Conditional Access Signature Verification for Glitch Attack Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conditional access systems in pay-TV and other media services are vulnerable to glitch attacks, which can cause processors to malfunction and bypass critical authentication steps, leading to unauthorized access and revenue loss for service providers.

Innovation Solution

The method involves processing entitlement management messages (EMMs) with redundant operations to build signature values, which are used to derive digests that ensure correct processing flow, and using these digests to decrypt control words, thereby preventing tampering and ensuring authorized access to encrypted media services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional EMM processing is used without redundant operations, then processing speed is maintained, but the system becomes vulnerable to glitch attacks that can bypass authentication

Engineering Contradiction:
Improvesecurity against glitch attacksVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by performing redundant operations during EMM processing to build signature values before final authentication. These redundant operations (such as multiple cryptographic computations or verification steps) are executed in advance to ensure that even if a glitch attack occurs during critical authentication steps, the pre-computed signature values will detect the tampering and prevent unauthorized access. This resolves the contradiction by prioritizing security reliability over minimal processing complexity.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If redundant operations are added to build signature values, then security against glitch attacks is improved, but processing time increases

Engineering Contradiction:
Improveauthentication integrityVSAvoidEMM processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies partial or excessive action by implementing redundant operations that perform more computational work than strictly necessary for basic EMM processing. These excessive operations include generating signature values through multiple cryptographic computations or verification steps that go beyond the minimum required for authentication. While this increases processing time, it ensures that even partial execution due to glitch attacks will produce detectable inconsistencies, thus resolving the contradiction between authentication integrity and processing time by accepting some time loss as necessary for security.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If signature verification is implemented, then unauthorized access is prevented, but system complexity increases

Engineering Contradiction:
Improveaccess control securityVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies the intermediary principle by introducing signature values as a mediating element between EMM processing and authentication decisions. Instead of directly verifying authentication credentials, the system first computes signature values from redundant operations during EMM processing, then uses these signature values as intermediaries to verify whether the processing was completed without glitch attacks. This intermediary layer simplifies the overall system architecture by providing a clear verification mechanism that separates the complex redundant computations from the final authentication logic, thus resolving the contradiction between access control security and system architecture complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2436184B1Method for providing access control to media services
Publication Date: 2013.08.07 NAGRAVISION SA
  • EP2436184B1 patent drawingFigure 1
  • EP2436184B1 patent drawingFigure 2
  • EP2436184B1 patent drawingFigure 3

AI summary

The present invention proposes a solution to prevent a program flow in a processing unit from being modified with respect to an intended program flow, thereby ensuring that important steps such as verifying or authenticating are not bypassed. The invention is particularly aimed at security modules within receiver/decoders in a pay-TV system and involves performing a set of predetermined operations during the processing of entitlement management messages and/or entitlement control messages, said operations being redundant with respect to the normal processing of said messages while leading to the calculation of keys which can then be used to verify that the intended program flow has been respected.