A practical secure and efficient enterprise digital rights management mechanism suitable for mobile environment

Chang, Chin‐Chen; Chang, Shih-Chang; Yang, Jen-Ho

doi:10.1002/sec.647

Cited by 22 publications

(37 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this section, we first present in brief the overview of Chang et al . 's scheme and then point out the security weaknesses on their scheme. The notations listed in Table are used for describing Chang et al .…”

Section: Review and Cryptanalysis Of Chang Et Al's Schemementioning

confidence: 99%

“…Chang et al . introduced an anonymous identity‐based authentication scheme for E‐DRM system to erase the certificate management and to protect user's anonymity. Their scheme has the merits of low computation and user's anonymity.…”

Section: Introductionmentioning

confidence: 99%

“…In Section 2, we discuss some basic mathematical preliminaries, which are helpful for describing and analyzing Chang et al . 's scheme and our proposed scheme. In Section 3, we present in brief the review of Chang et al .…”

Section: Introductionmentioning

confidence: 99%

“…In Section 3, we present in brief the review of Chang et al . 's scheme and then point out the security weaknesses of their scheme. In Section 4, we present a dynamic identity‐based remote user authentication mechanism for DRM system for the mobile device.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

An anonymous and secure biometric‐based enterprise digital rights management system for mobile environment

Das

Mishra

Mukhopadhyay

2015

Security Comm Networks

View full text Add to dashboard Cite

Internet-based content distribution facilitates an efficient platform to sell the digital content to the remote users. However, the digital content can be easily copied and redistributed over the network, which causes huge loss to the right holders. On the contrary, the digital rights management (DRM) systems have been introduced in order to regulate authorized content distribution. Enterprise DRM (E-DRM) system is an application of DRM technology, which aims to prevent illegal access of data in an enterprise. Earlier works on E-DRM do not address anonymity, which may lead to identity theft. Recently, Chang et al. proposed an efficient E-DRM mechanism. Their scheme provides greater efficiency and protects anonymity. Unfortunately, we identify that their scheme does not resist the insider attack and password-guessing attack. In addition, Chang et al.'s scheme has some design flaws in the authorization phase. We then point out the requirements of E-DRM system and present the cryptanalysis of Chang et al.'s scheme. In order to remedy the security weaknesses found in Chang et al.'s scheme, we aim to present a secure and efficient E-DRM scheme. The proposed scheme supports the authorized content key distribution and satisfies the desirable security attributes. Additionally, our scheme offers low communication and computation overheads and user's anonymity as well. Through the rigorous formal and informal security analyses, we show that our scheme is secure against possible known attacks. Furthermore, the simulation results for the formal security analysis using the widely accepted Automated Validation of Internet Security Protocols and Applications tool ensure that our scheme is also secure.

show abstract

Section: Review and Cryptanalysis Of Chang Et Al's Schemementioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An anonymous and secure biometric‐based enterprise digital rights management system for mobile environment

Das

Mishra

Mukhopadhyay

2015

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…For example, Das et al [14], Chang et al [15], Chen [16], and Chang et al [17] presented secure Enterprise Digital Rights Management (E-DRM) schemes. In some other studies, security issues are studied for peer-topeer music distribution on mobile DRM devices [18,19].…”

Section: Related Work 21 Existing Drm Systemsmentioning

confidence: 99%

EDU-DRM: A digital rights management (DRM) system for K-12 education

2018

View full text Add to dashboard Cite

Abstract. The technological achievements in digital publishing have made paperless education possible even in K-12 education. Aside from high bandwidth distribution infrastructure, the main di culties of digital publishing are preserving personal information and protecting the rights of copyrighted contents. Although specially designed Digital Rights Management (DRM) systems can be used to control distribution and usage of private and/or copyrighted contents in K-12 education, dealing with a large number of bursty concurrent access requests and changing the access rights of a large number of students from one content class to another at the end of each education period make the problem di erent from existing ones. This paper introduces a new DRM system, called EDU-DRM, which includes a novel bit based authorization approach to reduce the processing time for authorization requests and automatize the access right adjustments with prede ned rules for K-12 education. During the study, an experimental framework is designed using Apache Bench to analyze the proposed approach and evaluate it. The system is compared with XML based authorization approach and the results are presented in the paper.

show abstract

Construction of a secure and efficient content key distribution framework for DRM systems

Mishra,

Obaidat,

Kasi

et al. 2023

Int J Communication

View full text Add to dashboard Cite

SummaryRecent advances in networks and digital technology have provided many user‐friendly environments such as telemedicine, e‐banking, e‐content, and e‐commerce. It has revolutionized the multimedia industry and made it accessible anytime and anywhere. However, its limitation also appeared in digital content piracy, which is more prevalent nowadays. Digital rights management (DRM) systems were developed to control the illegal spreading of digital content. Protocols are being developed to enable effective and secure communication in DRM systems. As security and efficiency are essential parameters, the approach should be two birds with one stone; i.e., the protocol should achieve efficiency and security together. Our investigation identified that secure mechanisms either have increased computation/communication overhead or fail to meet specified security criteria when discussing efficient content key delivery mechanisms. So, an efficient protocol design with the right security attributes is required. We have worked on designing a content delivery mechanism keeping in mind the desirable attribute of security and without decreasing overhead. The suggested solution targets “two birds with one stone.” We proved the security of the scheme in the random oracle model. We verify the security against active attacks using the formal simulation tool AVISPA. Detailed analysis is performed for the evaluation of computational and communication overhead. The comparative study is also presented to understand the gains in efficiency and security.

show abstract

A practical secure and efficient enterprise digital rights management mechanism suitable for mobile environment

Cited by 22 publications

References 12 publications

An anonymous and secure biometric‐based enterprise digital rights management system for mobile environment

An anonymous and secure biometric‐based enterprise digital rights management system for mobile environment

EDU-DRM: A digital rights management (DRM) system for K-12 education

Construction of a secure and efficient content key distribution framework for DRM systems

Contact Info

Product

Resources

About