1. LWDRM (Lightweight Digital Rights Management) Information Science and Technology Master 1 st 46432 Yuuki Horita

2. Reference  R. Grimm, P. Aichroth : Privacy Protection for Signed Media Files : A separation-of-Duty Approach to the Lightweight DRM (LWDRM) System, In proceedings of the 2004 multimedia and security workshop on Multimedia and security  http://www.lwdrm.com/eng/

3. LWDRM  DRM system developed by Fraunhofer Institute in Germany content providers users

4. File Format  LMF (local media file) available only on the computer into which the user downloaded it  SMF (signed media file) able to distribute freely includes the user ’ s signature

5. LMF content providers users RSA keys created using parameters of the user ’ s hardware AES encryption RSA encryption LMF public system key private system key contents

6. Decode LMF private system key RSA decryption AES decryption “ private system key ” is available only on the hardware into which the contents were downloaded (binding to the hardware)

7. Transform LMF into SMF  Release the session key from its local binding public user key private user key

8. Transform LMF into SMF (cont ’ d) Certificates of public user key Signed Receipt of content purchase SMF

9. Decode SMF Certificates of public user key Signed Receipt of content purchase verification RSA decryption AES decryption

10. Features of LWDRM  Digital contents are allowed to be transferred to the other hardware  SMF includes the user ’ s signature illegal contents can be traced back certificate of public key have to be issued by specific CA

11. Evaluation  meets the requirements of both contents providers and consumers illegal contents can be traced back the contents can be copied to the other hardware  makes users conscious of their responsibility for the downloaded contents  seems to take a lot of time to develop the environment

12. “ Separation of Duty ” Principle  separate real user name and digital contents use pseudonymous consumer id instead of real user name