Download - Digital Rights Management

2007/05/16 DRM – The enabler of information society

1

Digital Rights Management The enabler of information society

Leonardo Chiariglione – CEDEO.netBellaterra, ES, 2007/05/16


2

The business of intermediation

• In the physical world there are people who – Own things– Look for those things– Act as matchmakers

• Advertisers, Resellers, ...

• Matchmakers are important when they know– What things people want– Who has the things people want

• Matchmakers are less important when– Things are of general use– Many offer the same things

• The delivery of “solid” things is important– Haulers, …


3

The old business of content

• Content is far from “physical”, but– It cannot be transmitted “from mind to mind”– If it could we would still like to know which mind has

something interesting :-(

• Content can be distributed by physical carriers– As a physical object it is no different from other “things”– Publisher can easily replicate it – End user typically requires a special device

• Content can be distributed by electrical carriers– Content distribution still requires an infrastructure– End user has the means to replicate content– Its use typically requires a proper device


4

The new business of content

• Digitally represented content – Is abundant and liquid– Value chains are still needed to move content from

creator to end user– Importance of delivery decreases

• Abundance and liquidity are threats to current value chains players– Make digital content as scarce and “solid” as analogue

content by acting on• Content (Digital Rights Management)• Distribution (Proprietary networks)

– You have better talk to those who foot the bill…


5

Wrong music rights/1

• “When the king of England wants to see a show, they bring the show to the castle and he hears it alone in his private theater. If you are a king, why don’t you exercise your kingly privilege and have a show of your own in your own house.” – From an ad for the Edison’s phonograph, 1906

• For decades millions of “kings” have exercised their kingly privilege– Buy music and play it anywhere– Record music from live broadcasts– Copy their music to any device


6

Wrong music rights/2

• 10 years ago “kings” have become “emperors”– Find any content they want– Organise/play/copy/share music

• Some want “emperors” to become “sanculottes”– Digital content costs as much as physical content– Play content on dedicated players– The new lettres de cachet: break the lock and go to jail

• We are not in 1789 and not in Paris but there has been a revolution...

• The future of the record industry hangs on a thread...


7

The wobbling movie industry/1

• The end user as a pawn– If you want to see my movies go to the theatre

• The end user as a duke– Watch the movie on show in your castle

• The end user as a count– Record the movie but no guarantee that you can share it

• The end user as a king– The movie of you choice in your castle– With pestering mosquitoes (region codes)

• The end user as an emperor– All the movies anytime anywhere on any device


8

The wobbling movie industry/2

• Some want “emperors” to become “sanculottes”– Digital content costs as much as physical content– You can play it only on dedicated players– The new lettres de cachet: break the lock and go to jail

• Trailblazers have a hard time• Smart followers may avoid the pitfalls...

– “The people who handle strategy have to get together to talk about this (interoperability), not just the same technical people” (From a speech by Dan Glickman, MPAA President)


9

Learning from the mistakes of others

• Golden rule #1: Respect your customer if you want to have your property respected– Still a value chain player needs the means to

manage his rights – Beware: the technology must be pervasive and

mostly invisible

• Golden rule #2: Give your customer what he wants– All the nice features of digital content –

abundance and liquidity – are still there– Universal content format and network access


10

Talking of standardsMPEG for affordable content liquidity

Media coding MPEG-1, MPEG-2, MPEG-4

Metadata MPEG-7

Multimedia Framework MPEG-21

Multimedia Application Formats MPEG-A

More media coding•Reconfigurable Video Coding MPEG-B/C part 4•Spatial Audio MPEG-D part 1

Multimedia Middleware MPEG-E

More in the pipeline


11

MPEG changes the media landscape(only uses > 100 M reported)

• Video CD players – MPEG-1 Systems/Video/Audio Layer 2

• MP3 players– MPEG-1 Audio Layer 3

• Digital TV set top boxes– MPEG-2 Video/Systems and MPEG-1 Audio Layer 2

• DVD players – MPEG-2 Video/Systems

• Photo cameras– MPEG-4 Visual

• Mobile handsets– MPEG-4 Visual/AVC, AAC/HE-AAC, File Format)

• Compressed movie players– MPEG-4 Visual + MP3


12

Digital media is now a maturing market (but very vital…)

• Today’s MPEG portfolio of standards covers most aspects of digital media– Industry still needs the “traditional” MPEG

products (video and audio compression…)

• Consumers (and not just them) crave for interoperability

• But interoperability needs have moved up one level– From single technologies to assemblies of

technologies

• MPEG is providing solutions in that space


13

An example of a MAF standard Media Streaming

• Many applications need streaming of AV content– In many of them the content is governed

• MPEG standards have contributed to bring the industry to its current level of development– Hundreds of million devices deployed

• So far there was no complete standard for content “governance” – This is what the MS MAF standard is about

• MS MAF to lead the video broadcasting/streaming industry to its next level of development


14

An MS MAF reference scheme

Media Streaming

Player

Media Streaming

PlayerMedia

Streaming Player

Media Streaming

Player

Domain Management Device

Domain Management Device

IPMP Tool Provider Device

IPMP Tool Provider Device

Media Streaming

Player

Media Streaming

Player

License Provider Device

License Provider Device

Content Provider Device

Content Provider Device


15

MS MAF provides what everybody (should) demand

Creators Unfettered access to any end user

End users Unfettered access to any content item

Manufacturers A free and buoyant device market

Service providers Unload the cost of devices from account books

Regulators A healthy competing market


16

MS MAF is an example of a DRM standard

• The NIST definition of Digital Rights Management (DRM): – A system of Information Technology components and

services along with corresponding law, policies and business models which strive to distribute and control Intellectual Property and its rights

• With DRM rights holders can manage (and possibly protect) the flow and use of their content by setting appropriate limits

• DRM limits communication, but it is still a communication system

• To be successful DRM needs the same old recipe: standards


17

Can we have a DRM standard?

CreatorEnd user


18

A small problem from a big one

• A DRM standard should enable any Value-Chain User (End-User included) to execute value-chain Functions through Interfaces and using Protocols of open specification obtaining predictable results

VCU A VCU B

Interface


19

A DRM standard shall

• Be value chain agnostic – We do not know what existing value-chains will become– We do not know what future value-chains will be

• Standardise basic technologies– Supporting existing value chains– Enabling new value chains (by adding new technologies)

• Enable innovation– If rights holders have total control, total stagnation will

result– We are not face-lifting analogue value-chains by making

them digital

• Be easy to use to deploy value chains


20

The Digital Media Project

• Launched as Digital Media Manifesto in Jul 2003 • Manifesto published in Sep 2003

– http://www.chiariglione.org/manifesto/dmm.htm

• Digital Media Project established in Dec 2003– http://www.digital-media-project.org/

• The basic DMP position– Digital technologies are an asset of mankind – Creators, intermediaries and end-users should all

benefit from them– The goal can be achieved through standardisation of

• Data formats• Protocols


21

Four years later…

• 3 versions of Interoperable DRM Platform specification (IDP-1, IDP-2 and IDP-2.1) released

• IDP-3 (May 2007) being developed– Reference Software (Chillout) as Open Source– Conformance testing– Mapping of Traditional Rights and Usages to

the digital space

• DMP governance being set up– Content Registration Authority to be appointed


22

The IDP Approved Documents(In italic: under development)

AD Title Type

#1 Value-Chain Functions & Requirem. Infor.

#2 Architecture Infor.

#3 Interoperable DRM Platform Norm.

#4 Use Cases and Value Chains Norm.

#5 Certificat. & Registrat. Authorities Norm.

#6 Terminology Infor.#7 Reference Software Norm.#8 End-to-end Conformance Norm.#9 Mapping of TRUs to Digital Space Infor.


23

AD #1 – Value Chain Functions and Requirements/1

• Document built with contributions from– Civil Rights Associations– Association of People with Special Needs– Individuals– Collective Management Societies– Producers– Public Service Broadcasters– Sheet Music Publishers– Telecommunication operators– Device Manufacturers


24

AD #1 – Value Chain Functions and Requirements/2

• Contains– The list of Value-Chain Users so far identified– The list of General Requirements– The full list of Requirements of PFs

• Represents 30 months of work• Is the foundation of other DMP documents • Is “work in progress” (by definition)

– Used to extend IDP

• Is open to more contributions from anybody


25

Example: Represent Use Data

Detailed description of Requirements

Definition The syntax of the information used to describe the elements making up one or more instance of Use of Content, Device or User so that it can be Processed by a Device

Objective To enable processing of Use Data in a predictable fashion

Requir-ements

• Ability to Identify Use Data• Ability to support protection of Use Data• Ability to convert Use Data to a human readable form• Ability to not Identify User or Device associated with

Use Data• Ability to Represent a wide range of Content Uses e.g.

time of Use, combinations of Content Items, Domains, Super-distribution Uses

Benefits Provide a machine-processable record of Uses


26

Walkthrough in the value chain/1

• The Creation Model – A Work is made by a Creator – In the form of a Manifestation– That becomes an Instance– Digitally Represented as a Resource

• Resources are combined with Metadata in a structured way as a single entity (Content)

• Content that is digitally Represented is called DMP Content Information (DCI)

• Conditions to Use a DCI are expressed with a License digitally Represented with a Rights Expressions Language for Use on– Devices, Users, sets of Devices and Users (Domains)


27

Walkthrough in the value chain/2

• Resources can be in clear-text or protected (i.e. Encrypted) form

• A DCI can convey– Keys and related DRM information– Blocks of executable code (called DRM Tools) to Process

various types of Governed Content

• In general a DCI is Packaged for Delivery between Users, i.e. – Wrapped in a file as DMP Content Format (DCF)– Streamed according to DMP Content Stream (DCS)


28

The DMP Models

• Creation Model• Distribution Model• Delivery Model• DRM Tool Model• Device Model• Domain Model• Import/Export Model• Data Model


29

Represent Content DCI

Represent Metadata

Represent Identifier

Represent DRM Information

Represent License

Represent Key Body

Represent DRM Tool

Represent Key

Represent Key Body

Represent DRM Tool Body

Represent Device Information

Represent Resource

Represent Identifier

Represent Metadata

Represent Domain Context for Content

The DMP Content Information(example)


30

Some Devices in a Value Chain

ContentCreationDevice

End-UserDevice(SAV)

End-UserDevice(SAV)

PAVeXternalDevice

ContentIdentific.Device

ContentProviderDevice

LicenseProviderDevice

DomainMgmtDevice

DRM ToolProviderDevice

DeviceIdentific.Device

LicenseIdentific.Device

DRM ToolIdentific.Device

DomainIdentific.Device

End-UserDevice(PAV)

1

2

3

4

5

67

8

9

10

11

12

13

14

1516

Non-DMPdevice

17


31

AD #3 – Interoperable DRM Platform

• The collection of specifications of all Tools making up the Interoperable DRM Platform (IDP)

• Four main components– Represent– Protocols– Package– IDP Schema


32

AD #4 – Use Cases and Value Chains

• Defines 12 Use Cases• Describes Use Cases by means of walk-

throughs (some Use Case may have > 1 walk-throughs)

• For each use Case and walk-through all IDP Tools required to implement it are listed

• Normative AD


33

AD #5 – Certification and Registration Authorities

• Value-Chains rely on the guaranteed – Integrity of Entities e.g. Device and DRM Tool– Identity of Entities e.g. Content, Device, Domain, DRM

Tool and User

• AD #5 collects roles, qualification requirements, appointment procedures and operation rules of Certification and Registration Authorities

• Process– DMP selects and appoint Authorities– Authorities appoint Agencies– Agencies Certify or Identify Entities as appropriate


34

Authorities and Agencies

Authority

Agency2

Agencyk

Agency1

Entity1,1

Entity1,2

Entity1,l

Entityk,1

Entityk,2

EntityK,n

Entity2,1

Entity2,m


35

AD #6 – Terminology

• 160 terms defined and used in all ADs• Some examples

– Conformance: The status of a Content or Device that has been judged to positively meet the requirements of a Technical Specification

– Content Interoperability: The capability of a Content Item to be Used by a Device in the way expected by the Device(s) from which the Content has originated

– Device Interoperability : The capability of a device to exchange data with other devices across standard interfaces, using standard protocols, and to be processed by the devices exchanging the data in a predictable fashion

• Being extended to support DMP ontology


36

AD #7 – Reference software Chillout®

• A set of Java libraries• Exposed as web services• Organised as

– Core library: implements the IDP specification– Auxiliary library: encapsulates a number of functionalities– Applications: a set of sample applications (devices, …)

Java platform

Applications

Core library Auxiliary

library


37

Currently developed Devices

• Device Identification Device (DID)• Content Creation Device (CCD)• Content Identification Device (CID)• License Provider Device (LPD)• Content Provider Device (CPD)• DRM Tool Provider Device (TPD)• PAV eXternal Device (PXD)• Content Consumption Device (PAV)• Content Consumption Device (SAV)• Domain Management Device (DMD)


38

AD #8 – End-to-End Conformance

• Questions requiring an answer1. Has an Entity been correctly implemented according to

the Technical Specifications?2. Can an Entity be safely admitted to the Value-Chain?

• Purpose of AD #8 is to provide 1. Means to test an Entity for Conformance to ADs

1. Methodologies2. Test suites3. Software (where possible)

2. General information to be used by Certification Authorities/Agencies


39

AD #9 – Mapping of TRUs to the digital space

• Why do we need to support TRUs?– Users could desert IDP-based offers because

the IDP experience may be poor compared with

• The analogue experience • The current digital experience

– Repackaging the TRU experience with IDP technologies may lead to some new Digital Media Business Models (DMBM)

• Many TRUs can be supported and DMBMs implementing using the IDP toolkit


40

What is offered by AD #9

• For a selection of TRUs identified by DMP the following is provided– A rationale for the TRU – One of more than one solution enabling

support of the selected TRU, each with• A walkthrough• The IDP technologies required to support the

walkthrough• The Recommended Actions that may be required to

make the TRU support by IDP possible


41

Some TRUs supported

#1 – Quote#2 – Personal Copy#3 – Space shift#4 – Time shift#5 – Private communication#6 – Personal Annotation#7 – Personal Edit#8 – Rating Content#9 – Continued Access#10 – Paternity#11 – Integrity


42

Relationships with MPEG

• Most of the IDP technologies are derived from MPEG-21 and other MPEG standards

• Two DMP use cases are being developed as MAFs by MPEG– Open Release– Media Streaming

• In 5 months there will be ISO standards for two important application areas


43

Conclusions

• In the “analogue” society people have always managed “rights”

• In a “digital” society people still manage “rights”– Large corporations as well individuals

• DRM is the technology that can achieve the goal• To be acceptable and succeed DRM must be

– Flexible → Toolkit (MPEG-21 standards)– Interoperable → A well-defined specification (DMP)– Open → Open Source Software (Chillout )– Future proof → Designed to include innovation

• It is time to stop talking and make it happen– Join the community at http://chillout.dmpf.org/