1、 International Telecommunication Union ITU-T X.1198TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU (06/2013) SERIES X: DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY Secure applications and services IPTV security Virtual machine-based security platform for renewable IPTV service and content
2、protection Recommendation ITU-T X.1198 ITU-T X-SERIES RECOMMENDATIONS DATA NETWORKS, OPEN SYSTEM COMMUNICATIONS AND SECURITY PUBLIC DATA NETWORKS X.1X.199 OPEN SYSTEMS INTERCONNECTION X.200X.299 INTERWORKING BETWEEN NETWORKS X.300X.399 MESSAGE HANDLING SYSTEMS X.400X.499 DIRECTORY X.500X.599 OSI NET
3、WORKING AND SYSTEM ASPECTS X.600X.699 OSI MANAGEMENT X.700X.799 SECURITY X.800X.849 OSI APPLICATIONS X.850X.899 OPEN DISTRIBUTED PROCESSING X.900X.999 INFORMATION AND NETWORK SECURITY General security aspects X.1000X.1029 Network security X.1030X.1049 Security management X.1050X.1069 Telebiometrics
4、X.1080X.1099 SECURE APPLICATIONS AND SERVICES Multicast security X.1100X.1109 Home network security X.1110X.1119 Mobile security X.1120X.1139 Web security X.1140X.1149 Security protocols X.1150X.1159 Peer-to-peer security X.1160X.1169 Networked ID security X.1170X.1179 IPTV security X.1180X.1199CYBE
5、RSPACE SECURITY Cybersecurity X.1200X.1229 Countering spam X.1230X.1249 Identity management X.1250X.1279 SECURE APPLICATIONS AND SERVICES Emergency communications X.1300X.1309 Ubiquitous sensor network security X.1310X.1339 CYBERSECURITY INFORMATION EXCHANGE Overview of cybersecurity X.1500X.1519 Vu
6、lnerability/state exchange X.1520X.1539 Event/incident/heuristics exchange X.1540X.1549 Exchange of policies X.1550X.1559 Heuristics and information request X.1560X.1569 Identification and discovery X.1570X.1579 Assured exchange X.1580X.1589 For further details, please refer to the list of ITU-T Rec
7、ommendations. Rec. ITU-T X.1198 (06/2013) i Recommendation ITU-T X.1198 Virtual machine-based security platform for renewable IPTV service and content protection Summary Recommendation ITU-T X.1198 specifies a virtual machine-based security platform for the renewable service and content protection (
8、SCP) system. The virtual machine supports an abstract function of hardware devices. This Recommendation defines a common interface and functional logic in the Internet protocol television (IPTV) terminal device and includes the data structure of SCP client and system components for a terminal device
9、 such as an embedded SCP, media client and control client. History Edition Recommendation Approval Study Group 1.0 ITU-T X.1198 2013-06-13 17 Keywords Conditional access, downloadable security, exchangeable security, renewable security, service protection, terminal device. ii Rec. ITU-T X.1198 (06/2
10、013) FOREWORD The International Telecommunication Union (ITU) is the United Nations specialized agency in the field of telecommunications, information and communication technologies (ICTs). The ITU Telecommunication Standardization Sector (ITU-T) is a permanent organ of ITU. ITU-T is responsible for
11、 studying technical, operating and tariff questions and issuing Recommendations on them with a view to standardizing telecommunications on a worldwide basis. The World Telecommunication Standardization Assembly (WTSA), which meets every four years, establishes the topics for study by the ITU-T study
12、 groups which, in turn, produce Recommendations on these topics. The approval of ITU-T Recommendations is covered by the procedure laid down in WTSA Resolution 1. In some areas of information technology which fall within ITU-Ts purview, the necessary standards are prepared on a collaborative basis w
13、ith ISO and IEC. NOTE In this Recommendation, the expression “Administration“ is used for conciseness to indicate both a telecommunication administration and a recognized operating agency. Compliance with this Recommendation is voluntary. However, the Recommendation may contain certain mandatory pro
14、visions (to ensure, e.g., interoperability or applicability) and compliance with the Recommendation is achieved when all of these mandatory provisions are met. The words “shall“ or some other obligatory language such as “must“ and the negative equivalents are used to express requirements. The use of
15、 such words does not suggest that compliance with the Recommendation is required of any party. INTELLECTUAL PROPERTY RIGHTS ITU draws attention to the possibility that the practice or implementation of this Recommendation may involve the use of a claimed Intellectual Property Right. ITU takes no pos
16、ition concerning the evidence, validity or applicability of claimed Intellectual Property Rights, whether asserted by ITU members or others outside of the Recommendation development process. As of the date of approval of this Recommendation, ITU had not received notice of intellectual property, prot
17、ected by patents, which may be required to implement this Recommendation. However, implementers are cautioned that this may not represent the latest information and are therefore strongly urged to consult the TSB patent database at http:/www.itu.int/ITU-T/ipr/. ITU 2013 All rights reserved. No part
18、of this publication may be reproduced, by any means whatsoever, without the prior written permission of ITU. Rec. ITU-T X.1198 (06/2013) iii Table of Contents Page 1 Scope 1 2 References. 1 3 Definitions 1 3.1 Terms defined elsewhere 1 3.2 Terms defined in this Recommendation . 2 4 Abbreviations and
19、 acronyms 2 5 Conventions 3 6 Overview of a virtual machine platform . 4 6.1 General architecture of a virtual machine 4 6.2 Requirements for a virtual machine-based security system . 5 6.3 Architecture of the SCP virtual machine 6 7 Virtual machine-based security platform for the SCP system 9 7.1 S
20、ystem architecture 11 7.2 SCP virtual machine . 12 7.3 Service and content protection (SCP) client . 13 7.4 Protection of the SCP client and SVM . 13 7.5 Security policy 14 7.6 System call 15 7.7 Event . 16 Annex A Data structure of SCP client package 19 A.1 Header of SCP client 19 A.2 Policy data 2
21、0 A.3 Code data 21 A.4 Signature . 21 Bibliography. 22 Rec. ITU-T X.1198 (06/2013) 1 Recommendation ITU-T X.1198 Virtual machine-based security platform for renewable IPTV service and content protection 1 Scope This Recommendation develops a virtual machine-based security platform for renewable serv
22、ice and content protection (SCP) under Internet protocol television (IPTV) services. This includes the virtual machine architecture and the mechanism for organizing virtual machine-related components such as SCP client, terminal client (embedded SCP) and media client. The following items are address
23、ed: a) Behaviour of SCP client: An SCP client has its pre-determined legitimate behaviour of execution. An SCP virtual machine (VM) should monitor the behaviour of an SCP client in run-time. This allows the system to prevent malicious code or unintentional code. Moreover, an SCP VM may support a rep
24、orting ability in case of illegal situations. b) Protection of SCP client: An SCP client code should not be seen by any unauthorized person or device during transmission. In addition, an SCP client code may be converted to an unreadable form even while loading a process. c) Integration with embedded
25、 SCP: An embedded SCP should obey the policy of the SCP client, including storing and retransmission. d) Integration with media client: A media client should deliver every event that has occurred in the device to the SCP VM. Deleting or modifying an event or its parameter is not allowed. 2 Reference
26、s The following ITU-T Recommendations and other references contain provisions which, through reference in this text, constitute provisions of this Recommendation. At the time of publication, the editions indicated were valid. All Recommendations and other references are subject to revision; users of
27、 this Recommendation are therefore encouraged to investigate the possibility of applying the most recent edition of the Recommendations and other references listed below. A list of the currently valid ITU-T Recommendations is regularly published. The reference to a document within this Recommendatio
28、n does not give it, as a stand-alone document, the status of a Recommendation. ITU-T X.1194 Recommendation ITU-T X.1194 (2012), Algorithm selection scheme for service and content protection descrambling. 3 Definitions 3.1 Terms defined elsewhere This Recommendation uses the following terms defined e
29、lsewhere: 3.1.1 access control b-ITU-T X.800: The prevention of unauthorized use of a resource, including the prevention of use of a resource in an unauthorized manner. 3.1.2 (entity) authentication b-ITU-T X.1252: A process used to achieve sufficient confidence in the binding between the entity and
30、 the presented identity. 3.1.3 authorization b-ITU-T X.800: The granting of rights, which includes the granting of access based on access rights. 2 Rec. ITU-T X.1198 (06/2013) 3.1.4 confidentiality b-ITU-T X.800: The property that information is not made available or disclosed to unauthorized indivi
31、duals, entities, or processes. 3.1.5 digital signature b-ITU-T X.800: Data appended to, or a cryptographic transformation (see cryptography in b-ITU-T X.800) of a data unit that allows a recipient of the data unit to prove the source and integrity of the data unit and protect against forgery e.g. by
32、 the recipient. 3.1.6 integrity b-ITU-T X.800: The property that data has not been altered or destroyed in an unauthorized manner. 3.1.7 key b-ITU-T X.800: A sequence of symbols that controls the operations of encipherment and decipherment. 3.1.8 key management b-ITU-T X.800: The generation, storage
33、, distribution, deletion, archiving and application of keys in accordance with a security policy. 3.1.9 process ITU-T X.1194: Instance of a computer program that is being executed; contains the program code and its current status. 3.1.10 scrambling algorithm b-ITU-T X.1191: Algorithm used in a scram
34、bling or a descrambling process. 3.1.11 service and content protection b-ITU-T X.1191: A combination of service protection and content protection or the system or implementation thereof. 3.1.12 service protection b-ITU-T X.1191: Ensuring that an end user can only acquire a service and the content ho
35、sted therein by extension as what he/she is entitled to receive; service protection includes protecting service from unauthorized access as IPTV contents traverse through the IPTV service connections. 3.1.13 virtual machine ITU-T X.1194: Software implementation of a machine that can execute programs
36、 just like a physical machine; supports separated operating systems. 3.2 Terms defined in this Recommendation This Recommendation defines the following terms: 3.2.1 conditional access: A function served by a conditional access system; often used as an abbreviation for conditional access system. 3.2.
37、2 conditional access system: A component of a service and content protection system the purpose of which is to prevent unauthorized (unentitled) access to a service or to content. 3.2.3 trap: A code or signal function designed to capture errors and reveal where they have occurred. 4 Abbreviations an
38、d acronyms This Recommendation uses the following abbreviations and acronyms: AAA Authentication, Authorization and Accounting API Application Programming Interface CPU Central Processing Unit ECM Entitlement Control Message EMM Entitlement Management Message EPG Electronic Programme Guide HAL Hardw
39、are Abstraction Layer H/W Hardware Rec. ITU-T X.1198 (06/2013) 3 ID Identity IDE Integrated Drive Electronics I/O Input/Output IPTV Internet Protocol Television OS Operating System OTID One-Time Identifier PC Program Counter SCP Service and Content Protection SCSI Small Computer System Interface SIM
40、 Subscriber Identity Module SSL Secure Socket Layer SVM Secure Virtual Machine S/W Software TLS Transport Layer Security UI User Interface USB User Serial Bus UX User experience VM Virtual Machine VoD Video on Demand XML extensible Markup Language 5 Conventions In this Recommendation: The words “is
41、required to“ indicate a requirement which must be strictly followed and from which no deviation is permitted if conformance to this Recommendation is to be claimed. The words “is recommended“ indicate a requirement which is recommended but which is not absolutely required. Thus this requirement need
42、 not be present to claim conformance. The words “is prohibited from“ indicate a requirement which must be strictly followed and from which no deviation is permitted if conformance to this Recommendation is to be claimed. The words “can optionally“ indicate an optional requirement which is permissibl
43、e, without implying any sense of being recommended. This term is not intended to imply that the vendors implementation must provide the option, and the feature can be optionally enabled by the network operator/service provider. Rather, it means the vendor may optionally provide the feature and still
44、 claim conformance with this Recommendation. In the body of this Recommendation and its annex, the words shall, shall not, should, and may sometimes appear, in which case they are to be interpreted, respectively, as is required to, is prohibited from, is recommended and can optionally. The appearanc
45、e of such phrases or words in an appendix or in material explicitly marked as informative are to be interpreted as having no normative intent. 4 Rec. ITU-T X.1198 (06/2013) 6 Overview of a virtual machine platform There are two ways to support a renewable client. The first way is a non-standardized
46、method; just a single mechanism is implemented such as a hardware chip (a security co-processor) or a physical devices with an encapsulated or hardwired protection mechanism. The second way is through an open and standard-based approach. This Recommendation develops open and common interfaces to sup
47、port an interoperable and renewable SCP client with a virtual machine. It is a platform-independent run-time environment for the execution of an SCP client in the terminal device, which provides a downloadable and renewable service protection mechanism. Because this platform is a virtual environment
48、, it enables the writing of a downloadable SCP code which has instruction-level code compatibility. This platform can be implemented in software (S/W) or hardware (H/W) environments. 6.1 General architecture of a virtual machine Generally, a virtual machine provides functions of code mobility and ha
49、rdware abstraction. As a security feature, a virtual machine provides a safe termination and a controlled execution of a mobile code. Figure 1 shows the concept of a virtual machine. Hardware and device driverI/O SystemCPU scheduling Memory manage NetworkSCSI/IDECPUPhysical memoryNetwork cardHost operating systemVirtualization layer (Virtual machine monitor)Virtual I/O systemVirtual CPUVirtual MemoryVirtual deviceMobile application Security applicationEmbedded application Java applicationGuest operatingsyst
