SlideShare a Scribd company logo
Build end-to-end video experiences
with Azure Media Services
Ken Cenerelli
@KenCenerelli
kencenerelli.wordpress.com Microsoft Azure
Agenda
 Online Media Today
 What is Azure Media Services
 Architecture and Features
 Video-on-demand service
 Dynamic packaging
 Securing your media
 Live Streaming service
Video contributes to
57% of internet traffic
Everyone can create videos
Long form content
over IP delivery
152
75
30
Traditional TV
Connected TV
Streaming gadget
More Screens = More Viewership
Viewers who consume on 4 devices WATCH 42%
MORE television than those who only watch TV only
Challenges
Infrastructure costs
Managing costs
Monetizing contents
Digital Rights Management
Security
Multiple formats, multiple bitrates
What is Microsoft
Azure Media Services?
Media Services Architecture
“Build-On” Media Partners and Customers
AzureCDNPartnerCDNs
Origin
Caching
Released Coming Soon Partners
Partner Technologies (Media Processors, Origin Servers, Live Encoders etc.)
Microsoft Azure (Fabric, Storage, Compute, Database)
Video-on-demand Services
Ingest
Encode
Package
Encrypt
Deliver
Step 1: Ingest Content
Different options of Ingesting a Mezzanine Asset
• Pre-encrypt files prior to uploading (AES 256)
• Secure HTTPS upload
• Network level peering for fast HTTP into Azure
• Fast upload using UDP with Aspera
• Storage Import/Export service to ship large amounts of media to DC
Multiple storage accounts enabled to manage your media asset
Azure Blob
Step 2: Encode, Package or Encrypt
Azure BlobAzure Blob
Queue
Microsoft Azure Media Encoder
• Supports encoding to H.264 or VC-1 video
• Encodes audio to AAC-LC, HE-AAC, Dolby DD+, WMA
• Packages to MP4, Smooth Streaming, Http-Live-Streaming
• Encrypts with PlayReady, Common Encryption, AES
Encoding with third-parties
• Partner SDK for enabling ‘build-in’ encoders
Azure BlobAzure Blob
Encoding Reserved Units
Step 2: Encode, Package or Encrypt
Step 3: Deliver Content
Managed streaming service… it just works!
• Guaranteed bandwidth
• Auto recovery, redundancy and failover
• Multiple origins support and scale independently
Azure and 3rd party CDN support
IP Whitelisting
Ingest
Azure Blob
Asset
Origin Server
Pricing and SLA
For more information, please refer to Azure Media Services Pricing Details
Encoding
Service
Free Trial
(3mths)
Shared Reserved
Encoding
Price
Free
(100GB limit)
$1.99 Per GB
$1.99 Per GB +
$99 per month/RU
Encoding
SLA
NA
Availability = 99.9%
• Measured as REST API availability
• No guarantee on wait time between
tasks
Availability = 99.9%
• Measured as REST API availability
• Media tasks running concurrently =
Number of reserved units
Streaming
Service
Free Trial
(3mths)
Shared Reserved
Streaming
Price
Free
(100GB limit)
Standard Egress Rates
Standard egress rates +
$199 per month
Streaming
SLA
NA Availability = NA
• No bandwidth guarantee
Availability = 99.9%
• Measured as server availability based on
response time
• Peak bandwidth of 200 Mbps per
Reserved Unit allocated for Origin
Microsoft Azure Portal
for Media Services
Demo: Azure Media Services workflow
Media Services APIs and SDKs 1/2
http://msdn.microsoft.com/en-us/library/windowsazure/hh973617.aspx
https://nuget.org/packages/windowsazure.mediaservices
https://github.com/Azure/azure-sdk-for-media-services
https://github.com/sazure/azure-sdk-for-media-services-
extensions
https://github.com/windowsazure/azure-sdk-for-php
http://msopentech.com/blog/2014/01/23/ms-open-
technologies-enhances-open-source-php-sdk-windows-azure/
Media Services APIs and SDKs 2/2
http://www.windowsazure.com/en-us/develop/java/java-home
https://github.com/windowsazure/azure-sdk-for-java/
http://www.gtrifonov.com/2013/08/24/how-to-use-windows-azure-
powershell-for-media-services/
https://github.com/fritzy/node-azure-media
Dynamic Packaging
Dynamic packaging
Allows you to re-use your encoded content and bring it to various streaming formats without repackaging the content.
Video sources Multi-bitrates Mp4
Origin Server
HLS
Smooth
Streaming
Encode
Video sources Multi-bitrates Mp4
Origin Server
HLS
Smooth
Streaming
Encode
Dynamic
Packaging
Traditional Encode and Package
Dynamic Packaging
Input format: Mp4 or Smooth Streaming
Output format: Smooth Streaming , Http-Live-Streaming (v4 and v3), MPEG-DASH
You need to have at least 1 reserved streaming unit to enable dynamic packaging!
DASH
Dynamic packaging
using .NET SDK extension for Media Services
Demo: How to use dynamic packaging feature to
produce SS, HLS and DASH content
Useful information - Dynamic Packaging
http://channel9.msdn.com/Events/Build/2014/3-610?#time=15m34s
Introducing Extensions for Microsoft Azure Media Services .NET SDK
Demo – how to create HLS and Smooth Streaming assets using dynamic
packaging
Dynamic packaging and Encoding and Reserved units
Securing your media
options with Azure Media Services
Why do you need to secure your content
Subscription Fee
(User Authentication)
Ad-funded
(Player Authentication)
High-premium content provider:
• Prevent piracy
• Prevent Man-in-the-middle
Ad-funded
(Player Authentication)
Employee only
Enterprise or Time-sensitive event:
• Piracy is not a major issue
• Prevent Man-in-the-middle
Options with Media Services
Options with Media Services
AES Clear Key dynamic encryption
• Encrypt on-the-wire communication using the
widely-known symmetric AES encryption
algorithm.
• An authentication service for key is provided.
DRM technology (PlayReady)
• Encrypt Smooth Streaming content with PlayReady
protection via common encryption scheme (CENC),
and the option of packaging it into HLS or DASH.
• DRM technology allows you to define restrictive
licensing agreement to manage user access rights to
your media.
Who should use this feature:
• “Trust your client”: Key is stored in clear format
so it requires you to trust your client not to pass
key around
• “Light” encryption: prevent “man-in-the-middle”
attack
• Lower cost compared to DRM solution
Who should use this feature:
• Premium content or high business impact content:
decoding happens in a secure DRM decoder
environment
• Prevent piracy and “man-in-the-middle” attack
• More business models enabled
Storage
MP4
Define:
• Asset Delivery Policy: Dynamic
Encryption
• Content Key
• Content Key Authorization policy
• Token/IP/Open
Origin
Server
MAMS - Key Services
Token
verification
AES Key
Client SDK
Customers
Architecture: AES Dynamic Encryption
Customer’s
Authz system
Pre-encrypted PlayReady
file:
License Acquisition URL
Key ID
Content key
Storage Origin
Server
PlayReady + Smooth Streaming
PlayReady server
Client SDK
+
PlayReady SDK
Customers
Architecture: PlayReady DRM solution
Useful information – Secure delivery
Secure your media with Azure Media Services
Protecting Smooth Streaming and MPEG DASH with PlayReady
How to Protect an asset with PlayReady protection
Introducing the New Office 365 Video Experience
Why do you need to secure your content
Subscription Fee
(User Authentication)
Ad-funded
(Player Authentication)
High-premium content provider:
• Prevent piracy
• Prevent Man-in-the middle
Ad-funded
(Player Authentication)
Employee only
Enterprise or Time-sensitive event:
• Piracy is not a major issue
• Prevent Man-in-the middle
Video for Office 365
powered by Azure Media Services
Secure, cloud-based video upload, storage and optimized playback for the enterprise
Create, manage and subscribe to various channels
Capture, share and discover from any device
Live Streaming
Media Services Live
Stream live content directly through public
cloud
Multi-format output (Smooth Streaming, HLS
and DASH)
Global reach – deploy anywhere quickly
Cloud elasticity
• No capital expenses
• Ramp quickly to global scale
• Tear down immediately
Channel
Azure Load Balancer
Blob Storage
Preview URL
Program URL
Ingest:
Ingest URL to accept Live streams with different
bitrates (smooth streaming) through load
balancer
Forwards the stream to all preview end-points
Preview:
Receives stream from Ingest
Forwards to Program
Exposes Preview URL (for monitoring and
voice-over)
Program:
Writes it to Blob Storage for Live DVR and
Archive
Dynamic package into HLS, Smooth and DASH
Build end-to-end video experiences with Azure Media Services
Get started
Visit azure.microsoft.com
Build end-to-end video experiences with Azure Media Services

More Related Content

PPTX
Streaming with Azure Media Services
PPTX
Windows azure media services overview
PPTX
Microsoft Azure Media Services
PDF
Build end-to-end video experiences with Azure Media Services
PPTX
Windows Azure Media Services June 2013 update
PPTX
Azure mediaservices
PDF
Securing Content in the Cloud
PPTX
Building Highly Scalable Immersive Media Solutions on AWS
Streaming with Azure Media Services
Windows azure media services overview
Microsoft Azure Media Services
Build end-to-end video experiences with Azure Media Services
Windows Azure Media Services June 2013 update
Azure mediaservices
Securing Content in the Cloud
Building Highly Scalable Immersive Media Solutions on AWS

What's hot (9)

PPTX
Cloud Transition Patterns for Media Enterprises
PDF
초보 개발자도 바로 따라할 수 있는 AWS 미디어 서비스를 이용한 Live/VOD 서비스 구축 – 현륜식 AWS 솔루션즈 아키텍트:: A...
PPTX
Pitt Immersion Day Module 4 - storage in AWS
PPTX
Pitt Immersion Day Module 3 - networking in AWS
PPTX
Azure Media Services Step-by-Step Tutorial Docs Series - Part 6
PPTX
Pitt Immersion Day Module 5 - security overview
PDF
AWS Direct Connect 및 VPN을 이용한 클라우드 아키텍쳐 설계:: Steve Seymour :: AWS Summit Seou...
PPTX
Drilett aws vpc_presentation_shared
PDF
Aws container webinar day 2
Cloud Transition Patterns for Media Enterprises
초보 개발자도 바로 따라할 수 있는 AWS 미디어 서비스를 이용한 Live/VOD 서비스 구축 – 현륜식 AWS 솔루션즈 아키텍트:: A...
Pitt Immersion Day Module 4 - storage in AWS
Pitt Immersion Day Module 3 - networking in AWS
Azure Media Services Step-by-Step Tutorial Docs Series - Part 6
Pitt Immersion Day Module 5 - security overview
AWS Direct Connect 및 VPN을 이용한 클라우드 아키텍쳐 설계:: Steve Seymour :: AWS Summit Seou...
Drilett aws vpc_presentation_shared
Aws container webinar day 2
Ad

Viewers also liked (14)

DOCX
Affidavit for name mistake/misprint in result or any other document
PPTX
La diffusion vidéo avec le Cloud Azure
PPTX
Contrôler les usages de vos informations dans le Cloud avec Windows Azure AD ...
PDF
Windows Azure Media Services : des API pour encoder, multiplexer et difuser v...
PDF
Why amazon Web Services?
PDF
Aws S3 uploading tricks 2016
PDF
Cloud Trends 2017
PPTX
Azure Media Services 大全
PDF
Devday 2014 using_afs_in_your_cloud_app
PDF
L'évolution du Cloud dans les 10 prochaines années
PDF
Clash of Technologies Google Cloud vs Microsoft Azure
PPTX
Мультискрин-сервисы и гибридная ТВ-платформа Huawei
PDF
Cloud Native Patterns with Bluemix Developer Console
PDF
AWS VPC best practices 2016 by Bogdan Naydenov
Affidavit for name mistake/misprint in result or any other document
La diffusion vidéo avec le Cloud Azure
Contrôler les usages de vos informations dans le Cloud avec Windows Azure AD ...
Windows Azure Media Services : des API pour encoder, multiplexer et difuser v...
Why amazon Web Services?
Aws S3 uploading tricks 2016
Cloud Trends 2017
Azure Media Services 大全
Devday 2014 using_afs_in_your_cloud_app
L'évolution du Cloud dans les 10 prochaines années
Clash of Technologies Google Cloud vs Microsoft Azure
Мультискрин-сервисы и гибридная ТВ-платформа Huawei
Cloud Native Patterns with Bluemix Developer Console
AWS VPC best practices 2016 by Bogdan Naydenov
Ad

Similar to Build end-to-end video experiences with Azure Media Services (20)

PPTX
BUILD 2014 - Building end-to-end video experience with Azure Media Services
PDF
Unleash the Power of Video Communication - Office 365 Video vs. Azure Media S...
PDF
[AWS에서의 미디어 및 엔터테인먼트] 클라우드에서의 브로드캐스팅 서비스
PPTX
Azure conf mm_wa_mese_ol
PDF
20141021 AWS Cloud Taekwon - Streaming Content on AWS
PPTX
Best Practices, AWS Elemental and Media Services
PPTX
Lights, Camera, Action - Windows Azure Media Services on the Loose - the Azug...
PPTX
Azure media services
PPTX
Vietnam AWS Community Day 2018
PDF
Amazon Web Services and Interact - Workshop Giugno 2013
PPTX
Why Stream Video with Cloudflare?
PDF
Netflix Playback Access Team
PPTX
Azure Media Services Step-by-Step Tutorial Docs Series - Part 5
PDF
AWS ELEMENTAL MEDIA SERVICES UPDATE
PPTX
Content Delivery Network - CDN
PPTX
DRM Workflows: How to Provide Protected Content to Desktop, Mobile, TVs, & St...
PPTX
The CIO Circle Executive Briefing featuring Zoom and 8x8
PPTX
DEVNET-1123 CSTA - Cisco Security Technical Alliances, New Program for Ecosys...
PPTX
How to successfully sell cloud backup
BUILD 2014 - Building end-to-end video experience with Azure Media Services
Unleash the Power of Video Communication - Office 365 Video vs. Azure Media S...
[AWS에서의 미디어 및 엔터테인먼트] 클라우드에서의 브로드캐스팅 서비스
Azure conf mm_wa_mese_ol
20141021 AWS Cloud Taekwon - Streaming Content on AWS
Best Practices, AWS Elemental and Media Services
Lights, Camera, Action - Windows Azure Media Services on the Loose - the Azug...
Azure media services
Vietnam AWS Community Day 2018
Amazon Web Services and Interact - Workshop Giugno 2013
Why Stream Video with Cloudflare?
Netflix Playback Access Team
Azure Media Services Step-by-Step Tutorial Docs Series - Part 5
AWS ELEMENTAL MEDIA SERVICES UPDATE
Content Delivery Network - CDN
DRM Workflows: How to Provide Protected Content to Desktop, Mobile, TVs, & St...
The CIO Circle Executive Briefing featuring Zoom and 8x8
DEVNET-1123 CSTA - Cisco Security Technical Alliances, New Program for Ecosys...
How to successfully sell cloud backup

More from Ken Cenerelli (14)

PPTX
ASP.NET Core deployment options
PPTX
No SQL, No Problem: Use Azure DocumentDB
PPTX
Azure app service to create web and mobile apps
PPTX
ASP.NET Core: The best of the new bits
PPTX
Analyze Your Code With Visual Studio 2015 Diagnostic Tools
PPTX
Azure Data Storage
PPTX
Building high performance software with Microsoft Application Insights
PPTX
An Introduction to Universal Windows Apps
PPTX
Cloud Powered Mobile Apps with Azure
PPTX
Building Windows 8.1 Apps with Mobile Services
PPTX
Maximizing code reuse between Windows Phone 8 and Windows 8 (That Conference ...
PPTX
Maximizing code reuse between Windows Phone 8 and Windows 8 (DevTeach Toronto...
PPTX
An Introduction to Windows Phone 7 Development
PPTX
Introduction To Umbraco
ASP.NET Core deployment options
No SQL, No Problem: Use Azure DocumentDB
Azure app service to create web and mobile apps
ASP.NET Core: The best of the new bits
Analyze Your Code With Visual Studio 2015 Diagnostic Tools
Azure Data Storage
Building high performance software with Microsoft Application Insights
An Introduction to Universal Windows Apps
Cloud Powered Mobile Apps with Azure
Building Windows 8.1 Apps with Mobile Services
Maximizing code reuse between Windows Phone 8 and Windows 8 (That Conference ...
Maximizing code reuse between Windows Phone 8 and Windows 8 (DevTeach Toronto...
An Introduction to Windows Phone 7 Development
Introduction To Umbraco

Recently uploaded (20)

PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PDF
Spectral efficient network and resource selection model in 5G networks
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PPTX
Cloud computing and distributed systems.
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
Electronic commerce courselecture one. Pdf
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
PDF
Unlocking AI with Model Context Protocol (MCP)
PDF
Advanced methodologies resolving dimensionality complications for autism neur...
PDF
Network Security Unit 5.pdf for BCA BBA.
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
PDF
Modernizing your data center with Dell and AMD
PDF
NewMind AI Weekly Chronicles - August'25 Week I
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Mobile App Security Testing_ A Comprehensive Guide.pdf
The Rise and Fall of 3GPP – Time for a Sabbatical?
Dropbox Q2 2025 Financial Results & Investor Presentation
Spectral efficient network and resource selection model in 5G networks
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Cloud computing and distributed systems.
Digital-Transformation-Roadmap-for-Companies.pptx
Encapsulation_ Review paper, used for researhc scholars
Electronic commerce courselecture one. Pdf
Reach Out and Touch Someone: Haptics and Empathic Computing
“AI and Expert System Decision Support & Business Intelligence Systems”
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
Unlocking AI with Model Context Protocol (MCP)
Advanced methodologies resolving dimensionality complications for autism neur...
Network Security Unit 5.pdf for BCA BBA.
Building Integrated photovoltaic BIPV_UPV.pdf
Modernizing your data center with Dell and AMD
NewMind AI Weekly Chronicles - August'25 Week I

Build end-to-end video experiences with Azure Media Services

  • 1. Build end-to-end video experiences with Azure Media Services Ken Cenerelli @KenCenerelli kencenerelli.wordpress.com Microsoft Azure
  • 2. Agenda  Online Media Today  What is Azure Media Services  Architecture and Features  Video-on-demand service  Dynamic packaging  Securing your media  Live Streaming service
  • 3. Video contributes to 57% of internet traffic
  • 7. More Screens = More Viewership Viewers who consume on 4 devices WATCH 42% MORE television than those who only watch TV only
  • 8. Challenges Infrastructure costs Managing costs Monetizing contents Digital Rights Management Security Multiple formats, multiple bitrates
  • 9. What is Microsoft Azure Media Services?
  • 10. Media Services Architecture “Build-On” Media Partners and Customers AzureCDNPartnerCDNs Origin Caching Released Coming Soon Partners Partner Technologies (Media Processors, Origin Servers, Live Encoders etc.) Microsoft Azure (Fabric, Storage, Compute, Database)
  • 12. Step 1: Ingest Content Different options of Ingesting a Mezzanine Asset • Pre-encrypt files prior to uploading (AES 256) • Secure HTTPS upload • Network level peering for fast HTTP into Azure • Fast upload using UDP with Aspera • Storage Import/Export service to ship large amounts of media to DC Multiple storage accounts enabled to manage your media asset Azure Blob
  • 13. Step 2: Encode, Package or Encrypt Azure BlobAzure Blob Queue
  • 14. Microsoft Azure Media Encoder • Supports encoding to H.264 or VC-1 video • Encodes audio to AAC-LC, HE-AAC, Dolby DD+, WMA • Packages to MP4, Smooth Streaming, Http-Live-Streaming • Encrypts with PlayReady, Common Encryption, AES Encoding with third-parties • Partner SDK for enabling ‘build-in’ encoders Azure BlobAzure Blob Encoding Reserved Units Step 2: Encode, Package or Encrypt
  • 15. Step 3: Deliver Content Managed streaming service… it just works! • Guaranteed bandwidth • Auto recovery, redundancy and failover • Multiple origins support and scale independently Azure and 3rd party CDN support IP Whitelisting Ingest Azure Blob Asset Origin Server
  • 16. Pricing and SLA For more information, please refer to Azure Media Services Pricing Details Encoding Service Free Trial (3mths) Shared Reserved Encoding Price Free (100GB limit) $1.99 Per GB $1.99 Per GB + $99 per month/RU Encoding SLA NA Availability = 99.9% • Measured as REST API availability • No guarantee on wait time between tasks Availability = 99.9% • Measured as REST API availability • Media tasks running concurrently = Number of reserved units Streaming Service Free Trial (3mths) Shared Reserved Streaming Price Free (100GB limit) Standard Egress Rates Standard egress rates + $199 per month Streaming SLA NA Availability = NA • No bandwidth guarantee Availability = 99.9% • Measured as server availability based on response time • Peak bandwidth of 200 Mbps per Reserved Unit allocated for Origin
  • 17. Microsoft Azure Portal for Media Services Demo: Azure Media Services workflow
  • 18. Media Services APIs and SDKs 1/2 http://msdn.microsoft.com/en-us/library/windowsazure/hh973617.aspx https://nuget.org/packages/windowsazure.mediaservices https://github.com/Azure/azure-sdk-for-media-services https://github.com/sazure/azure-sdk-for-media-services- extensions https://github.com/windowsazure/azure-sdk-for-php http://msopentech.com/blog/2014/01/23/ms-open- technologies-enhances-open-source-php-sdk-windows-azure/
  • 19. Media Services APIs and SDKs 2/2 http://www.windowsazure.com/en-us/develop/java/java-home https://github.com/windowsazure/azure-sdk-for-java/ http://www.gtrifonov.com/2013/08/24/how-to-use-windows-azure- powershell-for-media-services/ https://github.com/fritzy/node-azure-media
  • 21. Dynamic packaging Allows you to re-use your encoded content and bring it to various streaming formats without repackaging the content. Video sources Multi-bitrates Mp4 Origin Server HLS Smooth Streaming Encode Video sources Multi-bitrates Mp4 Origin Server HLS Smooth Streaming Encode Dynamic Packaging Traditional Encode and Package Dynamic Packaging Input format: Mp4 or Smooth Streaming Output format: Smooth Streaming , Http-Live-Streaming (v4 and v3), MPEG-DASH You need to have at least 1 reserved streaming unit to enable dynamic packaging! DASH
  • 22. Dynamic packaging using .NET SDK extension for Media Services Demo: How to use dynamic packaging feature to produce SS, HLS and DASH content
  • 23. Useful information - Dynamic Packaging http://channel9.msdn.com/Events/Build/2014/3-610?#time=15m34s Introducing Extensions for Microsoft Azure Media Services .NET SDK Demo – how to create HLS and Smooth Streaming assets using dynamic packaging Dynamic packaging and Encoding and Reserved units
  • 24. Securing your media options with Azure Media Services
  • 25. Why do you need to secure your content Subscription Fee (User Authentication) Ad-funded (Player Authentication) High-premium content provider: • Prevent piracy • Prevent Man-in-the-middle Ad-funded (Player Authentication) Employee only Enterprise or Time-sensitive event: • Piracy is not a major issue • Prevent Man-in-the-middle
  • 26. Options with Media Services
  • 27. Options with Media Services AES Clear Key dynamic encryption • Encrypt on-the-wire communication using the widely-known symmetric AES encryption algorithm. • An authentication service for key is provided. DRM technology (PlayReady) • Encrypt Smooth Streaming content with PlayReady protection via common encryption scheme (CENC), and the option of packaging it into HLS or DASH. • DRM technology allows you to define restrictive licensing agreement to manage user access rights to your media. Who should use this feature: • “Trust your client”: Key is stored in clear format so it requires you to trust your client not to pass key around • “Light” encryption: prevent “man-in-the-middle” attack • Lower cost compared to DRM solution Who should use this feature: • Premium content or high business impact content: decoding happens in a secure DRM decoder environment • Prevent piracy and “man-in-the-middle” attack • More business models enabled
  • 28. Storage MP4 Define: • Asset Delivery Policy: Dynamic Encryption • Content Key • Content Key Authorization policy • Token/IP/Open Origin Server MAMS - Key Services Token verification AES Key Client SDK Customers Architecture: AES Dynamic Encryption Customer’s Authz system
  • 29. Pre-encrypted PlayReady file: License Acquisition URL Key ID Content key Storage Origin Server PlayReady + Smooth Streaming PlayReady server Client SDK + PlayReady SDK Customers Architecture: PlayReady DRM solution
  • 30. Useful information – Secure delivery Secure your media with Azure Media Services Protecting Smooth Streaming and MPEG DASH with PlayReady How to Protect an asset with PlayReady protection Introducing the New Office 365 Video Experience
  • 31. Why do you need to secure your content Subscription Fee (User Authentication) Ad-funded (Player Authentication) High-premium content provider: • Prevent piracy • Prevent Man-in-the middle Ad-funded (Player Authentication) Employee only Enterprise or Time-sensitive event: • Piracy is not a major issue • Prevent Man-in-the middle
  • 32. Video for Office 365 powered by Azure Media Services Secure, cloud-based video upload, storage and optimized playback for the enterprise Create, manage and subscribe to various channels Capture, share and discover from any device
  • 34. Media Services Live Stream live content directly through public cloud Multi-format output (Smooth Streaming, HLS and DASH) Global reach – deploy anywhere quickly Cloud elasticity • No capital expenses • Ramp quickly to global scale • Tear down immediately
  • 35. Channel Azure Load Balancer Blob Storage Preview URL Program URL Ingest: Ingest URL to accept Live streams with different bitrates (smooth streaming) through load balancer Forwards the stream to all preview end-points Preview: Receives stream from Ingest Forwards to Program Exposes Preview URL (for monitoring and voice-over) Program: Writes it to Blob Storage for Live DVR and Archive Dynamic package into HLS, Smooth and DASH

Editor's Notes

  • #7: 2013 we started to see TV threatened by streaming TV Provides a way better viewing experience
  • #10: Azure Media Services is a platform-as-a-service that enables you to build customizable media workflow; you could upload, encode, encrypt, package, and deliver video content to multiple platforms and devices.
  • #11: Built on top of Microsoft Azure Media Services is PaaS Offers developers a REST API to access the service Windows Azure Portal is a “Build-On” partner Videos can be delivered through a CDN Client SDKs allow developers to build on various devices and platforms for free
  • #13: Ingest content from local disk to Azure Blob storage
  • #14: By default you will share the encoding through a queue
  • #15: You can also provision your own Encoding Reserved Units to run multiple jobs at once Supports standard codecs like H.264 and AAC-LC Smooth Streaming is an IIS Media Services extension that enables adaptive streaming of media to clients over HTTP PlayReady is a content protection technology from Microsoft that includes encryption, output protection and Digital Rights Management (DRM)
  • #16: Microsoft provides an origin server so customers can watch the content Guaranteed bandwidth when you have your own box (think about viral videos)
  • #18: See /Demo1 folder from readiness kit for steps of this demo. To watch a recorded version of this demo see http://channel9.msdn.com/Events/Build/2014/3-610?#time=9m24s Upload, encode and playback in portal 1. In the management portal show the +New entry point for creating media services 2. Flip to existing media services instance 3. Click into the media service, select the Content tab 4. Press Upload in the command bar 5. Select a file and click ok 6. Once source video is uploaded, click encode in the command bar and do a rename 7. Show the Job tab to show that it is encoding 8. Encoding tab is where you can show the Reserved Capacity 9. Select Preset drop down Playback via HTML5 (IE/Chrome/Safari) 10. Once encoding job is done, click Publish in the command bar 11. Once published click Play in the command bar
  • #19: Portal is not the only way to work with Media Services
  • #22: Traditionally you would encode and package your content for multiple formats to be stored on the server Dynamic packaging means after encoding the origin server will package the content on the fly based on need Save time and money by not needing intermediate packaging step Save money in storage costs as only need one copy of encoded video Must have at least one reserved streaming unit Dynamic Adaptive Streaming over HTTP (DASH), also known as MPEG-DASH, is an adaptive bitrate streaming technique that enables high quality streaming of media content over the Internet delivered from conventional HTTP web servers
  • #23: This demo is available in the /Demo2 folder of the readiness kit. 1. Pre-reqs: Follow steps in top of program.cs 2. Delivery Refer to recorded version of demo - http://channel9.msdn.com/Events/Build/2014/3-610?#time=15m34s 3. Note: Instead of using the custom website player. once encoding and publish is done you can watch the video directly from within the portal on the Content Tab click play You need to have at least 1 reserved streaming unit to enable dynamic packaging!
  • #26: Man-in-the-middle attack is eavesdropping on videos
  • #27: Two options: AES clear key and Digital Rights Management (DRM) For both, when the video is moved from the cloud to your player it is encrypted with AES AES clear key is on client side; client can see the key so you must trust your client DRM means neither the key nor the content are exposed on the client DRM model is used enforce a 48 –hour or 3-time viewing on a rented movie
  • #28: AES is lower cost versus DRM DRM needs DRM SDK on player DRM SDK is not free Some platforms might not have a DRM SDK
  • #29: HTTP Live Streaming (also known as HLS) is an HTTP-based media streaming communications protocol implemented by Apple Inc. as part of their QuickTime, Safari, OS X, and iOS software
  • #30: Only partner ezDRM for a PlayReady server Smooth Streaming is an IIS Media Services extension that enables adaptive streaming of media to clients over HTTP PlayReady is a content protection technology from Microsoft that includes encryption, output protection and Digital Rights Management (DRM)
  • #33: Example of AES for Enterprise is Office 365 Authenticated through A.D. All videos are encrypted thorough AES
  • #35: Dynamic Adaptive Streaming over HTTP (DASH), also known as MPEG-DASH, is an adaptive bitrate streaming technique that enables high quality streaming of media content over the Internet delivered from conventional HTTP web servers HTTP Live Streaming (also known as HLS) is an HTTP-based media streaming communications protocol implemented by Apple Inc. as part of their QuickTime, Safari, OS X, and iOS software
  • #36: Submit a URL to Microsoft of the live stream You must encode the stream as they do not have live encoding; so only smooth streaming as input Microsoft provisions a channel with the ingestion It’s the forwarded to Preview module to monitor it or add voice over It then goes to Program module to provide it to the users It is written to Blob Storage immediately so it can be VOD
  • #37: Update Q&A