SGX and protected video path

[sasha_n_]

Hi,

Does SGX platform provides mechanisms for protected video path (for DRM purposes)? So basically code in enclave decrypting protected media samples, then passing them securely to trusted decoders for rendering.

Thanks,

Sasha 

[Anusha_K_Intel]

Hi,

Yes,  SGX can be used as a DRM protection scheme.Recently, Intel researchers have demonstrated the DRM protection capability of Intel SGX by designing a prototype Secure Video Conferencing (SVC) application , which protects the video path by using SGX and Intel’s Protected Audio Video Path (PAVP).

The detailed process is given below in the section 3.3 and 3.3.2 

https://software.intel.com/en-us/articles/using-innovative-instructions-to-create-trustworthy-software-solutions

[sasha_n_]

Thanks Anusha, have a few followup questions:

- I see that codecs are included in enclave, are those "secure" codecs part of the platform / PAVP framework?

- Is there any PAVP API available so that our enclave code can utilize protected output feature as demonstrated in 3.3.2 ?

- Which platforms support PAVP ?

- Does PAVP also provide info / logic for handling connected output devices, for example: allow output only if HDCP 2.2+ is engaged over HDMI cable etc.

Kind regards,

Sasha

[Anusha_K_Intel · Accepted solution]

Hi,

Protected Audio Video Path (PAVP) protects the data path within a computer during video playback (e.g., Blu-ray discs). It is supported by newer chipsets (e.g. Intel G45) and operating systems (since Windows Vista).

Please refer to the below link.

https://software.intel.com/en-us/forums/intel-software-guard-extensions-intel-sgx/topic/676149