Towards multilateral secure digital rights distribution infrastructures

ABSTRACT

Digital Rights Management (DRM) systems and applications appear to increasingly attract the interest of e-commerce business developers. DRM systems aim at secure distribution of digital content and commonly comprise a huge variety of different technologies. Current DRM systems focus mainly on right-holder's security needs and commonly neglect those of consumers. In particular, these systems even lack reliable means for users to verify that they purchase usage-rights on works (licenses) from the rightful authors (rights-holder). This seems to be simply achievable in centralistic systems where only global players or a few large collecting societies control the distribution of licenses. However, in a large distributed system with many unknown and potentially untrusted sellers/distributors of digital content it is crucial from the legal and security perspectives that any user/device of the DRM platform can reliably verify that a purchased license is authorised by the rightful author/rights-holder.In this paper we introduce a formal model and the corresponding schemes for establishing a multilateral secure rights-distribution infrastructure. The key features of our proposal are: firstly, consumers can directly verify that a seller is indeed authorised to grant certain usage-rights. Secondly, the authorship and rights licenses are invariant with respect to perceptibly similar works, i.e., they are not only valid for the original work but also for a set of closely related similar works which are modifications of the original work (e.g., different resolutions or encodings of an image or a video). The reason for providing this property is that these works are still considered to be under the copyright of the author.Our scheme provides an enabling technology for decentralised right distribution infrastructures for intellectual property with multilateral security.

REFERENCES

• 1: André Adelsbach, Birgit Pfitzmann, and Ahmad-Reza Sadeghi. Proving ownership of digital content. In Pfitzmann {27}, pages 126--141.
• 2: André Adelsbach , Markus Rohe , Ahmad-Reza Sadeghi, Overcoming the obstacles of zero-knowledge watermark detection, Proceedings of the 2004 workshop on Multimedia and security, September 20-21, 2004, Magdeburg, Germany [doi>10.1145/1022431.1022441]
• 3: André Adelsbach, Markus Rohe, and Ahmad-Reza Sadeghi. Complementing zero-knowledge watermark detection: Proving properties of embedded information without revealing it. ACM Multimedia Systems Journal, 2005.
• 4: André Adelsbach, Markus Rohe, and Ahmad-Reza Sadeghi. Towards multilateral secure digital rights distribution infrastructures (full version). Technical report, Horst Görtz Institute for IT Security, available at http://www.nds.rub.de/adelsbach, 2005.
• 5: André Adelsbach , Ahmad-Reza Sadeghi, Zero-Knowledge Watermark Detection and Proof of Ownership, Proceedings of the 4th International Workshop on Information Hiding, p.273-288, April 25-27, 2001
• 6: André Adelsbach and Ahmad-Reza Sadeghi. Advanced techniques for dispute resolving and authorship proofs on digital works. In Proceedings of SPIE Vol. 5020, Security and Watermarking of Multimedia Contents V, 2003.
• 7: Matt Blaze , Joan Feigenbaum , John Ioannidis , Angelos D. Keromytis, The role of trust management in distributed systems security, Secure Internet programming: security issues for mobile and distributed objects, Springer-Verlag, London, 2001
• 8: Matt Blaze , Joan Feigenbaum , Jack Lacy, Decentralized Trust Management, Proceedings of the 1996 IEEE Symposium on Security and Privacy, p.164, May 06-08, 1996
• 9: Fabrice Boudot. Efficient proofs that a committed number lies in an interval. In Bart Preneel, editor, Advances in Cryptology -- EURO-CRYPT '2000, volume 1807 of Lecture Notes in Computer Science, pages 431--444, Brugge, Belgium, 2000. Springer-Verlag, Berlin Germany.
• 10: Deutscher Bundestag. Urheberrechtsgesetz (UrhG), Sep. 2003.
• 11: Microsoft Corporation. Architecture of windows media rights manager. http://www.microsoft.com/windows/windows-media/howto/articles/drmarchitecture.aspx, May 2004.
• 12: Ingemar Cox , Matthew L. Miller , Jeffery A. Bloom, Digital watermarking, Morgan Kaufmann Publishers Inc., San Francisco, CA, 2001
• 13: Karen Coyle. Rights expression languages. Technical report, Library of Congress, 2004.
• 14: Glenn Durfee and Matt Franklin. Distribution chain security. In Jajodia {19} ACMSecCon2000.
• 15: J. J. Eggers, J. K. Su, and B. Girod. Asymmetric watermarking schemes. In Sicherheit in Netzen und Medienströmen, Springer Reihe, Informatik Aktuell, September 2000.
• 16: Teddy Furon , Pierre Duhamel, An Asymmetric Public Detection Watermarking Technique, Proceedings of the Third International Workshop on Information Hiding, p.88-100, September 29-October 01, 1999
• 17: Jaap Haitsma, Ton Kalker, and Job Oostveen. Robust audio hashing for content identification. In International Workshop on Content-Based Multimedia Indexing (CBMI'01), Brescia, Italy, September 19-21, 2001.
• 18: Frank Hartung and Martin Kutter. Multimedia watermarking techniques. Proceedings of the IEEE, Special Issue on Identification and Protection of Multimedia Information, 87(7):1079--1107, July 1999.
• 19: Proceedings of the 7th ACM conference on Computer and communications security, November 2000
• 20: R. Koenen, J. Lacy, M. MacKay, and S. Mitchell. The long march to interoperable digital rights management. Proceedings of the IEEE, 92(6):883--897, June 2004.
• 21: Michiharu Kudo , Satoshi Hada, XML document security based on provisional authorization, Proceedings of the 7th ACM conference on Computer and communications security, p.87-96, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352613]
• 22: Don Labriola. Digital content protection. http://www.extremetech.com/print_article/0,3998,a=27038,00.asp
• 23: Ching-Yung Lin and Shih-Fu Chang. Generating robust digital signature for image/video authentication. In Multimedia and Security Workshop at ACM Multimedia 98, Bristol, 1998.
• 24: Antonio Ma na, Mariemma Yagüe, and Vincente Benjumea. Ec-gate: An infrastructure for drm. In Proceedings of the IAESTED International Conference on Communication, Network and Information Security, December 2003.
• 25: Roland Norcen and Andreas Uhl. Robust visual hashing using JPEG 2000. In ighth IFIP TC6/TC11 Conference on Communications and Multimedia Security (CMS'04), Lake Windermere, GB, September, 2004.
• 26: U.S. Copyright Office. Copyright law of the United States of America. Title 17 of the United States Code U.S.C, available at http://www.copyright.gov/title17/index.html, Jun 2003.
• 27: Andreas Pfitzmann, editor. Information Hiding---3rd International Workshop, IH'99, volume 1768 of Lecture Notes in Computer Science, Dresden, Germany, October 2000. Springer-Verlag, Berlin Germany.
• 28: Sujoy Roy and Ee-Chien Chang. Watermarking with retrieval systems. Multimedia Systems, (9):433--440, 2004.
• 29: Matthias Schunter. Optimistic Fair Exchange. PhD thesis, Technische Fakultät der Universität des Saarlandes, Saarbrücken, October 2000.
• 30: Ashwin Swaminathan, Yinian Mao, and Min Wu. Image hashing resilient to geometric and filtering operations. In IEEE Workshop on Multimedia Signal Processing (MMSP'04), Siena, Italy, September 2004.
• 31: Mary Thompson, William Johnston, Srilekha Mudumbai, Gary Hoo, Keith Jackson, and Abdelilah Essiari. Certificate-based access control for widely distributed resources. In Proceedings of the 8th USENIX Security Symposium, Washington, D.C., USA, August 1999. USENIX.
• 32: H. Wang , F. Guo , D. D. Feng , J. S. Jin, A signature for content-based image retrieval using a geometrical transform, Proceedings of the sixth ACM international conference on Multimedia, p.229-234, September 13-16, 1998, Bristol, United Kingdom [doi>10.1145/290747.290775]

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

Additional Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Intellectual property rights
      K.4.4 Electronic Commerce
          Subjects: Intellectual property
  K.5 LEGAL ASPECTS OF COMPUTING
      K.5.1 Hardware/Software Protection
          Subjects: Proprietary rights; Licensing; Copyrights

General Terms:
Security

Keywords:
DRM, authorship, copyrights, digital distribution chains, licensing and transfer of rights, right ownership, usage rights