FR2901380A1 - Magnetic/optical/electronic/electro-optic type personal external storage medium e.g. universal serial bus key, for e.g. controlling file, has gateway process processing digital information associated to key file belonging to user spaces - Google Patents

Abstract

The medium (1) has a gateway process (P) stored in a RAM of a host station (5) e.g. portable computer, and configuring the station connected to the medium. Servers store information corresponding to user spaces of an authorized user. The process processes digital information associated to a key file belonging to the spaces to obtain corresponding information. A filtering module (D) recognizes a request on the file, and a processing module (C) creates access to the file and processes the request by a file management and operating system e.g. WINDOWS(RTM: operating system).

Description

PERSONAL PORTABLE MASS MEMORY MEDIA AND COMPUTER SYSTEM FOR SECURE ACCESS TO A USER SPACE VIA ONE
NETWORK The invention relates to a portable personal mass storage medium and a computer system that allows each user with such personal support to securely access a user's own computer space via a network such as the Internet. , securely and from any host computer station not previously specifically configured or dedicated to manage this user space or allow access to this user space.
Various known systems propose the use of a personal medium such as a USB (universal serial bus) to control the access of a user to a computer, or more generally to computer resources, by one or more words ( s) passwords (symmetric key (s)) saved in encrypted form on the media. These include, for example, SECURIKEY (R) or WIBU-KEY (R) systems (marketed by WIBU-SYSTEMS, Karlsruhe, Germany). However, these systems do not allow a user to access computer resources in a personalized manner (user space) that may include documents, files, data, programs, etc. from any computer station not previously configured for this purpose and connected. to a network.
In addition, with these known systems, all means of identity verification or authentication, including software, are stored on the key, so that access to personal computing resources is impossible for a user who has lost his personal support. Conversely, a third party in possession of the personal medium can access these resources if it can re-read the password (s) from the medium, which is technically not impossible.
US-2004/0001088 discloses a portable device such as a USB key for transporting the personal computer environment of a user, in the form of files stored on the non-volatile memory of this USB key. This personal environment contains favorites, emails, contacts, cookies (cookie programs), digital signatures, wallpapers, desktop icons, calendars and calendars, toolbar configurations, audio configurations, graphics, game options ... This environment can be defined by downloading from a website whose address is stored on the USB key. This system is therefore to use the memory of the USB key to transfer a computer environment from one computer to another. But, to do this, each computer must be compatible with such an environment, and must be independently and previously programmed to perform the transfer of the personal environment from the information on the portable medium. Thus, this document does not describe a computer system making it possible to access a user space contained in whole or in part on a device other than its personal computers and that the personal medium, and this, from any station initially not specifically configured for such access. In addition, other solutions (for example US-2002/0133561) have proposed the realization of a virtual disk on the Internet for storing, retrieving, accessing, controlling and manipulating files remotely by a user from any terminal. But the access to this virtual disk supposes that the terminal used is itself previously configured to allow this access, contains a part of the user space, and is compatible with the technology and the operating system used to store the files. apart. In particular, each terminal must have an Internet browser compatible with the technology used to make the virtual disk.
Thus, all the previous solutions proposed for the management of a personal user space managed on a network (and not on a specific computer station) come up against the fact that they are closely dependent on the operating system on which they are based and of the specific practical implementation they require (programming, and / or data storage architecture and / or specific technologies). However, the various computing resources that can compose a user space are today very varied and are not necessarily compatible with the programming techniques, architectures, application programs or operating systems required in known solutions. Thus, no known solution allows a user to instantly access a user space that may include not only personal data and information, but also data or information shared by other users, application programs installed in executable form, this user space being managed remotely on one or more server (s), and this, from any computer station not previously configured or adapted for this purpose and may contain none of the digital information (programs or data) corresponding to this user space.
The object of the invention is generally to provide a solution to this problem. It therefore aims to provide a portable mass storage medium and a computer system by means of which a user can access a user's computer space of his own from any computer station not specifically configured for this purpose and can not itself contain any digital information (programs or digital data) corresponding to this user space.
The invention also aims to allow such access in a secure manner, but without the loss of the personal medium then makes it impossible to access the user space, nor that the mere possession of the personal medium allows this access by a person other than the authentic user. The invention also aims to provide such a personal support and such a computer system with which the user space information is automatically updated and synchronized, without risk of data loss, reliably, including in case of Sudden connection break from a station to the network. The invention further aims to provide a computer system that is efficient in terms of speed of reaction for the user, simple and ergonomic to use, and very low cost.
The invention further aims to provide a computer system for exploiting the recorded digital information (multimedia, audio, address book, text document ...) in files of the user space of the system by means of any device adapted to handle this information, or at least a large number of such devices. In particular, the invention aims to enable such exploitation on digital devices able to read files recorded in mass memory only according to one or more predetermined specific format (s) of files, which can (can) ) be compatible only with these digital devices.
Throughout the text, we adopt the following terminology:
- mass memory: any non-volatile rewritable computer memory for storing digital information in a sustainable manner whatever the technology used (magnetic, optical, electronic ...) to achieve it,
- computer system: combination of hardware (s), software (s), information, files and / or databases, digital data, capable of performing predetermined computer functions,
- user: a natural or legal person or a group of natural and / or legal persons,
- portable: means any object that can be handled by humans, carried with one hand, and easily transported permanently, for example in pocket size,
- file: this term is used in its logical sense designating a set of information that can be represented by digital data, this set being referenced by a computer address; for example, it may be one or more physical files, or one or more data tables or part of a physical file or file. a data table,
- first-level identifier of a file: code (set of data) necessary and sufficient for referencing said file by a file management system, to directly access this file (including managing and processing requests on this file); there is no other code or path referenced by a first-level identifier for directly referencing the file,
- create a file: generate an identifier for a file,
- user space: A set of computer resources, data, software or other information adapted to provide specific user-specific computer services, including the recording of specific information specific to a user, and the provision of that user's predetermined data and software; the user space comprises not only data or information created or managed by a user, but also data, information and programs in executable form shared by other users or providers of computing resources,
- Data format: format in which digital data is organized to represent information of a predetermined type (texts, images, sounds, video, etc.) and / or format according to which digital data is stored in mass memory. The invention therefore relates to a portable mass storage medium, said personal medium, comprising:
at least one mass memory, said personal memory,
means of connection to any computer station, called host station, endowed with: digital processing means with microprocessor (s) and associated random memory (s),
. at least one operating system and file management,
. connection means conjugated to those of the personal medium, so that at least a part of the personal memory of the personal medium can be accessed read / write by a host station when the connection means are active, characterized in that it includes, stored in personal memory, data forming a process, called gateway process, adapted to be loaded into the RAM of a host station to which the personal medium is connected, this gateway process comprising:
a file query filtering module adapted to be able to recognize any request pertaining to at least one file, said CLE file comprising digital information stored in a part of personal memory, called local cache, and / or in at least one mass memory at least one server separate from the host station and to which the host station equipped with connection means and access to at least one digital network can be connected via such a network,
a module for processing each request on a CLE file: adapted to be able to create a CLE file and / or access any CLE file and allow a corresponding request to be processed by the host station's file management and operating system in the same way as if it were a request on a file specific to this host station,
. comprising an adaptation sub-module adapted to process each CLE file initially containing digital data according to a first predetermined format, said incompatible format, belonging to a group of predetermined data formats which can be converted into different formats, this adaptation sub-module being adapted to be able to generate digital data, corresponding to the contents of the file CLE, these digital data being in at least a second format, said compatible format, different from the first incompatible format, so to convert the CLE file according to at least one such compatible format.
The invention extends to a computer system for secure access to a network by users, comprising: computer stations, called host stations, each endowed with:
. digital processing means with microprocessor (s) and associated random memory (s),
. at least one operating system and file management,
. conjugated connecting means connecting means of at least one portable mass storage medium, said personal medium, so that at least a portion of the mass memory of the personal medium can be accessed read / write by the host station when the connection means are active,
. means of connection and access to at least one public digital network-in particular the Internet-,
at least one server comprising at least one mass memory, called server memory, and means of connection to at least one public digital network, in particular the Internet, and adapted to allow read / write access to at least one part of this server memory via such a public digital network,
each personal medium comprising:
. at least one mass memory, called personal memory,
. connecting means to any host station, characterized in that each personal medium comprises, stored in personal memory, data forming a process, said gateway process, adapted to be loaded into the RAM of a host station to which the personal support is connected, this gateway process comprising:
a file query filtering module adapted to be able to recognize any request pertaining to at least one file, said CLE file, comprising digital information stored in a part of the personal memory, called local cache, and / or in at least one memory server of at least one server separate from the host station,
a module for processing each request on a CLE file: adapted to be able to create a CLE file and / or access any CLE file and allow a corresponding request to be processed by the host station's file management and operating system in the same way as if it were a request on a file specific to this host station,
. comprising an adaptation sub-module adapted to process each CLE file initially containing digital data according to a first predetermined format, said incompatible format, belonging to a group of predetermined data formats which can be converted into different formats, this adaptation sub-module being adapted to be able to generate digital data, corresponding to the contents of the file CLE, these digital data being in at least a second format, said compatible format, different from the first incompatible format, so to convert the CLE file according to at least one such compatible format.
Therefore, the invention makes it possible to exploit CLE files by means of any digital device or any suitable software application to be able to read and / or write (including create) the contents of such CLE files, and this despite a possible incompatibility the format (data format and / or recording format) of the recorded digital data corresponding to these CLE files, with this digital device or this software application, and this in particular without first having to resort to downloading digital information stored in the server (s), including program information for configuring a host station for subsequent operation. In particular, the invention makes it possible to exploit the CLE files stored in the personal memory of the personal medium, by means of a digital reading device (workstation, personal digital assistant, mobile phone, MP3 player, etc.) or a digital reading software application, although this digital reading device or this digital reading software application is not normally compatible with the first format in which the corresponding CLE files are initially recorded.
In a first variant embodiment according to the invention, a so-called anticipatory adaptation variant, the processing module, when executed by any host station, is adapted to perform, when a request is processed on a CLE file, a on-the-fly adaptation of the digital data associated with the file
CLE, to convert and save them systematically, directly and immediately in the personal memory of the personal medium in compatible format. Therefore, the personal memory of the personal medium always contains the files CLE compatible format (s), so that the personal medium can be used later with a reading device and / or digital writing capable of exploiting the digital data according to at least one of these compatible formats, especially even though this reading device and / or digital writing is not able to act as a host station according to the invention, in particular is free of system operating and file management multicompatible.
In this first variant, the invention makes it possible to exploit the files CLE by means of processing devices-notably reading and / or digital-writing, so-called specialized devices, not specifically configured for this purpose and not adapted to be able to execute the module. processing devices, in particular portable devices that are pre-programmed or include a specific operating system (mobile phones, audio file players, video file players, personal digital assistant, etc.) and which are equipped with:
. digital processing means,. connection means conjugated with those of the personal medium, so that at least a portion of the personal memory of the personal medium can be accessed in reading and / or writing by the specialized device when the connection means are active.
Indeed, the invention makes it possible to carry out such an exploitation of the files CLE and this in spite of a incompatibility of format (coding, data structure -table, list etc.-, format of the recording medium, etc.) between these files CLE and the specialized device.
In particular, the invention makes it possible to convert a CLE file initially recorded in an incompatible data format (that is to say incompatible with such a specialized device), and to record in the personal memory of the personal medium, digital data. corresponding to the content of this CLE file, but in at least one format compatible with such a specialized device for a subsequent connection of the personal medium with such a specialized device, so as to allow, during this connection, the exploitation of digital data corresponding to the CLE file by this specialized device.
Thus, advantageously and in the first variant of anticipatory adaptation according to the invention:
the processing module is adapted to detect a request for at least one CLE file, said file to be duplicated, the format of which is incompatible with at least one peripheral device for digital processing, referred to as a specialized device,
the adaptation sub-module is adapted to be able to convert the file to be duplicated into at least one format compatible with a specialized device, and to record at least one copy of the file to be duplicated and converted into the personal memory of the personal medium.
In a second embodiment of the invention, a so-called adaptation variant on request, the processing module is adapted to be able to adapt the CLE file following a request on this CLE file by an operating system. a host station, especially when a software application requires access to this CLE file. Thus, advantageously, in this second adaptation variant on request according to the invention, the adaptation sub-module is adapted to perform, when a request is processed on a CLE file, whose format is incompatible with a software application. digital processing, said specialized application, an adaptation of the digital data associated with the CLE file, to convert them into a compatible format, and directly form a response to the request from the digital data thus converted.
Thus, in this second variant, the invention makes it possible to exploit the CLE files by means of specialized applications adapted to access files in a specific data format different from that used for the CLE files.
In both variants, the conversion of each CLE file can be performed in a single predetermined compatible format, or conversely, systematically in a plurality of predetermined formats. Advantageously and according to the invention, said group of predetermined data recording formats comprises audio data formats, images, video, directory contacts.
A computer system according to the invention therefore constitutes a computer system for secure access, via a network - in particular a public network such as the Internet - by users to user spaces. Each user space is unique to a single user and contains files that can be fully managed and used by the user, including through the gateway process.
A computer system according to the invention comprises a plurality of personal media corresponding to the plurality of users of the system. Any portable mass storage medium may be used as a personal medium in accordance with the invention. It may be in particular mass storage media magnetic, optical, electronic, electro-optical, ... the invention is not limited to a specific technology for the realization of personal media. It should be noted, however, that the personal medium contains at least one mass memory, which is therefore in particular of the rewritable type, accessible for reading and writing. As such, a specificity of the invention is to provide an extremely high level of security particularly regarding the information of each user space, while implementing rewritable personal media. In a computer system according to the invention, each user has a personal support of its own, and different users can be provided with personal media all made according to the same technology, or, conversely, according to different technologies. Nothing prevents to also provide that the same portable personal support incorporates several mass memories, different technologies, the information and data contained on this personal medium being duplicated on these different mass memories, so that the personal medium is compatible with different technologies of connection to host stations. The personal media can be more or less complex and in particular incorporate digital data processing means such as a microprocessor or other. However, advantageously and according to the invention, the personal media are free of digital processing means other than those necessary, if necessary, the establishment and operation of connection means between the personal media and host stations.
Personal media can in particular be free of microprocessor, associated random access memory and any versatile information processing and / or calculation unit. Advantageously and according to the invention, they are also free of human / machine interface (screen, keyboard, pointer ...) and host stations have a human / machine interface. Personal media can thus be reduced to only the elements forming their mass memory and standard connection functions with a host station.
The connection means between the personal media and the host stations can be made in any known form, including in particular a wired connection, an infrared remote radio frequency connection, a connection by inserting the personal medium in a suitable reader (for example if the personal medium is a cassette, a tape, a floppy disk or a disk). Advantageously and according to the invention, the means of connection of a personal medium to a host station are of the type made active by bringing together and / or connecting the personal support and the host station. According to one embodiment, a personal medium according to the invention can advantageously be made in the form of a simple USB key thus making it possible to reduce the investment cost for each user to a minimum. However, the invention also applies to more sophisticated personal media (such as portable personal digital assistants (PDAs) or portable computers or portable mass-storage phones ...) that can thus incorporate processing means. microprocessor information and / or a human / machine interface; in this case, however, these information processing means are not useful in the context of the present invention. The human / machine interface of such a medium can partly or completely replace that of a host station.
Other types of connection that a USB connection can be envisaged, alternatively or in combination, for example a wired link, or a wireless radio frequency link (WI-FI or other) or infrared.
In any case, each user with personal media can access their user space from any host station to which they can connect their personal media. The invention thus allows a simple, fast and nomadic access by each user to his user space. In addition, advantageously and according to the invention, a system according to the invention comprises, stored in personal memory of each personal medium, ROOT ID data identifying at least one root file recorded on a server, this root file comprising at least a part the architecture of the CLE files in the user area. In this way, this part of the architecture, or this architecture, is not necessarily itself stored on the personal media (except possibly duplicated on the local cache of the personal medium) nor on the host stations. It should also be noted that other CLE files in the user space may contain, in the same way, part of the user space architecture. In other words, the data describing the architecture of the user space are not necessarily gathered in one and the same root file, but can be distributed in several files, namely one (or more) specifically dedicated root file (s) ( s) the recording of these data and / or one (or more) CLE file (s) that may contain other information or data. According to the invention, preferably, this root file is a file
CLE (that is, a file of the corresponding user space) and managed as such.
Moreover, advantageously, in a computer system according to the invention, the host stations are chosen from:
- personal computers of the fixed type, - personal computers of the portable type,
- portable digital processing devices - including PDA PDAs or mobile phones -.
The host stations may be arbitrary and more or less sophisticated, as long as they make it possible to provide information processing and file management means, and preferably at least in part, the human / machine interface. For each user, these host stations can thus be personal computers of the user located at home and at his workplace, a laptop of the user, a personal assistant PDA type, access terminals to Internet with public access (such as those made available in public places such as train stations, airports, media libraries, shopping malls, cybercafé ...) or a computer or personal assistant of a friend or a colleague ... Thanks to the invention, each user thus has instant access to all the files, data and application programs of his user space, from any location, without having to manually specifically configure a computer (especially without requiring installation of software or an operating system on the host station), with the help of only its personal support, in a perfectly secure way. This results in extremely great management comfort for users at a negligible cost.
Such storage architecture and secure network access to user spaces has many other advantages related to the complete disruption of the habits and methods of modern computing that the invention involves. In particular, the various updates and evolutions of data and / or application programs can be performed directly on the servers by the providers of these data and / or application programs themselves, and no longer require any approach (such as a download and / or installation) from each user. In addition, the implementation and use of the invention are not dependent on a particular operating system or technology. Indeed, the invention can be made compatible (as described below) with all operating systems proposed by publishers or manufacturers. User space files are viewed and managed from any host station as files specific to that host station. Therefore, the software applications offered by the editors or manufacturers under these operating systems work without modification with the files of the user space. This universal and systematic aspect of the invention represents extremely great ergonomics and appeal for users and publishers.
Thus, advantageously and according to the invention, the processing module is adapted to be executed in a memory area dedicated to the application programs and accessible in user mode of the RAM of a host station. Furthermore, advantageously and according to the invention, the authentication module is adapted to authenticate an authorized user by input by the latter on a man / machine interface - in particular on the human / machine interface of the host station to which the support personnel is connected- a code, said user personal code, allowing validation of the identity of the user by the authentication module, and for storing the user personal code in RAM of the host station, and the process gateway is adapted to transmit the user personal code to each server to which the host station is connected for the purpose of transmitting digital information. This personal user code may be a user password entered on a keyboard, for example the keyboard of a host station, or a digital code representative of a biometric characteristic (fingerprint) entered by a sensor attached to a host station or personal support, or whatever.
The personal user code is not recorded on the personal medium, the loss or theft of the latter is virtually without consequences for the user who can access his user space again with another personal support.
Advantageously and according to the invention, each server is adapted to check the validity of the user personal code before authorizing the establishment of a link between the server and a host station to which a corresponding personal medium is connected.
Moreover, advantageously, a computer system according to the invention comprises at least one server, said central server, comprising for each user at least one record, said user account, comprising said user identification data associated with the user personal code stored in said registration in form not understandable by the man. Advantageously and according to the invention, said user identification data stored in personal memory of a personal medium comprise a code individually identifying a user and data identifying a central server.
Advantageously and according to the invention, the processing module includes at least one encryption sub-module with a symmetrical key generated by the processing module from a code provided by the processing module.
Furthermore, advantageously and according to the invention, each personal medium comprises, recorded in personal memory, an asymmetric encryption public key corresponding to a private key of a central server, this private key being stored in a mass memory of the central server. , and the processing module is adaipted for:
generate a symmetric key and encrypt it with said public key,
transmitting this encrypted symmetric key to the central server, itself adapted to decrypt it (with the corresponding private asymmetric key),
encrypting the user identification data and the user personal code with said symmetric key before transmitting them to the central server. Furthermore, in an advantageous embodiment of the invention, the processing module is adapted to save by default any CLE file of the user space that is digitally processed by the host station in the local cache of the personal memory of the personal support. In this way, the operations performed by the user during a work session are saved on the local cache of the personal medium, and kept even in the event of a sudden break of the connection to the public network or that between the personal support and the host station.
In addition, advantageously, in a computer system according to the invention, the CLE files are identified by a first level identifier compatible with all the operating systems and file management systems, and all the servers, all the host stations. (and their file management system (s)) and all personal media. Thus, advantageously and according to the invention, the processing module is adapted to create each CLE file with an identifier record of this CLE file, called INFO_ID, comprising:
- a code identifying a user who created this file CLE, - a code individually identifying the file CLE.
Advantageously and according to the invention, an INFO ID record furthermore comprises:
a code identifying a server, called FILESERV_ID, where this file was initially recorded, a code determining an encryption mode for the file CLE,
a code determining a synchronization mode for the file CLE.
The encryption mode can be chosen from: an encryption, said automatic encryption, with a symmetric key; an encryption, said manual encryption, by a code entered specifically by the user for the file CLE; and a lack of encryption. This encryption mode can be determined automatically during the generation of the files, for example by a configuration file which associates the modes of encryption with names or parts of file names, this configuration being able to be modified by the user.
The synchronization mode determines how the CLE file is updated on a server. This mode of synchronization can be chosen from: a mode, called synchronized mode, in which one reads a file CLE from the local cache if it is present and up to date, and since the server in the opposite case, and one always writes the CLE file in the local cache, the processing module including an automatic update sub-module of the FILESERV_ID server when the connections are present; and a mode, said remote mode, in which all reading and writing of a CLE file are performed from and on the corresponding FILESERV_ID server only. The remote mode is used for example for user identification data, or for command files, or for CLE files that the user does not wish to keep on his local cache.
Advantageously and according to the invention, each personal medium comprises, recorded in personal memory, a file called ID_GENERATION file, including data adapted to allow the processing module to generate digital codes individually identifying the CLE files created by the user.
The invention further relates to a personal medium and a computer system characterized in combination by all or some of the features mentioned above or below. Other objects, features and advantages of the invention will appear on reading the following description of one of its embodiments given by way of non-limiting example, and which refers to the appended figures in which:
FIG. 1 is a general diagram of a computer system according to the invention,
FIG. 2 is a block diagram of an exemplary embodiment of a personal medium according to the invention in the form of a USB key,
FIG. 3 is a diagram illustrating the operation of a personal medium according to the invention and of a host station in a computer system according to the invention,
FIG. 4 is a flowchart illustrating steps for referencing a personal medium according to the invention in the file management system of a host station; FIG. 5 is a flowchart illustrating steps for managing requests on CLE files of a user space corresponding to a personal medium according to the invention in a computer system according to the invention,
FIG. 6 is a flowchart illustrating steps implemented for a request to read a CLE file from a user space corresponding to a personal medium according to the invention in a computer system according to the invention,
FIG. 7 is a flowchart similar to FIG. 6 illustrating steps implemented for a write request on a CLE file of the user space; FIG. 8 is a flowchart similar to FIG. 6 illustrating steps implemented in FIG. create a new CLE file in the user space,
FIG. 9 is a flowchart similar to FIG. 6 illustrating steps implemented by the adaptation sub-module in a first variant of anticipatory adaptation of a computer system according to the invention,
FIG. 10 is a flowchart similar to FIG. 6 illustrating steps implemented by the adaptation sub-module in a second variant of on-demand adaptation of a computer system according to the invention. As represented in FIG. 1, the computer system according to the invention constitutes a personal information network storage computer architecture allowing secure access to such personal information by any authorized and authenticated user carrying a portable mass storage medium. , says personal support 1, which is his own.
Such a personal medium 1 according to the invention comprises at least one mass memory, called personal memory 2, which can be made in any known form, especially in the form of an electronic hard disk and / or magnetic and / or optical or other . This personal memory 2 has the property of keeping the information stored in this personal memory 2, permanently, especially when the personal medium 1 is worn by a user between two uses.
Each personal medium 1 also comprises means 3, 4 for connection to any computer station, said host station 5, itself equipped with digital processing means with microprocessor (s) and associated memory (s) (s) associated (s) ) and at least one operating and file management system. Each host station is also provided with connecting means 6, 7 conjugated with those of the personal supports 1, so that at least part of the personal memory 2 of each personal medium 1 can be accessed in read and write by a host station 5 when the means 3, 4, 6, 7 of connection are active.
Thus, each personal medium 1 can be connected to any host station 5 allowing the user to execute, from this any host station 5, operations on a computer user area of his own, including information and / or or files representing data and / or software, stored on remote machines such as servers 9 separate from the host stations 5 and personal media 1. Of course, nothing also prevents all or part of the user space from being recorded as well. on the personal support 1 of the user. There is nothing to prevent a host station 5 from acting as a storage server for all or part of a user space. Nevertheless, in general, the different host stations 5 to which a given user can connect from his personal medium 1 to perform operations on his user space are not servers, and it is not necessary, nor in general useful, to save all or part of the user space information on a mass memory of a host station 5.
The personal medium 1 may be, as represented in FIG. 1, a universal serial bus (USB) key 1a, or a portable device lb communicating by radio frequency with a host station (it may be a mobile telephone, or a PDA-type digital personal assistant with a wireless connection, or an electronic memory card equipped with wireless connection means, for example of the so-called WI-FI type ...).
Any other portable device can be used and considered as a personal support 1 according to the invention since this portable device can easily be worn by a user (pocket size), it is provided with a mass memory and connecting means to the host stations. Such a personal medium 1 may also be equipped with other functionalities, and in particular information processing means or means of communication via satellite or mobile telephony ... Nevertheless, it is an advantage of the invention that to allow to distribute low cost personal media 1 such as USB sticks or simple electronic cards to allow users to access their user space. Such personal media 1 reduced to their simplest expression are not only inexpensive, but lightweight and compatible with many computer standards that can be encountered in host stations 5 scattered throughout the territory.
In general, the personal support 1 is not equipped with a man / machine interface (screen, keyboard, etc.). On the contrary, a host station 5 is generally equipped with such a man / machine interface. But the invention is of course applicable in the case where at least a portion of the various personal media 1 are equipped with such a man / machine interface. In the latter case, the user can alternatively use either the man / machine interface of his personal support 1, or that of a host station 5 he encounters and to which he connects.
Thus, any host station 5 having connection means compatible with those of a personal medium 1, information processing means and a connection to a public digital network such as the Internet can be used by a user. to access his user space. Such host stations 5 meet very frequently in various public or private places. It can be the user's different personal computers (in the office, at home ...); computers that the user can meet in the places he visits (customers, suppliers, friends, ...); or even public access stations (Internet access terminals at airports, railway stations, restaurants or cafés ...).
According to the invention, even if part of the user space can be stored at least temporarily on a personal support 1 of the user, in general, all the information corresponding to a user space is stored on remote servers 9 and accessed remotely via a public digital network such as the Internet from any host station connected to that network.
Thus, in a system according to the invention, not all of the user's personal information is stored on the personal medium 1 or on a host station 5 to which this personal medium 1 is connected. In an advanced form of the invention, all of the user space information is stored only on remote servers 9 and not on the personal medium 1 or the host station 5, except for the most recent information not yet synchronized with those stored on the servers 9, and which can be temporarily saved only on the personal medium 1, in a part of the personal memory 2 reserved for this purpose, called local cache 8, accessible for reading and writing. Each personal medium 1 also comprises data, called user identification data, identifying at least one human user, said authorized user, authorized to use the corresponding personal medium 1, and these identification data are recorded in personal memory 2.
According to the invention, each personal medium 1 comprises, stored in personal memory, data forming a process, said gateway process P, adapted to be loaded into the RAM of any host station 5 to which the personal medium 1 is connected, and to configure this any host station to allow the user to access his user space. This gateway process P essentially and functionally comprises three modules (these three modules can be made in the form of independent programs or subprograms or on the contrary integrated in the same program), namely:
an authentication module A by each host station 5 of any human user making the connection of a personal medium 1 to this host station 5, this authentication module A being adapted to determine whether it is a authorized user and to allow access to the user space corresponding to the user identification data stored in the personal memory of the personal medium 1 only if a corresponding authorized user is identified and authenticated; this authentication module A has the function, in its simplest embodiment, of managing a user personal code (such as a user password) entered by the user on a human / machine interface (for example the one of the host station 5), then to check whether the user personal code is the correct one each time the user enters this code, - a filter module D of file queries adapted to be able to recognize any request interesting at least one file, called CLE file, belonging to a user space of the authorized user,
a processing module C for each request on a file CLE adapted to be able to create a file CLE and / or access any file CLE (read and / or write) and allow the treatment of a corresponding request by the system of operating and managing files of the host station 5, in the same way as if it were a request on a file specific to this host station 5.
The processing module C comprises in particular a matching subsystem Y adapted to process each CLE file initially containing digital data in a first predetermined format, said incompatible format, belonging to a group of predetermined data formats that can make the converted to different formats, this adaptation sub-module Y being adapted to generate digital data, corresponding to the contents of the file CLE, these digital data being in at least a second format, said compatible format, different the first incompatible format, so as to convert the CLE file according to at least one such compatible format.
A personal medium 1 according to the invention can thus be free of digital processing means other than those necessary, if necessary, for the establishment and operation of means 3, 4, 6, 7 for connection with the host stations 5. In particular, a personal medium 1 according to the invention may be free of microprocessor and associated random access memory, or more generally, central processing unit and information processing. Also, as indicated above, a personal support 1 according to the invention can be free of man / machine interface.
According to the invention, the user identification data is only part of the set of data allowing the authentication of a user authorized by the authentication module A executed by a host station 5. In other words, these data d user identification stored in personal memory 2 of the personal medium 1 are adapted to be insufficient to allow a user to access his user space. This is an important difference from the invention with respect to prior devices by which a user can access computer resources by simply connecting a USB stick to a computer connected to these computing resources. According to the invention, on the other hand, a user carrying a personal medium 1 must, in order to access his user space, not only connect his personal medium 1 to any host station 5, but also provide additional authentication information. , ie the personal user code that must be entered on the man / machine interface at his disposal, in particular that of the corresponding host station 5. If a user loses or is stolen his personal medium 1, the new holder of the personal medium 1 will not be able to access the user space of the initial authorized user. Conversely, the authentic authorized user can easily access his user space again by receiving a simple personal support 1 containing the user identification data, which can be manufactured and provided to the genuine user from the data of the user. identification of his user account registered in his user space.
The user personal code is used by the authentication module A to validate the identity of the authorized user. It can be a user password entered by the user on a keyboard (for example the keyboard of a host station 5). But it can be any other code that can be provided by the user, for example a digital code representative of a biometric characteristic, delivered by a sensor that can be integral with the host station 5 or the personal support 1. By for example, the personal medium 1 may be equipped with a fingerprint sensor or other. It should be noted however that in any case the validation of the identity using this personal user code is performed by the authentication module A and executed by the host station 5, and not by an electronic circuit personal support 1.
Said connection means 3, 4, 6, 7 between a personal medium 1 and a host station 5 are made active by bringing the personal medium 1 and the host station 5 closer together and / or by connecting the personal medium 1 to a corresponding socket of the host station 5.
Preferably, the authentication module A and the processing module C of a gateway process P are adapted to be executed in a memory area dedicated to the application programs of a host station 5, and therefore accessible in user mode of the 5. In this way, these modules A and C can be written in a way that is not dependent on the operating system of the host station 5, which can be arbitrary, the gateway process P adapting their loading according to the operating system detected on the host station 5. This detection can be carried out by means of a well-known command integrated in the gateway process P, for example the System.getProperty command of the JAVA (R) language.
The same is true in general of the filtering module D which can be realized in multicompatible form. In particular, a personal medium 1 according to the invention may comprise a plurality of filtering modules D, each being compatible with one of the commonly used operating systems (WINDOWS (R),
UNIX (R), LINUX (R) ...).
The different user spaces can be stored in mass memories of a plurality of servers 9 separate from the host stations 5 and connected to the public digital network 10 to which these host stations 5 are themselves connected, in particular to the Internet network. These various servers 9 are at least partially made up of servers specific to the invention, but may, for the most part, consist of standard servers for providing data and / or information and / or programs by content providers. the corresponding network 10.
At least one of the servers, called the central server 9a, is used for the management of the computer architecture and therefore of the computer system according to the invention, in particular for the management of the different user accounts, in particular different identification data. users of the computer system according to the invention.
The user identification data stored in personal memory 2 of each personal medium 1 advantageously comprise, on the one hand, a code individually identifying a user, and, on the other hand, data identifying a central server 9a on the mass memory of which the user code identifying the user, and other information concerning his user space, can be stored. In particular, the personal code (password) entered by the user can be registered, preferably in illegible form by the man, associated with the identification code of the user, on the corresponding central server 9a. The authentication module A is thus adapted to authenticate an authorized user by entering the user's personal code, including a user password, on a human / machine interface (in particular the keyboard 25 of the host station 5 to which the support personal 1 is connected), and for storing this user personal code in the RAM of the host station 5, so that this user personal code can then be communicated to each server 9 to which the host station 5 wants to access. And the gateway process P, namely the processing module C, is also adapted to transmit the user personal code to each server 9 to which the host station 5 is connected for the purpose of transmitting digital information between this server 9 and the server. host station 5 in one direction or the other.
FIG. 2 represents an exemplary embodiment of a personal medium 1 in the form of a USB key comprising a housing 20 enclosing the personal memory 2 in the form of an electronic memory, and an interface 21 with a USB link, the housing 20 carrying a plug 22 for such a USB link. This plug 22 can be plugged into a corresponding female port 6 of a host station 5.
As shown in FIG. 2, the personal memory 2 comprises an area dedicated to forming the local cache 8, an area 23 containing the gateway process P in a form ready to be executed by any host station 5, and a zone 24 containing configuration files. of the host station 5. Among these configuration files, the zone 24 may include a file AUTORUN.BAT automatic launch of the gateway process P by the host station 5, an IP_PORT_SC.XML file containing the network address and the connection port of the central server 9a, a PCK.DATA file containing a central public key PCK used for encryption as indicated below, a LAK.DATA file containing a symmetric key LAK used for the automatic encryption of files, as indicated below, a file ID_GENERATION_DATA to generate file identification codes as shown below, and a ROOT_ID.XML file containing a ROOT root file identifier ID for the user as shown below. Initially, such a personal medium 1 is not personalized, that is to say does not contain the user identification data. Such a support 1 can be distributed and marketed at low cost in large series. When a user acquires such personal medium 1 and wishes to use it to access his user space, he just needs to connect it to a host station 5.
It should be noted that the gateway process P and the configuration files can be registered in advance (in the manufacture) on the personal memory 2 of the personal medium 1. Nevertheless, in a variant, the personal mediums 1 can be supplied completely blank, and all the information they contain for the implementation of the invention, namely the gateway process P and the configuration files can be downloaded to the personal memory 2, at the request of the user, from a remote server or a removable storage medium such as an optical disk. In a variant, only a part of this information is recorded prior to manufacture on the personal medium 1, the other being downloaded.
Upon connection, the gateway process P is started by the host station 5, either automatically (if the operating system of the host station 5 allows the automatic launch of such a process), or on command of the user if necessary . The operating system of the host station 5 then loads and executes the user mode P gateway process, and this gateway process P loads and executes the processing module C which performs the following actions.
First, the processing module C reads the network address of the corresponding central server 9a. It should be noted that, alternatively, this network address may not be stored on the personal medium 1, but may be directly recorded in the code of the gateway process P itself, or on a specific server whose address itself is known from the gateway process P.
The processing module C is adapted to create each CLE file of the user space with an identifier record of this CLE file, called INFO_ID, comprising:
- an identification code of the user who created this file
KEY,
- a code identifying the CLE file individually.
This INFO ID record also includes a preference
a code identifying a server, called FILESERV_ID, where this file CLE was initially recorded and where it remains always recorded (until erasure of the file by a user), - a code determining an encryption mode for the file CLE,
a code determining a synchronization mode for the file CLE.
This type of designation of the CLE files in the user spaces, common to all the user spaces, and to all the operating systems and computer technologies, makes it possible to record and retrieve any CLE file of the user space, wherever the machine on which it is registered, in a perfectly universal way.
The code identifying the user creator of this CLE file in the INFO ID record of a CLE file corresponds to the USER ID code of this user.
The FILESERV_ID code identifying the file creation server can only consist of the network address of this server.
The code individually identifying the CLE file, called FILE ID, is a number, for example on 64 bits. When the file CLE is created by the user, this code can be generated by the processing module C from the ID GENERATION.DATA file stored in the personal memory 2 of the personal medium 1. This GENERATION.DATA ID file comprises a number initial which is incremented at each creation of file CLE by the processing module C.
The code determining the encryption mode for a file CLE can identify an encryption mode among at least three modes of encryption, namely: a total absence of encryption (the file is not encrypted and is accessible to the public); a manual encryption by which the contents of the file is encrypted by the host station 5 with a code specific to this KEY file which must be entered by the user, for example a password entered using the keyboard (in this mode encryption, the file is lost if the user loses this specific code); automatic encryption by a symmetric LAK key generated by the processing module C from a pseudo-random code and encrypted with the user's personal code when it is stored in the file LAK.DATA on the personal memory 2. In this last case, the CLE file is saved on the local cache 8 of the personal support 1 in encrypted form and is decrypted during playback. It is communicated via the network in decrypted form and is encrypted again during a new write.
Thanks to this automatic encryption method, the user can modify his personal user code without losing the files stored on the local cache 8. In fact, during such a modification, said symmetric key LAK having been decrypted with the old code user's personal code, is encrypted with the new user's personal code, and then stored encrypted on the personal memory 2. This symmetric key LAK is created and stored in the personal memory 2 as soon as the user enters for the first time his personal code for the creating his personal user account.
The code determining the synchronization mode of a file CLE indicates how the file CLE is synchronized, that is to say updated. There are at least two synchronization modes: synchronized mode and unsynchronized (or remote) mode. In the synchronized mode, when reading a CLE file corresponding to an INFO ID, if this CLE file is present in the local cache 8 of the personal memory 2, and if it is up to date in this local cache 8 , we read the CLE file from the cache. If, on the other hand, the file CLE is not present in the local cache 8 or is not up to date in this local cache 8, the reading is carried out from the server on which the file CLE is recorded. It is then written on the local cache 8 of the personal memory 2.
When writing a CLE file, we always write this file
CLE in the local cache 8 of the personal memory 2. The processing module C further comprises an update management sub-module which allows, according to predetermined periods of time or according to a method known per se, to put in regularly update the files stored on the servers 9.
In the unsynchronized or remote mode, the CLE files are saved only on the servers 9 and are never saved in the local cache 8 of the personal memory 2 of the personal medium 1. During a reading, the CLE file must be read from the server 9 on which it is registered. When writing, the CLE file is directly and only written on the server 9, the update management sub-module is not useful in this case. This synchronization mode where the files are not synchronized is used for password files or specific command files or CLE files declared as such by the user. In contrast, synchronized mode is used for most other CLE files in the user area, and in particular it allows you to save the changes made by a user to CLE files, even in the event of a sudden break in the network connection or connection between the personal support 1 with the host station 5.
In the subsequent step, the processing module tries to read a root file identifier ROOT_ID, in the file ROOT_ID.XML stored on the personal memory 2. The root file identifier ROOT_ID is constructed like any identifier INFO_ID, with the identification code of the USER ID user, and the SERVER_ID code identifying the server 9 on which this root file is registered. At the first use, the ROOT ID.XML file containing the identifier ROOT_ID does not appear on the personal memory 2. In this case, the processing module C asks the user whether a new account should be created, and in in the affirmative, establishes a connection with the central server 9a and requests this central server 9a to prepare a new user with a user identification code designated USER ID.
The processing module C then asks the user to enter a personal code (password) user of his choice. The personal code entered for example on the keyboard 25 of the host station 5 is then stored by the processing module C in the random access memory 26 of the host station 5, in a data storage area 27 of this random access memory 26.
After receiving the USER_ID user identification code of the central server 9a, the processing module C requests a confirmation from the human user, then chooses an available server 9, creates a root file identifier ROOT D (with the user code USER ID and the SERVER ID code of the selected server) and returns the confirmation composed of the entered personal code (password) user, and the ROOT ID thus created.
Before sending this data to the central server 9a, the processing module C performs encryption of the user's personal code at least, and preferably all of this data transmitted to the central server 9a. To do this, the processing module C is adapted to generate a symmetric key CS from a pseudo-random code provided by a pseudo-random code generator. This symmetric key CS is then used to encrypt the data during transmission between the servers 9 and a host station 5, in general, and this, thanks to an encryption sub-module incorporated in the processing module C. The public key Encryption PCK stored in the PCK.DATA configuration file in the personal memory 2 (initially at manufacture or by download) is an asymmetric encryption public key corresponding to a private key which is itself stored on the central server 9a. The processing module C is then adapted to encrypt the symmetric key CS with this public key PCK, transmit this symmetric key thus encrypted to the central server 9a, itself adapted to decrypt the symmetric key with the corresponding asymmetric private key; and encrypting the root file identifier ROOT_ID and the user personal code with this symmetric key CS, and this, before transmitting them to the central server 9a.
The central server 9a receiving the user identification data creates a user account, then returns a command to the processing module C for the latter to register the root file identifier ROOT ID in the ROOT ID.XML file on the personal memory 2 personal support 1.
Once this operation is performed at the first connection, the personal medium 1 is configured to be used by a predetermined human user (or a group of human users having the same user identification code USER D). On a new connection of the personal medium 1 to any host station 5, the authentication module A again requests the user personal code to the human user, which the latter can enter via the keyboard 25 and / or the corresponding screen, and / or in any other way (for example by voice input). The personal code entered by the user is then checked by the authentication module A. If the personal code is not compliant, access is denied to the user. If, on the contrary, the personal code is consistent with that registered in the central server 9a, access is allowed. At each establishment of a connection to a server 9 having the symmetric private key corresponding to the public key PCK, so that this server allows access to the user space files present on its mass memory, a symmetric key CS is generated by the processing module C, encrypted with the public key PCK, then the USER_ID user code of the authenticated user and his personal user code are encrypted with this symmetric key CS, then the whole (the symmetric key CS encrypted with the key public PCK, user code USER_ID and personal code encrypted with the symmetric key CS) is sent to the server 9 contacted. The latter decrypts the symmetric key CS with the private key corresponding to the public key PCK, then decrypts the user ID USER ID and the personal code with the symmetric key CS, then verifies the validity of the user by checking the corresponding personal code the USER_ID user code. This verification is done directly by a central server 9a; if the server 9 is not a central server, it contacts a central server so that it authenticates the user.
The set of data being subsequently sent by this established connection can be advantageously encrypted with the symmetric key CS so as not to be analyzed by a malicious user of the network 10.
It should be noted that this technique takes into account the fact that a symmetric encryption is much faster than an asymmetric encryption: that is why only the symmetric key CS is asymmetrically encrypted. In the same way, the data sent by the server 9 and received by the host station 5 can be encrypted with the symmetric key CS.
In the case where the user has been successfully authenticated by the authentication module A and the access to the user space corresponding to the identification data of the personal support 1 connected has been authorized, the gateway process P realizes a configuration of the host station 5 so that the latter can access the CLE files of the user space, and this, in accordance with the steps shown in FIG. 4. In the first step 41, after the gateway process P has detected the system of operating the host station 5 to which the personal medium 1 is connected, the filtering module D compatible with the detected operating system is loaded into the RAM of the host station 5. In the description which follows, an example is given embodiment of the filtering module D compatible with a WINDOWS (R) type operating system, for example WINDOWS XP (R). This filtering module D comprises a dynamic library incorporating the functions of the operating system necessary for filtering and processing file queries. In the subsequent step 42, the filtering module D starts the function of establishing the list of machines present on the local network of the host station 5, then adds a local machine corresponding to the name of the personal medium 1, namely for example CLE_XX, to this list of machines on the local network of the host station 5. In the subsequent step 43, the filtering module D loads in the RAM of the host station 5 a request processing task on the machine CLE_XX, which is a task that then executes permanently, and hereinafter described in more detail. In the subsequent step 44, the filtering module D searches in the list of virtual units of the host station 5, a free virtual unit of U: format. For example, the filtering module can start such a search from the last one, that is to say from Z:. The filtering module D then associates this virtual unit with a file path of the type \\ CLE_XX \ AAA \, the directory AAA being defined by the filtering module D by default.
At the end of step 44, the host station 5 is configured to satisfy requests on files of the virtual unit U: corresponding to the user space of the authorized user of the personal medium 1.
FIG. 5 represents in more detail the step 43 of processing of the requests by the filtering module D.
In step 51, the filtering module D is placed in the blocking reading state by a known function (for example Netbios under WINDOWS (R)). In this state, the filter module is waiting for a reading of a request arriving on the machine \\ CLE_XX. The subsequent step 52 corresponds to the arrival of a request for the WCLE XX machine, as detected by the filtering module D. The latter then initiates a step 53 of interpretation SMB / CIFS of the request to translate it according to a protocol adapted to the treatment module C.
In the subsequent step 54, the filtering module D calls a function corresponding to the request for its processing by the processing module C. The subsequent step 55 corresponds to the execution of this function by the processing module C and will be described in more detail below.
The filtering module D is then placed in a waiting state of the response of the function performed by the processing module C, and this, in step 56. When this response is received by the filtering module D, that it builds the byte packet corresponding to this response in step 57, according to the protocol (CIFS in the example of WINDOWS (R)) corresponding to the operating system of the host station 5. subsequent step 58, the filtering module D returns the response corresponding to the request and coming from the machine \\ CLE_XX. This answerback is also a known system function incorporated into Netbios. After step 58, the filtering module D returns to the blocking read state of the initial step 51.
In a variant not shown, the filtering module D can be made in the form of a structure module similar to that of a device driver, and adapted to be inserted into the core of the RAM operating system. and to directly receive queries about the virtual U :.
The architecture of the different directories and CLE files of each user can be organized in a standard way in the form of a tree structure, and this architecture is stored in the root file identified by ROOT ID on a server 9 (and not on the personal medium 1 or on a host station 5). In addition, each file CLE is identified in this architecture by its path, and, moreover, by the corresponding INFO ID ID as described above. Furthermore, all requests for information (request for identifier, reading of a file content, request to write the contents of a file) on a server 9 are made by any known technique for transferring information about the network 10 (for example a specific bilateral network link (Socket)) to which the encryption protocol of the information sent and received as described above applies, the information being encrypted with a symmetric key CS, itself encrypted with the PCK asymmetric public key.
FIGS. 6, 7 and 8 illustrate the different steps performed by the processing module C to perform various functions that can be performed on CLE files, namely respectively a file read, a file write, and the creation of a file. new file.
FIG. 6 represents, for example, a reading of a CLE file, for example a synchronized mode audio file, belonging to a user designated USER1 and whose path is USER1 \ DIR1 \ FFF1. In a first series of steps 60, the processing module C determines which is the user space architecture of USER1. To do this, the processing module C searches the content of the root file of USER1. In order to know the identifier ROOT ID1 of the root file of the user USER1, if the authorized user connected is not USER1, the processing module C requests in step 61 this identifier ROOT_ID1 by the network to the central server 9a . On the other hand, if USER1 is the authorized user connected, ROOT_ID1 can be read directly during this step 61 in the file ROOT ID.XML of the personal medium 1 of USER1. In the subsequent step 62, the processing module C reads, in the identifier ROOT ID1, the identifier SERVER ID1 of the server 9 where this root file is registered, then, during step 63, the processing module C reads the architecture contained in the root file identified by ROOT ID1, in the server SERVER_ID1 which contains it or in the local cache 8, which makes it possible to know the identifier INFO_IDl of the file DIR1 \ FFF1 by association during the step 64. The processing module C can then read the contents of this INFO file ID1 during step 65. The processing module C then consults (FIG. 9) the adaptation sub-module Y with the request 90 for reading on this ID1 INFO file. The adaptation sub-module Y determines, in step 91, whether this file ID1 INFO must be adapted, for example by consulting a configuration file 98 stored in personal memory 2 previously containing the identifiers CLE files that must be adapted on request or adapted in advance. If this file INFO_IDl must not be adapted, during step 96 its content is read directly from the local cache 8 or from the corresponding server 9, and is provided as such without modification to form answer 97 to the request 90.
If the INFO_ID1 file is to be adapted on request, the adaptation sub-module Y determines, in a step 92, the algorithm to be applied to transform the data contained in this ID1 INFO file. The determination of this algorithm can be done by consulting the data formats compatible with the operating system of the host station 5 (for example by consulting the Windows registry (R)) and by consulting a predetermined table 93 where the data resides. associations between incompatible formats of data, compatible formats of data and algorithms of transformation of the data of the first formats towards the second. This table 93 can be recorded on the personal memory 2 of the personal medium 1. The response 97 to the read request 90 sent by the processing module C is constituted, by the adaptation sub-module Y, of the contents of the INFO file. ID1 read in step 94, directly from the local cache 8 or from the corresponding server 9, and having undergone, in step 95, the transformations described in the algorithm to be applied. For example, the algorithm can transform audio data in MP3 format to audio data in WAV format to allow exploitation of this data by a specialized application executed on the host station 5 and only compatible with this WAV format.
It should be noted that preferably the adaptation sub-module Y can also intervene when reading the contents of the root file ROOT_ID1 in order to transform it in accordance with the compatible data formats. Indeed, it is preferable for some operating systems (for example Microsoft Windows (R)) to present a file name whose extension (end of file name) corresponds to the format of the data contained. In this case, the processing module C sends the read request of the ROOT_ID1 file to the adaptation sub-module Y which transforms the names of the files contained in this file ROOT_IDl so that the extensions conform to the compatible formats. For example, a FFF.MP3 file name will be changed to FFF.WAV.
If the INFO file ID1 must be adapted early as determined by the test 101 of FIG. 10, by, for example, by consulting a configuration file 98 stored in a personal memory 2 previously containing the identifiers of the files CLE to be adapted on request or adaptation in advance, the adaptation sub-module Y determines (step 102) the compatible formats of data in which this file INFO_ID1 must be converted (for example by via a configuration file 103 previously written by the user and specifying which devices the user is used to using, for example a mobile phone of a specific brand or a digital music player). The response 97 to the read request sent by the processing module C is constituted, by the adaptation sub-module Y, of the content of the read ID1 file read, in step 104, directly from the local cache 8 or on the corresponding server 9, in the same way as when no adaptation is required. During this reading, the adaptation sub-module Y also produces (step 105) the following operation: the content of the INFO_IDl file undergoes the transformations necessary to adapt the data it contains from the incompatible format of the CLE file to the compatible formats as determined. These adapted contents are recorded (step 106) in the personal memory 2 of the personal medium 1 in files or memory areas compatible with the determined devices (devices that the user plans to use). It should be noted that in order to optimize the read operations, the additional write operations required by the adaptation must only be executed when the contents of the INFO file ID1 have changed (this change can be simply determined by a date modification or equivalent process).
It should be noted that the user can configure the adaptation sub-module Y (for example by writing to a configuration file 98 present on the personal memory 2 or by performing a function of the system according to the invention) so that the It selects whether a file or a group of files must be adapted on request, adapted early or no adaptation. This selection can also relate to a set of files bearing specific names (for example via well-known regular expressions). Thus, in the case of on-demand adaptation, the exemplary implementation of the invention makes it possible to perform an adaptation, in response to a request to read a file in an incompatible format, so that a specialized application at the origin of the query receives the contents of the file in a compatible format. In the case of an anticipatory adaptation, the exemplary implementation of the invention makes it possible to achieve a useful adaptation for specialized devices having only the limited capacity to read the contents of a mass memory of a medium. portable (personal memory 2 of a personal medium 1), so that they can use a user's CLE files, even though these CLE files are recorded and used with a host station in a format incompatible with these specialized devices , and even though these specialized devices do not themselves have the capacity to run a host station operating system, nor the entire computer system described above allowing the creation and management of user spaces and files KEY. When writing (Figure 7) to a user's CLE file
USER1, for example an audio file managed in synchronized mode, whose path is USER1 \ DIR1 \ FFF2, the processing module C also determines as before the architecture of the user space files of USER1, by executing the series of preliminary steps 60 described above. The processing module C then searches in step 71 for the identification code INFO ID2 of the file corresponding to DIR1VFFF2.
After finding the INFO_ID2 record identifying the file DIR1VFFF2 in a unique and certain way, step 72 consists in writing this file. In the case of a synchronized type file, this writing is performed in the local cache 8 of the personal medium 1, then, the update management sub-module is launched in step 73 by the processing module C to update this file, if necessary.
When writing to the local cache 8, the processing module C consults the adaptation sub-module Y with the write request of this file INFO_ID2. The adaptation sub-module Y determines whether this ID2 INFO file must be adapted. If this file is not to be adapted, its content is provided as such without modification to form the response to the query and is written directly in the local cache 8 with the identifier INFO_ID2. If the INFO file ID2 is to be adapted on request for a specialized application executed on the host station 5, the adaptation sub-module Y determines the algorithm to be applied to transform the data contained in this file INFO_ID2 . The determination of this algorithm can be done as described in the read operation. The data received by the adaptation sub-module Y (contained in the write request) is transformed from the compatible format (compatible with the specialized application executed on the host station 5) to the incompatible format (writing format files in the local cache 8). This transformed data is then written to the local cache 8 according to the same direct write procedure as when no adaptation is required (conventional operation of writing in the file identified by INFO ID2). For example, the adaptation algorithm Y can transform audio data in WAV format to audio data in MP3 format.
Preferably, the adaptation sub-module Y can also intervene when writing the contents of the ROOT ID1 root file in order to transform it according to the compatible data formats. In this case, the processing module C sends the write request of the ROOT_ID1 file to the adaptation sub-module Y which transforms the names of the files contained in this ROOT_ID1 file so that the extensions conform to the compatible formats. For example, a FFF.WAV file name will be changed to FFF.MP3. If the ID2 INFO file must be adapted early, the adaptation sub-module Y applies the same procedure as during a read, that is to say once the writing the content of the INFO_ID2 file written in the local cache 8, it transforms this content to the necessary compatible formats and saves them in the personal memory 2 in files or memory areas compatible with the determined specialized devices.
Figure 8 shows a method for creating a new CLE file of the user USER1 whose path is USER1 \ DIR1 \ FFF3. First, the preliminary steps described above are performed to read the file architecture of USER1's user space. In the subsequent step 81, the processing module C creates a new identifier corresponding to this new file DIR1YFFF3, that is to say an identifier designated INFO_ID3. In the subsequent step 82, this new INFO ID3 record is added to the USER1 user space content with a specified name (in this case DIR1VFFF3). The processing module C then writes during step 83, the new version of the file architecture of this user in the local cache 8 of the personal medium 1, then launches, in step 84, the submodule update management which allows, at an appropriate time, to update this file on the corresponding central server 9a.
Preferably, the adaptation sub-module Y intervenes during the writing of the new version of the architecture in order to transform the latter in accordance with the compatible data formats, in particular by transforming the file names so that the extensions comply with the compatible formats.
To facilitate the operation of the update management sub-module, it can be provided a specific file stored in the local cache 8 of the personal memory 2, in which are recorded the records identifying the various CLE files that have been subject changes by the user and then to be checked for updates by the update management sub-module.
Moreover, when creating a new CLE file, to know which server 9 it must be registered, the processing module C can see in the central server 9a a file identifying the different servers and in which the rate of occupation of each server 9 is stored in real time. It should be noted in this regard that the different servers 9 can themselves be identified in a computer system according to the invention as specific users, that is to say in a strictly identical manner to the personal supports 1 of the logical view. Thus, their network address can be stored in a specific file of their mass memory and updated by synchronization in the same way as the files of the local cache 8 of a personal medium 1. The invention notably makes it possible to improve considerably the use of the various specialized digital processing devices available to a user.
Whereas previously the data of the users were contained in the specialized devices which they use and were hardly extractable (an address book usable only with such mobile phone, a digital photograph not compatible with such software of reading of image. .), with the invention, the data of the users are totally separate and independent of the specialized devices, and yet compatible with any of them. The user can therefore indifferently use his data with any specialized device without manually transferring and / or adapting data from one device to another.
On the other hand, the invention allows the data of a user is not lost if it loses its personal support temporarily hosting its data. Whereas before the loss of a mobile phone can induce the loss of the address book that it contains, thanks to the invention, the user no longer has the fear of losing his mobile phone, and he can even Either use any of the phones having the ability to read a portable mass memory such as the personal memory of a personal medium.
Also, the invention provides the user with the confidentiality of his data by allowing the separation between his data and the specialized devices and host stations that he uses. When personal media is unplugged from them, the specialized devices and host stations do not contain and no longer have access to the user's data. The user can therefore indifferently use a foreign mobile phone without its data residing on this device once the user no longer uses it.
In general, the invention disrupts the operating habits of digital data from specialized devices by establishing a clear separation between the personal data that a user can carry with him, and the digital processing devices he can use to exploit this data, these digital processing devices being useful only as an execution machine capable of interpreting and producing actions specific to certain data (for example calling a correspondent), these processing devices digital tools no longer have the status of a tool intrinsically linked to the personal data of their users.
The invention also represents a considerable advance and a radical change in work habits with computer systems. Thus, users can, through the invention, manage all of their personal data or personal or personalized information, not on a portable medium that contains this information or from a workstation of their own and that contains this information, but remotely via a network such as the public Internet network and only through a personal support 1 which can reliably identify them, and save the files being modified in synchronization, and secondly, from any standard host stations to which they can connect and which are automatically configured by the personal medium 1.
Although the different files and the different information of each user space can be disseminated within a very large number of servers 9 on the network and recorded in the host memory of the host station 5, each user sees his user space in a transparent manner as a directory of the host station 5 to which it is connected and accesses the corresponding CLE files in the traditional way.
If a personal medium 1 is lost or stolen, it is sufficient for the user to acquire a new personal medium 1, if necessary to provide the gateway process P and download configuration files. In this case, the P gateway process will not find the ROOT_ID.XML file, and ask the user for a choice between creating an account or restoring an account. In the case of a restoration, the user enters his USER ID code and his personal user code, which are sent to the central server 9a. The latter checks their validity, and returns the root file identifier ROOT ID of this user, who can then access his user space again.
In a computer system according to the invention, the various files CLE are identified by the first level records INFO ID which remain always identical during the life of the file and do not depend on the operating systems and recording technologies. The file names are thus always valid at any time regardless of the technological platforms implemented and used on the servers and / or the host stations 5.
The data generated by the use of computer resources (documents, letters, contacts, software, images, music, various digital creations, Internet sites, databases, etc.) are globally classified and accessible in a simple and direct way by the users without suffering from penalties related to their storage on a single station (possible destruction if destruction of the station, dependence of data on the operating system present on the station, limit of the recording space, etc.). The invention defines universal access to data from any host station to which the user connects his personal medium 1.
The invention thus rests on a clear separation between the recording and the interpretation of the data. Interpreting the data according to the host stations increases the potential for using the data. For example, an address book managed on a host station type personal computer can be classified and completed very simply with the keyboard and mouse of said host station. A user can also use this address book on a mobile-type host station when he plugs his personal support to the latter, thus allowing the mobile phone to know numbers useful to this user, and whatever the type or owner of the mobile phone itself. In the same way, a user can memorize his favorite radio stations by connecting his personal support to a home theater-type host station and listen to them by connecting his personal support to a radio-type host station, or still on a more advanced type host station such as an interactive seat equipped with headphones.
By recording the data on a device separate from the host stations where they are interpreted, the invention makes it possible to create multiple access points to a user space. Instead of being grouped in a personal computer for all tasks, the functionalities are instead everywhere where the user needs them, the multiple host stations being each able to interpret at least part of the data of the user. 'user.
As examples of other applications of the invention, the shopping list of a housewife can be interpreted by a refrigerator (host station) when it approaches with its own support identifying it. The refrigerator can calculate which foods are missing or even offer a recipe based on the family's tastes previously entered on a personal website of the house. The light, the heating, the operation of accessories can adapt in a living room or work according to (the) user (s) present (s).
Or, even when traveling a long distance, a user can share a specific file of his user space interpreted by a host station type building door, for example the door of his home, with another user so that it can to enter the same building (home), the door thus allowing access to it when it connects its personal support. The invention makes it possible to take into account the growing importance of computing in in everyday life, to alleviate the problem of the growing complication present for users with known systems: their data is scattered (servers, personal computers, mobile phones, etc.), of various formats (for example, it is difficult to save his mobile phone address book on a personal computer) and difficult to access (it is necessary to have and have at disposal the digital machine allowing to interpret them).
With the invention, the user space information is clearly and simply accessible, independent of the execution host stations, always synchronized (up to date), and yet recorded disseminated on the servers, which implies that the quality and durability of the are much higher than those obtained with personal computers.
The invention also makes it possible to implement a recurring process for backing up the servers 9 making it possible to securely store the data of the user areas in the long term.
The invention may be the subject of numerous alternative embodiments and other applications than those described above and with reference to the figures. In particular, other D filtering modules compatible with other operating systems than WINDOWS (R) can be made in a manner similar to the example given above, and incorporated in the gateway process P.
The IT functionalities, architectures and structures described above can be realized by simple programming of known computing devices, in particular for example using the JAVA language making it possible to write a program in a way that is not dependent on the operating system, in particular useful in the case of the treatment module C.

Claims (19)

1 / - Portable mass storage medium, said personal medium (1), comprising: at least one mass memory, said personal memory (2), means (3, 4) for connection to any computer station, said host station (5), provided with: . digital processing means with microprocessor (s) and associated random memory (s), . at least one operating system and file management, . connecting means (6, 7) conjugate with those of the personal medium (1), so that at least a part of the personal memory (2) of the personal medium (1) can be accessed read / write by a host station (5) when the means (3, 4, 6, 7) of connection are active, characterized in that it comprises, stored in personal memory (2), data forming a process, said gateway process (P) adapted to be loaded into the RAM of a host station (5) to which the personal medium (1) is connected, the gateway process (P) comprising: a file query filtering module (D) adapted to be able to recognize any request pertaining to at least one file, said CLE file, comprising digital information stored in a part of personal memory, called local cache (8), and / or in at least one mass memory of at least one server (9) separate from the host station (5) and to which the host station (5) has connection means and access to at least one digital network (10) can be connected via such a network (10), a processing module (C) for each request on a CLE file: . adapted to create a CLE file and / or access to any CLE file and allow the processing of a corresponding request by the system operating and managing files of the host station (5) in the same way as if it were a request on a file specific to this host station (5), . comprising an adaptation sub-module (Y) adapted to process each CLE file initially containing digital data according to a first predetermined format, said incompatible format, belonging to a group of predetermined data formats that may be subject to a conversion into different formats, this adaptation sub-module (Y) being adapted to be able to generate digital data, corresponding to the content of the file CLE, these digital data being in at least a second format, said compatible format, different from the first incompatible format, so as to convert the CLE file according to at least one such compatible format. 2 / - Personal medium according to claim 1, characterized in that said group of predetermined data recording formats comprises audio data formats, images, video, directory contacts. 3 / - Personal holder according to one of claims 1 or 2, characterized in that: the processing module (C) is adapted to detect a query that is interesting at least one CLE file, said file to be duplicated, the format of which is incompatible with at least one digital processing device, referred to as a specialized device, the adaptation sub-module (Y) is adapted to be able to convert the file to be duplicated into at least one compatible format, and to record at least one copy of the file to be duplicated and thus converted into the personal memory (2) of the personal medium ( 1). 4 / - Personal medium according to one of claims 1 to 3, characterized in that the adaptation sub-module (Y) is adapted to perform, when a request is processed on a CLE file, whose format is incompatible with a digital processing software application, called specialized application, an adaptation of the digital data associated with the file CLE, to convert them into a compatible format, and directly form a response to the request from the digital data thus converted. 5 / - Personal medium according to one of claims 1 to 4, characterized in that it is free of digital processing means other than those necessary, if necessary, to the establishment and operation of the means (3, 4 , 6, 7) for connection with host stations (5). 6 / - Personal support according to one of claims 1 to 5, characterized in that it is free of man / machine interface. II - Personal medium according to one of claims 1 to 6, characterized in that said means (3, 4, 6, 7) for connection to a host station (5) are made active by bringing and / or connecting the personal support (1) and the host station (5). 8 / - Personal medium according to one of claims 1 to 7, characterized in that said means (3, 6) for connection to a host station (5) are adapted to allow the establishment of a USB universal serial link. 9 / - Personal medium according to one of claims 1 to 8, characterized in that the processing module (C) is adapted to be executed in a memory area dedicated to the application programs and accessible in user mode of the RAM (26). ) of a host station (5). 10 / - Personal medium according to one of claims 1 to 9, characterized in that the processing module (C) is adapted to save by default any CLE file of the user space being digitally processed by the host station (5) in the local cache (8) of the personal memory (2). 11 / - Personal medium according to one of claims 1 to 10, characterized in that the processing module (C) is adapted to create each CLE file with an identifier record of this CLE file, called 1NFO ID, comprising: a code identifying a user who has created this CLE file. - a code identifying the CLE file individually. 12 / - Personal holder according to claim 11, characterized in what an INFO ID record also includes: a code identifying a server, called FILESERV_ID, where this CLE file was initially registered, a code determining an encryption mode for the file CLE, a code determining a synchronization mode for the file KEY. 13 / - Personal medium according to one of claims 1 to 12, characterized in that it comprises, recorded in personal memory (2), data ROOT_ID identifying at least one root file stored on a server (9), wherein at least a portion of the architecture of the user space CLE files is stored. 14 / - Computer system for secure access to a network (10) by users, comprising: - computer stations, called host stations (5), each endowed with: . digital processing means with microprocessor (s) and associated random memory (s), . at least one operating and file management system,. connecting means (6, 7) conjugate connection means (3, 4) of at least one portable mass storage medium, said personal medium (1), so that at least a portion of the memory the mass of such a personal medium (1) can be accessed read / write by the host station (5) when the connection means (3, 4, 6, 7) are active,. means for connection and access to at least one public digital network (10), at least one server (9) comprising at least one mass memory, called server memory, and means of connection to at least one public digital network (10), and adapted to allow read / write access to at least one part of this server memory via such a public digital network (10), each personal medium (1) comprising: . at least one mass memory, called personal memory (2),. connecting means (3, 4) to any host station (5), characterized in that each personal medium (1) comprises, stored in personal memory, data forming a process, said gateway process (P), adapted to be able to being loaded into RAM (26) of a host station (5) to which the personal medium (1) is connected, this gateway process (P) comprising: - a filtering module (D) of file requests adapted to be able to recognize any request involving at least one file, said CLE file, comprising digital information stored in a part of the personal memory (2), called local cache (8), and / or in at least one server memory of at least one server (9) separate from the host station (5), - a processing module (C) of each request on a file CLE: . adapted to be able to create a CLE file and / or to access any CLE file and to allow the processing and file management system of the host station (5) to process a corresponding request in the same way as if it were was a query on a file specific to this host station (5), . comprising an adaptation sub-module (Y) adapted to process each CLE file initially containing digital data according to a first predetermined format, said incompatible format, belonging to a group of predetermined data formats that may be subject to a conversion into different formats, this adaptation sub-module (Y) being adapted to be able to generate digital data, corresponding to the content of the file CLE, these digital data being in at least a second format, said compatible format, different from the first incompatible format, so as to convert the CLE file according to at least one such compatible format. 15 / - A computer system according to claim 14, characterized in that said group of predetermined data recording formats comprises formats of digital audio data, images, video, directory contacts. 16 / - Computer system according to one of claims 14 or 15, characterized in that: the processing module (C) is adapted to detect a query that is interesting at least one CLE file, said file to be duplicated, the format of which is incompatible with at least one digital processing device, referred to as a specialized device, the adaptation sub-module (Y) is adapted to be able to convert the file to be duplicated into at least one compatible format, and to record at least one copy of the file to be duplicated and thus converted into the personal memory (2) of the personal medium ( 1). 17 / - System according to one of claims 15 to 16, characterized in that the adaptation sub-module (Y) is adapted to achieve, when a request is processed on a CLE file, whose format is incompatible with a digital processing software application, called specialized application, an adaptation of the digital data associated with the file CLE, to convert them into a compatible format, and directly form a response to the request from the digital data thus converted. 18 / - Computer system according to one of claims 14 to 17, characterized in that the personal supports (1) are devoid of digital processing means other than those necessary, if necessary, for the establishment and operation of the connection means between the personal supports (1) and the host stations (5). 19 / - Computer system according to one of claims 14 to 18, characterized in that the personal supports (1) are free from the human / machine interface, and that the host stations (5) are provided with an interface man / machine. 20 / - Computer system according to one of claims 14 to 19, characterized in that the means (3, 4, 6, 7) for connecting a personal medium (1) to a host station (5) are made active by bringing and / or connecting the personal medium (1) and the host station (5). 21 / - Computer system according to one of claims 14 to 20, characterized in that said means (3, 6) for connecting a personal medium (1) to a host station (5) are adapted to allow the establishment of a USB universal serial link. 22 / ~ Computer system according to one of claims 14 to 21, characterized in that the processing module (C) is adapted to be executed in a memory area dedicated to the application programs and accessible in user mode of the random access memory (26) of a host station (5). 23 / - Computer system according to one of claims 14 to 22, characterized in that the processing module (C) is adapted to save by default any CLE file of the user space which is the subject of a digital processing by the host station (5) in the local cache (8) of the personal memory (2) of the personal medium (1). 24 / - computer system according to one of claims 14 to 23, characterized in that the processing module (C) is adapted to create each file CLE with a record identifier of the CLE file, said INFO_ID, comprising: a code identifying a user who has created this CLE file, - a code identifying the CLE file individually. 25 / - Computer system according to claim 24, characterized in that a record INFO_ID further comprises: a code identifying a server, called FILESERV_ID, where this CLE file was initially registered, a code determining an encryption mode for the file CLE, a code determining a synchronization mode for the file CLE. 26 / - Computer system according to one of claims 14 to 25, characterized in that it comprises, stored in personal memory (2) of each personal medium (1), ROOT ID data identifying at least one root file recorded on a server (9), this root file comprising at least one part of the architecture of the CLE files of the user space. 27 / - Computer system according to one of claims 14 to 26, characterized in that the host stations (5) are chosen from: - personal computers of the fixed type, - personal computers of the portable type, - portable digital processing devices.