UPDATE-DRIVEN MIGRATION OF DATA

• US 20170289115A1
• Filed: 04/04/2016
• Published: 10/05/2017
• Est. Priority Date: 04/04/2016
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Lessiak, Andreas, Fruehwirth, Josef, Jelenka, Jozsef, Schlatte - Schatte, Harald, Frey, Alexandre
• Granted Patent: US 11,050,726 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/214 Database migration support
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 8/52 Binary to binary
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A current operating system that is stored in a persistent storage circuit of a secure element is replaced by receiving a set of migration rules that specify changes to a set of data object types. Based upon the set of migration rules, a migration engine identifies data objects stored in a persistent storage circuit and corresponding to the set of data object types. For each of the identified data objects: a subset of the migration rules are selected that correspond to a data object type that corresponds to a particular data object, and based upon the selected subset, the particular data object is transformed. A new operating system can then be enabled.

Claims

1. A method for replacing a current operating system stored in a persistent storage circuit of a secure element, the method comprising:

receiving a set of migration rules that specify changes to a set of data object types;

identify, based upon the set of migration rules, data objects stored in the persistent storage circuit and corresponding to the set of data object types;

for each of the identified data objects;

selecting a subset of the set of migration rules that correspond to a data object type that corresponds to a particular data object, and

transforming, based upon the selected subset, the particular data object; and

enabling a new operating system.

2. The method of claim 1, further comprising receiving a set of finalization rules that specify additional changes to data stored in the persistent storage;

and modifying, based upon the set of finalization rules, the data stored in the persistent storage.

3. The method of claim 2, wherein the secure element includes a processor circuit and the persistent storage circuit and the current operating system provides a virtual machine environment for the secure element.

4. The method of claim 3, wherein method is carried out without the data objects leaving the secure element.

5. The method of claim 3, wherein at least some of the data modified based upon the set of finalization rules is native to the secure element.

6. The method of claim 3, wherein at least some of the data modified based upon the set of finalization rules corresponds to new data objects added with the new operating system.

7. The method of claim 1, wherein the secure element is part of a smart card and the data objects include personal data

8. The method of claim 1, further comprising receiving additional sets of migration rules and selecting a particular set based upon a version of the current operating system.

9. The method of claim 1, further comprising halting, during the transforming, access to the data objects.

10. An apparatus comprising:

a secure element circuit that includes;

a persistent storage circuit that is configured to store data objects and a current operating system; and

a processor circuit coupled to the persistent storage and configured to;

receive a set of migration rules that specify changes to a set of data object types;

identify, based upon the set of migration rules, data objects stored in the persistent storage circuit and corresponding to the set of data object types;

for each of the identified data objects;

select a subset of the set of migration rules that correspond to a data object type that corresponds to a particular data object, and

transform, based upon the selected subset, the particular data object; and

enable a new operating system.

11. The apparatus of claim 10, wherein the processor circuit is further configured to:

receive a set of finalization rules that specify additional changes to data stored in the persistent storage; and

modify, based upon the set of finalization rules, the data stored in the persistent storage.

12. The apparatus of claim 10, wherein the processor circuit is further configured to provide a standalone operating system within which each the particular data object is transformed.

13. The apparatus of claim 10, wherein the processor circuit is further configured to maintain the particular data object within the secure element circuit while the particular data object is transformed.

14. The apparatus of claim 10, wherein the processor circuit is further configured to run the new operating system within a virtual machine environment.

15. The apparatus of claim 10, wherein the processor circuit is further configured to receive additional sets of migration rules and select a particular set based upon a version of the current operating system.

16. The apparatus of claim 10, wherein the processor circuit is further configured to halt access to the data objects while the data objects are transformed.

17. A computer-implemented method for generating a set of migration rules for updating a current operating system stored in a persistent storage circuit of a secure element to a new operating system, the method comprising:

receiving operating system metadata for the current operating system and the new operating system, the metadata describing object type definitions;

correlating, based upon the metadata, object types in the current operating system with object types in a new operating system;

identifying differences between the correlated object types;

generating, based upon the identified differences, a set of migration rules that specify changes to objects corresponding to the correlated object types; and

broadcasting the set of migration rules and the new operating system to a plurality of secure elements.

18. The method of claim 17, further comprising:

identifying, based upon differences between the current operating system and the new operating system, changes that include at least one of resizing of data arrays, creation of new data objects, and changing content of stored data; and

generating executable code to implement the changes to objects corresponding to the correlated object types.