Conditional Access Signature Verification for Glitch Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conditional access systems in pay-TV and other media services are vulnerable to glitch attacks, which can cause processors to malfunction and bypass critical authentication steps, leading to unauthorized access and revenue loss for service providers.
Innovation Solution
The method involves processing entitlement management messages (EMMs) with redundant operations to build signature values, which are used to derive digests that ensure correct processing flow, and using these digests to decrypt control words, thereby preventing tampering and ensuring authorized access to encrypted media services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional EMM processing is used without redundant operations, then processing speed is maintained, but the system becomes vulnerable to glitch attacks that can bypass authentication
Solution Approach 1:
The patent applies preliminary action by performing redundant operations during EMM processing to build signature values before final authentication. These redundant operations (such as multiple cryptographic computations or verification steps) are executed in advance to ensure that even if a glitch attack occurs during critical authentication steps, the pre-computed signature values will detect the tampering and prevent unauthorized access. This resolves the contradiction by prioritizing security reliability over minimal processing complexity.
2Reliability
If redundant operations are added to build signature values, then security against glitch attacks is improved, but processing time increases
Solution Approach 1:
The patent applies partial or excessive action by implementing redundant operations that perform more computational work than strictly necessary for basic EMM processing. These excessive operations include generating signature values through multiple cryptographic computations or verification steps that go beyond the minimum required for authentication. While this increases processing time, it ensures that even partial execution due to glitch attacks will produce detectable inconsistencies, thus resolving the contradiction between authentication integrity and processing time by accepting some time loss as necessary for security.
3Reliability
If signature verification is implemented, then unauthorized access is prevented, but system complexity increases
Solution Approach 1:
The patent applies the intermediary principle by introducing signature values as a mediating element between EMM processing and authentication decisions. Instead of directly verifying authentication credentials, the system first computes signature values from redundant operations during EMM processing, then uses these signature values as intermediaries to verify whether the processing was completed without glitch attacks. This intermediary layer simplifies the overall system architecture by providing a clear verification mechanism that separates the complex redundant computations from the final authentication logic, thus resolving the contradiction between access control security and system architecture complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention proposes a solution to prevent a program flow in a processing unit from being modified with respect to an intended program flow, thereby ensuring that important steps such as verifying or authenticating are not bypassed. The invention is particularly aimed at security modules within receiver/decoders in a pay-TV system and involves performing a set of predetermined operations during the processing of entitlement management messages and/or entitlement control messages, said operations being redundant with respect to the normal processing of said messages while leading to the calculation of keys which can then be used to verify that the intended program flow has been respected.