Digital rights management using a mobile phone

ABSTRACT

This paper focuses on the problem of preventing illegal copying of digital assets without jeopardising the right of legitimate licence holders to transfer content between their own devices, which make up a domain. Our novel idea involves the use of a domain-specific mobile phone and the mobile phone network operator to authenticate the domain owner before devices can join a domain. This binds devices in a domain to a single owner, that, in turn, enables the binding of domain licences to the domain owner. In addition, the way in which we control domain membership, and the use of the domain-specific mobile phone that enables a domain owner to add devices wherever he/she is physically present, ensures that devices joining the domain are in physical proximity to the mobile phone, preventing illicit content proliferation.

REFERENCES

• 1: 3rd Generation Partnership Project. 3GPP TS 21.133 - 3G Security; Security Threats and Requirements. Specification version 4.1.0 Release 4, December 2001.
• 2: 3rd Generation Partnership Project. 3GPP TS 33.120 - 3G Security; Security Principles and Objectives. Specification version 4.0.0 Release 4, March 2001.
• 3: 3rd Generation Partnership Project. 3GPP TS 33.908 - General Report on the Design, Specification and Evaluation of 3GPP Standard Confidentiality and Integrity Algorithms. Specification version 4.0.0 Release 4, September 2001.
• 4: 3rd Generation Partnership Project. 3GPP TS 33.102 - 3G Security; Security architecture. Specification version 7.0.0 Release 7, December 2005.
• 5: 3rd Generation Partnership Project. 3GPP TS 33.220 - Generic Authentication Architecture (GAA) - System Description. Specification version 7.0.0 Release 7, March 2006.
• 6: 3rd Generation Partnership Project. 3GPP TS 33.919 - Generic Authentication Architecture (GAA) - Generic Bootstrapping Architecture. Specification version 7.4.0 Release 7, June 2006.
• 7: Imad Abbadi. Digital asset protection in personal private networks. In 8th International Symposium on Systems and Information Security (SSI 2006), Sao Jose dos Campos, Sao Paulo, Brazil, November 2006.
• 8: Thomas S. Messerges , Ezzat A. Dabbish, Digital rights management in a 3G mobile phone and beyond, Proceedings of the 3rd ACM workshop on Digital rights management, October 27-27, 2003, Washington, DC, USA [doi>10.1145/947380.947385]
• 9: Eimear Gallery and Allan Tomlinson. Secure delivery of conditional access applications to mobile receivers. In Chris J. Mitchell, editor, Trusted Computing, chapter 7, pages 195--237. IEE, 2005.
• 10: Trusted Computing Group. Trusted platform module FAQ.
• 11: André Günther and Christian Hoene. Measuring round trip times to determine the distance between WLAN nodes. In Raouf Boutaba, Kevin C. Almeroth, Ramn Puigjaner, Sherman X. Shen, and James P. Black, editors, Proceedingsof 4th International IFIP-TC6 Networking Conference, Waterloo, Canada, volume 3462 of Lecture Notes in Computer Science, pages 768--779. Springer-Verlag, Berlin, May 2005.
• 12: Bradley Huffaker, Marina Fomenkov, Daniel J. Plummer, David Moore, and K. Claffy. Distance metrics in the Internet. In IEEE International Telecommunications Symposium, 2002. http://www.caida.org/publications/papers/2002/Distance/.
• 13: IBM Research Division Almaden Research Center. xCP cluster protocol, 2003. http://www-03.ibm.com/solutions/digitalmedia/doc/content/bin/xCPWhitepaper_final_1.pdf.
• 14: International Organization for Standardization. ISO/IEC 9798-3, Information technology - Security techniques - Entity authentication - Part 3: Mechanisms using digital signature techniques, 2nd edition, 1998.
• 15: International Organization for Standardization. ISO/IEC 21481: Information technology - Telecommunications andinformation exchange between systems - Near Field Communication Interface and Protocol-2 (NFCIP-2), 2005.
• 16: International Organization for Standardization. ISO/IEC 18033-2, Information technology - Security techniques - Encryption algorithms - Part 2: Asymmetric ciphers, 2006.
• 17: International Organization for Standardization. ISO/IEC 2nd CD 19772, Information technology - Security techniques - Authenticated encryption mechanisms, 2006.
• 18: H. Krawczyk , M. Bellare , R. Canetti, HMAC: Keyed-Hashing for Message Authentication, RFC Editor, 1997
• 19: M. Myers , R. Ankney , A. Malpani , S. Galperin , C. Adams, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP, RFC Editor, 1999
• 20: A. Niemi , J. Arkko , V. Torvinen, Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA), RFC Editor, 2002
• 21: Open Mobile Alliance. DRM Specification - Version 2.0, 2006.
• 22: Bogdan C. Popescu , Bruno Crispo , Andrew S. Tanenbaum , Frank L.A.J. Kamperman, A DRM security architecture for home networks, Proceedings of the 4th ACM workshop on Digital rights management, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029146.1029150]
• 23: Thomson. SmartRight technical white paper, 2003. http://www.smartright.org/images/SMR/content/SmartRight_tech_whitepaper_jan28.pdf.
• 24: Trusted Computing Group. TPM Main, Part 1, Design Principles. Specification version 1.2 Revision 94, 2006.
• 25: Trusted Computing Group. TPM Main, Part 2, TPM Structures. Specification version 1.2 Revision 94, 2006.
• 26: Trusted Computing Group. TPM Main, Part 3, Design Principles. Specification version 1.2 Revision 94, 2006.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

General Terms:
Design, Security

Keywords:
3GPP GAA, DRM, access control, authorised domain management, copyright protection, trusted computing