Secure Digital Music Initiative

Last updated

Secure Digital Music Initiative (SDMI) was a forum formed in late 1998, [1] composed of more than 200 IT, consumer electronics, security technology, ISP and recording industry companies, as well as authors, composers and publishing rightsholders (represented by CISAC and BIEM representatives, mainly from SGAE/SDAE (Gonzalo Mora Velarde and José Manuel Macarro), GEMA (Alexander Wolf und Thomas Kummer-Hardt), SACEM/SDRM (Aline Jelen, Catherine Champarnaud, Laurent Lemasson), MCPS/PRS (Mark Isherwood), ASCAP, BMI (Edward Oshanani), and SODRAC), ostensibly with the purpose of developing technology and rights management systems specifications that will protect once developed and installed, the playing, storing, distributing and performing of digital music.

Contents

Specifically, the goals of the SDMI were to provide consumers with convenient access to music online and in new digital distribution systems, to apply digital rights management restrictions to the work of artists, and to promote the development of new music-related business and technologies. SDMI was a direct response to the widespread success of the MP3 file format. [1]

According to their web site, SDMI existed to develop “technology specifications that protect the playing, storing, and distributing of digital music such that a new market for digital music may emerge.” It would have been used by DataPlay, an optical disc format that at the time was cheaper and had higher capacity than memory cards, and by SD cards.

Method

The strategy for the SDMI group involved two stages. The first was to implement a secure digital watermarking scheme. This would allow music to be tagged with a secure watermark that was hard to remove from the source audio without damaging it. The second was to ensure that SDMI-compliant players would not play SDMI tagged music that was not authorized for that device. The reasoning was that even if the files were distributed they could not be played as the device would detect the music was not authorized to be played on it.

Challenges

A key part of the strategy included demonstrating that the watermarking could not be detected by third parties and as a result be removed from the music. As part of the process of ratifying the technology the SDMI announced a challenge with their Open Letter to the Digital Community on September 6, 2000. The letter invited hackers, cryptologists and others to detect and remove the watermark from some example pieces of music. Several groups became involved, including a group led by Ed Felten. Felten's group claimed to have cracked the scheme and successfully removed the watermark according to the automated judging software supplied by the SDMI. The SDMI disagreed, noting that there was a requirement that the files lose no sound quality and the automated system did not take this into account.

When Felten attempted to publish an academic paper describing the analysis of the SDMI scheme (having opted out of the confidentiality requirement that would have allowed him to claim $10,000 in prize money [2] ) the SDMI, RIAA and Verance Corporation threatened legal action under the auspices of the DMCA. The controversy about stifling of academic research resonated through scientific and cryptography circles until his paper was eventually published in 2001 [3] after assurances from the United States Department of Justice that the DMCA would not be used to stifle legitimate research.

Demise

On October 15, 1999, Eric Scheirer, later a digital music analyst for Forrester Research, wrote an editorial for MP3.com titled "The End of SDMI" [4] which declared that the group's true goal to fold the technology industry into an alliance that would guarantee the record industry's near monopoly over musical content had failed. It drew a rebuttal [5] from the president of the SDMI, Dr. Leonardo Chiariglione. The SDMI has been inactive since May 18, 2001. [6]

Chiariglione stepped down as SDMI's director in 2001, and later explained the reason for SDMI's halt after his departure as follows:

Unfortunately it turned out that none of the technologies submitted could satisfy the requirements set out at the beginning, e.g. of being unnoticeable by so-called "golden ears". SDMI has then decided to suspend its work and wait for progress in technology. [1]

See also

Related Research Articles

<span class="mw-page-title-main">Moving Picture Experts Group</span> Alliance of working groups to set standards for multimedia coding

The Moving Picture Experts Group (MPEG) is an alliance of working groups established jointly by ISO and IEC that sets standards for media coding, including compression coding of audio, video, graphics, and genomic data; and transmission and file formats for various applications. Together with JPEG, MPEG is organized under ISO/IEC JTC 1/SC 29 – Coding of audio, picture, multimedia and hypermedia information.

MPEG-1 Audio Layer II or MPEG-2 Audio Layer II is a lossy audio compression format defined by ISO/IEC 11172-3 alongside MPEG-1 Audio Layer I and MPEG-1 Audio Layer III (MP3). While MP3 is much more popular for PC and Internet applications, MP2 remains a dominant standard for audio broadcasting.

Copy protection, also known as content protection, copy prevention and copy restriction, describes measures to enforce copyright by preventing the reproduction of software, films, music, and other media.

<span class="mw-page-title-main">Edward Felten</span> American computer scientist (born 1963)

Edward William Felten is the Robert E. Kahn Professor of Computer Science and Public Affairs at Princeton University, where he was also the director of the Center for Information Technology Policy from 2007 to 2015 and from 2017 to 2019. On November 4, 2010, he was named Chief Technologist for the Federal Trade Commission, a position he officially assumed January 3, 2011. On May 11, 2015, he was named the Deputy U.S. Chief Technology Officer. In 2018, he was nominated to and began a term as Board Member of PCLOB.

Ripping is extracting all or parts of digital content from a container. Originally, it meant to rip music out of Commodore 64 games. Later, the term was used to mean to extract WAV or MP3 format files from digital audio CDs, but got applied as well to extract the contents of any media, including DVD and Blu-ray discs, and video game sprites.

A digital watermark is a kind of marker covertly embedded in a noise-tolerant signal such as audio, video or image data. It is typically used to identify ownership of the copyright of such signal. "Watermarking" is the process of hiding digital information in a carrier signal; the hidden information should, but does not need to, contain a relation to the carrier signal. Digital watermarks may be used to verify the authenticity or integrity of the carrier signal or to show the identity of its owners. It is prominently used for tracing copyright infringements and for banknote authentication.

<span class="mw-page-title-main">MediaMax CD-3</span>

MediaMax CD-3 is a software package created by SunnComm which was sold as a form of copy protection for compact discs. It was used by the record label RCA Records/BMG, and targets both Microsoft Windows and Mac OS X. Elected officials and computer security experts regard the software as a form of malware since its purpose is to intercept and inhibit normal computer operation without the user's authorization. MediaMax received media attention in late 2005 in fallout from the Sony XCP copy protection scandal.

<span class="mw-page-title-main">Extended Copy Protection</span>

Extended Copy Protection (XCP) is a software package developed by the British company First 4 Internet and sold as a copy protection or digital rights management (DRM) scheme for Compact Discs. It was used on some CDs distributed by Sony BMG and sparked the 2005 Sony BMG CD copy protection scandal; in that context it is also known as the Sony rootkit.

The Broadcast Protection Discussion Group (BPDG) is a working group of content providers, television broadcasters, consumer electronics manufacturers, information technology companies, interested individuals and consumer activists. The group was formed specifically for the purpose of evaluating the suitability of the broadcast flag for preventing unauthorized redistribution and to determine whether there was substantial support for the broadcast flag. The group completed its mission with the release of the BPDG Report.

<span class="mw-page-title-main">Leonardo Chiariglione</span> Italian engineer and inventor

Leonardo Chiariglione is an Italian engineer who has led the development of international technical standards for digital media. In particular, he was the chairman of the Moving Picture Experts Group (MPEG) from 1988 to 2020, which he co-founded together with Hiroshi Yasuda of NTT.

Video fingerprinting or video hashing are a class of dimension reduction techniques in which a system identifies, extracts, and then summarizes characteristic

<span class="mw-page-title-main">Online Copyright Infringement Liability Limitation Act</span> 1998 U.S. federal law

The Online Copyright Infringement Liability Limitation Act (OCILLA) is United States federal law that creates a conditional 'safe harbor' for online service providers (OSP), a group which includes Internet service providers (ISP) and other Internet intermediaries, by shielding them for their own acts of direct copyright infringement as well as shielding them from potential secondary liability for the infringing acts of others. OCILLA was passed as a part of the 1998 Digital Millennium Copyright Act (DMCA) and is sometimes referred to as the "Safe Harbor" provision or as "DMCA 512" because it added Section 512 to Title 17 of the United States Code. By exempting Internet intermediaries from copyright infringement liability provided they follow certain rules, OCILLA attempts to strike a balance between the competing interests of copyright owners and digital users.

The WIPO Copyright and Performances and Phonograms Treaties Implementation Act, is a part of the Digital Millennium Copyright Act (DMCA), a 1998 U.S. law. It has two major portions, Section 102, which implements the requirements of the WIPO Copyright Treaty, and Section 103, which arguably provides additional protection against the circumvention of copy prevention systems and prohibits the removal of copyright management information.

Digital rights management (DRM) is the management of legal access to digital content. Various tools or technological protection measures (TPM) like access control technologies, can restrict the use of proprietary hardware and copyrighted works. DRM technologies govern the use, modification and distribution of copyrighted works and of systems that enforce these policies within devices. DRM technologies include licensing agreements and encryption.

The Electronic Frontier Foundation (EFF) is an international non-profit advocacy and legal organization based in the United States.

<span class="mw-page-title-main">Digital Millennium Copyright Act</span> United States copyright law

The Digital Millennium Copyright Act (DMCA) is a 1998 United States copyright law that implements two 1996 treaties of the World Intellectual Property Organization (WIPO). It criminalizes production and dissemination of technology, devices, or services intended to circumvent measures that control access to copyrighted works. It also criminalizes the act of circumventing an access control, whether or not there is actual infringement of copyright itself. In addition, the DMCA heightens the penalties for copyright infringement on the Internet. Passed on October 12, 1998, by a unanimous vote in the United States Senate and signed into law by President Bill Clinton on October 28, 1998, the DMCA amended Title 17 of the United States Code to extend the reach of copyright, while limiting the liability of the providers of online services for copyright infringement by their users.

Notice and take down is a process operated by online hosts in response to court orders or allegations that content is illegal. Content is removed by the host following notice. Notice and take down is widely operated in relation to copyright infringement, as well as for libel and other illegal content. In United States and European Union law, notice and takedown is mandated as part of limited liability, or safe harbour, provisions for online hosts. As a condition for limited liability online hosts must expeditiously remove or disable access to content they host when they are notified of the alleged illegality.

<span class="mw-page-title-main">Cinavia</span> Analog watermarking and steganography system

Cinavia, originally called Verance Copy Management System for Audiovisual Content (VCMS/AV), is an analog watermarking and steganography system under development by Verance since 1999, and released in 2010. In conjunction with the existing Advanced Access Content System (AACS) digital rights management (DRM) inclusion of Cinavia watermarking detection support became mandatory for all consumer Blu-ray Disc players from 2012.

<span class="mw-page-title-main">Niels Provos</span> German-American computer scientist and software engineer

Niels Provos is a German-American researcher in security engineering, malware, and cryptography. He received a PhD in computer science from the University of Michigan. From 2003 to 2018, he worked at Google as a Distinguished Engineer on security for Google. In 2018, he left Google to join Stripe as its new head of security. In 2022, Provos left Stripe and joined Lacework as head of Security Efficacy.

<i>Capitol Records, Inc. v. MP3Tunes, LLC</i> 2011 US legal case

Capitol Records, Inc. v. MP3tunes, LLC is a 2011 case from the United States District Court for the Southern District of New York concerning copyright infringement and the Digital Millennium Copyright Act (DMCA). In the case, EMI Music Group and fourteen other record companies claimed copyright infringement against MP3tunes, which provides online music storage lockers, and MP3tunes's founder, Michael Robertson. In a decision that has ramifications for the future of online locker services, the court held that MP3tunes qualifies for safe harbor protection under the DMCA. However, the court found MP3tunes to still be liable for contributory copyright infringement in this case due to its failure to remove infringing songs after receiving takedown notices. The court also held that Robertson is liable for songs he personally copied from unauthorized websites.

References

  1. 1 2 3 Leonardo Chiariglione: Riding the Media Bits. Opening content protection Archived 2009-03-12 at the Wayback Machine chiariglione.org, 2003
  2. "An Open Letter to the Digital Community". Archived from the original on 24 September 2002. Retrieved 17 June 2023.
  3. Craver, Scott A.; Wu, Min; Liu, Bede; Stubbenfield, Adam; Swartzlander, Ben; Wallach, Dan S.; Dean, Drew; Felton, Edward W. (August 13–17, 2001). "Reading Between the Lines: Lessons from the SDMI Challenge" (PDF). Proceedings of the 10th USENIX Security Symposium. 10th USENIX Security Symposium. Washington, D.C., USA: USENIX Association. Archived from the original (PDF) on 21 May 2022. Retrieved 12 July 2022.{{cite conference}}: CS1 maint: date and year (link)
  4. Eric Scheirer: The End of SDMI. MP3.com Oct. 15, 1999. Copy at the Internet Archive
  5. Leonardo Chiariglione: SDMI Checks In. MP3.com, November 3, 1999. Copy at the Internet Archive
  6. "SDMI - What's New". SDMI. Retrieved 24 July 2006.