05.08.2013 Views

Dynamic Security for Your Content on any Device - Irdeto

Dynamic Security for Your Content on any Device - Irdeto

Dynamic Security for Your Content on any Device - Irdeto

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

SOLUTION OVERVIEW<br />

<strong>Irdeto</strong> 3rd Party DRM - <str<strong>on</strong>g>Dynamic</str<strong>on</strong>g> <str<strong>on</strong>g>Security</str<strong>on</strong>g> <str<strong>on</strong>g>for</str<strong>on</strong>g> <str<strong>on</strong>g>Your</str<strong>on</strong>g><br />

<str<strong>on</strong>g>C<strong>on</strong>tent</str<strong>on</strong>g> <strong>on</strong> <strong>any</strong> <strong>Device</strong><br />

KEY BENEFITS<br />

• Focus <strong>on</strong> creating a compelling applicati<strong>on</strong> and let<br />

<strong>Irdeto</strong> handle the protecti<strong>on</strong>.<br />

• Meet evolving security demands with a studio<br />

approved security soluti<strong>on</strong>.<br />

• Ensure c<strong>on</strong>tent is fully protected from the point it is<br />

received to all end devices.<br />

www.irdeto.com ©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />

• Reduce risk and accelerate time to market with field<br />

tested, proven per<str<strong>on</strong>g>for</str<strong>on</strong>g>mance.<br />

• Maximize licensing agreements by distributing<br />

c<strong>on</strong>tent throughout the home.<br />

• Distribute c<strong>on</strong>tent to the most popular c<strong>on</strong>sumer<br />

devices including iOS and Android tablets and<br />

smartph<strong>on</strong>es<br />

1<br />

LAST MODIFICATION: 07-06-2013 / 02:00 PM GMT+01:00


Leading providers like IGLOO (Sky NZ), Polsat, Stofa,<br />

Manthan and Thaicom rely <strong>on</strong> <strong>Irdeto</strong> to protect and<br />

enable their digital media businesses.<br />

“As milli<strong>on</strong>s of new c<strong>on</strong>sumer<br />

devices attach to ubiquitous<br />

networks, the problem of how to<br />

keep premium c<strong>on</strong>tent secure grows<br />

exp<strong>on</strong>entially. By 2014, we expect<br />

typical households to c<strong>on</strong>tain over<br />

a dozen devices in additi<strong>on</strong> to TV<br />

sets and DVRs. <strong>Irdeto</strong>’s ActiveCloak<br />

technology certainly fits the need to<br />

provide flexible, yet reliable, security<br />

as this market experiences global<br />

growth.”<br />

Gerald Kaufhold, Principal Analyst, In-<br />

Stat Research<br />

www.irdeto.com<br />

©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />

REDUCE RISK TO IMPROVE TIME<br />

TO MARKET<br />

The Pers<strong>on</strong>al Video Recorder (PVR)<br />

has been a huge success <str<strong>on</strong>g>for</str<strong>on</strong>g> pay TV<br />

operators globally, and c<strong>on</strong>sumers<br />

have embraced the newfound flexibility<br />

it gives them with enthusiasm. But now<br />

operators face the next challenge:<br />

freeing the c<strong>on</strong>tent c<strong>on</strong>sumers have<br />

recorded <strong>on</strong> their PVRs and making it<br />

available to other devices around the<br />

home. Doing this enables a wholehome<br />

viewing experience while at the<br />

same time avoiding the added cost<br />

and support required <str<strong>on</strong>g>for</str<strong>on</strong>g> multiple settop<br />

boxes. However, deploying media<br />

applicati<strong>on</strong>s <strong>on</strong> these devices requires<br />

a new kind of protecti<strong>on</strong> to not <strong>on</strong>ly<br />

obtain the necessary c<strong>on</strong>tent licenses<br />

<str<strong>on</strong>g>for</str<strong>on</strong>g> this method of viewing, but also<br />

to ensure that the applicati<strong>on</strong> will not<br />

be hacked, the c<strong>on</strong>tent pirated or the<br />

brand image tarnished. The security<br />

challenges vary depending <strong>on</strong> the<br />

choice of plat<str<strong>on</strong>g>for</str<strong>on</strong>g>ms and technologies<br />

– operating systems, DRMs, media<br />

players and other APIs – and this<br />

all creates the potential <str<strong>on</strong>g>for</str<strong>on</strong>g> a very<br />

complex implementati<strong>on</strong>.<br />

IRDETO<br />

<strong>Irdeto</strong> is the <strong>on</strong>ly comp<strong>any</strong> with more<br />

than 40 years of c<strong>on</strong>tent security<br />

expertise and delivery track record to<br />

enable pay media operators to license<br />

and securely deliver premium c<strong>on</strong>tent.<br />

CONTENT PROTECTION<br />

<strong>Irdeto</strong>’s MultiDRM soluti<strong>on</strong>s combine<br />

server-based software, client device<br />

software agents and services to<br />

create a lifecycle security approach to<br />

protecting digital assets. The serverbased<br />

modules provide the necessary<br />

infrastructure to create the securityhardened<br />

client agents which reside<br />

in c<strong>on</strong>sumer devices.<br />

<strong>Irdeto</strong>’s Home Networking soluti<strong>on</strong>s<br />

protect c<strong>on</strong>tent distributed throughout<br />

the home in order to offer additi<strong>on</strong>al<br />

ways <str<strong>on</strong>g>for</str<strong>on</strong>g> subscribers to access<br />

c<strong>on</strong>tent without a significant increase<br />

in operati<strong>on</strong>al resources.<br />

<strong>Irdeto</strong> allows operators to get to<br />

market so<strong>on</strong>er by focusing ef<str<strong>on</strong>g>for</str<strong>on</strong>g>ts <strong>on</strong><br />

licensing c<strong>on</strong>tent and creating a great<br />

applicati<strong>on</strong> with the assurance that<br />

<strong>Irdeto</strong> will provide a studio approved<br />

security soluti<strong>on</strong>.<br />

Image 1. The next challenge: Recorded <strong>on</strong> the PVR and making it available to other devices<br />

2


According to Parks Associates the ability to watch<br />

recorded TV <strong>on</strong> <strong>any</strong> device is <strong>on</strong>e of the most desired<br />

advanced TV services that subscribers around the<br />

world are looking <str<strong>on</strong>g>for</str<strong>on</strong>g><br />

“As the value of premium video<br />

becomes more important to both<br />

c<strong>on</strong>sumers and service providers<br />

who want to display this c<strong>on</strong>tent <strong>on</strong><br />

multiple ‘smart devices’ in current<br />

and future digital homes, so too the<br />

CAS/DRM technology must become<br />

more robust as c<strong>on</strong>tent is handed off<br />

from <strong>on</strong>e device to another. <strong>Irdeto</strong>’s<br />

ActiveCloak is a soluti<strong>on</strong> addressing<br />

these heightened security issues<br />

that have and will prevail as multidisplay<br />

of premium video becomes<br />

the norm in our digital homes.”<br />

Gary Schultz, President and Founder,<br />

Multimedia Research Group<br />

www.irdeto.com<br />

©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />

ACTIVECLOAK MEDIA AGENT<br />

The ActiveCloak Media Agent<br />

implements client device functi<strong>on</strong>ality<br />

and security <str<strong>on</strong>g>for</str<strong>on</strong>g> the media applicati<strong>on</strong>.<br />

Its main functi<strong>on</strong>s are to:<br />

• Provide a secure media framework<br />

SDK<br />

• Integrati<strong>on</strong> with a single API<br />

• Secure digital assets using a<br />

secure store<br />

• M<strong>on</strong>itor the applicati<strong>on</strong>’s integrity<br />

and the surrounding comp<strong>on</strong>ents<br />

it interacts with (anti-tampering)<br />

• Node-locking bind assets to the<br />

unique device where the agent is<br />

running (anticl<strong>on</strong>ing)<br />

• Prevent tampering or unauthorized<br />

access to the media path<br />

• Detect jail broken and rooted<br />

device<br />

ACTIVECLOAK SERVER<br />

This module secures the cryptographic<br />

assets and packages them by using<br />

patented White-box cryptography<br />

and signing technologies. Premium<br />

Image 2. Detect jail broken and rooted device<br />

c<strong>on</strong>tent assets can now <strong>on</strong>ly be used<br />

by the ActiveCloak Agent <strong>on</strong> the<br />

device.<br />

The Resource Protecti<strong>on</strong> Module is an<br />

off-line utility providing the following<br />

functi<strong>on</strong>alities:<br />

• Enable the secure deployment of<br />

assets and data, such as DRM<br />

keys and certificates<br />

• Protect assets and data in a<br />

secure store by using White-<br />

Box cryptography and data<br />

trans<str<strong>on</strong>g>for</str<strong>on</strong>g>mati<strong>on</strong>s<br />

• Sign applicati<strong>on</strong>s to en<str<strong>on</strong>g>for</str<strong>on</strong>g>ce<br />

access c<strong>on</strong>trol at runtime.<br />

IRDETO SECURITY LIFECYCLE<br />

SERVICES<br />

To create effective, sustainable<br />

protecti<strong>on</strong> against piracy requires<br />

specialized expertise both during<br />

the security development phase,<br />

when critical design approaches are<br />

c<strong>on</strong>sidered and implemented, and post<br />

deployment when valuable c<strong>on</strong>tent is<br />

“in the wild”, where it is exposed to<br />

c<strong>on</strong>stant threats and hacker attacks.<br />

<strong>Irdeto</strong> <str<strong>on</strong>g>Security</str<strong>on</strong>g> Lifecycle Services<br />

provides a methodology designed to:<br />

• Supplement the str<strong>on</strong>g initial<br />

attack resistance<br />

• Understand the evolving threats<br />

and severity in advance of an<br />

attack<br />

• Resp<strong>on</strong>d quickly to minimize the<br />

impact of a successful attack<br />

3


CORE TECHNOLOGY<br />

<strong>Irdeto</strong> employs a multi-layered approach<br />

to security to counter different types of<br />

hacking attempts. This provides a flexible<br />

and modular soluti<strong>on</strong> that prevents single<br />

attack sources from being successful.<br />

DTCP-IP LINK PROTECTION<br />

DTCP-IP is a mandatory comp<strong>on</strong>ent of<br />

DLNA home networking. <strong>Irdeto</strong> provides<br />

link protecti<strong>on</strong>, such as device registrati<strong>on</strong>,<br />

Independent<br />

Operator<br />

www.irdeto.com<br />

Broadcast Operator<br />

Public Net Private Net<br />

Internet<br />

©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />

proximity detecti<strong>on</strong>, c<strong>on</strong>tent transfer, rights<br />

exchange and device revocati<strong>on</strong>.<br />

DTCP-IP ROBUSTNESS RULES<br />

<strong>Irdeto</strong> supports the DTCP robustness<br />

requirements, including:<br />

• Uncompressed c<strong>on</strong>tent<br />

• Output protecti<strong>on</strong>s<br />

• Screen scraping protecti<strong>on</strong>s<br />

• Graphics processors<br />

• Use of obfuscati<strong>on</strong><br />

HOME<br />

Home<br />

Network<br />

Diagram 1. Home Networking delivery opportunity<br />

• Self-checking of the integrity of the<br />

comp<strong>on</strong>ent parts<br />

• Defeat widely available tools and<br />

specialised tools and str<strong>on</strong>gly resist<br />

professi<strong>on</strong>al tools<br />

DLNA<br />

<strong>Irdeto</strong> is a member in good standing<br />

with the DLNA and embraces the open<br />

standards embodied by the DLNA.<br />

Operator STB<br />

C<strong>on</strong>sumer<br />

Electr<strong>on</strong>ics STB<br />

HDMI<br />

HDMI<br />

4

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!