F1 BOX/SECURITY/SERVER SYSTEM SPTECH FEEDBACK(DRAFT2) 12012/9/21Sony/SPTech Confidential

ECP Principles No content protection system is impenetrable When a system is compromised, there must be a method to re-secure it – Solution: renewability of software portions of media path When a system is compromised, the damage should be minimized. – Solution: diversity of software portions of media path, ideally at a per-title and per-device level 2012/9/14Sony Confidential2

Sony questions 1.Sony proposal is HW security, how NDS solution can improve the security further? (“2 protection layers is better than 1 layer” story is not convincing) [SPE] The critical advantages that NDS provides are renewability and per-title/per-machine diversity 2.If NDS solution is relying on NDS Spec compliant implementation, how compliance enforcement will work? [SPE] NDS is not relying on an NDS Spec or a compliant implementation; they implement the full solution themselves. NDS customizes their client software to the target platform. In the event that a breach is discovered, NDS would determine countermeasures and update client implementations to incorporate the countermeasures. 3.IF NDS renewable code (dynamically generated by NDS server) performs DRM process (title key retrieval, etc.), such code may not be able to use TEE. Does NDS has solution already? [SPE] The NDS solution is designed to execute outside of a TEE. Using a TEE adds an additional layer of security but is neither sufficient nor necessary. Our assumption is that the NDS client implementation will have access to all resources that the Marlin BB client implementation would have. 4.What kind of low level APIs NDS need to access to realize reasonable integrity check? Does NDS has experience implementing on custom chip like the one under Sony’s consideration? [SPE] This question would require a dialogue directly between NDS and Sony 3

Comparison of NDS and Marlin BB solutions 4 PropertyNDSMarlin BB Can use hardware root of trustYes Can use Trusted Execution EnvironmentYes Renewability frequencyper-download / per-firmware update Diversityper-title and per-deviceper-firmware version (?) Individualized keysetYes Content localizationYesNo Ecosystem monitoring and responseYes???

5  SPE Video watermark assumption Watermarking can be applied in AVC stream layer (no need for separate encoding) Normally target B frames, 1 bit per slice (or 1bit per frame) marking is possible  Segmentation If N bit is embedded in one segment, 2^N variations of same segment need to be prepared to utilize full N bit SPE will confirm marking density requirement, and then, whether Sony proposed segmentation can realize effective forensic WM. 2012/9/21 Sony/SPTech Confidential IBB PBBPBB Mark Segment (encrypted with unique key) Server / MOD machine Delivery 0 1 Can be on Stamped media 1 Segment = Frame 1 Segment > Frame (Assembled & encrypted on the fly) Selecting pre-encrypted segments Feedback to Forensic WM solution proposed by Sony Encoding, marking