Integrated Media Block (IMB)

Early digital installations kept the decoder in a separate server box and sent decoded picture to the projector over a cable. That cable carried decrypted content, which the security model did not love, and it was a link that could be tapped.

The integrated media block moved the whole job inside the projector's sealed enclosure. The package is decrypted and decoded within the tamper-evident housing, and nothing leaves it as a clean signal. Open the housing and the device marks itself as compromised — which is exactly what happens, inconveniently, during a service visit.

Every IMB carries a unique certificate. KDMs are encrypted against it. The consequence is simple and catches everyone at least once: replace the media block and every outstanding key for that screen becomes worthless.

A board failure on a Friday is therefore two problems. The hardware has to be swapped, and then every current booking on that screen needs re-issued keys against the new certificate — from every distributor whose title is playing there. Distributors who automate this turn it round quickly. Ones who do not will cost you shows.

The practical defence is to keep an exported, current certificate file for every screen somewhere that is not the projector, and to treat a media block swap as a key-management job with a hardware step in it, rather than the other way round.