76
ISCTE-IUL/ISTA/ADETTI-IUL Instituto Superior de Ciências do Trabalho e da Empresa Lisbon University Institute ISCTE-IUL School of Technology and Architecture ADETTI-IUL Carlos Serrão [email protected] [email protected] http://www.carlosserrao.net http://blog.carlosserrao.net http://www.linkedin.com/in/carlosserrao To DRM or not to DRM? ESCE/IPS, 6 de Dezembro, 2011

To DRM or not to DRM?

Embed Size (px)

DESCRIPTION

Presentation discussion some key-points in the history of DRM technology, and it's main problems!

Citation preview

Page 1: To DRM or not to DRM?

ISCTE-IUL/ISTA/ADETTI-IUL

Instituto Superior de Ciências do Trabalho e da EmpresaLisbon University Institute

ISCTE-IUL School of Technology and ArchitectureADETTI-IUL

Carlos Serrão

[email protected]@gmail.com

http://www.carlosserrao.nethttp://blog.carlosserrao.nethttp://www.linkedin.com/in/carlosserrao

To DRM or not to DRM?ESCE/IPS, 6 de Dezembro, 2011

Page 2: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

About me...2

Page 3: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Content

¨ In media production and publishing, content is information and experiences that may provide value for an end-user/audience in specific contexts.

¨ Content may be delivered via any medium such as the internet, television, and audio CDs, as well as live events such as conferences and stage performances.

¨ The word is used to identify and quantify various formats and genres of information as manageable value-adding components of media.

3

Page 4: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Intellectual Property

¨ Intellectual property (IP) is a term referring to a number of distinct types of creations of the mind for which a set of exclusive rights are recognized—and the corresponding fields of law

¨ Under intellectual property law, owners are granted certain exclusive rights to a variety of intangible assets, such as musical, literary, and artistic works; discoveries and inventions; and words, phrases, symbols, and designs.

¨ Types of intellectual property rights:¤ copyrights

¤ trademarks

¤ patents

¤ industrial design rights

¤ trade secrets

¤ ...

4

Page 5: To DRM or not to DRM?

Copyright is a legal concept, enacted by most governments, giving the creator of an original work exclusive rights to it, usually for a limited time.

Generally, it is "the right to copy", but also gives the copyright holder the right to be credited for the work, to determine who may adapt the work to other forms, who may perform the work, who may financially benefit from it, and other, related rights.

Page 6: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Content

¨ Advantages and Opportunities¤ better content

¤ new and better delivery channels

¤ new customers

¤ faster delivery

¤ ...

¨ Disadvantages and Challenges¤ piracy and uncontrolled distribution

¤ ...

6

Page 7: To DRM or not to DRM?

Impact #1 - Digital Formats

Page 8: To DRM or not to DRM?

Impact #2 - Bandwidth

Page 9: To DRM or not to DRM?

Impact #3 - P2P

Page 10: To DRM or not to DRM?

Impact #4 - Compression

Page 11: To DRM or not to DRM?

Piracy...... the right way to fight it?

Page 12: To DRM or not to DRM?

http://youtu.be/l5SmrHNWhak

Page 13: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Content13

¨ Answer from content industry¤ Digital

¤ Rights

¤ Management

¨ and¤ Copy

¤ Protection/Prevention

Page 14: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

DRM interoperability14

¨ DRM involves the:¤ description

¤ layering

¤ analysis

¤ valuation

¤ trading

¤ and monitoring of rights

¨ over an individual or organization's assets, in digital format.

Page 15: To DRM or not to DRM?

CDeXtended Copy Protection (XCP)

Copy-Protection on CDsSony BMG CD copy protection rootkit scandal

MediaMax CD-3

Copy-Protection on CDs

A  rootkit  is  so;ware  that  enables  con0nued  privileged  access  to  a  computer  while  ac0vely  hiding  its  presence  from  administrators  by  subver0ng  standard  

opera0ng  system  func0onality  or  other  applica0ons.

Page 16: To DRM or not to DRM?

Mark Russinovich(Sysinternals, actual Microsoft)

Page 17: To DRM or not to DRM?

Mark Russinovich(Sysinternals, actual Microsoft)

#FAIL

Page 18: To DRM or not to DRM?

DVDCSS content-scrambling system1996-1999

1. CSS prevents byte-for-byte copies of an MPEG (digital video) stream from being playable since such copies do not include the keys that are hidden on the lead-in area of the restricted DVD.

2. CSS provides a reason for manufacturers to make their devices compliant with an industry-controlled standard, since CSS scrambled discs cannot in principle be played on noncompliant devices.

Page 19: To DRM or not to DRM?

Jon Lech Johansen (a.k.a. DVD Jon)

DeCSS

QTFairUse

PyMusique, SharpMusic (iTunes alternatives)

DeDRM

DoubleTwist

Page 20: To DRM or not to DRM?

AACSAdvanced Access Content System

HD-DVD, BlueRay

Since appearing in devices in 2006, several AACS decryption keys have been extracted from weakly protected software players and published on the Internet, allowing decryption by other unlicensed software.

Page 21: To DRM or not to DRM?

Digital files cannot be made uncopyable, any more than water can be made not wet.

Bruce Schneierin Crypto Gram, 15 May 2001http://www.schneier.com/crypto-gram-0105.html#3

Page 22: To DRM or not to DRM?

John Fanning Shawn Fanning

It was originally founded as a pioneering peer-to-peer file sharing Internet service that emphasized sharing audio files, typically music, encoded in MP3 format.

In its second incarnation Napster became an online music store until it merged with Rhapsody on 1 December 2011.

Page 23: To DRM or not to DRM?
Page 24: To DRM or not to DRM?
Page 25: To DRM or not to DRM?

GamesSecuROM

SafeDisc

Page 26: To DRM or not to DRM?

Digital Millennium Copyright Act (DMCA)

United States copyright law that implements two 1996 treaties of the World Intellectual Property Organization (WIPO)

Criminalizes production and dissemination of technology, devices, or services intended to circumvent measures that control access to copyrighted works

Criminalizes the act of circumventing an access control, whether or not there is actual infringement of copyright itself

Page 27: To DRM or not to DRM?

http://youtu.be/ryXDhXqR-SE

Page 28: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Content Value-Chain26

Page 29: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Content Value-Chain26

Creator Publisher Aggregator Distributor Retailer Consumer

Content Creation, CaptureContent Rights Establishment

Content Rights ValidationContent PackagingContent Repository

Content TradingContent Distribution

Content TradingContent Distribution

Content Payment Content TradingPermission

Management

Page 30: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Page 31: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

Page 32: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

iTunes FairPlay

Content authorsPublishers

Page 33: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

iTunes FairPlay

Content authorsPublishers

Apple, Inc.

Page 34: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

iTunes FairPlay

Content authorsPublishers

Apple, Inc.

Apple contentservers

Page 35: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

iTunes FairPlay

Content authorsPublishers

Apple, Inc.

Apple contentservers

Apple iTunes content store

Page 36: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management27

Creator Publisher Aggregator Distributor Retailer Consumer

iTunes FairPlay

Content authorsPublishers

Apple, Inc.

Apple contentservers

Apple iTunes content store

Apple iPod, iPhone,Apple TV, ...

Page 37: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Page 38: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Page 39: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Windows Media DRM

Content authorsPublishers

Page 40: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Windows Media DRM

Content authorsPublishers Content is encoded,

protected and stored

Page 41: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Windows Media DRM

Content authorsPublishers Content is encoded,

protected and stored

Protected content ismade available to stores

Page 42: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Windows Media DRM

Content authorsPublishers Content is encoded,

protected and stored

Protected content ismade available to stores

Content acquiredand dowloaded + license

License production

Page 43: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management28

Creator Publisher Aggregator Distributor Retailer Consumer

Windows Media DRM

Content authorsPublishers Content is encoded,

protected and stored

Protected content ismade available to stores

Content acquiredand dowloaded + license

License production

Page 44: To DRM or not to DRM?

Truste

d Com

puting

http://youtu.be/UnXU7z2_6Jg

Page 45: To DRM or not to DRM?
Page 46: To DRM or not to DRM?

remixedr/w

culture

Page 47: To DRM or not to DRM?

remixedr/w

culture

Page 49: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Content Value-Chain33

Page 50: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Content Value-Chain33

¨ Consumers are “active” not “passive”

¨ Consumers take other roles on DCVC

¨ Changes the established rights management logic

Creator Publisher Aggregator Distributor Retailer ConsumerConsumer is CreatorConsumer is PublisherConsumer is AggregatorConsumer is Distributor

Consumer is Retailer

Page 51: To DRM or not to DRM?
Page 52: To DRM or not to DRM?

interoperability

Page 53: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management35

¨ DRM 1.0 failure¤ Vulnerable DRM systems

¤ Limitations to user experience

¤ Limited availability

¤ Offer limited protection

¤ Imposition to end-users

¤ Lack of interoperability

¨ DRM 2.0 must solve these issues

Page 54: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management36

DRM 1.0 DRM 1.5 DRM 2.0Apple

Fairplay

Windows MediaDRM

OpenIPMP

OMA DRM

DMP Chillout

Coral

DReaMMarlin

MPEG-21

AXMedis

MIPAMS

Page 55: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management37

¨ DRM Layers

Page 56: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management37

¨ DRM Layers

Rights Management

Rights Enforcement

Copy Protection

Page 57: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management38

¨ DRM Layers – non-interoperable

Page 58: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management38

¨ DRM Layers – non-interoperable

Rights Management

Rights Enforcement

Copy ProtectionDR

M A Rights Management

Rights Enforcement

Copy Protection

DR

M B

X

X

X

Page 59: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management39

¨ DRM Layers - interoperable

Page 60: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management39

¨ DRM Layers - interoperable

Rights Management

Rights Enforcement

Copy Protection

Rights Management

Rights Enforcement

Copy ProtectionD

RM A

DR

M AD

RM B

DR

MAD

RMB

DR

MB

Page 61: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management40

¨ Interoperability strategies (International Standards):¤ Full format interoperability

¤ Connected interoperability

¤ Configuration driven interoperability

Page 62: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

Digital Rights Management41

DRM 1.0 DRM 1.5 DRM 2.0Apple

Fairplay

Windows MediaDRM

OpenIPMP

OMA DRM

DMP Chillout

Coral

DReaMMarlin

MPEG-21

AXMedis

MIPAMS

Interoperability

Page 63: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

OpenSDRM42

Page 64: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

OpenSDRM42

Page 65: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

OpenSDRM42

Page 66: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

OpenSDRM42

Page 67: To DRM or not to DRM?

6.Dez.2011To DRM or not to DRM?

OpenSDRM42

Page 68: To DRM or not to DRM?

Creative Commons licenses are several copyright licenses that allow the distribution of copyrighted works.

The licenses differ by several combinations that condition the terms of distribution.

Page 69: To DRM or not to DRM?

Licensees may copy, distribute, display and perform the work and make derivative works based on it only if they give the author or licensor the credits in the manner specified by these.

Attribution (by)

Licensees may copy, distribute, display, and perform the work and make derivative works based on it only for noncommercial purposes.

Noncommercial (nc)

Licensees may copy, distribute, display and perform only verbatim copies of the work, not derivative works based on it.

No Derivative Works (nd)

Licensees may distribute derivative works only under a license identical to the license that governs the original work.

Share-alike (sa)

Page 70: To DRM or not to DRM?

Research challenges?!?45

Page 71: To DRM or not to DRM?

Still some interesting technical challenges

- Formats- Interoperability- Security

Page 72: To DRM or not to DRM?

Better control to private information

- Social Networks- Private information sharing

Page 73: To DRM or not to DRM?

Applicability to vertical sectors

- Health- Business information- Education and Research

Page 74: To DRM or not to DRM?

Super-copy

Super-distribution

Monetization

Page 75: To DRM or not to DRM?

Q & A?50

Page 76: To DRM or not to DRM?

ISCTE-IUL/ISTA/ADETTI-IUL

Instituto Superior de Ciências do Trabalho e da EmpresaLisbon University Institute

ISCTE-IUL School of Technology and ArchitectureADETTI-IUL

Carlos Serrão

[email protected]@gmail.com

http://www.carlosserrao.nethttp://blog.carlosserrao.nethttp://www.linkedin.com/in/carlosserrao

To DRM or not to DRM?ESCE/IPS, 6 de Dezembro, 2011