DRM over SD Cards safe?

Question

I'm trying to implement a DRM based around SDCard's serial number in Windows CE. There are a few question I'm concerning.

1. Is SDCards' serial numbers unique like the MAC address ?
2. In Windows CE 6 (as some source codes are available, can someone make a SDCard Reader driver that reports wrong serial number. (A number that is not coming from SDCard but an fake number).
3. Can serial number embedded in a SD Card be changed by some sort of JTAG or flashing?

Answer 1

Yes the serial number is unique. However you need to be careful of where are you going to save the licenses to the contents. How are you going to check the time change problem, viz the user changes the system time and you have a time based license stored on the SD card. You will have to maintain the timestamp in a much secure location on the device on which this SD card and your DRM solution reside.

Answer 2

Can someone create a driver that reports a fictitious serial number? Absolutely. You can create a new SD driver to do whatever you like for any specific command.