(Microsoft PowerPoint -  KRnet \271\337\307\245$\300\314\301\370\310\243$)

IPTV Platform June, 2008 Zino Lee zino@alticast.com zinolee@acm.org Director of δ-project TFT Alticast Corp., Seoul Office http://www.alticast.com/

IPTV Platform 유료미디어유통모델에관한플랫폼 Middleware IPTV Middleware Conditional Access (CA) Digital Right Management (DRM) Downloadable CAS (DCAS) Middleware 양방향시장은존재하는가? 미들웨어시장은이미존재한다. 미들웨어와양방향시장의차이는? GEM 기반의 IPTV 미들웨어 Conditional Access 분리또는교체형컨텐츠보호? 결국 Downloadable CA 의시장은오는가? Interactive Interface Device : RCU 결국은인터페이스 RCU 로부터시작이되어야하는데

Middleware

Why idtv Middleware? Middleware Controls all resources within Receivers including Tuner, CAS, CPU, Memory Map, etc. Broadcasting Operators Unique Broadcasting Signal Processign Suggestions 1. Virtual Machine based Approach International Standard based Approach MHP/OCAP/ACAP solutions Flash based solutions 2. Text based Approach Web based Approach HTML/DHTML/XML based solutions 3. Uniformize Receiver s Hardware and Software Stacks Operator suggests HW/SW reference model based MSTV based approach However, the Broadcasting Signal (including Audio/Visual and interactive Software) should be unique without considering the STB HW/SW W environment In Field, So many kinds of STBs are distributed and exist PayTV Subscribers in the Nation-Wide Type #1 Economic Model Type #2 another Economic Model Type #3 Promotion Model Type #4 PVR Model Type #5 HDTV Model CPUs, Memory Capacities, RTOS are different according to the STB models. 4

Standard vs. proprietary IP Middleware Open Standard vs. Proprietary MHP doesn t lock you in. MHP application development is easier and cost-effective because the specification is open and free. Client-based service vs. Server-based Services MHP is based on Java and can support Browser as an MHP client. MHP is more flexible because it support application via both multicast and unicast. Unicast-only data service will need more investment in back-end server. MHP is more dynamic because it is based on Java. Games, Mosaic EPG, etc. Trends FastWeb (Italy) Browser-based MHP T-Online (Germany) Browser-based(WinCE) MHP ARIB (Japan) BML(XML) BML+MHP (GEM)

MHP/OCAP/ACAP Middleware Makes itv Applications (e.g. EGP) portable among STBs Based on Java write once, run everywhere Defines Signaling, Data formats, and APIs Applications are delivered over the network Upgrade and update of Applications will be extremely efficient. Broaden the choice of STBs OS independence Hardware independence (chipset, devices, etc.) Competition with Performances and Functions

Architecture of IPTV Middleware (Alitcast Case) Java Applications (EPG, Browser, Navigator ) APIs: Java TV, HAVi UI, JMF, DAVIC Java Platform Java VM JNI Graphics & Window System Global Executable MHP(GEM) Core RC/PS/ Util Application Manager MPEG2 Service selection Object Carousel Decoder Security Media Controller PSI/Section filter PVR extension MHP-PDR or OCAP-DVR MHP or OCAP Specific Network Specific SI engine Extended AM + others IPTV extension JMF add-on for AVC(WMV9, H.264) Application over HTTP IP Tuner extension Native Application Interfa ace Native Application (EPG, Browse er, Flash Player ) Portability APIs Porting Glue Extended glue for PVR Extended glue for IPTV Real-time OS, Hardware-specific Device drivers Devices (MPEG2 Demux. MPEG Decoder, OSD, Remote Controller) Primitive STB Hardware (Board, CPU, Flash, RAM )

Alticast Downloadable CAS 9

altidownloadable CA Solution 구성 altidownloadable CA Solution은 altidownloadable CAS Framework 과 altidownloadable CA System으로구성이되어있습니다. altidownloadable CAS Framework은 Downloadable CAS의다운로딩과이들의관리와 CAS 소프트웨어보안을보장하여관리를도맡아하며, altidownloadable CAS는실제미디어를보안유통하는 CAS 의역할을수행합니다. Features Downloadable CAS 1 Downloadable CAS 2 altidownloadable CAS Framework Downloadable CAS 3 Secure system for downloading Downloadable CAS Clients to DCAS Host Secure management of keys used in DCAS Secure Memory system Runtime Download and Replacement Scalable and reliable DCAS Framework Secure communication between SM and TP Advanced Crack & illegal Clone detection and Alarming (Report Details to Operators) 10

altidownloadable CAS Framework Overview Designated 3 rd Party MSO Network Customer Premise Trust Authority (TA) altidownloadable CAS Framework Authentication Server DCAS Protocol altidownloadable CAS Framework Local Key Server Billing SMS Back Office Downloadable Conditional Access System altidownloadable CAS Framework Download Proxy Server Digital Cable Head-end alti- Downloadble CAS Framework Host Ported within STB 11

altidownloadable CAS Framework Features altidownloadable CAS Framework 는양방향네트워크기반의 Cable 및 IP 환경에서 Multi-CAS(Conditional Access System) 를지원하기위한유연하고신뢰할수있는프래임워크를제공합니다. altidownloadable CAS Framework 는 MSO 네트워크상에서기존의 CAS 시스템의업그레이드및교체의어려운문제를해결하여저비용의높은보안성을보장하는 CAS 시스템의적용을가능하게합니다. altidownloadable CAS Framework 은서버군과 altidownloadable CAS HOST 라불리우는 STB 에설치되는시스템으로구분됩니다. altidownloadable CAS HOST 는 (1) SM (Secure Micro) 를이용한버전과 (2) 별도의 TR (Tamper Resistant) System 을이용하는버전으로구분하여공급하여드릴수있습니다. 12

altidownloadable CAS Framework Servers Designated 3 rd Party MSO Network Trust Authority (TA) DCAS Trust Authentication altidownloadable CAS Framework Authentication Server altidownloadable CAS Framework Local Key Server altidownloadable CAS Framework Download Proxy Server Servers Authentication Server Download Proxy Server Local Key Server Trust Authority (TA) Functions DCAS Host에대한인증및서버군과 Host 사이의중계역할담당 DCAS Client 분배, 다운로드및관리 DCAS Host 인증을위한 Key 정보관리 Authentication Key에대한인증서발급및관리 (Optional) 13

altidownloadable CAS Framework Servers altidownloadable CAS Framework 에관한 4 개의서버는기존의 MSO Cable Operator 서버군과연동이필요없이새롭게 Downloadable CAS 의기능을구현하기위한부가서버입니다. 다음의 4 개의서버가설치되어야합니다. 여기에서 TA 서버는선택사항입니다. Servers Authentication Server Download Proxy Server Local Key Server Trust Authority (TA) Functions DCAS Host에대한인증및서버군과 Host 사이의중계역할담당 DCAS Client 분배, 다운로드및관리 DCAS Host 인증을위한 Key 정보관리 Authentication Key에대한인증서발급및관리 (Optional) 14

altidownloadable CAS Host STB 내에설치되며, 실재로 Download 되는 CAS 소프트웨어의인증과관리구동을담당하게됩니다. altidownloadable CAS HOST 는다음의두가지선택에의해구현설치될수있습니다. SM (Secure Micro) 을이용하는방법 별도의 TR (Tamper Resistant) System 을이용하는방법 15

altidownloadable CAS Host (SM) Ported into Set-Top Box with Secure Micro (SM) Video Input Conditional Access Network Handler altidownloadable CAS HOST Manager Transport Stream Descrambling Engine DVB-CSA AES 1DES 3DES Video Output Secure Micro Driver MULTI2 Transport Processor altidownloadable CAS HOST Monitor altidownloadable CAS Instance-1 Secure Micro altidownloadable CAS HOST Bootloader Secure Downloader Certified Secured Computing and Storage Supported RSA Key Management Digital Signatures TS Key Management Logic Secure RAM Secure Flash 16

altidownloadable CAS Host (SM) Secure Downloadable CAS Framework 제공 DCAS Host 내로 CAS Client Software 의 Secure Downloading 지원 SM 의보안성에기반한다운로드방식지원 즉, SM 의기능을최대한활용, 다운로드되는 Downloadable CAS 의보안성을보장함 Boot-up 또는지정된시작시간에 Downloadable CAS Client 에대한다운로드및교체지원 Run-time에부팅없이교체가능 (Optional) 유연하고신뢰할수있는 Downloadable CAS Framework 지원 Downloadable CAS Host 내에서의 Secure communication 지원 Secure Key Management System 제공 Downloadable CAS Framework System 내에서 DCAS Client 의보안성보장을위한인증에사용되는 Key 의생성, 분배및관리 3rd Party 에의한 Key Certification 제공 (TA Server - Optional) 17

altidownloadable CAS Host (SM) Features 특화된보안성능 altidownloadable CAS Framework 와 altidownloadable CAS Host 사이의보안채널을형성하여 Secure Communication 지원 altidownloadable CAS Framework 에서 DCAS Client 의변형이나해킹방지인증에사용되는 Key 관리, 갱신및분배를위한 Secure system 제공 AS(Authentication Server) 와 SM(Secure Micro) 사이의 Mutual Authentication 을통한 altidownloadable CAS Host 에대한보안기능강 화 altidownloadable CAS Host 내의 Platform Code 의무결성을보장하고안전한 Inter-Chip Communication을지원함으로써 altidownloadable CAS Host에대한 Robustness 제공 강력한 STB 복제방지및추적기능제공 효율성, 확장성및편리성 기존의 Headend 및 Back office Infrastructure 와호환가능하여높은확장성제공 altidownloadable CAS Host 내에서 Downloadable CAS 를지원하기위한 Interface 제공 18

altidownloadable CAS Overview altidownloadable CAS 는 DCAS Framework 에다운로드되어운용이되는실질적인접근제어 (Conditional Access) 시스템입니다. altidownloadable CAS 는 altidownloadable CAS Framework 과최적화되어최적의운영환경은물론최소한의도입비용으로가능한모든 Business Model 을최적의시간내에공급하여드릴수있습니다. altidownloadable CAS 는알티캐스트의미들웨어제품인 alticaptor 와도최적화된결합이가능한제품군입니다. Pre Built Business Model Back Office Billing SMS TCS alti-downloadable CAS Headend Broadcast Service Authentication & Download Service VoD Service STB Free Programs Single Subscription Service Multiple Subscription Service : Al La Carte Subscription Blackout/Spot Pay-Per-View : OPPV, IPPV, PPD, PPS Video on Demand 19

altidownloadable CAS Features altidownloadable CAS 는양방향네트워크기반의 Broadband 및 IP 환경에서의 Pay-TV 서비스를위한최적화된디지털방송용으로제작된 CAS(Conditional Access System) 입니다. altidownloadable CAS 는다양한비즈니스모델지원을위한차원높은안전성, 보안성및편의성을제공합니다. altidownloadable CAS 는방송데이터의실시간스크램블링을수행하고강화된인증절차를통해서허가된사용자만이방송서비스를이용할수있게함으로써디지털방송컨텐츠의불법복제와불법유통을차단합니다. altidownloadable CAS 는알티캐스트의미들웨어인 alticaptor 와도최적의결합을자랑합니다. 따라서, 최적의시간내에결합된다양한비즈니스모델을구현하여공급하여드릴수있습니다. altidownloadable CAS 는고객의정해진시간내에 CAS 의다운로드교체가가능합니다. 이경우, 필요한모든기술적제반사항을최적의환경으로제공합니다. 20

altidownloadable CAS Servers Backoffice SMS Broadcasting Service ACG Key Synchronizer Subscriber Auth. System PSIP/SIG EIS ECMG EMMG PDG MUX SCS CWG BS alti- Download -able CAS Manager Authentication System Local Key Server Logger(Tracker) Auth. Server Download Proxy Server CMTS Scrambler MUX TCS VoD Service SCS VoD License Server VoD Stream Server CWG Scrambler 21

altidownloadable CAS Server 정합요소 altidownloadable CAS Framework Server 와기존의송출서버의정합에약 1 달소요 altidownloadable CAS Server 에는다음의정합요소가소요됨 Al La Carte 정합을위한 PSIP/SI 및 TCS 시스템과의정합필요 EMMG 의시그널발생을위해 SMS 와정합필요 과금처리를위해 Billing Server 와정합필요 현재의구현된 3 개의사업모델 (al la carte, VOD, PPV) 및 SimulCrypt, Downloadable CAS의시스템구현을위해약 1달정도의서버정합시간소요 Test BED 테스트이후실재시스템정합기간은별도산출 22

altidownloadable CAS Client (with DCAS HOST) EPG VOD Business Model #1 Business Model # n alticaptor Alticast Middleware Specific Application Support (SAS) Module altidownloadable CAS HOST Manager Alticast Middleware Porting GLUE altidwonloadable CAS HOST Monitor δ-ca Instance altidownloadable CAS Instance altidownloadable CAS HOST Authenticator altidownloadable CAS HOST Downloader Transport Processor (DVB CSA/AES/1DE/3DES/Multi2) Security Processor(BCM7405) 23

현재의 TV 인터페이스시스템의한계 방향키와색상키버튼으로조작 + 방향키와색상키버튼 + 커서초저단가 (US $ 10.00 미만 ) 25

Thank you 주식회사알티캐스트 δ-project TFT 이진호 (zino@alticast.com) 서울특별시서초구서초동 1328-3 번지나라종합금융빌딩 18 층우편번호 : 137-070 TEL: 02 2007 7715 FAX: 02 2007 7797 Mobile: 010 4816 7369 http://www.alticast.com Copyright 1999-2007 by Alticast Corp. zino@alticast.com 31

(Microsoft PowerPoint - \( \) KRnet \271\337\307\245\(\300\314\301\370\310\243\))