CN1839375A - Reprogrammable security for controlling piracy and enabling interactive content - Google Patents
Reprogrammable security for controlling piracy and enabling interactive content Download PDFInfo
- Publication number
- CN1839375A CN1839375A CNA2004800239483A CN200480023948A CN1839375A CN 1839375 A CN1839375 A CN 1839375A CN A2004800239483 A CNA2004800239483 A CN A2004800239483A CN 200480023948 A CN200480023948 A CN 200480023948A CN 1839375 A CN1839375 A CN 1839375A
- Authority
- CN
- China
- Prior art keywords
- content
- player
- code
- key
- medium
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 230000002452 interceptive effect Effects 0.000 title description 4
- 238000000034 method Methods 0.000 claims abstract description 172
- 238000003860 storage Methods 0.000 claims abstract description 63
- 230000008569 process Effects 0.000 claims abstract description 57
- 230000003287 optical effect Effects 0.000 claims abstract description 34
- 230000015654 memory Effects 0.000 claims description 143
- 230000033228 biological regulation Effects 0.000 claims description 47
- 230000006870 function Effects 0.000 claims description 44
- 230000005055 memory storage Effects 0.000 claims description 12
- 230000001965 increasing effect Effects 0.000 claims description 6
- 238000005516 engineering process Methods 0.000 abstract description 83
- 238000012545 processing Methods 0.000 abstract description 41
- 238000004891 communication Methods 0.000 abstract description 18
- 238000012546 transfer Methods 0.000 abstract description 3
- 230000010354 integration Effects 0.000 abstract 1
- 239000002609 medium Substances 0.000 description 286
- 238000007689 inspection Methods 0.000 description 47
- 230000008859 change Effects 0.000 description 44
- 238000007726 management method Methods 0.000 description 37
- 238000004422 calculation algorithm Methods 0.000 description 30
- 230000005540 biological transmission Effects 0.000 description 28
- 238000012986 modification Methods 0.000 description 28
- 230000004048 modification Effects 0.000 description 28
- 238000013461 design Methods 0.000 description 27
- 230000009471 action Effects 0.000 description 20
- 230000006835 compression Effects 0.000 description 19
- 238000007906 compression Methods 0.000 description 19
- 238000004458 analytical method Methods 0.000 description 18
- 238000006243 chemical reaction Methods 0.000 description 18
- 238000004519 manufacturing process Methods 0.000 description 17
- 238000012360 testing method Methods 0.000 description 16
- 238000009826 distribution Methods 0.000 description 15
- 230000004044 response Effects 0.000 description 14
- 238000003780 insertion Methods 0.000 description 13
- 230000037431 insertion Effects 0.000 description 13
- 230000001681 protective effect Effects 0.000 description 13
- 238000013459 approach Methods 0.000 description 12
- 230000008901 benefit Effects 0.000 description 12
- 238000004364 calculation method Methods 0.000 description 12
- 230000002349 favourable effect Effects 0.000 description 12
- 239000000463 material Substances 0.000 description 12
- 230000007246 mechanism Effects 0.000 description 12
- 238000012937 correction Methods 0.000 description 11
- 238000001514 detection method Methods 0.000 description 10
- 238000013475 authorization Methods 0.000 description 9
- 230000000694 effects Effects 0.000 description 9
- 230000008093 supporting effect Effects 0.000 description 9
- 244000035744 Hura crepitans Species 0.000 description 8
- 230000004913 activation Effects 0.000 description 8
- 238000009795 derivation Methods 0.000 description 8
- 238000011084 recovery Methods 0.000 description 8
- GOLXNESZZPUPJE-UHFFFAOYSA-N spiromesifen Chemical compound CC1=CC(C)=CC(C)=C1C(C(O1)=O)=C(OC(=O)CC(C)(C)C)C11CCCC1 GOLXNESZZPUPJE-UHFFFAOYSA-N 0.000 description 8
- 230000008878 coupling Effects 0.000 description 7
- 238000010168 coupling process Methods 0.000 description 7
- 238000005859 coupling reaction Methods 0.000 description 7
- 230000009467 reduction Effects 0.000 description 7
- 239000011800 void material Substances 0.000 description 7
- 230000003993 interaction Effects 0.000 description 6
- 230000007774 longterm Effects 0.000 description 6
- 230000002093 peripheral effect Effects 0.000 description 6
- 230000002950 deficient Effects 0.000 description 5
- 239000000284 extract Substances 0.000 description 5
- 238000009434 installation Methods 0.000 description 5
- 230000002829 reductive effect Effects 0.000 description 5
- 101150059273 PTR1 gene Proteins 0.000 description 4
- 238000003556 assay Methods 0.000 description 4
- 230000000712 assembly Effects 0.000 description 4
- 238000000429 assembly Methods 0.000 description 4
- 230000003139 buffering effect Effects 0.000 description 4
- 230000006837 decompression Effects 0.000 description 4
- 238000000605 extraction Methods 0.000 description 4
- 238000002372 labelling Methods 0.000 description 4
- 238000011068 loading method Methods 0.000 description 4
- 239000004065 semiconductor Substances 0.000 description 4
- 238000004088 simulation Methods 0.000 description 4
- 230000004622 sleep time Effects 0.000 description 4
- 238000012795 verification Methods 0.000 description 4
- 241000700605 Viruses Species 0.000 description 3
- 238000012550 audit Methods 0.000 description 3
- 239000012141 concentrate Substances 0.000 description 3
- 239000000470 constituent Substances 0.000 description 3
- 230000006378 damage Effects 0.000 description 3
- 238000011161 development Methods 0.000 description 3
- 239000012634 fragment Substances 0.000 description 3
- 230000008676 import Effects 0.000 description 3
- 238000013507 mapping Methods 0.000 description 3
- 239000003550 marker Substances 0.000 description 3
- 238000005457 optimization Methods 0.000 description 3
- 238000006467 substitution reaction Methods 0.000 description 3
- 230000000007 visual effect Effects 0.000 description 3
- 241000252203 Clupea harengus Species 0.000 description 2
- 101100235787 Schizosaccharomyces pombe (strain 972 / ATCC 24843) pim1 gene Proteins 0.000 description 2
- 230000002155 anti-virotic effect Effects 0.000 description 2
- 230000006399 behavior Effects 0.000 description 2
- 239000003795 chemical substances by application Substances 0.000 description 2
- 239000002131 composite material Substances 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 238000012217 deletion Methods 0.000 description 2
- 230000037430 deletion Effects 0.000 description 2
- 230000002708 enhancing effect Effects 0.000 description 2
- 235000019514 herring Nutrition 0.000 description 2
- 230000001976 improved effect Effects 0.000 description 2
- 230000006872 improvement Effects 0.000 description 2
- 238000013508 migration Methods 0.000 description 2
- 230000005012 migration Effects 0.000 description 2
- 238000004321 preservation Methods 0.000 description 2
- 101150114015 ptr-2 gene Proteins 0.000 description 2
- 238000009877 rendering Methods 0.000 description 2
- 238000011076 safety test Methods 0.000 description 2
- 238000005070 sampling Methods 0.000 description 2
- 239000000758 substrate Substances 0.000 description 2
- 230000001052 transient effect Effects 0.000 description 2
- 238000010200 validation analysis Methods 0.000 description 2
- UPLPHRJJTCUQAY-WIRWPRASSA-N 2,3-thioepoxy madol Chemical compound C([C@@H]1CC2)[C@@H]3S[C@@H]3C[C@]1(C)[C@@H]1[C@@H]2[C@@H]2CC[C@](C)(O)[C@@]2(C)CC1 UPLPHRJJTCUQAY-WIRWPRASSA-N 0.000 description 1
- 241000251468 Actinopterygii Species 0.000 description 1
- 235000017166 Bambusa arundinacea Nutrition 0.000 description 1
- 235000017491 Bambusa tulda Nutrition 0.000 description 1
- 241001330002 Bambuseae Species 0.000 description 1
- 241001269238 Data Species 0.000 description 1
- 241000196324 Embryophyta Species 0.000 description 1
- 235000015334 Phyllostachys viridis Nutrition 0.000 description 1
- 101100285899 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) SSE2 gene Proteins 0.000 description 1
- 230000003213 activating effect Effects 0.000 description 1
- 125000002015 acyclic group Chemical group 0.000 description 1
- 239000000654 additive Substances 0.000 description 1
- 230000000996 additive effect Effects 0.000 description 1
- 238000004378 air conditioning Methods 0.000 description 1
- 230000003321 amplification Effects 0.000 description 1
- 230000003466 anti-cipated effect Effects 0.000 description 1
- 239000011425 bamboo Substances 0.000 description 1
- 238000005452 bending Methods 0.000 description 1
- 230000002457 bidirectional effect Effects 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 230000015556 catabolic process Effects 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 239000002537 cosmetic Substances 0.000 description 1
- 238000003066 decision tree Methods 0.000 description 1
- 238000005034 decoration Methods 0.000 description 1
- 230000007812 deficiency Effects 0.000 description 1
- 238000006731 degradation reaction Methods 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 230000008034 disappearance Effects 0.000 description 1
- 238000012850 discrimination method Methods 0.000 description 1
- 239000012636 effector Substances 0.000 description 1
- 230000007613 environmental effect Effects 0.000 description 1
- 230000004438 eyesight Effects 0.000 description 1
- 235000019688 fish Nutrition 0.000 description 1
- 230000012010 growth Effects 0.000 description 1
- 238000010438 heat treatment Methods 0.000 description 1
- 238000012615 high-resolution technique Methods 0.000 description 1
- 235000003642 hunger Nutrition 0.000 description 1
- 238000010191 image analysis Methods 0.000 description 1
- 230000001939 inductive effect Effects 0.000 description 1
- 238000011900 installation process Methods 0.000 description 1
- 230000002045 lasting effect Effects 0.000 description 1
- 230000033001 locomotion Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000007620 mathematical function Methods 0.000 description 1
- 238000005259 measurement Methods 0.000 description 1
- 238000000691 measurement method Methods 0.000 description 1
- 238000012011 method of payment Methods 0.000 description 1
- 238000002156 mixing Methods 0.000 description 1
- 239000000203 mixture Substances 0.000 description 1
- 239000003607 modifier Substances 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000008450 motivation Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- NJPPVKZQTLUDBO-UHFFFAOYSA-N novaluron Chemical compound C1=C(Cl)C(OC(F)(F)C(OC(F)(F)F)F)=CC=C1NC(=O)NC(=O)C1=C(F)C=CC=C1F NJPPVKZQTLUDBO-UHFFFAOYSA-N 0.000 description 1
- 238000010899 nucleation Methods 0.000 description 1
- 238000003199 nucleic acid amplification method Methods 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 230000001151 other effect Effects 0.000 description 1
- 230000008447 perception Effects 0.000 description 1
- 238000012805 post-processing Methods 0.000 description 1
- 238000002360 preparation method Methods 0.000 description 1
- 238000007639 printing Methods 0.000 description 1
- 239000013587 production medium Substances 0.000 description 1
- 230000001737 promoting effect Effects 0.000 description 1
- 238000012797 qualification Methods 0.000 description 1
- 238000003908 quality control method Methods 0.000 description 1
- 230000003716 rejuvenation Effects 0.000 description 1
- 230000010076 replication Effects 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 230000002441 reversible effect Effects 0.000 description 1
- 238000012552 review Methods 0.000 description 1
- 238000012216 screening Methods 0.000 description 1
- 238000007789 sealing Methods 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 230000037351 starvation Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
- 239000000126 substance Substances 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 230000002195 synergetic effect Effects 0.000 description 1
- 238000012384 transportation and delivery Methods 0.000 description 1
- 230000004304 visual acuity Effects 0.000 description 1
- XLYOFNOQVPJJNP-UHFFFAOYSA-N water Substances O XLYOFNOQVPJJNP-UHFFFAOYSA-N 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
- G06Q50/18—Legal services
- G06Q50/188—Electronic negotiation
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00094—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised record carriers
- G11B20/00115—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised record carriers wherein the record carrier stores a unique medium identifier
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00217—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
- G11B20/00231—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is obtained from a local external medium, e.g. a card
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00217—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
- G11B20/00246—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00217—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
- G11B20/00253—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/0042—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the copy protection scheme being related to a specific access protection standard
- G11B20/00449—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the copy protection scheme being related to a specific access protection standard content scrambling system [CSS]
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00731—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction
- G11B20/00818—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction wherein the usage restriction limits the signal quality, e.g. by low-pass filtering of audio signals or by reducing the resolution of video signals
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/00884—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a watermark, i.e. a barely perceptible transformation of the original data which can nevertheless be recognised by an algorithm
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
- H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/41—Structure of client; Structure of client peripherals
- H04N21/418—External card to be used in combination with the client device, e.g. for conditional access
- H04N21/4181—External card to be used in combination with the client device, e.g. for conditional access for conditional access
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/41—Structure of client; Structure of client peripherals
- H04N21/426—Internal components of the client ; Characteristics thereof
- H04N21/42646—Internal components of the client ; Characteristics thereof for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/432—Content retrieval operation from a local storage medium, e.g. hard-disk
- H04N21/4325—Content retrieval operation from a local storage medium, e.g. hard-disk by playing back content from the storage medium
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
- H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
- H04N21/4627—Rights management associated to the content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/81—Monomedia components thereof
- H04N21/8166—Monomedia components thereof involving executable data, e.g. software
- H04N21/8193—Monomedia components thereof involving executable data, e.g. software dedicated tools, e.g. video decoder software or IPMP tool
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
- H04N21/8358—Generation of protective data, e.g. certificates involving watermark
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/91—Television signal processing therefor
- H04N5/913—Television signal processing therefor for scrambling ; for copy protection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/60—Digital content management, e.g. content distribution
- H04L2209/606—Traitor tracing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/91—Television signal processing therefor
- H04N5/913—Television signal processing therefor for scrambling ; for copy protection
- H04N2005/91307—Television signal processing therefor for scrambling ; for copy protection by adding a copy protection signal to the video signal
- H04N2005/91342—Television signal processing therefor for scrambling ; for copy protection by adding a copy protection signal to the video signal the copy protection signal being an authentication signal
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/91—Television signal processing therefor
- H04N5/913—Television signal processing therefor for scrambling ; for copy protection
- H04N2005/91357—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal
- H04N2005/91364—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal the video signal being scrambled
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Multimedia (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Technology Law (AREA)
- Databases & Information Systems (AREA)
- Business, Economics & Management (AREA)
- Tourism & Hospitality (AREA)
- Computer Networks & Wireless Communication (AREA)
- Computer Hardware Design (AREA)
- Human Resources & Organizations (AREA)
- Health & Medical Sciences (AREA)
- Marketing (AREA)
- Primary Health Care (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Economics (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
- Storage Device Security (AREA)
Abstract
Technologies are disclosed to transfer responsibility and control over security from player makers to content authors by enabling integration of security logic and content. An exemplary optical disk (200) carries an encrypted digital video title combined with data processing operations (225) that implement the titles security policies and decryption processes. Player devices include a processing environment (e.g., a real-time virtual machine), which plays content by interpreting its processing operations. Players also provide procedure calls to enable content code to load data from media, perform network communications, determine playback environment configurations (225), access secure non-volatile storage, submit data to CODECs for output (250), and/or perform cryptographic operations. Content can insert forensic watermarks in decoded output for tracing pirate copies. If pirates compromise a player or title, future content can be mastered with security features that, for example, block the attack, revoke pirated media, or use native code to correct player vulnerabilities.
Description
Technical field
The application's case relates generally to the distribution of protection digital content and other data, prevents pirate and other undelegated use or distribution again.
Background technology
Propose a variety of systems and protected digital content.Most described schemes avoid undelegatedly using and duplicating to protect it when it being stored on the medium or sending via the communication channel of non-trusted to content-encrypt.Then decipherment algorithm and key are by being managed with the tamper-resistant software or the hardware module of the trusted of carrying out access control rule (it can be fixing or configurable) through design, and how described access control rule regulation can use described content.
The content protecting scheme normally customizes at specific playback environment.For example, the security benefit that lacks tamper resistant hardware for the anti-piracy system in the pure software stream content player of personal computer design, but it can upgrade usually more conveniently (for example, if the user unloads player and from manufacturer's website down loading updating version).Therefore, described system provides more insecure security than hardware based player, but because can be by revising content stream and requiring its software of customer upgrade to use the security features of upgrading, so the consequence of attacking is less relatively.
On the contrary, the guard method that is embedded in the consumer electronics hardware unit of playing optical media is difficult to upgrade as everyone knows.The security challenge comprises: the long-life of optical media (it has stoped is not the security upgrade of back compatible), lack renewal is passed to the convenient of player and mode and lack the standardization of player between implementing reliably.Expect that with the consumer that long-life and all novel teachings of replay device are play these difficulties that combine make that introducing security upgrades are extremely difficult on old player.Thereby most consumer electronic devices provide seldom protection or do not provide real protection to prevent to duplicate, and the minority content protecting standard of using in consumer electronic device usually provides simple, the inflexible scheme of less dirigibility and renewable property.Fig. 1 illustrates the representative content protection system of background technology.Content player 100 is included in the software in the non-volatile program storage 105, and it implements security strategy 110, decrypted code 120 and the player keys 130 of player.Whether this code and key use the content that reads from medium 150 with checking effective by processor 140, and if effectively, be provided to output interface 160 to contents decryption and with the result so.The example of the protection system among the similar Fig. 1 of being illustrated in comprises: the CPPM scheme of duplicating controlling schemes, upsetting system (CSS) and proposing for protection DVD audio frequency in order to the content of protection DVD video that is used for digital audiotape.
Known multiple different technologies in background technology:
Access control policy: known a variety of access strategies and the method that is used to stipulate described strategy in background technology.For example, the security system for software of the 4th, 658, of Hellman No. 093 United States Patent (USP) has used a kind of categorical authorization code by publisher's issue.On the contrary, people's such as Ginter the 5th, 982, No. 891 United States Patent (USP)s have been described the multiple very complicated access rule that relates to a large amount of participants.Such as PolicyMaker and X.509 the standard (being used to cooperate distribution of contents and other to use together uses) that is used for access strategy coding of certificate format also propose.
Antivirus software: known the method that is used to detect and stop known viruse, trojan-horse program and other malicious code in background technology.These methods relate generally to the attribute such as known instruction sequence of scanning known viruse.These programs can adopt multiple mode to work, such as scanning document between the starting period, in real time (on-the-fly) scanning document, scanning sequence, swept memory, new medium, the scan for networks of scanning are communicated by letter or the like when program is carried out.
Content protective system and DRM: proposed a variety of content protective systems (it is also sometimes referred to as Digital Right Management (DRM) system).The DRM system of background technology provides substantially with the form distributing contents of encrypting, and then decruption key is provided or carries out decrypt operation for legal buyer.Proposed among the commercial DRM or comprised many features; comprise and support supper-distribution (content of encryption can exchange) between the user; pay-per-view charging (the off-line pay-per-view that comprises the report (reporting) that has via telephone wire); variable rate is (based on sales promotion; the quantity or the duration of using; the requesting users operation; user's history or the like is collected different expenses); protect various data type (audio frequency; video; text; software; or the like); support various forms and support that various replay device types are (portable; the top set formula; has the auxiliary computer based of hardware; pure software, or the like).
Copy protection: the method that is used for the copy protection personal computer software is known and software that extensively apply to some kind, such as computer game.These methods relate generally to software program is tied to physical medium through being designed to be difficult to duplicate (for example, by incorporating the wrong or off-gauge formatting that is difficult to duplicate wittingly into).Other copy-protection system relates to (for example) and protects installation process by requiring the user to obtain authorization code from server.In some cases, the copy protection characteristic Design is in system.Under other situation, (comprise the copy-protection system that is used for computer software, video-tape and audio frequency CD); copy protection is implemented by the medium that generation has non-standard coding, and described non-standard coding allows to reset on most players but the majority of meeting interference replica medium is attempted.The main design challenge of copy-protection system is to minimize influence to validated user (meaning is promptly obtained higher playability and customer's approval degree) to prevent to move improperly (meaning is promptly obtained good security) simultaneously as far as possible effectively.
Cipher function: a variety of basic cipher function that comprises block encryption, hash function, digital signature system (with other open key system), key management system or the like is known.About the cryptographic more information on basis, (AppliedCryptography) referring to Bruce Schneier " applied cryptography ".
Password enlightenment device: use block encryption or other cipher function, might construct to the password conversion of the outside input messages application secret that provides and " the password enlightenment device " of return results arbitrarily.Can enlighten the key that assailant that device constructs algorithm that make to understand the enlightenment device and agreement can't judge the enlightenment device with calculation mode to password.In addition, because (for example, reach 2 for enlightenment device by 256-position block encryption structure to the quantity of the possible input of enlightenment device is can be very big
256), so impossible prediction of assailant or precomputation are to the response of random challenge.
Interpreter, emulator and virtual machine: multiple explanation type computerese is known in background technology.Some interpreted languages such as Java requires a compilation process source code is converted to executable or explainable form.On the contrary, most BASIC interpreters are directly operated source code.Some interpreters allows from revising code, and other do not allow.The technology that is used for implementing interpreter and being used for the emulation assembly language also is known in background technology.For example, can on Apple Mac computing machine, operate to the program of MicrosoftWindows design such as the emulator of the complexity of Virtual PC and SoftWindows.Such as those virtual machine (VM) designs that are used for Java and JavaCard is known, and VM can also be known with local code (native code) reciprocation on the computing machine or other VM function that is invoked in the different memory space.(many Java implement to provide these abilities.) interpreted languages generally is used for application program or requires under the occasion of cross-platform compatibility, such as being used to create the device driver form that is independent of processor.(for example, referring to Writing FCode2.x Programs, Sun Microsystems, 1993, the 5 pages.)
Key management: proposed to be used to distribute a variety of method known devices with the administrator password compiled key to have device has been specific key, group key, public-key cryptography, private key, certificate, or the like.Key can be assigned to individual device, selected device group (for example, as described at the 5th, 592, No. 552 United States Patent (USP)s of Fiat), all devices, or the like.Device can comprise the key of number of different types, comprises symmetric key, public-key cryptography (for example, in order to certification of proof and digital signature) and asymmetric private key.
Medium: the known medium technique that great memory capacity, low manufacturing cost and favorable durability are provided.The example of current media technology comprises CD (CD, DVD, or the like), magnetic medium, flash memory and ROM.More novel technology such as holographic memory is also being developed.Known monolithic medium can comprise many data of different types.For example, compact disk (compact disc) can comprise standard Red Book (Red Book) audio frequency song and be used for data session (for example, what comprise software, compression gives song, image, video, the lyrics as an addition, or the like) on the personal computer.The compact disk that is used for personal computer can comprise the content and the required playback software of play content of encryption.
Network service: the data network that comprises the complexity of the Internet is known.These networks can provide flexibly, reliably, the data communication of high bandwidth.Generally provide higher bandwidth although have the network of physical connection, radio communication channel also is popular.
Renewable security: in some cases, the security system that can prevent all possible attack that gives one's hand is unpractiaca.Therefore, need might upgrade security after under attack, (for example) is by ending any key that has leaked of use and correcting weakness.Although renewable security is desirable, many systems that used and proposed lack any efficient recovery mechanism of attacking at many kinds.
The sandbox technology: the sandbox technology relates in program can not carry out software program for execution in the controlled environment of any operation that damages system.Java " virtual machine " supports the sandbox technology, the feasible small routine (applet) (downloading via the Internet such as those) that can carry out non-trusted.
Security module: many security systems are used the extraction-type security modules, make security upgrade to carry out under the situation of the other parts of the replacement system that needn't require great effort with spending.For example, the extraction-type security module is used for many pay television systems.
Software upgrading: the software upgrading that the software upgrading of safety can be by receive proposing, the digital signature of the described renewal of check checking or message authentication code, then (if signature effectively) carry out renewal and carry out.For example, the known digital audio player can receive code update, check about the digital signature upgraded or message authentication code also (if effectively) upgrade its code.It also is known being used to guarantee to upgrade and be used for from the method for renewal recovery failure or unsuccessful (for example, by being returned to last software version or recovering code by activating special use) with correct order (for example, using sequence counter) application.Software upgrading can be in fact via transmitting also for known such as a variety of distribution mechanisms of the Internet, optical media, ROM cartridge or the like.Software upgrading has been used for preventing pay TV piracy by code update is distributed to descrambler with signal, and these upgrade and generally are used for by forbidding or even destroy undelegated descrambler and prevent undelegated watching the code that described descrambler is used and successful execution is new with the correct decruption key that calculates next video segment.
Steganography (Steganography): Steganography relates to Information hiding in data.For example, knownly enciphered data can be placed the least significant bit (LSB) of image or recording.Because low-order bit generally is revealed as at random, and do not having to be different from random data under the situation of key, so obtain this image or recording but do not know the assailant of decruption key even can not judge whether there is any hiding data by the ciphertext that strong cipher algorithms produces.
Anti-tamper: known many methods that are used to design and construct the anti-device of attacking.Tamper resistant hardware is used for generally preventing that the assailant from carrying out reverse-engineering to device or extracting the system of key from crypto module.For example, Wave Systems sells the anti-tamper integrated circuit (IC) products based on microprocessor be called as " Embassy ", and described product can with content player or multi-purpose computer be integrated and can be used for protecting the safety of digital content distribution according to propaganda.The method that is used to implement tamper-resistant software also proposes (for example, referring to the 5th, 892, No. 899 United States Patent (USP)s of people such as Aucsmith.)
The rebel follows the trail of: proposed rebel's tracing scheme, the key that is used for unauthorized device by tracking dates back to the specific device of consumer or the device that has leaked and comes the source of identified leakage or attack usually.
Digital watermark: watermark is to be embedded in can be detected by specific detectors but do not influence the signal of (or minimum influence) people to the perception of content when playing in the content.Be embedded in picture, recording and the image watermark by the copyright holder be used in reference to give instructions in reply be made as undelegated.The watermark of " firmly " is known bears the conversion (comprising from simulation output record again) between the form and provides in various degree security at the attack of attempting to remove watermark.On the contrary, the watermark of " fragility " has less or does not bear the ability of format conversion, but is easier to design and can carries more information.
Although there is not anti-piracy system can fully prevent all possible attack; but the system of background technology can not provide the actual solution that can deal with problems, and described problem is the accidental copy right piracy of protected form not such as using numeral to disassemble at a high speed to digital copy or with protected form.The significant restriction of many systems of background technology comprises (unrestriction):
It is secret to depend on the overall situation: many protection systems require decode required De Mi Ba algorithm, key and out of Memory keeps secret.Therefore, decode procedure can't be recorded in the open normative document and the security that does not endanger system.Equally, if there is a large amount of enforcement, the assailant can destroy whole proposal potentially by attacking the weakest enforcement so.(this kind attack has taken place in DVD video protection system recently.) though in the described system single dealer environment that can be used for sealing, it can not standardization and effective long-term safety is not provided.
Lack standardization: content publisher has hankered after incompatible several data form and decipherment algorithm.The different content protection system makes can use different commerce model, and the publisher that has hankered after a model opposes the security system of the different models of any requirement probably.
Incompatible with product type: many security features can not combine with all product point types.For example, the Downloadable pure software player that is used for personal computer can not comprise tamper resistant hardware similarly, and frequent software upgrading is difficult to pass to the player that does not have the Internet to connect.
User interface: many proposals relate to complicated user interface.Security should be sightless for the user of honesty.The user refuses to require the scheme (for example, obtaining or import authorization code) of clear and definite user's participation possibly.Generally speaking, consumer electronic device such as automobile audio and VDisc player must be easy to use, because must make many users satisfied, even they do not read explanation document, disagreeable technical matters, have relatively poor eyesight or other defective or be unfamiliar with the language that player is supported.
The law challenge: some security system requires the cooperation between the rival.Owing to anti-trust legislation, described cooperation can be illegal.
Manufacturer can not get interests: manufacturer will oppose can increase player cost, Time To Market (time-to-market), prevent to comprise legal feature or otherwise make the more ineffective or more unfavorable security features of its product.Although the progress of semiconductor technology is reducing the required cost of realization security system, design is also produced effective tamper resistant hardware and still is difficulty and expensive.Therefore, relying on the good content protective system of implementing of manufacturer's production will fail, unless it provides the real market advantage to the safer manufacturer of product supplied (offering).
Uncertain security policies: effectively security system must be given for and judge it is rule or other decision process that does not allow or stop the specific action that the user asks.In many systems, these rules or process are not stipulated well.
Inflexible security policies: the dirigibility that content protective system has the different mode of supporting to be used for different publishers, content type, scope, playback environment or the like is desirable.System should provide necessary dirigibility and not become too complicated.
Weak long-term safety: what security system must be enough knows that firmly seldom can continue use as the part of senior class (high-profile) form with the content protective system that keeps permanently effective background technology flexibly surpasses in a few years, surpasses 30 years and popular form is sustainable.
The not trackability of attacking: really take place if attack, system should discern the source of attack so, so that revocable device and prosecution criminal of leaking (or misuse).
Summary of the invention
The application relate to one can adopt on a variety of intercommunity platforms, provide flexibly and the mode of renewable content protecting and implement can standardized content protective system various embodiment and aspect.Described system is that participant (manufacturer, publisher, artist and/or consumer, or the like) provides the incomparable dirigibility when making about security and functional decision.
The one exemplary player that can use with described system (meaning promptly, one wish shielded contents decryption or otherwise visit its device) comprises some assemblies.First is one such as data that are used for a CD drive or medium input interface.Be initial playback, player is written into the sequence of data processing command and uses an interpreter or other execution module begins to carry out these orders from described input interface.This execution environment preferably provides figure spirit integrality language (Turing-completelanguage) (can carry out the language of storer, user interface and the performance limitations of any algorithm, obedience player).From described execution environment, described content can be inquired about described player and be carried out crypto-operation with the configuration of judging playback environment and the key that uses described player.Therefore can design that making resets will be only carries out providing to inquiry on the player of satisfied response to content.Publisher also can provide conditional playback.For example, more unsafe platform can provide the stereo audio of CD Quality or the image of conventional sharpness, and safer platform can provide more voice-grade channel, high-definition image, higher sampling rate and higher-quality compression.Even after the beginning of resetting, playback can keep the data processing command control by content.One one exemplary embodiment comprises firm, the ability of the watermark processing of (on-the-fly) in fact in real time of carrying out.Allow which data area of the controls playing of content own make by have select between the output data version of minute differences and in output embedding information become possibility.Date back to a concrete player by analyzing the traceable pirate copies of these difference.
Because described content comprises and puts teeth in its oneself security strategy, so the attack that occurs can be dealt with by designing the concurrent new content that is furnished with resistibility.Also allow to support artistical preference, regionality " rationally to use " and stipulate by the dirigibility that allows content to put teeth in its own security strategy to provide, or the like.New player feature can easily increase by the player function that increases new content addressable (content-accessible).
From a business perspective, any can be used for, united commerce and the performance constraint that content protective system under the common objective of the security that maximum possible is provided need accord with described publisher and manufacturer with content publisher and consumer electronics manufacturer.System disclosed herein allows publisher to judge its own safety requirements, then allow content itself to implement to consider also judgement (or how) strategy of playing whether of multiple factor in each environment.Equally, can encourage manufacturer's design good safety can be provided and not promote pirate product, make its consumer can contact the most extensive possible content.
Description of drawings
Fig. 1 shows the media player of the content protecting method that uses background technology.
Fig. 2 illustrates the exemplary media player of the content protecting method that uses this paper announcement.
Fig. 3 illustrates the decryption portion of an one exemplary embodiment.
Fig. 4 explanation is used under the situation of the code signature office that does not need to concentrate protection to an one exemplary embodiment of the player method of the visit of nonvolatile memory.
The exemplary authentication process of Fig. 5 explanation when being attached to the nonvolatile memory slot.
Embodiment
Fig. 2 shows an one exemplary embodiment of the player that uses physical medium 200.Playback procedure is by controlling by the processor 210 of media interface 205 access mediums 200.When installation medium 200 (for example, when it being inserted first or reinitialize system, or the like), processor 210 with the initial media interface, read the catalogue (table of contents) of medium and recognize the protection system of being supported and begin.If processor is written into the less initial part of medium 200 in execution and the data RAM 220 like this, so.
Loaded part continues by the invocation of procedure that is provided by interpreter 215 is provided.Although the primary data that is written among the RAM 220 can be less relatively, the code that runs on the interpreter 215 can be written into extra data (comprising code) from medium by the invocation of procedure, thereby allows to carry out more complex calculations.
Other invocation of procedure allows content to judge playback environment configurations 225.Therefore content can be analyzed playback environment feature (for example, player types, requesting users action, or the like) and judge whether playback should continue.In an one exemplary embodiment,, can handle these problems so if detect corrigible problem (for example) if medium comprise the security firmware upgrade that is used for player.If support, content also can be inquired about output interface 250 and (if support) target program/device 260 (for example so, amplifier, digital loudspeaker, speaker drive program, or the like) to check security features, (for example to be written into Cryptographic key, regulation output parameter, if security is uncertain, stipulate the output quality of reduction so), or the like.
In an one exemplary embodiment, but also password for inquiry enlightenment device 230 of content, and it may be implemented in the outside extraction-type security module 235 (such as smart card, or the like) to allow the secure hardware upgrading.The enlightenment device also may be implemented in other hardware in (unrestriction) processor 210, the player, medium, such as in attachment device of loudspeaker or the like.Password enlightenment device 230 can offer the evidence verified of content about the player identity.Result to 230 inquiries of enlightenment device can be used for interior perhaps code section is subsequently deciphered, thereby provides the player that does not have effective key (or key is cancelled) can not the strong encryption of contents decryption be guaranteed.
In an one exemplary embodiment, interpreter is carried out the data processing command by the content defined in " sandbox ", means content and can not contact password secret (such as enlightenment device key), the safety that it originally may endanger player.Be under the trustworthy situation in all the elements not necessarily, the sandbox technology is useful.For example, the assailant can manage to produce the hostile content of attempting to extract from player the Cryptographic key.(hereinafter provide extraneous information about exemplary password enlightenment device and operation thereof.)
If content judge to reset and should not continue (for example, if the user attempts to duplicate and content be configured to forbid duplicating), but content reporting errors and the refusal action of being asked so.Perhaps, reproduction of content may command and/or output procedure make the quality of undelegated copy reduce, and therefore have than low attractive force to reduce the quality of output.
If content judge to be reset and should be continued, content waits that reset from the regulation of player should be from the signal of the ad-hoc location on the medium (for example, specific track) beginning so.Interpreter 215 uses the data processing instructions that is written in execution/data RAM 220 when installation medium to handle request.Should continue if content decision is reset, its use is called with control media interface 205 and is begun the content that appropriate location from the medium 200 is written into encryption so.Content provided is used for the effective decruption key and the parameter of piece deciphering module 240, and described deciphering module 240 is from the content of RAM 220 (perhaps, directly from media interface 205) retrieval encryption and with its deciphering.Content through deciphering then is provided to output interface 205, and it converts described content to and is suitable for target program or installs 260 analog or digital form.Along with reset continuing, the data processing instructions of being handled by interpreter 215 can be written into the new block that new deciphering parameter, regulation will read from medium 200, or the like.When playback was finished, content can reinitialize RAM 220.
Provide with the lower part about interpreter, playback system and other embodiment and aspect extraneous information.
Respond and attack
The anti-piracy system that extensively is implemented in software and the low-cost consumer electronic device can not prevent all possible attack.Technology disclosed herein is used in back under attack and promotes to stop existing mode of attacking to make new content in fact.Though professional piracy person can manage constantly to seek and install new avoidance system, accidental piracy will be referred to constantly strive for exploitation and safeguards attack tool, and therefore will be hopeful than only buying content difficulty more legally.Describe the technology that how will disclose herein with the lower part and be used to handle some common attack.
First kind of attack relates to attempts to use the player that does not leak to carry out undelegated action.For example, can make content duplicates from copy to allow to duplicate but not allow from original media.If attempt from copy duplicate described content (content can (for example) by detect the modification of during reproduction process, inserting or by the sequence number of current media and/or type and original media comparison are discerned this situation), interpreter code can stop playback so.Perhaps, interpreter can allow with the fidelity play content that reduces (such as, even it is available having the multi-channel audio of higher sample rate, but still play stereo audio with 44.1 kilo hertzs of sampling rates) or come play content by inserting extra anti-pirate warning.Therefore, be provided to the information of interpreter, on the player that does not leak, can detect and handle unsuitable user's request by analysis.
Second kind of attack relates to the leakage of the Cryptographic key of player.If the Cryptographic key of player leaks, the assailant can enlighten device and (looking situation) by emulation cipher the playback environment that (at least in theory) emulation has fully been leaked to responding about the falseness of the inquiry of playback environment is provided so.After being subjected to described attack, at least one Cryptographic key in the device that security can require not to be provided in to have leaked by the explanation type code that makes in the following content rebulids.If specific player model or manufacturer are the sources (for example, because player implements to have inadequate security) of many attacks, publisher can produce the content that can't play (or will play with the quality that reduces) on described platform so.
The third attack relates to leaks the one group of theme that perhaps comprises similar interpreter security code in specific a section.Can be potentially by revising content itself to avoid safety inspection or to initiate described attack with the malice interpreter (malicious interpreter) of playing target topic by producing through customization.Described attack can be dealt with by utilization difference or better protection software in following content.
The 4th kind of attack relates to content copied as not shielded form from protected media, then distributes described content again with format.There is not content protective system can fully prevent described attack; but technology of Jie Shiing and system provide and can be used for following the trail of one and leak and date back to powerful, the watermark ability flexibly of specific device herein, follow revocable described specific device to prevent following the attack.Because uploading content is less relatively to carry out pirate number of users on one's own initiative, so copy right piracy can reduce significantly by the player of discerning and cancelling these users.Can in deciphering output, introduce imperceptible difference by the some parts that optionally skips over ciphertext.For example, in an one exemplary embodiment, content can decipher and export first ciphertext part, then skip over second ciphertext part and watermark " zero " position by the deciphering module of controls playing device.Be watermark " " position, the described module of content may command skips over first ciphertext part and exports the second ciphertext part.By to a series of institutes rhemes coding, but the content watermark has the available any data of interpreter code, comprises (unrestrictedly) player identity, crypto-operation result, user action description, output unit information or the like.If found the pirate copies of content, can analyze to follow the trail of illegal copies watermark so and date back to single player, then can in following contents version, cancel described player.Because might prove definitely that specific copy is derived from specific player, so this ability also is applicable to law enforcement and evidence obtaining purposes.Can be frightened resistance owing to know it may be identified, catch and prosecute because consider to make the people of illegal copies, also be can be used for suppressing pirate so be used to follow the trail of the feature of copy.
Certainly, there is not consumer's easy-to-use (consumer-friendly) anti-piracy system can prevent all possible attack in all environment reliably.For example, can be from simulation output record Voice ﹠ Video.Even (watermark is embedded in the content, is available but there is not the register of watermark detector.) then can be made in again on the new numeral or analog media from the data of simulation output intercepting and capturing, and under the situation that does not have original security features, distributed again.Similarly, can not detect by player, but technology that discloses herein and system can help prevent the medium clone by copy with professional piracy person's manufacturing of making the required equipment of accurate media copy.For example, the disc manufacturer identifier on the medium can not cheated by the bootlegger to guarantee reproduction facilities honest or carelessness by Content inspection.Media-type identifier can prevent that the content of selling from being distributed on recordable media again on read-only medium.For the player with the Internet, telephone/modem or other network support, content can (for example) be obtained discriminating to verify that medium are effective from server before reset (or resetting first).Have the player of nonvolatile memory even can store the form that is known as bad medium sequence number, content and/or player can be inquired about described form to judge whether medium cancel.
Inquiry and control playback environment
Can be configured to determine whether it can allow itself decoded content.Make this decision for assisting, player can offer the information of content about playback environment.Although very finite information (such as action and the player model that the user asked) can be enough under many situations, need more in detail and information accurately, make whether content can should continue and make more comprehensively assessment at resetting.Depend on that player implements although offer the specifying information of content and ability, hereinafter described some exemplary functionality and ability that (unrestrictedly) can be provided to content.Should note, for by the assembly of a plurality of connections (such as output unit, operating system device driver, the security module of output port, connection, or the like) player of structure, the major part that can be the device of these connections and comprise the player of interpreter provides some or all following information.
Safe support information: safety standard version, the query function of being supported and/or security module constituent element (alternative hardware, the hardware of embedding, renewable firmware, ROM firmware, PC software, or the like), or the like.(hereinafter discuss the exemplary Cipher Processing function and the control/decipher function of resetting in detail.)
Manufacturer's information: title, identifier, website, public-key cryptography/certificate, make batch, build date/time, fabrication region, manufacturing country, manufacturer address, technical support contact details and/or manufacturer's guarantee information, or the like.
Device information: production line, sequence number, pattern number, firmware/software versions, device public-key cryptography/certificates identified symbol, GPS position or other physical location/zone, the coder-decoder type of supporting content (content supported), web/the Internet support information, the network address, device telephone number, IP address, watermark support, interpreter performance rate, safety certification grade, device dealer, device retailer, device constituent element and/or safety standard, or the like.
User profile: user name, geographic area, country, address, GPS position or other physical location/zone/country/or the like, subscriber directory number, IP address, e-mail address, network address, first-selected language, tolerance, first-selected method of payment/account number, payment restriction, buy history and/or privacy preference to disputable material, or the like.
Medium control: inquiry media formats (recordable to can not write down), medium sequence number, pen recorder type, the pen recorder owner, pen recorder sequence number, pen recorder safety information and/or pen recorder watermark check ability, or the like.Function also can allow to read, write medium, format medium, test media and/or eject medium from medium, or the like.Extra function can provide the application of other special ability of supporting to cipher function or by specific media format.
The requesting users operation: for example, play, write down, change into new form, be loaded into mancarried device, make first copy, make a plurality of copies and/or while play-/ record, or the like.It is initial or revise the ability of institute's requested operation also can to give content.
Output information: about the information of device, output data form and/or output data quality/resolution of output port, output port configuration, output port security features, connection or the like.If support, content can directly be inquired about output unit obtaining extraneous information and/or the request Password Operations about device, or the like.Player also can allow these parameters of content modification, for example, if security is relatively poor, the then output of definite quality reduction.
Environment: the identity/hashed value of the program of other operation and device driver/version on the platform; The interior perhaps hashed value of storer; The version of mounted attack detection module; The result that system scan is attacked and/or distort the state of detecting device, or the like.These functions also can allow the content modification storer, for example, correct the security vulnerabilities in other program.
Time: the clock period counting of date, time, time zone, disappearance, the time since resetting last time, the time since making, the time since security upgrade last time, the time since changing battery last time and/or battery are estimated residual life, or the like.
Connectivity: judge the player communication capacity, check current connection status, set up network connect by, set up that modulator-demodular unit connects, regulation is set up critical conditions, inspection/regulation connection safety feature, transmission data that network connects, receive data, close connect and/or make connect idle, or the like.
User interface: explicit user message, show the available user interface control of the lyrics, display graphics image, printing curve image, display ads/promotional messages, identification, obtain user's input, use the voice operation demonstrator of player to come the user is play voice and/or reporting errors, or the like.
Watermark control: selects content area to be exported, select outside watermarking algorithm, control outside watermark detector and/or check mark detecting device (mark detector) state, or the like.
Other: player/playback status information, pay-per-view (for example charge control; source of fund based on player), fault processing, playback stop, protection nonvolatile memory support (seeing below), the firmware update of application plays device and/or call external module (such as dynamic link library), or the like.
Be the task of interoperability between guaranteeing to implement (for example, making content to play a role effectively in content is initial after publishing designed player environment) and simplification editing safety content, some standardization of function and parameter is useful.Standardization is especially useful for the product of multiple different manufacturers wherein can provide the function of the information of same type or operation.For example, but standardization be used for allowing content judge the player constituent element (home audio/video, portable, automobile is used, pure personal computer software, have hardware auxiliary personal computer software, professional studio, movie theatre, or the like) function and respond code.Standardized additional benefit is, prevented that manufacturer from managing by reporting that with the inapprehensible noncanonical format of the content that is pre-existing in relevant (risk-related) information of relevant risk avoids security control.
Certainly, also can be configured to allow manufacturer to increase the entitlement function, use for the content producer of selecting it for use to system.The ability that increases new function for hope increases new feature for its product manufacturer is especially valuable, because they can increase these features, sets up the commercial relations of cooperation to support described feature with content publisher then.Can easily expand described embodiment, (optionally) keeps back compatible simultaneously.
Manufacturer is responsible for providing information accurately to content.Though the accuracy that content generally can not its most of information that received of Direct Test has in manufacturer under the situation of the strong motivation of guaranteeing that this information is correct, this is not strictly essential.For instance, publisher can prevent that its following content from playing on the product of being made by the manufacturer of disrepute.
Although that player can be for the information that offers content provides password to differentiate is useful (for example, by the digital signature that comprises that player that use has authenticated or manufacturer's key are issued), described discriminating is not for compulsory for most data.For system via non-trusted interface potentially and the other parts or the output unit (such as the digital loudspeaker that requires high-quality digital audio-frequency data) that connect, password is differentiated even more important, so that can detect and avoid imitating the malicious device that is subjected to T unit.
Cipher Processing
Except that the information that provides a description playback environment, exemplary player is also implemented the crypto-operation that can be called by content.These computings can have the behavior of similar password enlightenment device, thereby allow content that input data (for example, the 64-position is block expressly) are provided, and return the result of cryptographic calculations.In an one exemplary embodiment, the input of cryptographic calculations comprises the input data of at least one key (it is worth general the unknown and content can't be visited) and content provided.
Below for can offer content be used to comprise that (unrestriction) differentiate the example (unrestriction) of the cryptographic primitives (cryptographic primitive) of playback environment, export content decruption key or the like purposes:
Block encryption enlightenment device: the enlightenment device use privacy key to input message encryption (or deciphering) thus produce ciphertext (or expressly) result.
Hash function enlightenment device: use privacy key to come that input message is carried out hash usually and handle (for example using algorithm) to bear results such as HMAC-SHA.
Digital signature enlightenment device: use secret (individual) key that input message is carried out digital signature to bear results.Described function also can provide public-key cryptography and its certificate to content.
The random digit generator: the random digit generator can offer the uncertain information of content, and (for example) is to be used for preventing the answer attack of online connection.
Mathematical function: can provide the background mathematics computing with its computation process of help content optimization.For instance, optimized mould multiplication or exponential function can use RSA Algorithm with the 4th, 405, No. 829 United States Patent (USP)s carrying out people such as Rivest by content, to produce and check digit signature and to message encryption and deciphering.
Optimized cryptographic primitives: the optimization of standard cipher algorithm implements can help to improve performance.These computings can be used for helping the data block is decrypted or hash is handled, and described block comprises the regional of (unrestrictedly) interpreter code space or the section of the content that is written into from medium.
Deciphering control: authorize if content is judged to reset, interpreter code can use the correct decruption key of each contents fragment to come the initialization content decryption module so.In addition, interpreter code can stipulate to answer content part (for example, inserting with the real-time watermark that allows playback duration) reproduced or that skip over.For guarantee interpreter and between the content of the medium stream synchronously, key changes (or the zone that skips over) can be predesignated, then by the signal triggering in the content.For instance, an one exemplary embodiment can allow content provided when in ciphertext, occurring, trigger the value of the 64-position that key changes, after key changes with ciphertext byte number that skips over and the new key value that will use.
Key management: these functions allow content to judge which key is that player is known.
The password of not incorporating stray parameter or other described variable data in computing into enlightens in the one exemplary embodiment of device, can be configured so that can calculate the expected results (for example, when making content) of specific input in advance system.Therefore publisher can plan that described content to submit the input through selecting to the enlightenment device, then checks expected result to be acquired.The malice player that lacks the Cryptographic key of mandate can not calculate correct enlightenment device and respond.Because the quantity of possible enlightenment device input is huge (for example, the enlightenment device of block encryption that has 128 block size for use is 2128), thus the assailant calculate in advance or store the result that might inquire about be actually infeasible.
Except that the effective player of checking, password enlightenment device also can be used for discerning invalid player.For instance, if the key that extracts from legitimate player is used to undelegated purposes, can makes content so and make it will refuse on the player that comprises reversed enlightenment device, to play.Because content will not play in the absence of effective key, so undelegated player must comprise the key of stealing.Yet by using these keys of stealing, undelegated device is exposed to its state the fresh content of recognizing leakage.
A variety of methods can be used for incorporating into enlightenment device result or check whether specific enlightenment device query response is effective.The simplest method is the comparison of only execution and desired value.Because as if this can (at least in theory) avoided by the interpreter that shows as all malice of more all mate designs, so content can comprise can fail " vacation " comparison or through designing to defeat other described test of malice interpreter of expection.Enlightenment device itself also can be used for decrypted code or code is revised in influence certainly.For instance, the input of enlightenment device can be the encryption version of the code of wanting.Depend on its configuration, described enlightenment device therefore allow content publisher with its only be included in can media codes by the subclass deciphering of player of authorizing or player on, thereby help to make potential assailant can not obtain the code of content.The another way of using the enlightenment device is for using its output as the Cryptographic key or use it with key derivation.These keys can be followed (for example) and be used for decrypted code, content, other key or any other data.This flexibly decryption capabilities be used in the content and implement a variety of agreements and strategy.For instance, if player has the key of enough classification, can plan to use scheme such as the method for Fiat and Naor content so (referring to " broadcast enciphering (BroadcastEncryption) " of A.Fiat and M.Naor, Advances in Cryptology, editor Douglas Stinson, the 480th page; Springer Verlag, 1993).Optionally even can implement the access control system (certainly, prerequisite provides essential user interface, network, data-carrier store and cipher function for player) of the complexity described in the 5th, 982, No. 891 United States Patent (USP)s such as people such as Ginter.
For making content, it is right that publisher can have benefited from visiting the I/O of enlightenment device.Under the situation of enlightenment device use such as the private key of the asymmetrical cryptosystem of RSA, publisher obtains public-key cryptography simply and uses it to enlighten device with the inverse operation of carrying out the computing of enlightenment device for the symmetry of using block encryption to be constructed, and player manufacturer can be the inverse operation that the symmetry enlightenment device that is provided in each player calculates in publisher.For instance, if player enlightenment device uses the block encryption deciphering to have the 256-bit data block of a privacy key, manufacturer can offer the visit of publisher to the encryption function of correspondence so.Because the visit to contrary enlightenment device does not allow to leak the enlightenment device, so manufacturer can (for example) use SSL to provide contrary enlightenment device to calculate via the addressable webserver of the public.Manufacturer also can offer the output of publisher from the enlightenment device input of selecting at random.Although (manufacturer can provide actual enlightenment device function as implementing to publisher in player, these functions can be misapplied the unauthorized player in the constructive simulation legitimate player potentially.)
Be used for encryption key distribution is depended on specific embodiment and Security Target to the concrete grammar of player and manufacturer.For instance, in an one exemplary embodiment, player has been assigned with multiple symmetric cryptography enlightenment device key, comprises (unrestrictedly): the player symmetric key of selecting at random from the global pool (puppet) greatly of described key; The player specific symmetric keys that generates at random by manufacturer's (puppet); To manufacturer, player model or the like is unique symmetric key; And/or differentiate that player does not have the symmetric key of special characteristic (for example, not made by particular manufacturer).In this one exemplary embodiment, which key is content can discern by the independent function that calls the tabulation that can return the key of supporting is implemented in the player.Player also can comprise asymmetric key.For instance, in an exemplary embodiment, player has: the player special use open/private key is right; The player certificate of issuing by the public-key cryptography of the private key signature player of manufacturer by using manufacturer; Certificate by root key licence issuing authority (the root key issuing authority) issue of the public-key cryptography of checking manufacturer; The public-key cryptography (seeing below) of request that is used for the secure storage section of authentication-access player; And/or be used to verify the public-key cryptography that player firmware is upgraded.
In relating to the infrastructure of a plurality of player manufacturer, make the key of one or more central management organization and administration players, manufacturer or the like can be helpful.Central management person also can help to force to carry out minimum safety standard, guarantee player to content code provide information, the key (making its product can play old content) that is preserved for novel mfg, tracking leakage accurately key, be that content publisher carries out the computing of password enlightenment device, or the like.
The safe storage sum counter
The storer that can be used for content is generally volatibility, thereby offers content " clean " execution environment when the content each run.Yet for some feature, content can the storage data be useful between playing and between theme.For addressing this need, player can offer content be used for the state of between playing, keeping safety, nonvolatile memory.Described storer can require extra safeguard protection to guarantee the having only explanation type code of mandate can read or revise nonvolatile memory contents.The safety of guaranteeing nonvolatile memory for publisher is important, watches history so that this storer of (for example) trusted is followed the trail of the off-line pay-per-view, to be used for charging afterwards.It is not enough only having a key that is used for each memory bank of release in the media, because this key will be found by the bootlegger very soon, thereby jeopardizes the safety of the memory bank of all players.Therefore, an embodiment provides the clearly password discriminating to the code of visiting these safe non-volatile memory.
In this embodiment, player comprises some blocks of nonvolatile memory, its locked acquiescently (meaning is promptly refused to read and write).Player also comprises the public-key cryptography of the request that is used to differentiate the release memory block.Be to obtain the visit to this memory block, content is called one will be through authorizing the function of being used as input with the digital signature of the code block of visiting described storer.This signature can use the public-key cryptography that is embedded in the player to check, and has stipulated to want the memory block of release and the access privileges of being authorized in each part of block (read arbitrarily, write arbitrarily, increment, decrement, make zero, or the like).Interpreter check digit signature also (if signature effectively) is separated the code of lock memory and combine digital signature.The example of being used for of below showing this process to the off-line pay-per-view content charging of the audit that has once in a while (for example, every month):
(a) X of publisher and player manufacturer Y negotiation is to the control of the 4-byte counter in the nonvolatile memory of the player of the Y of manufacturer.
(b) X of publisher is that interpreter is write a function of checking memory content.If value is lower than expenditure rate, function makes counter-increments so.Otherwise, function set up with publisher between the Internet be connected, transmit the Payment Request that comprises Counter Value, random number and payment information (such as credit number or be stored in other source of fund in the player).If publisher accepts to buy the payment that adds current purchase by the past of counter indication, publisher is transferred to player to remove counter with password authorization so, and player is checked described password authorization and (if effectively), and counter makes zero.Player is by locking storer again and returning the code of indicating successfully or failing and finish.
(c) Y of manufacturer comes digital signature memory updating code with the parameter of the memory area of discerning the X of publisher, access privileges or the like.
(d) X of publisher makes and comprises the content of the code of having signed and it is distributed to the user.
(e) user's player begins to be written into content, and described content offers one of user and buys option.If the user refuses to buy, reset so and can not continue.
(f) the content pointer that use to point to the digital signature that code that step (b) locates to write and step (c) locate to produce calls storer release function.
(g) storer release function is attempted the purchase carrying out as describe in step (b), and reports successfully or fail.
(h), be user's play content so if buy successfully.Otherwise resetting stops.
Certainly, by using security counters mechanism as described above can adopt complicated more purchase mechanism.For in content, implementing and so on unique real restriction from the ability of player and the creativity of publisher.
Comprise (unrestrictedly) flash memory, magnetic storage device (for example, hard disk), have the various memory technologies of the RAM or the like of battery support (battery-backed) to use herein with the system and the technology that disclose.(a variety of methods that in background technology, become known for Nonvolatile memory devices is provided He be used to encrypt or otherwise protect described memory storage.) safe storage device can be positioned outside the player (unrestrictedly), comprise (unrestrictedly): in extraction-type module (such as smart card), the output peripherals that adhering to is (such as the remote-control device in loudspeaker, display, the home network, or the like) in, remotely on computer network, or the like.For example, can based on free space, with the mode that guarantees (for example, by slot number) or based on priority dispose/recycle provides memory block to distribute.Can cause losing of the pay-per-view record do not reported because remove or discharge memory bank, so can give the ability that content provided can rewrite the condition of slot.For playing a plurality of themes simultaneously but only have for the player of one group of nonvolatile memory slot, locking mechanism can be need to guarantee that one section content just will visit the slot by another section content modification.
In one embodiment, the prepayment smart card is by in the slot on consumer's purchase and the insertion player.Described card comprises player can write memory bank corresponding to a plurality of write-onces of the identifier of pay-per-view content topic.In case write, content designator is merged in the password enlightenment device calculating that is implemented in the described card.Therefore, had correct enlightenment device by check before allowing playback, content can check purchase to finish.
It should be noted that and as described abovely be used to differentiate that the conventional method to the player function calls is not limited to cooperate security counters to use together.For instance, identical method can be used for protecting the visit to the specific player feature that only can be utilized by the publisher of authorizing.Because providing, described approach is used to protect to the general of the visit of computing function but method extremely flexibly, so it also has the applicability of the others that are different from technology disclosed herein and system.
Based on the security feature of the security feature of password contrast based on language
Security strategy can adopt some different modes and carry out.Cryptoguard allows the structure content to make voidable or undelegated player will not have the necessary Cryptographic key of decryption content.Undelegated player can not be visited its content that does not have key (certainly, prerequisite is for using effective password).Because only offering the content owner, this approach on specific device, stops the ability of resetting, so it is more dumb relatively.Though (complex embodiments can use different key sets that more detailed control is provided more, and the control that is based on key lacks the complicated more required dirigibility of access control challenge of solution.Yet), it is extremely effective when handling specific player and leaked or otherwise be considered to not to be trusted situation with ability with decryption content.
On the contrary, to leak under the situation of (or for some other former because complete non-trusted) validity relatively poor based on the player that is controlled at of language, but it can carry out extremely complicated security strategy.As previously mentioned, content can be analyzed playback environment and call password enlightenment device, and if think that the result is unsatisfied, refusal is play so.This approach provides unlimited dirigibility in fact, thereby makes it be suitable for being controlled at common performance ideally honestly but can support some publisher can wish the related risk of resetting on the player of the operation about certain content (being not shielded form such as disassembling) that prevents.Although the assailant can (at least in theory) analyze and attack indivedual section contents (if especially the code compiling ground of content is bad), these attacks can't generalize and can tackle reliably by accessing to your password the enlightenment device carefully.In addition, the feasible publisher that observes the pirate copies of its content of the deciphering control ability of describing herein can discern the device that has leaked and produce not pregnable fresh content.
Progress
Need provide the long-term distribution infrastructure that keeps safety to the content owner.The degree failure to the utmost in this regard of previous content protective system; Though the implementer makes all-out efforts to security when seeking the content owner to the support of format at first, level of security tends to reduce significantly after a kind of form assures success.Multiple factor causes this downtrending, comprising: can attack more enforcement (having increased the possibility of selling delicate products), along with how shielded content becomes available and to the increase of the growth of requirement of piracy and assailant's skill.Even can be configured to allow the content owner behind media formats standardization, to continue regulation how to protect its content to the system of announcement herein and the one exemplary embodiment of technology; allow unlimited in fact renewable property simultaneously; if make and find to attack that security can not lost forever.
If security strategy is not static, manufacturer has lasting long-term power so provides effective security.For instance, the content owner can have the ability to stop at device that key has leaked or generally be used for reset on the pirate product (or preventing high-quality playback).Therefore, different with legacy system is, the goods producer is in that be at war with when coming to provide its product with minimum possible price can not sacrificing security, because the consumer also will seek to have the product of firm security, because these products will offer the best and the most reliable playback experience.
Even the good manufacturer of original idea also can produce the product that discovery afterwards has security flaw by accident.Therefore, we have disclosed the several different methods that can be used for responding leakage and security vulnerabilities.For instance, player Cryptographic key and software can use the code of digital signature or key updating to upgrade.Can on the medium that comprise the software of carrying out key updating, these renewals be delivered to player.For instance, if the player of validated user is because the previous owner is leaked its security and cancelled, the so new owner can dial the technical support phone of described product and obtain new key.(certainly, the customer service personnel can wish to obtain the certain user's information such as name, address, credit number, telephone number, e-mail address, IP address or the like, with the key that stops the bootlegger to call please to look for novelty to be used for undelegated purposes.) upgrading also can be via the Internet (or other network connects), modem call, distribute via input of far-end control or keyboard or the like.Certainly, upgrade with regard to reply whenever possible and carry out cryptoguard, make the assailant can not use renewal process to inject the key that leaks or otherwise attack player.
Manufacturer reduces the another way of the consequence of leaking for comprising an extraction-type security module, such as smart card.Smart card will be implemented other function relevant with security that some or all passwords enlighten device and offer content.If take place really or find security flaw, might replace smart card and do not replace or the whole player of upgrading if leak.Should note, the smart card slot can only be provided, and until just dispose smart card when for security reasons being necessary is to prevent that smart card from being taken off from legal player and be used for the malice player, can be before player and/or card be sent to the consumer with cryptographic smart cards relate to receiver (for example, by making it share a symmetric key).
Make and DRM
The content owner pays close attention to and makes the related any new cost of content is rational.If use simple safety practice, can use herein the technology that discloses and system so to avoid the new great cost of manufacturing process.Can require more development﹠ testing effort significantly though the content of complicated security strategy is carried out in exploitation, this cost is selectable fully.(other protection system is eliminated this right to choose fully, thereby forces all the elements publisher to use identical security system, strategy, or the like.)
Certainly, because the system of Jie Shiing and technology also allow third party DRM dealer that security module and manufacturing system are provided herein, so publisher need not the independent development security system.These dealer will compete to obtain the business of publisher by the feature that offers the best, best security, minimum cost, maximum dirigibility, maximum ease for use, best performance, minimum code size, revocation list widest in area or the like.A platform can serve as in technology of Jie Shiing and system herein, and the content owner can make its oneself security decision-making based on described platform.
Watermark and leakage are followed the trail of
In the conventional water mark method of majority, the marker detection process is standardized and is implemented in the product of a large amount of extensively utilizations.This state algorithm has caused serious risk lamentedly, because allow the assailant to remove watermark and the quality of not serious reduction content usually to the understanding of detection algorithm.In an one exemplary embodiment, system of Jie Shiing and technology can comprise real-time watermark insertion herein, and it is not subject to general labeling and removes the influence of attacking, because tag format, cataloged procedure and testing process are all selected by publisher.
In an one exemplary embodiment, publisher's (control program of being write by publisher or more precisely) wishes to embed some information in some output content.Can be by encode each of this information of deciphering and output first content part or second portion.These parts can be the different encryption zone on the medium and can use different keys and encrypt.Difference between these parts can be selected when making content by publisher, and can be from small variation until different completely any difference.Because do not have predetermined relation between two parts, can't judge another part so only know the bootlegger of a part (decruption key that comprises described part).
Because what cipher control and can be used for selecting which zone decrypted based on the control of program comprises so the assailant can not judge alternative zone.In fact, (for example) by control routine being encrypted (making different players use different code) and, can making the assailant even can not discern alternative zone to content design and whether exist by comprising the false zone that does not have player or only have the only a few player to decipher.
In an one exemplary embodiment, content is edited the required key of each version that a feasible only subclass of all players has certain zone of decryption content, yet all substantially players all has the required key of at least one version in the described zone of deciphering.Therefore, by analyzing the undelegated copy in this zone, publisher's decidable is about assailant's information.It should be noted that this even managed to analyze (pregnable) program and deciphered to be still establishment under the situation of an above replacement area the assailant, because it is which version the combination of the gained of several regions has still disclosed to publisher decrypted.Finally, the user to avoid the unique reliable mode that its identity (or identity of its player) is exposed to the anti-pirate executive expert of publisher be that beginning does not just participate in piracy.
Because the marker detection process need not standardization, so this common tags method is different from conventional watermark processing.This difference allows the security that enlarges markedly; In fact, can show the common attack that does not exist this tagging scheme.In addition, because in output, create a difference, so these watermarks can extremely firmly and can exist after digital-to-analog conversion, editor, format conversion, malicious attack or the like through design through the position of watermark.
How to dispose and use the decision of content-label ability to make by publisher usually.Some artist can wish to avoid any meeting to carry out the technology of any modification (no matter how little), thereby has got rid of the possibility of using the watermark feature on its works.Under other situation, the content of some type quilt is pirate widely, and is the material standed for that is fit to of a large amount of usage flag abilities.Only have fine distinction though each several part is usually selected, the selection of which alternate version of encoding, how between possible output version the management of the decruption key of selection and these parts by content control.Because marked capacity is controlled by the data processing instructions that combines with content, so described technology can be used for further feature, comprise (unrestriction): implement the prize drawing (sweepstake) of winner's wherein a congratulations message of player output, transmit safety warning and provide to the user of its player security deficiency and give content as an addition to the certain user.
Certainly, other watermarking project also can use with the technology and the system that disclose herein.For instance, traditional watermark (is standardized for its landmark detection algorithm) also can or embed circuit (it can maybe can can't help content control by content control) by outside watermark by the code of content and be embedded in the output.Similarly, can read (similarly, by the code of content or by external detector) and import watermark in content into, (for example) is to detect the trial of making undelegated copy or introducing undelegated content.The selection that embeds which watermark and how to respond the watermark that has detected be may be implemented in player and/or the content.
Instance migration path: CD audio frequency
Nowadays, the overwhelming majority of digital content distributes with form not protected or that protected by minimum degree.For instance, the CD audio standard does not comprise makes feature repeatedly, and the protection scheme in the DVD video has been subjected to destroying greatly.Because old-fashioned media player is not supported enough securities, so need upgrading or replace it.The compatible player of setting up flood tide is depended in the success of new security system.
By the existing method combination that makes technology and the system that discloses herein and be used to make copy-protected CD, the CD that makes back compatible is possible.Described CD will utilize non-standard CD format correctly to play on most audio frequency CD Player but make computer based disassemble the CD of software obfuscation to be manufactured on.Authorized (for example, licensed-in) personal computer software also can be play CD by correcting incorrect part that read or that computing machine is obscured.Therefore; permission is reset on (majority) old-fashioned audio player; because it can be play off-gauge (copy-protected) Red Book audio-frequency unit, and allow on personal computer, to reset with suitable player software (its can (for example) be included in CD go up or can download) via the Internet.Although long-term the support can be introduced extra security risks to the back compatible of existing CD audio player, it is useful that but it uses the part of the long term policy of the audio player that can play new Safe Format can be as encouragement, so that (finally) content can only be sold with Safe Format.
Example: high definition DVD
The copy-protection system that is used by current DVD video player has been subjected to destroying greatly.Because millions of DVD player has been sold and can not be upgraded to new protection system, under situation about not abandoning, there is not the direct mode current DVD form of upgrading to these old users' support.Fortunately be, the mounted pedestal of DVD player only be designed for support " standard " definition television (for example, 525 lines of NTSC, 625 lines of PAL, or the like), but do not support the higher-quality signal that provides by high-definition television (HDTV) form.Because old-fashioned player is not supported HDTV, so the new security feature that this paper discloses can be incorporated on the DVD that supports HDTV.
In an one exemplary embodiment, player will have the come-at-able medium input end of user (being made up of the mechanization pallet that is used for one or more CDs), described input end is loaded into a main shaft with medium, and medium are rotated and use laser to be read on described main shaft.The data transmission to one that reads from medium is based on microprocessor circuit, and its optical analysis discs coding is to judge CD capacity, format type and safety method.If CD for using old-fashioned (low resolution) DVD of old-fashioned safety approach (CSS), uses method known in the background technology to play CD so.If CD is for using as the high density DVD of programmable safe method disclosed herein, is written into the program code (data processing instructions) of the security strategy that is used for content and is carried out from CD so by player.Player is looked the low-density DVD of the security that situation also can support to use improvement and the high density DVD (although using the safety approach that has been subjected to very havoc generally to provide no benefit for new content) that uses old-fashioned guard method.Can be from the quality of the output of DVD player by content control.For instance, if player and/or HDTV output unit do not provide enough securities, content selectable is selected the output of output low resolution so.In this case, content can (for instance and unrestrictedly) controls playing device with the HDTV signal be transformed into downwards low resolution (for example, using specialized designs to be used for the degradation module of this purposes), only offer that player deciphers required key (and withholding the required key of high-resolution part) of the low resolution part of described signal or controls playing device output content be encoded in low-definition version on the medium discretely with higher resolution version.
The interpreter structure
In an one exemplary embodiment, interpreted languages is based on the DLX assembly language.Basic DLX processor structure in background technology be know (for example, referring to people's such as Hennessy
Computer Architecture:A Quantitative Approach,Second edition).Being executed in code in the storage space (in an one exemplary embodiment, its RAM by 8 megabyte forms) of interpreter handles (sandboxed) through sandbox and makes the registers group of its only addressable this storer and processor.Illegal command (or other computing) can be used as NOP processing (anticipate promptly, what is not done) maybe can trigger one unusual (exception).Similarly; exceeding boundary (out-of-bounds) memory access can trigger unusually or can (for example be corrected; under the situation of carrying out reading the 32-position from 8 megabyte address spaces, rap around to the beginning of storer and guarantee the 32-bit alignment) by address and sexadecimal 0x007FFFFC logical multiply being made exceed boundary's visit.
DLX " trap (self-trapping) " instruction is used to provide the use to the outside invocation of procedure.The computing (meaning promptly exceeds the addressable RS of normal instruction) that expanded to sandbox in " trap " instruction calls player is outer.For the description of described computing, referring to " inquiry and control playback environment " part.
For the hardware embodiment of special use, also may use the ASIC of DLX processor or FPGA (or other hardware) to implement rather than based on the interpreter/emulator of software, in this case " trap " instruction can (for example) be configured to trigger processor enter one more the highly privileged rank, enlarge its address space to comprise a ROM or EEPROM zone (for example, by enabling extra address wire), storage return information counter (return program counter) and to jump to presumptive address in the address space through enlarging further to handle.More the highly privileged rank also can be enabled processor core extra instruction or ability in the heart, such as with external peripheral (for example, nonvolatile memory, password accelerator, key management assembly, optical media driver, data network, satellite receiver, or the like) synergistic ability.Storage protection ability during hardware is implemented can comprise the quantity (thereby preventing to exceed boundary's visit) that limits address wire or use other known memory-protection method in the background technology.After finishing " trap " and calling, processor will reduce privilege level and continue to carry out content code.
Implement at an exemplary DLX who is used for deciphering the video of distributing on high density compact disc, provide " trap " computing to fetch data from optical disk reading to allow content.For being written into data from physical medium, content code (is for example stipulated an address usually, sector number on the CD), the destination address of data in the DLX storage space, with the data volume that is written into and (looking situation) decoding parametric (such as error correction polynomial expression (error correction polynomial)/parameter, decoding key, or the like).Content can use data to carry out the treatment step of any way, even comprises data are carried out as code.Because optical drive, hard disk drive and other data source generally have sizable stand-by period (especially when carrying out when searching the operation of new track), expection can need so independent " trap " computing can be used for predesignating, the state of request msg, the pending request of inspection and/or practically data are loaded in zone in the DLX storage space.
Content code also can call the trap computing to carry out the high speed password computing on storer.For instance, exemplary batch deciphering " trap " computing index, (b) encrypted secret key, (c) of utilizing the AES cryptographic algorithm and allowing content provided (a) to select among the privacy key of (or player might access) from be stored in player treats the address of decrypted data in the DLX storage space and (d) treats the length of decrypted data.Trap (a) uses the key by exponential quantity identification to come the encryption key deciphering from content reception, and (b) uses the key of having deciphered to utilize aes algorithm to the block deciphering in the specified quantity at the place, address of indication in ecb mode.Can comprise the key (comprise (unrestriction) player private key, manufacturer's key, group key, media key or the like, it is looked situation and can be stored in the inside tamper-resistant chip and internal non-volatile memory with cryptographic abilities) that is stored in the player by key-deciphering-key that index is selected, be stored in key in the external device (ED) (comprising device/server, display, loudspeaker of (unrestriction) crypto module, CD drive, addressable telecommunication network or the like).For judging which key is available, data that content code can analyze the included cipher key list/description (and looking situation by a player manufacturer or a trusted parties digital signature) of type, the sequence number of player, player such as player, obtain via network and about any other available data (referring to " inquiry and control playback environment " part) of player or playback environment.Other cryptographic abilities of any way also can offer player by content, comprise (unrestrictedly): encryption, deciphering, symmetry algorithm (having stream cipher, block encryption, hashing algorithm, message authentication code of any operator scheme or the like), public key algorithm (signature, checking, encryption, deciphering, key management, zero knowledge (zero knowledge) operation, or the like), key and certificate management, or the like.
Content code can be carried out extra processing (or pre-service) operation to decrypted result.For instance, can carry out the XOR computing to convert the ECB decrypted result to the CBC decrypted result.Can use the descrambling step and not carry out its explanation type code to prevent the bootlegger from using the secret key decryption content of extracting from player.The example of applicable step comprises (unrestrictedly): switch (toggle) position, use simple binary arithmetic change, reorder block, arrangement or insert skew/address (for example, to make up a data stream that meets MPEG-2 or other video compression standard), use the public-key cryptography computing (such as with the composite number be mould ask mould square or cube), use symmetric cryptography computing and renewal internal inspection and.Also post-processing step can be used for introducing or revise forensic watermark (for example) and copy concrete device to allow to follow the trail of.Also can use interpreter to carry out through decoding/treated data, thereby allow the part of deciphering/playback code itself to utilize a variety of codes to hide and fuzzy technology, such as using from revising code with the form distribution and the permission content of encrypting.Even may construct multi-functional data, for example, when being performed, carry out useful task but also represent the data of effective compressed video.
When finishing dealing with and get output data ready in advance, content code can call the extra invocation of procedure (for example, DLX " trap " computing) in the player with to user's output data.Described calling can (for example) (for example transfer data to one or more Video Decoders, the MPEG-2 demoder), audio decoder (for example, MP3 or AC-3 demoder) or the graphics overlay system is (for example, have transparent/overlapping ability and support still image and/or animation engine, such as GL, ShockWave or Flash).If suitably, data will be converted (for example decompressing) so, then be presented.Present and to comprise data are sent to device such as one or more physical separation of audio tweeter or video display.
With deciphering and decompressions/output as the advantage of the embodiment of API Calls independently be, its permission content is carried out bigger control, but latent defect is, can increase the content need and read number of times with write store from storer.Yet in fact random access memory is fast fully usually, makes even for the content such as the high bit rate of the high definition video with movie theatre play quality, the extra stand-by period also is controllable.Implementing at a high speed, may be implemented in the explanation type code because decompress, so that the player coder-decoder can be is unwanted.Player also can provide single instruction multiple data parallel processing capability (for example, by providing via the addressable single instruction multiple data mathematical operation of the invocation of procedure that roughly is similar to MMX, SSE on the x86 processor and SSE2 instruction) to improve the performance of the coder-decoder that uses the explanation type code implementation, graphics process computing or the like.
May use multiple interpreter implementation strategy.In one embodiment, interpreter is implemented in the software that runs on the general microprocessor.In another embodiment, interpreter uses such as the reconfigurable logic of field programmable gate array and implements.In another embodiment, Zhuan Yong hardware unit is fulfiled the role of interpreter.Under all three kinds of situations, the invocation of procedure can be used (unrestrictedly) local software, hardware-accelerated and to any combination of calling of external device (ED) or assembly and implement.
Local code
Except that explanation was independent of the sandbox code of player, player also can allow content to submit to local code for carrying out and/or storage.Before the software or logic of accepting addressable key or other privileged resource, the player Validation Code.Checking can (for example) by determining that code comprises that an effective RSA digital signature by player manufacturer or the issue of another trusted parties carries out.Can be stored in the volatile memory being used for through the local code of good authentication and to be carried out by the current content that is written into, or it can be stored in the nonvolatile memory of player, described therein code can be utilized by other theme.For instance, for avoiding the negative effect possible to other theme, only can in volatile memory, store by the current theme that is written into use in order to correct the decoration (cosmetic quirk) in the player or the Hotfix of performance optimization be provided.On the contrary, be used for correcting the upgrading of security vulnerabilities with the common nonvolatile memory that for good and all be stored in player.
Local code is usually specific to single player platform or player application, thereby makes its portability more relatively poor than explanation type code.Its advantage is for using it when the needs that use the explanation type code to handle occur.For instance, local code can be by the mode of content as difference legitimate player and undelegated emulator or " duplicate ", thereby avoid cancelling when assailant at every turn finds serious security vulnerabilities in the design of product necessity of each potential affected device.As the defence to described attack, the production marketing merchant can comprise built-in local code ability or the interpreter computing that is difficult to emulation or carries out reverse-engineering.It should be noted that design in order to help to detect or respond ability to the attack of specific player can be dealer all and/or player specific, be activated because it will only respond the problem of specific player.Concrete measure can comprise (unrestrictedly): simple non-registered feature, regularly responsive common programs, be designed to clearly to be difficult to software at full tilt reverse-engineering or emulation operation (for example, referring to the 6th of people such as Kocher, 289, No. 455 United States Patent (USP) PseudoasymmetricFunction, it is incorporated herein by reference in full), the device of password enlightenment completely (symmetry or asymmetric) interpreter therein is implemented under the situation of the device in the specialized hardware, that " this locality " code and explanation type code can be is similar or identical (although they can different privileged operations, player can be with the code that is limited in other execution of higher privileges level through special discriminating in this case).
In an one exemplary embodiment of the content of using local code, medium comprise the bootstrap part of being made up of the explanation type code that is written into extra interpretable code when explaining.Content code (for example, the code that partly is written into by boot) then will send the invocation of procedure and analysis result comprise player types with judgement the information about playback environment to player.Content also can (for example) be checked playback environment by requiring player (or other assembly) to use the key that the playback environment of having reported is characterized as specific the characteristics of described environmental characteristic (or represent) to carry out crypto-operation.For stoping the malice interpreter to distort the checking result, the result of described computing can be used for decoding and playback procedure subsequently.(for example, by will incorporating into from the password result of player during decruption key calculates, content can firmly prevent to reset calling oneself on the malice player that has certain specific player type or playback environment attribute but lack corresponding Cryptographic key.The result also can compare, use the check of public-key cryptography scheme with desired value, or the like.) content judges that then whether player is the type of the security flaw (or other problem) that comprises (acquiescently) that needs correct.When carrying out this judgement, content code from the information in the player (for example can be analyzed, can be by the data in the nonvolatile memory of access to content, from the date information of the clock in the player, or the like) and/or the information obtained from the outside (for example, by inquire about additional device or via network service).If the problem of identifying is obtained corresponding countermeasure (for example, from medium or via the data network such as the Internet) so.The essence that depends on problem, countermeasure can relate to explanation type code and/or local code.Under the local code countermeasure is essential situation, content can be submitted to player as the data of digital signature with the countermeasure code, comprise that indicating described code whether should be buffered in (for example is used for following purposes in the volatile memory, via the invocation of procedure), the instruction of whether answering permanent storage (for example, to correct the program error in existing nonvolatile memory) and/or whether should carry out immediately.Local code also can be configured to carry out discernible computing (such as the cryptographic calculations that can combine with the contents decryption process), is carried out by player really so that content code can be determined described local code.Local code also can be configured to forbid the malice player, and (for example) is by rewriteeing key.Content also can inquiry, code analysis and code update (this locality or explanation type) and it is delivered to such as the display that connects via digital interface or other device of loudspeaker.In case playback environment is acceptable, content code (for example) asks to continue to reset by the user by being written into data block from medium, carrying out decrypt operation and transmitting the data decryption that supplies decompression and output in the insertion forensic watermark so.
The standardization intellectual can be considered
Usually need have the standard that enough at length defines playback environment, can play compatible content (obey security strategy, or the like) so that the fabricator of compatible player can be sure of its product.Described standard generally can be stipulated the basic instruction set (or equipollent) and the required invocation of procedure of interpreter.May also need to be any instruction in the real-time part that can be included in decode procedure and invocation of procedure definition performance requirement.(for only for start, close the computing of carrying out with other non real-time operating period, it is more not crucial that performance requirement is generally.)
For instance, exemplary specifications may ask compatible interpreter can minimum execution 8,000,000 p.s. " chronomere " (TU), wherein normal low level interpreter computing can respectively take and reach a TU, and multiplication and division arithmetic can respectively take 4TU.The performance requirement that calls of the process (for example, DLX " trap ") that player is provided depends on the computing of being asked.For instance, the AES cryptographic calculation can take and reach the 12TU that 100TU adds that every block encryption calculates.The memory copy that word is aimed at can take and reach the 1TU that 50TU adds per 16 bytes (or its mark).The completion status that cushions the request of reading of medium or check the request cushioned can take and reach 100TU.The request of reading is with the order submitted to but once carry out one concurrently with other processings, and can take and reach 10, and 000TU adds the 1500TU of every 2048-byte sector.But non-order reads outer (the tracking distance/every medium maximum sector number in 20000+640000 * sector) the individual TU of occupying volume to be used for the tracking expense.Be written into data (meaning promptly is sent to data the storage space of interpreter from the impact damper of driver) from reading of finishing and take the 128TU that 100TU nearly adds every transmission 2048-byte sector.Data are sent to coder-decoder or other output terminal can take the 1TU that 100TU nearly adds every transmission 16 bytes (or its mark).Certainly, these sequential values provide for exemplary use; The specific performance index will depend on the requirement of system.Can stipulate that also more complicated performance requirement total computing time of instruction sequence (for example, regulation) thinks that the player implementer provides greater flexibility or guarantees for the content author provides more performance.
In fact, a lot of enforcement will be more faster than performance minimum operation ground.This only means data and will just be ready to before it at needs.For instance, every conventional explanation type instruction interpreter based on software of taking for 40 clock period will show as the processing speed of about 5,000 ten thousand TU/ seconds on the 2GHz microprocessor.Similarly, with the specialized hardware of the frequency of 25MHz and the operation of the speed of 2 clock period of every instruction implement also will than p.s.s 800 ten thousand TU faster.
The person faces the simplicity of system and the balance between the performance to it should be noted that the standard development.Specifically, for enforcement, can suppose that generally the computing that is executed in the invocation of procedure is more faster than the operation of the identical operation in explanation type code ground based on software.On the other hand, these computings must define in advance usually and also comprise usually in the supposition of its performance and enter/withdraw from expense.Yet, be used for can providing significant performance benefit such as the invocation of procedure of the common computing of memory copy, search, big figure arithmetic sum cryptographic calculations.A kind of alternative performance Enhancement Method be make interpreter before carrying out or the term of execution analyze content code can optimized zone (for example, converting local code to) with identification.Content code can comprise that also " prompting " is suitable for optimized candidate region with the notice interpreter.The benefit of " prompting " method is, hardware is implemented (it tends to faster, but carries out difficulty of complex calculation) can ignore also processing subsequent code normally of prompting (for example, by it is considered as NOP).Software implementation (it tends to slower, but has the local code ability of more speed) can use the prompting local code common programs alternative interpretations type code of function compatibility.If desired, performance standard can be stipulated the player capabilities requirement of ordinary constitution.Player also can allow content to satisfy the interpreter pattern (for example being used for real-time task) of performance minimum and have selection between the pattern of long-run average performance (for example, being used for un-real time job) preferably in assurance all the time.
When content of edit, the content developer need check the satisfied performance minimum by described standard code of its software of having write.Be used to check the special test macro of sequential matching degree with the poorest situation performance characteristic tabulation (tabulate) of content code when carrying out.It is carried out player the maximum permission time tabulation that each sub-computing can take simultaneously by the emulation playback procedure and operates.If playback procedure is too slow (for example, if the poorest situation player capabilities that measures lags behind the time stamp in the data that are provided to coder-decoder, if or coder-decoder become lack data), so described instrument can be notified the medium author, but then correct problems of medium author.Edit tool can use identical method will play reliably to guarantee its output.
The protection nonvolatile memory
As described previously, player device can be content non-volatile (NV) storage capacity of being used by content is provided.Can be bigger (may comprise little artist, student, domestic consumer or the like and big studio) because write the quantity of the entity of content, some content of supposition can be do not write scrupulously or even the situation that writes mala fide under, the restriction that content and player are executed the NV memory use can be favourable.Therefore, player can wish to limit the ability of each theme to preserve the NV storer and to read, revise and rewrite the data of having stored.The part that is entitled as " safe storage sum counter " is described the code that uses digital signature to come the authentication-access nonvolatile memory.Yet, in some cases, can need the operation under the situation of the certifying authority that does not have to concentrate of (for example, for politics and/or technical reason) nonvolatile memory security mechanism still to allow content topic configuration and/or control non-volatile memory simultaneously.
Described an one exemplary embodiment of player with the lower part, it provides secure access to nonvolatile memory for content under the situation of the signature office that does not need to concentrate.Referring to Fig. 4, the control of demonstrative memorizer manager is to the visit of 128 kilobyte flash memories, and it respectively is the slot (slot) of 256 bytes and 256 bytes that are used for excessive data that described 128 kilobyte flash memories are divided into 511.Slot 0[410], slot 1[412], slot 2[414] and each slot after 440 comprise: identification is assigned with 128-position creator's medium ID 420 of medium ID of the theme of described slot at first; Identification is the 128-position final updating medium ID 422 of the medium ID of the theme of the described slot of modification recently; Discerning described slot recent renewal is 40-position final updating sequence counter 424 when; If slot need be rewritten other 8-position slot priority value 426 of level of indication slot; Only can be by 16 byte private datas 428 of the code access of authorizing; 160-position hashed value 430 through the code of the described slot of granted access; With main slot payload data 432.When player during in factory initialization, it is sky to indicate described slot that these values can all be initialized as zero.
Last 256 bytes of 128 kilobyte nonvolatile memories are used to store following value, comprising: secret player keys 444; The counter 445 that comprises the quantity of priority 6 slots that rewritten; The counter 446 that comprises the quantity of priority 7 slots that rewritten; And the slot that is stored as high part 447 and lower part 448 writes counter.Because slot writes counter frequent updating and some non-volatile memory technologies and too much can damage after write cycle, so this counter is stored with the form of the number of times that limits any particular memory cell and upgrade.The incremental mode of described counter is, is arranged on the position in the lower part 448, unless 1023 in 1024 positions of lower part are full, all 1024 positions of high part 447 increments and lower part 448 are eliminated under one situation of back.Read Counter Value by high part 447 being multiply by 1024 numerals of adding the position that in lower part 449, is provided with.When player during in factory initialization, except that player keys should be initialized as secret (puppet) random value, these values can all be initialised to zero.
Player has also kept being stored in the some values in the volatile memory (for example, conventional RAM).These values comprise the value of the limit priority slot that up to the present current value 456 of adhering to which slot (meaning promptly, from numeral 0 to 510) of media key 450, medium identifier 452, indication and indication are write by current theme the NV storer.When theme is initialised (for example, when medium insertion or player replacement), the slot identifier 454 that adheres to, the slot priority 456 of adhering to and maximum creation priority 458 are reset.But media key 450 preferably is written into from the part that can not write with consumer's pen recorder on consumer's recordable media of medium.Then by using such as the one-way cipher conversion of the Secure Hash Algorithm of knowing in the background technology (SHA-1) and obtaining medium identifier 452 from media key.For extra assurance is provided, medium can carry a cryptographic signatures of differentiating media key 450 and/or medium identifier 452, and it then can be differentiated by player and/or content code.Alternate embodiment can comprise other value (is specific identifier such as the identity of the facility of making or suppress described medium and/or for certain particular segment of medium) and not necessarily will have fixing relation between identifier and key.
Generally speaking, can allow content code to have weighs the quite unconfined read access of the nonvolatile memory contents except that the private data 428 of each slot.This read access can use the invocation of procedure (for example, DLX " trap " computing) that allows content provided slot number and retrieval of content and implement.If the slot of being asked is current not to be adhered to (meaning is promptly discerned by the slot identifier 454 that adheres to), do not return slot private data 428 (for example,, returning zero) so for these positions.
In an exemplary embodiment, content possesses following fundamental operation to read, to ask the visit (" adhering to ") to the nonvolatile memory slot from the nonvolatile memory slot and to revise the nonvolatile memory slot:
Slot reads (SlotRead): this invocation of procedure with the content of slot of regulation read can storage space by the content code visit in.The input parameter of this process comprises slot number and indication are stored in the result on the pointer where in the storer of content.Return whole slot contents (except that private data territory 428, it generally is made as zero in reading the result).If the slot of regulation number be (1), read the slot discerned by the slot identifier 454 that adheres to and retrieval so and store full content (comprising private data 428).The rreturn value of described operation is an integer, and why it asks the error code of failing if comprising the slot that read number (for example, if stipulated slot (1), then being accompanying slot identifier 454) or indication.
Slot adheres to (SlotAttach): this invocation of procedure is used to ask the privileged access to the regulation slot to weigh.Before permitting this visit, differentiate the code of asking.The input parameter of described process identification slot number, code length and the priority level of being asked.Described process is judged the start address (for example, the address after the instruction of calling the slot attach operation in the storer of content) of waiting the code of permitting visiting.Use the length of address and regulation, described process is followed the cryptographic Hash (for example, using SHA-1) of Accounting Legend Code.If if hash result does not match with the value that is stored in the mandate hash 430 in the described slot or the priority of being asked through be judged to be invalid (for example, as hereinafter described) about Fig. 5, adhere to slot zero (anticipate promptly, slot identifier 454 that will adhere to and the slot priority 456 of adhering to are set to zero) so and return an error message.Otherwise the slot of being asked number becomes the current slot that adheres to (meaning promptly, the slot identifier 454 that will adhere to is set to the slot of being asked number, and the slot priority 456 of adhering to is set).As special case, invoke code can be defined as the slot number of (1) with the new slot of request configuration.In this case, the priority (for example) that player checking is asked as hereinafter describing about Fig. 5 and if priority invalid, return an error message so.Otherwise, player selects a slot to rewrite (as hereinafter described), with its removing (for example, by creator's medium ID 420 is set to current media ID 452, make zero other slot territory and increment write counter 447/448), (for example be attached to described slot, be set at slot number and priority 456 be set at the priority of being asked by the slot identifier 454 that will adhere to), and maximum created the greater that priority 458 is set at its currency and the priority 456 of being asked.If interpreter support interruption maybe can cause other ability that the accident of potential non-trusted code is carried out, should forbid these abilities so to avoid when adhering to slot, introducing malicious code.Rreturn value is an accompanying slot numbers 454, if or operation failure, be error code (for example, because code hashed value do not match or invalid institute's Request Priority) so.
Slot writes (SlotWrite): this invocation of procedure writes data to the current slot that adheres to.The input parameter of this process points to slot private data 428, differentiates the fresh content of hash 430 and useful load 432 that described fresh content writes with the updating value in other slot territory.(specifically, creator's medium ID 420 does not change, final updating medium ID 422 is set to current media ID 452, and final updating sequence counter 424 is set to slot and writes counter 447/448, and the slot priority 426 slot priority 456 that is set to adhere to.) before slot write, the increment slot write counter by upgrading slot to write the lower part 448 of counter and (if desired) high part 447.If from from power on/executed would be too much (for example since medium insert, more than 128 times) write, use the player of nonvolatile memory (for example, many flash memories and eeprom memory were rated for for 1,000,000 write cycles) can refuse to write so with finite lifetime.Slot identifier 454 that write operation will be adhered to and the slot priority 456 of adhering to all are reset to zero.Whether successful rreturn value write status code for indication.
The target of slot priority management support with the some potential contradictions of balance is provided, comprises: (a) content should be by its rational needs visit nonvolatile memory as much as possible; (b) content should be sure of that its nonvolatile memory can unexpectedly not rewritten; (c) thus a theme should not keep excessive nonvolatile memory and stop other theme to keep any nonvolatile memory; (d) if there is not available empty slot in nonvolatile memory, the slot that then should recycle seldom uses thinks that new content provides some nonvolatile storage space; (e) theme should not submitted to and have a mind to a large amount of requests that legal slot is recycled.Generally speaking, if the slot of player uses up, the slot that has higher priority so is difficult for being rewritten.In an one exemplary embodiment, priority rule is designed to guarantee that each medium theme can have a limit priority slot (priority 7) at the most.In addition, only allow medium to create one again during the start (power cycle) and have 2 or the slot of higher priority in the shutdown of each insertion or player.Be higher than 7 priority-level though the slot that keeps when making player can have, content can not be created priority and be higher than 7 slot.
Fig. 5 has illustrated a whether acceptable example procedure of a priority that is used to be verified as accompanying slot request.When adhering to or create slot (" slot adheres to " part that sees above), the priority value that content provided is asked.At step 500 place, whether the player inspection has distributed new slot (for example, slot number be defined as-1).If at step 510 place, whether the priority that the player inspection is asked surpasses the existing priority 426 of slot, and if player returns the excessive error message of priority that an indication is asked.Otherwise at step 520 place, the request that allows to adhere to uses the priority of being asked to continue.If step 500 concludes that described request is to distribute new slot, so at step 530 place, whether the priority that the player inspection is asked is equal to or less than 7, and if not, return error message so.Otherwise at step 540 place, whether the priority that the player inspection is asked surpasses 2, and if not, so the priority of being asked is accepted as for distributing slot for effective.Otherwise at step 550 place, the player inspection is maximum to be created priority 458 and inserts or whether player has created the any-slot that has greater than 2 priority since resetting to judge since medium, and if, the refusal priority of being asked so.Otherwise at step 560 place, whether the priority that the player inspection is asked is 7, and if not, so the priority of being asked is accepted as for distributing slot for effective.Otherwise at step 570 place, the priority whether the player inspection has existed its creator's medium ID 420 that stores to equal current media ID 452 is 7 slot, and if, so player with the priority of being asked as invalid and refuse.Otherwise the priority of accepting to be asked is to distribute slot.
When distributing new slot (meaning, content is called slot with slot-1 and adhered to (SlotAttach)), the slot that player is selected to have lowest priority 426 is used for rewriteeing.Therefore in factory, empty slot is with minimum possible priority (zero) initialization and will at first be used usually.If a plurality of slots are shared lowest priority, select to have the slot of minimum write sequence Counter Value so.Be selected for rewriting if having the slot of priority 6 or 7, so Dui Ying counter (priority 6 rewrites counting 445 or priority 7 rewrites counting 446) increment.Perhaps, if request will require or otherwise relate to rewriting high priority slot, the player that has the space that is used for a large amount of slots so can only be failed.
In factory, some slot can be with being used to differentiate that the predetermined value of hash 432 and non-zero slot priority comes initialization.Functional and/or the safety requirements of slot depends on the code of handling through hash.For instance, configurablely be used for determining that the predetermined code of differentiating hash is to carry out following steps: (a) all registers of initialization (for example, stack pointer, or the like) are to " safety " value; (b) be written into RSA signature value from presumptive address at code region exterior through differentiating; (c) use the public-key cryptography that is embedded in the zone of being differentiated by the slot attach operation to judge that whether RSA signature is effective signature in certain zone of the storer of interpreter; If (d) the RSA signature separates (for example, by attaching to common addressable slot 0) from current slot so for invalid, otherwise jump to first address through the zone of digital signature.If only wish on specific player, to play through the code of digital signature, so can (for example) configuration code with the identity (or other attribute) of checking player and/or use player keys before the part of the described code of operation to its deciphering.
Example in aforementioned paragraphs has illustrated a kind of method (for example, as in the part that is entitled as " safe storage sum counter " described in) of implementing asymmetric signature verification based on the slot proof scheme of hash that is used to use.The method allows slot is preserved for following purposes, wherein when making player or definition standard, need not to stipulate described following purposes.Also might using signs based on the code verification system of public-key cryptography (public-key based) implements code based on the method for hash (hash-based).
Single slot may be used for a plurality of purposes.For instance, a plurality of code snippets can be through digital signature to pass through such as checkout procedure as described above.In configurable these code snippets each is with the different piece of revising slot and suitably separate when finishing.
Because the private data territory 428 of slot makes that code can the encryption slot content, so it also merits attention.Though any content all can read main slot useful load, have only and authorize the code of (for example, using the slot attaching process) to can read private data 428.The code of authorizing therefore can use private data 428 as key (or deriving a key) with to slot content-encrypt and deciphering.In this way, can guarantee to be stored in the privacy of the data in the slot.If desired, content also has the ability for additional authentication code of slot content or digital signature.Described signature can be produced by content code (look situation use player keys), can be produced by player, or can be produced by external parties or device (such as the publisher or the player manufacturer of theme).Configurable then theme is subsequently sought indication (for example) some safety inspection and is the value through digital signature (or otherwise differentiating) necessary or that specific medium ID has cancelled to search all slots.
Feature based on slot can be shared by a plurality of themes.For instance, may be embodied as the date manager that content provides up-to-date known dates.Use each theme of this ability will have one of current date when it is made through the expression of digital signature and with some predetermined codes of discriminating hash 430 couplings of slot.Be used to manage slot code will: (a) digital signature on the date that the scope of examination had, and if invalid, separate and stop from slot so; (b) read current slot content; (c) will from the date in the useful load 432 of date of now having checked of theme and slot relatively; (d) if the date of theme after, so date of theme is placed the slot content and calls slot to write to keep the remainder of slot constant simultaneously in nonvolatile memory new date storage; (e) separate from slot; (f) wipe slot private data (and any other unessential value) from RAM.Described operation will return error message or described after date value (meaning promptly, theme had through differentiate the date and before be stored in date in the slot than the latter).The visual situation storage of code has the digital signature on date and is not in the long hereafter so that the destroyed date can be interpreted as by misunderstanding.In addition, the date also can be stored (value of for example, using private data territory 428 is as key) will the read access of the data value stored being limited to the theme that comprises current date encryptedly.Whether the date value in the player can (for example) need, whether arrive the time of carrying out the safety on line inspection, the time that whether arrives submission pay-per-view purchaser record by content in order to the judgement security update, or the like.
In some embodiment (for example, providing the embodiment of real-time network ability), when enabling network support, make the player restriction can be favourable to the visit of nonvolatile memory.This restriction can assist in ensuring that user's privacy, and (for example) transmits it from nonvolatile memory extraction data and via network by preventing hostile content.As specific example, the theme that can prevent to use network access capacity is from slot reading of data (or read some slot, such as those slots that can comprise customer identification information or be created by other theme).In a single day player also can allow theme to stop its access to netwoks privilege and obtain slot access right (for example, obtaining the value that is used for forensic watermark after no longer needing access to netwoks) widely.These data it should be noted that the information that is embedded in the forensic watermark does not cause identical privacy concerns, because only can be recovered from the copy of content.
Above the description to concrete nonvolatile memory management is intended to illustrate specific embodiment.Certainly, have many variations.For instance, for purposes of illustration, provide concrete slot configuration, slot bookkeeping and priority management method.Except that memory configurations being become the slot of fixed size, can use other storage management method (comprising that use is not based on the collocation method of slot).Also can use other access control mechanisms (such as not based on the mechanism of medium identifier).That the nonvolatile memory total amount that is used for slot can be is variable (or in fact unlimited, as under the situation of hard disk or other high-capacity storage technology).Can comprise that independent non-volatile memories ability is historical to follow the tracks of medium/CD insertion.Accessing to your password, it is favourable to prevent that undelegated reading/revise from can be to learn the content encrypt and/or to differentiate nonvolatile memory (or such as can by other storer of the storer of access to content).In software implementation, can use multiple code, address, data and algorithm fuzzy technology to be extracted (or distorting) to prevent player keys.Also can in slot, store any type of data, comprise (unrestrictedly): the pay-per-view purchaser record, the counter of any kind of (for example, buy counter, credit/debit or other remaining sum counter, fail counter, medium/CD inserts counter, or the like), online or based on the result of the safety inspection of phone, watch record/history, code (explainable or local), cancel data (for player, peripherals or the like), signal to other theme, be used to assess the information of the qualification of returning or discount, transaction and playback historical data, digital signature and key.
Medium are cancelled
One noticeable situation be player be reliable but medium by the situation of piracy.This is professional piracy person's a typical case, because " product " that they generally can seek to provide approaching as far as possible with legal copy.If the bootlegger has developed the method for the copy that is used to produce the legal medium that player can not physically distinguish with original media, all offline media replay devices all are subject to this type of attack potentially so.Can use the media characteristic that is difficult to duplicate (such as the measurement of the swing feature of the track on the CD) to make and duplicate difficulty more accurately, but very firm bootlegger still can find the mode of making copy.Similarly, forensic watermark allows content owner's identification to be used for the equipment of pirate previous content, but does not stop the broadcast of pirate content.
For dealing with the risk that the bootlegger makes the unauthorised copies of medium, the content owner can be provided with a unique identifier of each copy on legal medium.For CD, these data can place and can partly go up in zone (such as the burning district on the CD in some existing compacting) or the CD-R that factory is write uniquely (for example, utilizing the memory technology that is used to make the technology that can write down CD and DVD, magneto-optic disk or the like such as current).The zone that can write uniquely only needs to carry a spot of information (for example, several bytes are to a hundreds of byte).Specifically, the sequence number that write down, user profile (name, telephone number, or the like), Cryptographic key or the like can be carried in this zone, and the digital signature of differentiating these values.For the recordable medium of consumer, can be an every blank form record unique medium sequence number (and looking associated digital certificate of situation) of manufacturing.
Content code on the medium can be configured to make that the authenticity of its unique data is checked when inserting medium to carry out playback time.It is unique digital signature for certain sheet medium that the data that depend on medium type and record, this checkout procedure generally include check.For preventing that the adversary from avoiding this check and checking that check can be used fuzzy code and carry out, inspection can be carried out repeatedly the different time of playback duration (for example) and assay can combine with decrypting process subsequently.If unique data is invalid, content code will be refused to reset usually so.Otherwise content code can be sure of that (a) medium are legal, or (b) it is the legal medium replication that has described unique data from a slice.
Then, effectively still be to cancel for judging described unique medium, the data field of the state of cancelling of the medium of the current insertion of indication in the non-volatile memory of Content inspection player.If do not find the revocation information of coupling, suppose that so described medium are for effective.For prevent to neglect or the cancelling of malice, can differentiate and cancel data by digital signature checked or other authentication data (such as the pre-mapping of cryptographic hash).Which action (if any) is data in the nonvolatile memory of player also can indicate recommend, such as (a) notify the user copy for illegal, (b) allow to reset under the resolution that reduces, carry out, (c) prevent from fully to reset or (d) allow the user (for example to buy content legally, by dialing a telephone number and import PUK, or by via a Internet and a station server interaction).Nonvolatile memory also can cover (over-ride) last message of cancelling, and (for example) makes that content can be by " releasing be cancelled " if desired.If there is the positioning indicator of a plurality of contradictions, sequence number or date can be used to judge which is up-to-date so.
In some cases, only creating to be useful such as the medium of playing on the device of Special Empower of the device of pre-registration.In this case, unique media information can be used to enable medium activated, rather than provide and cancel.The copy of preview for instance, (advance review) and the copy of trial-production generally need not (and not should) and can play on all players.Be recorded in the data that can write in the part can comprise decruption key or for every medium through authorizing the recipient to be specific out of Memory.Other data that the zone of unique record also can comprise name, e-mail address, account number or discern concrete recipient (for example, be used for forensic watermark purposes, interaction feature, or the like) or recipient's feature is (for example, watch preference, authorization data, group identifier, postcode, or the like).These territories also can or write during medium are sold afterwards, for example as preventing the activation step that medium from the shop steathily are played (thereby reducing the risk that the shop that medium is given on its shelf suffers shoplifting).Back-end system can be at unactivated medium always and is compensated the businessman, or charges to the businessman at medium when medium activated.Another purposes of this ability is distribution " locking " medium before official release date, then writes the key of enabling playback when being authorized to when resetting on the writable area territory.Information can be by making medium person entity or facility record in addition, for example retailing facility, transportation facilities or Security Agent mechanism (for example, if compressing means is not believable fully).If final user's device can write the part of medium, so also may work as play or record data during the release medium (such as authorization key, player identifier, or the like).Write part on the medium can (for example) be used for implementing the feature such as " giving as an addition " material, can pay and release described " giving as an addition " material is then play on a plurality of players.
For the off-line player, will on theme subsequently, transmit notice of cancellation usually.For instance, new theme can carry the sequence number tabulation (having the authentication data of enclosing) that medium have been cancelled in identification.If player has enough nonvolatile storage space (for example, hard disk), so whole revocation list can be by player stores.Otherwise, can contrast the insertion history of player and/or the inspection of nonvolatile memory slot and cancel data and cancel to judge whether to have in any medium by player plays.If so correspondence cancelled data storage in the nonvolatile memory of player.With the method, pirate " clone " medium can be play when it inserts for the first time, but will be cancelled (or otherwise " mark " goes out) after a slice is cancelled the medium of described pirate medium having inserted.In general, it is valuable that medium are cancelled, because it makes that pirate for consumers medium more do not have attractive force than legal medium.
Medium activated/as to cancel and can be used for implementing multiple sales promotion and security feature.For instance, a plurality of medium that can comprise different editions (for example, wide-screen, draw and move (pan-scan), director's montage version, or the like) are sold a film.For having prevented that the people from selling or hiring out described medium individually, its content code can check one or more other medium to be found expression in the nonvolatile memory of player.Look situation, also can require recently (for example, within a certain period of time or slot write in the increment of some of counter 447/448) to insert other medium.As another selection, medium also can need the user to insert another sheet medium (for example, by from described another medium loading secrete key value) at playback duration.Can set up a kind of sales promotion pattern, if wherein user's some combination of having play other content, so the user to give material as an addition certain with addressable, the decision of resetting also interrelates with out of Memory, such as the feature and/or the playback environment of player.
Player with online ability can check that the state of cancelling of theme of current insertion and the medium that are shown in player insert other theme in history and/or the nonvolatile memory slot.This inspection may be implemented in the content code or can be carried out by player.On line inspection also can be used for detecting a plurality of players and plays the situation that the player of monolithic medium (for example, the indication medium are by piracy) or excessive number had used specific a slice medium (for example, indicating it to violate permission agreement and hired out) simultaneously.
The bootlegger can manage to avoid cancelling inspection by the code of revising content.In this case, the subsequent section of code (for example, the code of carrying out after a while at playback duration) can (for example) by repeating described inspection or detecting described modification by the part that comprises Validation Code that is written into and checks medium again.Cancelling check result also can combine with decrypting process.
Certainly, can use the variant of described medium cancelling method.For instance, player can be stored the explanation type code through digital signature that is configured to discern the medium of cancelling.Whether these code snippets (snippet) can be carried out when each medium are inserted into and cancel with the theme of judging new insertion.Theme can be checked code (digital signature that preferably has the correspondence that will be checked by player) by storing revocation, and player will keep described cancelling and check that code is to be used to check following medium.Medium are cancelled inspection and also can be carried out by the code among the ROM of player, and (for example) is by storing the sector number of the CD of having cancelled and the form of hashed value in the nonvolatile memory of player.If medium be for writing, content also can originally store on one's body and obtain and cancel data (or can store the data of any other kind and purposes in the media, such as user preference, user profile or the like) at medium so.
Medium also can be used for carrying the data of cancelling about pen recorder.For instance, if consumer's pen recorder is configured to recognition data is placed on its record thing, player device can be kept the record of the register of having cancelled so.These records can be upgraded by the data of cancelling that are carried on the medium.The information that recordable media also can have the register that identification cancelled through manufacturing writes medium with the register that prevents to have cancelled.With cancel relevant data field and can differentiate through password, (for example) cancels with the malice that prevents involutory subtraction unit or carelessness.For instance, can comprise the register digital certificate by the recognition data of pen recorder setting and about the digital signature of medium sequence number.Can encrypt (public-key cryptography that for example uses third party agency) be arranged on the recordable media recognition data with the protection user privacy.Also can use threshold cryptography (Threshold cryptography), (for example) is to require pen recorder of a plurality of media identification.(it should be noted that the threshold cryptography also can be used in the others of technology disclosed herein, for example cooperate forensic mark to use to guarantee the needing duplicating material of some to recover mark.)
Another purposes that medium are cancelled provides the deterrence of a kind of extra copy right piracy at chance except that available other method.The data that are embedded in the forensic watermark can be discerned the previous medium of being play by a device.Depend on and implement to select, cancel its ID and be other medium of judging from the forensic watermark of pirate copies, cancel its sequence number approach to be used to distribute the medium of pirate material recordable media, to require extra authorisation step or the like can be before resetting from problematic medium favourable
Miscellaneous feature and ability
Safety covers key (Security Over-Ride Key): can design content and make that understanding player that safety covers key can avoid some or all safety inspections, thereby allow the visit to some or all contents.By supporting described key, the content owner can permit the visit of the restricted part of works (for example, if zone requires the content owner to permit the reviewer video being carried out visit based on frame by frame " rationally using ").(for example) if protect characteristic Design ground bad (causing the playability problem), these covering keys also can be used for content " release " from its shielded form is come out so.If desired, these keys can be by third party keeping (or being stored on the medium with third-party public key encryption).Also can be predefined for release when copyright is expired with covering key, (for example) may prevent that to handle anti-pirate mechanism content from entering the problem of public field.
(Multiple Round Collusion Analysis) analyzed in the collusion of many bouts: in some cases, the firm bootlegger output from a large amount of devices capable of being combined is to attempt to prevent the recovery of forensic watermark.If the bootlegger endangered so many device make content can not Direct Recognition subtraction unit not, might make up the evidence obtaining information of collecting from a plurality of contents version so.For instance, the information of collecting from first theme can be dwindled the scope of the device that may be used by the bootlegger, but does not discern all not subtraction units uniquely.When making second theme, can use this knowledge so that the forensic watermark that will provide about the further information of assailant and/or its equipment to be provided.Can repeat this process until discerning the bootlegger uniquely.
Countermeasure to the malice interpreter: may design the malice player to manage to recognize code security-related in the content.For instance, the malice player can be attempted to discern content and where carry out operation of RSA signature check and modification result, and (for example) makes invalid RSA signature seem effective.If make described player, so the content owner can edit new content use through the design to evade the different RSA signature calculation routines of this identification.The example of spendable operation comprises (unrestrictedly): rewrite code to avoid insecure operation; Make code fuzzy; Clogged with messages; Check that examination result of calculation is to detect attack; With intermediate value and/or result are combined with other crypto-operation (such as decryption step).
Interactivity: virtual machine/interpreter can be used for non-security task and safety applications.For instance, content code can be used for menu, text, figure, animation, user-interface elements or the like are shown to the user.Similarly, content can receive user command or the response that comprises (unrestrictedly) mouse input (for example, move, click), button (such as keyboard or far-end control input), light pen input and control lever action.Also can collect and use information about local player (such as the change of camera input, microphone input, user's body position, or the like) to reset with (for example) control.Player also can provide feature to implement with the auxiliary user interface of carrying out, and comprises (unrestrictedly) demonstration dialog box, manages display window, carries out speech recognition, the ability of leading subscriber preference or the like.As the deterrence to copy right piracy, the code of implementing the oolhiu interactive user feature can make up with security code, makes the bootlegger easily it to be distinguished.
Via access to netwoks and exchanging contents
Distribute on optical media though most consumer video and audio contents are current, can estimate to flow down the popularity of carrying can constantly increase.Safety practice provided herein can be through redesign to support the content of perhaps local caches in alternate physical medium or the stream except that physical medium.Be written into substituting of data as medium, via network retrieval content code and data from actual location in player.For instance, from the substituting of the invocation of procedure of medium request msg sector, content will be issued the invocation of procedure via the network requests data as issue.Different with passive medium is that far-end server itself can have processing power, for example allows it to send request (for example, so that player is carried out crypto-operation) and verify the result to content.Be used to protect security protocol (to comprise (unrestriction), SSL) may be implemented in the code or player (or other assembly) of content via the data of network exchange.
Simple server implementation will receive importing into request, read the data of correspondence and transmit the result from its oneself local memory storage from the user that verified the user of accessed content charges paid (for example, for).Data (for example) can be selected and/or revise to Fu Za server in real time embedding forensic watermark more, and can with other server interaction effect.Server also can store about or represent the far-end player information (for example, as substituting) based on the nonvolatile memory of player, transmit security code, carry out and cancel inspection in real time, safety upgrade is inserted in the content automatically, the Internet/network agent ability is provided and provides other service to content code for final user's customization.For instance, exemplary issued transaction may further comprise the steps: (a) content server receives the request of purchase from final user's player; (b) content server check payment; (c) content server transmission is configured to the part of the interpretable code of the functional characteristic of player of analysis user and/or security feature; (d) user's player operation explanation type code and return information about its characteristic; (e) user's player is responded and security check logic is transferred to (it comprises explanation type code and/or local code and can self-definedly generate) in the content server analysis; (f) user's player is handled inspection logic and response is turned back to server; (g) server authentication is responded; (h) content server is with the player of encrypted digital content (for example, audio frequency, video and/or image) transmission (for example, streaming (stream)) to the user; (i) user's player is to contents decryption (the correct computing of decrypting process can require correct key or from the result of security check logic).
Server processes itself can be by the control of explanation type code, and it is looked situation and uses the interpreter structure identical with player end (for example, DLX).The benefit of making is like this, can be under the situation of the physical hardware structure of not considering server content of edit.For home network environment, because server keeps security and decoding " intelligence ", outwards streaming is to the local device of having differentiated for content simultaneously, and institute is as especially attractive pattern.Similarly, for will be via multiple different Internet service the content of streaming, the interpreter of server end can allow content to be edited once and from any compatible services streaming.
In some cases, recipient's device also can have the ability of making its oneself security decision, such as wishing cache content at receiving trap and after a while it is transferred under the situation of the device subsequently of identity the unknown during initial the transmission in this case that initial transmission can comprise explainable code and/or the local executable code that is used to make its security-related decision-making by recipient's device.Because the code by the transmitting device operation also needn't be identical with the code that receiving trap is moved, so all devices support that identical interpreter or Programmable Technology is unessential.
In some cases, can relate to a plurality of servers and/or content transmits.For instance, content can comprise the security code that obtains from a plurality of entities, and described entity comprises (for example) server by player manufacturer and content owner's operation.In some personal computer environment, it is useful to use a plurality of interpreters also to can be.For instance, interpreter can be included in media interface (for example, CD drive), operating system, application software (for example, player), output unit (for example, amplifier) or the like.Perhaps or additionally, password enlightenment device also can be provided in the assembly.
Player operation is called and labelling method
Player device provides (usually with the software implementation) interpreter (virtual machine) that allows content code to carry out multiple individual operation.Described operation comprises to be handled virtual register and visits the storer that belongs to content code.In addition, content code also can call TRAP (being implemented on the peripheral operation in the player).TRAP can be used for carrying out content code by handling the operation (such as accessed peripheral) that its oneself resource can not directly be carried out, or is used to provide the higher performance of performance that can be guaranteed by content code than originally.
The labelling method that is used for this part is configured to C/C++ programmer and is familiar with.Type UINT8, UINT 32 and UINT 64 are respectively applied for expression 8-, 32-and 64-position signless integer.In an one exemplary embodiment, each prototype is corresponding to the sequence that should enter the 32-place value of storehouse before calling suitable TRAP computing.Because all values size in the storehouse is 32, thus be extended to 32 less than 32 parameter, and higher value uses a plurality of 32 place values to store.The actual quantity of 32 place values that relate in each TRAP computing can be zero (if parameter list is for empty).The quantity of parameter also can be variable, and prototype will finish with " ... " in this case.Be expressed as the array of " type name[size] ", for example " UINT32 test[16] " represents the array of 16 32 words.Pointer gauge is shown " type*name ", and for example the pointer of the called after testPtr of one or more 32 signless integers will be " UINT32*testPtr ".
Storehouse itself can only be and to implement zone in the storer of part visit of player of each TRAP by content code.For instance, exemplary storehouse can be implemented by being appointed as stack pointer by the emulation registers of content code visit.When calling TRAP, the value of this register is read the parameter value that has transmitted with the location by content code.If (stack pointer or stack content are invalid, take so such as the suitable action of ignoring the TRAP computing or replacing effective value.) exemplary process that an integer is pushed on relates at first and deduct 4, then store this value to advance to the storage address by new stack pointer defined from stack pointer.One value is popped be by at first from by the storage address read value of stack pointer appointment, then make stack pointer increase by 4 to carry out.After the TRAP computing, the code (for example) of content code and/or enforcement TRAP is removed described parameter by recovering the stack pointer value from storehouse.Other storehouse, and more generally, function call and parameter are transmitted technology and are known in background technology and also can cooperate the present invention to use.
For calling TRAP, caller at first promotes each parameter (rightmost parameter begins from the original shape definition), calls suitable TRAP computing and obtain rreturn value (for example, by reading the end value that is stored in routinely in the register 1).For instance, consider that following table is shown " UINT32TRAP_Random (UINT8*dst, UINT32 len); " TRAP.Before calling the trap computing, caller (content code) will at first promote 32-place value " len ", then promote 32-bit pointer value " dst " (its for should event memory storage address).Then caller will call suitable rudimentary TRAP computing.Usually (although needn't so), the content code thread that calls TRAP will stop when carrying out the computing of being asked.The rreturn value of TRAP (with the left side in the example prototype " UINT-32 " expression) is placed in it can be by in the position of content code retrieval (for example, by rreturn value is placed predetermined register).Most exemplary TRAP return state values (for example, indicate successful constant STATUS_OK, or the value of misdirection situation, or otherwise descriptive system or the result of operation or the value of state).For for purpose of brevity, if value only is a state value, the general content of omitting rreturn value during TRAP describes so hereinafter.Some TRAP does not return any state value but may fail (for example, if illegal input parameter is provided), and content code can guarantee that the input and/or the checked operation that provide suitable finish on schedule in this case.
The value of using the TRAP computing to be exchanged can (for example) use encryption and/or digital signature to be subjected to cryptoguard.For instance, the value that is delivered to TRAP can be used the public key encryption of player or other device.Value also can use symmetric cryptography to encrypt, and for example uses block encryption or stream cipher.Value also can be through digital signature.Responding also can be through cryptoguard.For instance, response can (for example) by the manufacturer of player, player, external device (ED), form entity or the like digital signature.The concrete combination of the cryptoguard of using (with the key of correspondence, or the like) can be prescribed or can content-based code request, the state of player requests, external device (ED), player, or the like.The key that is used for protected data can not be contained in player (or can not be visited by player), is content code and external device (ED) at end points for example but passes under the situation of data communication of player.
The TRAP computing often makes system state change.For instance, visible register value of content code and memory content can be changed.For instance, " TRAP_Random " example above will be stored output from random number generator to be used by content code.The part that is not subjected to the directly actuated playback system of content code is generally also by TRAP computing visit or modification.For instance, TRAP_SlotWrite can change the content of player nonvolatile memory slot, and TRAP_MediaReadRequest is increased to the formation that pending medium read with a request.These changes can be under the direct supervision of content code or can be not under it directly monitors.
The player mould is done
The TRAP computing of being supported by an one exemplary embodiment is below described.The others that it should be noted that restriction, constant and design have reflected one exemplary embodiment and needn't reflect other embodiment.
void?TRAP_Yield(UINT32?sleepTime)；
Surrender to the control of interpreter until (a) in the stipulated time of microsecond or (b) incident occurring than the former of (for example, medium read being finished, or the like) takes place.When calling TRAP_Yield, implement to need not to suspend interpreter, however suspend interpreter can be desirable, especially in order to save the battery electric power on the mancarried device or to preserve processor cycle on the multi-threaded system.Implement also can select to ignore the sleepTime parameter.This operation can consume 1 microsecond, even sleepTime has been stipulated that a smaller value or an incident take place earlier.If incident takes place, control will continue in 1 microsecond after incident more so.If there is not incident to take place, can suspends and carry out nearly sleepTime microsecond.TRAP does not return any information; When player is ready to, carries out and when next instruction, continue.
UINT32?TRAP_Random(UINT8*dst，UINT32?len)；
The len that storage is generated by player at random (or strong pseudorandom) byte in the dst place.
UINT32?TRAP_Sha(UINT8*dst，UINT8*src，UINT32?len，UINT32?op)；
To the len byte execution SHA-1 algorithm at src place and at dst place event memory.The value of Op comprises: increasing more, multidata arrives the SHA_UPDATE (0) that has the SHA state now; The new contextual SHA_INIT of SHA (1) of beginning before the hash deal with data; When hash is upgraded the SHA_FINAL (2) that carries out the end computing when finishing; SHA_BLOCK (3) (be equivalent to SHA_INIT and SHA_FINAL are set) with the computing of complete block.
The free space that should have at least 512 bytes at the dst place, and the content in described space finish computing (for example, op=SHA_FINAL) will be before taking place for uncertain.
Player is implemented to use 512 bytes at dst place to be used for the temporary transient storage of state, but should suppose that the content of dst selected mala fide by content code.If STATUS_OK is returned in success so, otherwise return in the error code of definition one.
UINT32?TRAP_Aes(UINT8*dst，UINT8*src，UINT32?len，UINT8*key，UINT32?opOrKeyID)；
The key that uses the key place to from the len onblock executing AES ECB algorithm of src (such as hereinafter conversion) and the store decrypted result in the dst place.The value of OpOrKeyID regulation is key derivation and whether carry out AES and encrypt or decipher how.Support the following value of OpOrKeyID:
● opOrKeyID=AES_ECB_ENCRYPT (0xFFF10000)-use ecb mode is encrypted data with the 16-byte key at key place.
● opOrKeyID=AES_ECB_DECRYPT (0xFFF10001)-use ecb mode is deciphered data with the 16-byte key at key place.
● the media key of the medium of the current insertion of opOrKeyID=AES_ECB_DECRYPT_MEDIA_KEY (0xFFF10002)-be used for then uses the result to use the data decryption of ecb mode to the src place as key to the value of the encrypted secret key deciphering at key place.
● any other value of opOrKeyID=.Use is deciphered the encryption key at pointer key place by the player keys of opOrKeyID identification, then uses the decruption key of gained to use the data decryption of ecb mode to pointer src place.(note: content code can be checked the key scope of the certificate of player with the main AES key collection of judgement player; These keys not necessarily will begin at 0 place, and can have a plurality of key sets.Though) can be arranged in player application by the selected key of opOrKeyID, but key also can be arranged in (unrestrictedly) driver, device driver, display/output unit, is remotely located on the network, is arranged in user's extraction-type smart card (or other tamper-resistant chip), is arranged in non-extraction-type tamper-resistant chip, the multiple arrangement that is placed in, or the like.First decrypt operation (encryption key of deciphering specified content) can be performed by comprising the device of discerning key, (meaning promptly in batch processing simultaneously, the data at deciphering src place) can carry out (the high speed password module that for example, is used for the nonvolatile memory of key storage) elsewhere in shortage.
Crypto-operation, the crypto-operation that especially relates to external device (ED) also can be via TRAP_DeviceDiscovery and/or TRAP_DeviceAccess and are implemented.Can use content code to implement CBC (CBC), counter mode and other block cipher mode (using computing according to circumstances) such as TRAP_Xor by the ECB computing.Alternate embodiment also can directly provide algorithm except that AES and/or the pattern except that ECB.
UINT32?TRAP_PrivateKey(UINT8*dst，UINT8*src，UINT32?srcLen，UINT32?controlWord，UINT32?keyID)；
This computing uses in the RSA private key of being selected by keyID (being generally 0) or player some other asymmetric key of (or can the device by the player visit in) to change some data.From keyID, result's length and arithmetic type (for example, signature or deciphering) imply.About the information of available key, comprise corresponding public-key cryptography and certificate (content code can be checked it), can use TRAP_DeviceDiscovery and/or TRAP_DeviceAccess and obtain.Select to submit to which data to determine (for example, can submit any function to) from any data of medium and/or TRAP by content code.For instance, can be by when producing the data of being signed, incorporating event data (seeing TRAP_EventGet) into and user interface (and other) event correlation at the value submitted to of signature computing.
For the main RSA private key (keyID=0) of player, this computing produces the RSA signature of the 2048-position of SHA-1 hash.It is as follows to calculate this hash: (a) hash is handled the value (MSB at first) as the srcLen of 4 byte codes; (b) hash is handled the content (anticipating promptly the srcLen byte at src place) of the impact damper of stipulating the user; (c) hash is handled the value (MSB at first) as the controlWord of 4 byte codes; (d) if be provided with controlWord position 31 (MSB), hash is handled the value of medium ID; (e) if be provided with controlWord position 30, it is PC+4 that object pointer is set, and covers dst; (f) if be provided with controlWord position 29, hash is handled (the control word mod 2 that begins with current program counter
16) code byte; Then (g) incorporates the currency of PC in the hash into if be provided with controlWord position 28.Then beginning to locate (prepend) and fill up the secret exponent (secret exponent) that value that the SHA-1 hash result fills up then is enhanced player by will " 0x00||0x01||0xFF (repeating 233 times) || 00 " being added to the SHA-1 hash, is mould with the open modulus of player.
For the check signature, the open index of player is 3, and open modulus can check the certificate of player to obtain by the open code (it can be the constant that is contained in the content code, and looking situation is fuzzy form) of using system scope by content code.
The option that is provided by control word allows content code to obtain proof about execution environment, and signature is by the performed situation of the compatible apparatus that is different from the device that comprises interpreter such as detecting wherein.The binding of verifying between interpreter and the content code can be used for dealing with following situation, and promptly the assailant manages the hostile content of utilization and operation on legitimate player and produces the password result who is used for by the malice player use of operation legal content.
Embodiment can support any combination of asymmetric cryptographic algorithm (RSA, DSA, elliptic curve variable, Diffie-Hellman, or the like), can support a plurality of computings (signature, check, key protocol, or the like) and a plurality of cipher key size.Symmetry operation also can combine with asymmetric computing.It should be noted that some crypto-operation such as the RSA signature check may be implemented in the content code and without any special trap (self-trapping), or only use universal performance to quicken computing (for example, TRAP_AddWithCarry, or the like).More the example of complex password TRAP will carry out some or all following steps: (a) carry out the signature of RSA public-key cryptography computing with the check data block; (b) if signature effectively, is carried out the computing of RSA private key so that the block data in checking is partly deciphered to recover symmetric key; (c); If the RSA successful decryption uses symmetric key to some data (for example, the data in the signature block behind encryption key) deciphering and check (for example, using HMAC-SHA), then (d) use interpreter decrypted data be treated to code.
In alternate embodiment, can provide the password support to be used for signing, check, decipher, encrypting or otherwise handle the input and output of any way of other calculating operation (such as other TRAP).
UINT32?TRAP_AddWithCarry(UINT32*dst，UINT32*src，UINT32?len)；
The multiword additive operation with carry propagation is carried out in this computing.With src[0..len-1] value located is added to dst[0..len-1].Value src and dst can be verified as separately to point to and be stored as the plurality of len word and use address src[0 respectively] or dst[0] most significant word located encodes.Least significant word lays respectively at src[len-1] and dst[len-1] locate.
For instance, number 0x08090A0B0C0D0E0F will have len=2, and will store in the mode that adds the 4 byte offset places that quote (for example, src[1]) by pointer by the position of pointer regulation (for example, src[0]) and value 0x0C0D0E0F with 0x08090A0B.
If the source and target region overlapping then only could guarantee correct computing when src=dst.If the addition step in last (the highest effective or left side) produces carry, the rreturn value of computing is 1 so, and otherwise is 0.
(note: the TRAP_AddWithCarry computing also can be used content code together with various other TRAP operations and implement under the situation that does not have independent TRAP, but special-purpose TRAP makes the player deviser can be chosen in available otherwise effective technique on each platform, thereby allows to realize that more performance guarantees in a variety of possible players designs.)
UINT32?TRAP_SubtractWithBorrow(UINT32*dst，UINT32*src，UINT32len)；
This computing is carried out has the multiword subtraction that borrow (carry) transmits.Specifically, from dst[0..len-1] deduct src[0..len-1] value.Value src and dst point to the plurality that is stored as the len word separately and use address src respectively or the most significant word at dst place is encoded.For instance, number 0x08090A0B0C0D0E0F will have len=2, and will store in the mode that adds the 4 byte offset places that quote (for example, src[1]) by pointer by the position of pointer regulation (for example, src[0]) and value 0x0C0D0E0F with 0x08090A0B.If the source and target region overlapping then only could guarantee correct computing when src=dst.If the subtraction process of last (the highest effectively, or left side) requires borrow, the rreturn value of computing is 1 so, and otherwise is 0.
UINT32?TRAP_MultiplyWithRipple(UINT32*dst，UINT32*src，UINT32multiplicand，UINT32?len)；
This computing makes multiplicand and dst[0..len-1] in number multiply each other.Result's length is the len+1 word.Result's most significant word is returned, and remainder is stored in dst[0..len-1] in.The value of dst should be pointed to the plurality that is stored as the len word and use the most significant word at the place, address that is pointed to by dst to encode.
The highest effective 32 of return results.(this equals multiplicand and dst[0..len-1] the highest effective 32 of product.)
void?TRAP_XorBlock(UINT32*dst，UINT32*src，UINT32?len)；
The XOR result of two memory blocks is calculated in this computing.To be stored in src[0...len-1] data and the dst[0...len-1 that locate] data located carry out XOR.This computing (for example) is useful when producing CBC mode block crypto-operation.Computing when undefined src and dst overlapping block.Rreturn value is not provided.
void?TRAP_Memmove(UINT8*dst，UINT8*src，UINT32?len)；
This computing copies to dst with the len byte from src.Even source and target block are overlapping, the result also is correct.Rreturn value is not provided.
UINT32?TRAP_Memcmp(UINT8*ptr1，UINT8*ptr2，UINT32?maxlen)；
The storer at ptr1 place and the storer at ptr2 place are compared in this computing, relatively nearly the maxlen byte.If do not find difference, rreturn value is 0; If the value at first ptr1 place, difference place is bigger, rreturn value is 1; And if less in the value at first ptr1 place, difference place, rreturn value is 0xFFFFFFFF.
void?TRAP_Memset(UINT8*dst，UINT8?fillvalue，UINT32?len)；
This computing is to fill storer by the byte value of fillvalue regulation.Destination address is stipulated by len by the number of dst regulation and byte to be stored.Rreturn value is not provided.
UINT8*TRAP?Memsearch(UINT8*region，UINT32?regionLen，UINT8*searchData，UINT32?searchDataLen)；
This computing searching storage is sought one or more bytes.Specifically, occur its first time of in region (it has the length of regionLen byte), finding searchData (it has the length of searchDataLen byte).If searchData is fully at region[0..regionLen-1] in, coupling will be found so; Do not count in this scope beginning but extend beyond terminal coupling.The pointer that points to first coupling is returned in computing.If do not find coupling in region, rreturn value is NULL (zero) so.
UINT32?TRAP_SlotAttach(UINT32?slot，UINT32?codeLen，UINT32reqPriority)；
This computing is adhered to existing nonvolatile memory slot or is disposed new slot (if the setting of slot is zero).If the code of regulation (in the beginning of the PC place of caller and extend the codeLen byte) does not match with the authorizationHash of slot, slot adheres to computing will fail (it is zero to be defaulted as slot) so.(to obtain extra information, referring to the part that is entitled as " protection nonvolatile memory " about the nonvolatile memory support.)
UINT32?TRAP_SlotRead(UINT8*dst，UINT32?slot)；
The reading non-volatile storage slot is attempted in this computing, and if successfully, the result is stored in the position of regulation.If the slot of regulation is not the current slot that adheres to, do not return the private data part of slot content so.(to obtain extra information, referring to the part that is entitled as " protection nonvolatile memory ".)
UINT32?TRAP_SlotWrite(UINT8*newContents)；
This computing attempts to write the current nonvolatile memory slot that adheres to.(for to obtain extra information, referring to the part that is entitled as " protection nonvolatile memory ".) to write computing be (atomic) that is exceedingly fast to slot, guarantees that computing failure (for example, owing to the power failure that can't expect) computing will all finish or not begin at all if mean player.
The TRAP_SlotWrite computing guarantees that the data that write have the right value of the several portions that is used for slot, comprise creatorMediaID (identifiers of the medium at the content code place of initial creation slot), lastUpdateMediaID (writing the identifier of medium at the content code place of slot recently), lastUpdateSequenceCounter (overall situation writes the value of counter, and it writes monotonously at every turn increases once) and slotPriority (it stipulates the rewriting priority of slot).
Content code control writes the data of general areas.The example of storable information comprises (unrestrictedly) playback status information (such as suspending/position and the configuration that stop to reset), audit information (comprising that operation hash or other password differential method are with Audit data), the high score of electronic game, be used for finishing automatically the default information (address name that electronics is bought, station address, credit number, the credit card time limit, the address sends bills through the mail, the transportation address, telephone number, the e-mail address, or the like), executable code (for example, new security logic, correct the Hotfix of the problem of theme or player, or the like), key (with other security information), or the like.
Whether rreturn value indication write operation the cardinal principle state of success and medium (for example, if nonvolatile memory writes circulation near exhausting then for warning owing to what cross more number).Read operation can be carried out after writing, and writes successful with check extraly.
UINT32?TRAP_MediaEject(void)；
This computing attempts to eject any extraction-type medium in the current drive.Success call TRAP_MediaEject () after, interpreter can continue operation, although interpreter then will oneself be closed by calling TRAP_Shutdown () under many situations.Do not require that the player support ejects automatically, described in this case operation will be failed.(content code can use TRAP_DeviceDiscovery to detect and eject support and other player capabilities.)
In some cases, the part of the storage space of preservation content code can be favourable when changing medium.For instance, this can be useful on when switching between the CD that multiple optical disk is concentrated and to be stored in the more substantial data of preservation in the nonvolatile memory than easily.In this case, TRAP_MediaEject is used to eject initial media.The user then inserts another sheet content (for example, after the prompting that is subjected to overlapping (overlay)).Can judge the identity of the new content of inserting via TRAP_DeviceDiscovery.For preventing unexpected media change, require clear and definite calling to enable new medium to TRAP_DeviceAccess.Then can be written into being labeled as of new medium and authorize the part that reads usually.(some part can be designated its only should read by the content code of medium oneself.) require more complicated medium can allow the code on the initial media to differentiate second medium to the embodiment of medium (for example, CD is to CD) link ability, and also allow the code on second medium to differentiate the source medium.Medium differentiate and also can be carried out by player, for example based on the rule of digital signature be carried on certificate on source CD and the object optical disc.
UINT32?TRAP_MediaReadRequest(UINT32?offsetHigh，UINT32offsetLow，UINT32?len)；
This computing notice media subsystem begins to retrieve some data.In an exemplary embodiment, the value of len can be no more than 1 megabyte (1048675 byte), comprises sector borders.If (skew is not on sector borders, and meaning is not the integral multiple of SECTOR_SIZE promptly, and length must not deduct sector offset above 1 megabyte so, and described sector offset is calculated according to offsetLow mould SECTOR_SIZE.Current SECTOR_SIZE is defined as 2048 bytes.) player allow at least two uncompleted requests of buffering (for example, one current just serviced and one then with serviced).This allows content to keep driver busy continuously.Player will use the pending buffer device of an independent megabyte for each pending request usually.One means and reads attempting (meaning promptly, described request is not wrong significantly) without any returning of mistake, but does not guarantee to read with success practically.(referring to TRAP_MediaReadFinal.)
Though this computing only requires execution to read (and reality is not loaded in any data in the memory area of content code), but but alternate embodiment define objective address also (for example) if by receiving an incident or finishing described approach whether and cooperate NVRAM security capabilities (for example to use together based on code by checking whether target buffer has filled up to detect to read, referring to TRAP_SlotAttach), can require safety practice to guarantee the bootlegger and do not use pending request to destroy the security code that is associated with the NVRAM slot of release or otherwise to attack security so.For instance, player can suspend in the release of NVRAM slot or forbid that medium read, and/or refusal NVRAM slot adheres to request when described computing is pending.
UINT32?TRAP_MediaReadFinal(UINT8*dst)；
Whether this arithmetic check (first enters) is the earliest asked to read and is finished.If no, return the rreturn value of STATUS_NOT_DONE so.If do not read is pending, returns the rreturn value of STATUS_NOT_FOUND.If read the request failure, return STATUS_ERROR.Otherwise, the data of request are sent to the specified address of the storage space of content code and rreturn value STATUS_OK from the impact damper of driver.If the address is 0xFFFFFFFF, forgo data so.
It should be noted that and use TRAP_DeviceAccess rather than this computing to dispose and carry out special reading (such as the reading of burning district, data read under the disabled situation of error-detecting/correction, or the like).
UINT32?TRAP_MediaWrite(UINT32?offsetHigh，UINT32?offsetLow，UINT8*src，UINT32?len)；
This computing writes medium with predetermined data, begins in skew place of stipulating.(skew is for the 64-place value, is encoded as 32-position upper value and 32-position lower value.)
This computing is only applicable to support the media formats that writes.Can write the specific part that the zone also can be limited to medium.Under particular condition, also can forbid writing (for example, if if do not license the valid certificate of write capability if changed register identifier on the medium medium and the current device medium that do not match, or the like).
TRAP_DeviceAccess can be used for providing protection or enables and write required any essential discriminating or key protocol.For the medium of write-once, can refuse to rewrite the trial (with the risk of emitting the medium that destroy described position) that has before write part, unless obtained clear and definite mandate (for example, via TRAP_DeviceAccess).Though (be generally unwanted, said write can be useful under particular condition, for example, uses so that medium self-destruction in response to attack.) if driver allows the write head modulation, follows the direct control of rail control, error correcting code, a read/write optical characteristics or other configuration parameter, so also can adjust these via TRAP_DeviceAccess.Can make amendment to the feature of the medium that write for the evidence obtaining purposes, for example allow the content owner to judge which writing station makes specific a slice optical media.
UINT32?TRAP_EventGet(UINT8*evBuf，UINT32?len)；
Whether this arithmetic check has any incident (change such as operating user interface, safety, or the like) be pending, and if, storage about the information of first (or priority is the highest) incident in locating by the address of event regulation.If do not find incident, the content of rreturn value STATUS_NOT_FOUND and event do not change otherwise, trap returns STATUS_OK and storage is described the information of this incident in the evBuf place (but can not store above len byte).
The data of returning in events buffer (evBuf) depend on incident.If return user interface event, store following data structure at storage address place so by the evBuf regulation:
typedef?struct{
UINT32?Source； /*Device?type?that?produced?event?*/
UINT32?Action； /*Actual/suggested?action?for?event*/
UINT32?Char； /*UTF-8?value?of?event(if?applicable)*/
UINT32?Direction；/*Compass?values?for?event*/
UINT32?Xpos； /*Pointer?X?position?for?event*/
UINT32?Ypos； /*Pointer?Y?position?for?event*/
UINT32?Reserved[10]；/*Do?not?interpret(future?use)*/
}EventInfo_UserInterface；
The Source territory identification device that incident originated in.The explanation in Source territory can be judged in advance or judge (for example, via the information of obtaining from TRAP_DeviceDiscovery) by content code.The example in assignable possible source comprises (unrestrictedly): Long-distance Control, keyboard, panel key, mouse (with other indicator device), media drive, external device (ED), timer, coder-decoder, the unknown/unspecified source, or the like.
The action that Action territory regulation is advised for incident or the action of trigger event.This value can be mode (for example, influencing the current state of player) or can be constant.Action can change playback mode or have other effect.The example of possible action comprises (unrestrictedly): play, suspend, stop, refund (with various speed), F.F. (with various speed), slow motion (with various speed), outage, eject, channel raises, the channel downward modulation, select, enter, volume is adjusted (or quiet), guiding/menu is selected, change the visual angle, jump into (skip-forward), sight is selected, user language is selected, captions control, video angle (video angle) changes, select, retreat, advance, be, not, buy, withdraw from, help, mistake, output unit changes notice, playback environment reconfigures notice, safety warning, or the like.If be unknown (such as the situation that does not have corresponding to the action of incident), this territory is zero so.(note: this territory all is effective for user interface event and other incident.Discern for example the structure of EventInfo_UserInterface, EventInfo_SecurityAlert or the like for the highest effective 16 of described value with converse domain.)
Char territory regulation corresponding to the character of key (for example, use the ASCII coding, double byte, or the like).If be unknown (such as the situation that does not have corresponding to the character of incident), this territory is zero so.
Direction territory regulation incident indicated direction, if or do not have, be zero so.Although side vector can be turned to some predetermined value (for example, north/go up, northeast/upper right, the right side/east, or the like), direction can be any angle.
If incident can be interpreted as pointer moving or action on standard x/Y grid, a position is indicated in Xpos and Ypos territory so.If incident is not corresponding with X and/or Building Y mark, it is zero that corresponding territory is set so.
It should be noted that and to adopt multiple mode to explain single incident (such as the actuation of keys on the remote entry unit).For instance, on some input media, as " on " button also corresponding to the numeral 8.In this case, will produce and one have " on " direction and the incident in the Char territory of numeral " 8 ".Content code will use its current understanding to what input of needs to judge which is suitable.(in an alternate embodiment, player can provide independent ability or information with auxiliary content code interpreter customer incident, or allows the content code regulation how to explain to have the incident of some possible explanations.If) event type of content reception the unknown, it can ignore its (unless indicate in addition the crucial position that is specified in the source territory) safely so.
For non-user interface event (such as announce that device adds, device is removed, device reconfigures, other playback environment configurations changes, from the requests for data of external module, operate the incident of completed notice or the like) or, can provide other data field for incident from the user interface of other kind (such as speech recognition capabilities or be configured to the digital camera of monitoring user attitude).For some incident, content code call extra TRAP (such as the TRAP of dealer's special use) with obtain extra information can be essential.
Use poll to detect change though it should be noted that the TRAP_EventGet computing, alternate embodiment can use interruption or other mechanism of knowing to come processing events.
UINT32?TRAP_CodecOutput(UINT32?idx，UINT8*buf，UINT32?len)；
This computing is arrived coder-decoder with data transmission.Simple player can support that only a coder-decoder (for example, CODEC_AUDIO_AND_VIDEO) or two coder-decoders (for example, CODEC_VIDEO_MPEG2 and CODEC_AUDIO_MPEG), and that more complicated player can be supported is many, for example supports the content stream of a plurality of kinds and enables feature such as picture-in-picture (picture-in-picture).Can use the TRAP_DeviceAccess computing that the coder-decoder parameter is set.
UINT32?TRAP_CodecSetTime(UINT64?time)；
This computing is provided with chief editor's code decoder clock.Setting is zero to make that clock and the video time stamp that is embedded in the data that are provided to TRAP_CodecOutput are synchronous again.Use video buffer to this order buffering, so effect is delayed, until running into this order.Use TRAP_CodecFlush, this computing is used to enable the real-time video splicing and allows content code seamlessly to switch to another from the video/audio stream of a compression.
UINT32?TRAP_CodecSetRate(UINT32?rate)；
This computing is provided with the speed and the direction of coder-decoder consumption data.The rate value is through converting a signed integer to and being reduced in proportion by factor 64.For instance, speed is 0 to mean " time-out ", and 128 is 2 times of F.F.s with playback speed, and-256 (0xFFFFFF00) are for refunding with 4 times of speed and 16 for 0.25 times of slow forward play of speed.If do not support the value of being asked, coder-decoder is by ignoring symbol and the maximum rate bigger, that observe player that rounds up is selected next immediate value so.Exception is some mark replay rate, and wherein coder-decoder should not be rounded to 0 (time-out) or 64 (normally).If the replay rate (opposite) that regulation is negative, coder-decoder (via TRAP_CodecStatus) will be usually with opposite order request video GOP so.Acquiescently, for the replay rate except that 64, audio frequency is quiet.
UINT32?TRAP_CodecFlush(void)；
This computing refreshing video and audio codec buffer zone.If content code wishes to delete data in the coder-decoder buffer zone so that switch to another stream apace from a stream, use this order so usually.For instance, if user's request is jumped into 1 minute, content code can use this computing to remove any data in the coder-decoder buffer zone, to make the new data of submitting to of can decoding immediately so.
UINT32?TRAP_CodecStatus(CodecInfo*info)；
This computing retrieval is about the information of the fifo queue of coder-decoder and the next video blocks or the audio block of coder-decoder expectation.The data value that returns comprises that the current time stamp (comprises corresponding to the audio-visual information of current being shown/export, current not compressed information, time stamp with current information in the coder-decoder impact damper), become the amount of the time of sky up to the coder-decoder buffer zone, the number of available byte in the coder-decoder buffer zone, the next data that should be added to the coder-decoder buffer zone (for example, when retreating broadcast MPEG-2 video with high speed, this can be previous " I " frame) the position (for example, next, previous, tracking distance) and type (for example, complete GOP or " I " frame).Under situation about being suitable for, provide independent information for each coder-decoder (audio frequency, video, or the like).
UINT32?TRAP_OverlaySetup(UINT32?idx，UINT32?width，UINT32height)；
This computing configuration has the overlay plane of exponential quantity idx, and described overlay plane has the size of regulation and is blank (fully transparent).
UINT32?TRAP_OverlaySetPosition(UINT32?idx，UINT32?x，UINT32?y)；
The overlay plane that this computing is provided with regulation (x, y) position of (wherein 0,0 is the corner, left side) on display.This computing reality does not show overlapping; It is overlapping that it only stipulates will where show when calling TRAP_OverlayShow ().
UINT32?TRAP_OverlayShow(UINT32?idx，UINT64?pts)；
This computing shows overlapping.The pts value overlapping time that should occur of regulation, for example be used to make overlapping and audio video synchronization lower floor.
To a plurality of the calling of TRAP_OverlayShow (together with to other in order to the suitable image of actual creation, set palette, or the like the calling of overlapping computing) can be used for creating animated menu, simple picture-in-picture video and any way other animation overlapping.
UINT32?TRAP_OverlayHide(UINT32?idx，UINT64?pts)；
This computing is hidden but is not removed overlapping.Hide and overlappingly to make it can be used for being displayed on once more after a while official hour (pts) to hide overlapping.
UINT32?TRAP_OverlayClear(UINT32?idx)；
This computing is removed overlapping.Remove overlapping meeting and wipe its content, making needed to be provided with once more its (referring to TRAP_OverlaySetup) before showing it once more.
UINT32?TRAP_OverlaySetPalette(UINT32?idx，UINT32*color，UINT8*trans)；
The palette that this computing regulation is overlapping comprises in 256 palette values each color (for example, RGB or YUV) and transparency (opacity).To the change of palette can be used for making overlapping have animation effect or revise overlapping (for example, with blast around the edge of selection area, change translucent overlapping pane (overlay pane) opacity, make image as seen, or the like).
UINT32?TRAP_OverlayBitmapDraw(UINT32?idx，UINT32?x，UINT32?y，UINT32?width，UINT32?height，UINT8*bmp)；
This computing the regulation overlapping on draw bitmaps.Draw the overlapping of border that surpasses the overlapping region and will produce mistake, maybe can produce aesthetic uncertain result.Yet player should not make buffer zone overflow or cause any other security gap (security breach) under described situation.The image (it can be compression or unpressed) that parameter b mp regulation will be drawn.Alternate embodiment can provide the ability that operation maybe can provide execution convergent-divergent and other manipulated image of drawing, thereby unloads these processes (it is frequent to be generally calculating) from content code.
UINT32?TRAP_OverlayTextDraw(UINT32?idx，UINT32?x，UINT32?y，UINT32?size，UINT8*text)；
This computing the regulation overlapping on rendering text.11 items in the palette are used for painted (the comprising the anti-sawtooth with translucent edge) of text.Content code also can use the image rendering ability to come videotex, if for example player lacks required font, character set, or the like.
If line of text and overlapping mismatching are pruned it (crop) so.Support to newline is not provided; This is the responsibility of caller.The size of the text that size parameter regulation will be drawn, and can be (for example, reflect user preferences, the feature of current display, or the like) of player acquiescence.
UINT32?TRAP_OverlayRectDraw(UINT32?idx，UINT32?x1，UINT32?y1，UINT32?x2，UINT32?y2，UINT32?color，UINT32?filled)；
This computing is drawn a rectangle on regulation overlapping.Input parameter stipulate overlapping index (idx), on-the left side coordinate (x1, y1), down-the right side coordinate (x2, y2), color and indicate whether to fill Bu Lin (Boolean) value (filled) of rectangle.
UINT32?TRAP_SockConnect(UINT8*name，UINT32?port)；
This computing opens one to the network connection based on socket by the address of name defined on the port by port regulation.TRAP_DeviceAccess can be used for disposing socket setting and decision network connect be current available, be available potentially (for example, by attempt dial) via modulator-demodular unit, still determine and can not utilize.Existence that network connects and reliability depend on enforcements (for example, have network probably with the integrated mancarried device of cell phone and is connected, but just do not have without any the device of wireless connectivity support is possible).
Player support to socket/network operation is selectable, but for standardized with provide content can so as to the visit remote network resource (but when time spent) accordant interface.The socket support is asynchronous; Require the content of synchronization of access to answer poll until retrieving desired data.Carry out the detection and the configuration of network parameter via TRAP_DeviceDiscovery and TRAP_DeviceAccess.
UINT32?TRAP_SockClose(void)；
The connection when front opening is closed in this computing.
UINT32?TRAP_SockRecv(UINT8*buf，UINT32?len)；
This computing receives the data in buf from a connection of opening.
How content code control uses the data that received.Example comprise (unrestrictedly) obtain up-to-date security code, check the state of cancelling, handle payment, buy (and purchase) goods/business, download bid/advertisement (comprising price and purchase information) of giving content, down loading updating as an addition, (the film beholder chats to implement the multi-user interactive system, or the like), network browsing (look webpage that situation implements by means of player reproduce and/or browse ability), or the like.
UINT32?TRAP_SockSend(UINT8*buf，UINT32?len)；
This computing will be sent to the connection of opening by the data that buf points to.
UINT32?TRAP_DeviceDiscovery(UINT32?dev，UINT32?qID，UINT8*buf，UINT32*len)；
Player environment discovery procedure (TRAP_DeviceDiscovery and TRAP_DeviceAccess) provides about the information of playback environment and the ability that controls environment is provided to content code.For instance, content can wish to carry out following operation, such as (unrestrictedly): judge the player setting (such as default player language, volume, brightness, contrast, output resolution ratio, or the like); Find to support which selectable invocation of procedure; The judgement playback environment configurations (state of the device that adheres to, the software driver/program in the activity, playback environment assembly, or the like); Differentiate output unit; Search assembly (be present in local, direct-connected, or connect via network, or the like) and visit selectable or extraction-type device.
TRAP_DeviceDiscovery provides the answer by the problem of qID defined by the device of dev regulation.In order to know the information about playback environment, playback code can be inquired the typical problem of each device one tabulation.Is the example of the problem of being supported comprises (unrestrictedly): device supported which qID (problem ID)? if any, what is the female device of this device and the device ID of sub-device? role (the memory storage of this device in system, user interface, video display, loudspeaker, mancarried device, the networking assembly, or the like) what is? identity (the sequence number of device, manufacturer's information, model, version, date, keeping life, or the like) what is? what is the certificate (with other code data and ability) of device? does device comprise (maybe can visit) which Cryptographic key? which role's (record of device, transmit, show, or the like) current using and which role is unactivated? is device supported which agreement and current the enabling of which agreement (and protocol parameter)? does device support to receive executable code? if support, the execution environment feature be (explanation type or this locality, the specification version of being supported, multithreading still is single-threaded, safety certificate) what is? the value of the current timer of device (comprise the time zone, or the like) what are? does device support what is which configurable parameter and its currency? how is the state of device?
The typical problem tabulation can be along with the time expands; Become the device of making before the part of typical problem tabulation at particular problem (qID) and will respond inquiry with error code STATUS_QUESTION_UNKNOWN with described qID.The problem in the typical problem tabulation that it should be noted that equally will make the highest significant position (position 31) of qID remove all the time.The problem ID that this highest significant position has been set is the problem of the device special use that is preserved for expanding.(must know the expansion qID tabulation and the response method of device about the content code of the extend information of concrete device with discovery through design.)
Call routine and should transmit by the maximum length (in byte) as the buf of position impact damper pointed, it is pointed out by len.The value of returning in Len will be indicated the number of the byte of the actual buff of writing.
When device was connected to system, player was to described device distributor ID.To install disconnect to connect and not cause that device ID loses or is redistributed into another device from system.Device ID zero is preserved for main player itself (although player also can have extra ID).Device ID insert new medium or with device ID (dev) acyclic homologically trioial with being constant before the TRAP_DeviceDiscovery.When being set at dev call TRAP_DeviceDiscovery when zero-sum qID is set to zero, abandon all current assigned unit ID, if suitably then carry out, and redistribute device ID to the rescaning of all devices.The change of device or device configuration produces incident (being obtained by TRAP_EventGet) usually.
The information that is provided by TRAP_DeviceDiscovery can be used to judge whether play by content code, judges what how to be play or plays, derive data, identification (or solution) compatibility issue, assessment risk that decruption key or other cryptographic parameter, conversion will be performed as code subsequently, judge player capabilities, identification user preference and carry out other safety and non-security role.
TRAP_DeviceDiscovery should not change the state of system; The operation of modifier state should be used TRAP_DeviceAccess.
UINT32?TRAP_DeviceAccess(UINT32?dev，UINT32?opID，UINT8*buf，UINT32*len)；
This computing request is carried out by the device of opID regulation by the device of dev regulation and is operated.Operation is generally at specific device.This TRAP (and/or socket TRAP) is often used between the device or the message transmission in the device, and is used to be provided with configuration parameter and usually manages playback environment.The content of the parameter of being transmitted depends on opID.Depend on opID, impact damper (buf) can be used for from delivery of content information or transmission information to interior perhaps above-mentioned two kinds of situations.
TRAP_DeviceAccess can be used for implementing ability very widely.For instance, security parameter (how being written into other parameter of data such as key and influence from physical medium) can use TRAP_DeviceAccess and stipulate.Described computing also is used for and remote-control device and other assembly (comprising hardware and software component) reciprocation, comprise (unrestrictedly): the transmission data, receive data, carry out key protocol, judge the state of cancelling, carry out bamboo fish trap not, change configuration status, control power management features, termination/control process, or the like.
For instance, TRAP_DeviceAccess can be used for the copy of film is sent to remote-control device.Run on the content code recognition objective device and be used for the proper handling ID of this transmission at first on the dispensing device.It also will carry out any device discriminating, key change or other required safe operation.Although (before transmitting, carry out safety analysis the most at large, can be extraly or alternatively during main data transmit or carry out key distribution and other security-related process afterwards.) then, it will submit the part (if recipient's support is looked situation also together with explainable code) of film to remote-control device to.The form of the data that send is consulted by content code and destination apparatus and is finally controlled by content code.For instance, the content code that transmits can from select, readjust by a plurality of forms of destination apparatus support or otherwise converted contents, be embedded in forensic mark the content and before content is provided to destination apparatus to its deciphering/encrypt again.The code that sends with content also can be different from the code in fact just explained by dispensing device (for example, if interpreter is different type, carries out different effects, or the like).Also can omit or revise code, key, data and other parts, it is functional for example to remove recipient's device unsupported (or unauthorized by its execution), such as the ability of making copy subsequently.Code or data also can adopt the form of encryption to provide and need not by sending the content code deciphering.(the even not addressable decruption key of dispensing device in some cases.) usually after standing any essential safe handling or other conversion, content will be written into, then export from media portion ground by the sender.Take over party's device also can move the explanation type code.For instance, the transmission of device auto levelizer can relate at first some initial code is transferred to the recipient, and described code will be carried out any required safety inspection to described recipient, then manage the reception of subsequent data.(for example, at receiving end, TRAP_DeviceAccess can be used for receiving data and it is stored in (for example) file system, or TRAP_CodecOutput can be used for video data.) even when sending to non-programmable device, send the security that code also can be carried out safety and cancel inspection, management interface agreement, or the like.In some cases (for example, if device and transportation protocol upgrade than content code), content code can allow the safety of device management transport process, in scope needs and/or feasible, monitor simultaneously this process (for example, the details by the access security process and recognizing to stop under the situation of safety problem transmit).Transmission can be attended by that the NVRAM slot writes, medium write, with external server " shaking hands " or other process (for example) to put teeth in restriction such as " only limit is duplicated once " strategy.
UINT32?TRAP_RunNative(UINT8*signature，UINT32?sigLen，UINT8*code，UINT32?codeLen)；
This computing is carried out local code in order to allow content code on player.Player can require local code by player manufacturer or another trusted parties digital signature.The operation of (its objective is in order to stop the local code of hostile content operation malice) local code is implemented (or any other that finally moves local code installs) for specific for player usually.Therefore, content code usually use about the feature of player information (for example, judging) from TRAP_DeviceDiscovery with judge player require what local code (or on the contrary, judge player whether with certain local code compatibility).
The example of the use of TRAP_RunNative comprises (unrestrictedly):
● install software is updated to the other parts (for example, write the nonvolatile memory that is contained in the consumer electronic device, revise the software program that is installed on the PC by the code that will upgrade, or the like) of player or system;
● key or the cryptographic parameter of updated stored in player;
● scanning playback environment (storer, memory storage, or the like) with (or malice) potentially software of searching malice (such as the medium simulation software of Video Capture software, disguise as CD drive or other medium input device of disguise as video driver, the debugger that is used for distorting executive routine, TRAP_DeviceDiscovery not correctly any activity software of report, the software of the effective unrevoked digital signature of any shortage, or the like);
● detect on device whether executed malice (or malice) potentially modification (such as undelegated firmware change, the replacement of the reconfiguring of FPGA, nextport hardware component NextPort, or the like);
● just certificate, public-key cryptography, symmetric key and other cryptographic properties aspect of device check certain device to belong to the type (seeing below) of expection;
● the solution to program error (destroy problem, incorrect interpreter computing, performance issue, security strategy such as the defective in the overlapping/menu ability of player, memory leakage, storer and explain defective, or the like) is provided; With
● enable direct visit to peripherals (for example, revising system state) to obtain about the information of the script inaccessible of system or in the existing unsupported mode of TRAP.
TRAP_RunNative can help to find the software program that extracts the mode of Cryptographic key from a class legitimate player and cooperate malice to use together under the situation of those keys the bootlegger and rebulid security.In this case, the key of cancelling all pregnable players is normally infeasible, because many such players will be had by validated user, they can be to feeling discontented with its device revocation.
One exemplary media is carried the countermeasure of attacking at key-extraction and is comprised the content code that carries out following operation:
At first, the content code on the medium is judged the sequence number that it is said of player by the certificate of check player.The concrete Cryptographic key (for example, in TRAP_Aes) of the type of player sequence number hint player and player carrying both.(some exemplary key management method is described in " exemplary symmetric key management " part.) then, content code check player is understood the key that it should be understood.(for instance, this can by call impact damper, len that wherein src and dst point to the code that comprises the required encryption of resetting or data comprise buffer length, key points to the value of the decruption key that has used the impact damper that the player keys be concerned about encrypts and opOrKeyID and finishes with reference to the TRAP_Aes of player keys.Can carry out a plurality of TRAP_Aes and call, comprise the situation that is used to formulate the input of computing subsequently from the output of previous computing.Also can comprise other step, have the TRAP_Aes computing of constant input, then come " correction " result by XOR or increase " correction " value such as execution.) for the key of pregnable player, because these players requirements are differentiated extraly to distinguish situation that execution is reset on pregnable player and the situation of resetting from the malice player execution of the key of pregnable player extraction in use, so the key authentication step will be failed (or fully not finishing at least).This can carry out by carrying out TRAP_RunNative, TRAP_RunNative operation then according to results modification interpreter state (for example is configured to distinguish emulation and legal player, by the return results value, based on the result to the deciphering of the part of the memory area of interpreter or otherwise handle, or the like) local code.Alternatively or extraly, local code can be influential outside interpreter, for example by communicate by letter, revise output (for example, to introduce forensic mark) or the like with external device (ED).The computing of being carried out by local code then can be required to be used for correct playback by content code, for example by incorporating or otherwise require the result of derivation of the decruption key of video or required code/data into.
Unless emulator is desirable (considering the complicacy of modern computing device, its prerequisite for extremely being difficult to realize), just local code might successfully be distinguished.The example that local code can be used for distinguishing the feature of legitimate player and emulation player comprises (unrestrictedly): the ability of the local code of operation particular type, be stored in the value in the hardware register, revise the effect of hardware register, memory content and verification and/hashed value, behavior when carrying out non-standard computing, the correct enforcement of the security feature of dealer's special use (for example, the security capabilities of the not offical record in the video decoder chip), the coder-decoder mistake that rounds up, the processing of error condition, selectable user interface components (such as LCD display or keyboard input), the existence of the unexistent ability of legitimate device and the performance of computing and sequential.In an one exemplary embodiment, content provided carry out one or more player safety tests, derive and use the key of deriving local code the part deciphering of the memory area of interpreter based on the key of test result.Then to be configured to all (or fully many) the inspection indication players at local code be correctly to play under the legal situation to content code.If player is illegal, the discriminating that content code and/or local code can stop to reset so, reporting errors, requirement are extra, the more high risk alternate manner response that requires player upgrading, refusal that end decoding, the forbidding of film are given as an addition feature, play or be associated with playback environment with reflection with the resolution that reduces.
UINT32?TRAP_VendorSpecific(UINT32?select，...)；
This computing increases the support that its own security and non-safety are operated in order to allow player manufacturer.(and unrestricted) for instance, some embodiment can provide file access (to open, read, write, search, close, set a property, or the like), to the visit of the safe operation of dealer's special use (such as the non-standard password support that can under the main destroyed situation of cryptographic abilities, serve as backup, auxiliary password conversion, security feature in the hardware video decoding circuit, or the like), to the special ability (3-D display that can not utilize via TRAP_DeviceAccess, smell output, the operating rod vibration, or the like) visit, to the visit of primitive frame content of buffer, or the like.
Integrated security service
The one exemplary embodiment entity (or other entity) that can allow to issue licence provides a cover integrated security service to the content author.Though security service can be provided by content owner oneself, can reduce the needs that the content owner participates in this process but these abilities are contracted out to the third party, (for example) allowed economies of scale by making a safe supplier can serve a plurality of content owners simultaneously.No matter security service is to provide by single entities or by a plurality of entities, and inter-related task can comprise (unrestrictedly):
● exploitation security code or service, it is functional with audio-visual content and safe countermeasure, decryption logic, forensic mark embedding, cancel implementation of strategies, with the non-volatile memories ability combine and combined with combining of non-security feature user interface;
● use automatic research tool and/or manual procedure to search via computer network and the available potential pirate material of other distribution channel, manual and/or automatic inspection is also analyzed pirate copies to recover to be embedded in the information in the forensic mark, then uses the information search that has recovered about bootlegger's the device or the information of method;
● collection, file and analysis are about the out of Memory of piracy, for example by analyzing the discussion of (for example, in online chat room) between piracy software/device and the bootlegger;
● the information of use collecting helps reduce pirate, comprise (unrestrictedly) cancel bootlegger's device, formulate the countermeasure attacked at the bootlegger, assistance is to suspectable bootlegger's prosecution, or the like;
● the revocation list of managing keys, player and other assembly, such as suspect for that leaked, unsafe, relate to key, player and other assembly pirate or that should not be used for decryption content originally.Described tabulation available electron management by methods and comprise a plurality of parameters that (unrestrictedly) is associated with the state of each is so that the customizable data of cancelling are to satisfy the risk profile that is associated with themes, process or the like individually;
● produce or obtain the I/O that is used for piece decrypt operation (such as TRAP_Aes), for example be used for content of edit and make that it only can be by unrevoked device deciphering;
● the countermeasure that exploitation or management are attacked comprises the countermeasure at the attack of specific player.For instance, player manufacturer must develop and the general layout of digital signature based on the safe countermeasure of local code in, described service can comprise (unrestrictedly): the situation of the described countermeasure of identification requirement, provide information to manufacturer about risk, auxiliary countermeasure exploitation, test to countermeasure (comprising safety test and compatibility test) is provided, exploitation is used to discern the code or the strategy of the playback environment that each countermeasure should be used by content, make countermeasure code and other decrypting process and other security feature combine countermeasure on (for example, in order to prevent that countermeasure from being skipped over or walking around) and the combined medium from a plurality of independent player types/fabricators;
● the data that management is associated with the nonvolatile memory slot comprise key, code, identifier, security strategy and other attribute;
● cooperate online or other based on network or interactively assembly operation or with it in conjunction with (for example, being used for when decoding relates to one or more devices with insecure security or environment, providing the user of enhancing or player to differentiate step);
● to the medium implementation quality control of finishing;
● with content and special marketing feature, user characteristics, be present in non-standard feature on the individual platform or the like and combine;
● carry out the player compatibility test;
● exploitation code and combination with it, described code are used for detecting and have the player of problem (comprising (unrestriction) editmenu mistake, coder-decoder restriction, display limitations, inoperative feature, corrigible security flaw or the like) and use suitable solution (its can comprise avoid affected operation, use unaffected simplification feature, the player Hotfix is installed and is carried out local code and handle described problem);
● combine with reproducer (replicator) guaranteeing correctly to make medium, thereby realize feature as described above with suitable code and data; And/or
● other task that any way is provided is with the auxiliary content owner, player developer, user, law-executor or other side.
Forensic mark embeds and recovery technology
For the collusion attack that obtains at relatively large scale (is anticipated promptly, bootlegger's combination is from the attack of the decoding output of a plurality of decoding devices, usually be intended that and remove the forensic mark that can be used for discerning and cancelling the collusion device originally) the security of maximum possible, have the ability of in output, introducing the variation of relatively large quantity and be generally favourable.For the storage of MPEG-2 video GOP completely fully independent version that yes is possible, if although must a large amount of substitution video sequences of storage (substituting such as millions of in the film), memory requirement can high must making us can't be accepted.For adapting to described situation, the amount that minimizes required storage space is favourable.
Although specific requirement that forensic mark is required and attribute depend on situation and change, but desirable attribute generally includes the variation of bottom and is showed (mean and be less storage space or the bandwidth of code change requirement) compactly, durable (meaning described variation can recover from the copy that quality reduces, such as the copy by using the consumer camcorder to make from the TV screen record), specious (mean can't automatically discern by checking output and remove it) and its are art upward acceptable (mean variation can excessively not reduce the quality of content or to the experience of content).These requirements can change (for example, between theme, content author's requirement, playback environment feature or the like).
For the exemplary optics video disc of supporting forensic mark, the content author searches or produces a plurality of alternative (or other modifications) of the video that can be applicable to compress.These substitute the part that is identified as video compression, wherein described video compression is made amendment to discern potential variation, according to a plurality of standards (for example to follow, storage size, permanance, truthlikeness, art are acceptable, or the like) estimate its applicability.If be changed to suitable, so with it as the variation output that is fit to.For instance, can be configured with identification compressed logic and change the position that the value of single position (or single byte, one word, single block, or the like) can produce suitable substitution video sequence.
In an alternate embodiment, can use conventional compression algorithm, and can be used as a back compression step generation and verify alternative.For instance, can use the candidate modifications of automated software (a) identification, for example by using (puppet) random number generator to select any byte of compressed video and the new value of this byte to video flowing; (b) test of carrying out video decompresses, and if stream become invalid, so with candidate modifications as invalid and refuse; (c) will test output that decompresses and the result that primary flow is decompressed relatively, and if difference do not satisfy described requirement, refuse candidate modifications so.For instance, step (c) can be refused too small modification (anticipating promptly, durable inadequately) or excessive modification (meaning is not specious and/or artistic acceptable promptly).Can carry out extra test revises each other not reciprocation with check (for example, in some cases, revise if use separately, it can be acceptable so; Revise if use simultaneously, it can be unacceptable so).Preserve modification by test.
When editor uses the exemplary media of forensic mark, prepare the initial compression video data stream.These data are formed (it looks situation can comprise that some substitutes or destroy other modification of video) by looking the main compressed video that situation used some modification.Prepare the data structure (for example, use the modification before having discerned but not use or remove the modification of having used) of identification, comprise for video can be play being enforceable any modification effective modification of video.Substitute and can be very compact (for example, skew of 24-bit byte and 8-position substitution value in MPEG GOP can use 4 byte representations), thereby make it possible to almost millions of change of definition in the data of several megabyte only.
The content author follows the preparation routine logic to select based on the playback environment feature and application change.Should be configured so that video sequence is used this programmed logic and change, wherein the combination of applied change normally based on to evidence obtaining purposes Useful Information (such as sequence number, cryptographically recognition device value, model/manufacturer information, about the information of the device that connects, or the like).In addition, should be configured use to produce the required any change of effective video stream (at least in operating in acceptable playback environment time) programmed logic.(having " compulsory " changes applicable to helping to defeat the attack that the bootlegger attempts to forbid the content code part of using described change).The content code logic can comprise cryptographic use, and for example only to use player keys to come substituting collected explanations or commentaries on those players that substitute close should using.Similarly, content code can comprise that the use (for example) of error-correcting code is even a side (for example, owing to attacking or the quality reduction) when mark recovers unreliable of marking video also can recover player information so that recover.The value that embeds can comprise digital signature, MAC or differentiate other value of the information that embeds, makes that recovering one of mark can be enough be confident of to the validity of recovering information.
When recovering pirate copies, the content author can analyze the variation that copy exists with identification.Though this analysis can manually (for example be carried out, by the frame of pirate video is compared with each the possible variant in each position, then the list mapping that changes is got back to the playback environment feature), but for higher efficient has the more mark of high complexity with making it possible to analyze, this analytic process can be automatically.Exemplary automatic evidence-collecting labeled analysis system uses the computing machine of the software with customization and implements.Analysis software is with the numeral of the tabulation of original compressed video, modification and the pirate video that recovered and begin.Then, analysis software makes frame and the coupling of the frame in the pirate video in the original video, and the conversion of the frame that the most closely mates of the corresponding frame with original video (and/or having used the original video of revising) of discerning pirate video (rotation, convergent-divergent, bending, gamut, brightness adjustment, time shift, or the like).Analysis software then comes the frame (or the set of the part of frame or frame, or the like) of the pirate video of comparison according to the counterpart of each variant of original video.The video that software has then recovered based on indication calculates a score with the similarity/difference of the degree of closeness that each variant mates.This score can (for example) be used the least square difference between the variant of (switched) pirate video image and original video and is calculated.When counting the score, can ignore and changed the zone that influences, and for such as staggered, interframe fuzzy or the like distortion can further adjust.Image analysis software also can provide " manual mode " user interface, and described " manual mode " user interface allows the operator to watch the frame (having or do not have the conversion of adjustment) of pirate video on variant (location changes on having selectable amplification and highlighting with the accessorial visual) next door of original video; And provide user interface option with allow the operator select which variation be present in the pirate video (or indication be changed to unknown), reach and after move frame in each video source, advance to next variation and preserve the present procedure state fast.The output of image analysis process (no matter being manually to carry out or automatically perform) is for distributing to the tabulation that can be present in the relative score that may change in the video.(its reduced form is only discerned the most probable option of each variant for output).Automatically and/or manual procedure be then used in the delta data that will recover and convert information to about playback environment.For instance, if mark embeds the output that is based on the error-correcting code that is applied to the player sequence number at first, can make the selective value of recovery convert the input of a suitable decode procedure to so, described decode procedure will recover sequence number (the wrong number of supposition is not too much).Similarly, carry out as the Pseudo-random number generator (PRNG) of seed if selection course is used with the part of sequence number, analytic process can relate to the PRNG output that will use each possible seed and is associated with observed result to pirate video so.
Variation also can be used other means except that revising compressing video frequency flow and be embedded in the content.For instance, content code can be introduced modification with the doubling of the image by the controls playing device on decoded video.For instance, forensic mark can embed by draw one or more translucent overlapping frame (or similarly, revising the output frame buffer zone directly or indirectly by making content code) on the MPEG-2 decoded video.The overlapping highly-visible that also can be.For instance, the mobile translucent overlapping disclosed deterrence that provides piracy of the dynamic generation of statement " Screener forFirstName LastName ' s.Do Not Copy. ", and title that can be by judging spectators (for example, from the burning district of CD, from the NVRAM slot, from server, or the like) and show suitable overlapping and produce.Overlappingly also can be used for (for example) and correct or revise unpressed video by on (wittingly) defective part, drawing.Because the expression be used to draw the required data volume of overlapping code can be considerably less, so the storage space on medium overlapping can be very efficient.Make based on overlapping mark and to produce the video section with a large amount of variants become efficient (, can easily make the smaller portions of single frame of video discern player uniquely, for example, by simply the expression of player sequence number being overlapped in that zone).Also can simplify the manufacturing labeling process based on overlapping mark, described mark changes extensively because (for example) in the time may showing faint translucent superimposed images for the screen position (x, y) and the time can have a lot of options.These features can especially help recognition device under the bootlegger manages by the situation that makes up the source that hides its copy from the output of a plurality of players.Forensic mark also can be embedded in and comprise that (unrestrictedly) audio frequency, still image, control data, medium write in other data of pattern or the like.
Medium and content are differentiated
When inserting medium and/or being written into data thereafter, content code and/or player can be differentiated medium cryptographically.
In an one exemplary embodiment, use Hash tree that all or some individual data parts (for example, sector) of medium are carried out digital signature.The root hash is by entity (or another trusted entities) digital signature of supervisory format and place on the medium.The root Hash signature also can be discerned standard and other described information of the player device that duplicates and/or make facility, copyright owner, date issued, description authorized (or not authorized) access medium.When block (for example, sector, GOP, track, file, or the like) when medium are written into (or thereafter), it can be written into data and suitable middle hashed value combination is verified to produce the root hash again by making by driver, content code, player application and/or other player device/part.Can make to need not to read repetition (relatively slow) public-key cryptography signature check step in the value of check medium signature back buffer memory root hash for each.Similarly, middle hashed value can be stored with block, buffer memory, optionally calculate or retrieve from medium.Medium also can comprise a plurality of hash maybe can use other authentication schemes (such as by the digital signature on check each sector, GOP or other data division).For reducing the storage overhead, can use the signature that allows message recovery and fill up scheme.Digital signature also can be differentiated the part of CD content, such as being contained in the start-up code on the CD or being stored in the data that can write in part (maybe can the re-write) part, or all data.
Signature (or other password value or non-password value) also can be stipulated or limit can be by the computing of specific CD or code section execution.For instance, digital signature can be by authorizing and allowing the specific player feature of access to content or the licence issuing authority of ability to be issued.Described mandate can be used for guaranteeing the production paying license fee or stop undelegated pirate medium.In an one exemplary embodiment, wish that a large amount of each content author (or its reproduction facilities) that produce the CD that comprises film will provide the information of identification CD to be produced to the entity of issuing licence.Described information can comprise (unrestrictedly) theme, legal copyright holder's identity, copy to be authorized number, CD content at least a portion hash, medium sequence number, requirement the ability of wanting and differentiate the digital signature of request.As response, the copyright holder will receive one or more digital signature of licensed-type production medium.The entity of issuing licence also can receive and handle from content author's (or its procurator) payment in this way, and license fee might be directly with relevant by the concrete ability (security or other) of the actual use of content.The restriction that puts on the operation of content code also can be based on non-password flag (for example, be used to indicate whether that the broadcasting flag of reproducible broadcast television signal is similar).Permission also can be based on previous action (for example, the content code that refusal has been visited private user information to the visit of Internet resources to guarantee maintenance customer's privacy, to authorize permission of obtaining the user or the bigger access right of content code that obtains discriminating from remote server, or the like), and can be different for different threads, content code part or the like.
Digital signature can be distributed or distribution individually with content, and can be arranged on any part of medium, and also can have encryption key, the logic that is used to derive decruption key, security policy information, or the like.For instance, under the situation of optical media, digital signature is arranged at can be on the media portion that can write individually and favourable (thereby provides unique CD sequence number of having differentiated for each CD, for example being used to cooperate medium to cancel ability uses together, so that stipulate that clearly which device should playing media, or the like).
Medium for comprising nonvolatile memory (EEPROM, flash memory, or the like) can normally store the uniqueness data, and other medium type can require other technology.For instance, the optical media of compacting can have data in burning district (BCA), and it typically uses high energy laser and writes.The defective of having a mind to or the pattern of change also can be incorporated in the media surface and read (for example, by directly handle the result that reads who is produced under the disabled situation of error-detecting and error recovery) by player and/or content code.For the ROM of based semiconductor, can use fuse and other write-once feature.
Except that signature and certificate, medium uniqueness zone can be used for carrying (unrestrictedly): locating information, encryption key (for example, allow concrete player for example print (screener), demonstration or hope to be used for the key of current or following media decodes of other CD of controlled distribution; Allow to read, decipher and/or write the key of player data of nonvolatile storage, or the like), the unencryption key (for example, after the production of medium of compacting, write preventing medium or the data stolen from reproduction facilities by the bootlegger are decoded), identifying information is (such as recipient's title, for example be used for showing and be used for forensic mark) overlapping, marketing and promotion data (for example, allow to participate in trying out, prize drawing, the value of online service or the like), telephone number, data network address, other code data or the non-password data of the executable code or any way that can use by content code and/or player.When CD uniqueness zone is written into data, driver (for example can be used unidirectional conversion, the SHA hash, be HMAC-SHA, the computing of RSA public-key cryptography of key assignments with value by content code regulation, or the like), make it not export the required information of content that (for example, not outputing to application program or content code) forges CD uniqueness zone.Pen recorder also can use hash to handle or other password conversion is made accurate illegal copies to stop the bootlegger to use from the information of legal medium extraction.Medium uniqueness zone also can (for example be write down in advance, have the sequence number on consumer's recordable media of blank) or (for example write by pen recorder, identifier with pen recorder, it can be through digital signature, and it can be by legitimate device check to guarantee that register is not cancelled and can use with identification and/or when cancelling the pen recorder that is used to make it recovering illegal copies).
For support media
Not and the media formats of anti-counterfeiting technology (such as modulating recessed district (modulating pit) feature or wobble tracks content, as the 6th, 646, summarized in No. 967 United States Patent (USP)s), the value that derives from these features also can be read (or detection) by player and be differentiated by player and/or content code.After reading described physical features, driver can be used the one-way cipher conversion before this value of output, made that the malicious parties of knowing the feature of being changed can not be with the feature that can forge bottom by the mode that unmodified driver is accepted.Content code (and/or driver, player application or other assembly) can be differentiated switched feature (for example, having signature from the value with described feature of trusted parties by the check medium).
Guiding, safety analysis and playback
Description is had the practical operation of the exemplary player of exemplary CD, begin so that CD is inserted in the driver.By being written into from CD and the initial part of run time version and/or data and at first guide interpreter.This initial part can be less and simpler, and for example, it can notify user's theme to be written into, then to begin extra code and data are loaded into the memory area of content from medium simply.This code can then be written into extra code (for example, it can check player types, then be written into for that player types to be specific code).Depend on player design and medium, the code that can carry out any number is written into inspection.The medium that player also can detect insertion lack the situation of code (or the required feature of operation code), and if detect, player uses the ability that is built in the player to play CD so.Described support is applicable to that (for example) allows from resetting such as the old-fashioned media formats of DVD, CD, DVD audio frequency or the like.
Exemplary media then uses the password interface of player (for example, TRAP_Aes) to derive the decruption key of one or more theme special uses.Content code is configured makes to have only unrevoked player can derive effective decruption key.(for finishing this, content code can use the technology of (unrestriction) such as broadcast enciphering, key-encryption-key, fuzzy software or the like.) these decruption keys can follow (for example) and be used to decipher extra encrypted code, video or other data.Guiding also can comprise from medium and is written into data, decompressed data and carry out the safety analysis computing (discussing in more detail) of any way following subdivision optionally.
Actual playback then generally includes repeatedly carries out plurality of step or inspection, and it can comprise (unrestrictedly):
● processing events.This can comprise detect and process user interface incident (such as button, push that Long-distance Control button, mouse move, pointer/cursor moves, select input, or the like) and other incident (for example, power down request/notice, hardware reconfigure request/notice, software change request/notice, false alarm, medium ejection request/notice, or the like) (referring to TRAP_GetEvent.) proper method that is used to the incident of handling can be depending on incident, theme, the state of player attribute and playback procedure (for example, the logic that is used for processing events when display menu can be different from the logic of using when displaying video) for instance, some incident can (unrestrictedly) by switching to new video flowing, change the player configurations position, request action (for example, the request of respond ejecting and call " medium ejection " TRAP), upgrade menu, (for example change, animation, upgrade, or the like) overlapping figure, network connected initial/upgrade/or the like, change the configuration (playback speed of resetting, or the like), be written into and move new content code, (it can require to change/empty the medium request of buffering to jump to new position in the video flowing, the coder-decoder of the buffering that clears data, or the like), stop resetting, carry out safety inspection, show wrong or the like and handle.Some incident also can require content code to check that institute's requested operation is authorized.The operation that can not carry out immediately can be cushioned until it and can carry out.Also can ignore some incident.
● the management of media interface.In an exemplary enforcement, handle the medium of routine and be responsible for guaranteeing to have the stable data supply that can be used for video and audio codec and other purposes.For instance, if medium are CD, content code can be checked the state of driver so, the data that retrieval is successfully read, submit the new request of reading to, remove the request of reading that no longer needs, (for example provide prompting for reading (read-ahead) ability or cache memory in advance, be written into data in each the possible bifurcated of the branch on the horizon in the video to guarantee continual playback), specified data should be written into (or other place where in the memory area of content code, coder-decoder for example, frame buffer, deciphering module, or the like), check mistake, how control should handle mistake, the Cryptographic key of regulation driver or other assembly, provide with driver the request of reading/write to combine
Other information, regulation decoding parametric (such as error recovery information, key, sevtor address mapping, the read head degree of depth/focal length/or the like, the file access privilege, or the like), or the like.
● security is handled: this logic can be carried out the deciphering or the treatment step of any extra needs, (for example be written into data such as key derivation, discriminating, use MAC, Hash tree, digital signature, or the like) and operation executable part (for example, the security code that is associated with the specific part of audio or video).This step also can comprise embed forensic mark (for example, by select output be written into data which part, data are made amendment, or the like).In an one exemplary embodiment, this computing comprise the key of deriving MPEG GOP, to the data of GOP carry out the AES decrypt operation and use content code deciphering front/rear carry out pre-service and aftertreatment (data that reorder, block XOR, substitute, byte revises, or the like) to guarantee can not allow the content of bootlegger's decrypting disc to the understanding of block AES key itself.
● data are sent to coder-decoder.This code also can detect and handle error condition, such as utilizing owing to the data that need from medium and can't avoiding coder-decoder to lack the situation of data (codec starvation).This code also can detect the coder-decoder state and not overflow or underflow to guarantee the coder-decoder buffer zone, and guarantees that the media interface code just is being written into correct data.
● processing overlapping and specific characteristic.Menu, overlapping, captions and similar feature are responsible for drawing and are removed to this logic.It also handles the forensic mark (forensic mark that draw such as using overlapping) of picture-in-picture video and some kind.
Special situation (processing of selecting such as recreation/crossword puzzle, menu, menu, hiding " Easter egg ", or the like) can require special code.If multithreading interpreter (such as Java Virtual Machine) is provided, so independent thread can be used for nonidentity operation (Admin Events, overlapping, video, or the like), and interpreter to the support of message transmitted between thread and/or shared memory area can be used between the thread synchronously and control.Similarly, status check and message transmission can be used for guaranteeing interpreter and other component synchronization.
Player also can be provided for the default processor (for example) of various operations and make great efforts, increases performance with improvement user interface consistance, minimizing Edition Contains, or the like.
After finishing, (push the situation of the ejector button on the player such as the user), but the content of announcement code is closed.Content code then can be notified remote-control device, clears up its internal state (for example, finish any required nonvolatile memory and write, or the like) and withdraw from.If content code (for example, 5 seconds) in predetermined a period of time does not withdraw from, player device stops content code and ejects medium so.
The safety analysis computing
Content code can be analyzed playback environment to seek safety problem.This process generally includes the information of obtaining and handling about the other parts of player and playback environment.This information can comprise digital signature and/or the key certificate that is used for player or verifiable other assembly of content code.
This information description player that obtains from player and the feature (or the feature that it is said) of playback environment.Some feature (such as the existence of specific T RAP) is directly reported.Further feature can infer indirectly that for example, the concrete combination of the Cryptographic key in the player can partially or even wholly be judged by the sequence number of player.Disguise as legitimate player but do not have the player of correct Cryptographic key because it can not carry out the crypto-operation that uses its key that does not have (deciphering, signature, or the like), thereby can " be caught ".Similarly, other inconsistency can be used for identification problem.
The safety analysis process can be involved in the multiple process relevant with playback, comprises deriving the key that is used for compressed video, code, audio frequency and/or other data.For instance, if the legitimate player support of particular type operation local code (runs on the code on the native processor in the machine, relative with the code in the interpreter/virtual machine that runs on standard) ability and/or to support Unrecorded be specific calculating to player types, content can use these abilities to differentiate player types so.If content finds that it runs on and claim to specific model but can not correctly carry out on the player of the operation of being supported by the sort of model, content can infer reasonably that it runs on one (for example) and uses the key that this type player extracted that leaks from malice and pretend on the device of player types for this reason so.
Safety inspection can relate to any combination of analytic unit or attribute.For instance, the feature of medium, media drive and nextport hardware component NextPort can be used for detecting forge player sell in record in advance or " compacting " but medium on content query driven device to judge whether it runs on consumer's recordable media, and if, its refusal is play so, because this should take place anything but.If specific theme in some cases (for example, if finished payment) allow to record the recordable medium of consumer, content is only authorized from having specific sequence number and/or having under the situation of significant figure signature (by authorised representative's issue of content owner) of media-playback of identifier of specific pen recorder clearly there being (for example) so, just can allow the recordable media-playback from the consumer.
Can carry out safety inspection to output unit, device driver and other replay component (comprising) with (or possibility) received content person.This ability is particularly useful for the situation that output unit write down that contents processing may be to use malice or leakage.The checked operation of output unit is only limited by the ability of device.For instance, output unit check can comprise that (unrestrictedly) sends to local code and (for example input or output device, in order to detect safety issue, revision program mistake, or the like), carry out and " to shake hands ", to contrast the key that the revocation list that is carried on the medium comes proving installation with the password of other device, or the like.But output unit is the check of requesting player also, and suitable in this case check can be provided by the combination of this player, content code or these (or other assemblies).If a plurality of output units (for example connect bunchiness, player device can send to frequency mixer with DAB, frequency mixer is provided to amplifier with DAB, amplifier then will be simulated output and will be provided to loudspeaker), each device can provide about it to player and how plan the information of contents processing so, and (or the other) device that allows to start is delivered to device subsequently.In this way, content code can be differentiated each device in any a lot of device (or plant network) that relates in the playback procedure.If detect the non-T unit undelegated device of pen recorder (or such as) that is subjected to, so content code can guarantee to make suitable response (comprise that (unrestriction) refusal is play, refusal output to non-be subjected to T unit, control middle device do not send content to non-ly be subjected to T unit, reconfigure non-be subjected to T unit with correct problems, reduce output quality, carry out extra safety discriminating step or the like).If existence is connected or another data connection with the Internet, safety inspection can comprise from the extra security-related information of long-range website download so.Similarly, remote-control device and local memory storage (for example, NVRAM) also can be used for obtaining Useful Information, such as up-to-date certificate revocation form or than the security code of the digital signature of the code update on the medium.
Though safety inspection was carried out before resetting usually, content code can at any time be carried out safety inspection.For reconfigurable playback environment, or under the situation that can utilize other new security-related information, periodically or carry out extra safety inspection frequently and can be favourable.If detect great change, content code can stop resetting or suspend playback until the confidence that can rebulid playback environment so.
Can use form or decision tree is suitable with which safety analysis code (if any) under the situation that promptly is chosen in the specific player attribute.The security code that is not suitable for current player need not operation (or even need not to be written into from medium), thereby the compatibility issue that prevents the influence of any unnecessary performance and prevent to be caused by this security code of operation on the player of not supporting certain security code as described previously, safety inspection can be derived computing with the Cryptographic key and be combined (for example, must actually carry out inspection at the device that requires the particular safety inspection and not require that correctly to derive required key the device of safety inspection can directly obtain under the situation of key).
Exemplary key management
One exemplary player by its manufacturer with the incompatible initialization of unique set of cipher key.These keys obtain from the key management office of being authorized by the entity of control media formats.Key management office receives from the request of the manufacturer of authorizing, checking request, the player keys collection is provided and receives payment (with the license fee of correspondence) to key.The key set of exemplary player respectively is that 128 AES key, a 32-position ID of group (manufacturer of identification player) and a 32-position device ID (discerning the sequence number of player) forms by 128 that derive from highest level 256-position AES key (only for key management office known to).Group identifier and device identification are discerned player jointly uniquely and are shown in the digital certificate of player.
In an exemplary embodiment, each of 128 keys (key ID value from 0 to 127) in the key set by key management office by at first selecting block to derive from key ID, the ID of group and/or device ID computation key.Then (if desired) fills up the secret key encryption that key is selected block and used highest level.Can carry out aftertreatment (for example, truncation) to the value of gained, thereby produce actual key.Be used for selecting the method for block to depend on key ID from the predetermined parameter key derivation.Following explanation of tables can be used for converting key ID, the ID of group and device ID to exemplary rule that key is selected block.
The key that key ID is listed according to key ID is selected the content of block
0...31 the ID|| of group (device ID＞＞key ID)
32..63 (ID of group＞＞(key ID-32)) || 0x00000000
64..79 KeySelector (ID of group, device ID, 15,8)
80..83 KeySelector (ID of group, device ID, 16,8)
84 KeySelector (ID of group, device ID, 17,9)
85 KeySelector (ID of group, device ID, 18,9)
86 KeySelector (ID of group, device ID, 19,10)
87 KeySelector (ID of group, device ID, 20,10)
88 KeySelector (ID of group, device ID, 21,11)
89 KeySelector (ID of group, device ID, 22,11)
90 KeySelector (ID of group, device ID, 23,12)
91 KeySelector (ID of group, device ID, 24,12)
92 KeySelector (ID of group, device ID, 25,13)
93 KeySelector (ID of group, device ID, 26,13)
94 KeySelector (ID of group, device ID, 27,14)
95 KeySelector (ID of group, device ID, 28,14)
96 KevSelector (ID of group, device ID, 29,15)
97 KeySelector (ID of group, device ID, 30,15)
98 KeySelector (ID of group, device ID, 31,16)
99 KeySelector (ID of group, device ID, 32,16)
100 0x00000000|| device ID
101..127 the ID|| of group device ID
With encryption key distribution to pseudorandom device subclass (according to the ID of its group and the device ID) exemplary function KeySelector (ID of group, the device ID, g d) is:
Let hash[0..19] equal the bytes of the SHA hash of key ID || the ID. of group
Let?AND_MASK＝(1＜＜g)-1.
For?i＝0?upto?d-1：
Let?n＝hash[i]mod(g-i).
Clear?the?nth?set?bit?in?AND_MASK.
EndFor.
Let?XOR_MASK＝hash[16..19]AND(AND_MASK?XOR((1＜＜g)-1)).
Compute deviceHash[0..19] as the SHA hash of key ID || the ID|| of group device ID.
Return?0x00000000||((deviceHash[16..19]AND?AND_MASK)XORXOR_MASK).
Attention: " || " expression series connection.Below " 0x " expression is 32-position hexadecimal value."＜＜" the expression left shift operation."-" expression subtraction." AND " represents logical and by turn." XOR " represents logic XOR by turn.
It should be noted that and comprise different types of key.For instance, key 0 and key 101 to 127 will be assigned to device uniquely.On the contrary, key 1 to 31 will be shared in the increasing device sets in same group.Key 32 to 63 is shared between a plurality of groups.At last, key 64 to 99 is shared between various (being pseudorandom in this case) subclass of device.Key 100 is shared by the device with same apparatus ID of crossing over different groups.
The protective device key is important fully.For instance, the actual key with device is arranged at the risk that the key of leakage player under the ruined situation of the safety of theme is arranged on the medium.Similarly, under the destroyed situation of the safety of content publisher, device keys is offered content publisher key can be placed risk.For dealing with these risks, the present invention and not requiring prepares and the entity of encrypted content is a trusted.For instance, key management office can provide a service, and either party can be so as to set and one or more input values of identification player keys.As response, office can provide with the result of each key of having discerned to the input deciphering (or encryption) of regulation.Perhaps, content publisher can provide the plain/cipher text of its selection right.Under arbitrary situation, it is right that each of content of edit can be obtained plain/cipher text, but can not obtain key itself these to then can be used for the production of secure media.
The production of exemplary media may further comprise the steps: (a) all set of ignorant player keys of the content publisher any player of having cancelled of definition, but each effective player comprises at least one key in the described set; (b) plaintext value is arbitrarily selected by content publisher; (c) content publisher is transferred to key management office with desired plaintext value safely together with the identifying information of key in the selected set; (d) key management office check plaintext value was not before submitted to by the opposing party; (e) key management office derives each player keys in the set of being asked and uses each key that plaintext value is encrypted; (f) key management office provides the ciphertext of gained to content publisher; (g) content publisher encrypts the part of content (or some code, key or other data) with plaintext value; (h) content that will encrypt of content publisher and ciphertext tabulation and corresponding code storage be on medium, and whether the player that described code is configured to discern operation code comprises any key in the described set; And if comprise: judge key ID in the player, in the ciphertext tabulation, search the content part of having encrypted corresponding to the ciphertext and the deciphering of key ID, (for example) by with the content part encrypted as source data, call TRAP_Aes as key parameter and selected key ID value with ciphertext.Then content code can provide the result of deciphering or otherwise suitably use data to coder-decoder.
Alternate embodiment can (unrestriction) uses a plurality of other decrypt operations of level, make password result and forensic mark and other computing combine, use the machine-operated and code safe in utilization of a plurality of keys or other process with further protection or processing costs (key, expressly, ciphertext; or the like), or the like.
If the use public key cryptography, so key management office can provide (or open) player public-key cryptography (or. also can use cryptography based on identity so that cipher key list is unnecessary).For digital signature keys, key management office also can provide the reference signature used by content code (for example, message/signature to).Open/private key can be shared (for example, by will be such as the computing of KeySelector as using with the seed that generates the right strong PRNG of key, generate randomly and distributing key, or the like) between device group.
Certainly, role above can divide between in many ways.For instance, key management office also can manage concentrated revocation list, thereby makes content publisher not need to judge which key is effective and which is invalid.Similarly, content publisher can be contracted out to security-related task other side (comprising key management office).
Being used to above derives the example procedure of player keys and determines.Other embodiment can relate to and generates key randomly and can use other technology.The computing (for example, AES encrypt) that is used for key derivation is for exemplary and can use other computing (such as MAC, public-key cryptography computing, other algorithm, or the like) and substitute.
Version
When to content decoding, normally or (a) content can be older than player, or (b) player can be older than content.Under two kinds of situations, suppose that player correctly implements all required TRAP (comprising any essential Cryptographic key) and satisfy the safety rule that is put teeth in by the code that is associated with content, reset so and should normally take place.Certainly, if content code is not for writing scrupulously, if if player defectiveness or behind editor, occurred serious safety issue reset so and can not work automatically.
For the contents processing code is failed on legitimate player the situation correctly play; content can (for example) cover key through editor to check the safety that player is sought at particular optical disk; if and find, use key to come one or more safety inspections avoiding can carrying out usually or the content code of other computing are partly deciphered so.This " avoids " logic and can adopt the form of encryption to be carried on the medium, thereby guarantees that it can not be used, unless discharged decruption key really.If require to cover, cover (for example) in the nonvolatile memory that key can (for example) be stored in player so, be retrieved, via the TRAP visit via network with the form of encrypting, or the like.It is configurable and do not require that security differentiates that the measure (the graphical menu that has the player that shows restriction such as forbidding) that does not influence security can be the user.
Also can be configured so that the user can deal with the situation that detects security failure or risk content code.For instance, if modulator-demodular unit, the Internet connect or other data channel is available, content can be communicated by letter with the security code that obtains renewal with authentication server and/or be obtained the permission of proceeding to reset so.Also can show (or playing audibly) code, the user can be provided to it automatic free phone type services that activation value is provided.(described service can (for example) by using speech recognition system, coming to receive information frequently or by detecting the sound that passes to the telephone receiver from user's loudspeaker via phone by detecting dtmf tone.Similarly, information can return to the user and be used for keyboard input, passes to microphone on the player from telephone receiver, or the like.) respond and can check by content code (and for example, by digital signature checked, MAC, fuzzy verification and, or the like) and/or be used for subsequently Cipher Processing (for example, as key).Challenge/response identification result can use (for example) to date back to specific user or identifier to allow to follow the trail of copy with forensic mark.For instance, if activation value is unique and is included in the forensic watermark that the content owner can use forensic watermark to date back to the processing that produces given activation value to follow the trail of the pirate copies of having recovered so.Therefore, the content owner obtained information about the user (for example, the telephone number of dialing person's use ANI or dialing person ID, name, credit number, or the like) and can be favourable before activation value is provided.Activation value can be stored in the nonvolatile memory of player (for example, be used for following purposes and use for other theme).
Media coding and decoding
In an one exemplary embodiment, content code can stipulate that (via TRAP) is for reading and the required parameter of decoded data from medium.Any or all step can may further comprise the steps the actual treatment of the sector of reading from optical media:
● provide the sector decoding parametric to optical drive (or other assembly of responsible operating part or the decoding of all sectors).
● driver reads the raw data corresponding to the data of being asked (for example, sector).Actual being written into can comprise and use sector marker (or other addressing information) to search data in the media, then to be written into suitable data driver and also can to remove or handle and be written into data and comprise together unencryption part (such as navigation field) from medium are actual.
● the original sector data are used error correction.Error correction procedure can relate to an adjustable polynomial expression or other parameter.Content code also can be forbidden error correction and/or error detection, if for example it wishes oneself to carry out these operations.
● deciphering or the conversion of other password also can comprise together with error correction, and carry out before ECG and/or carrying out thereafter.The decrypting process that can select to be applied to error correction data not is to avoid transmitting mistake.For instance, can before correcting bit-errors, carry out deciphering with stream cipher RC4 or the AES of counter mode (for example, with).Deciphering (or other treatment step) can be by driver, content code, coder-decoder, driver or any other component application.
Also can select decrypting process to have unidirectional characteristic (for example) so that the output that the bootlegger can not use the output of having write down to calculate uses other decoding parametric to produce.For instance, driver can calculate the key of each sector as the use of 160-position (or other sizes) importing value (its can't help driver return) HMAC-SHA by the key of content provided.Under the situation of not knowing the importing value, the bootlegger can not convert the deciphering output of using the known key by content provided to produce to should use other to be produced by the key value of content provided output.Therefore, the bootlegger lacks medium or its (for example, using the device driver of hard disk drive and malice) the required information of emulation of duplicating.Represent though the bootlegger might store for the decoding sector of specific key value, copy/emulation will be at any time content code use corresponding output the unknown the key request sector time fail.Because total number of decoding key can be extremely big, be 2 for example for 256-position key
256So the bootlegger can not storage all possible sector decoding.Content code can be carried out the request of various combination, and for some request, uses or check loaded real data.
Player (or other assembly) can be carried out asymmetric password conversion to sector data.For instance, can use the piecemeal signature under situation about not securing permission, to make new theme to stop the bootlegger.In one embodiment, public-key cryptography is formed (although it also can obtain from medium, extract from certificate, or the like) by being embedded in 2048-position RSA modulus in the driver.In order to improve the efficient of signature check operation, the RSA modulus is produced as whole power near 2, for example make the highest effective 128 to equal " 1 ".When making medium, each block (for example, the sector) by making sector data and key stream carry out XOR and at first randomization, described key stream is to produce by the SHA hash kind of the address of medium ID, block and block data is gone into (seeding) stream cipher.Then block data is divided into some 256-bytes (2048-position) piece, described is digitally signed by using the RSA private key to carry out the module exponent computing to described separately.The piece of signature and SHA Hash record are together.Therefore, block is only expanded 20 bytes (if block is the sector of 2048 bytes, so less than 1%).Suppose stream cipher randomization effectively, the input of module exponent computing is insignificant (about 2-128) greater than the probability of open modulus so.Therefore, need not special processing for this situation.When reading from medium and during decoded data blocks (for example, the sector), carrying out corresponding check and decode procedure, and comprise that (a) reads 256 block of bytes and SHA hash; (b) use open modulus and open index (for example, 3) that each piece is carried out the module exponent computing; (c) reverse described randomisation process, for example the SHA hashed value that is written into that comprises by use is calculated a key stream, and described key stream and described are carried out XOR; (d) integrality of handling medium ID, block address and block data and making result and the hashed value that is written into relatively come the check solution code data by hash; If (e) Hash matches is returned decoded data blocks so.If hash does not match, return a mistake so.If performance is a problem, but probability ground is carried out check (for example, on the sector of selecting at random) and/or is only being comprised on the zone of more crucial data and carries out.
When writing recordable medium (or making the master that is used to duplicate), pen recorder can receive it and use one-way cipher function (one-way function of constructing such as SHA, HMAC-MD5, use AES, or the like) to change and write the value (seeing below) of the specific position on the medium.In this way, because the bootlegger can not know correct input (for example, hash is shone upon in advance), it can not use legal recording unit to duplicate medium.Also can store other authenticating value (such as digital signature).Safety value can be any (or all) part of can be applicable to medium.
The media safety value can be used as general data storage and maybe can be stored in and comprise and prevent the Additional Protection that directly reads and/or in " special " zone of coding distinguishingly.Because the quantity of secure data can less relatively (for example, little of 128 or littler), so can use memory technology with relatively low density and performance.For instance, given data may be encoded in the variation of the recessed district coding of optical media or orbital position (swing).Data also can be hidden in and be generally in the redundant digit that error correction, the sector difference of service time, navigation field or the like keep.Data also may be encoded on the different physical disc position (for example, in the inboard in the zone that can read usually the outside or at different depth of focus places).
Data on the medium can comprise indicator position, recessed district code change or indicate whether to carry out some processing relevant with data or other mark of security step.For instance, a sector security flag can be used for indicating the data that are contained in the described sector should use public-key cryptography to be changed and/or only just can be released under driver has received the situation of password authorization at first.(described mandate can comprise that (unrestriction) requires the SHA hash of sector content, key of sector or the like is correctly decoded in the digital signature that challenge-responses differentiated, the release data are authorized in check, the reception of carrying out a success with the unrevoked recipient of its key when making these medium.) also can carry out mark to data and make and only can adopt the form of encryption to discharge it.(this is even more important in data personal computer that may transmit by non-trusted bus or channel and other system therein).
Although mainly described above-mentioned one exemplary embodiment about optical media, similar techniques can be applicable to other medium type such as magnetic medium.Can carry out solid state media (such as the EEPROM/ flash memory) and other memory technology of calculating with regard to medium itself, medium itself can be carried out Cipher Processing, and also can comprise the safe interpreter (it also can have interpreter) of communicating by letter with driver, player application or the like in inside.The amount that medium only need comprise the required nonvolatile memory of the content of actual storage compression (for example, be roughly 30 GB for high-definition movie), or other technology produce the address realm of " virtual " or " emulation " of super large (for example, 2256 bytes) but it can access to your password.If this finishes, the bootlegger can not make perfect pirate copies so, because storage (or even reading) whole address realm is infeasible, and does not have universal mode to judge actually will how to use the part of address realm for the bootlegger.For instance, content code can require to use different zones in each is reset.This general way even can be non-programmable but use under the programmable situation of medium (or media drive/interface) in the main player application program.
The evidence obtaining of conditional access key stream
The design of pay TV receiver is a target so that all assemblies to safety-critical are placed smart card or other extraction-type device generally, makes to handle safety failure by replacing smart card.Usually, replaceable modules is used to derive decruption key, and it is provided to the general decrypt circuit that is contained in the set-top box.The conventional major defect of implementing is forwarded to undelegated device for the bootlegger can write down from the output of the device of authorizing and with key (with any other desired data).A kind of correlation attack relates to record and transmits video itself.
Following the trail of described attack can be extremely difficult or impossible.For instance, the computing machine of leakage can be used for via the Internet key and data being transmitted to undelegated spectators anonymously by the bootlegger.Can in the UDP package of " source " address, send key, thereby make very difficulty of tracking with forgery.Although system operator can be visited unauthorized data by adding pirate service, there is not the source of method pursuit attack.Under other situation, trace data can be practical, but the source may be arranged in the ineffective zone of law enforcement.
Use current system, the sequence (and video itself of deciphering) that is used for the decruption key of decryption of video for each subscriber is identical.Can use, but the practical video decruption key still is the overall situation transmission these keys (for example, snapping into video decoder chip) under installing to the situation of specific secret key encryption from conditional access intelligence.Therefore, endangered or a set-top box is carried out reverse-engineering (because the generally standardization fully of design of set-top box, so this is not unusual difficulty) and had bootlegger's decidable of legal predetermined account and transmit the sequence of decryption of video key.This attacks and does not require the actual module that endangers safety itself usually, becomes effective countermeasure thereby stop security module to be replaced.
For dealing with described attack, system operator need be discerned the concrete account (and therefore, security module) who is used to extract key and other data that are forwarded by the bootlegger.In case discerned this account, system operator (for example can stop this account, by stopping can temporarily or for good and all forbidding the encrypting messages of bootlegger's security module by the required key of the form transmission visit of bootlegger's security module utilization, by wireless transmission one, or the like) and any related account (for example, from the account of the device that is connected to the same phone line, share identical charging address the account, have the account of contiguous physical location, the account who uses identical credit card or other means of payment to pay, or the like).
For finishing this identification, system operator is included in forensic mark information in the actual sequence of the deciphering parameter of being exported by each security module.
In one embodiment, before video decode, conditional access module is exported conventional decruption key and is substituted when creating video sequence in deciphering byte expressly by set-top box application, a plurality of positions in the system operator identification video stream, the byte replacement in described position can produce acceptable variation (polymorph).In addition, destroy some byte in the video flowing, make to be to form effectively (or can watch comfily) video flowing, byte replaces with compulsory.The conditional access card of legal order is configured to unique combination that output byte substitutes, and comprises the set that an enough big mandatory byte substitutes, thereby produces the stream that can watch again.The exportable alternative unique combination of each module, thus make and might mate the output of being transmitted and date back single device.Alternate embodiment not necessarily will use byte to substitute; Conditional access module can be stipulated the conversion of any way, comprises (unrestrictedly): addition, XOR, block move, delete, insertion, bit reversal and complex calculations (comprising the actual code that regulation should be carried out by the interpreter or the microprocessor of decoding device) more.
Above-described method requires the support in set-top box, and therefore can not cooperate many legacy systems to use together.For old-fashioned environment, can require a kind of different embodiment, wherein the content provider is combined into one is effective stream in each of two different key state when explaining.
The content provider is combined into when each that use two different keys (or key state) is deciphered decoded video stream part acceptably.Existing satellite or cable television system use different keys to encrypt to the part (such as 10 seconds fragment) of video usually separately.For the present invention, one or more fragments that can use an above key decoding will be produced.
In one embodiment, video compression is made amendment with a plurality of acceptable modification of identification to the original block of compressed video data.Then, use first key that block is encrypted, will be suitable for being transferred to the ciphertext of using the set-top box that first key is decrypted thereby produce.Then, use second key that block is deciphered.If the plaintext of gained also will be decoded as acceptable output on the device that with second key is key, preserve block so and each block is subsequently repeated this process.Can not attempt being used to open the new value of beginning block so forming acceptable stream on as the device of key if use the deciphering indication ciphertext of second key with second key.Through after enough trials, system operator can be combined into the video flowing that can use two each keys in (or may be more) key to decipher gradually.Use the quality of video of the gained of each key will depend on video compression technology, reference video and the other factors of the computational effort of cost, the technology that is used to select candidate block, use.
More efficient coding method also is possible in the calculating.For instance, in most video compression schemes, (comprise MPEG-2), might use territory (such as the note territory) to come staggered data area of using each secret key encryption.This technology increases the size of video data usually, but efficient and output quality is reduced on calculating.
Exemplary video flowing is with conventional coded data (for example, use single secret key encryption or unencrypted digital video and/or audio frequency) beginning, until the position that the expection key changes.Then key is changed signal encoding.Be chosen in first ciphertext block after key changes, make (a) use first decruption key, the value that is fit to of the compressing video frequency flow that its deciphering is 8 bytes down, (b) use second decruption key, its deciphering is a bit sequence, described bit sequence control decompressing device is to ignore with postbyte (for example, by opening beginning MPEG note) or otherwise to cause byte subsequently that the output that decompresses is had less relatively influence.For finding block with these characteristics, compression set or process can (for example) begin with desired plaintext when using first secret key decryption, then attempt the random value of first and/or second key, the key that also provides suitable result under the situation of second key is right until finding.
The subsequent section of generation stream makes ciphertext (a) produce the compressed video that uses first secret key decryption, and (b) be left in the basket when using second secret key decryption (or with less relatively influence processing).This stream can to use second key be suitable (for example, not stopping the MPEG note prematurely) and prepare to the gained data decryption with assay by using first key that video data is encrypted also (if desired).May need expressly carrying out less adjustment and repeatedly (for example to correct any situation that unsuitable plaintext can occur, to stop ignoring, maybe will transmit unsuitable length or otherwise will producing the illegal inaesthetic stream interruption of flowing, maybe will cause of data prematurely, or the like).At last (such as when the time near the end of MPEG note, when the video block that uses first key coding when finishing, or the like), stream cipher can comprise when use first secret key decryption and causes decompression process to begin to ignore the data of data.This moment or thereafter soon, " ignoring data " state finishes along with second key, and described stream uncared-for ciphertext to produce effective compressed video when using second secret key decryption but when using first secret key decryption continues.Described stream continues, and produces compressed video when alternately appearing at deciphering using in the described key and produce the data slot of annotation data when using another deciphering.At last, trigger key and change (for example, changing notice), or be returned to normal video, or beginning can be used the new video segment of new key to deciphering owing to the key that is present in the stream.
If the bootlegger only transmits key sequence, two identical videos of decrypted results generation can be acceptable when decompressing so.Yet, if the bootlegger transmits the video of decompression, so should be different by the video sequence that uses in the described key value each to decipher to produce.
It should be noted that alternate embodiment can comprise can use two above keys correctly decrypted data maybe can use the data of an above cryptographic algorithm decoding (using identical or different key value).The example of the decipherment algorithm of supporting can comprise any other block encryption, RC4, SEAL, any other stream cipher of (unrestriction): DES, AES, triple des, DVB block encryption, IDEA, any pattern (CBC, ECB, or the like), or the like.For can on set-top box, forbidding the embodiment that encrypts, the state that forbidding is encrypted can be used as key state (for example, the data of being transmitted can be successfully with the form of transmission and when using suitable secret key decryption, be interpreted as under the situation of effective video.But) video sequence or the part (such as useful ciphertext block and corresponding key) of available compression in the system operator precomputation sequence.Can be in real time or be combined into stream in advance.For instance, but precomputation and insert the video (showing) of common sequence such as complete black.If the key inspection is carried out by decoding device, system operator can need to carry out search to search a plurality of keys that can side by side check by same key so.Can use and utilize the collision search technique of birthday paradox (birthday paradox) to simplify described search.
Though for the video segment of describing the ground coding as mentioned, the required bandwidth of video flowing can increase usually, total bandwidth influence can it is believed that the bootlegger who needs tracking attacks under the ongoing situation and minimizes by its use is limited in.If the bootlegger (for example attempts to discern and delete video segment that the present invention works, amount by the data ignored in the analysis stream), similar feature can be placed so common (unlabelled) zone with produce " red herring (red herring) " thus interference attack person.
Has the system that does not use the password of position (such as the parity check bit that generally includes in substance DES or triple des key) for use, in these positions, can comprise evidence obtaining information, if although the bootlegger can rewrite the value in these before transmitting key, the validity of this approach can be conditional.
The logic that is used for the suitable key value on the let-off gear(stand) should be implemented on safety feature inside.Can use software and/or carry out the key derivation by the rule (for example, mixing) of radio reception with the form of encryption and with video or other content.For instance, before transmission can be adopted the block that multiple mode deciphers, system operator can transmit (individually and/or in groups) key (or key-encryptions-key), feasiblely watched the predetermined subset on basis (viewing base) to have each key.These keys can be used for deciphering or otherwise deriving the suitable video key that each installs.Can select randomly and/or can select subclass based on geographic position (for example, based on the position of the ability that receives the spot beam satellite signal be used for the transmitting locally television channel equally, cable system, or the like), subscriber ID, telephone number, understanding, type of device or any further feature (or combination of features) to one or more keys.Also can (look situation in real time) and transmit executable code with auxiliary (or execution) key derivation/selection.
Concrete steps and assembly that being used to of relating in an one exemplary embodiment followed the trail of the source of key that malice distributes again and/or video comprise any or all following steps (by any order): a part of (a) creating video compression, that encrypt, when each that use two different key state is decrypted it, produce at least two not isologs, and wherein each described plaintext correctly can be decoded as the part of effective compressed content stream; (b) transmit control data to a plurality of conditional access apparatus, wherein described control data is configured so that each described conditional access apparatus is exported in described at least two keys; (c) receive by comprising of being transmitted of described malice source or corresponding to the key and/or the video (and/or other data) of (or a plurality of) in the described key; (d) use which key packet is contained in the understanding of data of (or being used for producing) malice transmission to obtain the information about the security module in malice source, for example by inferring that the malice source has the device that can derive the key (or video) that is received; (e) use the understanding that increases to piracy community to repeat above-mentioned some or institute in steps, until discerning at least one malicious device; (f) forbid described malicious device, for example by transmission " deletion " message or by withholding following key.
Describe above-mentioned example although relate generally to the video section of audio-visual content, identical technology can be applicable to the content of audio frequency and other kind equally.
The example of attack and countermeasure
This part is described some exemplary attack and countermeasure.
The overlapping ability that the bootlegger can manage to forbid player is embedded in the output based on overlapping forensic mark to stop.Countermeasure for this attack directly is embedded in mark in the stream of audiovisual data of compression for the content owner.
The bootlegger can attempt relatively and combination from the output of multiple arrangement to attempt to remove forensic mark.For instance, have in the different positions in the output of device, the bootlegger can attempt quality, probability ground selection variant, the prevailing variant of selection of composite video, deletion/reductions video or use other technology to make to be difficult to more the copy followed the trail of.If it is quite little that the number of collusion device (colluder) is known as, mark rejuvenation can be discerned the collusion device to get rid of any collusion device group that does not wherein have the member can export the mark that is recovered by using each mark so.The content provider also can comprise forensic mark with many different variants (thereby make average and selection becomes difficult).Also the forensic mark of highly-visible can be used to obtain the quality that is caused by malicious attack is reduced or the resistibility of fuzzy enhancing.If necessary, can need to use improved forensic mark technology that content is subsequently edited.The content owner also can embed a large amount of marks and seek the sequence that embeds by individual device and the copy that is recovered between correlativity.
The bootlegger can attempt the emulation legitimate player.Correlation attack relates to the interpreter revised in the legitimate player and operates in incorrect (may be malice) mode.In this case, the difference between legitimate player and the emulation (comprising (unrestriction) Unrecorded operation, local code support, sequential/performance, Cryptographic key or the like) can be used for distinguishing legal environment and hostile environments.For instance, also can use the local code player to upgrade to correct weakness.
The bootlegger can attempt by harm coder-decoder, device driver, display/speaker unit or before or after decompressing other assembly of received content extract digital content.Similarly, can insert the malice version of these or other assembly.For responding described attack, following content can provide content to respond to the device that has leaked by differentiating output unit and refusal.Content can be transmitted safety upgrade (such as the local code Hotfix) to pregnable or unknown device.Forensic mark also can be used for following the trail of the copy that leaks in this way, thereby psychological deterrence and law deterrence and identification bootlegger's the mode of device to be cancelled is provided.
The bootlegger can attempt the input and output of " prerecord " all TRAP computings and these data are used for the malice interpreter.Can adopt multiple mode to defeat this and attack, comprise by using local code to make the total amount of required storage space excessive, following the trail of the security of leaking or passing through the upgrading primitive apparatus by using forensic mark.If source apparatus is in fact leaked (for example, it is at the content code of operation malice), the player crypto-operation can be used to guarantee the content code of player reality so in operation quilt signature, deciphering or the like.
The bootlegger of malice can attempt to produce a hostile interpreter of operating improperly in the mode that is intended to avoid safety inspection.Instantiation is that the interpreter of malice is attempted (for example) and made content code accept the situation of invalid RSA signature by the search and the calculating intermediate value of replacing expection.For defeating described attack, player can use the calculating except that cube (the getting the modulus of n) of the name of drawing lots before idols simply and relatively check signature with desired value.For instance, content code can multiply by an initial value, and then assay equals cube multiplying each other of desired value and initial value.Check the another way of signing to relate to increasing by a constant is correct to signing, following assay.The signature check code also can mix with other computing (such as the modification to the symmetric cryptography compiled key), only makes that the password value of gained just is correct when signing when effective.Also can suitably be used from revising code, code fuzzy technology, local code and any other countermeasure.
The bootlegger can attempt the firmware of malice is inserted in the media interface (such as CD drive).Can detect this attack to differentiate that self and check data correctly are written into from medium by making content code carry out self check.Local code and/or explanation type code also can be attacked to detect by the driver operation.Whether content also can will change and detect attack by comprising by attacking the data revised and detecting described data.
The bootlegger can attempt (for example) by using the file from the hard disk drive rather than coming emulation medium (comprising security feature) from the malicious device driver that legal medium are written into data.Can have effective Cryptographic key by the check driver and detect and defeat this attack.If the bootlegger finds the mode (thereby making the crypto-operation that the malice emulator can the legal driver of emulation) of extracting key from legal driver, can carry out extra driver so and differentiate that step is (such as the local code that is provided for driver, sequential is checked, test is non-standard functional, or the like).In addition, but the device driver of detection of malicious (for example, use TRAP_DeviceDiscovery, local code, or the like).
The bootlegger can attempt to utilize the weakness in the security code of concrete theme.Though some countermeasure can be possible (for example, by transmitting the security logic that upgrades), main solution is that the content author guarantees that following content is more carefully edited and do not had an identical weakness.
Extra consideration and variation
Can be configured with use (for example, can watch any three music videos) that allows limited quantity or the duration (for example, access right expires after watching 3 days first) of visiting medium.Can require user pay to obtain the further mandate of (or unconfined) playback thereafter.Watch counter (and/or other safety and status information) can be stored in medium originally on one's body and/or in the player and/or on the remote server.For instance, on the portion write of authorizing the data of unconfined playback can be arranged at medium goes into to divide, thereby allow on any player, to reset.Perhaps, mandate can be stored in the nonvolatile memory of player and/or can be configured to obtain mandate via the net connection server content code.
The part of the content on the medium (or all parts) can be an inaccessible satisfying some condition (for example, pay, certain combination of other theme of resetting, the time of untiing puzzle, certain amount disappear, or the like) before.In one example, content code was inoperative before purchased or activation.Activation can be carried out the reciprocation that maybe can relate to remote server in this locality.For instance, but content code contact remote server, to the local replay device of server identification, with user and server interaction to realize payment and to receive some key, explainable security code or allow other data of the decoding of content.After purchase was finished, the data of reception were used to activate the decoding of content.
When the user buys new player, can comprise that a regulation is to allow the migration of player nonvolatile memory from old player to new player.In one embodiment, this process is by carrying out at the mobile data between the device on the physical support that maybe can write medium such as smart card.Perhaps, transmission can connect via the numeral such as cable network or wireless network or infrared port and carry out.Security for maximum, transmission can be carried out (or be media with it) via the trust server device, and described trust server device and supplier's device are communicated by letter with recipient's device to guarantee correctly to transmit data and removed described data (or make its invalid) before data can be used on recipient's device on supplier's device.Be to admit the data that write by many different content themes, single server can be understood has use Nonvolatile memory devices for how many themes, or player can with a plurality of server interaction effects (for example, as in nonvolatile memory slot itself, discerning).Cryptographic key on supplier and the recipient can be used for providing safety for transmission.
Medium can comprise a plurality of data-encoding schemes.For instance, but single CD can comprise highdensity press portion, write-once part and recording section.
Position and distance measurement technique can be used for guaranteeing recipient's device be not in unacceptable physical location (such as in undelegated country, too away from only for family use home network server that content is provided, or the like).Touring communication can multiply by (round communication) two-way time the light velocity with judge auto levelizer apart from the upper limit.Global positioning system unify radio signal decay (for example, if device in the scope of 802.11b standard, Bluetooth technology or the like, if or install addressable common radio/satellite-signal, or the like) also can be used in estimated position and/or proximity.Also but operative installations is shared altogether the ability with electric wire (phone connects, the power circuit of family, or the like).Internet IP address and telephone number also can be used for obtaining positional information (for example, being used for the selection of regional code application, regional physical culture signal interruption, default language/monetary unit option).Positional information can be included in the forensic mark.
Player can provide the memory storage area of volatibility or " fragile is non-volatile ", such as allowing content that data transfer is still deleted the memory bank of content thereafter at once to next CD that inserts.Volatile memory can be used for when when outage content whether wipe temporary transient storage under the inessential situation.
In forensic mark detection/analysis, can use neuroid, thus the best security strategy of definition, or the like.
Can be configured with permission content code and under the situation that has correct discriminating, reset from recordable media.For instance, this ability can be used for producing the CD burning information station (optical disc burning kiosk) (or other system) that can be consumer's recording medium, for example needn't keep big stock to allow less shop to satisfy unpredictable consumer demand.Information station can be from the combination in any source or source (comprising internal storage device (hard disk, or the like) and data network) retrieval (original) content.The data of record can be revised (looking the explanation type code in the interpreter that the situation utilization and operation comprised in information station) by information station, (for example) introducing identification, to encrypt, make up-to-date security logic to be associated, to make up a plurality of content parts of selecting by the consumer with content, admit in user's request/preference, the compression (compressing again) and perhaps change capacity or the coder-decoder requirement of form again to satisfy medium or player device to section data to forensic mark, or the like.
Also can comprise and differentiate record cryptographically and authorize the value of resetting.For instance, this can for by trusted parties issue, via network be sent to information station, imprinting on medium and in the digital signature of playback duration by the content code check.This digital signature can (for example) comprises medium identifier, use the sequence number of identifier, date issued and target medium of record driver of root, the information station of the Hash tree of the content that SHA-1 calculates.
Information station also can comprise: the interface that is used to receive bill, credit card or other payment; Be used to receive touch-screen or other input media that the user selects; Be used to print the ability of the box lining, media surface, receipt or the like of customization; Be used for retrieving novel content-data, receive new user interface components and advertisements/offers is single, check and handle the network capabilities of payment, reporting errors condition or the like; With being used for data-switching is become desired output format, creates the audio/video maneuvering capability of the menu or the like of customization.
For reach high-performance when writing physical medium (such as CD), the media recording device can side by side use a plurality of writing lasers.The shielding of one physical support can be set to prevent vibrations or infringement around the medium owing to centrifugal force.Minute surface or other optical element can be used for making laser beam to center on medium moving to reduce or eliminate the physically needs of rotary optical medium.Can use not recording technique (such as by little drop of etch material is set, for example use and high resolution technique like the technology type that is used for ink-jet printer, then apply described substrate and write down) with protective seam on circular substrate based on laser instrument.
Medium need not physically to be present in the replay device place.For instance, medium can be communicated by letter with player device via wireless network or other network.In one embodiment, medium comprise a line chart and at least one semi-conductor chip, and described at least one semi-conductor chip is configured to the power that (a) receives self-induction coil; (b) transmit and receive data between use inductive coil and the player (or other device); (c) from local storage retrieval of content (if support, comprise content code), described local storage can comprise or can not comprise and can write part; (d) execution " is shaken hands " to differentiate the validity of medium for the password of content code or other device use.If can there be a plurality of described medium (for example, being contained in looking in the pallet that situation can extract in the player device that can comprise a plurality of medium), can use a kind of addressing method should be in communication so to allow being chosen in which medium of given time.
Content code can with the external device (ED) of any way and with assembly (such as the software program) reciprocation that can be contained in the player device.For instance, intelligent toy (or other device) can with the content code reciprocation of supporting described device (or the described device of a big class).Described reciprocation can comprise the exchanges data of any way, comprise that order (for example, the direction that toy car moves), voice data (for example, the sound that device sends, by the sound of device recording, or the like), image/video data (for example, be used for by device show, from the digital camera of device, or the like), logic (for example, be used for carrying out by device), event notice, or the like.In one embodiment, content code and external unit and device (comprising (unrestriction) lamp, heating installation, air-conditioning, home security system, electrical equipment, pet treatment/device for feeding, video recorder or the like) reciprocation, and help to control it.Communication means between player device and the external device (ED) via conventional audiovisual output terminal from the player device output data (for example can comprise, output to other sensor on microphone, CCD or the remote-control device) and via Long-distance Control (for example, infrared ray) interface reception data.The communication means of other support can comprise wireless and cable network and data exchange agreement.Some player device can not have enables the essential interface of all desired outside reciprocations, can directly connect external interface module (for example, via the physical interface that carries out bidirectional data communication and power supply) in this case.External device (ED) also can comprise nonvolatile memory or other memory storage that is used to carry the code (comprising the explanation type code) that is delivered to player device, for example uses the feature that is provided by described external device (ED) with auxiliary player device and/or content code.
The each side of playback system can be implemented individually and can be communicated with one another.For instance, on some platform (such as personal computer), make implement to find and/or the part of safety assessment ability separate with main player application can be favourable because comparable other assembly of these assemblies requires more frequent renewal.In an exemplary enforcement, content code is communicated by letter with the security scanners that is configured to detect such as the known security problem of the existence of malice, undelegated and/or suspicious software.Scanner also provides information about system state to content code and/or player application, such as which application program in operation, which device driver, known which device that connected have been installed, or the like.Scanner also can be reported its assessment to the safe condition of current system, whether satisfies the requirement that safety is reset such as system.Because new pirate risk can very fast appearance, if for example new software vulnerability (software exploit) is disclosed, so preferably the scanner program is upgraded frequently, such as renewal by the digital signature transmitted with content code via the Internet down loading updating or reception.Can be update service to user charge (for example, by automatically and periodically collecting evidence for payment, automatically notify the user to pay whether unsuccessful and/or when finally not receiving payment, automatically stopping user's visit) corresponding to the user.Scanner also can be to its result of user notification, correct problems and/or automatically download countermeasure or renewal automatically.Scanner also can (for example) by registration interruption or incident and to the change of content code or other assembly reporting system/safe condition.Can protect between the assembly communicating by letter of (such as between content code and the scanner) cryptographically.For instance, scanner can carry out digital signature to prevent to reply attack (replay attack) together with challenging value to its result.Described scanner can integrated anti-virus scan device or other vulnerability scanning device; although its functional with conventional virus detectors is different; difference is: it provides differentiates as the proof about the state of the machine that can be used by the content owner its result's password, rather than only protects the owner or the operator's of computing machine interests.
Also configurable automatic program detects undelegated (for example, pirate) content with the searching and computing machine.If find described content, program can be to the described potential infringement material of user notification.Program also can with content code or other security component reciprocation (and witness to it), (for example) it is believed that playback of content on the device that does not have pirate material to authorize.For whether the judgement material is authorized, scanner can be sought license file, digital signature, known file hash, or the like.
Key element of the present invention (comprising security feature and non-security feature) can (unrestriction) be used with non-programmable content delivering system; can use with the content protective system that uses local code rather than interpreter or virtual machine; the part that can be used as any software application or device is used; can on the programmable system of local runtime code (handling opposite), use all the time with use interpreter/virtual machine; (comprise electronic game machine copy protection and security system) with can be used in other system.For instance and unrestriction, indivedual aspects can be used for that computer security applications, network security are used, non-programmable anti-piracy, deception shielding harness (fraud screening system), e-mail filters, or the like.
The present invention can with DDB (comprise the television broadcasting, satellite transmits of (unrestriction) all kinds, via the communicating by letter of cable system, the Internet multileaving or the like) combination.Broadcast singal can carry and be used for the code (comprising security-related information and countermeasure) that uses with interior perhaps other content that is carried on described signal.Broadcast singal also can carry can be by content and/or other data of other content topic use.Security capabilities also can and be used to protect the system of TV signal to combine (and communicating with) with the conditional access card of routine.
When component interaction of the present invention is done the time spent, its technology that can access to your password is to protect its communication.Described security feature can comprise data use symmetric cryptography and/or message authentication code (or other inspection).Can use public-key cipher technology (to comprise digital signature/certificate, index key protocol, public key encryption/deciphering, challenge-response protocol; or the like) consult to be used to protect the symmetric key of described communication, or can directly use asymmetric cryptographic technique to data.Can put teeth in the symmetry and the state of cancelling of asymmetric key (for example, by checking revocation list, and remote server reciprocation, or the like).Also can use symmetric cryptography agreement (comprising that (unrestriction) uses broadcast encryption techniques) to come arranging key.Employed safety practice need not for all communication all identical.(for instance, can encrypt control messages, security-related parameter, key and/or MPEG " I " frame, can not encrypt other communication simultaneously.) key (comprising one or more related credentials relevant with each key or key set) that is used for protection " shaking hands " can use content code and check and/or directly checked by device.Can suitably protect the example of the assembly of its communication to comprise cryptographically (unrestriction): CD drive; other media interface; the media interface device driver; player application; the content code execution thread (for example; from the different content theme of operation just at the same time or from another thread that belongs to the identical content theme); operating system; the video-unit driver; video processor (or video card; or the like); the audio devices driver; audio process; no matter the external device (ED) of any way (is locally-attached; via access to netwoks; via bus access; or the like); other application program (security scanners; audio mixer; video effector, or the like); coder-decoder and security module.
Digital signature also can use the key by using one or more certificates to differentiate to produce, and can make up with other safety value.The signature (for example, being produced with different key/signers, cipher key size, algorithm or the like) of a plurality of versions can be provided.
The restriction that described example should not be interpreted as forcing.For the sake of brevity, especially under projects are included in situation in the similar tabulation, not necessarily fully enumerate tabulation.Word " comprises " meaning and comprises and unrestriction.Similarly, " for example " and " for instance " expression does not limit the general illustrative example of just discussing things.Similarly, " or the like " mean and have extra possibility, and tabulation should not be interpreted as necessarily enumerating all known possibilities.
In an one exemplary embodiment, can be specific player customized content.In this case, content only can be play on single player or minority player, but the unwanted code of resetting on recipient's device need not to be transmitted.Therefore, when sending information difficulty, costliness to the user or slowly the time, if if limited storage space system or must connect via network slowly and send content for example, this approach would be valuable especially.Yet it serves as suitably safe with the check playback environment that content still can be inquired about player.
Do not interrupt or distortion for guaranteeing to reset, to require concrete minimum performance standard to can be useful the interpreter of player.
In an one exemplary embodiment, can be configured to allow content to exchange to another device system and method from a device.The concrete security feature of described exchange depend on such as with the online communication of trusted (for example, operated) server available factor whether by publisher.The form that transmits content depends on the security strategy that put teeth in by content and the hardware capabilities of device.For instance, comprise all among the embodiment of safe interpreter that dispensing device transmission original encrypted content (as be stored on the original media or with another secret key encryption, look situation and include watermark) is together with the code that is used to control playback at two devices.The playback control routine can be the customization of recipient's device by dispensing device.Under another situation, dispensing device can check the security feature of output port and destination apparatus be acceptable, consult a cipher key shared, encrypt and re-encrypted content is sent to target with destination apparatus contents decryption and watermark processing, the internal unit weight of use cipher key shared are new.
Player with enough nonvolatile storage space can be used for storing the renewable code that calls from interpreter.For instance, can be configured the up-to-date security code that is used for specific publisher with storage all the time to player.In this case, if run into the security code of more recent version, so with new and old version (for example, after the digital signature on the new code of check).In this way, older content can be benefited from the security update that is carried on the fresh content.(this approach can (for example) uses previously described safe storage method and implements.) in another embodiment, content can be by getting Date from player/time and relatively come the requirement player to comprise that current safety upgrades with the date of known up-to-date safety upgrade.In this way, content can guarantee that player has reasonably up-to-date safety upgrade.
In general, content protective system should avoid playing the part of any visible role in the fair play of validated user.Yet certain user's interface element is essential, such as being used for reporting errors or information being provided.Can be (for example in content at the output quality of a plurality of supports, " old-fashioned " quality when player provides inadequate security and when security " height " quality when satisfied) between under the situation selected, designator can be used for the quality to user notification output.For instance, in one embodiment, (meaning promptly to indicate output to have high-quality by the green LED (LED) of content control, security is satisfied), (meaning promptly for the quality that orange LED indication reduces, security is not high), and the red LED of flicker can be indicated because player has been cancelled output is not provided.In another embodiment, provide brief oral or written notice (if known, with user's language) to report safe state.Report and/or the decision of using better quality output still to export than inferior quality can be based on other factorses, such as there being and/or not existing firm and/or fragile watermark.If desired, quality reduction module can be included in the player to allow content for safety or other quality (for example, being reduced to the quality of legacy format) former thereby reduction is reset.(for example, can comprise that quality reduces module high-definition TV signal converted to NTSC resolution or to convert the high resolving power multi-channel audio to binary channels CD Quality audio frequency.)
If media interface and player interpreter provide sufficient performance, can in interpreter rather than in independent deciphering module, handle deciphering in batches and watermark so and embed.Allow content directly itself to be deciphered some safety benefits can be provided, such as guaranteeing that the assailant can not start the attack at deciphering module.If the interpreter performance is fully, so also might be in interpreter also implementation content decompress, thereby avoided making the needs of single player coder-decoder type standardization.
Though the enforcement of using interpreter preferably not having on the platform that the specific hardware of the technology that discloses and system is supported (such as personal computer), might be implemented many interpreter functions herein in specialized hardware.Depend on application, although special-purpose enforcement provides the functional of minimizing, its cost-saved or power consumption.
The embodiment that receives the content on the physical medium can use any in fact media formats.Though CD (such as CD and DVD) provide higher storage density at lower cost, also can use other storage system, comprises (unrestriction): magnetic medium, holographic memory, battery backed RAM, ROM, EEPROM and flash memory are arranged.The memory capacity of medium can be used for storing many data of different types; comprise that the information relevant with system with the technology that discloses is (such as the executable program of the coding/decoding method of implementing to be used for various computer platforms, the content of using the method for announcement herein to protect herein; or the like) and data not directly related with the technology that discloses herein and system (such as incoherent executable program, such as the not protected content of Red Book CD audio frequency, use the content of other safety approach protection, or the like).
Medium can comprise that the tamperproof circuit that is used to carry out cryptographic calculations is not undelegated copy to allow player check medium.Although it is the simplest carrying out described ability for the medium that use electrical interface, even optical media can comprise cryptographic abilities.For instance, contactless crypto module (such as the contact type intelligent card of the 5th, 640, No. 306 United States Patent (USP)s of people such as Gaumet) can be fixed to or be embedded in the CD.Though it is preferably that cryptographic medium is differentiated, other authentication scheme of alternative use.For instance, known general media discrimination method comprises in the background technology: sequence number is written to " description " of position (such as the zone of using coml recordable media or driver to write) that is difficult to duplicate and the digital signature of the various features that comprise original physical medium.Certainly, cipher mechanism provides following advantage: even the assailant finds to be used to endanger the method for existing medium, also can issue the following medium with improved security and do not require player is carried out any change.
Because many consumers have invested in the content of legacy format, so can be configured to support these legacy format to the technology implementing to disclose herein and the player of system.Similarly, the interpreter of different editions can be supported by specific player.In this case, player needs the suitable security system that analyzing medium or content will be used with identification.For instance, video frequency player can detect old-fashioned DVD (and if select the CSS decryption system so) that CD is to use CSS and also be to use the technology that discloses and the DVD (and if activate the decryption system based on language so) of system herein.Being included in firm watermark in the content can be used for detecting the content that initial use one security system protected and whether has been replicated to the form that lacks initial protection.For instance, the content that does not allow to duplicate can comprise that any device that a watermark runs into the copy of any other form (for example, being not protected form) with indication can recognize this copy and reset for undelegated also (for example) refusal.
Technology of Jie Shiing and system can use with a variety of content types that comprise (unrestriction) audio frequency, still image, video, 3-D view and 3 D video herein.
Technology of Jie Shiing and system also may be implemented in the multiple physical unit herein.If have only a device to be responsible for contents decryption, putting teeth in security strategy by described device so is preferably.Yet output unit and intermediate treatment device (such as audio equalizer or frequency mixer) also can from the technology that discloses herein and system benefit and/or can check its safety by the query capability that described technology and system use by providing.In one embodiment, home entertaining downloaded, storage and organize content, and content is relayed to the replay device of successfully checking its security (loudspeaker, earphone, video display, or the like).Preferably under the jointly controlling of the technology that discloses in this article and system and destination apparatus to being connected encryption to prevent that content is stolen in transmission to these devices.
Claims (11)
1. method that is used to regulate and control to the visit of Nonvolatile digital memory storage, described Nonvolatile digital memory storage are contained in the device that executes instruction in figure spirit integrality (Turing-Complete) interpreter, and described method comprises:
(a) receive a request from the described instruction that just is being performed, wherein said request regulation:
(i) part that is requested to visit of described memory storage and
(ii) a plurality of extra executable instructions;
(b) described extra executable instruction is used a Cryptographic Hash Function to obtain a hashed value;
(c) differentiate described hashed value; And
(d) if described discriminating is successful, allow visit so to the described institute requested part of described memory storage, carry out described extra executable instruction simultaneously.
2. method according to claim 1, wherein said discriminating step comprise the hashed value that described hashed value and is stored in the described Nonvolatile memory devices and compare.
3. method according to claim 1, wherein said discriminating step comprise the digital signature that check one is provided by the described instruction that just is being performed.
4. method according to claim 1, wherein said request comprise that one points to and can and be contained in the pointer of the described extra executable instruction in the storer in the described device by the described instruction access that is performed.
5. optical digital disk medium that comprise the audio-visual content that is used for the encryption of on any one of multiple arrangement structure, resetting, described optical digital disk medium comprise programmed logic, and described programmed logic is configured to:
(a) at least one feature of the device of described programmed logic is carried out in identification one;
(b) which in a plurality of security vulnerabilities be described at least one feature of use judge, if any, is present in the described actuating unit;
(c) when a suspicious weakness is indicated in described judgement,
(i) select in a plurality of software countermeasures at least one, wherein said selected countermeasure corresponding to described suspicious weakness and with described actuating unit compatibility;
(ii) alleviate described suspicious weakness to call described selected countermeasure by controlling described actuating unit; And
(iii) to the audio-visual content decoding of described encryption, wherein said decoding comprises a value that successful computing produced by described countermeasure logic; And
(d) when a suspicious weakness is not indicated in described judgement, use at least one decruption key that described audio-visual content is decoded, described at least one decruption key is to use at least one the Cryptographic key that is associated with described actuating unit and derives.
6. optical digital disk medium according to claim 5, wherein said programmed logic is configured to carry out in for the common interpreter of described multiple arrangement structure one, and at least a portion of described selected countermeasure be configured to one with microprocessor that described actuating unit is associated on directly carry out as local code.
7. optical digital disk medium according to claim 5, wherein said optical digital disk medium comprise that further one differentiates the digital signature of described local code part.
8. a permission that is used to allow a replay device that comprises a nonvolatile memory to judge to use the optical digital disk medium reversed automated process whether, described method comprises:
(a) read a medium identifier from optical digital disk medium;
(b) the described medium identifier of check is not shown in the revocation list that is stored in the nonvolatile memory;
(c) described medium identifier is stored in the playback history that is contained in the described nonvolatile memory;
(d) read a tabulation of the medium identifier of cancelling from described optical digital disk medium;
(e) record sheet is shown in the described playback history and also is shown in any medium identifier in the tabulation of the described medium identifier of cancelling that reads; And
(f) any described medium identifier that writes down is increased to the described revocation list that is contained in the described nonvolatile memory.
9. method according to claim 8, wherein when described checking procedure judged that described medium identifier is shown in the described revocation list, the playback that is contained in the audio-visual content of the encryption on the described optical digital disk medium was prevented from.
10. method according to claim 8 wherein when described checking procedure judges that described medium identifier is shown in the described revocation list, is carried out the playback of the audio-visual content that is contained in the encryption on the described optical digital disk medium with the quality that reduces.
11. one kind is used for judging that the part of the software that whether allows to be stored in a computer-readable access to memory visits the automated process of the part of a nonvolatile memory, described method comprises:
(a) the described part of a pair of software of reception quotes;
(b) cryptographic hash of the described software section of calculating;
(c) value that the described cryptographic hash that calculates and is stored in the described nonvolatile memory compares;
(d) when the value of described cryptographic hash that calculates and described storage is mated, allow described software section to visit described nonvolatile memory part; And
(e) when the value of described cryptographic hash that calculates and described storage does not match, do not allow described software section to visit described nonvolatile memory.
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US10/614,765 | 2003-07-07 | ||
| US10/614,765 US7987510B2 (en) | 2001-03-28 | 2003-07-07 | Self-protecting digital content |
| US60/537,421 | 2004-01-16 |
Related Child Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2008100822994A Division CN101241735B (en) | 2003-07-07 | 2004-07-07 | Method for replaying encrypted video and audio content |
| CN2008101114428A Division CN101364415B (en) | 2003-07-07 | 2004-07-07 | Reprogrammable security for controlling piracy and enabling interactive content |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1839375A true CN1839375A (en) | 2006-09-27 |
| CN100504818C CN100504818C (en) | 2009-06-24 |
Family
ID=37016201
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2008101114428A Expired - Fee Related CN101364415B (en) | 2003-07-07 | 2004-07-07 | Reprogrammable security for controlling piracy and enabling interactive content |
| CNB2004800239483A Expired - Fee Related CN100504818C (en) | 2003-07-07 | 2004-07-07 | Method for regulating access for non-volatile memory region and automatic method for judging access |
Family Applications Before (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2008101114428A Expired - Fee Related CN101364415B (en) | 2003-07-07 | 2004-07-07 | Reprogrammable security for controlling piracy and enabling interactive content |
Country Status (1)
| Country | Link |
|---|---|
| CN (2) | CN101364415B (en) |
Cited By (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101742051A (en) * | 2008-11-20 | 2010-06-16 | 富士施乐株式会社 | Information processing device and information processing method |
| CN102841992A (en) * | 2011-04-21 | 2012-12-26 | 威步系统股份公司 | A method for generating a cryptographic key for a secure digital data object on basis of current components of a computer |
| CN108064381A (en) * | 2015-03-30 | 2018-05-22 | 爱迪德技术有限公司 | Data protection |
| CN108351839A (en) * | 2015-12-24 | 2018-07-31 | 英特尔公司 | For hanging up/restoring the instruction of the migration on enclave and logic in Secure Enclave page cache |
| CN108475319A (en) * | 2015-08-10 | 2018-08-31 | 数据输入输出公司 | Device birth voucher |
| CN108762791A (en) * | 2018-06-07 | 2018-11-06 | 深圳市元征科技股份有限公司 | Firmware upgrade method and device |
| CN109521972A (en) * | 2017-09-20 | 2019-03-26 | 佳能株式会社 | The control method and recording medium of information processing unit, information processing unit |
| CN110569205A (en) * | 2018-06-06 | 2019-12-13 | 旭景科技股份有限公司 | Security system single chip and method of operation thereof |
| CN111819561A (en) * | 2018-03-09 | 2020-10-23 | 高通股份有限公司 | Integrated circuit data protection |
| CN112445539A (en) * | 2019-09-02 | 2021-03-05 | 珠海市魅族科技有限公司 | Method, device, electronic equipment and storage medium for identifying disguised music playing |
| CN113242121A (en) * | 2021-04-15 | 2021-08-10 | 哈尔滨工业大学 | Safety communication method based on combined encryption |
| CN113544653A (en) * | 2019-03-04 | 2021-10-22 | 赛普拉斯半导体公司 | Encrypted group programming |
| CN113784153A (en) * | 2016-12-06 | 2021-12-10 | 谷歌有限责任公司 | Method, system and computer readable medium for detecting similar live streaming media items |
| CN114238972A (en) * | 2021-12-14 | 2022-03-25 | 安天科技集团股份有限公司 | File scanning method and device, electronic equipment and storage medium |
| US20220366019A1 (en) * | 2016-05-13 | 2022-11-17 | nChain Holdings Limited | Method and system for verifying ownership of a digital asset using a distributed hash table and a peer-to-peer distributed ledger |
| CN117595860A (en) * | 2023-11-15 | 2024-02-23 | 合芯科技有限公司 | Counter, memory and chip |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102915414A (en) * | 2011-08-02 | 2013-02-06 | 中国银联股份有限公司 | Data storage system and method for security information interaction |
| US9767259B2 (en) * | 2012-05-07 | 2017-09-19 | Google Inc. | Detection of unauthorized content in live multiuser composite streams |
| WO2016061411A1 (en) * | 2014-10-15 | 2016-04-21 | Verimatrix, Inc. | Securing communication in a playback device with a control module using a key contribution |
| WO2016123237A1 (en) | 2015-01-27 | 2016-08-04 | Arris Enterprises, Inc. | Obfuscation for protection of streaming media and other data flows |
| CN108694054A (en) * | 2017-04-10 | 2018-10-23 | 南昌欧菲生物识别技术有限公司 | The upgrade method and intelligent terminal of microprocessor firmware |
| US11868509B2 (en) * | 2017-11-17 | 2024-01-09 | Telefonaktiebolaget Lm Ericsson (Publ) | Method and arrangement for detecting digital content tampering |
| CN112015407A (en) * | 2019-05-31 | 2020-12-01 | 北京字节跳动网络技术有限公司 | Plug-in player implementation method and device and electronic equipment |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| AU4839899A (en) * | 1998-06-29 | 2000-01-17 | Recording Industry Association Of America | Security marking system and method for minimizing pirating of data on data media |
| JP2000067522A (en) * | 1998-08-25 | 2000-03-03 | Sony Corp | Information reproducing device/method, information recording device and its method, providing medium and recording medium |
| US20020073317A1 (en) * | 2000-12-08 | 2002-06-13 | Philips Electronics North America Corporation. | System and method for protecting digital media |
-
2004
- 2004-07-07 CN CN2008101114428A patent/CN101364415B/en not_active Expired - Fee Related
- 2004-07-07 CN CNB2004800239483A patent/CN100504818C/en not_active Expired - Fee Related
Cited By (26)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101742051B (en) * | 2008-11-20 | 2014-01-29 | 富士施乐株式会社 | Information processing device and information processing method |
| CN101742051A (en) * | 2008-11-20 | 2010-06-16 | 富士施乐株式会社 | Information processing device and information processing method |
| CN102841992A (en) * | 2011-04-21 | 2012-12-26 | 威步系统股份公司 | A method for generating a cryptographic key for a secure digital data object on basis of current components of a computer |
| CN102841992B (en) * | 2011-04-21 | 2015-10-21 | 威步系统股份公司 | The method of the encryption key being used for shielded digital data object is generated for computer based current component |
| CN108064381A (en) * | 2015-03-30 | 2018-05-22 | 爱迪德技术有限公司 | Data protection |
| CN108475319B (en) * | 2015-08-10 | 2022-04-19 | 数据输入输出公司 | Birth certificate of device |
| CN108475319A (en) * | 2015-08-10 | 2018-08-31 | 数据输入输出公司 | Device birth voucher |
| CN108351839A (en) * | 2015-12-24 | 2018-07-31 | 英特尔公司 | For hanging up/restoring the instruction of the migration on enclave and logic in Secure Enclave page cache |
| CN108351839B (en) * | 2015-12-24 | 2023-10-31 | 英特尔公司 | Apparatus and method for suspending/resuming migration of enclaves in an enclave page cache |
| US20220366019A1 (en) * | 2016-05-13 | 2022-11-17 | nChain Holdings Limited | Method and system for verifying ownership of a digital asset using a distributed hash table and a peer-to-peer distributed ledger |
| US11934494B2 (en) | 2016-05-13 | 2024-03-19 | Nchain Licensing Ag | Method and system for verifying integrity of a digital asset using a distributed hash table and a peer to-peer distributed ledger |
| CN113784153A (en) * | 2016-12-06 | 2021-12-10 | 谷歌有限责任公司 | Method, system and computer readable medium for detecting similar live streaming media items |
| CN109521972A (en) * | 2017-09-20 | 2019-03-26 | 佳能株式会社 | The control method and recording medium of information processing unit, information processing unit |
| CN109521972B (en) * | 2017-09-20 | 2023-07-11 | 佳能株式会社 | Information processing apparatus, control method for information processing apparatus, and recording medium |
| CN111819561B (en) * | 2018-03-09 | 2023-11-03 | 高通股份有限公司 | Integrated circuit data protection |
| CN111819561A (en) * | 2018-03-09 | 2020-10-23 | 高通股份有限公司 | Integrated circuit data protection |
| CN110569205A (en) * | 2018-06-06 | 2019-12-13 | 旭景科技股份有限公司 | Security system single chip and method of operation thereof |
| CN108762791B (en) * | 2018-06-07 | 2022-09-16 | 深圳市元征科技股份有限公司 | Firmware upgrading method and device |
| CN108762791A (en) * | 2018-06-07 | 2018-11-06 | 深圳市元征科技股份有限公司 | Firmware upgrade method and device |
| CN113544653A (en) * | 2019-03-04 | 2021-10-22 | 赛普拉斯半导体公司 | Encrypted group programming |
| CN113544653B (en) * | 2019-03-04 | 2024-05-10 | 赛普拉斯半导体公司 | Encrypted group programming |
| CN112445539A (en) * | 2019-09-02 | 2021-03-05 | 珠海市魅族科技有限公司 | Method, device, electronic equipment and storage medium for identifying disguised music playing |
| CN113242121A (en) * | 2021-04-15 | 2021-08-10 | 哈尔滨工业大学 | Safety communication method based on combined encryption |
| CN113242121B (en) * | 2021-04-15 | 2023-07-25 | 哈尔滨工业大学 | Safety communication method based on combined encryption |
| CN114238972A (en) * | 2021-12-14 | 2022-03-25 | 安天科技集团股份有限公司 | File scanning method and device, electronic equipment and storage medium |
| CN117595860A (en) * | 2023-11-15 | 2024-02-23 | 合芯科技有限公司 | Counter, memory and chip |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101364415A (en) | 2009-02-11 |
| CN100504818C (en) | 2009-06-24 |
| CN101364415B (en) | 2013-03-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101241735B (en) | Method for replaying encrypted video and audio content | |
| CN1839375A (en) | Reprogrammable security for controlling piracy and enabling interactive content | |
| CN1145359C (en) | Methods and apparatus for continuous control and protection of media content | |
| CN1290035C (en) | Digital content delivery adopting network broadcasting service | |
| CN1163805C (en) | System for tracking end-user electronic content usage | |
| CN1276321C (en) | Systems and methods for secure transaction management and electronic rights protection | |
| CN100345157C (en) | Method and apparatus for only identifying purchase of customer in electronic vending system | |
| US7987510B2 (en) | Self-protecting digital content | |
| CN1309487A (en) | Data processing device, system and method | |
| CN1703749A (en) | Method and system of preventing unauthorized rerecording of multimedia content | |
| CN1322321A (en) | Information transmission system, transmitter, and transmission method as well as information reception system, receiver and reception method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| ASS | Succession or assignment of patent right |
Owner name: JUSHI CO., LTD. Free format text: FORMER OWNER: PASSWORD RESEARCH CO., LTD. Effective date: 20080328 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20080328 Address after: california Applicant after: Cryptography Res Inc. Address before: california Applicant before: Cryptography Res Inc. |
|
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C56 | Change in the name or address of the patentee |
Owner name: LUOWEI SUOLUOSHENG CO., LTD. Free format text: FORMER NAME: CRYPTOGRAPHY RES INC. |
|
| CP01 | Change in the name or title of a patent holder |
Address after: california Patentee after: Rovi Solutions Corp. Address before: california Patentee before: Cryptography Res Inc. |
|
| ASS | Succession or assignment of patent right |
Owner name: IRDETO USA CO., LTD. Free format text: FORMER OWNER: LUOWEI SUOLUOSHENG CO., LTD. Effective date: 20131128 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20131128 Address after: American California Patentee after: Edid USA Ltd Address before: california Patentee before: Rovi Solutions Corp. |
|
| ASS | Succession or assignment of patent right |
Owner name: IRDETO B. V. Free format text: FORMER OWNER: IRDETO USA CO., LTD. Effective date: 20150601 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20150601 Address after: Holland Hoofddorp Patentee after: Ai Dide Technology Co., Ltd. Address before: American California Patentee before: Edid USA Ltd |
|
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20090624 Termination date: 20200707 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |