Simulcrypt Key Sharing via Hashed Scrambling Keys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The Digital Video Broadcast (DVB) SimulCrypt standard lacks security as it cannot utilize one-way encryption functions, making it vulnerable to 'Three Musketeer' attacks and allowing hackers to exploit global keys and algorithms, compromising the integrity of conditional access systems.

Innovation Solution

Implementing a common hashing function at the bottom of the key hierarchy among conditional access providers to derive a shared scrambling key, which is a one-way function, enhancing security by preventing unauthorized access and key hierarchy attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a common shared scrambling key is used among multiple CA providers, then key sharing and synchronization are achieved, but security is compromised due to inability to use one-way encryption functions

Engineering Contradiction:
Improvekey sharing capabilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the key hierarchy into multiple levels: top-level global keys, intermediate CA-specific keys, and bottom-level content-specific scrambling keys. Each CA provider operates at their own security level without exposing their global keys, allowing key sharing at the content level while maintaining security segmentation.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements a nested key hierarchy where outer keys (global keys) contain and protect inner keys (CA-specific keys), which in turn protect content-specific scrambling keys. This nested structure allows multiple CAs to share content keys without exposing their higher-level security credentials, resolving the contradiction between key sharing and security.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Ease of operation

If global keys are shared among CA providers, then content access is enabled, but the system becomes vulnerable to Three Musketeer attacks and key hierarchy exploitation

Engineering Contradiction:
Improvecontent accessVSAvoidattack vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary key derivation at multiple levels before content distribution. Global keys are first used to derive CA-specific keys, which are then used to derive content-specific scrambling keys. This preliminary hierarchical derivation ensures that even if content keys are compromised, attackers cannot work backwards to obtain global keys or manipulate access criteria.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces intermediate CA-specific keys as mediators between global keys and content scrambling keys. These intermediate keys act as security buffers that prevent direct exposure of global keys and block attackers from exploiting the key hierarchy, while still enabling content access for authorized CAs.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Device complexity

If one-way encryption functions are not used, then key sharing is simplified, but security against key compromise and unauthorized access is reduced

Engineering Contradiction:
Improvekey management complexityVSAvoidsecurity against compromise
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent implements dynamic key derivation where scrambling keys are generated on-demand from CA-specific keys using one-way functions. This dynamic generation ensures that each content session uses a unique scrambling key that cannot be reversed to obtain the CA key, providing security while maintaining operational flexibility and manageable complexity.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2327211B1Simulcrypt key sharing with hashed keys
Publication Date: 2019.11.06 SONY GROUP CORP
  • EP2327211B1 patent drawingFigure 1
  • EP2327211B1 patent drawingFigure 2
  • EP2327211B1 patent drawingFigure 3~5

AI summary

A method of sharing keys among a plurality of conditional access (CA) vendors having differing CA systems used at a distribution headend involves receiving a CA Value contribution from each of the plurality of CA vendors at the headend; hashing the CA Values from each of the plurality of CA vendors together using a hashing function to produce an output control word; and at an encrypter at the headend, using the output control word as a content key, wherein the content key is used as an encryption key to encrypt content provided to a plurality of receivers that decrypt the content using any of the conditional access systems. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.