How to increase the security of digital rights management systems without affecting consumer's security

Authors:
Jürgen Nützel;Anja Beyer
Affiliations:
Institut für Medien und Kommunikationswissenschaft, Technische Universität Ilmenau, Ilmenau, Germany;Institut für Medien und Kommunikationswissenschaft, Technische Universität Ilmenau, Ilmenau, Germany
Venue:
ETRICS'06 Proceedings of the 2006 international conference on Emerging Trends in Information and Communication Security
Year:
2006

Citing 4
Cited 1

Crackproofing Your Software

Crackproofing Your Software
Digital Rights Management: Business and Technology

Digital Rights Management: Business and Technology
On the (Im)possibility of Obfuscating Programs

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Reversing: The Hacker's Guide to Reverse Engineering

Reversing: The Hacker's Guide to Reverse Engineering

A prototype design for DRM based credit card transaction in E-commerce

Ubiquity

Quantified Score

Hi-index	0.00

Visualization

Abstract

The paper starts with a description of the fundamental principles of modern Digital Rights Management Systems. This is the basis for the discussion of their most important security aspects from the provider's view on the one hand and the customer's view on the other hand. The second half of the paper focuses the new DRM standard from the Open Mobile Alliance (OMA) and its implementation on “open” systems like Windows. The security anchor of the OMA DRM is the device private key. As long as no trusted storage facilities for open systems work effectively, techniques for software obfuscation could be a solution. Therefore the obfuscation of the device private key and its secure download is described. Currently on Windows PCs there is no chance for a full tamper-proof solution, but the authors try to make the job of an attacker as hard as possible, without affecting the consumer's security.