Centralized Rights Manager for Mobile DRM
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Content protection in mobile devices is challenging due to lack of uniform Digital Rights Management (DRM) standards, varying CPU performance and memory capacity, and the need for seamless transfer of media rights across devices in Over-The-Top (OTT) distribution, particularly in 'TV Everywhere' services.
Innovation Solution
A content protection system using a client-server architecture with symmetric encryption, where a media preparation server encrypts content and a centralized rights manager provides decryption keys, ensuring DRM control through a unique device and user-specific key management system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized rights manager with symmetric encryption is implemented, then content protection security is improved, but system complexity increases
Solution Approach 1:
A centralized rights manager server acts as an intermediary between content delivery and device playback. The server holds the master encryption keys and securely distributes decryption credentials to authorized devices, eliminating the need to embed complex key management systems in each mobile device while maintaining high security standards.
Solution Approach 2:
The complex key management and rights enforcement logic is extracted from individual mobile devices and consolidated into a centralized rights manager server. This allows devices to have simpler playback clients while the security-critical functions reside in the controlled server environment.
2Adaptability or versatility
If device-specific key management is implemented, then rights transferability across devices is improved, but key distribution complexity increases
Solution Approach 1:
The rights manager implements a feedback-based key distribution system where devices register their capabilities and receive appropriately scoped decryption credentials. The system continuously verifies device authorization status and dynamically adjusts rights based on subscription status, enabling seamless rights transfer when devices are properly authorized through the rights manager.
Solution Approach 2:
The rights manager server provides universal key management services across multiple device types and platforms. A single standardized interface handles key distribution, rights verification, and authorization for diverse mobile devices, eliminating the need for device-specific key management implementations.
3Productivity
If symmetric encryption is used for content protection, then encryption efficiency is improved, but key management security risks increase
Solution Approach 1:
The encryption system uses segmented key hierarchy where a master key stored securely on the server encrypts content keys, which in turn encrypt the actual media content. This segmentation allows efficient symmetric encryption at the content level while protecting the master key through server-side control and secure key derivation mechanisms.
Data Source
AI summary
Media content is delivered to a variety of mobile devices in a protected manner based on client-server architecture with a symmetric (private-key) encryption scheme. A media preparation server (MPS) encrypts media content and publishes and stores it on a content delivery server (CDS), such as a server in a content distribution network (CDN). Client devices can freely obtain the media content from the CDS and can also freely distribute the media content further. They cannot, however, play the content without first obtaining a decryption key and license. Access to decryption keys is via a centralized rights manager, providing a desired level of DRM control.