DRM Interoperability The vision: Of the need of common ground for CA and DRM

1
DRM InteroperabilityThe vision Of the need of
common ground for CA and DRM

• DIEHL E. BOUCQUEAU JM.
• THOMSON, security laboratory

2
The media chain (simplified)
Creation
3
Layered model
Rights Management

• Defines the rights associated to the content

Rights Enforcement

• Protects and enforces these rights

Content Protection

• Protects content regardless of rights
• scrambling algorithm
• watermark

4
Current situation in DRM
5
DVB approach
DVB
RM a
RM c
RM b
RE a
RE b
RE c
DVB simulcrypt
6
Proposed approach
Interoperability layer
Medianet CP
7
Rationales

• Compatible with current approaches
• Supports XrML, MPEG21,
• Mass market for chipset
• CP is resource consuming
• Reduce the cost of receiver
• Interoperability layer between all actors
• Enabling fair competition for DRM systems

8
Preliminary work

• Position Paper
• Summarizes this common vision for dissemination
• Presented to DVB-CPT, December 2004
• Presented to FP6 NAVSHP, Nice December 2004
• Security Framework Requirements (DB5.2)
• Inputs from Security Analysis, State of the art
  DRM/CP/CA systems, Reference Architecture, early
  version of NAVSHP DRM requirements, etc
• 22 key requirements, focused on security aspects

9
Architecture
10
Architecture

• Format / Transport Mapping (FTM) layer
• Provides encrypted data from incoming
  stream/file and optionnaly some configuration
  parameters
• CPL Manager
• Manages the interactions between modules and the
  data flow (establishes Secure Authenticated
  Channel SAC when necessary)
• Configuration module
• Holds the decryption configuration parameters
  that may be given by FTM layer or by Rights
  Enforcement layer (eventually under SAC
  protection)
• Decryption module
• Decrypts the content received from FTM layer with
  the keys provided by Rights Enforcement layer
  (eventually under SAC protection)
• Usage rules and decryption keys are provided to
  rights management layer

11
Specifications

• Important choices made
• Recommended algorithm for data scrambling AES in
  CBC-Mode with 128 bits key size
• 100 in-line with DVB discussions on this topic
• Definition of a dedicated Secure Authenticated
  Channel
• Protect the decryption keys received from RE
  Layer
• Demonstration
• Application of the Content Security Framework to
  SmartRight, a domain protection technology
• Smartright demo in room Thalassa