Digital Rights Digital Rights Management Management

– An Introduction– An Introduction

OutlineOutline

What is digital rights management?What is digital rights management? Major players in DRM marketsMajor players in DRM markets DRM StandardsDRM Standards

– MPEG-21IPMPMPEG-21IPMP– MPEGMPEG

DRM LawsDRM Laws

A Interesting A Interesting Description of DRMDescription of DRM

… …a subject that has been lurking in the underbrush of a subject that has been lurking in the underbrush of the digital information world for many years and is the digital information world for many years and is finally coming to the front. finally coming to the front. Right management is, in Right management is, in some ways, the ugly beast that content providerssome ways, the ugly beast that content providers – publishers, broadcasters, market researchers, – publishers, broadcasters, market researchers, consultancies, major corporations, and others –consultancies, major corporations, and others – have have wanted to keep in the closetwanted to keep in the closet. The Internet has . The Internet has forced the closet door open; really, it has eliminated forced the closet door open; really, it has eliminated the door itself. What used to be relatively simple is the door itself. What used to be relatively simple is now uncomfortably complex. What used to be a now uncomfortably complex. What used to be a source of moderate business overhead is now a source of moderate business overhead is now a significant undertaking. What used to be the province significant undertaking. What used to be the province of lawyers, agents, and administrators is now also of lawyers, agents, and administrators is now also the domain of technologies…the domain of technologies…

Is DRM a ugly beast to content providers?

Adopted from the book “Digital Rights Management, Business and Technology”

Rights to ContentsRights to Contents

Printed Books Digital Content

Implicit rights for traditional content (printed books) and digital content

Needs for DRM Needs for DRM SystemsSystems Prevalence of new types of commercePrevalence of new types of commerce

– E-commerceE-commerce has become a huge business and a driving factor in the has become a huge business and a driving factor in the development of the Internet.development of the Internet.

– With the advent of evolved 2G and 3G mobile network, mobile e-With the advent of evolved 2G and 3G mobile network, mobile e-commerce (commerce (m-commercem-commerce) will be more and more significant.) will be more and more significant.

Importance of digital contentsImportance of digital contents– Online delivery of digital mediaOnline delivery of digital media, such as MP3 audio or video, is , such as MP3 audio or video, is

becoming an increasing important part in e-commerce and m-becoming an increasing important part in e-commerce and m-commerce.commerce.

– Unlimited consecutive copying in the digital domainUnlimited consecutive copying in the digital domain is the major is the major obstacle for digital media distribution and associated business.obstacle for digital media distribution and associated business.

Digital rights management systems are required to Digital rights management systems are required to protect protect both rights and businessboth rights and business

The term Digital Rights Management (DRM) was coined by some The term Digital Rights Management (DRM) was coined by some combination of vendors, their marketers, and industry analysts in the late combination of vendors, their marketers, and industry analysts in the late 1990s1990s

Definitions of Digital Definitions of Digital Rights Management Rights Management

DRM is the chain of hardware and software services and technologies DRM is the chain of hardware and software services and technologies governing the authorized use of digital content and managing any governing the authorized use of digital content and managing any consequences of that use throughout the entire life cycle of the contentconsequences of that use throughout the entire life cycle of the content

Creator Publisher Aggregator Distributor Retailer Consumer

A DRM system enables the secure exchange of intellectual property, such as copyright-protected music, video, or text, in digital form over the Internet or other electronic media, such as CDs, removable disks, or mobile networks

DRMDRM

DRM Systems DRM Systems Principles Principles

A DRM system enables the A DRM system enables the secure exchange of secure exchange of intellectual propertyintellectual property, such as copyright-protected , such as copyright-protected music, video, or text, in digital form over the music, video, or text, in digital form over the Internet or other electronic media, such as CDs, Internet or other electronic media, such as CDs, removable disks, or mobile networksremovable disks, or mobile networks

DRM allows DRM allows content ownerscontent owners to to distribute securely distribute securely to authorized recipientsto authorized recipients and gives them and gives them control control over the whole distribution chainover the whole distribution chain

DRM Systems: DRM Systems: The Technical View The Technical View (1/2)(1/2) DRM systems shall provideDRM systems shall provide

– EncryptionEncryption of the content or parts in order to disallow uncontrolled access of the content or parts in order to disallow uncontrolled access Partial or full encryptionPartial or full encryption Real-time or off-line encryptionReal-time or off-line encryption

– Decryption key managementDecryption key management– Access controlAccess control (conditional access) according to flexible usage rules (conditional access) according to flexible usage rules

Usage rules can be adapted to the business modelUsage rules can be adapted to the business model Examples:Examples:

– Restricting access to certain users, a limited time, or a limited Restricting access to certain users, a limited time, or a limited number of accessesnumber of accesses

– Trading access right for customer information or advertisement Trading access right for customer information or advertisement exchangeexchange

– Initial access to digital data may be free, while subsequent access Initial access to digital data may be free, while subsequent access must be paid formust be paid for

DRM Systems: DRM Systems: The Technical View The Technical View (2/2)(2/2)

– Interface to billingInterface to billing systems or mechanismssystems or mechanisms DRM system must be able to trigger monetary transactionsDRM system must be able to trigger monetary transactions

– Copy controlCopy control or or copy preventioncopy prevention The DRM system can enforce copy restrictions, such as The DRM system can enforce copy restrictions, such as

no/one/several/unlimited copies of the multimedia data are allowed, no/one/several/unlimited copies of the multimedia data are allowed, and with/without rights to produce copies of these copiesand with/without rights to produce copies of these copies

WatermarkingWatermarking is suitable for some usage rules. is suitable for some usage rules.– Identification and tracing of multimedia dataIdentification and tracing of multimedia data

Copies produced from the analog outputCopies produced from the analog output cannot be prohibited cannot be prohibited Individual watermarking (Individual watermarking (fingerprintingfingerprinting) of the distributed data shall ) of the distributed data shall

be part of the DRM system be part of the DRM system – Temper-proofing of digital contentsTemper-proofing of digital contents

Building Blocks of DRMBuilding Blocks of DRM

The diagram illustrates both technical and non-technical building blocks of DRMThe diagram illustrates both technical and non-technical building blocks of DRM

Digital Rights Management (DRM)

Access Control

Integrity Checking

Credential Authentication

Copy Control

Transaction Tracking

Rule Specification

Non-Technical Aspects

Cryptography

•Hashes and protocols•Block cipher•Public-key encryption/decryption

Watermarking

•Media specific techniques•Fingerprinting

Rights Language

•REL

•XrML

Bu

siness M

od

el

Leg

islative Acts

Basic Technological Researches Social Sciences

Pu

blic In

terests

Digital Management of Rights Management of Digital Rights

Digital Rights Digital Rights Management Management Like any cryptographic system, a DRM system Like any cryptographic system, a DRM system

is as strong as its weakest componentis as strong as its weakest component

Digital Rights Management

Encryption•DES•AES•RSA

Conditional Access•XrML•ORDL•REL

CopyControl

•Watermark

Identificationand

Tracing•Fingerprint

The DRM pillar model

….………..………..

Why do Corporations Why do Corporations Implement DRM?Implement DRM?

Confidential

!

To protect the monetary value of digital content by• protecting digital contents from unauthorized use• enforcing payment terms and conditions associated with its authorized use

DRM for Commerce

• to protect information from unauthorized use• to govern the way information may be used on an authorized basis• to record when and how information is used

DRM for Confidentiality (DRM for privacy)

New Business Model New Business Model and Profit by DRMand Profit by DRM DRM DRM is much about the is much about the opportunity inherently in new business modelsopportunity inherently in new business models as it as it

is about in is about in preserving the business of old onespreserving the business of old ones

Revenues other than content transactions are possible now are possible now

– E.g. E.g. Drug regulation documentsDrug regulation documents Blueprints and specifications for construction industryBlueprints and specifications for construction industry

Subscribing expensive scientific journal v.s. buy

single article

Monthly fee for downloading certain types of music v.s. CD albums

The DRM MarketThe DRM Market

Although the Internet was built Although the Internet was built with an “information wants to with an “information wants to be free” environment in mind, be free” environment in mind, DRM is becoming a more and DRM is becoming a more and more fundamental idea in the more fundamental idea in the evolution. Recent research by evolution. Recent research by IDC predicts that the market for IDC predicts that the market for DRM technology and services DRM technology and services will be will be $200 million$200 million in 2001, in 2001, and ultimately and ultimately $3.5 billion$3.5 billion in in 2005. 2005.

DRM Evolution DRM Evolution

DRM-related DRM-related Legislative ConcernsLegislative Concerns

Digital Millennium Copyright Acts (DMCA) Digital Millennium Copyright Acts (DMCA) – Signed into law by U. S. President Clinton on October 28, 1998, is one of the response to Signed into law by U. S. President Clinton on October 28, 1998, is one of the response to

the requirements in two World Intellectual Property Organizations (WIPO) treaties. the requirements in two World Intellectual Property Organizations (WIPO) treaties. – The The anti-circumventionanti-circumvention provision provision is the most controversial part of DMCA since it prohibits is the most controversial part of DMCA since it prohibits

making or selling devices or services that circumvent technological measure used to protect making or selling devices or services that circumvent technological measure used to protect copyrighted workscopyrighted works

– Exception to anti-circumvention provision:Exception to anti-circumvention provision:

Government activities Decision making of educational institutes

Reverse-engineering for program interoperability

Encryptionresearches

User privacy protection

System security testing

Protection for accessing Internet by minors

OutlineOutline

What is digital rights management?What is digital rights management?– MotivationsMotivations– Corporations’ viewCorporations’ view– Technological view Technological view

Major players in DRM marketsMajor players in DRM markets– DRM SystemsDRM Systems

interTrustinterTrust MicrosoftMicrosoft RealNetworkRealNetwork

– AggregatorsAggregators– Rights LanguageRights Language

An introduction to MPEG-21 Part 4: IPMP An introduction to MPEG-21 Part 4: IPMP

interTrust: interTrust: Rights/SystemRights/System•Standard format (like MPEG-4, PDF…)

•Proprietary format (for AAC, MP3)

•Metadata•Usage rules

DRM systems not involved in commerce

•Both HW/SW are supported

interTrust: interTrust: Rights/System Rights/System System componentsSystem components

– PackagersPackagers– ServersServers– ClientsClients– ToolkitsToolkits

CharacteristicsCharacteristics– SDK for third party applications, such as music playersSDK for third party applications, such as music players– Supporting both Internet-enabled or tethered devicesSupporting both Internet-enabled or tethered devices

ChallengesChallenges– To recruit more content owners to distribute content over itTo recruit more content owners to distribute content over it

interTrust NowinterTrust Now InterTrust restructured its operations and changed its strategy InterTrust restructured its operations and changed its strategy

and business modeland business model– Software development was ceasedSoftware development was ceased– Focus on licensing intellectual propertiesFocus on licensing intellectual properties

On May 23, 2002, interTrust announce a global intellectual proOn May 23, 2002, interTrust announce a global intellectual property licensing agreement with Sony that allow Sony to use all perty licensing agreement with Sony that allow Sony to use all of interTrust’s patents for 28.5 million dollars (Sony is the 2of interTrust’s patents for 28.5 million dollars (Sony is the 2ndnd lar large consumer electronics vendor)ge consumer electronics vendor)

AnalysisAnalysis– interTrust’s cash flow can be positive for the first time interTrust’s cash flow can be positive for the first time – Sony is serious about DRMSony is serious about DRM

IBM: Electronic IBM: Electronic Multimedia Management Multimedia Management SystemSystem

The IBM EMMS Content Preparation Software Development Kit (SDK) The IBM EMMS Content Preparation Software Development Kit (SDK) – integrates DRM capabilities into vertical or custom applicationsintegrates DRM capabilities into vertical or custom applications

The IBM EMMS Content Mastering ProgramThe IBM EMMS Content Mastering Program– a turnkey content-preparation DRM application for music content and its a turnkey content-preparation DRM application for music content and its

associated promotional materialassociated promotional material The IBM EMMS Content Hosting ProgramThe IBM EMMS Content Hosting Program

– a storage facility for EMMS formatted contenta storage facility for EMMS formatted content The IBM EMMS Web Commerce EnablerThe IBM EMMS Web Commerce Enabler

– deploy EMMS DRM content into custom retail offerings or enterprise deploy EMMS DRM content into custom retail offerings or enterprise portals, facilitating end-user download or streaming of desired contentportals, facilitating end-user download or streaming of desired content

The IBM EMMS Clearinghouse Program The IBM EMMS Clearinghouse Program – provides DRM functions and acts as a central control point for provides DRM functions and acts as a central control point for

managing, authorizing and reporting transactionsmanaging, authorizing and reporting transactions

Microsoft: Windows Microsoft: Windows Media DRM 9 SeriesMedia DRM 9 Series Microsoft’s Definitions of DRM Microsoft’s Definitions of DRM

– A set of technologies content owners can use to A set of technologies content owners can use to protect their copyrightsprotect their copyrights and and stay in closer contactstay in closer contact with customerswith customers

– A technology that enables the A technology that enables the secure distributionsecure distribution, , promotionpromotion, and , and salesale of digital media content on the of digital media content on the Internet.Internet.

History of Microsoft History of Microsoft DRMDRM The first version of Windows Media DRM was released The first version of Windows Media DRM was released

in in August 1999August 1999. . In In 20022002, Microsoft released Windows Media DMR versi, Microsoft released Windows Media DMR versi

on 7, offering greater flexibility and better security to its on 7, offering greater flexibility and better security to its users. users. – The FreemeThe Freeme software can breach the DRM protection software can breach the DRM protection

The latest release, Windows Media DRM 9 Series, lauThe latest release, Windows Media DRM 9 Series, launched in nched in January 2003January 2003, supports real-time encryption , supports real-time encryption (also known as "Live DRM") and enables content to be (also known as "Live DRM") and enables content to be delivered simultaneously to consumers as it happensdelivered simultaneously to consumers as it happens

WMRM ArchitecturesWMRM Architectures

License and KeysLicense and Keys

Microsoft Microsoft AdvertisementAdvertisement Microsoft® Windows Media® Digital Rights Microsoft® Windows Media® Digital Rights

Management (DRM) 9 Series builds upon a Management (DRM) 9 Series builds upon a proven and secure end-to-end DRM system proven and secure end-to-end DRM system that offers content providers and retailers a that offers content providers and retailers a flexible platform for the secure distribution of flexible platform for the secure distribution of digital media files while providing users ease of digital media files while providing users ease of use and a greater opportunity to consume use and a greater opportunity to consume premium contentpremium content

Major ComponentsMajor Components

Microsoft Windows Data Session ToolkitMicrosoft Windows Data Session Toolkit Microsoft Windows Media Rights Manager 9 Microsoft Windows Media Rights Manager 9

Series – Live DRMSeries – Live DRM– Required SDKRequired SDK

Windows Media Rights Manager 9 SeriesWindows Media Rights Manager 9 Series– Approval of license is required Approval of license is required

Windows Media Encoder 9 SeriesWindows Media Encoder 9 Series Windows Media Format 9 Series Windows Media Format 9 Series

Windows Media Digital Windows Media Digital Rights Management Rights Management SDKsSDKs Microsoft® Windows Media® Digital Rights Management Microsoft® Windows Media® Digital Rights Management

(DRM) consists of the following products: (DRM) consists of the following products: – Windows Media Rights Manager Software Development KitWindows Media Rights Manager Software Development Kit (SDK) (SDK)

enables content owners to package content and license clearing enables content owners to package content and license clearing houses to issue licenses.houses to issue licenses.

– Windows Media Format SDKWindows Media Format SDK enables independent software vendors enables independent software vendors (ISVs) to develop player applications. In addition, a key to Windows (ISVs) to develop player applications. In addition, a key to Windows Media DRM Runtime is needed to decrypt content protected using Media DRM Runtime is needed to decrypt content protected using Windows Media Digital Rights Management.Windows Media Digital Rights Management.

– Windows Media Portable Device DRM v1Windows Media Portable Device DRM v1 enables portable device enables portable device manufacturers to develop devices that decrypt content protected using manufacturers to develop devices that decrypt content protected using Windows Media DRM.Windows Media DRM.

Microsoft® Windows Microsoft® Windows Media® Data Session Media® Data Session ToolkitToolkit

An easy and secure way to deliver protected digital media content to a An easy and secure way to deliver protected digital media content to a computer via physical medium (such as CD or DVD)computer via physical medium (such as CD or DVD)

Microsoft® Windows Microsoft® Windows Media® Data Session Media® Data Session Toolkit (cont.)Toolkit (cont.)

Flexible business modelFlexible business model– New business modelNew business model– Different format on the same diskDifferent format on the same disk– Secure super distributionSecure super distribution

Low impact, low cost implementationLow impact, low cost implementation– Broad reach (450 million installed computers)Broad reach (450 million installed computers)– Online and offline license acquisition Online and offline license acquisition

Strong and persistent security Strong and persistent security

Microsoft Windows Media Microsoft Windows Media Rights Manager 9 Series – Live Rights Manager 9 Series – Live DRMDRM

Live DRMLive DRM– For on-demand or live content, encryption can occur in real-For on-demand or live content, encryption can occur in real-

timetime– Simultaneous encoding and encryptionSimultaneous encoding and encryption

Broad ReachBroad Reach– The number of installed compatible media player is largeThe number of installed compatible media player is large

Secure Distribution of Digital MediaSecure Distribution of Digital Media– System components can be renewed System components can be renewed

System Requirements System Requirements for WMRMfor WMRM Microsoft Windows® 2000 Server operating Microsoft Windows® 2000 Server operating

system system 133-megahertz Pentium or higher central 133-megahertz Pentium or higher central

processing unit (CPU) processing unit (CPU) 256 megabytes (MB) of RAM 256 megabytes (MB) of RAM 4 MB of free hard disk space4 MB of free hard disk space

Content Providers and Content Providers and PartnersPartners WMRM

– BMG Entertaiment– Cinemanow– EMI Recorded Music– Full Audio– Ifilm– Lionsgate Films Entertainment– Movielink– NHL.com– Pressplay Music Service– Sony Music Entertainment– Universal Music Group– Warner Music Group

LiveDRMIn US

CinemaNowEmpireDRMiStreamPlanetSyncCast

In Europe DMD SecureServecastStreamwide

In Asia Aboutmedia TechnologyJ-StreamKeelNTT-ComVirtueBroadcasting

RealNetworks: Helix DRMRealNetworks: Helix DRM The first multi-format digital rights The first multi-format digital rights

management platform for secure delivery of management platform for secure delivery of media to any devicesmedia to any devices

Unsurpassed securityUnsurpassed security Supported formats Supported formats

– RealAudio, RealVideo, MP3, RealAudio, RealVideo, MP3, MPEG-4, H.263, AAC, NB-AMRMPEG-4, H.263, AAC, NB-AMR

Supported platformsSupported platforms– Win32, Sun Solaris, Linux, HP-UX, Win32, Sun Solaris, Linux, HP-UX,

AIX AIX

A widely distributed digital music service for streaming,A widely distributed digital music service for streaming, downloading, and burning music online downloading, and burning music online

A joint venture between RealNetworks, AOL Time WarA joint venture between RealNetworks, AOL Time Warner, Bertelsmann, AG, EMI Recorded Music, Zombaner, Bertelsmann, AG, EMI Recorded Music, Zomba

Distribution partnersDistribution partners– AOL Time WarnerAOL Time Warner– RealNetworkRealNetwork

2003/5/15, China 2003/5/15, China Times Times

蘋果電腦推低價下載軟體 五大唱片公司樂於結盟 　黃秀慧／綜合報導　

全球唱片產業拉警報，不少人怪罪盜版和網路檔案交換軟體風行，不過日前蘋果電腦史無前例成功整合五大國際唱片公司，推出低價音樂下載軟體 iTune ，消費者只要花 0.99 美元，就可以合法下載一首歌曲，果然這項音樂下載服務才推出，就寫下單周賣出一百萬首歌曲的驚人成績，連 MP3 播放機的新訂單都超過 11 萬台。

　蘋果推出的 iTune 是第一個獲得唱片業認可的網路音樂商店，這項下載服務之所以能讓向來各自為政的唱片公司攜手，是因為過去五大唱片公司雖然都推出音樂下載網站，不過限制較多，包括下載、燒錄都要另外付錢，而 iTune 改進這些缺點，不但整合五大國際唱片公司共同結盟，還制定統一的歌曲下載費用，不論天王巨星或是網路新秀的歌，統統平價下載，才會在推出首周就創下百萬首下載數字，如果這個榮景持續，一年的下載曲數就有 5200 萬首，比目前其他付費線上音樂服務網站 1 年下載總和 3 500 萬首要多得多。

The iTune Music StoreThe iTune Music Store