Nuovo DRM Paradiso: Designing a Secure, Verified, Fair Exchange DRM Scheme

Issue title: Fundamentals of Software Engineering 2007: Selected Contributions

Article type: Research Article

Authors: Dashti, Mohammad Torabi | Nair, Srijith Krishnan | Jonker, Hugo

Affiliations: CWI Amsterdam, Netherlands. [email protected] | Vrije Universiteit, Amsterdam, Netherlands. [email protected] | Eindhoven University of Technology, Eindhoven, Netherlands. [email protected]

Note: [] Address for correspondence: Eindhoven University of Technology, P.O. Box 513, 5600 MB Eindhoven, Netherlands

Abstract: We introduce Nuovo DRM, a digital rights management scheme aimed to provide formal and practical security. The scheme is based on a recent DRM scheme, which we formally specify in the ?CRL process algebraic language. The original scheme stated the following security requirements: effectiveness, secrecy and resistance of content masquerading. We formalise these security requirements as well as strong fairness and formally check the original scheme against these requirements. This verification step uncovered several security weaknesses, which are addressed by Nuovo DRM. In addition to that, Nuovo DRM introduces several procedural practices to enhance the practical security of the scheme. A finite model of Nuovo DRM is subsequently model-checked and shown to satisfy its design requirements, including secrecy, fairness and resistance to content masquerading.

Journal: Fundamenta Informaticae, vol. 89, no. 4, pp. 393-417, 2008