|
|
|
|
|
Hi Jason SKB netflix manager requested as follows. After FXN write the Security Review document Please review directly with Netflix and register with PDM by this week Thank you YK.Jung image.png (19,949 bytes) |
|
|
Hi YK, I've checked it with AML Taiwan. 1. In our other previous project, we didn't do security review. And we've chosen "Opt out" in security review in this project and submit this result to Netflix. I am not sure if we can change it. Do you know why SKB want to perform Security Review ? 2. There is a Provisioning description in the document. As you know, our project launched from ATV9. At that time, our key manager is unifykey, not provisioning (As far as I know, Intek uses Provisioning) We/AML don't know how to answer it Provisioning question. We/AML guess if we said this product don't support Provisioning. Netflix will ask the question, "can we support in-field provisioning" We've consulted AML Taiwan. This is a huge task. We need to upgrade at least 3 version to complete in-field provisioning. It will affect Netflix's schedule. Thanks, Jason |
|
|
Hi Jason >> Do you know why SKB want to perform Security Review ? Netflix has asked SKB to register a security review doc. So SKB requested each manufacturers. About Provisioning Like you said, Smart3 started with ATV9. Please check with AML / netflix if an exemption regarding provisioning is possible. Or please let me know if there is anything I need to check clearly. And there are some things that need to be checked about Provisioning. >> Netflix will ask the question, "can we support in-field provisioning" >> This is a huge task. >> We need to upgrade at least 3 version to complete in-field provisioning. 1) Please explain the 3 versions ( I want to know rough task flow ) 2) if it's risk, let me know that 3) I want to know if it's practically possible or not Thank you YK.Jung |
|
|
Hi Jason About Provisioning If there is anything confirmed with AML or Netflix regarding provisioning Please let me know. Currently, SKB is asking that there should be no delay in the Netflix deployment schedule. Thank you YK.Jung |
|
|
Hi Jason The response I received from SKB netflix manager is as follows. >> Is there any CAS in the product? If so, which CAS? Digicap CAS Are the devices certified by CAS providers or reviewed by 3rd parties (e.g., Riscure)? This device is certified by the Digicap CAS provider. >> Are there any applications running as root? All applications are fully compatible with Android systems and security policies(selinux). If this answer is not enough, please contact me again Thank you YK.Jung |
|
|
HI YK, We hasn't submitted the document, but we discussed security review topic on PDM with security engineer, then the security review engineer has approved it Please refer to the attachment. Thanks, Jason comment.png (20,348 bytes) security_review_pdm.png (16,540 bytes) |
|
|
Hi Jason This ticket is closed because it has been approved Thank you for your support YK.Jung |
- yk.jung ( (ALTech) Younkwang Jung ) developer
.png)
