Abstract:
Smartcards are gaining acceptance as a secure medium for storing information, typically of a personal and confidential nature. Unfortunately, the process of storing information to the smartcard is a time consuming task, often taking much longer than to read the same amount of information from the card. The non-volatile memory within the smartcard is typically of the FLASH type and does not facilitate fast writing a fast writing process thereto. In order to speed up this process, a comparative writing algorithm is utilized which only writes changed data to the smartcard memory, thus eliminating the need for storing duplicate information.

Description:
FIELD OF THE INVENTION  
         [0001]    This invention relates to storing data within smartcards and more specifically to the area of storing data within smartcard memory that is other than the data already stored within the memory.  
         BACKGROUND OF THE INVENTION  
         [0002]    Smartcards are gaining acceptance in our society, especially with the increasing need for authorized: authentication, storing values and storing personalized information. Authentication is concerned with ensuring that only authorized individuals gain access to systems and buildings. A smartcard can be used as an electronic wallet to store units of different currency denominations, as well as acting as a credit card. Values can be replenished on a smartcard. The smartcard is capable of holding a large amount of data of different forms and for different purposes but usually of a personal nature.  
           [0003]    Smartcard (SC) technology has allowed for storing of secure information within an integrated circuit card. The secure information is stored in such a format that software keys and certificates are required for authentication purposes before information is retrieved. An encoding standard, known as PKCS15 dictates how these keys and certificates are represented in terms of smartcard files and directories. The format securely controls external access to files and directories on the smartcard during the process of encoding information, or reading information from the smartcard.  
           [0004]    Each of the directory files: Private Key, Public Key, Secret Key, Certificate or Data Object, occupy a non volatile array of addressable memory within the smartcard. Typically this array of non-volatile array addressable memory is of the EEPROM type with memory sizes from 8 kb up to 32 kb. Directories on the SC are addressable using an interface system. The smartcard is inserted into an interface system, such that the interface system interacts with the information within the directory files on the smartcard, providing and storing the necessary information pertinent to a nature of a transaction within the interface system.  
           [0005]    If the interface system is used for monetary purchases, then typically prior to transaction, pertinent information is first read into cache memory within the interface system. It is within this cache memory that the system reads stored smart cart used identities, accounts and balances, which will be used for purchases made during the transaction.  
           [0006]    Once a purchase is complete and the transaction has ended, pertinent information is written back to the non-volatile memory within the smartcard, such that an appropriate record of the transaction is stored. Unfortunately, writing of the same length of information back to the smartcard takes a longer amount of time than reading of the same information form the smartcard. Non-volatile, EEPROM or FLASH memory is quite slow when it comes to writing to, as comparison to volatile memory. Typically information is stored in complete files on the smartcard. As a result when updates of information are made on the smartcard, the interface requires significantly more time in order to save changed files back to the smartcard  
           [0007]    is therefore an object of this invention to provide a method of writing data to smartcard files in such a manner so as to decrease the amount time the interface system spends in saving data to the card by using a comparative writing approach.  
         SUMMARY OF THE INVENTION  
         [0008]    In accordance with the invention there is provided a method of storing changed information within a non-volatile memory of a smartcard comprising the steps of: caching data from within the smartcard, the cached data stored in a location in memory other than memory within the smartcard; providing data for storage within the smartcard; comparing the provided data for storage to at least a portion of the cached data retrieved one of directly and indirectly from the location to determine a data portion thereof less than the whole and having therein changed data; and, writing the determined data portion less than the whole to the smartcard.  
           [0009]    In accordance with another aspect of the invention there is provided an apparatus for storing changed information within a non-volatile memory of a smartcard comprising: a memory having a first and a second memory locations and other than within a smartcard; a processor for reading data from the smartcard memory, for storing the read data into the first memory location, for copying a portion of the data from the first memory location and storing modified data in the second memory location, and for comparing the data stored within the first memory location to the data stored within the second memory location and storing within the smartcard memory at least a portion of the modified data that is different, the at least a portion being less than the whole of the read data.  
           [0010]    In accordance with yet another aspect of the invention there is provided a storage medium having stored thereon data indicative of a plurality of instructions for performing the steps of: caching data from within a smartcard, the cached data stored in a location in memory other than memory within the smartcard; providing data for storage within the smartcard at locations from which the cached data was retrieved; comparing the provided data for storage to at least a portion of the cached data retrieved one of directly and indirectly from the location to determine a data portion less than the whole and having therein changed data; and, writing the determined data portion to the smartcard. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0011]    The invention will now be described with reference to the drawings in which:  
         [0012]    [0012]FIG. 1 illustrates smartcard and interface system for reading and writing of information to the smartcard non volatile memory,  
         [0013]    [0013]FIG. 2 a  illustrates in flow diagram steps performed by a host computer system to read data from a smartcard;  
         [0014]    [0014]FIG. 2 b  illustrates in flow diagram steps performed by a host computer system to write data to a smartcard;  
         [0015]    [0015]FIG. 3 illustrates two alphanumeric strings being compared in cache memory prior to storage within smartcard memory;  
         [0016]    [0016]FIG. 4 is a simplified flow diagram of an embodiment of a method according to the invention;  
         [0017]    [0017]FIGS. 5 a,    5   b,    5   c , and  5   d  illustrate examples of data cached from a smartcard and that to be written for comparison according to the invention.  
         [0018]    [0018]FIG. 6 is a simplified flow diagram of an embodiment of another method according to the invention;  
         [0019]    [0019]FIG. 7 is a simplified flow diagram of an embodiment of a further method according to the invention; and,  
         [0020]    [0020]FIG. 8 is a simplified flow diagram of an embodiment of yet another method according to the invention. 
     
    
     DETAILED DESCRIPTION OF THE INVENTION  
       [0021]    [0021]FIG. 1, illustrates a smartcard  10  coupled with a host computer system  1 . The host computer system  1  comprises memory in the form of random access memory (RAM)  15 , a processor in the form of a microprocessor  16 , and a peripheral interface  14  for coupling with an interface of a smartcard.  
         [0022]    The smartcard  10  comprises memory in the form of random access memory (RAM)  11 , a processor in the form of a microprocessor  12 , and a smartcard interface  13  for coupling with the peripheral interface  14  of the host computer system  1 . As such, data is retrieved from the smartcard memory  11  into the host processor system memory  15  for processing by the host computer system processor  16 . Once processed, data is stored from the host computer system back to the smartcard via coupled interfaces  13  and  14 .  
         [0023]    [0023]FIG. 2 a  shows in flow diagram steps performed by the host computer system  1  to read data from the smartcard  10 . First a data read request is provided from the host computer system  1  to the smartcard  10  including an indication of a location of the data to be read and an amount of data to be read. For example, the indication is in the form of a start address and a length. Alternatively, the indication includes a start and end address. Further alternatively, the indication includes an identifier recognizable to the smartcard and some offset and length data relating thereto.  
         [0024]    Of course, once the data is provided to the host computer system, the host computer system is able to process the data as desired including modifying the data, retransmitting the data, duplicating the data and so forth.  
         [0025]    Of course, it is well known in the art of data manipulation and caching that typical read operations have some overhead associated therewith. Here, the overhead includes transmitting a number of bytes from the host computer system to the smartcard indicative of a read operation and data relating to addresses from which to read data. Thus, if a read lookup operation has a latency of zero clock cycles and a read and write cycle time is identical, in order to read 50 bytes requires 50 read clock cycles plus N write clock cycles—one per byte of data for indicating a read operation and address data. This results in a total of 50+N cycles.  
         [0026]    When the number of bytes read is 5 bytes, the value of N forms a significantly larger proportion of the total read operation time. Thus, larger read operations are advantageous over smaller ones.  
         [0027]    [0027]FIG. 2 b  shows in flow diagram steps performed by the host computer system  1  to write data to the smartcard  10 . First a data write request is provided from the host computer system  1  to the smartcard  10  including an indication of a location in which the data is to be stored and an amount of data to be stored. For example, the indication is in the form of a start address and a length. Alternatively, the indication includes a start and end address. Further alternatively, the indication includes an identifier recognizable to the smartcard and some offset and length data relating thereto.  
         [0028]    Of course, it is well known in the art of data manipulation and caching that typical write operations have some overhead associated therewith. Here, the overhead includes transmitting a number of bytes from the host computer system to the smartcard indicative of a write operation and data relating to addresses to which to store the data. Thus, if a write lookup operation has a latency of zero clock cycles and a read and write cycle time is identical, in order to write 50 bytes requires 50 write clock cycles plus N write clock cycles—one per byte of data for indicating a write operation and address data. This results in a total of 50+N cycles.  
         [0029]    When the number of bytes written is 5 bytes, the value of N forms a significantly larger proportion of the total write operation time. Thus, larger write operations are advantageous over smaller ones.  
         [0030]    Further, the interface with the smartcard is typically slow and, as such, it is desirable to perform read and write operations as background tasks. That said, write operations must be completed before a smartcard  10  is removed from the interface  14 .  
         [0031]    Referring to FIG. 3, a read-write operation is shown for use with a smartcard  10 . The A smartcard session is initiated when the smartcard  10  is inserted into the host computer system  1  with the smartcard interface  13  coupled with the peripheral interface  14 , and closed when a transaction within the host computer system  1  is brought to an end and the card is ejected from the host computer system. Here, the smartcard  10  is interfaced with the host processor  16 . Data stored within the smartcard is read into a memory cache  15  for access by the host processor  16 . The host processor accesses the cached data and operates thereon to result in modified data. The modified data is then written back to the smartcard memory to replace the data read therefrom.  
         [0032]    For example, if a user logs onto a computer network using security data stored within a smartcard, the security data is read into cache memory for use in accessing the network. Typically, statistical data associated with the security data such as last login attempt information is modified and the security data is rewritten to the smartcard.  
         [0033]    In general, when a smartcard session is initiated, data pertinent to the type of session is read from files within the smartcard  10  non-volatile memory  11 . This data is read and cached by the processor  16  into a first memory location in cache memory  15 , within the host computer system  1 . Data is read into cache memory  15  since further processing operations will take place on the data, and having the data cached in volatile memory allows the processor  16  to quickly operate on the data. Slow access time prohibits mathematical operations on data that has not been first read into cache memory  15 .  
         [0034]    The Processor  16  operations on the cached data can be numerous in dependence upon the nature of the session. If the session is for the purchasing of an item, then files pertinent to the session, such as monetary balances and accounts are read by the processor  16  from the appropriate memory locations within non-volatile smartcard memory  11  into the first memory location within cache memory  15 . If the transaction is for authorization purposes then names and passwords are read into the first memory location within cache memory. The nature of the session dictates which information is read, and which information is altered within a second location in cache memory pertaining to data for storage.  
         [0035]    Once the session is closed, data for storage, stored within a second location, is ready to be updated on the card to reflect account balances or changes in passwords, or other parameters updated in the session.  
         [0036]    Referring to FIG. 4, a method of storing data within the smartcard memory is shown in flow diagram. Here, the data is assumed to have originated from the smartcard memory. After modification, the data is to be rewritten to the smartcard. Prior to executing a write operation, a comparison is executed by the processor  16  in order to compare the data read from the smartcard and the data currently in memory for storage within the smartcard. If only altered data portions are provided to the smartcard for storage, then the process reduces the amount of data which needs to be written back to the non volatile smartcard memory. Since the smartcard interface and memory are slow, this saves significant time in the write-back process.  
         [0037]    Referring to FIGS. 5 a,    5   b,    5   c,  and  5   d,  a string of data is shown as read from the smartcard in the top line and as modified for storage thereto in the second line. All changed data characters are shown as “-” for ease of detection. A plurality of more specific embodiments of the method of FIG. 4 are explained below with reference to the strings of FIGS. 5 a  through  5   d.    
         [0038]    Referring to FIG. 6, a method according to the invention wherein only the portion of the data encompassing the first changed byte to the last changed byte is stored to the smartcard. Thus, the data before a first changed byte and after a last changed byte is excluded from the write operation thereby reducing a write time for the data. Referring to the data of FIG. 5 a,  this results in 7 fewer bytes of a total of 52 bytes being written. If the overhead is 5 bytes, the resulting operation requires 50 bytes instead of 57 bytes for a better than 10% savings. Referring to FIG. 5 b,  only a centre 14 bytes need to be stored to the smartcard thereby requiring, for the above noted overhead, 19 byte transfers instead of 57 for a savings of ⅔. Referring to FIG. 5 c,  only a centre 16 bytes need to be stored to the smartcard thereby requiring, for the above noted overhead, 21 byte transfers instead of 57 for a savings of almost ⅔. Referring to FIG. 5 d,  51 bytes need to be stored to the smartcard thereby requiring, for the above noted overhead, 56 byte transfers instead of 57 for a nominal savings. That said, in each of the above cases, a savings results.  
         [0039]    Referring to FIG. 7, a method according to the invention wherein each portion of the data encompassing a first changed byte to a last contiguous changed byte is stored to the smartcard. Thus, the data between changed bytes is excluded from the write operation thereby reducing a write time for the data. Referring to the data of FIG. 5 a,  this results in 6 write operations for 2, 1, 1, 1, 1, and 4 bytes respectively. Thus, using the above overhead example, the resulting number of bytes transferred to the smartcard is (6×5)+2+1+1+1+1+4=40 bytes as compared to the 57 bytes without employing the inventive method. This has a savings of about ⅓. Referring to FIG. 5 b,  only a centre 14 bytes need to be stored to the smartcard thereby requiring, for the above noted overhead, 19 byte transfers instead of 57 for a savings of ⅔. Referring to FIG. 5 c,  only three portions requiring storage including three portions of two bytes each. Thus, (5+2)×3 or 21 bytes are written to the smartcard. This is better than a 50% savings. Referring to FIG. 5 d,  only two bytes need to written as two separate portions requiring (5+1)×2 or 12 bytes to be stored to the smartcard. Once again savings are realized in each case.  
         [0040]    Referring to FIG. 8, a method according to the invention wherein each portion of the data encompassing a first changed byte to a last contiguous changed byte is stored to the smartcard and wherein portions separated by fewer than M unchanged bytes are considered contiguous. Thus, the data between changed bytes is only excluded from the write operation when sufficient unchanged bytes exists therebetween thereby reducing a write time for the data. In the examples below, M is set to 6 though it is readily apparent to those of skill in the art that M is determined based on the overhead and other delays in performing write operations. Referring to the data of FIG. 5 a,  this results in 3 write operations for 16, 1, and 4 bytes respectively. Thus, using the above overhead example, the resulting number of bytes transferred to the smartcard is (3×5)+16+1+4=36 bytes as compared to the 57 bytes without employing the inventive method. This has a savings of about ⅓. Referring to FIG. 5 b,  only a centre 14 bytes need to be stored to the smartcard thereby requiring, for the above noted overhead, 19 byte transfers instead of 57 for a savings of ⅔. Referring to FIG. 5 c,  only one portions requiring storage including 16 bytes. Thus, (5+16) or 21 bytes are written to the smartcard. This is better than a 50% savings. Referring to FIG. 5 d,  only two bytes need to written as two separate portions requiring (5+1)×2 or 12 bytes to be stored to the smartcard. Once again savings are realized in each case. By selecting M appropriately, it is possible to ensure maximum savings for a given system and smartcard combination.  
         [0041]    For instance if the transaction is financial in nature then account information need not be stored again to the smartcard, and perhaps only the updated balance. In this case depending upon the amount of money spent, only three digits may require change as opposed to ten, providing an immediate time savings for the actual data storage portion of the process of 70%.  
         [0042]    Statistically, most times only a small portion of data will be changed on the card after a single session. Re-writing of information already stored on the card is waste of time, and there is no need to write the information again since it is already stored in non-volatile memory and does not require updating.  
         [0043]    Typically, large amounts of data are infrequently stored to smartcard memory in one session. At smartcard initiation time, a large amount of data are written to the card to initialize the directories as well as to initialize the user profile and to store information pertinent to the profile. This is usually done by an institution, which is providing the card to the user. At initialization time, comparing and storing of data on the smartcard would not create a time savings because of the nature of the initialization and the uniqueness of all data being stored. The process of caching data is more applicable when used by individuals for transactions such as purchases or access, where only a portion of data needs to be quickly modified on the smarteard in order to make a record of the transaction.  
         [0044]    Of course, though bytes are used in the above examples, the data write operation is typically optimized for at least a predetermined number of bits, bytes, or words of data and typically, that optimized predetermined amount of data is compared.  
         [0045]    Numerous other embodiments may be envisaged without departing from the spirit or scope of the invention.