43_08.dvi

Size: px

Start display at page:

Download "43_08.dvi"

ぜんすけかに
5 years ago
Views:

1 Vol. 2 No (Sep. 2009) 1, 1 1 CM CM 1 Storage Device Initiative Sequential Access Control Architecture for Multimedia Content Tatsuya Hirai 1, 1 and Katsumi Tanaka 1 improved. On the other hand, it caused the problem to make the unauthorized usage of the content easier. Therefore, content owners are getting to require establishing the technologies to prevent such usage. Piracy and CMskipped viewing are understood as the significant ones. For the piracy, some technologies aimed to mainly being applied to optical discs, have been put to practical use. In those technologies, the host device executes almost all the tasks. However, if those functions are implemented as software in the host device, it becomes obvious that they may have vulnerability for the attack. One of the authors has previously proposed the storage-device-initiative type technology with high robustness to prevent unauthorized usage if the functions on the host device are implemented as a software. In this paper, we propose a new technology with high robustness by basing the previous one. It enforces for the users to view the content without skipping CMs. The concretely proposed items are newly introduced information to realize the access control, message exchange protocol between the host and the storage device, and the managing method of the information taking the affinity to the conventional file system format into account. 1. DVD 1) Blu-ray Disc 2) SD 3) Digitalization of commercial content like movie and music has recently advanced. Along the advancement, wide variety of digital appliances and high capacity storage media/devices have been commoditized because writing and reading technology for magnetic or semiconductor media has also innovatively 1 Department of Social Informatics, Graduate School of Informatics, Kyoto University 1 Presently with Central Research Laboratory, Hitachi, Ltd. 87 c 2009 Information Processing Society of Japan

2 88 4),5) 6) 8) 9) 13) CM CM 14) 15) 17) 9) 13) 1 CM /

3 89 CD DVD SD 18) 2.2 PC 1 DVD SD Blu-ray Disc CPRM 19) AACS 20) PC CPRM AACS PC 1

4 90 (1) (2) (3) (4) DRAM (1) 21) 23) (1) 1 (2) (3) PC PC PC Trusted Computing Group TCG 25) 26) LSI PC 27) 29) 30) 31) 32) AACS 1 IC 24)

5 91 Table 1 1 Features of content usage control type by only host device and partially storage device. [ ] [ ] [ ] [+] E-SATA USB [+] [+] [ ] [+] [ ] [ ] [+] [ ] [ ] [+] [ ] 2 [+] ) 13) 1 1

6 ) 13) 4.1 (1) K content Usage Rule UR Usage Control Information UCI (2) K content (3) Normal Storage Qualified Storage (4) (5) (4) 1 Fig. 1 Basic architecture for Storage Device initiative content usage control. 1 9) 13) ) Web Web 1 34) 3. 1 CM

7 93 CM CM T 1 CM n CM m n +1 CM m n m CM 35),36) 1 CM 14) 17) 3.1 (1) 1 N BU Block Unit [0] BU[N 1] BU CM BU CM BU CM BU 2 2 BU[i] BU[i +1] 2 (1) Fig. 2 Example of sequential type access control rule for continuous content (1). 2 BU[i] 3.2 (2) CM CM CM Portion 2 Portion 2 1 Portion 1 4 Portion 4 3 Portion CM 2 4 CM

8 94 3 (2) Fig. 3 Example of sequential type access control rule for continuous content (2). CM ) 13) 3 BU 4.1 9) 13) CM BU K BU[0],..., BU BU N BU BU BU Identifier BUID Individual Usage Rule IUR IUR IUR H IUR S 1 IUR S BU 2 BU BU Individual Usage Control Information IUCI 1 IUCIID BU BUID Format 4 N BU F 0,...,F N 1 5 BU BU BU

9 95 Fig. 4 4 BU Correspondence relation between Block Units and Individual Usage Control Information. Fig. 6 6 Access control system controling the usage of continuous content with Individual Usage Control Information. 5 Authenticator & IUCI Transferor IUCI Creator 5 Fig. 5 Example of read request of Individual Usage Control Information and the response by Storage Device. BU 1 BU 9) 13) 6 Protected Module BU Block Unit Encrypter BU IUCI Recognizer IUR H BU BU Block Unit Decrypter BU 3

10 96 Authenticator & IUCI Transferor Qualified Storage Controller IUR S Qualified Storage 1 Normal Storage Normal Storage Controller 4.2 9) 13) BU BU BU Request Request E BU Request IUCI 2 (1) K s (2) K s IUCI (3) IUCI K BU 7 Fig. 7 IUCI basic transfer processing sequence for writing. K BU BU IUCI IUCI UCI BU BU 1 8 IUR S 3

11 97 8 Fig. 8 IUCI basic transfer processing sequence for reading. BU BU Access Evidence AE (1) IUCI[k] (2) 9 Fig. 9 Sequential access control processing sequence by IUCI output control from Storage Device. IUCI[k] BU[k 1] (3) BU[k 1] AE[k 1] (4) BU[k 1] AE[k 1]

12 98 (5) AE[k 1] IUCI[k] AE[k 1] BU[k 1] BU BU BU BU BU 3 CM CM BU 3 Accession Point Indicator API 1 API API K BU 10 1BU API Fig. 10 Plural APIs insertion in a BU. BU K BU 2 10 Accession Point Indicator List APIL APIL 1 1 BU API BUID 1 BU APIL 1 Access Completion Condition ACC 1 BU BU API n BU n API API Accession Point Indicator Number APIN API 11 4 API API Generator & Inserter API BU API APIL APIL 7 K s APIL E APIL 1 BU 2 API

13 99 11 Fig. 11 Server Device. E APIL 12 (1) BU[k] ACC[k] (2) ACC[k] ACC[k] API j (3) ACC[k] (4) ACC[k] BU[k] API j API (5) K s (4) API (6) API APIL j BU[k] 4.3 AE[*] API API API BU BU API API BU 12 Fig. 12 Access status confirmation processing sequence in Storage Device. API API 16 Mb/s MPEG2-TS Transport Stream 37) MPEG2 GOP Group of Pictures API GOP GOP 1 API

14 100 1 GOP 0.5 GOP API BU 1 1 API API 8 GOP 4 1 API 128 AES 39) 20),38) 16 1 GOP 1 API 1: API API APIL 1 APIL BUID BU APIL 1 BU 1 1 BU 30 API 1 API 16 1 BU API APIL 1 1 / IUR S BU BUID 2 13 Fig. 13 Relation between IUCIs and sequential access control rules BU 1 7 BU

15 101 IUCIID = 10 IUCIID = 20 IUCI BU BUID IUCI 3 1 IUCIID 10 IUCI 2 IUCIID 22 IUCI IUCIID IUCI Fig. 14 Circulation of IUCI sets, sequenatial access control rules and encrypted continuous content IUCIID BU BUID 14 (1) (2) 1 IUCIID = (3) (4) 2 1 IUCIID = BUID IUCIID BU BU ) 38) 5.1 UDF Universal Disc Format 40)

16 ) UDF 40) ) UDF Named Stream 1 UDF Named Stream UDF Named Stream UDF UDF Named Stream UDF Program[i] i IUCI(IUCIID = q) Program[i] BU 1 1 UDF Named Stream 15 UDF Fig. 15 Allocation mothod of Individual Usage Control Information and continuous content in UDF file system format. q PBInfo UCInfo 2 Named Stream PBInfo BU BUID IUCIID UCInfo PBInfo IUCIID Named Streams

17 103 (4) SACR(q) BUID ( 5 ) SACRInfo(q) SACRInfo(q) H(SACRInfo(q)) 1 H(SACRInfo(q)) SACRInfo(q) (6) H(SACRInfo(q)) SACRInfo(q) Named Stream HLInfo HLInfo H(SACRInfo(q)) SACRInfoL(q) (7) BU BUID = b API APIL(b) APIL(b) Named Stream APILLInfo ( 8 ) APILLInfo BU BUID BU API APILL BUID b BU API APIL(b) APILL(b) (2) (3) 1 16 UDF Fig. 16 Allocation method of sequential access control related information in UDF file system format. (1) PBInfo UCInfo Named Stream SACRInfo Sequential Access Control Rule Information ( 2 ) SACRInfo ( 3 ) SACRInfo SACRInfoID SACRInfoID q SACR(q)SACRInfoID (= q) SACR(q) SACRInfo(q) SACRInfoID SACRInfo (4) 1 IUCIID IUR K BU (5) (6) 1 H(SACRInfo(q)) SACRInfo(q)

18 104 2 / / 9) 13) (5) H(SACRInfo(q)) SACRInfoL(q) SACRInfo(q) SACRInfo(q) SACRInfo(q) SACRInfo(q) SACRInfo Program.list Program.list 1 1 ProgramID SACRInfo SACRInfoIDs H(SACRInfo(q)) 1 H(SACRInfo(q)) SACRInfoL(q) TCP/IP ATA 18) TCP/IP 1 ATA / M BUID = {Q BUID, Σ BUID,δ BUID,s BUID,0,F BUID} Q BUID = {Z, q 0,...,q N 1,E} Σ BUID = {x in x in =0, 2,...,N 1} s BUID,0 = Z F BUID = q N 1 17 Σ BUID b 0,...,b N 1 b 0 BUID BU

19 105 Fig State transition diagram of qualified storage controller realizing sequential access control showninfig.2. Fig State transition diagram of qualified storage controller realizing sequential access control showninfig.3. BUID BU API q i i =0,...,N 1 3 (1) BUID b 0 + i +1 (2) (1) (3) BU (1) q i BUID b 0 + i +2 q i SACR(q) 3 Q BUID Q BUID = {Z, q 0,...,q j+l k 2,E} Σ BUID = {x in x in =0, 2,...,N 1} s BUID,0 = Z F BUID = q j 1+l 1 k = q j+l k BU[j] BU[k 1] 1 q 0 q j 1 1 BUID BU BUID BU BU 18 q j BUID j 1 BU 2 BU BUID j k 1 k 1 k 3 BU q j BU BUID l 1 BU 1 BU 2 3 SACRInfo(q) 1 API APIL

20 106 42) 100 MHz MHz AES 43) 96 MHz 1/3 128 API MHz 2 μs SACRInfo(q) SACRInfo(q) kb AES 1 ms API APIL / API APIL 1 1 APIL API APIL MHz 3 μs ) DVD Forum Official Website. 2) Blu-ray Disc Association. 3) Home SD Association. 4) Napster 5) 6) 7) Blu-ray 10 ipod 8) CPRA ) Hirai, T. and Hori, Y.: An HDD-based removable medium and its AT-attachment interface architecture for copyright protection, IEEE Trans. Consumer Electronics, Vol.49, pp (Nov. 2003). 10) Hirai, T.: Content protection technology for a novel removable drive, IEEE Trans.

21 107 Magnetics, Vol.41, pp (Feb. 2005). 11) Hirai, T., Hori, Y., Shimizu, Y. and Takemura, I.: Overview of Content Protection Technology for Intelligent Attached Devices, Digest of ICCE, pp (Jan. 2006). 12) Hori, Y., Taima, K. and Hirai, T.: Secure Framework of Audiovisual Content based on Bi-directional Authentication for Hard Disk Drive, Digest of ICCE, (Jan. 2008). 13) Hirai, T. and Inagaki, Y.: Secure Procedures to Reconnect Intelligent Devices and Recover Content Usage Control Information, Digest of ICCE, (Jan. 2009). 14) IT media 15) (2005). 16) IT vs BP (2005). 17) IT media 18) Technical Committee T13 AT Attachment. 19) Publications and Current Versions. 20) Specifications. 21) Boneh, D., Lie, D., Lincoln, P., Mitchell, L. and Mitchell, M.: Hardware support for temper-resistant and copy-resistant software, Technical Report, Stanford University Computer Science (1999). 22) Suh, E., Clarke, D., Gassend, B., Dijk, M. and Devadas, S.: AEGIS: Architecture for tamper-evident and tamper-resistant processing, Proc. International Conference on Supercomputing, pp (2003). 23) OS Vol.45, No.3 (2004). 24) FRAM 25) Trusted Computing Group-Home. 26) Lie, D., Thekkath, C.A. and Horowitz, M.: Implementing an untrusted operating system on trusted hardware, Proc. ACM Symposium on Operating Systems Principles (2003). 27) Chatterjee, R., Ryder, B.G. and Landi, W.A.: Complexity of point-to analysis of java in the presence of exceptions, IEEE Trans. Softw. Eng., No.27, pp (2001). 28) Collberg, C., Thomborson, C. and Low, D.: A taxonomy of obfuscating transformations, Technical Report 48, Department of Computer Science, University of Auckland (1997). 29) Aucsmith, D.: Tamper Resistant Software: An Implementation, Information Hiding, pp (1996). 30) Microsoft Windows Media DRM 31) AACS Advanced Access Content System. 32) AACS 33) Web Vol.42, No.SIG8 (TOD 10) (2001). 34) Synchronized Multimedia Integration Language. 35) 36) GyaO 37) ISO/IEC : 2007 Information Technology Generic coding of moving pictures and associated audio information: Systems. 38) SAFIA LICENSE GROUP, SAFIA Specifications. 39) NIST, FIPS PUB 197, Announcing the ADVANCED ENCRYPTION STAN- DARD AES. 40) OSTA Universal Disk Format Specifications. 41) ARIB TECHNICAL REPORT B ) cnt=mpumcu category landing.jsp&fp=/products/mpumcu/ 43) DENSO CREATE: aes spec.pdf. spec.pdf A.1

22 108 WC x Write Command RC x Read Command NDC x Non Data Command 3 x N Q N ATA 18) Q A (1) K s,sv H (2) SACRInfo 1 (3) SACRInfo Program SACRInfo(q) Program ProgramID p Program 1 K s,sv H 19 Fig. 19 Actual writing processing sequence of sequential access control related information through host device. BUID b 0,...,b N 1 N BU (4) ProgramID = p SACRInfoID = q K s,sv H 2 Program SACRInfoID (5) (1) 3 (6) Program BU 2 3 (1) K s,sv ST 11)

23 109 PBInfo UCInfo Program PBInfo UCInfo (7) (5) SACRInfo(q) APIL {APIL(b) b = b 0,...,b N 1} H(SACRInfo(q)) Program (6) APIL (8) H(SACRInfo(q)) APIL(b) HL(SACRInfo(q)) APILL(b) SACRInfo(q) HL(SACRInfo(q)) APILL(b) APIL H(SACRInfo(q)) 16 A (1) Program.list (2) p = ProgramID q = SACRInfoID (3) K s,h ST (4) Program Named Streams (5) 4 (a) (4) SACRInfo HLInfo SACRInfoID q (b) SACRInfo (5a) 20 Fig. 20 Sequential access control processing sequence on actual interface for Storage Device. SACR(q) BU (c) HLInfo (5a) HL(SACRInfo(q)) (d) APILL (5c) Program APILLInfo APILL{APILL(b 0),..., APILL(b N 1)}

24 110 (6) 6 (a) Qualified Storage HL(SACRInfo(q)) SACRInfo(q) SACRInfoL(q) (b) Qualified Storage SACRInfoL(q) SACRInfo(q) (c) (6b) SACRInfo(q) (d) (6a) (6c) (e) SACRInfo(q) (6d) (6b) SACRInfo(q) (f) APILL {APILL(b 0),..., APILL(b N 1)} {APIL(b 0),..., APIL(b N 1)} (7) SACR(q) 1 (8) 3 (a) Qualified Storage (b) IUCI (8a) BUID (6b) SACR(q) (c) ICUR (8b) (9) 3 (a) BU (8c) BU (b) API (9a) BU API (c) API (9b) (5b) SACR(q) APIN API API 16 K s,h ST 2 (10) 3 (a) API API (b) API API (6e) SACRInfo(q) SACR(q) APIL 1 APIN ( 10a ) API (c) IUCI ( 10b ) BUID (6f) SACR(q) Program A.1.3 SACRInfoL SACRInfoEntry (1) HLInfo HL(SACRInfo(*)) (2) (1) HL(SACRInfo(*)) SACRInfoEntry 1 2

25 111 (3) SACRInfoEntry (2) SACRInfoEntry SACRInfo IUCI ( ) ( ) IEEE 1976 IEEE Computer Society ACM TUG

Vol. 42 No. SIG 8(TOD 10) July HTML 100 Development of Authoring and Delivery System for Synchronized Contents and Experiment on High Spe

Vol. 42 No. SIG 8(TOD 10) July 2001 1 2 3 4 HTML 100 Development of Authoring and Delivery System for Synchronized Contents and Experiment on High Speed Networks Yutaka Kidawara, 1 Tomoaki Kawaguchi, 2