HKG18-217 - OpenCDM/CDMi (Multi DRM) work with WPE & Chromium
0 likes1,553 views
The document provides an overview of Linaro's OpenCDM and CDMI work with WPE and Chromium browsers for a multi-DRM solution using OP-TEE decryption on HiKey. It details the integration of WPE browser support, validation with various DRM systems, and the modular structure of OpenCDM for extensibility. Future plans include validation of Microsoft PlayReady on WPE and synchronization with the latest EME standards.
![OpenCDM plugin
Divided into three layers: browser glue, core and communication. Allowing other browsers or RPC mechanisms to be
easily added. LHG supports Chromium and WPE (used in Comcast RDK).
Browser
OCDM [1]
src/cdm/ src/mediaengine/
src/browser/chrome/
src/com/cdm/ src/com/mediaengine/
[1] https://github.com/linaro-home/open-content-decryption-module](https://image.slidesharecdn.com/hkg18-217-180321074423/85/HKG18-217-OpenCDM-CDMi-Multi-DRM-work-with-WPE-Chromium-5-320.jpg)
![CDMi Service
CDMi Service [2]
[1] Note: Currently different key systems are selected at compile time via autotools
--enable-playready or --enable-aes-ta.
[2] https://github.com/linaro-home/open-content-decryption-module-cdmi
PlayReady
OP-TEE [1]
Clearkey
OP-TEE [1]](https://image.slidesharecdn.com/hkg18-217-180321074423/85/HKG18-217-OpenCDM-CDMi-Multi-DRM-work-with-WPE-Chromium-7-320.jpg)
HKG18-217 - OpenCDM/CDMi (Multi DRM) work with WPE & Chromium
- 1. HKG18-217: OpenCDM/CDMi (Multi DRM) work with WPE & Chromium Sivasubramanian P
- 2. Overview ● This session will provide an overview of Linaro OpenCDM & CDMi work with WPE, Chromium browsers and multiDRM solution using OPTEE decryption on HiKey OpenEmbedded build. ● The focus will be about the addition of WPE browser support to existing Linaro CDM/CDMi and it's validation with different DRMs like ClearKey, PlayReady and Widevine on RDK Client image (Morty based) with Westeros Wayland Compositor and WPE.
- 3. Quick Recap ● RDK (Reference Design Kit) It’s complete set of software components, tools and documentation that aid faster development of standard Linux based set-top boxes to the market. It is a pre-integrated, modular, open-source software distribution that provides a common framework for powering customer-premises equipment (CPE) such as set-top boxes. Code repo - https://github.com/rdkcmf ● Westeros Wayland Compositor It’s a simple light-weight, opensource Wayland compositor designed to be suitable for embedded systems. It supports normal, nested, and embedded wayland compositing. Code repo - https://github.com/rdkcmf/westeros. ● WPE Browser WPE (WebPlatform for Embedded) is Metrological’s port of standard Webkit with support for wayland display protocol. It supports video, graphics & web content rendering using GStreamer & Webkit framework. Code repo - https://github.com/Metrological/WebKitForWayland
- 4. OpenCDM ● OpenCDM is a Content Decryption Module developed according to W3C EME specification to be used with HTML5 based browser environments and DRM ecosystems. ● OpenCDM is built with a modular concept in mind to be easily extensible with different browsers. ● It provides common CDM & mediaengine APIs to be invoked by browser glue layer. ● Fraunhofer FOKUS developed Open Content Decryption Module (OCDM) & Open Content Decryption Module interface (CDMi) is common reference.
- 5. OpenCDM plugin Divided into three layers: browser glue, core and communication. Allowing other browsers or RPC mechanisms to be easily added. LHG supports Chromium and WPE (used in Comcast RDK). Browser OCDM [1] src/cdm/ src/mediaengine/ src/browser/chrome/ src/com/cdm/ src/com/mediaengine/ [1] https://github.com/linaro-home/open-content-decryption-module
- 6. OpenCDMi ● OpenCDMi is a Content Decryption Module Interface, which contains most CDM logic and is a c++ wrapper for the embedded platform DRM. ● This implementation enables DRM interoperability by providing common RPC interfaces to OpenCDM, thereby decoupling DRM dependency from the browser. ● OpenCDM uses the operating system's native RPC mechanisms to forward EME calls to the CDMi, which routes it to DRM. ● Furthermore, the media sample transmission between a browser decoupled media engine and the CDMi can be secured via a DRM-specific authenticated interface.
- 7. CDMi Service CDMi Service [2] [1] Note: Currently different key systems are selected at compile time via autotools --enable-playready or --enable-aes-ta. [2] https://github.com/linaro-home/open-content-decryption-module-cdmi PlayReady OP-TEE [1] Clearkey OP-TEE [1]
- 9. Multi DRM & OPTEE ● DRM is a system used to protect the content according to the constraints associated with the specific content from basic protection through token based secure authentication or simple AES encryption of the video to sophisticated license exchange and policy management. ● Types of DRM ○ ClearKey ○ Microsoft PlayReady ○ Wividene ● OP-TEE (Open Portable Trusted Execution Environment)is designed primarily to rely on the ARM TrustZone(R) technology as the underlying hardware isolation mechanism. However, it has been structured to be compatible with any isolation technology suitable for the TEE concept and goals.
- 10. Multiple CDM & CDMi ● Different forks of OpenCDM & CDMi are used with different browsers and DRMs support implementing different EME versions. ● Linaro CDM & CDMi has Chromium browser, ClearKey and PlayReady DRM support with OPTEE. ● WPE/RDK CDM & CDMi (Restricted) has WPE browser, different DRMs but without OPTEE. CDM/Feature Browser support DRM support CDMi License Linaro CDM & CDMi Chromium & WPE ClearKey (Open), PlayReady (Licensed) Open WPE/RDK CDM & CDMi WPE Restricted Restricted
- 11. Linaro CDM & CDMi ● Linaro CDM & CDMi as single upstream going forward with missing browsers and DRMs implementating latest W3C EME. ○ https://github.com/linaro-home/open-content-decryption-module ○ https://github.com/linaro-home/open-content-decryption-module-cd mi/ ● Added WPE browser support to Linaro CDM in addition to existing Chromium browser. It’s validated using ClearKey content playback on WPE both with OPTEE aes and non secure SSL decryption.
- 12. WPE support on Linaro CDM & CDMi ● Added WPE browser glue under src/browser. ● EME implementaion for CDM & MediaEngine APIs. ● RPC unification between CDM & CDMi. ● Linaro CDM & CDMi changes ○ https://github.com/linaro-home/open-content-decryption-module/pull/4 ○ https://github.com/linaro-home/open-content-decryption-module-cdmi/pull/8 ● ClearKey with OPTEE decryption on WPE stable - https://github.com/WebPlatformForEmbedded/WPEWebKit/pull/435 ● 32bit OPTEE-OS changes - https://git.linaro.org/openembedded%2Fmeta-linaro.git/commit/?id=d73e794c 7e7ebb1cc5bf495a52a72b26fb118250
- 13. Current & Future ● Validated with ClearKey playback using both SSL & OPTEE AES decryption. ● Regression tested on existing Chromium support. ● Validation of MS PlayReady v3.3 on WPE is in progress. ● Wivevine support to CDMi and syncing with latest EME in pipeline, thereby making Linaro CDM/CDMi as single CDM/CDMi across system. ● Reference platforms ○ HiKey (only secure decryption) ○ Poplar (fully secure media path in future..) ○ i.MX 8M board (maybe).
- 14. Thank You sivasubramanian.patchaiperumal@linaro.org #HKG18 HKG18 keynotes and videos on: connect.linaro.org For further information: www.linaro.org