On the security of an novel protocol for downloadable CAS

Hanjae Jeong; Seungjoo Kim; Dongho Won

doi:10.1145/2184751.2184831

On the security of an novel protocol for downloadable CAS

Hanjae Jeong, Seungjoo Kim, Dongho Won

School of Cybersecurity

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

In 2008, Jeong et al. proposed a novel protocol for a downloadable conditional access system (DCAS). They claimed that their protocol provided mutual authentication and secure downloading of conditional access (CA) software. However we show that their protocol has a fatal weakness such that it is insecure to the impersonation attack. So, we propose the improved protocol based on their protocol. Moreover, we hope that by showing this design flaw, similar mistakes can be avoided in future designs.

Original language	English
Title of host publication	Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12
DOIs	https://doi.org/10.1145/2184751.2184831
Publication status	Published - 2012
Event	6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12 - Kuala Lumpur, Malaysia Duration: 2012 Feb 20 → 2012 Feb 22

Publication series

Name	Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12

Other

Other	6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12
Country/Territory	Malaysia
City	Kuala Lumpur
Period	12/2/20 → 12/2/22

Keywords

Conditional access
DCAS protocol
Downloadable CAS
Impersonation attack

ASJC Scopus subject areas

Computer Networks and Communications
Information Systems

Access to Document

10.1145/2184751.2184831

Cite this

Jeong, H., Kim, S., & Won, D. (2012). On the security of an novel protocol for downloadable CAS. In Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12 [65] (Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12). https://doi.org/10.1145/2184751.2184831

On the security of an novel protocol for downloadable CAS. / Jeong, Hanjae; Kim, Seungjoo; Won, Dongho.

Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12. 2012. 65 (Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Jeong, H, Kim, S & Won, D 2012, On the security of an novel protocol for downloadable CAS. in Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12., 65, Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12, 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12, Kuala Lumpur, Malaysia, 12/2/20. https://doi.org/10.1145/2184751.2184831

@inproceedings{90a590f50d954bc1ae532b0ce71945ad,

title = "On the security of an novel protocol for downloadable CAS",

abstract = "In 2008, Jeong et al. proposed a novel protocol for a downloadable conditional access system (DCAS). They claimed that their protocol provided mutual authentication and secure downloading of conditional access (CA) software. However we show that their protocol has a fatal weakness such that it is insecure to the impersonation attack. So, we propose the improved protocol based on their protocol. Moreover, we hope that by showing this design flaw, similar mistakes can be avoided in future designs.",

keywords = "Conditional access, DCAS protocol, Downloadable CAS, Impersonation attack",

author = "Hanjae Jeong and Seungjoo Kim and Dongho Won",

year = "2012",

doi = "10.1145/2184751.2184831",

language = "English",

isbn = "9781450311724",

series = "Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12",

booktitle = "Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12",

note = "6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12 ; Conference date: 20-02-2012 Through 22-02-2012",

}

TY - GEN

T1 - On the security of an novel protocol for downloadable CAS

AU - Jeong, Hanjae

AU - Kim, Seungjoo

AU - Won, Dongho

PY - 2012

Y1 - 2012

N2 - In 2008, Jeong et al. proposed a novel protocol for a downloadable conditional access system (DCAS). They claimed that their protocol provided mutual authentication and secure downloading of conditional access (CA) software. However we show that their protocol has a fatal weakness such that it is insecure to the impersonation attack. So, we propose the improved protocol based on their protocol. Moreover, we hope that by showing this design flaw, similar mistakes can be avoided in future designs.

AB - In 2008, Jeong et al. proposed a novel protocol for a downloadable conditional access system (DCAS). They claimed that their protocol provided mutual authentication and secure downloading of conditional access (CA) software. However we show that their protocol has a fatal weakness such that it is insecure to the impersonation attack. So, we propose the improved protocol based on their protocol. Moreover, we hope that by showing this design flaw, similar mistakes can be avoided in future designs.

KW - Conditional access

KW - DCAS protocol

KW - Downloadable CAS

KW - Impersonation attack

UR - http://www.scopus.com/inward/record.url?scp=84860514505&partnerID=8YFLogxK

U2 - 10.1145/2184751.2184831

DO - 10.1145/2184751.2184831

M3 - Conference contribution

AN - SCOPUS:84860514505

SN - 9781450311724

T3 - Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12

BT - Proceedings of the 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12

T2 - 6th International Conference on Ubiquitous Information Management and Communication, ICUIMC'12

Y2 - 20 February 2012 through 22 February 2012

ER -

On the security of an novel protocol for downloadable CAS

Abstract

Publication series

Other

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this