Dynamic Security for Your Content on any Device - Irdeto
Dynamic Security for Your Content on any Device - Irdeto
Dynamic Security for Your Content on any Device - Irdeto
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
SOLUTION OVERVIEW<br />
<strong>Irdeto</strong> 3rd Party DRM - <str<strong>on</strong>g>Dynamic</str<strong>on</strong>g> <str<strong>on</strong>g>Security</str<strong>on</strong>g> <str<strong>on</strong>g>for</str<strong>on</strong>g> <str<strong>on</strong>g>Your</str<strong>on</strong>g><br />
<str<strong>on</strong>g>C<strong>on</strong>tent</str<strong>on</strong>g> <strong>on</strong> <strong>any</strong> <strong>Device</strong><br />
KEY BENEFITS<br />
• Focus <strong>on</strong> creating a compelling applicati<strong>on</strong> and let<br />
<strong>Irdeto</strong> handle the protecti<strong>on</strong>.<br />
• Meet evolving security demands with a studio<br />
approved security soluti<strong>on</strong>.<br />
• Ensure c<strong>on</strong>tent is fully protected from the point it is<br />
received to all end devices.<br />
www.irdeto.com ©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />
• Reduce risk and accelerate time to market with field<br />
tested, proven per<str<strong>on</strong>g>for</str<strong>on</strong>g>mance.<br />
• Maximize licensing agreements by distributing<br />
c<strong>on</strong>tent throughout the home.<br />
• Distribute c<strong>on</strong>tent to the most popular c<strong>on</strong>sumer<br />
devices including iOS and Android tablets and<br />
smartph<strong>on</strong>es<br />
1<br />
LAST MODIFICATION: 07-06-2013 / 02:00 PM GMT+01:00
Leading providers like IGLOO (Sky NZ), Polsat, Stofa,<br />
Manthan and Thaicom rely <strong>on</strong> <strong>Irdeto</strong> to protect and<br />
enable their digital media businesses.<br />
“As milli<strong>on</strong>s of new c<strong>on</strong>sumer<br />
devices attach to ubiquitous<br />
networks, the problem of how to<br />
keep premium c<strong>on</strong>tent secure grows<br />
exp<strong>on</strong>entially. By 2014, we expect<br />
typical households to c<strong>on</strong>tain over<br />
a dozen devices in additi<strong>on</strong> to TV<br />
sets and DVRs. <strong>Irdeto</strong>’s ActiveCloak<br />
technology certainly fits the need to<br />
provide flexible, yet reliable, security<br />
as this market experiences global<br />
growth.”<br />
Gerald Kaufhold, Principal Analyst, In-<br />
Stat Research<br />
www.irdeto.com<br />
©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />
REDUCE RISK TO IMPROVE TIME<br />
TO MARKET<br />
The Pers<strong>on</strong>al Video Recorder (PVR)<br />
has been a huge success <str<strong>on</strong>g>for</str<strong>on</strong>g> pay TV<br />
operators globally, and c<strong>on</strong>sumers<br />
have embraced the newfound flexibility<br />
it gives them with enthusiasm. But now<br />
operators face the next challenge:<br />
freeing the c<strong>on</strong>tent c<strong>on</strong>sumers have<br />
recorded <strong>on</strong> their PVRs and making it<br />
available to other devices around the<br />
home. Doing this enables a wholehome<br />
viewing experience while at the<br />
same time avoiding the added cost<br />
and support required <str<strong>on</strong>g>for</str<strong>on</strong>g> multiple settop<br />
boxes. However, deploying media<br />
applicati<strong>on</strong>s <strong>on</strong> these devices requires<br />
a new kind of protecti<strong>on</strong> to not <strong>on</strong>ly<br />
obtain the necessary c<strong>on</strong>tent licenses<br />
<str<strong>on</strong>g>for</str<strong>on</strong>g> this method of viewing, but also<br />
to ensure that the applicati<strong>on</strong> will not<br />
be hacked, the c<strong>on</strong>tent pirated or the<br />
brand image tarnished. The security<br />
challenges vary depending <strong>on</strong> the<br />
choice of plat<str<strong>on</strong>g>for</str<strong>on</strong>g>ms and technologies<br />
– operating systems, DRMs, media<br />
players and other APIs – and this<br />
all creates the potential <str<strong>on</strong>g>for</str<strong>on</strong>g> a very<br />
complex implementati<strong>on</strong>.<br />
IRDETO<br />
<strong>Irdeto</strong> is the <strong>on</strong>ly comp<strong>any</strong> with more<br />
than 40 years of c<strong>on</strong>tent security<br />
expertise and delivery track record to<br />
enable pay media operators to license<br />
and securely deliver premium c<strong>on</strong>tent.<br />
CONTENT PROTECTION<br />
<strong>Irdeto</strong>’s MultiDRM soluti<strong>on</strong>s combine<br />
server-based software, client device<br />
software agents and services to<br />
create a lifecycle security approach to<br />
protecting digital assets. The serverbased<br />
modules provide the necessary<br />
infrastructure to create the securityhardened<br />
client agents which reside<br />
in c<strong>on</strong>sumer devices.<br />
<strong>Irdeto</strong>’s Home Networking soluti<strong>on</strong>s<br />
protect c<strong>on</strong>tent distributed throughout<br />
the home in order to offer additi<strong>on</strong>al<br />
ways <str<strong>on</strong>g>for</str<strong>on</strong>g> subscribers to access<br />
c<strong>on</strong>tent without a significant increase<br />
in operati<strong>on</strong>al resources.<br />
<strong>Irdeto</strong> allows operators to get to<br />
market so<strong>on</strong>er by focusing ef<str<strong>on</strong>g>for</str<strong>on</strong>g>ts <strong>on</strong><br />
licensing c<strong>on</strong>tent and creating a great<br />
applicati<strong>on</strong> with the assurance that<br />
<strong>Irdeto</strong> will provide a studio approved<br />
security soluti<strong>on</strong>.<br />
Image 1. The next challenge: Recorded <strong>on</strong> the PVR and making it available to other devices<br />
2
According to Parks Associates the ability to watch<br />
recorded TV <strong>on</strong> <strong>any</strong> device is <strong>on</strong>e of the most desired<br />
advanced TV services that subscribers around the<br />
world are looking <str<strong>on</strong>g>for</str<strong>on</strong>g><br />
“As the value of premium video<br />
becomes more important to both<br />
c<strong>on</strong>sumers and service providers<br />
who want to display this c<strong>on</strong>tent <strong>on</strong><br />
multiple ‘smart devices’ in current<br />
and future digital homes, so too the<br />
CAS/DRM technology must become<br />
more robust as c<strong>on</strong>tent is handed off<br />
from <strong>on</strong>e device to another. <strong>Irdeto</strong>’s<br />
ActiveCloak is a soluti<strong>on</strong> addressing<br />
these heightened security issues<br />
that have and will prevail as multidisplay<br />
of premium video becomes<br />
the norm in our digital homes.”<br />
Gary Schultz, President and Founder,<br />
Multimedia Research Group<br />
www.irdeto.com<br />
©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />
ACTIVECLOAK MEDIA AGENT<br />
The ActiveCloak Media Agent<br />
implements client device functi<strong>on</strong>ality<br />
and security <str<strong>on</strong>g>for</str<strong>on</strong>g> the media applicati<strong>on</strong>.<br />
Its main functi<strong>on</strong>s are to:<br />
• Provide a secure media framework<br />
SDK<br />
• Integrati<strong>on</strong> with a single API<br />
• Secure digital assets using a<br />
secure store<br />
• M<strong>on</strong>itor the applicati<strong>on</strong>’s integrity<br />
and the surrounding comp<strong>on</strong>ents<br />
it interacts with (anti-tampering)<br />
• Node-locking bind assets to the<br />
unique device where the agent is<br />
running (anticl<strong>on</strong>ing)<br />
• Prevent tampering or unauthorized<br />
access to the media path<br />
• Detect jail broken and rooted<br />
device<br />
ACTIVECLOAK SERVER<br />
This module secures the cryptographic<br />
assets and packages them by using<br />
patented White-box cryptography<br />
and signing technologies. Premium<br />
Image 2. Detect jail broken and rooted device<br />
c<strong>on</strong>tent assets can now <strong>on</strong>ly be used<br />
by the ActiveCloak Agent <strong>on</strong> the<br />
device.<br />
The Resource Protecti<strong>on</strong> Module is an<br />
off-line utility providing the following<br />
functi<strong>on</strong>alities:<br />
• Enable the secure deployment of<br />
assets and data, such as DRM<br />
keys and certificates<br />
• Protect assets and data in a<br />
secure store by using White-<br />
Box cryptography and data<br />
trans<str<strong>on</strong>g>for</str<strong>on</strong>g>mati<strong>on</strong>s<br />
• Sign applicati<strong>on</strong>s to en<str<strong>on</strong>g>for</str<strong>on</strong>g>ce<br />
access c<strong>on</strong>trol at runtime.<br />
IRDETO SECURITY LIFECYCLE<br />
SERVICES<br />
To create effective, sustainable<br />
protecti<strong>on</strong> against piracy requires<br />
specialized expertise both during<br />
the security development phase,<br />
when critical design approaches are<br />
c<strong>on</strong>sidered and implemented, and post<br />
deployment when valuable c<strong>on</strong>tent is<br />
“in the wild”, where it is exposed to<br />
c<strong>on</strong>stant threats and hacker attacks.<br />
<strong>Irdeto</strong> <str<strong>on</strong>g>Security</str<strong>on</strong>g> Lifecycle Services<br />
provides a methodology designed to:<br />
• Supplement the str<strong>on</strong>g initial<br />
attack resistance<br />
• Understand the evolving threats<br />
and severity in advance of an<br />
attack<br />
• Resp<strong>on</strong>d quickly to minimize the<br />
impact of a successful attack<br />
3
CORE TECHNOLOGY<br />
<strong>Irdeto</strong> employs a multi-layered approach<br />
to security to counter different types of<br />
hacking attempts. This provides a flexible<br />
and modular soluti<strong>on</strong> that prevents single<br />
attack sources from being successful.<br />
DTCP-IP LINK PROTECTION<br />
DTCP-IP is a mandatory comp<strong>on</strong>ent of<br />
DLNA home networking. <strong>Irdeto</strong> provides<br />
link protecti<strong>on</strong>, such as device registrati<strong>on</strong>,<br />
Independent<br />
Operator<br />
www.irdeto.com<br />
Broadcast Operator<br />
Public Net Private Net<br />
Internet<br />
©2013 <strong>Irdeto</strong>, All Rights Reserved.<br />
proximity detecti<strong>on</strong>, c<strong>on</strong>tent transfer, rights<br />
exchange and device revocati<strong>on</strong>.<br />
DTCP-IP ROBUSTNESS RULES<br />
<strong>Irdeto</strong> supports the DTCP robustness<br />
requirements, including:<br />
• Uncompressed c<strong>on</strong>tent<br />
• Output protecti<strong>on</strong>s<br />
• Screen scraping protecti<strong>on</strong>s<br />
• Graphics processors<br />
• Use of obfuscati<strong>on</strong><br />
HOME<br />
Home<br />
Network<br />
Diagram 1. Home Networking delivery opportunity<br />
• Self-checking of the integrity of the<br />
comp<strong>on</strong>ent parts<br />
• Defeat widely available tools and<br />
specialised tools and str<strong>on</strong>gly resist<br />
professi<strong>on</strong>al tools<br />
DLNA<br />
<strong>Irdeto</strong> is a member in good standing<br />
with the DLNA and embraces the open<br />
standards embodied by the DLNA.<br />
Operator STB<br />
C<strong>on</strong>sumer<br />
Electr<strong>on</strong>ics STB<br />
HDMI<br />
HDMI<br />
4