Optical DNA

• US 8,788,848 B2
• Filed: 03/22/2007
• Issued: 07/22/2014
• Est. Priority Date: 03/22/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Kirovski, Darko, Colon, Estrada T., Lewis, David L., Powell, Thomas Patrick, Vijaywargiay, Deepak
• Primary Examiner(s): SHAW, BRIAN F
• Application Number:
  US11/689,741
• Publication Number:
  US 20080273435A1
• Time in Patent Office: 2,679 Days
• Field of Search: 713/193, 713/176, 382/100, 380/277, 369/275.5, 714/723, 714/6
• US Class Current: 713/193
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00123 the record carrier being identified by recognising some of its unique characteristics, e.g. a unique defect pattern serving as a physical signature of the record carrier
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The claimed subject matter relates to architectures and/or mechanisms that can facilitate issuing, embedding and verification of an optical DNA (o-DNA) signature. A first mechanism is provided for obtaining a set of manufacturing errors inherent in an optical media instance. These errors can be encoded into the o-DNA that can be cryptographically signed with a private key, then embedded into the source optical media instance. A second mechanism is provided that can decrypt the o-DNA with a public key and compare the authenticated errors to the observed errors to ascertain whether the optical media instance is authentic as opposed to a forgery or counterfeit.

Claims

1. A system comprising:

an examination component configured to;

receive intrinsic error data for an optical media instance that has a plurality of extant manufacturing errors, wherein the plurality of extant manufacturing errors cause illegal codewords to be read from the optical media instance and the intrinsic error data identifies positions where the illegal codewords are read from the optical media instance; and

construct an error fingerprint of the optical media instance by encoding at least some of the positions where the illegal codewords are read from the optical media instance, the error fingerprint being constructed using an error model reflecting probabilities of reading the illegal codewords from the optical media instance;

an issuing component configured to generate a signature for the optical media instance based at least in part upon the error fingerprint constructed using the error model, the error fingerprint serving as a certificate of authenticity of the optical media instance when verified or vouched for by the signature;

an impression component configured to embed, in the optical media instance, the signature that is based at least in part upon the error fingerprint constructed using the error model; and

one or more hardware processors configured to implement the examination component, the issuing component, and the impression component,

wherein, to generate the signature, the issuing component is further configured to;

concatenate the error fingerprint with a tag to obtain a concatenation of the error fingerprint and the tag, and

cryptographically sign a hash of the concatenation of the error fingerprint and the tag.

2. The system of claim 1, wherein the tag comprises a product ID associated with content stored in the optical media instance.

3. The system of claim 1, wherein the tag comprises an expiration date of the signature.

4. The system of claim 3, wherein the issuing component is further configured to cryptographically sign the hash with a private key to generate the signature, the private key having an associated public key usable to verify the signature.

5. The system of claim 1, wherein the tag specifies a geographic region.

6. The system of claim 1, wherein the intrinsic error data used by the examination component to construct the error fingerprint is readable by conventional consumer-grade media players.

7. The system of claim 1, wherein the optical media instance is a Compact Disc or a Digital Versatile Disc.

8. A method performed using one or more hardware processors executing instructions, the method comprising:

receiving error data reflecting manufacturing errors on an optical media instance, wherein the manufacturing errors cause illegal codewords to be read from the optical media instance and the error data identifies error positions where the illegal codewords are read from the optical media instance;

constructing an error fingerprint of the optical media instance by encoding at least some of the error positions where the illegal codewords are read from the optical media instance, the error fingerprint being constructed using an error model reflecting probabilities associated with reading the illegal codewords from the optical media instance;

concatenating the error fingerprint with a tag to obtain a concatenation of the error fingerprint and the tag;

hashing the concatenation of the error fingerprint with the tag to obtain a hash of the concatenation of the error fingerprint and the tag;

cryptographically signing the hash of the concatenation of the error fingerprint with the tag to generate a signature for the optical media instance, the signature serving to authenticate the optical media instance; and

embedding the signature in the optical media instance.

9. The optical media instance produced by the method of claim 8 having the embedded signature thereon.

10. The method of claim 8, wherein the signature is embedded in the optical media instance as part of a post-production process.

11. The method of claim 8, further comprising generating the error model by modeling a random variable representing a distance between signal floor changes relative to a master clock cycle of an optical media reader.

12. The method of claim 8, wherein the tag specifies an expiration date associated with a digital certificate.

13. The method of claim 8 wherein the tag identifies a product identification associated with data included on the optical media instance.

14. The method of claim 8, wherein the error fingerprint is constructed such that the error fingerprint reflects only individual manufacturing errors within a given distance of other individual manufacturing errors and at least some further manufacturing errors on the optical media instance are excluded from the error fingerprint.

15. The optical media instance produced by the method of claim 14 having the embedded signature thereon, wherein the embedded signature identifies only the individual manufacturing errors that are within the given distance of the other individual manufacturing errors and does not identify the at least some further manufacturing errors on the optical media instance are excluded from the error fingerprint.

16. A computer-readable memory device or storage device comprising instructions which, when executed by a processor, cause the processor to perform acts comprising:

receiving error data reflecting manufacturing errors in an optical media instance, wherein the manufacturing errors cause illegal codewords to be read from the optical media instance and the error data identifies error positions where the illegal codewords are read from the optical media instance;

constructing an error fingerprint of the optical media instance by encoding at least some of the error positions where the illegal codewords are read from the optical media instance, the error fingerprint being constructed using an error model reflecting probabilities of reading the illegal codewords from the optical media instance;

concatenating the error fingerprint with a tag to obtain a concatenation of the error fingerprint and the tag;

hashing the concatenation of the error fingerprint and the tag to obtain a hash of the concatenation of the error fingerprint and the tag;

generating a signature for the optical media instance by cryptographically signing the hash of the concatenation of the error fingerprint and the tag, wherein the error fingerprint serves as a certificate of authenticity verified or vouched for by the signature; and

embedding the signature in the optical media instance.

17. The computer-readable memory device or storage device of claim 16, wherein:

the optical media instance comprises a plurality of first symbols encoded in a first alphabet that are converted by a codec to a plurality of second symbols of a second alphabet, and

the act of receiving the error data comprises receiving at least some error positions where certain symbols that are not part of the first alphabet are read from the optical media instance.

18. The computer-readable memory device or storage device of claim 17, wherein:

the plurality of first symbols of the first alphabet are 16-bit symbols and the plurality of second symbols of the second alphabet are 8-bit symbols, and

the act of constructing the error fingerprint comprises encoding an individual error position that does not include any of the 16-bit symbols of the first alphabet.

19. The computer-readable memory device or storage device of claim 17, wherein the act of receiving the error data comprises reading the illegal codewords using a non-return to zero, inverted technique.

20. The computer-readable memory device or storage device of claim 16, the acts further comprising:

signing the hash of the concatenation of the error fingerprint and the tag with a private key to generate the signature, the private key being associated with an issuer of the optical media instance.

21. A system comprising:

a hardware processor; and

one or more computer-readable storage devices comprising computer-executable instructions which, when executed by the hardware processor, cause the hardware processor to;

receive error data reflecting manufacturing errors in an optical media instance, wherein the manufacturing errors cause illegal codewords to be read from the optical media instance and the error data identifies error positions where the illegal codewords are read from the optical media instance;

construct an error fingerprint of the optical media instance by encoding at least some of the error positions where the illegal codewords are read from the optical media instance, the error fingerprint being constructed using an error model reflecting probabilities associated with reading the illegal codewords from the optical media instance;

concatenate the error fingerprint with a tag to obtain a concatenation of the error fingerprint and the tag;

perform a hashing operation on the concatenation of the error fingerprint and the tag to obtain a hash of the concatenation of the error fingerprint and the tag;

generate a signature for the optical media instance by cryptographically signing the hash of the concatenation of the error fingerprint and the tag,

the signature serving to authenticate the optical media instance; and

embed the signature in the optical media instance.

22. The system of claim 21, wherein the computer-executable instructions further cause the hardware processor to construct the error fingerprint such that the error fingerprint reflects only individual manufacturing errors within a given distance of other individual manufacturing errors and at least some further manufacturing errors on the optical media instance are excluded from the error fingerprint.

23. The system of claim 21, wherein the computer-executable instructions further cause the hardware processor to compress the at least some of the error positions where the illegal codewords are read from the optical media instance to construct the error fingerprint.