Security analysis of digital rights management system based on usage control

doi:10.3724/SP.J.1087.2012.02771

Journal of Computer Applications ›› 2012, Vol. 32 ›› Issue (10): 2771-2775.DOI: 10.3724/SP.J.1087.2012.02771

• Information security • Previous Articles Next Articles

Security analysis of digital rights management system based on usage control

WANG Chang-da¹,²,GONG Ting-ting²,ZHOU Cong-hua¹,²

1. Institute of Engineering Technology, Jiangsu University, Changzhou Jiangsu 213164, China
2. School of Computer Science and Telecommunication Engineering, Jiangsu University, Zhenjiang Jiangsu 212013, China

Received:2012-03-05 Revised:2012-05-09 Online:2012-10-23 Published:2012-10-01
Contact: GONG Ting-ting

基于使用控制的数字版权管理系统安全性分析

王昌达¹,²,宫婷婷²,周从华¹,²

1. 江苏大学工程技术研究院,江苏常州 213164
2. 江苏大学计算机科学与通信工程学院,江苏镇江212013

通讯作者: 宫婷婷
作者简介:王昌达（1971-）,男,上海人,副教授,博士,主要研究方向：信息安全；宫婷婷（1987-）,女,黑龙江双鸭山人,硕士研究生,主要研究方向：信息安全；周从华（1978-）,男,江苏大丰人,副教授,博士,主要研究方向：信息安全。
基金资助:
国家自然科学基金;江苏省自然科学基金资助项目(BK2011147);江苏省六大高峰人才项目;江苏省高校自然科学研究计划;江苏大学高级人才项目

Abstract

Abstract: Through the research and analysis about the security mechanisms of the existing Digital Rights Management (DRM), a fine-grained Usage Control (UCON) plan separated rights from content was proposed in order to avoid being cracked now and then. Firstly, based on the concept of secret division, digital license has been divided into two sections to realize the separation of authentication and authorization management. Then temporary permission files were fine-grainedly granted to ensure that digital content can be dedicatedly controlled in usage. Finally integrity checks were used to improve the ability of anti-tampering attacks. The model checking results show that this plan and its policy can realize the design requirements and fairly satisfy the security requirements of DRM.

Key words: Digital Rights Management (DRM), Usage Control (UCON), separation of content and right, fine-grain, security analysis

摘要： 针对现有数字版权管理（DRM）系统屡遭破解的问题,通过调研分析其安全机制,提出一种内容与权限分离的细粒度使用控制方案。该方案首先根据秘密分割的思想将数字许可证一分为二,实现身份验证与授权管理的分离；然后通过细粒度授予临时权限文件,确保数字内容在使用中能够细致控制；最后采用多项完整性检查来提高防篡改攻击的能力。模型检测结果表明,该方案及策略能够实现设计要求并基本满足数字版权管理安全性需求。

关键词: 数字版权管理, 使用控制, 内容权限分离, 细粒度, 安全性分析

WANG Chang-da GONG Ting-ting ZHOU Cong-hua. Security analysis of digital rights management system based on usage control[J]. Journal of Computer Applications, 2012, 32(10): 2771-2775.

王昌达宫婷婷周从华. 基于使用控制的数字版权管理系统安全性分析[J]. 计算机应用, 2012, 32(10): 2771-2775.

References

[1] JAMKHEDKAR P A , HEILEMAN G L. Digital rights management architectures［J］. Computers and Electrical Engineering, 2009,35(2):376-394. [2] 范科峰, 莫玮, 曹山. 数字版权管理技术及应用研究进展［J］. 电子学报, 2007,35(6): 1139-1147. [3] SACHAN A, EMMANUEL S, DAS A,et al.Privacy preserving multiparty multilevel DRM architecture［C］// CCNC09: Proceedings of the 6th IEEE Conference on Consumer Communications and Networking Conference. Piscataway, NJ: IEEE Press, 2009: 1128–1132. [4] 张志勇, 牛丹梅. 数字版权管理中数字权利使用控制研究进展［J］. 计算机科学, 2011,38(4): 48-54. [5] 林丽, 李艳, 关德军. 数字版权管理系统中安全模型的研究与设计［J］. 通化师范学院学报, 2011,32(10): 14-16. [6] 张晓林. 数字权益管理技术［J］. 现代图书情报技术, 2001(5): 3-10. [7] ZENG WENJUN, LEI S. Efficient frequency domain selective scrambling of digital video［J］. IEEE Transactions on Multimedia, 2003,5(1): 118-129. [8] 曾婷, 张成昱, 肖燕. 电子图书数字权限管理系统比较研究［J］. 图书馆杂志, 2004, 23(8): 55-60. [9] 徐新光. 数字版权管理的技术和难题［J］. 广播与电视技术, 2006, 33(12): 75-79. [10] CHOR B, FIAT A, NAOR M. Tracing traitors［C］// CRYPTO94: Proceedings of the 14th Annual International Cryptology Conference on Advances in Cryptology. Berlin: Springer-Verlag, 1994: 257-270. [11] CHOI S, HAN J, JUN S I. Improvement on TCG attestation and its implication for DRM［C］// ICCSA07: Proceedings of the 2007 International Conference on Computational Science and Its Applications. Berlin: Springer-Verlag, 2007: 912-925. [12] ABBADI I M, ALAWNEH M. Replay attack of dynamic rights within an authorised domain［C］// SECURWARE09: Proceedings of the 2009 the Third International Conference on Emerging Security Information, Systems and Technologies. Washington, DC: IEEE Computer Society, 2009:148-154. [13] BHATT S, SION R, CARBUNAR B. A personal mobile DRM manager for smartphones［J］. Computers and Security, 2009,28(6):327-340. [14] 张海鑫, 程丽红, 李顺东. 数字版权管理系统中的使用控制模型［J］. 计算机技术与发展, 2009,19(12): 135-157. [15] PARK J, SANDHU R. The UCONABC usage control model［J］. ACM Transactions on Information and System Security, 2004,7(1): 128-147. [16] PARK J, SANDHU R. Towards usage control models: Beyond traditional access control［C］// Proceedings of the 7th ACM Symposium on Access Control Models and Technologies. New York: ACM Press, 2002: 57-64. [17] ZHANG X W, PARISI-PRESICCE F, SANDHU R, et al.Formal model and policy specification of usage control ［J］. ACM Transactions on Information and System Security, 2005,8(4): 351-387. [18] KATT B, ZHANG X W, BREU R. A general obligation model and continuity-enhanced policy enforcement engine for usage control［C］// Proceedings of the 13th ACM Symposium on Access Control Models and Technologies. New York: ACM Press, 2008: 123-132. [19] SHAMIR A. How to share a secret［J］. Communications of the ACM, 1979,22(11): 612-613. [20] BLACKLEY G R. Safeguarding cryptographic keys［C］// Proceedings of the National Computer Conference. Washington, DC: IEEE Computer Society, 1979: 313-317.

Security analysis of digital rights management system based on usage control

基于使用控制的数字版权管理系统安全性分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	LU Xinwei, YU Pengfei, LI Haiyan, LI Hongsong, DING Wenqian. Weakly supervised fine-grained image classification algorithm based on attention-attention bilinear pooling [J]. Journal of Computer Applications, 2021, 41(5): 1319-1325.
[2]	QIN Jun, LUO Yifan, TIE Jun, ZHENG Lu, LYU Weilong. Beijing Opera character recognition based on attention mechanism with HyperColumn [J]. Journal of Computer Applications, 2021, 41(4): 1027-1034.
[3]	Xiaoqiong PANG, Ting YANG, Wenjun CHEN, Yunting WANG, Tianye LIU. Digital rights management scheme based on secret sharing in blockchain environment [J]. Journal of Computer Applications, 2021, 41(11): 3257-3265.
[4]	SHEN Ziyi, WANG Weiya, JIANG Donghua, RONG Xianwei. Visual image encryption algorithm based on Hopfield chaotic neural network and compressive sensing [J]. Journal of Computer Applications, 2021, 41(10): 2893-2899.
[5]	BIAN Xiaoyong, JIANG Peiling, ZHAO Min, DING Sheng, ZHANG Xiaolong. Multi-branch neural network model based weakly supervised fine-grained image classification method [J]. Journal of Computer Applications, 2020, 40(5): 1295-1300.
[6]	FU Taiming, CHEN Yan, LI Taoshen. Hard-negative sample mining for metric learning based on linear assignment [J]. Journal of Computer Applications, 2020, 40(2): 352-357.
[7]	LIU Hu, ZHOU Ye, YUAN Jiabin. Fine-grained vehicle recognition under multiple angles based on multi-scale bilinear convolutional neural network [J]. Journal of Computer Applications, 2019, 39(8): 2402-2407.
[8]	MA Lan, CUI Bohua, LIU Xuan, YUE Meng, WU Zhijun. Hidden semi-Markov model-based approach to detect DDoS attacks in application layer of SWIM system [J]. Journal of Computer Applications, 2019, 39(7): 1973-1978.
[9]	WANG Zhong, HAN Yiliang. Dual public-key cryptographic scheme based on improved Niederreiter cryptosystem [J]. Journal of Computer Applications, 2019, 39(7): 1997-2000.
[10]	CAO Zhenhuan, CAI Xiaohai, GU Menghe, GU Xiaozhuo, LI Xiaowei. Android permission management and control scheme based on access control list mechanism [J]. Journal of Computer Applications, 2019, 39(11): 3316-3322.
[11]	ZHU Fan, WANG Hongyuan, ZHANG Ji. Fine-grained pedestrian detection algorithm based on improved Mask R-CNN [J]. Journal of Computer Applications, 2019, 39(11): 3210-3215.
[12]	LIU Shangwang, GAO Xiang. Fine-grained image classification method based on deep model transfer [J]. Journal of Computer Applications, 2018, 38(8): 2198-2204.
[13]	ZOU Chengming, LUO Ying, XU Xiaolong. Fine-grained image classification method based on multi-feature combination [J]. Journal of Computer Applications, 2018, 38(7): 1853-1856.
[14]	XU Chuanpei, WANG Guang. Parallel design and implementation of scale invariant feature transform algorithm based on OpenCL [J]. Journal of Computer Applications, 2016, 36(7): 1801-1806.
[15]	LIU Li, WANG Yongheng, WEI Hang. Fine-grained sentiment analysis oriented to product comment [J]. Journal of Computer Applications, 2015, 35(12): 3481-3486.