Harmonized Security for Multi-network Video Services
0 likes551 views
Verimatrix provides revenue security solutions for multi-network video services across devices. It has over 590 operator customers in over 90 countries protecting over $5 billion in revenue. As video consumption expands across networks and devices, Verimatrix offers an integrated solution with a single security authority to harmonize protection for linear, on-demand and over-the-top services on any screen.
Harmonized Security for Multi-network Video Services
- 1. Harmonized Security for Multi-network Video Services Steve Christian Verimatrix #multinetwork
- 2. Verimatrix Profile Mission Revenue security solutions for multi-network, multi-screen applications: DVB one-way & hybrid, IPTV and Internet TV to STBs, PCs, connected TVs, web tablets and mobile devices Headquarters San Diego, California, with European HQ in Munich, Germany and Asian HQ in Singapore. Sales and support in France, The Netherlands, Russia, China, Brazil and Argentina. Customers 590+ operator customers in 90+ countries, including 60 Tier 1’s and 2’s – more than 25M screens and $5B+ revenue protected on IPTV, DVB and OTT devices Partners International network of more than 110 ecosystem channel & integration partners including Ericsson, Huawei, Accenture, Cisco, Siemens, Technicolor and ZTE Investors Goldman Sachs, Mission Ventures, Crescendo Ventures, Cipio Partners, JK&B Capital and Alliance Bernstein
- 3. Disparate Video Services: A Viable Business Proposition? ????? Pay-TV Internet TV Service Service Subscriber Account Web portal RF Broadcast Broadband Network to home Service PC/Mac Specific STB Game console Tablet/Phone 3
- 4. The New Video Service Model Head End Complete Service Rights Management “Super-domain” …and Inside a Household... Beyond Linear RF Delivery Hybrid HD STB Wireless devices Linear IP Delivery On-demand & Catch-up IP Delivery Broadband Access Point Smart TVs
- 5. Video on the Internet 1.3 Tbps Flash crowd DoSWebcast EQUALS of RECORD TRAFFIC on Live webcast STEALS TV TRANSFERS audience live Record for online fashion show cable-size audience Election Day broadcast share to CONCURRENT STREAMS Internet 1999 2002 2004 2008 2009 2011 1,084 Gbps 444 Gbps Slide courtesy of Akamai 15.9 Gbps 21.0 Gbps <1 Gbps #multinetwork #nab2012 - 5
- 6. Video on the Internet 1.3 Tbps 1999 2002 2013 2004 2008 2015 2009 HD Video over 2011 IP into the home Slide courtesy of Akamai
- 7. An Explosion of Internet Traffic Today Future • 700 million video users x3= 2.1 billion video users • 10 mins of video daily x12= 2 hrs of video daily • 500 Kbps 7.5 Mbps for hi-def content x15= x540=
- 8. The New Frontier: Pervasive Secure Video Services Cracking the NUT (Network Unification Theory) Unify current and future delivery systems Harmonized Service 1. Managed pay-TV Rights Database 2. Unmanaged OTT 3. Home networks IPTV Catch- or up & 4. Remote access DVB OTT delivery delivery and optimize network resource useage Home Gateway and Networking 8
- 9. An Integrated Solution: DVB Foundation SMS / Middleware Single Security Authority Linear Content Broadcast Client Support Broadcast CSM Key & (DVB one-way) control data ViewRight DVB One-way DVB STB Multiplexers, Scramblers OMI / Entitlement Interface Verimatrix Entitlements DB 9
- 10. An Integrated Solution: DVB & OTT SMS / Middleware Single Security Authority Linear ViewRight Content Client Support Broadcast CSM (DVB one-way) Multiplexers, Scramblers ViewRight OMI / Entitlement Interface Key & control Desktop data ACSM Verimatrix Adaptive Streaming IP return path for ViewRight IPTV, Internet & Hybrid, or OTT clients OTT ViewRight Web Encoders, Encryptors, Servers Entitlements DB 10 On-demand Content
- 11. An Integrated Solution: Multi DRM SMS / Middleware Single Security Authority Linear Content ViewRight Client Support Broadcast CSM Key & (DVB one-way) control data ViewRight DVB One-way DVB STB Multiplexers, Operator Management Interface Scramblers ViewRight Hybtrid STB ACSM IPTV & Verimatrix Adaptive Streaming IP return path Hybrid for ViewRight IPTV, Hybrid, or OTT clients ViewRight PC / Mac MultiRights Marlin Server Encoders, iPhone & Encryptors, Android MultiRights Internet & PlayReady Server Servers OTT Entitlements DB MultiRights 11 MPEG-DASH Server On-demand Content 3rd-party Players MultiRights Framework & DRM Clients
- 12. Huawei Middleware Linear & system management Content VCAS 3 Head-end Harmonic Verimatrix ViewRight Encoders IPTV CSM Client Devices Envivio Verimatrix Encoders Verimatrix IPTV CSM ViewRight RTES Web OMI / Entitlement Interface Verimatrix HLS IPTV ACSM Key data ViewRight Verimatrix Network Smart TV switching Expansion Option IPTV ViewRight STB Huawei VOD ViewRight PC Verimatrix Entitlements DB VEM On-demand Content 12 Etisalat eLife IPTV/OTT
- 13. Summary: Multi-network Video Services: Best Practices Ensure a transparent consumer experience Enable subscriber rights coordination across multiple delivery networks and super domains Don’t assume streaming services deserve less security consideration – may be higher “No man is an island” – look for a proven ecosystem architecture 13
- 14. Thank You Schristian@verimatrix.com www.verimatrix.com #multinetwork
- 15. VCAS Multi-Network Approach 3rd Party VCAS SMS / Middleware Client Support VCAS Unified Head-end Verimatrix ViewRight STB CSM (IPTV/Hybrid) Linear DVB One-way Verimatrix Content & Hybrid Bcast CSM ViewRight (DVB one-way) PC / Mac OMI / Entitlement Interface Verimatrix ACSM HTTP Live Srvr Key Scramblers, ViewRight IPTV Verimatrix data Encoders, Web Servers, MultiRights Modulators PlayReady Server MultiRights On-demand Marlin Server Content Internet & CDN 3rd-party Players HTML 5 Browsers MultiRights & DRM Clients MPEG-DASH IP return path Entitlements for ViewRight IPTV, DB Hybrid, or OTT clients MultiRights Other DRM MultiRights Framework ©2012 Verimatrix, Inc. 15
Editor's Notes
- #14: Many studios request HW root of trust which obviously in STBs can be satisfied by Secure SoC and Key Ladder (CWPP) but on softer devices can be only simulated by using code obfuscation and whitebox cryptography (such as on PCs but most will not release HD content to PCs) and on Tablets the use of Secure SoC and standards such as TrustZone are being required for HD content.Alsoasking about what happens after CAS/DRM is done with its part. How/where is the video decrypted and decoded, how are the outputs protected, etc. DIGITAL WATERMARKINGSoftware vendors have implemented AACS for Windows PCs. Some studios will license their HD content through approved DRM-protected schemes for PCs without requiring hardware roots of trust or software hardening, as long as digital outputs are protected by HDCP13. Some studios will allow still-image digital output without HDCP. Other studios will not license HD content in the Home Entertainment window for PC implementations unless they have hardware roots of trust (a la Intel Insider) or software hardening (see p. 18), because they want to avoid hacks similar to the AACS hack of January 2007, which affected software implementations14.