InDigital Video Broadcasting (DVB), theCommon Interface (also calledDVB-CI) is a technology which allows decryption of pay TV channels. Pay TV stations want to choose which encryption method to use. The Common Interface allows TV manufacturers to support many different pay TV stations, by allowing to plug in exchangeableconditional-access modules (CAM) for various encryption schemes.
The Common Interface is the connection between the TV tuner (TV orset-top box) and the module that decrypts the TV signal (CAM). This module, in turn, then accepts the pay-to-view subscriber card, which contains the access keys and permissions.
The host (TV orset-top box) is responsible for tuning to pay TV channels and demodulation of theRF signal, while CAM is responsible for CA descrambling. The Common Interface allows them to communicate with each other. All Common Interface equipment must comply with the EN 50221-1997 standard. This is a defined standard that enables the addition of a CAM in aDTV receiver to adapt it to different kinds ofcryptography. The EN 50221 specification allows many types of modules but only the CAM has found popularity because of thepay TV market. Indeed, one of Digital Video Broadcasting's main strengths is the option of implementing the required conditional access capability on the Common Interface.
This allows broadcasters to use modules containing solutions from different suppliers, thus increasing their choice of anti-piracy options.
 | This sectiondoes notcite anysources. Please helpimprove this section byadding citations to reliable sources. Unsourced material may be challenged andremoved.(December 2024) (Learn how and when to remove this message) |
ADVB receiver may have one or two slots implementing the Common Interface (CI). The CI uses theconditional-access module (PCMCIA) connector and conforms to theCommon Scrambling Algorithm (CSA), the normative that specifies that such a receiver must be able to accept DES (Data Encryption Standard) keys in intervals of some milliseconds, and use them to decode private channels according to a specific algorithm.
Those algorithms are proprietary to individual suppliers. Each one uses their own algorithms and there is no defined standard for them.
As the fullMPEG-2 transport data stream comes out of the demodulator, and error correction units, theDTV Receiver sends it through the card plugged into the Common Interface, before it is processed by the MPEG demultiplexer in the receiver. If several CI cards are present, the MPEG transport data stream will be passed sequentially through all these cards.
An embedded CAM may not physically exist, as it may be in CPU software. In such a case, only thesmart card reader normally in the CAM is fitted and not the PCMCIA type CI slots.
Even if the Common Interface has been created to resolve cryptography issues, it can have other functions using other types of modules such asWeb Browser,iDTV (Interactive Television), and so forth.
In Europe, DVB-CI is obligatory in all iDTV terminals.
The host sends an encryptedMPEG transport stream to theCAM and the CAM sends the decrypted transport stream back to the host. The CAM often contains a smart-card reader.
| This sectiondoes notcite anysources. Please helpimprove this section byadding citations to reliable sources. Unsourced material may be challenged andremoved.(December 2024) (Learn how and when to remove this message) |
The normative DVB-CI standard EN 50221 was defined in 1997 byCENELEC, the European Committee for Electrotechnical Standardization.
According to the Common Interface scheme:
The specification defines only two aspects, two logical interfaces to be included on the same physical interface. The first interface is theMPEG-2 transport stream. The link and physical layers are defined in this specification and the higher layers are defined in theMPEG-2 specifications. The second interface, the command interface, carries commands between the host (receiver) and the module.
The specification does not define the operation or functionality of a conditional access system application on the module. The applications that may be performed by a module communicating across the interface are not limited to conditional access or to those described in this specification. More than one module may be supported concurrently.
The common interface shares many features of thePC Card standard (PCMCIA). By reducing the widths of the addressand data buses it has been possible to include a bi-directional parallel transport stream interface.
The transport stream format is specified by IEC 13818-1 and is theMPEG 2 TS format.
In addition there is a command interface for communication between the host and module.
This communication is in the form of a layered protocol stack which allows the host and module to shareresources. For example, the module can request the current date and time from the host. To use this service, module shall open a session to the "Date-Time" resource provided by host. Or, module can ask the host to display a message on the TV screen and can then read keypresses from the host remote control. This is done by opening a session to host's Man-Machine Interface (MMI) Resource. This resource also allows the CAM to request and receive PIN numbers.
Some of defined by DVB-CI resources are de facto optional. For example, the host could contain a modem for communication over a telephone line allowing the CAM to implement pay-per-view. This can be done by opening a session to host's Low-Speed Communication (LSC) resource (assuming that the host announced the availability of this resource). The Host Control resource (allowing CAM to request force-tuned) also may be absent in some of hosts.
The definitely mandatory resources are Resource Manager, Application Information and Conditional Access Support ones. First two of these three are necessary for initial handshaking between CAM and its host, while the CA Support resource is necessary for descrambling the selected channels.
The Command Interface is extensible and there are several specification documents available which describe these extensions (e.g. ETSI TS 101 699). However, these extensions have often not proved popular with manufacturers.
CI+ (also known asCI Plus orCommon Interface Plus) is a specification that extends the originalDVB Common Interface standard (DVB-CI, sometimes referred to as DVB-CIv1). The main addition introduced byCI+ is a form of copy protection between a CI+conditional-access module (referenced by the spec asCICAM, whileCI+ CAM seems to be a more precise abbreviation) and the television receiver (host). CI+ is backward-compatible with DVB-CIv1. Old television receivers which have a CIv1 CI-slot can be used with CI+ CAM and vice versa, but for viewing only those of TV programs which are not marked as CI+ protected.
CI+ specification has been developed by consumer electronic firmsPanasonic,Philips,Samsung andSony, as well as pay-TV technology companySmarDTV andfablesschip makerNeotion.[1]
A first draft of the specification was put up for review in January 2008 as V1.00 CI Plus Specification.The establishment of the Trusted Authority has been completed[2] and an official security certification lab appointed.[3]
In 2009, versions 1.1 and 1.2 were released. The 1.2 version became the first one which was massively deployed.The main features added to the original DVB-CI standard by CI+ v1.2 are:
The spec does not state explicitly about each feature if it is mandatory or optional. The mandatory feature (as it is actually the main raison d'être of CI+) is Content Control. The optional feature of v1.2 version is "PVR Resource"; this can be concluded from the fact that it does not appear in newer CI+ spec versions.
In 2011, version 1.3 of the CI+ spec was released (later replaced with CI+ v1.3.1 and then withCI+ v1.3.2, still commonly referenced as CI+ v1.3). The main features added by CI+ v1.3 to CI+ v1.2 are:
With the development of CI+, the standard has now come under the umbrella of the DVB standards organization.[4]
In 2014, DVB releasedETSI TS 103 205 V1.1.1 specification, defining what is often referred as "CI+ v1.4".The main features added by ETSI TS 103 205 to CI+ v1.3 are:
In 2018, ETSI published the second generation DVB-CI standard (often referred to as CI+ v2.0):TS 103 605 V1.1.1.[5] The main evolution of this version is to add USB as physical layer to replace the aging PC Card interface.
CI+ Host and CAM test tool development, testing and certification is carried out byResillion (formerly Eurofins Digital Testing, formerly Digital TV Labs) in the UK (Bristol) and China (Shenzen).
By making use of certificates issued by a trusted certification authority, a secure authenticated channel (SAC) is formed between a CI+ CAM and television receiver (host). This SAC is used to generate a shared key, unique per a CAM-host pair, which protects from unauthorized copying the content marked in the associated URI (Usage Rules Info) as a content which needs to be re-encrypted on its way from CAM to host after removal the original CA or DRM scrambling (in the original CI standard, decrypted content could be sent over thePCMCIA interface only in unscrambled form).
CI+ standard allows revocation of compromised CI+ hosts. This is done by broadcasting a Service Operator Certificate Revocation List (SOCRL) in aDSM-CC data carousel. If CAM detects that its host's ID, model or brand is listed in SOCRL (and is not listed in optional SOCWL – Service Operator Certificate White List), the CAM must refuse descrambling the content marked in CI+ URI as protected. A SOCRL is created and signed by the CI+ Root-of-Trust on request of a Service Operator. To prevent replay of out-of-dated SOCRL and SOCWL, they must be broadcast in combination with RSD (Revocation Signaling Data) table which specifies the last versions of SOCRL and SOCWL and their location in the DSM-CC data carousel. The RSD also must be signed.
A CI+ 1.3 compliant host device must implementMHEG-5 interactive TV engine to manage navigation of the user within an interactive TV application, using its device remote control.[6] Support ofMHP orHbbTV interactive TV engines are also optional. CI+ 1.4 hosts may optionally support theMHEG-5 interactive TV engine.[7][failed verification]
_f%25C3%25BCr_Smartcards_von_Kabel_Deutschland_(DVB-C)_2014.jpg)
The following operators have currently rolled out CI+ support or plan to do so:
In July 2009 the largest cable operator in the Netherlands,Ziggo, announced that it would support CI+ basedIntegrated Digital Television sets (IDTVs) actively.[14][15][16] In September 2009 the first batch of 15,000SMiT (Shenzhen State Micro Technology Co., Ltd.) CI+ CAMs was offered by various Dutch retailers, followed in October 2009 by the first batch of Neotion CAMs.[17] Other supporters included Canal+,[18] and conditional access companies Irdeto[19] and Conax.[20] In 2009, NDS (nowCisco) announced that it would supportKabel Deutschland to deploy CI+ to its customers.[21] In 2014, CI+ CAMs withCiscoVideoGuard CA, manufactured bySMiT were deployed atD-Smart, KDG (Kabel Deutschland), KBW,Sky Deutschland, andTele Columbus.
| This sectiondoes notcite anysources. Please helpimprove this section byadding citations to reliable sources. Unsourced material may be challenged andremoved.(December 2024) (Learn how and when to remove this message) |
A newETSI working group will be working on Embedded Common Interface (ECI).