Title of the invention

Device and method for personalising a portable electronic device.

Background of the invention

The present invention relates to the general field of personalising portable electronic devices containing a permanent memory. These portable devices include chip cards, memory cards, for example such as MMC, SD or even USB, and various intelligent objects of different sizes and shapes, communicating by means of various protocols. These devices are generally referred to jointly as "tokens" .

The personalisation of such portable devices essentially consists of writing, in a permanent storage area of the device, data on behalf of organisations or persons that own or purchase the device, hereinafter designated by the term "client" .

The stored data are partially supplied by the client and partially generated by a personalisation service provider of its own accord or at the request of the client .

Certain data are variable for each portable device and others are common for groups of portable devices.

Thus, the storage space is shared between a part that is generally left free for subsequent use by the end user, a part filled with data that are identical for all the portable devices in a given production batch or even m a class of production batches (called "profile"), and a part, generally smaller than the preceding part, filled with data that are different for each device.

The data to be stored are generally organised into complex structures, including file systems (for example, according to standards such as FAT, VFAT, FAT32, NTFS, ext2 , ISO9660, etc.) and database systems, relational or obj ect-based.

This is the type of organisation, generally called logical representation or even high-level representation, m which the data are used.

However, most portable storage devices manipulate the data m a much more simple structure called physical representation, according to which the storage space is considered to be a continuous sequence of consecutive bytes that can be read, written or modified through direct access .

A complete or partial copy of the contents of the storage space in its physical representation is called a memory image, where each memory location, referenced by its address, has a unique value associated with it.

The mechanism in charge of translating from one representation to another is generally called the "engine" of the file system or database. Such an engine is used when creating, deleting or modifying any file.

It is common for portable electronic devices containing a permanent memory not to contain a file system engine. The latter is generally implemented in a host device to which the portable electronic device is connected. The invention relates to the personalisation of such portable electronic devices.

As regards the personalisation of these devices, the client sends the data to be personalised from its own information system, in their logical representation. The personalisation service provider therefore receives data presented in their logical representation (files, objects, etc.) and has the task of storing them in their physical representation in portable electronic devices.

According to a known architecture, a data-processing system is then in charge of transforming these data and completing them with data it has generated itself, to obtain personalisation data that are ready to be used by personalisation equipment to which the prepared data are sent .

The personalisation equipment therefore has the mission of establishing communication with every portable device to be personalised, and to store therein all the data intended for them. This is called data injection.

Since these portable devices do not include an engine, the personalisation equipment is required to inject the data to be personalised in the portable device in the physical representation thereof .

In a general manner, the personalisation equipment itself does not contain an engine either. The data must then be supplied to the personalisation equipment m their physical representation.

Since neither the personalisation equipment nor the portable device are equipped, moreover, for modifying the data intended to be stored m the portable device, the entire contents of each portable device must be computed by the data-processing system and then sent to the personalisation equipment, even if the differences between the contents of the portable devices only relate to part of the data .

This has the main effects of generating a considerable computing load when calculating the physical representation of data that are identical among the portable devices, of requiring the storage of integral physical representations of each portable device, including the common data, and of requiring repeated sending of identical data among portable devices, m their physical representation, between the data-processing

system and the personalisation equipment. This has considerable negative impact on personalisation performance .

Currently, large-capacity portable devices, in particular multimedia SIM cards, portable storage media ("USB keys") , and memory cards for multimedia use, are capable of storing large volumes of data several orders of magnitude greater than those traditionally processed in the field of personalisation. The aforementioned performance limitations are therefore even more critical here .

Aim and summary of the invention

The present invention therefore has the main aim of reducing the deterioration of performance relating to computing, storing and transporting a complete memory image for each portable electronic device.

For this purpose, the invention provides a method of preparing data intended for personalising a series of portable electronic devices containing a permanent memory comprising the steps of receiving data intended for personalising a series of portable electronic devices according to a high-level representation, constructing a reference memory image comprising, according to a physical representation, data common to all the portable electronic devices, using data according to the high-level representation received, constructing, for each portable electronic device, a differential memory image comprising, according to a physical representation, data that are

specific to each portable electronic device to be personalised, using data according to the high-level representation received and the reference image, sending the reference memory image and the differential memory image to personalisation equipment capable of injecting a personalised image according to the physical representation in each portable electronic device using the reference memory image and the differential memory image corresponding to this portable electronic device.

Such a method avoids the need for sending a personalised image between the processing device and the personalisation equipment. This enables a considerable reduction of the personalisation performance limitations of the portable electronic devices in that relating to data computing, storage and transport.

Indeed, the invention makes it possible not to write in memory areas not used in the portable electronic devices, not to transfer common data between the processing device and the personalisation equipment and to avoid storing redundant data. These advantages are obtained with no complexification of the portable electronic devices or the personalisation equipment.

According to one specific characteristic of the invention, the construction step uses high-level representation interpretation capabilities to integrate only the values of the memory locations that are actually used by data of the high-level representation in the reference image.

The invention also relates to a data-processing device capable of implementing the data-preparation method intended for personalising a series of portable electronic devices according to the invention and comprising means for receiving data intended for personalising a series of portable electronic devices according to a high-level representation, a generator capable of constructing a reference memory image for all the portable electronic devices and a differential image for each portable electronic device to be personalised and means for sending the reference and differential images to personalisation equipment .

The invention further relates to a method of personalising a series of portable electronic devices comprising the steps of receiving at least one reference image and differential images according to the physical representation, of constructing a personalised image according to the physical representation for each portable electronic device to be personalised based on the reference image and a differential image corresponding to a given portable electronic device, and of injecting the personalised image in this portable electronic device.

In a variation on this latter method, the invention also relates to a method of personalising a series of portable electronic devices comprising steps of receiving at least one reference image and differential images according to a physical representation, and of injecting on the fly, in each memory location of a portable

electronic device, a value obtained by simultaneously examining the reference image and its corresponding differential image.

Moreover, the invention relates to equipment for personalising portable electronic devices intended for implementing a personalisation method according to the invention and comprising means for receiving a reference memory image comprising, according to a physical representation, the common data for a series of portable electronic devices, and differential memory images comprising, according to a physical representation, the specific data of each portable electronic device to be personalised, means for reconstituting and storing a personalised memory image according to the physical representation for each portable electronic device based on the reference image and a differential image corresponding to this portable electronic device and means for injecting the personalised image in this portable electronic device.

Finally, the invention relates to equipment for personalising portable electronic devices intended for implementing a method according to the invention and comprising means for receiving a reference memory image comprising, according to a physical representation, the common data of a series of portable electronic devices, and differential memory images comprising, according to a physical representation, the specific data of each portable electronic device to be personalised and means for injecting

on the fly, in each memory location of the portable electronic device, a value obtained by examining the reference image and the differential image simultaneously. Brief description of the figures

Further characteristics and advantages of the present invention will emerge from the following description, made in reference to the appended drawings, which depict one embodiment of the invention in an entirely non-limiting manner. In the figures:

Figure 1 is a diagrammatic view of a system comprising a data-processing device according to the invention,

Figure 2 provides an overall description of a data- processing device capable of implementing the data- preparation method according to the invention,

Figure 3 shows the internal structure of the generator means of a data-processing device according to the invention,

Figures 4 to 7 depict the operation of the generator means of the data-processing device according to the invention . Detailed description of an embodiment

Figure 1 shows a system intended for personalising portable electronic devices 14. This system comprises a data-processing device 12 capable of implementing a method according to the invention and personalisation equipment 13 that is specific to the invention.

The data processing device 12 receives data D in high-level representation from an information system 11 where such data are stored and/or generated. So-called high-level representation is based on organising the data D in files, which m turn are organised into folders, or else on organising data m databases, which can be relational or obj ect-based. This representation is commonly called logical representation. This relates to the format m which the data are used, in particular by applications. Such applications are, for example, implemented m a host device m which the portable electronic device 14 is inserted and which communicates with the latter by means of an interface which can be a card reader connected to the host device or integrated therein.

Generally the data D m logical representation are sent by the information system m such a way that the common data D [com] of the portable electronic devices to be personalised are differentiated from the specific data D[spe(i)] of each portable electronic device 14.

According to the invention, the data-processing device 12 receives these data D [com] and D[spe(i)] . It comprises means 15 for generating memory images capable of constructing a reference image d [com] and differential images d[spe(i)] from data in logical representation.

"Memory image" is understood to mean a record of all or part of the contents of the permanent memory of a portable electronic device as affected by the invention.

In fact, it is a physical representation of the memory, which consists of a sequence of bytes grouped into blocks of 512 consecutive bytes.

Thus, the generating means 15 comprise what is commonly known as a file system or database engine capable of translating data from a logical representation to a physical representation and vice-versa as required.

According to the invention, the generating means 15 therefore generate a reference memory image d[com] containing the common data of a series of portable electronic devices to be personalised and, for each device i to be personalised, a so-called differential partial memory image d[spe(i)] which is specific to each portable device i .

Figures 2 to 7 explain how these images are generated.

Figure 2 describes, overall, the process that enables a personalised portable electronic device 14'' to be obtained from a blank portable device 14.

In its most straightforward embodiment, the invention establishes a rudimentary data hierarchy by separating the common data of all the portable electronic device to be personalised from the specific data of each portable device.

It can be seen that, in practice, the data are often organised according to a more complex structure, generally with several levels.

In this case, the invention is adapted to take this hierarchy into account by generating memory images of intermediate common data.

Figure 2 describes such a situation where four data hierarchy levels are used. This is the case, for example, when personalising microprocessor cards.

Such cards can be connected to a host device while being used in order to place data and services at the disposal of the host device. They have a permanent memory space, the contents of which are intended to be managed by this host device, but do not contain means for handling data according to a logical representation. Only the host device has this capability and it thus uses the data and the services of the portable electronic device. This is typically a computer, a mobile telephone, etc.

In practical terms, the card then allows the host device to access the data according to a physical representation of the memory space in order to read, write or modify the data.

In the example provided in figure 2, a certain amount of common data in logical representation D [com' ] is shared among all the cards of the same type, for example, all SIM cards intended for 3G mobile telephones. Another, generally large, part of the data D [com' ' ] is shared among all the cards of the same class, for example, all the cards for a given client, regardless of the production batch.

The data D [com' ] and D [com' ' ] are generally known before producing the cards and do not correspond to any order from a client. This is also why, in figure 2, preferably in a non-restricting manner, the process comprises three phases, shown diagrammatically by dotted lines: a first so-called development phase 22 performed before the personalisation process proper, a second phase of preparing the personalisation data 23 and a final personalisation phase 24 proper.

The first two phases 22 and 23 are advantageously performed in the same single processing device 12. Indeed, it is clearly understood that the separation between the development phase 22 and the data-preparation phase 23 is relatively random and conforms mainly to practical implementation constraints. Consequently, the development phase 22 can be, in practice, entirely or at least partially included in the data-preparation phase 23. In any case, these two phases 22 and 23 advantageously share the use of the same means, in particular the generator means 15.

The first of the last two hierarchical levels relates to the cards of a same batch corresponding to a specific client order. The corresponding data D [com] are, in logical representation, the common data defined for the cards of the same class and data specific to the batch and common for all the cards of this batch.

The data hierarchy finally contains the data which are specific to each card D [spe] . These specific data can

be data with values other than the values of the common data, additional data or even deleted data.

As shown in figure 2, the data D [com' ] are, for example, sent to loading means 25, which contain a file system engine for constructing a logical representation image corresponding to the data D [com' ] and injecting it in a real blank card 14, which then becomes a prepared card 14' . Means 26 for extracting a memory image are then used to extract, from the prepared card 14' , a memory image of the data in physical representation d[com'], which are common to all the cards of the same type.

This image d[com'] is then sent to the generator means 15, which also receive the common data D [com' '] of the cards of the same class in a logical representation. The means 15 then generate a memory image d[com' '] that is common for all the cards of the same class.

The image d [com' ' ] is then sent to the generator means 15 which in this case receive, at the same time, the data in logical representation D [com] that are common to all the cards of the same batch.

A reference image d[com] that is common to all the cards of the same batch is then generated.

Thus, in each personalisation level, a new reference common memory image is computed by modifying and/or adding and/or deleting data in a manner that is specific to each hierarchical level .

The intermediate memory images d[com'] and d[com''] are advantageously stored in the data-processing device 12

so as to be used when personalising other batches of the same type and the same class.

The common reference image d [com] for the cards of the same batch is then sent to the generator means 15, which then also receive the specific data D[spe(i)] of a specific card i .

In this case, the generator means 15, which until now work in a known manner by extracting a complete modified image, then enter a differential operation mode that is specific to the invention.

This mode allows them to extract a so-called differential memory image d[spe(i)] describing the differences between the image of the specific card i and the common reference image d[com] . The differential memory image d[spe(i)] only comprises the subsets with values that differ from those specified in the reference image d [com] . Also, the differential image d[spe(i)] is linked by construction with the reference image d[com] .

The generator means 15 have an interface that is capable of communicating with personalisation equipment 13 in order to send the reference image d [com] and a specific image d[spe(i)] for each specific card i.

Figure 3 provides a more accurate description of the internal structure of the generator means 15. They comprise a so-called image personalisation element 31 which works by collaborating with a file system engine 32 and a virtual memory 33.

These generator means 15 are generally activated by means of a calling program 40 which manages the performance of specific tasks during the process of preparing the personalisation data.

Such a calling program 40 is traditionally implemented in a microprocessor managing the operation of the data-processing device 12 according to the invention.

In communication with this calling program 40, an external interface 34 of the generator means 15 makes it possible to receive the definition of the reference image, the definition of the files added, modified and deleted and to extract a complete or differential image.

Figures 4 to 7 describe the routing and processing of the various commands that can be performed by the calling program 40 inside the generator means.

As shown in figure 4, when the order DEFd [com] to define a reference image d[com] is given on the interface 34, the image personalisation element 31 sends the definition of the image DEFd [com] by means of a memory extraction interface 36 to the virtual memory 33. The latter then stores the image d[com] .

Also according to the invention, the virtual memory 33 advantageously includes a map of modifications 39. All the blocks of the reference image d[com] are then marked as being non-modified.

Figure 5 describes the sequences of events when an order to add DAJ, modify DMO or delete DSU a file is given

on the interface 34. This can also consist, more generally, of an order to add, modify or delete a folder.

The personalisation element 31, after receiving such a DAJ, DMO or DSU order, sends the order to add DAJ, modify DMO or even delete DSU a file (or a folder) to the file system engine 32 by means of a file system interface 37. The engine 32 then sends orders to read LB and write EB blocks to the virtual memory 33 by means of a memory access interface 38. Thus, all the operations to create or delete folders and to create, delete and modify files produce read or write operations involving blocks of the virtual memory 33.

For each block writing operation EB, the relevant block is marked MKB as modified in the modification map 39 in the virtual memory 33.

The generator means 15 must also be capable of supplying the reference image d [com] and the differential image d[spe(i)] on the external interface 34.

As shown in figure 4, to extract the reference image d [com] , or even, during preceding steps such as those shown in figure 2, the intermediate image d[com''] , the image personalisation element 31 receives a request EId [com] to extract the complete image d[com] coming from the calling program 40 and transfers it to the virtual memory 33 via the interface 36. The latter then returns the memory image d [com] from all the blocks stored in the virtual memory 33, regardless of whether or not they have been modified.

The generator means 15 advantageously only include in the reference image d[com] the values of the memory locations that are actually used by the data of the logical model. For this, it relies on its capabilities to interpret this logical model .

Thus, the reference memory image d [com] only contains a strictly necessary volume of data. This further improves the transport performance between the processing device 12 and the personalisation equipment 13.

It is also possible to implement this optimisation function in the extraction means 26. In this case, the generation of the reference image d[com] is advantageously implemented in a single step.

After extracting the reference image d [com] , as shown in figure 2, the generator means 15 receive the specific data in a logical representation D[spe(i)] . Modifications, additions and/or deletions are then carried out in the manner described previously, and the modifications are entered in the modification map 39.

A command Eid[spe(i)] to extract the differential image d[spe(i)] then refers to that stored in the modification map 39 and to the memory image d[com] as modified .

As shown in figure 7, the virtual memory 33 then constructs and returns, over the interface 36, a differential image d[spe(i)] constructed using the blocks of the stored memory image d [com] marked as having been

modified in the modification map 39. These blocks are sorted by increasing memory address order.

According to figure 2, the reference image d[com] and the differential image d[spe(i)] are then sent to the personalisation equipment 13.

The invention therefore makes it possible to send a single reference image for a series of portable electronic device and as many differential images as portable devices to be personalised. Insofar as the differential images are smaller in size than the complete memory image, the invention makes it possible to reduce the data flow travelling between the data-processing device 12 and the personalisation equipment 13.

The latter has the mission of reconstituting the complete memory image d[i] for each portable electronic device 14 to be personalised, and to inject it in this portable device 14. It does not have a file system engine. It has an interface for communicating with the card 14 and means for injecting a memory image in the card and sufficient memory space for storing the memory images that can be used according to the invention.

Several strategies are possible for performing the task of reconstituting a personalised image d[i] and injecting this image d[i] in the card 14.

This can consist either of sequentially injecting the common data d[com] and then the specific data d[spe(i)], of reconstituting a personalised image d[i] of the portable electronic device in the memory prior to

injection, or of reconstituting the personalised image d[i] being injected on the fly.

The first strategy consists of injecting the common data d [com] and then the specific data d[spe(i)] . The data present in the two images are then injected twice. However, this strategy uses the injection mechanisms that are traditionally present in personalisation equipment receiving an entire personalised image for each portable electronic device.

This strategy is useful when the implemented injection mechanisms are efficient, for example when they are mainly implemented in hardware and not in software. The personalisation equipment then operates independently and sequentially with the reference image d[com] and then with the differential image d[spe(i)], which has values that modify their values previously stored when injecting the reference image d[com] .

With such operation, it is necessary however, prior to injecting a differential image d[spe(i)] , for a reference image d[com] to have been injected in the portable electronic device 14 and not to have been subsequently modified.

In addition, the two injections can be performed separately in the process of producing portable electronic devices .

According to the second strategy, the personalisation equipment 13 is equipped with means that are specific to the invention and reconstitute a specific

image d[i] personalised for each portable device 14 prior to injection.

In this case, the personalisation equipment 13 comprises sufficient memory for storing the reference memory image d [com] , the differential image d[spe(i)] and the integral personalised image d[i] reconstituted from these two images d[com] and d[spe(i)] .

To reconstitute the personalised image d[i] of a specific portable device i, the following priority rules are applied to the values of the reference image d [com] and the values of the differential image d[spe(i)] .

When a value A is specified at an address of the reference image d[com] and no value is specified at the same address of the differential image d[spe(i)], the value A is stored at this address of the personalised image d[i] . When a value A is specified at an address of the reference image d[com] and a value B is specified at the same address of the differential image d[spe(i)], the value B is stored at this address of the personalised image d[i] . When no value is specified at an address of the reference image d[com] and a value B is specified at the same address of the differential image d[spe(i)] , the value B is stored at this address of the personalised image d [i] .

Thus, when the image d[i] is reconstituted, known injection mechanisms can be used. In this way, each piece of data is only injected once.

The third strategy consists of determining the data to be stored in each memory location of the portable electronic device 14 at the moment of injection. The data to be stored is then determined by simultaneously examining the reference image d[com] and the differential image d[spe(i)] and by applying the priority rules described above. The presence in the personalisation equipment 13, of a memory that can contain the reference image d[com] and the differential image d[spe(i)] is then enough to allow such an injection to be performed.

According to this strategy, the injection mechanism is then specific. The presentation, in the reference d [com] and differential dtspe(i)] images, of the data in increasing or decreasing memory address order allows simple, efficient implementation of such an injection.

Each memory image consists of a sequence of memory blocks of fixed size, for example 512 bytes. And the memory address of the block and its contents are known for each of these blocks. Since the blocks are sorted by increasing memory address order in the reference d[com] and differential d[spe(i)] images, a personalised image construction and injection algorithm d[i] is described by the following pseudocode, where A e- B means "allocate the value of B to A" :

When there remains a block to be processed in d[com] or in d [spe (i) ] :

If there remains at least one block to be processed in both d[com] and d[spe(i)] :

Acom <- the address of the next block to be processed in d[com]

Adif «- the address of the next block to be processed in d[spe(i)] If Acom < Adif:

E «- contents of the next block of d [com]

Ae <- Acom «- Go to next block in d[com] If Acom = Adif:

E <- contents of the next block of d[spe(i)]

Ae _* - Adif

Go to the next block in d[com] and in d[spe(i)] If Acom > Adif:

E «- contents of the next block of d[spe(i)]

Ae <- Adif

Go to next block in d[spe(i)] If not: If there remains at least one block to process in d [com] :

E <- contents of the next block of d[com]

Ae >6- Acom «- Go to next block in d[com]

If there remains at least one block to process in d [spe (i) ] :

E -s- contents of the next block of d[spe(i)]

Ae «- Adif

Go to next block in d[spe(i)] Write E at the address Ae of the map.

In this way, each piece of data is only injected once in the map .

In the three strategies, it can be seen that the personalisation equipment is not required to have any knowledge of the logical structure of the data.

The described embodiments are not in any way restricting. It is noted that various embodiments are possible according to the principles of the invention.

It is understood, in particular, that the invention can be implemented for personalising a plurality of batches among a series of cards of the same class.

In particular, it is possible to use a hierarchy with several levels among the data of the portable electronic device according to the principles of the invention by generating intermediate reference memory images .

In this case, a chain of memory images, from most general to most specific, can be associated with a given portable device and sent from the processing device 12 to personalisation equipment 13.

In this case, the personalisation equipment 13 is also adapted to work using multiple intermediate memory images and to personalise each portable electronic device 14 using all the associated memory image chains.

It is therefore advisable to classify the portable devices according to this hierarchy. The rules of priority of the data between differential images are then generalised in a chain of randomly sized memory images.

Thus, for the same memory address, a value specified in an image with a more specific level has priority over a value specified in a memory image with a more general level.