Patent application EP17155365A (EP), filed 2017-02-09
Publication number: EP3229134A1
Title: UPDATE-DRIVEN MIGRATION OF DATA
Abstract: A current operating system that is stored in a persistent storage circuit of a secure element is replaced by receiving a set of migration rules that specify changes to a set of data object types. Based upon the set of migration rules, a migration engine identifies data objects stored in a persistent storage circuit and corresponding to the set of data object types. For each of the identified data objects: a subset of the migration rules are selected that correspond to a data object type that corresponds to a particular data object, and based upon the selected subset, the particular data object is transformed. A new operating system can then be enabled.
IPC codes: G06F   9/    45            A I
G06F  16/    21            A I
G06F  21/    57            A I
G06F   8/    52            A I
G06F   8/    65            A I
Claims: number: 1
text: A method for replacing a current operating system stored in a persistent storage circuit of a secure element, the method comprising:
number: 2
text: The method of claim 1, further comprising receiving a set of finalization rules that specify additional changes to data stored in the persistent storage; and modifying, based upon the set of finalization rules, the data stored in the persistent storage.
number: 3
text: The method of claim 2, wherein the secure element includes a processor circuit and the persistent storage circuit and the current operating system provides a virtual machine environment for the secure element.
number: 4
text: The method of claim 3, wherein the method is carried out without the data objects leaving the secure element.
number: 5
text: The method of claim 3 or 4, wherein at least some of the data modified based upon the set of finalization rules is native to the secure element.
number: 6
text: The method of any one of claims 3 to 5, wherein at least some of the data modified based upon the set of finalization rules corresponds to new data objects added with the new operating system.
number: 7
text: The method of any preceding claim, wherein the secure element is part of a smart card and the data objects include personal data
number: 8
text: The method of any preceding claim, further comprising receiving additional sets of migration rules and selecting a particular set based upon a version of the current operating system.
number: 9
text: The method of any preceding claim, further comprising halting, during the transforming, access to the data objects.
number: 10
text: An apparatus comprising:
number: 11
text: The apparatus of claim 10, wherein the processor circuit is further configured to:
number: 12
text: The apparatus of claim 10 or 11, wherein the processor circuit is further configured to provide a standalone operating system within which each the particular data object is transformed.
number: 13
text: The apparatus of any one of claims 10 to 12, wherein the processor circuit is further configured to maintain the particular data object within the secure element circuit while the particular data object is transformed.
number: 14
text: A computer-implemented method for generating a set of migration rules for updating a current operating system stored in a persistent storage circuit of a secure element to a new operating system, the method comprising:
number: 15
text: The method of claim 14, further comprising:
Office action: search_report, dated 2017-10-11
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US2007277168A1
ref_type: patent
severity: background
ref_id: US2007277168
ref_type: patent
severity: novelty_destroying
Final disposition: pending (2017-10-11)