Changsong Zhu Email & Phone Number

Cupertino, Ca

San Jose, Ca, 95131

Evaluated the security mechanism offered by third party SoC vendor: including the secure boot, chain of the trust, DRM implementation, OS Harden (IMA), Trust Zone and Trust Video Path to confirm them would meet the security requirements of Verizon STB. Co-worked with third party security engineers to develop Production Signing Scripts and Device Identification Package to support the factory mass productionBuilt OpenSSL RSA engine through the H/W Crypto interfaces provided by the chip vendor to set up secure two-way SSL authentication b/w STB and Video Web service. Evaluated the TRS tools for mobile application for resistance to debugging, reverse engineering, tampering etc.

Santa Clara, Ca, Us, 95054

Designed and implemented the secure boot, chain of trust for the Marvell multimedia SoC which provided the high standard system security for Google’s Chromecast and Google HomeAs SW developer, communicated with ASIC engineer and architect for the specific requirements, designed and implemented the Nargra secure boot flow, reviewed the design with the CA vendor, co-worked with third party security evaluation team Riscure to harden the source code and resist the force injection and side attack. Passed the Nagra certification in less than two year with only two chip tapouts which helped the company enter the STB market in Europe. Integrated the Playready with Marvell AMP media framework and Chrome CDM, developed CA and TA applications across the Trust Boundary to ensure the content security throughout the content lifecycle from the remote server to display

Shanghai City, China

Research and design file format by which to delivery DRM related information, including content Id, audio and video content key id , scramble algorithm and encrypted content keys for HLS and MPEG/DASH. Design DRM framework to support various DRM schemes, including Intel self-design DRM scheme, Intel-Insider and other commercial popular DRM schemes.Design the communication protocol between DRM media service server and client player, including HTTPS certification chain setup, API paramter format etc. Integrate the low level firmware into Intel Media SoC and enable it for streaming live content and VOD content.

Shanghai City, China

Assess security and performance metrics for DRM and security implementations on Marvell Armada Media SoCs and provide requirements and guideline for the ASIC engineer. Cooperate with ASIC Engineer for SoC’s hardware cryptographic accelerator design and performance profile and tuning. Design and review security architecture, secure boot flow and online firmware upgrade for Marvell Armada SoCs. Design the secure key provision mechanism and factory work flow for mass production. Implement typical commercial DRM/CA schemes for various applications, including WM-DRM, DivX-DRM, AACS, CSS and Marlin. Involve the overall multimedia presentation engine software architecture design.

Shanghai City, China

Master'S Degree, Automation Engineer Technology

Double Bachelor Degree, Me | Mba