Implementasi Licensed Content Protection sebagai Fitur Keamanan E-book pada Platform Distribusi Digital

Abdullah, Razan (2026) Implementasi Licensed Content Protection sebagai Fitur Keamanan E-book pada Platform Distribusi Digital. Other thesis, Institut Teknologi Sepuluh Nopember.

[thumbnail of 5025221035-Undergraduate_Thesis.pdf] Text
5025221035-Undergraduate_Thesis.pdf - Accepted Version
Restricted to Repository staff only

Download (8MB) | Request a copy

Abstract

Distribusi e-book menghadapi kendala dalam melindungi hak kekayaan intelektual karena e-book mudah disalin dan disebarluaskan. ITS Press memerlukan sistem yang memastikan konten hanya dapat diakses oleh pemilik yang sah. Licensed Content Protection (LCP) menjawab kebutuhan ini, tetapi penggunaan komersialnya mensyaratkan biaya lisensi tahunan kepada EDRLab selaku Certificate Authority. Penelitian ini membangun platform distribusi e-book ITSPress yang terintegrasi dengan LCP, memodifikasi lapisan sertifikasinya menggunakan sertifikat mandiri, lalu membandingkan konfigurasi standar dengan konfigurasi termodifikasi dari aspek keamanan dan trade-off implementasi.
Sistem dibangun dengan arsitektur three-tier yang mengintegrasikan backend Go dengan framework Gin, LCP Server, LSD Server, basis data PostgreSQL, dan web reader berbasis browser. Konten dienkripsi dengan AES-256-CBC, user key diturunkan dari passphrase melalui SHA-256, dan setiap lisensi ditandatangani dengan RSA-SHA256. Pengujian dilakukan pada ranah fungsional, keamanan, dan kompatibilitas terhadap kedua konfigurasi.
Hasil menunjukkan konfigurasi termodifikasi memberikan tingkat proteksi yang setara dengan konfigurasi standar, karena operasi kriptografisnya identik dan perbedaan hanya terletak pada lapisan kepercayaan sertifikat. Lisensi termodifikasi dapat langsung dibaca pada web browser tanpa bergantung pada CA EDRLab beserta biaya tahunannya, dengan konsekuensi kehilangan dukungan format EPUB dan kompatibilitas Thorium Reader. Sertifikat mandiri terbukti menjadi alternatif yang layak dengan trade-off yang terdokumentasi, sehingga dapat menjadi referensi teknis bagi pengembangan sistem serupa.
=======================================================================================================================================
E-book distribution faces an obstacle in protecting intellectual property rights because e-books are easily copied and shared. ITS Press needs a system that ensures content can only be accessed by its rightful owner. Licensed Content Protection (LCP) answers this need, but commercial use requires a yearly license fee to EDRLab as the Certificate Authority. This research builds the ITSPress e-book distribution platform integrated with LCP, modifies its certification layer using a self-signed certificate, and compares the standard configuration with the modified configuration in terms of security and implementation trade-offs.
The system is built with a three-tier architecture integrating a Go backend, LCP Server, LSD Server, PostgreSQL, and a browser-based web reader. Content is encrypted with AES-256-CBC, the user key is derived through SHA-256, and licenses are signed with RSA-SHA256. Testing covers functional, security, and compatibility aspects.
The results show that the modified configuration provides a level of protection equivalent to the standard configuration, since their cryptographic operations are identical and the difference lies only in the certificate trust layer. The modified configuration gains direct in-browser reading without dependence on the EDRLab CA and its yearly fee, at the cost of losing EPUB format support and Thorium Reader compatibility. The self-signed certificate proves to be a viable alternative with documented trade-offs.

Item Type: Thesis (Other)
Uncontrolled Keywords: Distribusi digital, E-book, Enkripsi AES-256, Licensed Content Protection, Sertifikat X.509 mandiri, AES-256 encryption, Digital distribution, E-book, Licensed Content Protection, Self-signed X.509 certificate.
Subjects: Q Science > QA Mathematics > QA76.9.A25 Computer security. Digital forensic. Data encryption (Computer science)
Divisions: Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Informatics Engineering > 55201-(S1) Undergraduate Thesis
Depositing User: Razan Abdullah
Date Deposited: 26 Jul 2026 02:08
Last Modified: 26 Jul 2026 02:08
URI: http://repository.its.ac.id/id/eprint/138001

Actions (login required)

View Item View Item