Transcription of MovieLabs*Specification+for$Enhanced$ …
1 !Copyright! !2015,!Motion!Picture!Laboratories,!Inc. ! MovieLabs*Specification+for$Enhanced$ Co ntent&Protection! !Version( "February!2015!Introduction*Digital!cont ent!distribution!technologies!are!evolvi ng!and!advancing!at!a!rapid!pace.!Conten t!creators!are!using!these!technologies! to!produce!and!distribute!increasingly!c ompelling!and!valuable!content!for!consu mers.!Unfortunately,!digital!content!dis tribution!also!involves!substantial!risk s!of!unlawful!reproduction!and!redistrib ution!of!copyrighted!works.!Accordingly, !MovieLabs!believes!that!increasingly!so phisticated!content!protection!is!critic al!to!the!viability!of!these!technical!a nd!creative!advances.!We!also!believe!th e!technologies!described!in!this!specifi cation!should!be!integrated!into!product s!such!that!they!are!transparent!to!the! user.!This!document!describes!a!set!of!h ighJlevel!specifications!for!improving!t he!security!of!audiovisual!)
2 Works!in!this!developing!environment.!Th ese!feature!specifications!are!not!inten ded!to!be!static,!but!rather!to!evolve!a s!the!available!technology!evolves.!Alth ough!the!applicability!of!some!features! may!vary!by!situation,!MovieLabs!recogni zes!that!most!of!these!features!will!hav e!broad!and!strong!studioJwide!support!i n!most!contexts!involving!enhanced!conte nt!distribution,!including!Ultra!HD.!Eac h!studio!will!determine!individually!whi ch!practices!are!prerequisites!to!the!di stribution!of!its!content!in!any!particu lar!situation.!Features!are!divided!into !three!sections:!DRM!System!Specificatio ns,!Platform!Specifications!and!EndJtoJE nd!System!Specifications.!Providers!of!h ardware!and!software!platforms!should!pa y!particular!attention!to!the!sections!o n!platform!and!endJtoJend!system!require ments.!DRM!providers!need!to!review!the! sections!on!DRM!and!endJtoJend!system!re quirements.!Version!
3 !of!the!document!updates!the!specificati on,!primarily!to!clarify!the!intent!of!t he!original!requirements!published!in!Se ptember!2013.!Notice*Motion&Picture&Labo ratories,& (MovieLabs)&is&the&author&and&creator&of &this&specification&for&the&purpose&of&c opyright&and&other&laws&in&all& ©right¬ice&must&be&included&in&al l&reproductions,&whether&in&whole&or&in& part,&and&may¬&be&deleted&or&attribut ed&to& &Version& ! !2015,!Motion!Picture!Laboratories,!Inc. !2!for&their&own& ,&or&require&adherence&to,&these& &member& ,&incidental,&proximate&or&consequential &damages&or&expenses&arising&from&the&us e&of&this& ,&and&other&approaches&may&be&available. !This&document&is&an&authorized&and&appr oved&publication&of& ,&and&any&revisions&by&any&other&party&a re&unauthorized&and& ,&nor&does&it&undertake&a&duty&to&advise &users&of&its&documents&of&such¬ices& or& ,&seek&the&advice&of&intellectual&proper ty&counsel,&and,&if&appropriate,&obtain& a&license&under&any&applicable&right&or& take&the&necessary&steps&to&avoid& *The!
4 Goal!of!enhancing!content!protection!is! to!mitigate!certain!piracy!problems!that !are!not!adequately!addressed!by!current !practices!and!to!prevent!piracy!problem s!that!might!occur!in!situations!when!th ere!are!multiple!formats!and!means!of!di stribution!carrying!the!first!high!quali ty!targets!each!exposed!to!different!thr eats.!Availability*and*Distribution*of*R ipping*Software*Ripping!applications!app ear!from!time!to!time,!sometimes!working !across!a!sufficient!footprint!with!suff icient!reliability!to!be!viable!as!illeg al!software!products.!This!is!enabled!by !two! hack!one,!hack!all !scenarios.!First,!breaking!protection!o n!one!device,! !a!PC!+!drive!combination,!breaks!it!on! a!wide!class!of!devices.!And!second,!bre aking!protection!on!a!new!title!often!re quires!no!additional!information!or!tech nology!than!breaking!it!on!a!recent,!pre vious!title.!MovieLabs&Specification&for &Enhanced&Content&Protection& &Version& !
5 The!system!shall!use!state!of!the!art!cr yptographic!functions,! ,!a!cipher!of!AES!128!or!better.! The!system!shall!be!resistant!to!sideJch annel!attacks,!including!but!not!limited !to!timing!attacks,!simple!power!analysi s!(SPA),!differential!power!analysis!(DP A),!simple!electroJmagnetic!analysis!(SE MA),!and!differential!electroJmagnetic!a nalysis!(DEMA),!that!utilize!a!commercia lly!viable!level!of!effort,! ,!number!of!traces.!The!resistance!shall !be!established!through!testing,! ,!through!statistical!analysis!of!test!s ignals!for!leakage.!Connection* The!system!shall!allow!the!content!provi der!to!hold!back!the!delivery!of!license !keys!to!the!device!until!the!street!dat e.!! Systems!supporting!copy!or!move!shall!re quire!the!license!to!be!reJprovisioned!t hrough!an!onJline!process!that!is!perfor med!using!keys!not!present!on!client!dev ices!after!a!copy!or!move.!MovieLabs&Spe cification&for&Enhanced&Content&Protecti on& &Version& !
6 !2015,!Motion!Picture!Laboratories,!Inc. !4!Hack*One,*Only*Hack*One*The!compromis e!of!security!on!one!platform!shall!be!l imited!to!that!platform.!And!the!comprom ise!of!security!on!one!distribution!of!a !title!shall!be!limited!to!that!distribu tion.!Binding&to&Device& The!system!shall!bind!the!ability!to!dec rypt!a!license!key!to!a!particular!devic e!(host!and/or!storage).!License!keys!sh all!be!encrypted!such!that!they!cannot!b e!decrypted!without!the!keys!of!the!indi vidual!device!for!which!the!license!was! issued.! The!compromise!of!the!keys!for!a!set!of! devices!shall!not!make!it!easier!to!deri ve!the!keys!for!another!device.!Software &Diversity& SecurityJrelated!software!shall!be!imple mented!in!diverse!ways!so!that!an!attack !is!unlikely!to!be!portable.!This!divers ity!shall!vary!by!version!of!the!system! and!by!platform.!Copy&&&Title&Diversity& The!content!protection!system!shall!prov ide!capabilities!
7 So!that!in!the!event!of!a!breach!on!one! title!or!version!of!a!title,!additional! work!is!needed!to!breach!the!content!pro tection!on!the!next!title!or!another!ver sion.!( ,!simply!using!different!content!keys!is !not!sufficient!to!satisfy!this!practice .)!Integrity*&*Robustness* Runtime!integrity!checking!of!the!DRM!sy stem!must!be!performed!either!by!the!DRM !system!or!by!the!platform.! The!system!shall!use!the!platform!isolat ion!and!trust!mechanisms!specified!in!th e!Platform!Specification!section!below.! Revocation*&*Renewal* The!system!shall!have!the!ability!to!rev oke!and!renew!versions!of!its!client!com ponent.! The!system!shall!have!the!ability!to!rev oke!subsidiary!codeJsigning!certificates !if!these!are!used!as!part!of!the!system s!root!of!trust.! The!system!shall!have!the!ability!to!rev oke!individual!devices!or!classes!of!dev ices.! The!system!shall!proactively!renew!its!s ecurity!related!
8 Software!components.! The!security!provider!shall!actively!mon itor!for!breaches.!MovieLabs&Specificati on&for&Enhanced&Content&Protection& &Version& ! !2015,!Motion!Picture!Laboratories,!Inc. !5!Outputs*&*Link*Protection* The!system!shall!support!the!requirement !of!HDCP! !or!better!for!specific!content!types,! ,!Ultra!HD!or!enhanced!HD.! The!system!shall!support!the!requirement !of!HDCP! !or!better!by!the!content!provider,! ,!in!the!license.! The!system!shall!allow!other!available!o utputs!and!their!associated!protection!t o!be!selectable!by!the!content!provider, ! ,!in!the!license.!Platform*Specification s*Encryption* The!platform!shall!support!a!content!cip her!of!AES!128!or!better.! The!platform!shall!provide!the!support!n ecessary!to!make!a!DRM!system!resistant! to!sideJchannel!attacks!as!specified!in! the!DRM!section!above.! The!platform!shall!support!a!random!numb er!generator!compliant!
9 With!NIST!800J90C.!Secure*Media*Pipeline * The!platform!shall!implement!a!secure!me dia!pipeline!that!provides!endJtoJend!pr otection!that!encompasses,!at!a!minimum, !decryption!through!to!protected!output. !This!secure!media!pipeline!shall!includ e!protecting!secrets!(including!keys!and !derivative!key!material)!and!both!compr essed!and!decompressed!video!samples!fro m!access!by!any!nonJauthorized!source!us ing!the!isolation!and!trust!mechanisms!d escribed!below.!!Secure*Computation*Envi ronment* The!platform!shall!support!a!secure!proc essing!environment!isolated!by!hardware! mechanisms!running!only!authenticated!co de!for!performing!critical!operations.!T he!security!of!this!environment!must!hav e!been!proven!with!extensive!testing.!o ,!secure!OS,!media!pipeline!configuratio n,!handling!sensitive!cryptography! The!platform!shall!be!able!to!protect!me mory!of!the!secure!execution!environment !against!
10 Access!from!untrusted!code!&!devices.! The!platform!should!support!runtime!inte grity!checking!of!secure!applications.!H ardware*Root*of*Trust* The!platform!shall!support!a!secure!chai n!of!trust!for!code!that!executes!in!the !secure!execution!environment.!The!root! of!this!trust!shall!be!securely!provisio ned,! ,!permanently!factory!burned.!MovieLabs& Specification&for&Enhanced&Content&Prote ction& &Version& ! !2015,!Motion!Picture!Laboratories,!Inc. !6! The!platform!shall!provide!a!secure!mech anism!for!DRM!systems!to!store!secrets!i n!local,!persistent!storage!in!a!form!en crypted!uniquely!for!the!device!and,!if! the!platform!supports!multiple!trusted!a pplications!or!DRMs,!uniquely!for!each!i n!a!way!that!securely!prevents!a!trusted !application!from!decrypting!the!secrets !of!others.!The!encryption!must!be!roote d!in!a!secret,!immutable,!deviceJunique! value!with!at!least!128!bits!of!entropy. !Link*Control/Protection** The!
