Method and system of external data storage

• US 20050237821A1
• Filed: 02/11/2005
• Published: 10/27/2005
• Est. Priority Date: 02/12/2004
• Status: Active Grant

• Current Assignee: Irdeto B.V. (MultiChoice Group Ltd.)
• Original Assignee: Irdeto Access B.V. (MultiChoice Group Ltd.)
• Inventors: Dekker, Gerard Johan, Bosscha, Albert Jan, Van De Ven, Antonius Johannes Petrus Maria
• Granted Patent: US 7,467,284 B2
• Time in Patent Office: Days
• US Class Current: 365/189.50
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method of external data storage in a system including a primary processing device, having a processor and a primary data storage unit, adapted to run application programs for processing active records in the processor and configured to store data belonging to active records in the primary data storage unit; and a secondary data storage system, accessible to the primary processing device, includes loading data belonging to an active record into the primary data storage unit and externalising the record by transferring at least a piece of data belonging to the record to the secondary data storage system for storage. The step of externalising a record includes the making of a call by an application program using data belonging to the record to an interface, arranged to transfer the piece of data to the secondary data storage system.

Claims

1. A method of enabling external data storage in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor and configured to store data belonging to active records in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, wherein

data belonging to an active record is stored in the primary data storage unit and the record is externalised by transferring at least a piece of data belonging to the record to the secondary data storage system for storage, wherein

the step of externalising a record includes the receiving of at least one call initiated by an application program using data belonging to the record by an application programming interface arranged to send the piece of data to the secondary data storage system.

2. A method according to claim 1, including receiving at least one externalisation message including information identifying a data section including data corresponding to at least an associated part of only one piece of data and transferring at least the identified data section in response to the externalisation message.

3. A method according to claim 1, including dividing the piece of data into a plurality of parts, receiving a plurality of externalisation messages, each identifying a data section including data corresponding to an associated one of the plurality of parts and transferring at least the identified data section in response to each externalisation message.

4. A method according to claim 2 or 3, wherein the data corresponding to an associated part is generated by at least partly encrypting the associated part of the piece of data.

5. A method according to claim 2 or 3, including dividing the piece of data into a sequence of consecutive parts, receiving a series of externalisation messages, each including information identifying the record and information identifying a data section by means of the position of the corresponding part in the sequence, and including data corresponding to the information identifying a data section in the data section before transferring it to the secondary storage system.

6. A method according to claim 5, including returning information representing how many parts are in the sequence in response to a call from the application program.

7. A method according to claim 2 or 3, including calculating an authentication value for each part of the piece of data and including data reflecting the authentication value in the data section that includes data associated with that part.

8. A method according to claim 3, including calculating an authentication value for each part of the piece of data and including data reflecting the authentication value in the data section that includes data associated with that part, wherein the authentication value for at least one part is calculated using information derived from a further part as input.

9. A method according to claim 2 or 3, including storing a reference data object in a data storage unit of the primary device for each externalised record, including a unique identifier, wherein data reflecting the unique identifier is included in each data section that includes data corresponding to a part of the piece of data belonging to the record.

44. A method of processing records in a multimedia system, adapted to provide access to at least one consecutive piece of digital content forming an event and including a conditional access sub-system arranged to control access to the event in accordance with information contained in at least one record, wherein the multimedia system includes a secure primary processing device, having a processor and a primary data storage unit, adapted to run at least one application program for processing active records in the processor when an event is being accessed and configured to store data belonging to an active record in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, characterised by

the application of a method according to any one of claims 1, 10, 18, 27, 34 or 39.

45. A method according to claim 44, including making at least one event record associated with an event active when the associated event is being accessed.

46. A method according to claim 45, wherein an event record includes information reflecting a playback count, which method includes incrementing a playback count when the event record is made active.

47. A method according to claim 44, wherein access to an event is provided during a session associated with the event and the method includes making a session record, associated with the session, active in the course of the associated session.

48. A method according to claim 47, including, in the course of a session, receiving encrypted data for providing access to the associated event, retrieving at least one key from the associated session record, decrypting the encrypted data and returning the decrypted data.

49. A method according to claim 47, including, in the course of a session, receiving access data for providing access to an event and storing the access data in a session record associated with a session associated with the event.

50. A primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor, configured to store data belonging to an active record in the primary data storage unit, and adapted to execute a method according to any one of claims 1, 10, 18, 27, 34 or 39.

51. A computer program means which, when run by a primary processing device having a processor and a primary data storage unit, enable the primary processing device to execute a method according to any one of claims 1, 10, 18, 27, 34 or 39.

52. A primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor, configured to store data belonging to an active record in the primary data storage unit, and adapted to execute a method according to claim 44.

53. A computer program means which, when run by a primary processing device having a processor and a primary data storage unit, enable the primary processing device to execute a method according to claim 44.

10. A method of external data storage in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to run application programs for processing active records in the processor and configured to store data belonging to active records in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, which method includes

loading data belonging to an active record into the primary data storage unit and externalising the record by transferring at least a piece of data belonging to the record to the secondary data storage system for storage, wherein

the step of externalising a record includes the making of a call by an application program using data belonging to the record to an interface, arranged to transfer the piece of data to the secondary data storage system.

11. A method according to claim 10, including transferring a data section including data corresponding to at least an associated part of only one piece of data belonging to a record.

12. A method according to claim 10, wherein the piece of data is divided into a plurality of parts and wherein a plurality of data sections, each including data corresponding to an associated one of the plurality of parts, is transferred to the secondary data storage system for storage.

13. A method according to claim 11 or 12, wherein the data corresponding to an associated part is generated by at least partly encrypting the associated part of the piece of data.

14. A method according to claim 11 or 12, including calculating an authentication value for each part of the piece of data and including data reflecting the authentication value in the data section that includes data corresponding to that part.

15. A method according to claim 14, including calculating the authentication value for at least one part of the piece of data using information derived from a further part as input.

16. A method according to claims 11 or 12, including storing a reference data object in a data storage unit of the primary device for each externalised record, including a unique identifier, wherein data reflecting the unique identifier is included in each data section that includes data corresponding to a part of the piece of data belonging to the record.

17. A method according to claim 10, including storing information reflecting a version count for the externalised record and incrementing the version count prior to externalising the record.

18. A method of internalising a record in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor and configured to store data belonging to active records in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, and arranged to store a piece of data transferred by means of a method according to claim 10, which method includes

loading data belonging to the record into the primary data storage unit, wherein the system includes an interface for retrieving the piece of data belonging to the record from the secondary data storage system and the method further comprises the steps of an application program configured to use data belonging to the record determining that the record is to be internalised and making at least one call to the interface.

19. A method according to claim 18, including receiving at least one data section including data corresponding to at least an associated part of one piece of data from the secondary storage system.

20. A method according to claim 19, including retrieving an identifier unique to the record from a reference object stored in a data storage unit of the primary processing device, wherein the data sections are stored in the secondary data storage system with information reflecting the unique identifier and are received in response to an internalisation message including information reflection the unique identifier.

21. A method according to claim 18, wherein the piece of data comprises a plurality of parts, including receiving a number of data sections, each including data corresponding to an associated one of the plurality of parts.

22. A method according to claim 20, wherein the piece of data comprises a plurality of parts, including receiving a number of data sections, each including data corresponding to an associated one of the plurality of parts, retrieving information reflecting the number of parts from the reference object and receiving each data section in response to one of a corresponding number of internalisation messages.

23. A method according to claim 19 or 21, including receiving at least one data section including an authentication value, retrieving a secret piece of information stored in the primary processing device, calculating a verification authentication value for each data section from at least part of the data corresponding to at least an associated part of the piece of data, using the secret piece of information, and comparing the verification authentication value and the authentication value for each data section.

24. A method according to claim 23, including receiving a sequence of data sections, each including an authentication value, wherein the verification authentication value for at least one data section is calculated using information derived from a further data section as input.

25. A method according to claim 19 or 21, including retrieving a secret key stored in the primary processing device and decrypting at least part of a received data section.

26. A method according to claim 19 or 21, including receiving a data section including information reflecting a version count for the externalised record and comparing the version count with a reference version count.

27. A method of enabling the internalisation of a record in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor and configured to store data belonging to an active record in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, and arranged to store a piece of data transferred by means of a method according to claim 10, wherein

data belonging to an active record is loaded into the primary data storage unit and

the record is internalised by retrieving at least a piece of data belonging to the record from the secondary data storage system, wherein

the step of internalising a record includes the receiving of at least one call initiated by an application program using data belonging to the record by an application programming interface arranged to retrieve the piece of data from the secondary data storage system.

28. A method according to claim 27, including receiving at least one internalisation message including information identifying a data section including data corresponding to at least an associated part of the piece of data and retrieving at least the identified data section in response to the internalisation message.

29. A method according to claim 27, wherein the piece of data comprises a plurality of parts, the method including receiving a plurality of internalisation messages, each identifying a data section including data corresponding to an associated one of the plurality of parts and retrieving at least the identified data section in response to each internalisation message.

30. A method according to claim 28 or 29, including decrypting at least part of each transferred data section, the part which is decrypted including at least part of the data corresponding to a part of the piece of data.

31. A method according to claim 28 or 29, wherein the piece of data comprises an ordered sequence of consecutive parts, the method including receiving a series of internalisation messages, each including information identifying the record and information identifying a data section by means of the position of the associated part in the sequence.

32. A method according to claim 28 or 29, including calculating a reference authentication value for each part of the piece of data and comparing the reference authentication value with data reflecting an authentication value included in the data section associated with that part.

33. A method according to claim 29, including calculating a reference authentication value for each part of the piece of data and comparing the reference authentication value with data reflecting an authentication value included in the data section associated with that part, wherein the reference authentication value for at least one part is calculated using information derived from a further part as input.

34. A method of external data storage in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor and configured to store data belonging to active records in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, which method includes

loading data belonging to an active record into the primary data storage unit and externalising the record by transferring at least a piece of data belonging to the record to the secondary data storage system for storage, wherein

the method includes storing information reflecting a version count for the externalised record and incrementing the version count prior to externalising the record.

35. A method according to claim 34, including storing a reference data object in a data storage unit of the primary processing device for each externalised record, including a unique identifier and a copy of the information reflecting the version count.

36. A method according to claim 34, including transferring at least one data section including data corresponding to at least an associated part of the piece of data and data corresponding to the information reflecting the version count to the secondary data storage system.

37. A method according to claim 34, including determining whether any data belonging to an active record has been changed after loading into the primary data storage unit and incrementing the version count only after determining that some data belonging to the active record has been changed.

38. A method according to claim 34 or 35, including setting a flag in an active record if any data belonging to the record is modified after loading into the primary data storage unit, wherein the record is only externalised after determining that the flag has been set.

39. A method of internalising a record in a system including

a primary processing device, having a processor and a primary data storage unit, adapted to process active records in the processor and configured to store data belonging to an active record in the primary data storage unit;

and

a secondary data storage system, accessible to the primary processing device, and arranged to store a piece of data transferred by means of a method according to claim 34, wherein at least one data section including data corresponding to at least an associated part of the piece of data is retrieved from the secondary data storage system, wherein

a data section including information reflecting a version count for the externalised record is received and the version count is compared with a reference version count.

40. A method according to claim 39, wherein the parts of the piece of data are only retrieved from the corresponding data included in the data sections and loaded into the primary data storage unit if the version count corresponds to the reference version count.

41. A method according to claim 39 or 40, including retrieving the reference version count from a reference data object for the externalised record, stored in a data storage unit of the primary processing device.

42. A method according to claim 39, including receiving the reference version count from a trusted third party system.

43. A method according to claim 39, including receiving the reference version count from the secondary storage system.