DCI Specs - Digital Cinema Initiatives

securely delivered to the SM, and for these two certificates to be on the TDLthat is examined by the SM. An option that can avoid this dual certificaterequirement is given in the next bullet. In this case, authentication and signalintegrity processes shall provide equal protection as in a dual TLS sessioncase. It is encouraged that a single approach be standardized.• The projector/LDB SPB marriage could create a new secret cryptographicidentity, which is changed at each installation event. Such an identity wouldbe used for authorization of the combined, married device and used in theTDL as a singular identification, rather than identifying both LDB andprojector in the TDL independently. In this case, authentication and signalintegrity processes shall provide equal protection as in a dual TLS sessioncase. It is encouraged that a single approach be standardized.• Communication of the "projector SPB open" event signal should preferablyinvolve a cryptographic secret so that hardware spoofing at the IMB or LDBinterface (e.g., extender board attack) is thwarted.9.4.3.6.6. Permanently Married ImplementationsThis section assumes that the LDB and IMB are implemented as field replaceableSPB modules. It is not mandatory, however, that they be implemented in this fashion.It is allowed, for example, for the LDB to be permanently married to a projector, andnot field replaceable. In such a case where the projector and its companion SPB(LDB or IMB) are not field separable, there is no marriage event, and thus no reasonto monitor whether the marriage connection is broken. This relieves the companionSPB from marriage monitoring duties, but does not change the requirement for IMBor LDB equivalent SPB functions, and the projector SPB, to meet the respective SPBtype 1 and type 2 physical and logical protection requirements of Section 9.5Implementation Requirements, and the normative requirements as specified above,except as the latter requirements relate to marriage event and connectionmonitoring.In the case where the Projector and companion SPB are inseparable, a single DigitalCinema Certificate shall represent both the Projector and its companion SPB (ImageMedia Block or Link Decryptor Block). (See also Section 9.5.1 Digital Certificates.)Implementations that do not meet the marriage functions, per the normativerequirements of this section, shall not permit field replacement of the IMB or LDBsecurity function as appropriate according to which function is the companion SPB tothe projector, and shall require the projector SPB and companion SPB system to bereplaced in the event of an SPB failure.A deviation from these requirements shall be considered non-compliant and a“Security Function Failure” (see Section 9.5.5 Compliance Testing and Certification).9.4.3.7. Theater System Clocks and Trustable Date-TimeNote: Nothing in this section shall require that the user interfaces of the SMS or TMSuse UTC. It is envisioned that these will use local time.To ensure playback times and event log time stamps are time-accurate, means mustexist to distribute and maintain proper security system time. Time shall mean UTC(Coordinated Universal Time). See ASN.1 standard syntax for transferring time and datedata “GeneralizedTime” and “UTCTime”.• All security transactions conferring date-time information (e.g., KDM timeDCI Digital Cinema System Specification v.1.2 Page 117