scope:

This Recommendation develops a virtual machine-based security platform for renewable service and content protection (SCP) under Internet protocol television (IPTV) services. This includes the virtual machine architecture and the mechanism for organizing virtual machine-related components such as SCP client, terminal client (embedded SCP) and media client. The following items are addressed:

a) Behaviour of SCP client: An SCP client has its pre-determined legitimate behaviour of execution. An SCP virtual machine (VM) should monitor the behaviour of an SCP client in run-time. This allows the system to prevent malicious code or unintentional code. Moreover, an SCP VM may support a reporting ability in case of illegal situations.

b) Protection of SCP client: An SCP client code should not be seen by any unauthorized person or device during transmission. In addition, an SCP client code may be converted to an unreadable form even while loading a process.

c) Integration with embedded SCP: An embedded SCP should obey the policy of the SCP client, including storing and retransmission.

d) Integration with media client: A media client should deliver every event that has occurred in the device to the SCP VM. Deleting or modifying an event or its parameter is not allowed.