|By Willms Buhse||
|October 6, 2004 12:00 AM EDT||
Managing content in the next few years is only going to get more complicated. Luckily standards are on the way.
The sharing of media and entertainment via mobile devices is becoming an increasingly popular pastime and one of the most widely used mobile services. People download content to their mobile phones or receive information by MMS every day, thereby allowing content to be passed along from one to the other, finding the natural path toward the perfect target audience.
Typically, the media consumed on a mobile device today includes light media content types, with a lower value of around $1.00-$2.00 per item, such as screensavers, wallpapers, or ringtones. Content providers and mobile carriers are facing piracy issues similar to those caused by peer-to-peer networks on the Internet, and they are losing revenues since much of today's lower-value content is forwarded from one user to the next for free. As new smart phones and other devices with color displays and richer audio capabilities penetrate the market, and as network capacities increase thanks to a growing number of WLAN hotspots, consumers are demanding access to higher-value content. Recognizing the revenue potential of these services, mobile carriers and content providers aim to fulfill these consumer demands, while at the same time looking to protect their investments in high-value content.
They are looking for a copy protection solution that is specifically designed for the mobile environment (i.e., mobile digital rights management [DRM]). Addressing the most critical dilemmas in the life cycle of premium content - intellectual property, integrity protection, security, and privacy - successful DRM solutions enable the operation of high-quality mobile services with secured revenues, while also allowing super distribution - the easy, secure forwarding of content from one person to another.
DRM solutions need to work across different devices, geographies, operators, and mobile terminals. They need to escort protected files wherever they go and enforce administrator-defined policies, including who can read what, what content can be duplicated or e-mailed, and how long a user can view a file. Without a secure and interoperable DRM solution, the full potential of mobile media and entertainment delivery cannot be realized.
Defining Open Standards for Interoperable Mobile Services
This is where the Open Mobile Alliance (OMA), or, more specifically, the OMA DRM open standards for the mobile industry, comes in. Created in June 2002, its membership now includes over 400 mobile operators, content, service and applications providers, wireless vendors, and IT companies. OMA aims to stimulate the fast and wide adoption of a variety of new, enhanced mobile information, communication, and entertainment services. Its goal is to deliver high-quality, open technical specifications based upon market requirements that drive modularity, extensibility, and consistency among enablers to reduce industry implementation effort.
OMA identified the market need for various levels of protection depending on the value of the content being protected. The different levels impact the user interfaces and business models. Service providers and mobile vendors wanted a solution that is timely and inexpensive to deploy, can be implemented in mass-market mobile devices, and does not require a costly infrastructure.
In late 2002, OMA released the OMA DRM version 1.0 enabler, its first set of specifications. Based on a subset of the Open Digital Rights Language (ODRL) Rights Expression Language, and entirely royalty-free, the OMA DRM v.1.0 has been adopted by all the major parties in the content value chain. This includes handset vendors such as Motorola, Nokia, and Siemens, and various European and Asian software providers, such as CoreMedia. (CoreMedia is one of the only leading software houses to offer a mobile DRM solution based on the Open Mobile Alliance's (OMA's) DRM specifications.) While handset manufacturers are implementing DRM on their mobile phones, operators are integrating the DRM server components into their content delivery infrastructure.
OMA DRM v.1.0 - Basic Content Protection on Three Levels
Designed to protect light media content such as ringtones, wallpaper, Java games, video and audio clips, and screensavers, OMA's first DRM enabler provides an appropriate level of security for these content types. It includes three levels of protection and functionality: Forward Lock, Combined Delivery, and Separate Delivery, each level adding a layer of protection on top of the previous level.
The first level, Forward Lock, prevents the unauthorized transfer of content from one device to another. The intention is to prevent peer-to-peer distribution, or super-distribution, of lower value content. Often applied to subscription-based services, such as news or sports, the plaintext content is packaged inside a DRM message that is delivered to the terminal. The device can play, display, or execute the content, but not forward the object.
Adding a rights definition to the first level, Combined Delivery equally prevents super-distribution (or forwarding), but also controls the content usage. The DRM message contains two objects: the content and a rights object. The rights object, written into the content using OMA Rights Expression Language (REL), a mobile profile of ODRL, defines usage rules that govern the content. The rules include and support all kinds of business models, including preview and time- and usage-based constraints; for example, a complimentary preview - the permission to play a tune only once, using the content only for a specific number of days, or an annual subscription with non-interfering price models. When applying the Combined Delivery mechanism, neither content nor the rights object can be forwarded from the target device.
The third level, called Separate Delivery, is the most sophisticated mechanism because here the content is encrypted, thereby providing better protection for higher value content. Encrypted into DRM Content Format (DCF) using symmetric encryption, the content is useless without a rights object and the symmetric Content Encryption Key (CEK), which is delivered separately from the content. OMA requires that the CEK is delivered securely via WAP push directly to the authorized mobile device, where the DRM User Agent uses it for content decryption.
An OMA DRM-compliant device such as the Nokia 3200 or 6230, or the Siemens SX1 and C62, securely stores the rights objects outside of the consumer's reach. Only the media player on that device has access to both encrypted content and the rights object including the CEK, in order to enable the consumption of the content by displaying or playing it.
People can download media and entertainment content and forward it to friends via MMS, but the recipients will not be able to use the content until they obtain their own CEK for content decryption. A "rights refresh" mechanism enables recipients of super-distributed content to contact the content provider to obtain rights to either preview or purchase the content they have received.
This so-called super-distribution is the key benefit of Separate Delivery. OMA aims to promote super-distribution of content because it maximizes the number of potential customers through peer-to-peer recommendations while retaining control for the content provider through centralized rights acquisition - thereby potentially triggering enormous revenue growth.
Added Protection and Functionality
OMA has taken a different approach to DRM when compared to other standards groups. The alliance aims to enable content delivery in an evolutionary process by implementing basic protection as soon as possible and then taking on more complex issues, thereby avoiding spending years addressing every threat before implementing a definite standard. Hence, the OMA DRM v.1.0 enabler release was developed rapidly in order to reduce time to market and to be immediately available for member companies to implement into their mobile products without requiring massive new infrastructure or changes to handsets.
The DRM v.1.0 enabler is a suitable protection system for lower-value content, appropriate for lower-bandwidth networks and simpler devices. However, as higher bandwidth provided by 2.5G and 3G mobile networks allows for larger content files to be transmitted over the air, and as smart phones and other mobile devices with removable media and larger color screens support downloading and streaming of valuable rich media content, the level of security that OMA DRM v.1.0 provides is no longer satisfying to content providers and mobile carriers who are eager to release high-value rich media content and applications into the mobile marketplace but worry about a "napsterization" of the mobile space.
OMA's Browser and Content (BAC)
The Download and DRM Sub-Working Group began working on its upgraded DRM v.2.0 enabler in early 2003 and announced it to the public in February of this year. The new specifications take advantage of expanded device capabilities and offer improved support for audio/video rendering, streaming content, and access to protected content using multiple devices, thus enabling new business models. They have added security and trust certificates that allow more complex and rich forms of media content (i.e., premium content such as music tracks, video clips, and animated color screensavers and games) as well as improved support to preview and share content.
Security is enhanced by encrypting the rights object and the content encryption key, using the device's public key to bind them to the target device. Integrity protection for both content and the rights object reduces the risk of either being tampered with.
In addition to these enhanced security features, the specifications include additional trust elements. Mutual authentication between the device and the rights issuer (the content provider) will add trust to the downloading or messaging scenario. The rights issuer can accurately identify the device in order to determine the revocation status of the transaction. The new enabler also supports a wide variety of distribution and payment use cases.
Since February, several draft specifications have been announced as part of the OMA DRM 2.0 enabler release. The enhanced version includes countless benefits for content owners as well as end consumers. Content owners will profit from the following features:
- Enhanced security, enabled by the binding of rights objects to user identity: Individually encrypted rights objects use a device's public key to provide cryptographic binding (to SIM/WIM), integrity protection for content and rights objects.
- Explicit trust mechanisms, including mutual authentication between a device and the rights issuer as well as device revocation: The rights issuer can identify the device revocation status.
- Support of secure multicast and unicast streaming: Collaboration with 3GPP and 3GPP2 on a file format for protected streaming and progressive download.
- Export to other copy protection schemes: For example, the transfer of music to the SD Card (which incorporates its own DRM mechanism) for a mobile music player.
- Support for a wide variety of business models: These include metered time and usage constraints, subscription rights for content bundles, and gifting.
- Support for messaging and peer-to-peer (i.e., super-distribution): Viral marketing and a reward mechanism.
- Enhanced security: Premium mobile content will be available to users.
- Advanced content management: Content and rights can, for example, be easily moved between several devices owned by one user or moved to remote or removable storage and later be restored to the device.
- Sharing of content between multiple users: Within domain (community or family).
- Unconnected devices: Content can be copied to SD Card for a mobile music player without network connectivity.
- Complimentary previews: Constraints for super-distributed content before purchase.
- Export to other copy protection schemes: Transfer of music to a DRM-enabled set-top box or computing device is supported.
Implementing OMA DRM
The success of premium 3G applications and high-value media and entertainment content delivery lies in security, ease of use, and in the market penetration of suitable handsets. Handsets and other mobile devices that support OMA-defined DRM technology are already on the market. Currently about 80 models are available in all categories. Given that the specifications were released 14 months ago, this can be considered a tremendous success. As OMA DRM has penetrated into the OS and into, for example, Nokia's widely used Series 60, it has become easy for handset manufacturers to implement DRM. Some leading handset vendors have decided to release DRM in all of their phone models. For these devices, the enhanced DRM v.2.0 specifications represent the next step in pervasive mobile access. The new enabler, the specifics of which have just been released, takes advantage of expanded device capabilities - multimedia applications, processing speed, and storage, among others - and offers improved support for the downloading and streaming of content as well as for sophisticated business models.
OMA's DRM solution sets the stage for generating multimedia revenues in a mobile environment. The solution is widely accepted in the content industry and has been embraced by music labels, game providers, and movie studios. But, as Avi Greengart, senior analyst for wireless and personal technology at JupiterResearch states, "It's still early in the wireless content market. Content providers have been encouraged because consumers have shown a willingness to pay $2 for ringtone versions of songs they won't pay $1 to download on their PCs. As such, the lack of open-standards-based DRM hasn't inhibited content providers from releasing ringtones and graphics so far. However, it's pretty clear that as new services evolve for faster wireless networks and more capable handsets, content providers are looking for stronger rights protection and are hopeful that super-distribution will enable new business models."
The 20th International Cloud Expo has announced that its Call for Papers is open. Cloud Expo, to be held June 6-8, 2017, at the Javits Center in New York City, brings together Cloud Computing, Big Data, Internet of Things, DevOps, Containers, Microservices and WebRTC to one location. With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding business opportunity. Submit your speaking proposal ...
Apr. 30, 2017 02:45 AM EDT Reads: 1,745
The age of Digital Disruption is evolving into the next era – Digital Cohesion, an age in which applications securely self-assemble and deliver predictive services that continuously adapt to user behavior. Information from devices, sensors and applications around us will drive services seamlessly across mobile and fixed devices/infrastructure. This evolution is happening now in software defined services and secure networking. Four key drivers – Performance, Economics, Interoperability and Trust ...
Apr. 30, 2017 01:45 AM EDT Reads: 1,070
SYS-CON Events announced today that CollabNet, a global leader in enterprise software development, release automation and DevOps solutions, will be a Bronze Sponsor of SYS-CON's 20th International Cloud Expo®, taking place from June 6-8, 2017, at the Javits Center in New York City, NY. CollabNet offers a broad range of solutions with the mission of helping modern organizations deliver quality software at speed. The company’s latest innovation, the DevOps Lifecycle Manager (DLM), supports Value S...
Apr. 30, 2017 01:15 AM EDT Reads: 1,450
With billions of sensors deployed worldwide, the amount of machine-generated data will soon exceed what our networks can handle. But consumers and businesses will expect seamless experiences and real-time responsiveness. What does this mean for IoT devices and the infrastructure that supports them? More of the data will need to be handled at - or closer to - the devices themselves.
Apr. 30, 2017 12:15 AM EDT Reads: 1,195
Web Real-Time Communication APIs have quickly revolutionized what browsers are capable of. In addition to video and audio streams, we can now bi-directionally send arbitrary data over WebRTC's PeerConnection Data Channels. With the advent of Progressive Web Apps and new hardware APIs such as WebBluetooh and WebUSB, we can finally enable users to stitch together the Internet of Things directly from their browsers while communicating privately and securely in a decentralized way.
Apr. 29, 2017 11:15 PM EDT Reads: 9,240
In his keynote at @ThingsExpo, Chris Matthieu, Director of IoT Engineering at Citrix and co-founder and CTO of Octoblu, focused on building an IoT platform and company. He provided a behind-the-scenes look at Octoblu’s platform, business, and pivots along the way (including the Citrix acquisition of Octoblu).
Apr. 29, 2017 10:45 PM EDT Reads: 1,814
Multiple data types are pouring into IoT deployments. Data is coming in small packages as well as enormous files and data streams of many sizes. Widespread use of mobile devices adds to the total. In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists will look at the tools and environments that are being put to use in IoT deployments, as well as the team skills a modern enterprise IT shop needs to keep things running, get a handle on all this data, and deli...
Apr. 29, 2017 10:30 PM EDT Reads: 2,778
Grape Up is a software company, specialized in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market across the USA and Europe, we work with a variety of customers from emerging startups to Fortune 1000 companies.
Apr. 29, 2017 10:15 PM EDT Reads: 2,603
Financial Technology has become a topic of intense interest throughout the cloud developer and enterprise IT communities. Accordingly, attendees at the upcoming 20th Cloud Expo at the Javits Center in New York, June 6-8, 2017, will find fresh new content in a new track called FinTech.
Apr. 29, 2017 10:00 PM EDT Reads: 2,643
The Internet of Things is clearly many things: data collection and analytics, wearables, Smart Grids and Smart Cities, the Industrial Internet, and more. Cool platforms like Arduino, Raspberry Pi, Intel's Galileo and Edison, and a diverse world of sensors are making the IoT a great toy box for developers in all these areas. In this Power Panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, panelists discussed what things are the most important, which will have the most profound e...
Apr. 29, 2017 09:30 PM EDT Reads: 2,556
SYS-CON Events announced today that Interoute, owner-operator of one of Europe's largest networks and a global cloud services platform, has been named “Bronze Sponsor” of SYS-CON's 20th Cloud Expo, which will take place on June 6-8, 2017 at the Javits Center in New York, New York. Interoute is the owner-operator of one of Europe's largest networks and a global cloud services platform which encompasses 12 data centers, 14 virtual data centers and 31 colocation centers, with connections to 195 add...
Apr. 29, 2017 09:30 PM EDT Reads: 2,283
SYS-CON Events announced today that Hitachi, the leading provider the Internet of Things and Digital Transformation, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Hitachi Data Systems, a wholly owned subsidiary of Hitachi, Ltd., offers an integrated portfolio of services and solutions that enable digital transformation through enhanced data management, governance, mobility and analytics. We help globa...
Apr. 29, 2017 09:15 PM EDT Reads: 1,576
SYS-CON Events announced today that Grape Up will exhibit at SYS-CON's 21st International Cloud Expo®, which will take place on Oct. 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Grape Up is a software company specializing in cloud native application development and professional services related to Cloud Foundry PaaS. With five expert teams that operate in various sectors of the market across the U.S. and Europe, Grape Up works with a variety of customers from emergi...
Apr. 29, 2017 08:30 PM EDT Reads: 2,463
@ThingsExpo has been named the Most Influential ‘Smart Cities - IIoT' Account and @BigDataExpo has been named fourteenth by Right Relevance (RR), which provides curated information and intelligence on approximately 50,000 topics. In addition, Right Relevance provides an Insights offering that combines the above Topics and Influencers information with real time conversations to provide actionable intelligence with visualizations to enable decision making. The Insights service is applicable to eve...
Apr. 29, 2017 08:15 PM EDT Reads: 3,104
SYS-CON Events announced today that Hitachi Data Systems, a wholly owned subsidiary of Hitachi LTD., will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City. Hitachi Data Systems (HDS) will be featuring the Hitachi Content Platform (HCP) portfolio. This is the industry’s only offering that allows organizations to bring together object storage, file sync and share, cloud storage gateways, and sophisticated search an...
Apr. 29, 2017 07:30 PM EDT Reads: 834
DevOps is often described as a combination of technology and culture. Without both, DevOps isn't complete. However, applying the culture to outdated technology is a recipe for disaster; as response times grow and connections between teams are delayed by technology, the culture will die. A Nutanix Enterprise Cloud has many benefits that provide the needed base for a true DevOps paradigm.
Apr. 29, 2017 07:15 PM EDT Reads: 1,372
@GonzalezCarmen has been ranked the Number One Influencer and @ThingsExpo has been named the Number One Brand in the “M2M 2016: Top 100 Influencers and Brands” by Analytic. Onalytica analyzed tweets over the last 6 months mentioning the keywords M2M OR “Machine to Machine.” They then identified the top 100 most influential brands and individuals leading the discussion on Twitter.
Apr. 29, 2017 07:00 PM EDT Reads: 1,567
SYS-CON Events announced today that T-Mobile will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. As America's Un-carrier, T-Mobile US, Inc., is redefining the way consumers and businesses buy wireless services through leading product and service innovation. The Company's advanced nationwide 4G LTE network delivers outstanding wireless experiences to 67.4 million customers who are unwilling to compromise on ...
Apr. 29, 2017 05:15 PM EDT Reads: 1,602
With major technology companies and startups seriously embracing Cloud strategies, now is the perfect time to attend @CloudExpo | @ThingsExpo, June 6-8, 2017, at the Javits Center in New York City, NY and October 31 - November 2, 2017, Santa Clara Convention Center, CA. Learn what is going on, contribute to the discussions, and ensure that your enterprise is on the right path to Digital Transformation.
Apr. 29, 2017 05:00 PM EDT Reads: 1,666
20th Cloud Expo, taking place June 6-8, 2017, at the Javits Center in New York City, NY, will feature technical sessions from a rock star conference faculty and the leading industry players in the world. Cloud computing is now being embraced by a majority of enterprises of all sizes. Yesterday's debate about public vs. private has transformed into the reality of hybrid cloud: a recent survey shows that 74% of enterprises have a hybrid cloud strategy.
Apr. 29, 2017 04:45 PM EDT Reads: 3,391