DAA vs. DRM

[mythusmage]

Anonymous Trust

The above is the publically available part of a longer news article on Direct Anonymous Attestation (DAA). A method of veryifing that a file or bit of code is yours, without you having to identify yourself. Or without having to use a specific bit of software to make use of your application or utility.

Think of this being applied to PDFs. With DAA you could send in a confirmation code and get a 'key' to unlock the PDF, without having to identify yourself. Carrying this a bit further, you need not know the confirmation code, or the key in order to use either. At no time would any other party know who you are.

Obviously this works best with set ups where each user has a distinct, secure environment.

The full article can also be found in the August Scientific American

 

[Padril]

The short article mentions this is based on a hardware solution.

Having the security based on hardware will turn most people off using it. Just look at the arguments about a software solution.

Also the article mentioned that this is based on a ten year old idea. I prefer an even older idea 'Trust'. There will always be pirates no matter what you do to protect the content. Most DRM systems IMO just inconvenience the average user without detering or stopping the determined pirate. Why not just release your content as is, without any DRM.

 

[D_Sinclair]

Well, having not read the article, this basically sounds like a new angle on an old and failed trick. Back in the early 80's, they used dongles that plugged into the parallel or serial port as a means of software copyright protection. Obviously, since we aren't using the technique today, it was a failure.

 

[reanjr]

Anonymous Trust

The above is the publically available part of a longer news article on Direct Anonymous Attestation (DAA). A method of veryifing that a file or bit of code is yours, without you having to identify yourself. Or without having to use a specific bit of software to make use of your application or utility.

Think of this being applied to PDFs. With DAA you could send in a confirmation code and get a 'key' to unlock the PDF, without having to identify yourself. Carrying this a bit further, you need not know the confirmation code, or the key in order to use either. At no time would any other party know who you are.

Obviously this works best with set ups where each user has a distinct, secure environment.

The full article can also be found in the August Scientific American

It's really a moot point. Microsoft, Apple, Intel, AMD and most other companies are behind DRM. Using DRM, one could also create anonymity with an added layer of trust (or at least anonymity to the destination point, if not the layer in between). There's really no call for DAA.

 

[trancejeremy]

Ah yes, the "dongle".

I had 2 games that used one of those for my old Commodore-64. One was a gizmo that plugged into the joystick port. You had to have it plugged in to run the game. In theory, anyway. In practice, it ran without it in the port.

The other thing was not something you plugged in, but a lens. The game (Elite, ironically enough) would display 2 letters, scrambled up. You would put the lens on the monitor, and it would un-scramble the letters. Okay, but, the letters were always the same. ED

More annoying were the code-wheels, where you had to answer a question posed by the program. And the manual word look ups.

 

[madelf]

Well, having not read the article, this basically sounds like a new angle on an old and failed trick. Back in the early 80's, they used dongles that plugged into the parallel or serial port as a means of software copyright protection. Obviously, since we aren't using the technique today, it was a failure.

The dongle is still alive and well actually.

I have one plugged into my computer right now to allow me to use my new CADD software.

 

[rpghost]

The dongle is still alive and well actually.

I have one plugged into my computer right now to allow me to use my new CADD software.

Believe it or not, my wife's new embrodering machine came with a doggle. USB based now. Ick. I hate that.

I think some high end costly software and some markets not indended for computer geeks use these.

They SHOULD be dead.

James

 

[rpghost]

(opps double post)

 

[Fast Learner]

It's really a moot point. Microsoft, Apple, Intel, AMD and most other companies are behind DRM. Using DRM, one could also create anonymity with an added layer of trust (or at least anonymity to the destination point, if not the layer in between). There's really no call for DAA.

Except, as the article points out, DAA is sponsored by the Trusted Computing Group, whose primary members are AMD, Hewlett-Packard, IBM, Intel Corporation, Microsoft, Sony Corporation, and Sun Microsystems, Inc.

Their other members include ARM, ATI Technologies Inc., Dell, Inc., Fujitsu Limited, Fujitsu Siemens Computers, Hitachi, Ltd., Juniper Networks, Lexmark International, Motorola Inc., National Semiconductor, Network Associates, Nokia, NVIDIA, Philips, Phoenix, RSA Security, Inc., Samsung Electronics Co., Seagate Technology, Sygate Technologies, Inc., Symantec, Symbian Ltd, Texas Instruments, Transmeta Corporation, Trend Micro, VeriSign, Inc., VIA Technologies, Inc., Vodafone Group Services LTD, American Megatrends, Inc., and Toshiba Corporation.

You know, the vast majority of the software and hardware companies. And I snipped a bunch more.

 

[Brother Shatterstone]

Except, as the article points out, snip.

I agree, why put all your eggs in one basket? You support both until one dominates the market, either via copywrite or simply by market share.