OMA DRMWeb Computing LaboratoryGraduate Institute of Applied Science and Engineering, Fu Jen Catholic University

March 15, 2008Kevin LiuAdvisor Prof. Hsing Mei

*OutlineIntroductionDRM System OverviewThree DRM V1.0 methodsCombined deliveryForward-LockSeparate deliveryIntroduction of DRM V2.0DRM WebsiteConclusionReference

OMA DRMOMAOpen Mobile Alliance20026Open Mobile Architecture Initiative SupportersWAP ForumOMA.

DRMDigital Rights ManagementIs the means to control the usage of the media object once it has been downloaded.

PrefaceWithout protection and management of digital rights,Digital content can be easily copied, altered, and distributed to a large number of recipients, which could cause revenue loss to media companies.

There is a need for content providers and operators to control the usage of downloaded media objects.

To protect commercial digital intellectual property and avoid digital piracy,we need a system that prevents unauthorized access to digital content and manages content usage right.

Introduction of DRMA content provider can grant a user the rights to preview media objects for free and charge the user only for the full usage rights.

The value lies in the rights and not in the media object itself

DRM makes it possible to sell the rights to use the media object, rather than selling the media object itself.

Introduction of DRMA DRM system should offer a persistent content protect against unauthorized access to the digital content ,limiting access to only those with the proper authorization.

DRM enables content providers to define rules (rights) for how the media object should be used.the ability to preview DRM contentto prevent downloaded DRM content from being illegally forwarded (copied) to other users

IntroductionThe rights can be delivered to the consuming device by downloading them together with the content or by sending the rights object separately from content.

DRM System Overview

Three DRM V1.0 MethodsForward-Lock

Combined delivery

Separate delivery

Forward-lock (FL)A special case of combined delivery method where the DRM message does not contain a rights object.

The device is allowed to render the content but not to forward it to other devices.

Forward-lock (FL)The Content Provider, using a DRM Packager, packages the media object into one DRM Message and makes the URL available to the device (e.g. by publishing it on a Web page).

HTTP Download is used to deliver the DRM Message.

The User is using the media object.

The DRM agent ensures that the media object is not copied to another device, via IrDA or Bluetooth, or sent from the device in an MMS or email.

Combined delivery (CD)Delivery of the rights object and content together in a single message.

The DRM message includes the media object and a rights object.

The device may render the content according to the rights object.

If the device supports the combined delivery method it MUST also support the forward-lock method.

Combined delivery (CD)The Content Provider, using a DRM Packager, packages the media object and the rights object into one DRM Message.

The DRM Message is made available to the device (e.g. by publishing it on a Web page).

To download the DRM Message (media object + rights object).

The User is using the media object. The DRM agent ensures that the media object is used according to the rights.

Separate delivery (SD)Delivery of the rights object and content via separate transports.

If the device supports the separate delivery method it MUST also support the combined delivery and forward-lock methods.

If there are no rights objects associated with a piece of DRM content the device MUST NOT consume the content.

Separate deliveryIn the separate delivery method the content provider needs to convert the plaintext media object into DRM content format (DCF).

This conversion includes symmetric encryption of the content making the DRM protected content object useless to parties not having access to the Content Encryption Key (CEK).

The content in DRM format may be distributed via an insecure transport whereas a more secure transport (from DRM point of view) is used to deliver the rights object with the CEK.

Separate deliveryIn the separate delivery method the media object is always encrypted and converted into the DCF format.

When a media object is distributed in encrypted form, the key is with the rights object.

The device should allow to forward the DCF file to another device.

The device must not forward rights objects from the device.

Separate deliveryThe media object is allowed to pass from mobile device to mobile device through any channel, with the rights object being obtainable from the Rights Issuer.

DRM V1.0 Use Case

Introduction of DRM V2.0(public key) (trust element)

The Trust Element of DRM V2.0DRM Agent

Content Issuer

Rights Issuer

DRM Agent(trusted entity)DRM DRM

Content IssuerDRM OMA DRM DRM DRM AgentContent Issuer DRM AgentDRM

Rights IssuerDRM Rights ObjectsXML DRM DRM

DRM Website

DRM Website

ConclusionDRM DRM

ReferenceOMA Digital Rights Management V1.0 Approved Enabler

Digital Rights Management (OMA-Download-DRM-V1_0-20040615-A.pdf)

Download Architecture(OMA-Download-ARCH-V1_0-20040625-A.pdf)

Introduction to DRM - Digital Right Management

DRM Website

DRM

Q & A