eSmartlock a USB Javacard dongle with anti-piracy and DRM services
eSmartlockeSmartlock
A javacard USB dongle
delivering DRM and anti-piracy services
Presented at CardTech-SecureTech
Washington DC
Designed by Yiannis Hatzopoulos
Anti-piracy module
Timestamp
Authenticator
eCommerce Token
Key distribution
server
eSignature
generator
Crypro web access
Secure CD/DVD
access
Encrypted save/load
On Hard Disk
Multi user
Lincensing engine
Digital rights
Management
engine
Esmartlock
API
services
Esmartlock
API
services
Challenge
CardID Soft Product Key Data MAC
Soft Product Key
It only decodes on a specific card
Credit Update Operation
Soft Product Key Data
Credit Credit UpdateData
New
Authenticated TimeStamp
Generic DRM Command Set
Soft Product Key Data
On Card Parser
PC based DRM parser ( option sets / keysets / commands etc)
On PC Parser
Vendor’s Order Processing dept
Compiles
DRM request from Customer
eSmartLock Soft Product Key Processing pattern
PersistentStorageonCard
DRM Command
SentOnline/Off-line
eGate
Produces RSA
encrypted PK
[CardID,eSession
Key,K(eSessionKey),
K(TimeStamp)]
eSession Request:
Encrypts K[Random pad,
CardID, eSession parameters]
Performs RSA Private
Key decryption,
authenticates with K
=> eSessionKey,
TimeStamp
Internet
Secure
Channel
eSessionKey
TimeStamp
eSmartLock
eSmartLock eSessioning
Content
Access
Server
eGate
eGate
Object of Interest
eSmartLock
Public Keys
ESmartLock
Client i
Access
Control
List
Authenticate Identity - Submit PK
Authorized Services
ESmartLock
Server
CA - KDC
ESmartLock
Client A
Client PK Registration
ESmartLock
Client B
B’s Public Key
A’sPublicKey
VPN
eSignature
Checks
Key Distribution
Center function
Store PK
safely
eSmartLock Client – Server
Trusted Third Party Service
Extranet
eGate eGate
eGate eGate