Software Design Division 秘 CONFIDENTIAL Panther Content Security Mar. 14, 2014 Sony Corporation

Software Design Division 秘 CONFIDENTIAL Introduction: Panther/Lyon Panther is FY14 F1 Box implemented on new platform. 2 nd generation F1 Box Supports multiple network services including Video Unlimited 4K and playback of User Generated Contents Includes secure SoC “Lyon” Lyon is in-house secure SoC. Dedicated for Sony’s product Includes decryptor and AVC/HEVC decoder Handles (decrypts and decodes) Video Unlimited 4K contents 2

Software Design Division 秘 CONFIDENTIAL Panther/Lyon Security Improvement Lyon supports Trusted Execution Environment (cf. 1 st generation F1 Box does not support TEE) and H/W Root of Trust with Secure Boot. By introduction of TEE, the following items are improved from FMP-X1 (1 st generation F1 Box) Secure media pipeline Secure computation environment Memory protection The following items are fully supported as well as FMP-X1. Device Binding Device-unique private key HDCP2.2 Playback control watermark (Cinavia)  Note: Panther expands the coverage of Verance watermark screening to UGC in addition to VU 4K contents. UGC... User Generated Contents (e.g. contents from camcoder) Cf. FMP-X1 playbacks only Video Unlimited 4K contents 3

Software Design Division 秘 CONFIDENTIAL Panther Content Security About communication with Verance About WASU service 4

Software Design Division 秘 CONFIDENTIAL End 5

Software Design Division 秘 CONFIDENTIAL Backup 6

Software Design Division 秘 CONFIDENTIAL Memory Protection Lyon is able to protect memory of the secure zone against access from untrusted code. This means that Secure Data is still protected even if Normal Zone is rooted. Secure Data includes e.g. decrypted/decoded data. 7 Lyon Secure Process RAM Memory Protection: Secure Data cannot be accessed by untrusted code in Normal Zone. Secure ZoneNormal Zone Normal Process Normal MemorySecure Memory Secure Data

Software Design Division 秘 CONFIDENTIAL Secure Media Pipeline Panther implements a secure media pipeline that provides protection from Key Management to protected output (HDCP2.2). 8 Decryption Decode HDCP2.2 Secure Media Pipeline (Decryption - Protected Output) Key Management Secure Media Pipeline: Protection between Key Calculation to HDCP Lyon HDMI Bridge Main Board App. Processor Application

Software Design Division 秘 CONFIDENTIAL Secure Computation Environment Lyon supports a TEE isolated by hardware mechanisms running only authenticated code for performing secure operations (e.g. decryption). Lyon keeps integrity of secure process by TEE mechanism, i.e. can protect from unauthorized access to secure process. 9 Lyon Trusted RAM Flash Memory Signed & Encrypted Binary Keep Integrity of Secure Process: Unauthorized access is impossible by TEE. authorized Binary Verification ① Execution ② Authenticated Code: Only signed and encrypted process is running. Decryption

Software Design Division 秘 CONFIDENTIAL End of backup 10