Security and trust in digital rights management: A survey

International Journal of Network Security

Volumn 9, Issue 3, 2009, Pages 247-263

  Zhang, Zhiyong ^a,b   Pei, Qingqi ^a   Ma, Jianfeng ^a   Yang, Lin ^c  

^a XIDIAN UNIVERSITY   (China)

^b HENAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

^c China Electronic Equipment and Systems Engineering Corporation   (China)

Author keywords

Digital content industry; Digital rights management; Security; Trust

Indexed keywords

DIGITAL CONTENTS; DIGITAL RIGHTS MANAGEMENT; DRM (DIGITAL RIGHTS MANAGEMENT); SECURITY; SECURITY AND TRUSTS; SECURITY POLICY; TRUST; TRUST RELATIONSHIP;

ECOSYSTEMS;

COPYRIGHTS;

EID: 77956977210     PISSN: 1816353X     EISSN: 18163548     Source Type: Journal    
DOI: None     Document Type: Article

References (84)

1. H. Abie, "Frontiers of DRM knowledge and technology," International Journal of Computer Science and Network Security, vol. 7, no. 1, pp. 216-231, 2007.
2. A. Arnab, Towards a General Framework for Digital Rights Management, University of CAPE TOWN, June 2007.
3. A. Arnab and A. Hutchison, "Persistent access control: a formal model for DRM," Proceedings of 2007 ACMWorkshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 41-53, Oct. 2007.
4. C. Barlas, Digital Rights Expression Languages, JISC Technology and Standards Watch, July 2006.
5. S. Bechtold, "The present and future of digital rights management," Proceedings of the Second International Conference on Automated Production of Cross Media Content for Multi-Channel Distribution, pp. 6-7, Dec. 2006
6. Y. Chang, "Who should own access rights? A game- theoretical approach to striking the optimal balance in the debate over digital rights management," Artificial Intelligence and Law, no. 15, pp. 323-356, 2007.
7. C. Chong, Experiments in Rights Control Expression and Enforcement, University of Twente, Enschede, The Netherlands, 2005.
8. D. Chong and R. Deng, "Privacy-enhanced superdistribution of layered content with trusted access control," Proceedings of 2006 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 37-43, Oct. 2006.
9. Content Management License Administrator Technical Report Revision Ver. 1.2-070326, CMLA: Client Adopter Agreement, Mar. 2007.
10. C. Conrado, M. Petkovic, and W. Jonker, "Privacy- preserving digital rights management," Proceedings of 2004 SIAM International Conference on Data Mining, LNCS 3178, pp. 83-99, 2004.
11. A. Cooper and A. Martin, "Towards an open, trusted digital rights management platform," Proceedings of 2006 ACMWorkshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 79-87, Oct. 2006.
12. L. Coria, P. Nasiopoulos, and R. Ward, "A robust content-dependent algorithm for video watermarking," Proceedings of 2006 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 97-101, Oct. 2006.
13. Digital Trust, vol. 3 - Intellectual Property Protection, 2007. (http://www.csc.com/aboutus/leadingedge-forum/knowledgelibrary/uploads/LEF2007Digital-TrustVol3.pdf)
14. eXtensible rights Markup Language (XrML) 2.0 Specification, ContentGuard, Inc. Nov. 2001.
15. K. Fan, W. Mo, S. Cao, X. Zhao, and Q, Pei, "Advances in digital rights management technology and application," ACTA Electronica Sinica, vol. 35, no. 6, pp. 1139-1147, 2007.
16. K. Fan, M. Wang, W. Mo, Z. Wang, Q. Pei, and J. Shen, "An iris biometric-based digital multimedia content protection scheme," ACTA Electronic Sinica, vol. 16, no. 2, pp. 271-275, 2007.
17. N. Fazio, On Cryptographic Techniques for Digital Rights Management, New York University, Sep. 2006.
18. D. Fewer, P. Gauvin, and A. Cameron, Digital Rights Management Technologies and Consumer Privacy, Canada Internet Policy and Public Interest Clinic, 2007. (http://www.Cippic.com/drm)
19. E. Furregoni, A. Rangone, F. Renga, and M. Valsecchi, "The mobile digital contents distribution scenario," Proceedings of Sixth International Conference on the Management of Mobile Business, Toronto, Ontario, Canada, pp. 32-40, July 2007.
20. E. Gallery, Authorisation Issues for Mobile Code in Mobile Systems, Royal Holloway, University of London, 2007.
21. E. Gallery and C. J. Mitchell, "Trusted mobile platforms," Proceedings of Foundations of Security Analysis and Design, LNCS 4677, pp. 282-323, 2007.
22. R. Grimm and P. Aichroth, "Privacy protection for signed media files: A separation-of-duty approach to the lightweight DRM (LWDRM) system," Proceedings of 2004 Workshop on Multimedia and Security, Magdeburg, Germany, pp. 93-99, Sep. 2004.
23. J. Halpern and V. Weissman, "A formal foundation for XrML," Proceedings of 17th IEEE Workshop on Computer Security Foundations, pp. 251-263, June 2004.
24. J. Halpern and V. Weissman, "A formal foundation for XrML," Journal of the ACM, vol. 55, no. 1, pp. 4-45, 2008.
25. N. Helberger, N. Dufft, S. Gompel, K. Kerenyi, B. Krings, and R. Lambers, Digital Rights Management and Consumer Acceptability, Dec. 2004. (http://www.indicare.org)
26. G. Heileman, P. Jamkhedkar, J. Khoury, and C. Hrncir, "The DRM game," Proceedings of 2007 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 54-62, Oct. 2007.
27. C. Hibbert, A Copy Protection and Content Management System from The DVB, The DVB Consortium, 2008. (http://www.dvb.org/documents/newsletters/DVB-SCENE-05-CopyProtectionArti-cle.pdf)
28. E. Hinkes, "Access Controls in the digital era and the fair use/first sale doctrines," Santa Clara Computer and High -Technology Law Journal, vol. 23, no. 4, pp. 685-726, 2007.
29. ISO/IEC 21000-5, Information Technology-Multi Media Framework Part 5: Rights Expression Language, 2004.
30. P. Jamkhedkar and G. Heileman, "DRM as a layered system," Proceedings of 2004 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 11-21, Oct. 2004.
31. P. Jamkhedkar, G. Heileman, and I. Ortiz, "The problem with rights expression languages," Proceedings of 2006 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 59-67, Oct. 2006.
32. N. Jho, E. Yoo, J. Cheon, and M. Kim, "New broadcast encryption scheme using tree-based circle," Proceedings of 2005 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 37-44, Nov. 2005.
33. H. Jin, J. Lotspiech, and S. Nusser, "Traitor tracing for prerecorded and recordable media," Proceedings of 2004 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 83-90, Oct. 2004.
34. H. KIM, Y. Lee, B. Chung, H. Yoon, J. Lee, and K. Jung, "Digital rights management with right delegation for home networks," Proceedings of 9th International Conference on Information Security and Cryptology, LNCS 4296, pp. 233-245, 2004.
35. P. Koster and W. Jonker, Digital Rights Management, 2008. (http://www.springerlink.com/index/v317858416435v64.pdf)
36. P. Koster, F. Kamperman, P. Lenoir, and K. Vrielink, "Identity-based DRM: Personal entertainment domain," Proceeding of Transactions on Data Hiding and Multimedia Security, LNCS 4300, pp. 104-122, 2006.
37. th Annual IEEE Consumer Communications and Networking Conference, Las Vegas, NV, United States, pp. 940-944, Jan. 2007.
38. U. Kuhn, K. Kursawe, and S. Lucks, "Secure data management in trusted computing," Proceedings of 7th International Workshop on Cryptographic Hardware and Embedded Systems, LNCS 3659, pp. 324-338, 2005.
39. J. Lee, S. Hwang, S. Jeong, K. Yoon, C. Park and J. Ryou, "A DRM framework for distributing digital contents through the Internet," ETRI Journal, vol. 25, no. 6, pp. 423-436, Dec. 2003.
40. Q. Liu, R. Naini, and N. Sheppard, "Digital rights management for content distribution," Proceedings of the 2003 Australasian Information Security Workshop, Adelaide, Australia, pp. 49-58, 2003.
41. H. Malik, A. Khokhar, and R. Ansari, "Improved watermark detection for spread-spectrum based watermarking using independent component analysis," Proceedings of 2005 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 102-111, Nov. 2005.
42. S. Nair, B. Popescu, C. Gamage, B. Crispo, and A. Tanenbaum, "Enabling DRM-preserving digital content redistribution," Proceedings of the Seventh IEEE International Conference on E-Commerce Technology, pp. 151-158, July 2005.
43. J. Ntzel and A. Beyer, "Towards trust in digital rights management systems," Proceedings of Third International Conference on Trust and Privacy in Digital Business, LNCS 4083, pp. 162-171, 2006.
44. NTT DoCoMo, IBM, Intel Corporation, Trusted Mobile Platform-Hardware Architecture Description, Oct. 2004.
45. NTT DoCoMo, IBM, Intel Corporation, Trusted Mobile Platform-Software Architecture Description, Oct. 2004.
46. NTT DoCoMo, IBM, Intel Corporation, Trusted Mobile Platform-Protocol Specification Document, Oct. 2004.
47. J. Ntzel and A. Beyer, "How to increase the security of Digital Rights Management systems without affecting consumer's security," Proceedings of International Conf. on Emerging Trends in Information and Communication Security, LNCS 3995, pp. 368-380, 2006.
48. Open Mobile Alliance Specification, DRM Architecture Candidate Ver. 2.1, July 2007.
49. Open Digital Rights Language (ODRL) version 1.1, 2002. (http://www.w3.org/TR/odrl)
50. Open Mobile Alliance Specification, DRM Rights Expression Language Candidate Ver. 2.1, July 2007.
51. Open Mobile Terminal Platform Forum Report, Application Security Framework, Open Mobile Terminal Platform, Sep. 2007. (http://www.omtp.org/pdf/archivedpapers/OMTPApplicationSecurityFrameworkv20.pdf)
52. Open Mobile Alliance Specification, DRM Specification Candidate Ver. 2.1, July 2006.
53. J. Park and R. Sandhu, "The UCONABC usage control model," ACM Transactions on Information and System Security, vol. 7, no. 1, pp. 128-174, 2004.
54. Q. Pei, J, Ma and J. Dai, "Digital rights management for home networks using ID-based public key system and group signature," Chinese Journal of Electronics, vol. 16, no. 4, pp. 653-669, Oct. 2007.
55. O. Petrovic, M. Fallenbock, C. Kittl, and T. Wolkinger, "Vertrauen in digitale transaktionen, "Wirtschafts Informatik, vol. 45, no. 1, pp. 53-66, 2003.
56. E. Pisko, K. Rannenberg, and H. Heiko Robnagel, "Trusted computing in mobile platforms," Datenschutz und Datensicherheit, vol. 29, no. 9, pp. 526-530, 2005.
57. th ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 1-10, Oct. 2004.
58. R. Pucella and V. Weissman., "A formal foundation for ODRL," Workshop on Issues in the Theory of Security, Barcelona, Spain, Apr. 2004.
59. R. Pucella and V. Weissman, "A logic for reasoning about digital rights," Proceedings of 2002 15th IEEE Workshop on Computer Security Foundations, pp. 282-294, Dec. 2002.
60. J. Reid and W. Caelli, "DRM, trusted computing and operating system architecture," Proceedings of 2005 the Australasian Information Security Workshop, Newcastle, Australia, pp.127-136, 2005.
61. th Annual IEEE Consumer Communications and Networking Conference, Las Vegas, NV, United States, pp. 1058-1062, Jan. 2007.
62. B. Rosenblatt, "DRM, law and technology: an American perspective," Online Information Review, vol. 31, no. 1, pp. 73-84, 2007.
63. N. Santos, P. Pereira, and L. Silva, "A generic DRM framework for J2ME applications," Proceedings of First International Mobile IPR Workshop: Rights Management of Information Products on the Mobile Internet, Helsinki, Finland, pp. 53-66, Aug. 2003.
64. H. Sencar and N. Memon, "Watermarking and ownership problem: A revisit," Proceedings of 2005 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 93-101, Nov. 2005.
65. M. Steinebach, E. Hauer, and P. Wolf, "Efficient watermarking strategies," Proceedings of Third International Conference on Automated Production of Cross Media Content for Multichannel Distribution, pp. 65-71, Nov. 2007.
66. Trusted Computing Group Specification, TCG Specification Architecture Overview Revision 1.3, Mar. 2007. (https://www.trustedcomputinggroup.org/)
67. Trusted Computing Group Specification, TCG PC Specific Implementation Specification, Aug. 2003. (https://www.trustedcomputinggroup.org/specs/PCClient)
68. Trusted Computing Group Report, Mobile Phone Working Group Use Case Scenarios ver. 2.7, 2005. (https://www.trustedcomputinggroup.org/groups/mobile)
69. Trusted Computing Group Specification, TCG Mobile Trusted Module Specification Ver. 1.0, June 2007. (https://www.trustedcomputinggroup.org/groups/mobile)
70. Trusted Computing Group Specification, TCG Mobile Reference Architecture Ver. 1.0, June 2007. (https://www.trustedcomputinggroup.org/groups/mobile)
71. Trusted Computing Group Report, Mobile Trusted Module Specification FAQ, June 2007. (https://www.trustedcomputinggroup.org/groups/mobile)
72. B. Vassiliadis, V. Fotopoulos, A. N. Skodras, "Decentralising the digital rights management value chain by means of distributed license catalogues," Proceeding of 2006 IFIP Artificial Intelligence Applications and Innovations, vol. 204, pp. 689-696, 2006.
73. M. Veen, A. Lemma, M. Celik, and S. Katzenbeisser, Forensic Watermarking in Digital Rights Management, 2008. (http://www.springerlink.com/index/x587u1278360x52n.pdf)
74. X. Wang, Design Principles and Issues of Rights Expression Languages for Digital Rights Management, 2008. (http://www.contentguard. com/drmwhitepapers/Design principles and issues of REL for DRM.pdf)
75. P. Wolf, M. Steinebach, and K. Diener, "Complementing DRM with digital watermarking: Mark, search, retrieve," Online Information Review, vol. 31, no. 1 pp. 10-21, 2007.
76. H. Xie, "Protecting fair use from digital rights management in China," Proceedings of 2007 ACM Workshop on Digital Rights Management, Alexandria, Virginia, USA, pp. 33-38, Oct. 2007.
77. Y. Yu and Z. Tang, "A survey of the research on digital rights management," Chinese Journal of Computers, vol. 28, no. 12, pp. 1957-1968, 2005.
78. Z. Zhang, Q. Pei, J. Ma, and L. Yang, "Implementing trustworthy dissemination of digital contents by using a third party attestation proxy-enabling remote attestation model," Proceedings of 2008 International Conference of Multimedia and Information Technology, Three Gorge, China, Dec. 2008.
79. Z. Zhang, Q. Pei, J. Ma, and L. Yang, "A benefits-centric multi-participant trust architecture for DRM-enabling digital contents value chain ecosystem," Proceedings of International Seminar of Business and Information Management, Wuhan, China, Dec. 2008.
80. Z. Zhang, Q. Pei, J.Ma, L.Yang, and K. Fan, "A fine-grained digital rights transfer policy and trusted distribution and enforcement," Proceedings of International Conference of Computational Intelligence and Security, pp. 457-462, Dec. 2008.
81. Z. Zhang, Q. Pei, J.Ma, L. Yang, and K. Fan, "Cooperative and non-cooperative game-theoretic analyses of adoptions of security policies for DRM," Proceedings of 5th IEEE International Workshop on Digital Rights Management Impact on Consumer Communications, Satellite Workshop of 6th IEEE Consumer Communications & Networking Conference, Las Vegas, Nevada, USA, Jan. 2009.
82. Z. Zhang, L. Yang, Q. Pei, and J. Ma,"Research on usage control model with delegation characteristics based on OM-AM methodology," Proceeding s of IFIP International Conference on Network and Parallel Computing & Workshop on Networks System Security, Dalian, China, pp. 238-243, Sep. 2007.
83. Y. Zheng, "A conceptual architecture of a trusted mobile environment," Proceedings of the Second International Workshop on Security, Privacy and Trust in Pervasive and Ubiquitous Computing, Lyon, France, pp. 75-81, June 2006.
84. Y. Zheng, D. He, H. Wang, and X. Tang., "Secure DRM scheme for future mobile networks based on trusted mobile platform," Proceedings of 2005 International Conference on Wireless Communications, Networking and Mobile Computing, Wuhan, China, pp. 1164-1167, 2005.