Device Keys

Device Keys

Device Keys play a role in the cryptographic key management procedure in the Advanced Access Content System (AACS) specification. This specification defines a method for protecting audiovisual entertainment content, including high-definition content.

Contents

Introduction

The AACS’s cryptographic key management procedure uses Device Keys to decrypt one or more elements of a Media Key Block (MKB), in order to extract a secret Media Key (Km). A MKB is located on the physical support (the disc) together with the content of the disc encrypted. MKB enables system renewability. The MKB is generated by AACS LA, and allows all compliant devices, each using their set of secret Device Keys, to calculate the same Media Key (Km).
If a set of Device Keys is compromised in a way that threatens the integrity of the system, an updated MKB can be released that causes a device with the compromised set of Device Keys to be unable to calculate the correct Km. In this way, the compromised Device Keys are “revoked” by the new MKB.


Common Cryptographic Key Management Elements
Key or Variable Size
Device Keys (Kd0,Kd1,…,Kdn-1) 128 bits each
Media Key Block (MKB) Variable, multiple of 4 bytes
Media Key (Km) 128 bits
Process to obtain the Media Key, from the MKB and the Device Keys.
The subset difference tree approach in order to get the Processing Keys; The Devices Keys are represented in purple and the letters P corresponds to the Processing Keys: the ones in green are reachable by the given Device Keys set, and the ones in red are not.

How it works

Each compliant device is given a set of secret Device Keys when manufactured. The actual number of keys may be different in different media types. These Device Keys, referred to as Kdi (i=0,1,…,n-1), are provided by AACS LA. The set of Device Keys may either be unique per device, or used commonly by multiple devices.
A device shall treat its Device Keys as highly confidential.

The MKB is encrypted in a subset difference tree approach. In order to decrypt it, a device must know the right Processing Key (P) which is available via the subset-difference tree process.
Essentially, the set of Device Keys are arranged in a tree such that any given Device Key can be used to find lower level Processing keys. The processing keys at higher position in the tree than the given set of Device Keys are not reachable.
A given set of Device Keys give access to a given set of Processing keys, it is to say to a given set of decodable MKB.
This way, to revoke a given device key, the MKB needs only be encrypted with a Processing Key which is not reachable by its Device Keys set.


Storing

Each device is given its Device Keys and a 31-bit number d called the device number.
For each Device Key, there is an associated number denoted the path number, the “u” bit mask , and the “v” bit mask.
The path number denotes the position in the tree associated with the Device Key. This path number defines a path from the root to that node in the tree.
The “u” and “v” masks are used in the subset difference tree process. They are always a single sequence of 1-bits followed by a single sequence of 0-bits. The bit masks indicate “don’t care” bits in the path number; if a bit is 0 in the mask, the corresponding bit in the path number is “don’t care”.
The deeper the position of a node in the tree, the shorter the sequence of 0-bits in the mask associated to that node.

The device number, path number, and masks denote nodes within a binary tree.

Sources

See also

External links


Wikimedia Foundation. 2010.

Игры ⚽ Нужно решить контрольную?

Look at other dictionaries:

  • keys — kɪː n. device used to open locks; something which allows entry; something which explains or assists in solving a problem; means to acquire or reach something; legend, list which provides decoding information; button on a keyboard; tone, note,… …   English contemporary dictionary

  • Arrow keys — Cursor movement keys or arrow keys are buttons on a computer keyboard that are either programmed or designated to move the cursor in a specified direction.[1] The term cursor movement key is distinct from arrow key in that the former term may… …   Wikipedia

  • Stargate (device) — For episodes of the television series, see List of Stargate SG 1 episodes, List of Stargate Atlantis episodes, and List of Stargate Universe episodes. A Stargate from Stargate SG 1. A Stargate is a portal device within the Stargate fictional… …   Wikipedia

  • Fill device — KY 57 voice encryptor. Note fill port in center. A fill device is an electronic module used to load cryptographic keys into electronic encryption machines. Fill devices are usually hand held and battery operated. Older mechanical encryption… …   Wikipedia

  • Human interface device — A human interface device or HID is a type of computer device that interacts directly with, and most often takes input from, humans and may deliver output to humans. The term HID most commonly refers to the USB HID specification. The term was… …   Wikipedia

  • Power of the keys — Key Key (k[=e]), n. [OE. keye, key, kay, AS. c[ae]g.] 1. An instrument by means of which the bolt of a lock is shot or drawn; usually, a removable metal instrument fitted to the mechanism of a particular lock and operated by turning in its place …   The Collaborative International Dictionary of English

  • Telecommunications device for the deaf — Miniprint 425 TDD. The acoustic coupler on the top is for use with telephone handsets. The printer records the conversation. The specific GA and SK keys allow for speedier use of common abbreviations. A telecommunications device for the deaf… …   Wikipedia

  • Mouse keys — is a feature of some graphical user interfaces that uses the keyboard (especially numeric keypad) as a pointing device (usually replacing a mouse). Its roots lie in the earliest days of visual editors when line and column navigation was… …   Wikipedia

  • Pointing device — A pointing device is an input interface (specifically a human interface device) that allows a user to input spatial (ie, continuous and multi dimensional) data to a computer. CAD systems and graphical user interfaces (GUI) allow the user to… …   Wikipedia

  • Input device — In computing, an input device is any peripheral (piece of computer hardware equipment) used to provide data and control signals to an information processing system such as a computer or other information appliance. Input and output devices make… …   Wikipedia

Share the article and excerpts

Direct link
Do a right-click on the link above
and select “Copy Link”