The Open Mobile Alliance Digital Rights Management [Standards in a Nutshell]

The Open Mobile Alliance (OMA) is an industry forum with nearly 400 members representing the entire mobile industry value chain, including the telecommunications, information technology, and content industries. The OMA focuses on developing market-driven, interoperable mobile service enablers for the rapidly converging communications, entertainment, and media worlds. OMA digital rights management (DRM) systems are important examples of such enablers. Although they have been developed for the mobile market, these systems assume network and bearer-agnostic delivery of the content over Internet protocol (IP). This assumption makes OMA DRM systems suitable for use in any environment where the content is delivered over IP, which is true of a very wide array of applications. In this article, we present an overview of the OMA DRM systems and describe their most important features     

Content Protective Multi‐Agent Platform for MsMu Service and Pattern‐Based Content Management

Recent research on mobile Internet protocol television and digital right management (DRM) interconnections has focused on multimedia technologies designed to enhance content scalability and adaptive content distribution. However, due to the architectural and scalable limitations, recent systems are not flexible and securable with respect to their adaptive content distribution and protective policy management. Therefore, we propose a content protective multi‐agent platform that provides secure multimedia services, correlation management, pattern‐based management, and multisource multi‐use (MsMu)‐based services. Our architecture, supported by DRM, lets us create a rich set of MsMu‐based content protection and seamless multimedia services through the extension of one source multi‐use (OsMu)‐based content services. We have verified our platform, which provides scalable and securable services with a 17% lower service response time by using a testbed.     

TIRAMISU: A novel approach to content representation and key management for seamless super-distribution of protected media

Media delivery over heterogeneous networks requires both flexible representation and robust protection of content. This paper provides details on the framework for audiovisual content creation, delivery, consumption and protection as conceived within the IST project The Innovative Rights and Access Management Interplatform SolUtion. The proposed framework is based on the emerging MPEG-21 standard for multimedia content delivery and consumption and at the same time it complements it in several aspects, most notably by fully specifying a digital rights management (DRM) scheme. Central to the described framework is a novel key management system, relying on smartcards, which addresses many issues that previously blocked wider adoption of DRM: obtrusiveness of the DRM technology perceived by the end-user, flexibility in licence formulation and adequate level of trust as requested by content owners.     

数字版权管理中权限描述语言研究

数字版权管理为数字网络环境下数字内容交易和传播提供了保障,而权限描述语言是数字版权保护技术中的关键技术.文章分析了权限描述语言的研究现状,论述已有权限描述语言的优势和不足,并探讨了未来的研究方向.     

New paradigms for effective multicasting and fingerprinting of entertainment media

The large-scale adoption of network-centric entertainment systems rests on the ability to provide reliable, low-cost, and secure services for all parties in the entertainment distribution system. The use of modern data networks such as the Internet to communicate digital entertainment media is motivated, in part, by advancements in communication networking, signal processing, and storage technologies that facilitate more flexible and granular business models. This same technological progress can also be shown to equip potential "attackers" with the means to more easily violate system security. A broad class of system security issues for entertainment applications is addressed by the growing field of digital rights management. This article focuses on an aspect of DRM that involves multicast entertainment media distribution using digital encryption and digital fingerprinting technologies to prevent widespread piracy. The goal of DRM is to provide protection and facilitate equitable compensation for all parties in the entertainment distribution chain including content creators, aggregators, distributors, and consumers. Previous security proposals to protect entertainment media have sacrificed broadcast efficiency for security. This article collectively addresses security and broadcast efficiency for network-centric entertainment systems, an area of research seldom explored. We present the challenges, technological solutions, and future trends of this emerging field.     

流媒体DRM系统互操作性的研究

通过分析当今流媒体数字版权管理(DRM)的发展现状,提出了流媒体DRM系统存在的互操作性问题及解决主要途径.结合国外对流媒体DRM系统互操作性的研究,对如何构建一个互操作性体系平台进行了探讨.     

The long march to interoperable digital rights management

This paper discusses interoperability of digital rights management (DRM) systems. We start by describing a basic reference model for DRM. The cause of interoperability is served by understanding and circumscribing what DRM is "in the whole." Then we outline and contrast three different approaches to achieving interoperability. One approach relies on flexible network services to provide functionality where it is needed, perhaps by bridging different systems. We describe an experimental service orchestration system (NEMO) that enables such an approach.     

Authentication gets personal with biometrics

Securing the exchange of intellectual property and providing protection to multimedia contents in distribution systems have enabled the advent of digital rights management (DRM) systems. User authentication, a key component of any DRM system, ensures that only those with specific rights are able to access the digital information. It is here that biometrics play an essential role. It reinforces security at all stages where customer authentication is needed. Biometric recognition, as a means of personal authentication, is an emerging signal processing area focused on increasing security and convenience of use in applications where users need to be securely identified. In this article, we outline the state-of-the-art of several popular biometric modalities and technologies and provide specific applications where biometric recognition may be beneficially incorporated. In addition, the article also discussed integration strategies of biometric authentication technologies into DRM systems that satisfy the needs and requirements of consumers, content providers, and payment brokers, securing delivery channels and contents.     

Interoperable DRM Framework for Multiple Devices Environment

As networks increase and cross‐convergence occurs between various types of devices and communications, there is an increasing demand for interoperable service in the business environment and from end users. In this paper, we investigate interoperability issues in the digital rights management (DRM) and present a practical framework to support interoperability in environments with multiple devices. The proposed architecture enables end users to consume digital content on all their devices without awareness of the underlying DRM schemes or technologies. It also enables DRM service providers to achieve interoperability without costly modification of their DRM schemes.     

MPEG-21: The 21st century multimedia framework

The lack of interoperable (and thus standardized) solutions is stalling the deployment of advanced multimedia packaging and distribution applications although most of the individual technologies are indeed already present. This motivated MPEG (ISO/IEC JTCl SC29 WGI I) in June 2000 to start working on the definition of enabling normative technology for the multimedia applications of the 21st century: MPEG-21 "Multimedia Framework." MPEG-21's approach is to define a framework to support transactions that are interoperable and highly automated, specifically taking into account digital rights management (DRM) requirements and targeting multimedia access and delivery using heterogeneous networks and terminals. This article first outlines the context and background of the MPEG-21 initiative. Then, an overview of MPEG-21 technology is given. Subsequently, it is discussed how MPEG-21 can provide solutions for universal multimedia access (UMA). UMA is also one of the use cases that has led to the creation of a new part in MPEG-21 dealing with digital item adaptation. Finally, this article concludes with an overview of MPEG-21 related activities and an outlook on future developments.     

支持互操作的移动DRM系统研究

互操作性是评价数字版权管理(DRM)系统性能的一个重要指标.本文首先对DRM系统的互操作性及技术现状进行了分析,然后结合移动应用的特点,给出了一个支持互操作的移动DRM系统技术方案,并对系统各部分功能的实现进行了详细的描述.     

Evolutionary trends in intelligent networks

A number of groups are currently developing technologies aimed at evolving and enhancing the capabilities of intelligent networks. In this article we discuss three of these initiatives: PINT, Parlay, and IN/CORBA interworking. The IETF PINT work addresses how Internet applications can request and enrich telecommunications services. The Parlay consortium is specifying an object-oriented service control API that facilitates the access, control, and configuration of IN services by enterprise IT systems. The OMG's IN/CORBA interworking specification enables CORBA-based systems to interwork with existing IN infrastructure, thereby promoting the adoption of CORBA for the realization of IN functional entities. We address how all three of these technologies could be deployed together in order to provide a basis for a more flexible and open IN architecture. We also identify a number of common trends and potential pitfalls highlighted by current work on the evolution of IN     

A digital rights management system for digital broadcasting based on home servers

This paper presents a digital rights management (DRM) system for digital broadcasting based on home servers (DBHS) using receivers with large-capacity storage devices. DBHS will enable viewers to enjoy 'television anytime/anywhere' by utilizing these storage functions. Our proposed DRM system is suitable for broadcasting, and allows both rights protection and advanced access to content held on home storage devices (in terms of validity, usage and charge conditions, and so on). We developed a prototype DRM system using a Pentium3 personal computer (1 GHz) in order to evaluate the nonlinear playback and 'trick-play' modes of encrypted content on the hard disk drive (HDD). Using this prototype, we confirmed that the nonlinear playback of content encrypted using the proposed DRM system could be processed in real time. The functionality in terms of trick-play modes was equal to that of commercially available hard disk recorders. In addition, we developed a security module for the DRM system in the form of a smart card with a built-in processor. We confirmed that the proposed DRM system utilizing the new smart card could be applied to DBHS.     

云计算平台下基于属性加密的动态版权使用控制方案（英文）

In order to achieve fine-grained access control in cloud computing,existing digital rights management(DRM) schemes adopt attribute-based encryption as the main encryption primitive.However,these schemes suffer from inefficiency and cannot support dynamic updating of usage rights stored in the cloud.In this paper,we propose a novel DRM scheme with secure key management and dynamic usage control in cloud computing.We present a secure key management mechanism based on attribute-based encryption and proxy re-encryption.Only the users whose attributes satisfy the access policy of the encrypted content and who have effective usage rights can be able to recover the content encryption key and further decrypt the content.The attribute based mechanism allows the content provider to selectively provide fine-grained access control of contents among a set of users,and also enables the license server to implement immediate attribute and user revocation.Moreover,our scheme supports privacy-preserving dynamic usage control based on additive homomorphic encryption,which allows the license server in the cloud to update the users' usage rights dynamically without disclosing the plaintext.Extensive analytical results indicate that our proposed scheme is secure and efficient.     

移动数字内容分发业务的版权保护管理

本文分析了移动数字内容分发业务版权管理的必要性,版权管理国际标准、解决方案及存在的问题.     

Advances in Digital Video Content Protection

The use of digital video offers immense opportunities for creators; however, the ability for anyone to make perfect copies and the ease by which those copies can be distributed also facilitate misuse, illegal copying and distribution ("piracy"), plagiarism, and misappropriation. Popular Internet software based on a peer-to-peer architecture has been used to share copyrighted movies, music, software, and other materials. Concerned about the consequences of illegal copying and distribution on a massive scale, content owners are interested in digital rights management (DRM) systems which can protect their rights and preserve the economic value of digital video. A DRM system protects and enforces the rights associated with the use of digital content. Unfortunately, the technical challenges for securing digital content are formidable and previous approaches have not succeeded. We overview the concepts and approaches for video DRM and describe methods for providing security, including the roles of encryption and video watermarking. Current efforts and issues are described in encryption, watermarking, and key management. Lastly, we identify challenges and directions for further investigation in video DRM.     

Can digital rights management be standardized?

With increasing use of the Internet as a content-distribution platform, mere interoperability of the codec is no longer sufficient if content owners are not prepared to distribute their content online for fear of piracy. Therefore, one also needs interoperability in the area of managing and protecting related intellectual property rights. To provide interoperability of digital rights management (DRM) systems to protect the content rather than the distribution channel, MPEG has embarked on developing intellectual property management and protection (IPMP) specifications targeted at the content itself that are natively built into its standards. It is the hope that such standards will allow for interoperability of content commerce systems, giving consumers more choice, while providing rights holders with the tools to effectively protect their assets and to develop complex and attractive business offering to tempt consumers. While it remains uncertain whether standardization is in fact the right vehicle to provide the e-content market with an impetus to grow, it appears that MPEG is working on a set of specifications with relatively good chances of helping to achieve this goal.     

A Tool Pack Mechanism for DRM Interoperability

As the number of digital content service providers increases, a variety of digital rights management (DRM) systems appear without supporting interoperability. The lack of interoperability in DRM systems causes inconvenience to customers, especially when they want to play content through multiple devices manufactured by different vendors. In this letter, we propose a novel method to support interoperability between different DRM systems. The proposed technique aims to build an open framework structure which satisfies DRM vendors' requirements by enhancing the security of intellectual property management and the protection tools.     

家庭网络与数字版权管理技术

家庭网络是社会数字化、信息化发展的关注焦点，但如何保障家庭网络中数字内容安全，保证价值链中各环节的合法利益，成为制约其发展的重要“瓶颈”。数字版权管理技术从数字内容及其权限的使用、存储、交换、追踪等方面给出了全面的解决方案。数字版权管理具有系统性、可控性等基本特征，家庭网络中数字版权管理技术需要解决内容与权限在使用、存储、转移中存在的一致性问题，需要研发端到端的安全传输、有条件接收、有条件播出、权限描述等关键技术，以适应家庭网中新媒体、新业务的发展和保护知识产权的需求。     

Security and management policy specification

Policies are rules governing the choices in behavior of a system. They are increasingly being used as a means of implementing flexible and adaptive systems for management of Internet services, networks, and security systems. There is also a need for a common specification of security policy for large-scale multi-organizational systems where access control is implemented in a variety of heterogeneous components. In this article we survey both security and management policy specification approaches, concentrating on practical systems in which the policy specification can be directly translated into an implementation