (en) Multi-tier recovery
US20060074964A1 (en) Index processing
CN108700424A (en) Navigational route database update packet
US20050267846A1 (en) Information terminal device and content backup method
CN102081536A (en) Method for updating increment, and server
US8880553B2 (en) Redistribute native XML index key shipping
CN106921731A (en) Leak restorative procedure and device
EP4394619B1 (en) Data processing method and apparatus based on blockchain, and device and readable storage medium
CN109426515A (en) The generation method and device of upgrade package
CN114489737B (en) Multi-firmware OTA upgrade methods, devices, servers, and storage media
CN102520995A (en) Software remote stream type loading method and system
JP7333554B2 (en) Update device, update method, update program, and data structure
US8019729B2 (en) System and method for updating file
CN101558406A (en) Method for updating a database, in particular a navigation database
EP2472414A1 (en) Method for updating a file system storage from a remote update server
US8244688B2 (en) Managing apparatus, recording medium in which managing program is recorded, and expiration date determining method
CN106775994A (en) The method and device of a kind of metadata cluster catalogue scheduling
CN116775772B (en) Data processing method, device, equipment and readable storage medium
JP2008515111A (en) File index processing

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11794484

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 11794484

Country of ref document: EP

Kind code of ref document: A1