1、 ETSI TS 102 825-7 V1.2.1 (2011-02)Technical Specification Digital Video Broadcasting (DVB);Content Protection and Copy Management (DVB-CPCM);Part 7: CPCM Authorized Domain ManagementETSI ETSI TS 102 825-7 V1.2.1 (2011-02)2Reference RTS/JTC-DVB-252-7 Keywords broadcast, DVB ETSI 650 Route des Luciol
2、es F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice Individual copies of the present document can be downloaded from: http:/
3、www.etsi.org The present document may be made available in more than one electronic version or in print. In any case of existing or perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF). In case of dispute, the reference shall be the prin
4、ting on ETSI printers of the PDF version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http:/
5、portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http:/portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced except as authorized by written permission. The copyright and t
6、he foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2011. European Broadcasting Union 2011. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTM, TIPHONTM, the TIPHON logo and the ETSI logo are Trade Marks of ETSI registered for the benefit of it
7、s Members. 3GPPTM is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. LTE is a Trade Mark of ETSI currently being registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered
8、and owned by the GSM Association. ETSI ETSI TS 102 825-7 V1.2.1 (2011-02)3Contents Intellectual Property Rights 5g3Foreword . 5g3Introduction 5g31 Scope 7g32 References 7g32.1 Normative references . 7g32.2 Informative references 7g33 Definitions and abbreviations . 8g33.1 Definitions 8g33.2 Abbrevia
9、tions . 8g34 Authorized Domain Management (ADM) . 8g34.1 ADM in the CPCM System 8g34.2 Local ADM Master and Domain Controller . 10g34.2.1 ADM Local Master Concept and Requirements . 10g34.2.2 The Global Domain Controller Concept . 10g34.3 Authorized Domain capabilities . 11g34.4 Authorized Domain Si
10、ze and Extent 11g34.4.1 ADSE Counts and Values . 12g34.4.2 ADSE Method Description . 12g34.4.3 Other ADSE Methods . 15g35 The ADM State Machine - Normative text 16g35.1 Normal Behaviour 16g35.1.1 Discovery Protocol . 16g35.1.2 Local Master and Domain Controller messaging 17g35.1.3 Connected AD Membe
11、r 19g35.1.4 Connected Domain Controller 21g35.1.5 Connected Local Master . 23g35.1.6 Connected Local Master and Domain Controller . 25g35.1.7 Local Master Election . 27g35.1.8 AD Member Reconnection . 30g35.1.9 Blank Instance Connection . 31g35.1.10 AD Joining 32g35.1.10.1 Blank Instance Joining an
12、AD . 32g35.1.10.2 Local Master in AD Joining 35g35.1.10.3 Domain Controller in AD Joining . 37g35.1.11 Instance Leaving the AD 40g35.1.11.1 AD Member Leaving 40g35.1.11.2 Local Master in AD Leaving . 41g35.1.11.3 Domain Controller in AD Leaving 43g35.1.12 Domain Controller Transfer 45g35.1.12.1 AD M
13、ember becoming a Domain Controller 45g35.1.12.2 The Domain Controller Transfer process 46g35.1.13 Domain Controller Splitting . 48g35.1.13.1 AD Member becoming an additional Domain Controller . 48g35.1.13.2 A Domain Controller is Split 49g35.1.14 Domain Controller Merging . 52g35.1.14.1 The Merging
14、Domain Controller . 52g35.1.14.2 The Merged Domain Controller 53g35.1.15 Domain Controller Rebalancing . 55g35.1.15.1 The Rebalancing Domain Controller 56g35.1.15.2 The Rebalanced Domain Controller 57g35.2 Abnormal Behaviour 60g35.3 Protocol Failure Recovery 60g3ETSI ETSI TS 102 825-7 V1.2.1 (2011-0
15、2)45.3.1 Client behaviour with a stored CIC Identifier . 61g35.3.2 Server behaviour with a stored CPCM CIC Identifier 62g35.4 Domain Internal Record . 62g35.4.1 Domain Internal Record information 63g35.4.2 Domain Internal Record management 63g36 Security Control Behaviour for Authorized Domain Manag
16、ement 64g36.1 AD Creation . 64g36.2 Domain Controller Leaving 65g36.3 AD Joining . 65g36.3.1 Blank Instance Joining an AD 65g36.3.2 Local Master in AD Joining Process. 66g36.3.3 Domain Controller in AD Joining protocol 66g36.3.4 Other AD Members 68g36.4 AD Leave . 68g36.4.1 AD Member Leaving 68g36.4
17、.2 Local Master in AD Leaving Process . 68g36.4.3 Domain Controller in AD Leaving protocol . 69g36.5 Domain Controller Transfer . 69g36.5.1 AD Member becoming a Domain Controller 69g36.5.2 Domain Controller Transfer Process. 70g36.6 Domain Controller Split . 71g36.6.1 AD Member becoming an additiona
18、l Domain Controller . 71g36.6.2 Domain Controller in Splitting process 71g36.7 Domain Controller Merge 72g36.7.1 Merging Domain Controller . 72g36.7.2 Merged Domain Controller process 73g36.8 Domain Controller Rebalance 73g36.8.1 The Rebalancing Domain Controller 73g36.8.2 Rebalanced Domain Controll
19、er. 74g37 Generic ADSE tools (optional) 75g37.1 Single Household Metric (SHM) 75g37.2 Total AD Count (TAC) 75g37.3 Total and Remote AD Count (TARC) 75g37.4 Total and Remote AD Count + (TARC+) 76g37.5 Quorum Test . 76g37.6 Domain Membership History (DMH) 76g37.7 Wayfaring Device Limits (WDL) 77g37.8
20、AD Membership by Authorized Authenticated Agent (ADMAAA) 77g38 ADM message structure and elements . 77g38.1 Local Master Delegation 77g3Annex A (informative): Informative messages 79g3A.1 Interaction Security Control ADM . 79g3A.2 ADM Communications with Device Application 80g3History 83g3ETSI ETSI
21、TS 102 825-7 V1.2.1 (2011-02)5Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 0
22、00 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (http:/webapp.etsi.org/IPR/home.asp). Pursuant to the ETSI IPR Pol
23、icy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Tec
24、hnical Specification (TS) has been produced by Joint Technical Committee (JTC) Broadcast of the European Broadcasting Union (EBU), Comit Europen de Normalisation ELECtrotechnique (CENELEC) and the European Telecommunications Standards Institute (ETSI). NOTE: The EBU/ETSI JTC Broadcast was establishe
25、d in 1990 to co-ordinate the drafting of standards in the specific field of broadcasting and related fields. Since 1995 the JTC Broadcast became a tripartite body by including in the Memorandum of Understanding also CENELEC, which is responsible for the standardization of radio and television receiv
26、ers. The EBU is a professional association of broadcasting organizations whose work includes the co-ordination of its members activities in the technical, legal, programme-making and programme-exchange domains. The EBU has active members in about 60 countries in the European broadcasting area; its h
27、eadquarters is in Geneva. European Broadcasting Union CH-1218 GRAND SACONNEX (Geneva) Switzerland Tel: +41 22 717 21 11 Fax: +41 22 717 24 81 The Digital Video Broadcasting Project (DVB) is an industry-led consortium of broadcasters, manufacturers, network operators, software developers, regulatory
28、bodies, content owners and others committed to designing global standards for the delivery of digital television and data services. DVB fosters market driven solutions that meet the needs and economic circumstances of broadcast industry stakeholders and consumers. DVB standards cover all aspects of
29、digital television from transmission through interfacing, conditional access and interactivity for digital video, audio and data. The consortium came together in 1993 to provide global standardisation, interoperability and future proof specifications. The present document is part 7 of a multi-part d
30、eliverable. Full details of the entire series can be found in part 1 1. Introduction CPCM is a system for Content Protection and Copy Management of commercial digital content delivered to consumer products. CPCM manages content usage from acquisition into the CPCM system until final consumption, or
31、export from the CPCM system, in accordance with the particular usage rules of that content. Possible sources for commercial digital content include broadcast (e.g. cable, satellite, and terrestrial), Internet-based services, packaged media, and mobile services, among others. CPCM is intended for use
32、 in protecting all types of content - audio, video and associated applications and data. CPCM specifications facilitate interoperability of such content after acquisition into CPCM by networked consumer devices for both home networking and remote access. This first phase of the specification address
33、es CPCM for digital Content encoded and transported by linear transport systems in accordance with TS 101 154 i.1. A later second phase will address CPCM for Content encoded and transported by systems that are based upon Internet Protocols in accordance with TS 102 005 i.2. ETSI ETSI TS 102 825-7 V1
34、.2.1 (2011-02)6Note for New Readers: Readers who are unfamiliar with the present document may find it helpful to first read the information scenarios described in TR 102 825-11 i.4. ETSI ETSI TS 102 825-7 V1.2.1 (2011-02)71 Scope The present document specifies the Authorized Domain Management for th
35、e Digital Video Broadcasting (DVB) Content Protection and Copy Management (CPCM) system. The present document defines messages and state machines that together define the conformant behaviour of an implementation. The present document also defines a mandatory method for performing ADSE. Additionally
36、, the present document describes a set of tools that may be used by a Compliance and Robustness C however these are informative only and are not required to be implemented for conformance. The hardware, software, middleware and other technologies employed are the sole choice of the implementer, gove
37、rned by the requirements of the relevant (C Content Protection and Copy Management (DVB-CPCM); Part 1: CPCM Abbreviations, Definitions and Terms“. 2 ETSI TS 102 825-4: “Digital Video Broadcasting (DVB); Content Protection and Copy Management (DVB-CPCM); Part 4: CPCM System Specification“. 3 ETSI TS
38、102 825-5: “Digital Video Broadcasting (DVB); Content Protection and Copy Management (DVB-CPCM); Part 5: CPCM Security Toolbox“. 2.2 Informative references The following referenced documents are not necessary for the application of the present document but they assist the user with regard to a parti
39、cular subject area. i.1 ETSI TS 101 154: “Digital Video Broadcasting (DVB); Specification for the use of Video and Audio Coding in Broadcasting Applications based on the MPEG-2 Transport Stream“. i.2 ETSI TS 102 005: “Digital Video Broadcasting (DVB); Specification for the use of Video and Audio Cod
40、ing in DVB services delivered directly over IP protocols“. i.3 ETSI TS 102 825-2: “Digital Video Broadcasting (DVB); Content Protection and Copy Management (DVB-CPCM); Part 2: CPCM Reference Model“. i.4 ETSI TR 102 825-11: “Digital Video Broadcasting (DVB); Content Protection and Copy Management (DV
41、B-CPCM); Part 11: CPCM Content management scenarios“. ETSI ETSI TS 102 825-7 V1.2.1 (2011-02)8i.5 ETSI TR 102 825-12: “Digital Video Broadcasting (DVB); Content Protection and Copy Management (DVB-CPCM); Part 12: CPCM Implementation Guidelines“. 3 Definitions and abbreviations 3.1 Definitions For th
42、e purposes of the present document, the terms and definitions given in TS 102 825-1 1 apply. 3.2 Abbreviations For the purposes of the present document, the abbreviations given in TS 102 825-1 1 apply. 4 Authorized Domain Management (ADM) ADM is the mechanism that allows CPCM Devices belonging to a
43、household to establish and Join a DVB CPCM Authorized Domain (AD). It also provides an interoperable means of managing that AD. Basic expectations on ADM are given in TS 102 825-2 i.3. 4.1 ADM in the CPCM System Figure 1 shows how ADM fits into the CPCM Reference Model. Figure 1: ADM in the CPCM Ref
44、erence Model ETSI ETSI TS 102 825-7 V1.2.1 (2011-02)9Figure 2 provides another view of ADM within a CPCM implementation. It identifies that there are three key internal sub-systems with which the ADM Sub-system must communicate. Figure 2: ADM Interfaces to other CPCM Sub-systems It would be possible
45、 to build a CPCM implementation that strictly follows the architecture in figure 2, but this is not required. For reasons of clarity the present document is written in terms of the interfaces in figure 3. Figure 3: ADM Interfaces ADM1 is the interface which is used to communicate with peer ADM Insta
46、nces in other devices, via a Network Adaptation function that is specific to each network technology. EXAMPLE: On DVB-HN (Home Network) conformant systems, ADM messages will be transferred using the UPnP protocols. However, for other situations such as serial Smartcard or CI interfaces, ADM messages
47、 will be transferred without UPnP support. The present document includes a formal description of the ADM1 interface. ADM2 is the interface to the Security Tools Sub-system of CPCM. The present document defines the normative behaviour of the Security Control and provides an informative API for use ac
48、ross this interface. ADM3 is the informative interface between a Device Application and the ADM. ETSI ETSI TS 102 825-7 V1.2.1 (2011-02)104.2 Local ADM Master and Domain Controller 4.2.1 ADM Local Master Concept and Requirements A single CPCM Instance acts as a temporary Local ADM Master for the AD
49、members in the Local network. The ADM Local Master has no specific additional data (i.e. the same AD data is replicated to all Instances in the AD). The Local Master can be replaced at any time to avoid a single-point-of-failure. Figure 12 and clause 5.1.7 describe how to determine which Instance fulfils this role at any given moment. The basic behaviour is as follows: The first Instance to create the Authorized Domain immediately becomes the Local Master. When an Instance attempts to discover available ADs or properties of connected Instan
