Secure Digital Music Initiative SDMI Overview Provided by

Secure Digital Music Initiative (SDMI) Overview Provided by Texas Instruments June, 2000

What is SDMI? Secure Digital Music Initiative = SDMI u SDMI is: n n An architecture A set of reference models w Applications Layer w Licensed Compliant Module (LCM) Layer w Portable Device (PD) Layer n A set of requirements: w Security w Robustness w Content screening n A work in progress u SDMI is NOT n n n A true standard A single file format A single cryptographic algorithm A single coder Designed for interoperability

TI and SDMI u SDMI grew out of a meeting at Comdex ‘ 98 that was sponsored by TI and the RIAA u TI supports SDMI, and believes a programmable TI Digital Signal Processor (DSP) solution is the best choice for the changing SDMI environment u TI was first to announce SDMI-compliant portable solutions (with Liquid Audio, Fh. G and San. Disk) u SDMI-compliant portable players using TI DSPs are shipping now. The first SDMI-compliant player was the Sony VAIO® Music Clip™, which started shipping in the US in January ‘ 00.

TI and SDMI (cont’d) u The Verance Phase I watermark decoder will be available on TI’s TMS 320 C 54 x™ DSPs in early 3 Q 00 u The TI C 54 x-based evaluation module (EVM) is one of the 3 platforms that Phase II proposers will use to implement their technology. Therefore SDMI Phase II will be available on C 54 x very soon after the Phase II technology is chosen. u TI has been approved as an SDMI ID Assignment Authority and has been granted a block of 64 -bit unique IDs for use in TI DSP-based devices with built-in flash memory

SDMI-Compliant System Layers u The Licensed Compliant Module (LCM) transfers content between SDMIcompliant applications (S/W jukeboxes, etc. ) and portable devices (PDs) or portable media (PM). It is roughly equivalent to a device driver. u The application may delegate screening and other functions to the LCM or other trusted task -- this is simply one possible structure.

SDMI Version 1. 0 Reference Model u The SDMI Version 1. 0 Reference Model includes a host with application(s) and LCM(s) interfaced to a portable player and/or portable media. u Inputs to the Reference Model may include CD, Electronic Music Distribution (EMD), portable media, DVD, etc.

Screening u The most important concept within SDMI u Considered by the record labels to be a major concession u Allows perpetual usage of current (“legacy”) content (existing CDs and MP 3 s, etc. ), but legacy content must be screened, encrypted, and bound to a specific player or piece of media u Designed to enable the secure distribution of “new” (watermarked) content u Phase 2 technology will use watermarking or similar means to detect new content that has been illegally copied and distributed.

SDMI Screening Timeline u Phase I - begins when SDMI-compliant applications start to ship n n n Verance (formerly Aris/Solana) watermarking technology selected for Phase I 3 bits decoded: “Phase 1 trigger” plus two copy control bits (DVD-A CCI bits) All SDMI-compliant Phase I applications must implement screening for the Phase I trigger u Phase II - begins when content providers start shipping content with the Phase I trigger and the Phase II technology n n n Phase II technology should be selected late 2000 or early 2001. Phase II proposals are due in June 2000. The Phase II technology may require re-marking (changing “copy once” to “copy no more”. When Phase II begins, applications will see the Phase I trigger and request an upgrade for the application to a Phase II application Users who decline the upgrade will only be able to play legacy content Users who upgrade will be able to play new content plus legacy content

SDMI Phase 1 Content Flow and Usage u The “Biddle Diagram” specifies the flow of content into, out of, and within the SDMI Domain, and specifies the Phase I screening process.

The SDMI Version 1 Portable Device (PD) u General Requirements: A PD must n n n Store all content in SDMI-protected form Observe content usage rules Only accept portable media with content in SDMI-protected format u Inputs: n n n SDMI-protected content from an LCM or PM Embedded microphone, limited to mono, voice-grade (-3 db @100 Hz, -60 d. B @8 KHz. Microphone input must be stored in SDMI-protected form, and screened before it can be exported from the SDMI domain. Unprotected digital and analog inputs must be screened within the PD and stored in SDMI-protected form u Outputs: n n Analog output is allowed. Playback >1. 5 normal speed must be degraded or pitchcorrected. Output during seek (FF/rewind) must be noticeably degraded Unprotected digital output of content is not allowed

IDs and Binding u Binding: Content must be “bound” n n To the portable memory (PM), if the PM is removable To the PD, if the PD has non-removable memory u IDs: IDs must be n n n Readable by the LCM and PD Statistically or truly unique across all devices or components for a given manufacturer A minimum length of w 128 bits, if randomly assigned w 32 bits, if assigned by an appropriate authority n Security must not depend on the secrecy of the ID

Robustness (i. e. , Security and Tamper-Proofing) u Content n n Content must be maintained in a secure form at all times until it is played out No unprotected content on a user-accessible bus (PCMCIA, device bay, 1394, Cardbus, etc. , EXCEPT unprotected digital playback (e. g. , USB speakers) is permitted, limited to 16 -bit stereo at 48 KHz or less. u Bypass/Defeating Functions or Procedures n No switches, jumpers, traces that can be cut, secret control functions, etc. , that will access to unprotected content u Software n n Must be secured or encrypted Must perform self-checking/authentication to prevent unauthorized modification u Hardware n n n Must protect keys/algorithms using hardware or software means Must be designed so that removing or replacing components cannot be done without risk of damage Must require professional tools and difficulty to defeat security functions

SDMI Status -- June 1, 2000 Current SDMI priorities (in rough priority order) u Definition of testing methods and procedures for evaluating Phase II screening technology candidates u Selection of Phase II technology n Must detect that content has been compressed and then uncompressed n Need not be watermarking n Highest priority of record companies u Discussions of the implications of screening on usability and the consumer experience n May lead to temporary relaxation of screening procedures u Discussion of SDMI requirements for wireless devices, and what constitutes a SDMI Portable Device u Completion of final trademark and licensing agreement n Requires agreement on what constitutes SDMI compliance n Difficult liability issues still remain

SDMI Information on the Web The SDMI Portable Device Specification, Part 1, Version 1. 0, is available on the public area of the SDMI Web site at http: //www. sdmi. org/ Additional information including a FAQ and how to join SDMI is also available on the public area of the Web site. SDMI members are given a login name and password to access the private area of the Web site, where all SDMI documents are stored.