eSmartLock is a USB dongle integrating antipiracy with Digital rights management functions. Exhibited at the CER 2005 event Brussels Belgium

1. Yiannis Hatzopoulos
Scientific Engineering Services
A USB CardJava Dongle offering
•Anti-Piracy protection
•Digital Rights Management
•eCommerce security
•Secure conditional access to local
and remote computational resources
•Complex licensing schemes support
CER2005-Brussels
Recipient of the eGateOpen
2004 Jury Award,
sponsored by Sun Micro, ST, Axalto

2. eSmartLock
USB
CardJava
Dongle
Anti-Piracy module
Secure eCommerce Token
ERP/ CRM connectivity
TimeStamp authenticator
Lease / Pay-as-you-use
Digital Right Management
support
Crypto web access
Secure CD / DVD access
Secure local Save/Load
operation support
Multi – User
Concurrency Licensing
administrator
eSignature generator and
authenticator
Key Distribution Server
on LANs and WANs
eSmartLock API service delivery

3. Certificate
AntiPiracy
Protection
ERP/CRM eBilling
Server
eSignature
Validation
Protected
CD/ DVD
access Internet Crypto
Access
Soft Product Key / Credits / DRM
eSessioning
Encrypted Storage
on Hard Disk
Trusted Third
Party – VPN service
Trusted Third
Party – VPN service
+
eSmartLock Functional
Components

4. eGate K(R)
eGate
K(R)
eGate eGate
K(R)
PC
to Card
authentication
Card to PC
authentication
Card to Card
authentication
eSmartLock mutual authentication patterns
Client
Server
R
R
R

5. Renv
Envelope Key generation
Card RSA Public Key
Renv( TicketKey)
Ticket Key
3DES, Renv
Ticket key Encrypted
Channel
eSmartLock Ticket Key generation
MS CryptoAPI
RSAREF2 API

6. Challenge
CardID Soft Product Key Data MAC
Soft Product Key
It only decodes on a specific card
Credit Update Operation
Soft Product Key Data
Credit Credit UpdateData
New
Authenticated TimeStamp
Generic DRM Command Set
Soft Product Key Data
On Card Parser
PC based DRM parser ( option sets / keysets / commands etc)
On PC Parser
Vendor’s Order Processing dept
Compiles
DRM request from Customer
eSmartLock Soft Product Key Processing pattern
PersistentStorageonCard
DRM Command

7. eSmartLock
Digital Rights
Management
Business rules
Card controlled
Individualization
Rights revocation
Rights renewal
Secure delivery path
Trial
Leasing
Pay-per-use
Rights Transfer
Conventional licencing
Flexible Multi-User
Licensing

8. Produces RSA
encrypted PK
[CardID,eSession
Key,K(eSessionKey),
K(TimeStamp)]
eSession Request:
Encrypts K[Random pad,
CardID, eSession parameters]
Performs RSA Private
Key decryption,
authenticates with K
=> eSessionKey,
TimeStamp
Internet
Secure
Channel
eSessionKey
TimeStamp
eSmartLock
eSmartLock eSessioning
Content
Access
Server/ ERP

9. eGate eGate
eGate
Object of Interest
eSmartLock
Public Keys
ESmartLock
Client i
Access
Control
List
Authenticate Identity - Submit PK
Authorized Services
ESmartLock
Server
CA - KDC
ESmartLock
Client A
Client PK Registration
eGate
ESmartLock
Client B
B’s Public Key
A’sPublicKey
VPN
eSignature
Checks
Key Distribution
Center function
Store PK
safely
eSmartLock Client – Server
Trusted Third Party Service
Extranet

10. N Max Active Concurrent Licenses allowed
eSmartLockServereSmartLockClients
eSmartLock concurrency licensing
Dynamic
License ID
storage
eSmartLock
K User Population

11. 010010100100010100101001000001
100101000101001010100101010011
101001010101001010100101010010
101010101010010101001010101001
010101010100101010101001010101
111110100101010111110100101011
Secure Hash Algorithm
Encrypt with
RSA Private Key
Signature
010010100100010100101001000001
100101000101001010100101010011
101001010101001010100101010010
101010101010010101001010101001
010101010100101010101001010101
111110100101010111110100101011
Signature
Secure Hash
Algorithm Decrypt with
RSA Public Key
ComparisonThe RSA Public key is imported
from an eSmartLock KDC
eSignature Creation eSignature Verification
eSmartLock eSignature support
Sourcedata

12. eSmartLock antiPiracy functionality
•Mutual authentication pattern PC-Card
•PC – Card Communication based on Tickets
•onCard attack detector
•Secure access onCard parameter file
•Byte buffer unlocker on PC memory
•Executable code on-Card repository: exe and java based
•Debugger detection – interrupt vector redirection
•Time-trapping to detect tracing attacks
•Runtime code decryption layers
•Use of dumb threads
•External code calls on Card