Towards a secure and interoperable DRM architecture

ABSTRACT

In this paper we look at the problem of interoperability of digital rights management (DRM)systems in home networks. We introduce an intermediate module called the Domain Interoperability Manager (DIM) to efficiently deal with the problem of content and license translation across different DRM regimes. We also consider the threat model specific to interoperability systems, and introduce threats such as the cross-compliancy and splicing attacks. We formalize the adversary model and define security of an interoperable DRM system with respect to this adversary. We finalize by proposing detailed protocols which achieve our security requirements. In order to achieve these requirements we provide novel applications of recently proposed proxy resignature and proxy re-encryption algorithms.

REFERENCES

• 1: G. Ateniese, K. Fu, M. Green, S. Hohenberger, Improved Proxy Re-Encryption Schemes with Applications to Secure Distributed Storage, NDSS, 2005. 2 With an off-line attestation protocol, connection is only sporadic.
• 2: Giuseppe Ateniese , Susan Hohenberger, Proxy re-signatures: new definitions, algorithms, and applications, Proceedings of the 12th ACM conference on Computer and communications security, November 07-11, 2005, Alexandria, VA, USA [doi>10.1145/1102120.1102161]
• 3: M. Blaze, G. Bleumer, M. Strauss, Divertible Protocols and Atomic Proxy Cryptography, EUROCRYPT'98.
• 4: T. Hauser and C. Wenz, DRM Under Attack: Weaknesses in Existing Systems, Digital Rights Management: Technological, Economic, Legal and Political Aspects, November 2003.
• 5: N. Herberger, Virgin Media versus iTunes, http://www.indicare.org/tiki-read article.php?articleId=150, October 2005.
• 6: Gregory L. Heileman , Pramod A. Jamkhedkar, DRM interoperability analysis from the perspective of a layered framework, Proceedings of the 5th ACM workshop on Digital rights management, November 07-07, 2005, Alexandria, VA, USA [doi>10.1145/1102546.1102551]
• 7: H. L. Jonker and S. Mauw, Core Security Requirements of DRM Systems, Symposium on Information Theory in the Benelux, June 2004.
• 8: R. H. Koenen, J. Lacy, M. Mackey, S. Mitchell, The Long March to Interoperable Digital Rights Management, Proceedings of the IEEE, vol 92(6), June 2004.
• 9: David W. Kravitz , Thomas S. Messerges, Achieving media portability through local content translation and end-to-end rights management, Proceedings of the 5th ACM workshop on Digital rights management, November 07-07, 2005, Alexandria, VA, USA [doi>10.1145/1102546.1102552]
• 10: M. Mambo, K. Usuda, E. Okamoto, Proxy Signatures: Delegation of the Power to Sign Messages, IEICETrans. Fundamentals, 1996.
• 11: Sam Michiels , Kristof Verslype , Wouter Joosen , Bart De Decker, Towards a software architecture for DRM, Proceedings of the 5th ACM workshop on Digital rights management, November 07-07, 2005, Alexandria, VA, USA [doi>10.1145/1102546.1102559]
• 12: Srijith K. Nair , Bogdan C. Popescu , Chandana Gamage , Bruno Crispo , Andrew S. Tanenbaum, Enabling DRM-Preserving Digital Content Redistribution, Proceedings of the Seventh IEEE International Conference on E-Commerce Technology (CEC'05), p.151-158, July 19-22, 2005 [doi>10.1109/ICECT.2005.43]
• 13: Bogdan C. Popescu , Bruno Crispo , Andrew S. Tanenbaum , Frank L.A.J. Kamperman, A DRM security architecture for home networks, Proceedings of the 4th ACM workshop on Digital rights management, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029146.1029150]
• 14: Reihaneh Safavi-Naini , Nicholas Paul Sheppard , Takeyuki Uehara, Import/export in digital rights management, Proceedings of the 4th ACM workshop on Digital rights management, October 25-25, 2004, Washington DC, USA [doi>10.1145/1029146.1029163]
• 15: A. U. Schmidt, O. Tafreschi, R. Wolf, Interoperability Challenges for DRM Systems, IFIP/GI Workshop on Virtual Goods, Ilmenau (Germany), May 2004.
• 16: Zuowen Tan , Zhuojun Liu, Provably secure delegation-by-certification proxy signature schemes, Proceedings of the 3rd international conference on Information security, November 14-16, 2004, Shanghai, China [doi>10.1145/1046290.1046299]
• 17: Susan Wegner, Prototype Description of an Open DRM Architecture, OPERA-Interoperability of Digital Rights Management Technologies, EURESCOM project report, December 2003.
• 18: DVB - The Digital Video Broadcasting Consortium. http://www.dvb.org/
• 19: Hymn Project. http://hymn-project.org/
• 20: iTunes FairPlay. http://www.apple.com/lu/support/itunes/authorization.html
• 21: Open Mobile Alliance. http://www.openmobilealliance.org/
• 22: Secure Digital Container. http://www.digicont.com/
• 23: Sharpmusique. http://www.nanocrew.net/
• 24: Trusted Computing Group, Trusted Computing Platform Alliance Main Specification, February 2002, Version 1.1b, http://www.trustedcomputinggroup.org
• 25: Microsoft Windows Media Rights Manager. http://www.microsoft.com/windows/windowsmedia/howto/articles/drmarchitecture.aspx
• 26: Windows Media DRM, wikipedia entry. http://en.wikipedia.org/wiki/Windows Media DRM
• 27: Can we learn from Apple's success with iTunes Music services?. http://www.dk.capgemini.com/NewsmailSystem/Telecom/Ver1/Documents/ITunes.shtml.
• 28: Intertrust's Coral and Marlin. http://www.intertrust.com/main/research/initiatives.html
• 29: MPs in digital downloads warning. http://news.bbc.co.uk/2/hi/technology/5041684.stm
• 30: http://www.coral-interop.org/
• 31: Advanced access content system. http://www.aacsla.com/home
• 32: PachyDRM. http://www.pachydrm.com/
• 33: The Informed Dialogue about Consumer Acceptability of DRM Solutions in Europe (INDICARE), "Consumer Survey on Digital Music and DRM", May 2005, www.indicare.org/survey

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.5 LEGAL ASPECTS OF COMPUTING
      K.5.1 Hardware/Software Protection
          Subjects: Copyrights

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
          Subjects: Unauthorized access (e.g., hacking, phreaking)

General Terms:
Design, Security

Keywords:
DRM, home networks, interoperability