DCI Specs - Digital Cinema Initiatives

(TMS) devices, content storage devices, Key Delivery Message(s) (KDMs), etc.according to their own operational needs. Defined security system behavior placescontrols on Security Data, keys, etc. such that security interests are maintained.The flow chart in Figure 19: Post Playback Overview, is an example of those items asystem performs following a completed Show Playlist. This flow chart is informative.There are other designs that may have different steps or different sequences that willaccomplish the same result and meet the requirements of the specification.Figure 19: Post Playback Overview9.4.3.5. Functions of the Security Manager (SM)Auditorium Security Managers (SMs) are responsible for overseeing the security aspectsof the auditorium they are assigned to (installed in). Each SM operates independentlyfrom other SMs in responding to the auditorium’s Screen Management System (SMS) toenable playback of content. The required SM functions are described below.In listing these functions the approach is that of a reference model for SM behavior,meaning that these specifications do not define required implementation methods. Astandards-compliant implementation must, however, have the same input/outputbehavior as the reference model.Security Manager (SM) Functions:1. Receive, store, decrypt and validate signatures on Key Delivery Message(s)(KDMs) per the validity checks of Section 6.1.2 of the KDM specification(SMPTE430-1: D-Cinema Operations - Key Delivery Message) that are targetedat the SM. Constrain use of KDM content keys per item 9 below to the SM'sconfirmation that one of the certificates in the signer chain of the associatedComposition Play List (CPL) has a thumbprint that matches theContentAuthenticator element of the KDM, per Section 5.2.4 of said KDMspecification.2. Security Manager (SM) KDM usage policy is specified as follows:DCI Digital Cinema System Specification v.1.2 Page 109