Barco DP2K C User And Installation Manual page 96

ICMP-X
Barco signed
X.509 device certificate
BARCO-ICMP(+)-0123456789.pem
Image 7–17
Trusted Device List (TDL)
The Goal of the TDL is to maintain timely and accurate information on participating auditoriums so
that participating subscribers can obtain information needed to issue KDMs. The TDL has several
data sources: Device manufacturers, Exhibitors, Deployment Entities, Integrators, Service
Providers (interacting with Exhibitors), regional authorities and Support.
Public Key Infrastructure (PKI)
PKI is a framework for creating a secure method for exchanging information based on public key
cryptography. The foundation of a PKI is the certificate authority (CA), which issues digital
certificates that authenticate the identity of organizations and individuals over a public system such
as the Internet. The certificates are also used to sign messages, which ensures that messages
have not been tampered with.
*.pem
Privacy-enhanced Electronic Mail. File format used to distribute digital signed certificates. Base64
encoded DER certificate, enclosed between "———BEGIN CERTIFICATE———" and "———END
CERTIFICATE———"
Key Delivery Message (KDM)
The security key for each movie is delivered in a unique KDM for each digital cinema server. The
security key is encrypted within the KDM, which means that the delivery of a KDM to the wrong
server or wrong location will not work, and thus such errors cannot compromise the security of the
movie. The KDM is a small file, and is typically emailed to the exhibitor. To create the correct set of
KDMs for a site requires knowledge of the digital certificate in the projection system´s media block.
96 R5905752 /16 DP2K C
(PKI CA)
QR
Communicator,
Commander,
Web Commander.
Device
manufacturer
TDL
Content distributors (Key supplier)
.pem
0123456789
Studios
KDM DCP
ICMP(+)