DCI Specs - Digital Cinema Initiatives

More documents

Recommendations

Info

6. No broadcast RRP commands shall be used or required.7. Except where noted, non-TLS security communications shall not be allowed,and production Digital Cinema security equipment shall have no provisionsfor performing security functions in a TLS “bypass” mode.8. RRP protocols shall be synchronous: Each pairing shall be opened andclosed before a new RRP is opened between any two devices. Nestedtransactions (in which one end point must communicate with another endpoint while the first waits) are allowed.9. Standardized security messages (Category 2 messages of Table 15) shalluse, and have exclusive use of, well-known port 1173 (which has beenreserved for SMPTE digital cinema use by the Internet Assigned NumbersAuthority [IANA]). Operational messages (Category 1 messages of Table 15)shall not use well-known port 1173, but shall operate under TLS.10. Equipment suppliers may implement proprietary ITM, however such ITM shallnot communicate over well-known port 1173 (i.e., any non-standardized ITMshall use a different port).11. Equipment suppliers shall define and describe their respective securitydesigns surrounding the use of well-known port 1173 per the requirements ofFIPS 140-2 per Section 9.5.2.5 FIPS 140-2 Requirements for Type 1 SecureProcessing Blocks.9.4.5.2.4. Request-Response Pairs (RRP)Table 15: Intra-theater Message (ITM) Request-Response Pairs (RRP) lists"standardized security messages" (category 2) and suggested "operationalmessages" (category 1). The following establishes the implementationrequirements for these message types:• Standardized Security Messages - Standardized security messages shallbe compliant to SMPTE 430-6-2007 D-Cinema Operations - AuditoriumSecurity Messages, and shall consist only of messages listed as category 2messages of Table 15: Intra-theater Message (ITM) Request-ResponsePairs (RRP). These messages are used between the Image Media Block andremote SPBs, with the IMB as the Requestor (RRP initiator). The securitydata and related information that is the subject of these messages shall becommunicated only via standardized security messages.• Operational Messages - The implementation of operational messages is notnormatively specified. However, to support log event recording (see 9.4.6.3Logging Subsystem), it shall be mandatory that Security Managersfunctionally support Table 15: Intra-theater Message (ITM) Request-Response Pairs (RRP) category 1 operational messages. This means thatthe SM must be capable of performing the function, whether via ITMcommand, or other control means. The functional approach shall specify an"AuthorityID", which is intended to indicate the SMS operator, per Section9.4.2.5 Screen Management System (SMS).The term "Auditorium Security Messages" (ASMs) in SMPTE 430-6-2007corresponds to the term "standardized security messages" in this specification.The combination of the terms "standardized security messages" and "operationalmessages" are referred to in this specification as Intra-Theater Messages (ITMs).DCI Digital Cinema System Specification v.1.2 Page 122
Message Category1. SMS to SMStartSuiteStopSuiteCPLValidateKDMValidateTimeAdj2. IMB SM to SPBBadRequestGetTimeGetEventListGetEventIDQuerySPBLEKeyLoadLEKeyQueryIDLEKeyQueryAllLEKeyPurgeIDLEKeyPurgeAllFunctionSuggested operational messages Commands SM toestablish TLS sessions with remote SPBsCommands SM to terminate TLS sessions with remote SPBsRequests that the SM perform a CPL validation checkRequests that the SM perform a KDM validation checkAdjusts time at SM (within annual limits)Standardized security messagesSpecial "Response"indicating failure to process a "Request"Requests a snapshot of a remote SPBs absolute (UTC) timeRequests a list of logged event IDs for a specified time windowRequests the return of a specified logged event by IDInterrogates a remote SPB as to health and statusDelivers one or more LE keys to a Link Decryptor Block (LDB)Interrogates the LDB for the presence of a specified LE keyRequests a report of all active LE keys by key IDCommands the LDB to purge a specified LE keyCommands the LDB to purge all active LE keysTable 15: Intra-theater Message (ITM) Request-Response Pairs (RRP)9.4.5.3. Intra-Theater Message DetailsThis section provides particular requirements for specific messages.9.4.5.3.1. Screen Management System to Security Manager Messages[This section left blank intentionally.]9.4.5.3.2. Image Media Block SM to Remote SPB MessagesImage Media Block to remote SPB messages are category 2 Intra-TheaterMessages of Table 15. Standardized security messages are defined in SMPTE 430-6-2007 D-Cinema Operations - Auditorium Security Messages. The followingrequirements are in addition to those in SMPTE 430-6-2007:• SPB security devices shall be designed to meet the round trip latencyrequirements suggested in SMPTE 430-6-2007.• A remote SPB shall respond to the QuerySPB command (i.e., the“ResponderBusy” general response element code “3” is not permitted). Tomeet this requirement, vendors are encouraged to assure that adequatemessage processing periods exist between this and other RRP commandtypes.• The following QuerySPB “security alert” conditions are defined, and shall bereported per status code “2” of this command’s response:1. SPB perimeter open (e.g., service access door).2. Marriage broken event detected (see Section 9.4.3.6.1. NormativeRequirements: Projector Secure Processing Block).3. Conditions that require replacement of the SPB (i.e., equipmenttampering or failure) per Section 9.6.1.3. Digital Rights Management:Security Entity (SE) Equipment.• The LEKeyLoad command “expire time” shall be 6 hours per Section 9.4.3.5.DCI Digital Cinema System Specification v.1.2 Page 123
Page 1 and 2:
Digital Cinema Initiatives, LLCDigi
Page 3 and 4:
Table of Contents1. OVERVIEW 151.1.
Page 5 and 6:
5.2.2. Packaging Fundamental Requir
Page 8 and 9:
7.5.5.1. Introduction..............
Page 10 and 11:
9.4.2.5. Screen Management System (
Page 12 and 13:
Table of FiguresFigure 1: System Ov
Page 14 and 15:
THIS PAGE LEFT BLANK INTENTIONALLYD
Page 16 and 17:
equirements for encrypting the esse
Page 18 and 19:
• This document specifies a basel
Page 20 and 21:
DCI Digital Cinema System Specifica
Page 22 and 23:
2.1.1. Major System Concepts2.1.1.1
Page 24 and 25:
2.1.1.8. ReelsFeature films have be
Page 26 and 27:
Metadata within the DCDM provides a
Page 28 and 29:
3.2.1.6. Transfer FunctionThe CIE X
Page 30 and 31:
The information, as shown in Table
Page 32 and 33:
AES Pair#/Ch# Channel # Label / Nam
Page 34 and 35:
3.3.4. File Format3.3.4.1. GeneralT
Page 36 and 37:
3.4.3. Timed Text Concepts and Requ
Page 38 and 39:
Page 40 and 41:
• All decoders shall decode each
Page 42 and 43:
Page 44 and 45:
5.2.2.3. InteroperableThe Packaging
Page 46 and 47:
Figure 6: Example Show PlaylistThe
Page 48 and 49:
Length (Value Length), followed by
Page 50 and 51:
which it was stopped or paused. It
Page 52 and 53:
5.3.4.2. Frame BoundariesThe Audio
Page 54 and 55:
• Rating• Aspect Ratio• Image
Page 56 and 57:
• Annotation Text parameter (opti
Page 58 and 59:
Page 60 and 61:
7.2.3.1. ReliabilityA key part of t
Page 62 and 63:
• Country• Rating• Aspect Rat
Page 64 and 65:
facility, while the system is in op
Page 66 and 67:
Exhibitor and the Distributor, data
Page 68 and 69:
7.5.2.2. Ingest InterfacesExcept fo
Page 70 and 71:
(channels) * hours * 60 min/hour *
Page 72 and 73: 7.5.4.2.4. UnpackagingAny packaged
Page 74 and 75: 7.5.6. Audio System7.5.6.1. Introdu
Page 76 and 77: made up of Theater System devices a
Page 78 and 79: DCI Digital Cinema System Specifica
Page 80 and 81: 8.2.2.3. Alternative ContentThe pro
Page 82 and 83: With the projector turned off or wi
Page 84 and 85: Image ParametersNominal(Projected I
Page 86 and 87: Input Code Values Output Chromatici
Page 88 and 89: 8.4. Projector Interfaces8.4.1. Int
Page 90 and 91: • Lens Shift Up / Down• Lamp Mo
Page 92 and 93: • Essence Encryption and Cryptogr
Page 94 and 95: content keys and Trusted Device Lis
Page 96 and 97: Figure 14: Digital Cinema Security
Page 98 and 99: Figure 15 presents the two fundamen
Page 100 and 101: DCI Digital Cinema System Specifica
Page 102 and 103: 9.4.2.3. Media Blocks (MBs)The term
Page 104 and 105: which TLS-based authentication alon
Page 106 and 107: working with the security infrastru
Page 108 and 109: Figure 18: Show Playback Overview9.
Page 110 and 111: a. Playout shall be fully supported
Page 112 and 113: 9.4.5. Intra-Theater Communications
Page 114 and 115: 4. Projector SPB designs shall not
Page 116 and 117: the event, and zero all Critical Se
Page 118 and 119: window) shall be UTC.Security Manag
Page 120 and 121: . The SM shall independently authen
Page 124 and 125: Functions of the Security Manager (
Page 126 and 127: Note: DCI reserves the right, at so
Page 128 and 129: • Is required to survive camcorde
Page 130 and 131: • Log Data - Security event infor
Page 132 and 133: using the GetEventList and GetEvent
Page 134 and 135: failure) per Section 9.6.1.3 Digita
Page 136 and 137: • Secure Silicon -Sensitive data
Page 138 and 139: secure silicon chip, input/output s
Page 140 and 141: FIPS 140-2 level 3 devices provide
Page 142 and 143: to the appropriate Section 9.4.5.2.
Page 144 and 145: those under the control of the Secu
Page 146 and 147: Security Managers (SMs) other than
Page 148 and 149: The above RSA asymmetric protection
Page 150 and 151: THIS PAGE LEFT BLANK INTENTIONALLYD
Page 152 and 153: CPRL Acronym for Component Position
Page 154 and 155: LTCMain TitlesMBMDMEMetadataMTBFMXF
Page 156: TDLTimed TextTLMTLSTMSTrack FileUDP
show all

DCI Specs - Digital Cinema Initiatives

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?