Copyrights and Security Issues in Smart Screen 2012. 6. 25 ~ 26 IT R&D Global Leader - 1 -
I. 스마트스크린? II. 스마트스크린현황 III. 스마트스크린저작권및보안이슈 IV. 결론 - 2 -
스마트스크린? (1) 개념 스마트스크린 언제어디서나다양한매체간연동을통해앱, 콘텐츠, 웹서비스등을손쉽고실감있게이용할수있는양방향방통융합서비스 (KCA) 기술 서비스 Streaming CREATE ONCE, SERVICE EVERYWHRE Sharing Navigating Security Authentication Social TV N-Screen Adaptive Streaming Digital Signage DLNA/UPnP/Bonjour Sharing Sharing OSMU ASMU Scalable Coding Web&HTML Transcoding Mobility UI/UX Advertisement Augmented Reality UI/UX 스마트스크린 - 3 -
스마트스크린? (2) 주요기술 ASMD (Adaptive Source Multi-Device) ASMD vs. OSMU Source를분해 / 조립하여다양한단말로서비스 DLNA (Digital Living Network Alliance) 홈디바이스간의콘텐츠공유 240 여개의회원사로구성된 de-facto 표준 출처 : ETRI, http://dtsc.etri.re.kr Scalable Media SVC, JPEG2000 Security Authentication, Membership mgmt., DRM, CAS, Forensic watermarking, DTCP N-Screen licensing, accounting - 4 -
스마트스크린? (3) Adaptive Streaming HTTP 표준웹기술을활용한스트리밍기술 Smooth Streaming(MS), HTTP Dynamic Streaming (Adobe), HTTP Live Streaming(Apple), Download & Play, HTTP pseudo streaming, Progressive download 출처 : http://www.w3.org/2010/11/web-and-tv/slides/microsoft-john-simmons.pdf - 5 -
스마트스크린현황 현황 형태 서비스사례 클라우드 ( 서버 ) 기반 N- 스크린 댁내디바이스간 N- 스크린 (DLNA 기반 ) - icloud ( 애플 ) - Google Play ( 구글 ) - Hoppin (SK Planet) - ucloud (KT), U+Box (LG) - Allshare ( 삼성 ) - Smart share, Shoot & Play (LG) - Skifta ( 퀄컴 ) 소셜서비스연동 - Zeebox ( 애플 ) - FiOS TV (Verizon) - Have your say (BBC) - IntoNow, Tunerfish, Miso, Yap.TV, Philo, GetGlue (Social TV 앱 ) 기타 - Digital Signage - N-Screen Advertisement - OTT, Web TV: Netflix, Vudu, YouTube, Hulu.com, Tving, PandoraTV, GomTV, CINEPOX - 6 -
스마트스크린저작권및보안이슈 I. Multi-platform DRM vs. DRM-free II. Transcoding issue III. Smart device protection IV. Plagiarism - 7 -
1. Multi-platform DRM vs. DRM-free (1) 스마트스크린보안 Trend 프리미엄콘텐츠 여전히 DRM 적용 DRM-free 서비스확대 : 무료 or 광고삽입 or 경량보안적용형태 DRM의대안으로 Forensic Watermarking 적용사례증가 Original Content Packager Provider Encrypted Content Metadata Secure Container Distribution Secure Container Trusted Environment DRM Agent Device Application Secure Container License Clearinghouse Content management info. Policy License License request/usage info. Usage info. Usage License Content = Encrypted Content + Metadata + Identifier + Signature License = Permission + Condition + Key + Identifier + Signature DRM - 8 -
1. Multi-platform DRM vs. DRM-free (2) Multi-platform DRM DRM 의상호호환성부재, 플랫폼종속적인특성상스마트스크린적용에어려움 사용자 : 구매한콘텐츠의사용제한 ( 단말기제한 ) 서비스제공자 : 특정 DRM 기술에종속적인서비스제공 단말제조사 : 시스템구축시높은비용발생 Fairplay icloud PlayReady Hoppin, Naver Solution Cloud-based Licensing System DRM zone 1 OMA DRM Melon, Dosirak DRM zone 2 DRM Zone 3 Multi-DRM System Downloadable DRM System DRM Interoperability System - 9 -
1. Multi-platform DRM vs. DRM-free (3) Cloud-based Licensing System It is Not DRM 클라우드기반의 Multi-Rights 를제공하는미디어클라우드서비스플랫폼 DECE(Digital Entertainment Content Eco System) 의 UV(Ultra Violet) 5 개 DRM 지원 : Widevine, Marlin, OMA, PlayReady, Adobe Flash Access 헐리우드 5 개의주요 film maker 와 70 개이상의회원으로구성 Walt Disney 의 KEYCHEST Buy-once view-anywhere movies 애플의 icloud 와협력 - 10 -
1. Multi-platform DRM vs. DRM-free (4) UV shop UV content OMA DRM meta data PlayReady meta data Marlin DRM meta data Encrypted Content PlayReady License Oma License UV content PlayReady License Oma License PlayReady DRM Agent UV Player UV content OMA DRM Agent UV Player Decryption Key Decryption Key Smart TV Tablet PC UV(Ultra Violet) 서비스과정 - 11 -
1. Multi-platform DRM vs. DRM-free (5) Multi-DRM System Built-in multi-drm Widevine Multi-DRM Nokia CAF (Content Access Framework) Multi-Scheme DRM (Discretix) DRM framework API 및 plug-in 제공 (Android) Android DRM framework (Android 3.0 이상 ) - 12 - Multi-Scheme DRM (Discretix)
1. Multi-platform DRM vs. DRM-free (6) Downloadable DRM System MPEG21-IPMP framework MPEG21 Part4: IPMP Components (ISO/IEC 21000-4: 2006) IPMP tool 형태로 DRM agent 를 download It is not secure enough Downloadable DRM fusion agent (AuthenTec) Downloadable DRM client S/W for the iphone, ipad and Android Devices - 13 - IPMP ( 출처 : MPEG21)
1. Multi-platform DRM vs. DRM-free (7) DRM Interoperability System DRM Transcryption 관련표준 : EXIM(ETRI), SCP Interoperability Scheme (ITU-T), CORAL DRM Adaptor (INKA ENTWORKS) too costly - 14 - DRM Adaptor ( 출처 : INKA Entworks)
1. Multi-platform DRM vs. DRM-free (8) DRM-free DRM-free 구축 / 관리비용, 불편함, 무거움, 호환성문제 DRM free? DRM: The Poison Pill in Online Movies DRM Image 검색결과 (from: google) - 15 -
1. Multi-platform DRM vs. DRM-free (9) DRM-free 현황 DRM-free 콘텐츠를유료로제공 ( 스트리밍, 다운로드, 월정액 ) 음원마켓 : BugsMusic, Melon, Dosirak, Soribada 영화 : Naver, Daum, Yes24, Hoppin 광고삽입형 DRM-free 콘텐츠 Hulu.com, GomTV 등 ( 동영상에광고삽입 ) 비표준보안기술적용 HTML 인코딩등가벼운보안기능적용 (hulu.com 등 ) 프리미엄콘텐츠는여전히 DRM 적용 Naver, Daum, Yes24, Hoppin Netflix, Vudu - 16 -
1. Multi-platform DRM vs. DRM-free (10) 사례 : Hulu.com Ad-supported free content Huluplus의경우는유료 ($7.99/month) 비디오전송방식 : RTMP (Real Time Messaging Protocol) Adobe의 Flash Player용스트리밍프로토콜 HTTP, HTTPS tunneling 방식 콘텐츠보호 DRM 미적용 HTML 인코딩방식 HTML character stream을인코딩 전용플레이어에서만재생가능 가벼운보안적용으로원본콘텐츠의추출이어렵지않음 - 17 -
1. Multi-platform DRM vs. DRM-free (11) DRM 대안기술적용 Forensic Watermarking 기술 Passive protection, 저작권정보 & 구매자정보삽입 KT olleh TV, SK Btv 등에적용 UCI(Unified Content Identifier) watermarking 기술 UCI: 디지털콘텐츠식별체계, 28 개기관에서 UCI RA(Registration Agency) 를채택 / 운영 특징 : global scope, global uniqueness, legacy support, resolution, interoperability DNA Filtering 기술 콘텐츠에서 DNA 추출, 비교, 필터링 SP Forensic watermarking Streaming / Download UCI Watermarking UCIW Management Server FWS Management Server Insert UCIW FW 삽입 FW Detector FW Embedder Extract FW 콘텐츠구매자 Upload copyright content Filtering Extract UCIW Web hard Portal, P2P Client device UCIW Detector - 18 -
2. Transcoding Issue (1) Transcoding OSMU(One-Source Multi-Use) 서비스를위한미디어기술 Temporal, Spatial, Quality scalability Scalable Media SVC (Scalable Video Coding) JPEG 2000-19 -
2. Transcoding Issue (2) Secure transcoding issue 암호화및패키징 (DRM 등 ) 된콘텐츠를어떻게 transcoding? Selective Encryption 적용 인코딩과정에서의파라미터암호화방식 인코딩이후의 NAL 암호화방식 Secure Transcoding 성능이슈 Original Video Encryption (1) Prediction SVC Encoder Layer 3 Layer 2 Layer 1 Bit-stream Extractor Layer 3 Layer 2 Layer 1 High resolution Layer 2 Layer 1 Medium resolution Layer 1 Low resolution HDTV PC Mobile device Video Encoder Transformation Quantization Entropy Coding Encryption (3) Encryption (2) Video Server SVC 서비스예 Encrypted SVC Video Selective Encryption 적용시점 - 20 -
2. Transcoding Issue (3) 참고 : H.264 인코딩과정 Input Video Signal Split into Macroblocks 16x16 pixels Residual (Texture) - + Coder Control Transform/ Quantization Scaling & Inv. Transform Control Data Quantized transformed coefficients Entropy Coding Intra Prediction Inter Prediction Intra/Inter Intra-frame Prediction Motion- Compensation De-blocking Filter Output Video Signal Motion Estimation Motion Vector - 21 -
2. Transcoding Issue (4) 인코딩 과정에서의 파라미터 암호화 방식 암호화 대상 영역 IPM, DC co., AC co., MVD sign, Texture sign, Entropy coding parameter AC : Alternate Current DC : Direct Current IPM : Intra Prediction Mode MVD : Motion Vector Difference 스케일러블 미디어 암호화기 SVC 영상 암호화 Security Profile 구성 암/복호화 키 생성 IPM 암호화 Original Video Prediction DC coefficient 암호화 AC coefficient 암호화 MVD 암호화 Texture sign 암호화 MVD sign 암호화 Transformation (DCT) Quantization SVC 인코더 헤드엔드 - 22 - CAVLC 파라미터 암호화 CABAC 파라미터 암호화 Encrypted SVC Entropy Coding 단말
2. Transcoding Issue (5) 인코딩이후 NAL(Network Abstract Layer) level 암호화방식 NAL 암호화대상 : SPS, PPS, slice header, MB header, IDR frame, I-frame Parameter NAL or all frame Scalability layer information 유지 Data NAL......... NAL(SPS) NAL(PPS) NAL(SEI) NAL NAL NAL NAL NAL Unit Header NAL Unit Header extension NAL Unit Payload F NRI NAL Unit Type. IDR_flag Priority_id Dependency_id Temporal_id Quality_id. Parameter NAL Data NAL Scalability layer information...... NAL(SPS) NAL(PPS) NAL(SEI) NAL NAL NAL NAL SVC NAL 구조 Not Encrypted Check the scalability layer information Encrypted header body Extracting (eg., spatial layer 1~4) Encrypted (IDR f rame) Secure Transcoder Dropping (eg., spatial layer 5) NAL NAL... NAL(SPS) NAL(PPS) NAL(SEI) NAL NAL... 약어 IDR: Instantaneous Decoding Refresh MB: Macro Block NAL: Network Abstraction Layer PPS: Picture Parameter Set SPS: Sequence Parameter Set TS: Transport Stream Secure Transcoding 과정 - 23 -
3. Smart Device Protection 스마트디바이스플랫폼보안이슈 스마트단말의오픈플랫폼 (android, ios, linux 등 ) 공격위협증가 루팅 / 탈옥을통한불법조작 악성코드감염 DDoS 공격 Zombie 셋톱 / 단말 개인정보유출스마트스크린서비스무력화불법앱, 콘텐츠추출 - 24 -
4. Plagiarism 멀티미디어표절탐지이슈 표절탐지기술 현재는 Document 에대한솔루션위주 ( 논문표절등 ) DeVAC, XTEN ( 국내 ), dejavu database, ithenticate, Plagiarism detector, Plagiarism checker ( 국외 ) 의역, 문장재구성및아이디어표절은탐지하지못함 Music, Image, Video 에대한탐지이슈는증가하고있으나기술은기초연구수준 Music: near-duplicate detection 수준 (naver, shazam) 표절탐지못함 ( 유사한선율, 화음, 리듬 ) - 25 -
결론 기타이슈 Smart Screen Accounting, License management issue Copyright scanner HTML5 & Web platform DRM issue Anti-piracy 불법원본콘텐츠추출 DVD Ripper, Blu-ray Ripper Hinet recoder, Capture card, Screen capture S/W - 26 -
IT R&D Global Leader 권혁찬 책임연구원 / 이학박사 한국전자통신연구원사이버융합보안연구단, 스마트객체보안연구팀 hckwon@etri.re.kr www.etri.re.kr 감사합니다! - 27 -