DCI Specs - Digital Cinema Initiatives

9.4.2. Theater System Security DevicesAlthough SEs are not distinctly visible outside of the SPB that contains them, SEs existlogically, and their normative behavior is specified in conjunction with the requirementsdefined below for SPB systems (see Section 9.4.3.5 Functions of the Security Manager(SM) and Section 9.4.3.6 Functional Requirements for Secure Processing Block Systems).This is accomplished using a traditional Applications Programming Interface (API) approach,where the focus of the interoperability point is the SPB (logical) interface, and associatedmessaging and operational behavior at the interface.9.4.2.1. Equipment SuitesSeveral SPBs may be grouped to support an auditorium. Security requirements do notdefine an auditorium per se, but instead refer to a collection of equipment in the displaychain as an equipment suite. A playback of a show will be associated with an equipmentsuite, and that suite must be set up (prepared) by the requisite IMB SM ahead of theshow for each playback (see Section 9.4.3.6.3 Normative Requirements: Image MediaBlock (IMB))This takes place for each showing by command of the SMS.The installation and configuration of equipment that comprises suites is an exhibitionmanagement function.9.4.2.2. The Secure Processing Block (SPB)The SPB is defined as a container that has a specified physical perimeter, within whichone or more SE and/or other plaintext processing functions are placed (e.g., decryptor,decoder, Forensic Marker). The SPB exists to enclose SEs and other devices in thecontent path, impede attacks on those SEs, and to protect signal paths between theSEs.There are two normatively defined SPB types:• Secure Processing Block type 1 – An SPB type 1 provides the highest levelof physical and logical protection. Image Media Blocks and Link DecryptorBlocks shall be contained within a type 1 SPB. (These are shown as doublelinedboxes filled with diagonal lines in Figure 15: Digital Cinema AuditoriumSecurity Implementations)• Secure Processing Block type 2 – An SPB type 2 provides a lesserperimeter of protection, for content or security information that does notrequire the full SPB type 1 protection. SPB type 2 protection shall be providedby projectors as shown as the dotted line around the SPB type 1 devices asshown in Figure 16.Secure Processing Blocks (SPBs) shall provide security perimeters that meet minimumsecurity requirements as defined in Section 9.5.2 Robustness and PhysicalImplementations. Both SPB types are considered a Security Entity (SE), and shall carrya digital certificate with their SPB role, such that they may be authenticated to the SM(see Section 9.5.1 Digital Certificates and Section 9.8 Digital Certificate, Extra-TheaterMessages (ETM), and Key Delivery Messages (KDM) Requirements).DCI Digital Cinema System Specification v.1.2 Page 101