ChinaDRM安全评估常见问题解答
2017-03-23 23:53:34   来源:    点击:

针对ChinaDRM安全评估服务咨询遇到的问题,实验室整理了常见问题解答,具体如下。
1、ChinaDRM安全评估是什么? What is ChinaDRM security assessment? 
ChinaDRM安全评估是ChinaDRM实验室面向媒体行业DRM产业链各方提供的第三方安全评估与认证服务,ChinaDRM实验室开展的安全评估服务已得到好莱坞等国际主流内容提供商的认可。
ChinaDRM security assessment is the third-party security assessment and certification service offered by ChinaDRM Lab to DRM industrial chain for media sector, and the security assessment service provided by ChinaDRM Lab has been widely recognized by the international mainstream content providers such as Hollywood Studios.
 
2、ChinaDRM安全评估的范围是什么?What is the scope of ChinaDRM security assessment?
ChinaDRM安全评估的范围包括数字电视(有线、地面、卫星)、IPTV、互联网电视、手机电视、互联网视频、家庭影院等应用场景,以及智能机顶盒、一体机、个人电脑、手机、平板电脑等智能终端;主要包括智能终端芯片安全评估、ChinaDRM解决方案兼容性评估、集成ChinaDRM功能的智能终端产品安全评估、已实施的ChinaDRM系统的在线运行评估、视频数字水印系统安全评估以及定制化安全评估服务等。
The scope of ChinaDRM security assessment covers DTV(cable, terrestrial and satellite), IPTV, Internet TV, mobile TV, Internet video, home theater and other application scenarios as well as intelligent STB,integrated receiver, PC, mobile phone, tablet PC and other intelligent terminals; and mainly include intelligent terminal chip security assessment,ChinaDRM solution compatibility assessment, ChinaDRM function enabled intelligent terminal products security assessment, deployed ChinaDRM system acceptance assessment, video digital watermarking system security assessment and customized security assessment service, etc. 
 
3、ChinaDRM安全评估的依据是什么?What is the basis for ChinaDRM security assessment?
ChinaDRM安全评估依据《GY/T 277-2014互联网电视数字版权管理技术规范》、以及ChinaDRM实验室发布的《ChinaDRM兼容性要求和健壮性要求》。
ChinaDRM security assessment is based on “GY/T277-2014 Technical specification of digital rights management for internet television” as well as “ChinaDRM compliance rules and robustness rules”issued by ChinaDRM Lab.
 
4、什么是《ChinaDRM兼容性要求和健壮性要求》?What are “ChinaDRM compliance rules and robustness rules”?
《ChinaDRM兼容性要求和健壮性要求》是由ChinaDRM实验室发布的一系列ChinaDRM端到端兼容性要求和健壮性要求,主要包括:ChinaDRM服务端兼容性要求、ChinaDRM客户端兼容性要求、ChinaDRM服务端健壮性要求、ChinaDRM客户端健壮性要求;上述兼容性要求和健壮性要求已与好莱坞等国际主流内容提供商达成一致,并作为ChinaDRM安全评估的主要依据之一。“
ChinaDRM compliance rules and robustness rules”are a series of ChinaDRM end-to-end compliance and robustness requirements released by ChinaDRM Lab, mainly including: ChinaDRM server compatibility requirements, ChinaDRM client compatibility requirements, ChinaDRM server robustness requirements and ChinaDRM client robustness requirements; mutual agreement has been reached with Hollywood Studio and other mainstream international content providers with respect to aforesaid compatibility androbustness requirements, which are also used as one of the main bases for ChinaDRM security assessment.
 
5、《ChinaDRM兼容性要求和健壮性要求》的范围是什么?What is the scope of “ChinaDRMcompatibility and robustness requirements”?
《ChinaDRM兼容性要求和健壮性要求》是针对ChinaDRM端到端产业化实施各环节的技术要求,涵盖了针对ChinaDRM服务端的技术要求和集成了ChinaDRM功能的智能终端(包括智能机顶盒、一体机、个人电脑、手机、平板电脑等)的技术要求。
“ChinaDRM compliance rules and robustness rules” are the technical requirements applied to every phase in ChinaDRM end-to-end industrialized implementation, which cover the technical requirements for ChianDRM server and ChinaDRM enabled intelligent terminals (including STB,smart TV, PC, mobile phone and tablet PC, etc.).
 
6、ChinaDRM安全性级别是什么意思? What is the meaning of ChinaDRM profile?
根据集成了ChinaDRM功能的智能终端的安全性,ChinaDRM实验室将智能终端分为三个等级:软件安全级别、硬件安全级别、增强硬件安全级别。软件安全级别是指部分或全部ChinaDRM核心功能都运行在软件安全执行环境中;硬件安全级别是指全部ChinaDRM核心功能都运行在硬件全执行环境中;增强硬件安全级别是指在硬件安全级别的基础上,智能终端还应能够抵抗一定程度的侧信道攻击,如果ChinaDRM服务端不支持水印技术,终端还应在硬件安全执行环境中集成基于会话的盗版追踪水印技术。
Based on the security of ChinaDRM enabled intelligent terminals, ChinaDRM Lab categorizes intelligent terminals into three security levels: software profile, hardware profile and Enhanced Profile. Software profile refers to the running of all or part of ChinaDRM core functions in software security execution environment;hardware profile refers to the running of all ChinaDRM core functions in hardware execution environment; enhanced profile refers to that, in addition to hardware security, intelligent terminals are able to resist certain side-channel attacks, and, if ChinaDRM server does not support watermarking technique, terminals also shall integrate session based watermarking technique in hardware security execution environment.
 
7、增强硬件安全级别涉及的水印技术一定要在终端中集成么?Watermarking technique involved in enhanced profile must be integrated in terminals?
增强硬件安全级别须支持基于会话的盗版追踪水印技术,但并不强制水印技术一定要在终端实施或在服务端实施,只要求实际运行的ChinaDRM系统应具有基于会话的盗版追踪水印功能。
Enhanced profile must support session based  watermarking technique, but it is not compulsory to deploy watermarking technique in terminals or in server, except for the only requirement that an actually running ChinaDRM system must have session based watermarking piracy tracking ability.
 
8、ChinaDRM安全评估服务如何申请?How to apply ChinaDRM security assessmentservice?
(1)希望申请ChinaDRM安全评估服务的组织或机构可向ChinaDRM实验室官方邮箱chinadrmlab@chinadrmlab.org发邮件申请评估;        
Any Organizations or institutions desiring to apply ChinaDRM security assessment service may send an application to the official email box of ChianDRM Lab at chinadrmlab@chinadrmlab.org;
(2)实验室将提供《ChinaDRM安全评估服务保密协议》、《ChinaDRM安全评估服务申请表》、《ChinaDRM安全评估服务协议》等协议文档;
ChinaDRM Lab will provide you with “NDA for ChinaDRM Security Assessment Service” “ChinaDRM Security Service Application Form”, “ChinaDRM Security Assessment Service Agreement” and other documents upon its receipt or your application;
(3)上述协议文档签署完毕后,双方进行沟通交流,启动安全评估服务;
Upon the signing of aforesaid agreement documents, both parties start mutual communication and the security assessmentservice;
(4)安全评估结束后,实验室将出具正式的安全评估报告。
Upon the closing of security assessment,ChinaDRM will issue you a formal security assessment report.
 
9、通过什么渠道可以查询到ChinaDRM安全评估与认证产品信息?Where can we find the productsinformation which have passed the ChinaDRM security assessment and certification?
 ChinaDRM实验室官方网站:www.chinadrmlab.org、官方微信:ChinaDRM实验室可查询到官方发布的ChinaDRM安全评估与认证产品信息,上述查询渠道是ChinaDRM安全评估与认证结果查询的唯一官方渠道。
You can find the products information which have passed the ChinaDRM security assessment and certification by visiting ChinaDRMLab official website: www.chinadrmlab.org, or ChinaDRM Lab official WechatID: ChinaDRM实验室, which are the only official channel to get the information.

相关热词搜索: