OpenSDRM is an open source digital rights management (DRM) architecture that is distributed, secure, and interoperable. It consists of independent services like content production, distribution, licensing, and protection tools. OpenSDRM uses public/private cryptography and XML certificates to securely authenticate users and devices. It allows multiple content providers to use a common DRM platform and wallet to govern access to protected content across different rendering applications. OpenSDRM has been used in research projects for digital music, images, video surveillance, and home networking of digital media.

1. Open and Secure Digital Rights Management
Issues in security for Digital Rights Management
Carlos Serrão
carlos.serrao@iscte.pt
carlos.j.serrao@gmail.com
ISCTE/DCTI/ADETTI UPC/AC/DMAG
Lisboa, Portugal Barcelona, Spain

2. OpenSDRM
• What is OpenSDRM
• Distributed DRM architecture
• Each of the functionalities is implemented has an
independent distributed service
• There can exist multiple instances of the same service
provided by different entities
2

3. OpenSDRM
• OpenSDRM is open:
• open-source
• open specifications
• open interfaces
• open to different types of content
• open to support many different business models
• open to interoperability
3

4. OpenSDRM
• OpenSDRM is secure:
• relies on public and secret cryptography: RSA, AES, X.509, ...
• XML and X.509 certificates allow the establishment of trust
environments between all the components
• client-side rights management intermediary - wallet
• client content rendering applications authentication and registration
• secure storage
• secure rights management intermediation with DRM platform
4

5. OpenSDRM
Content Management System
Payment authorization
and requests
Browse through Content
Commerce
available content Production
Service (COS)
Service (CPS) Payment
Gateway
Content
Send content
Service
Register content
order Metadata and metadata (PGW)
Content Media
Registration
Distribution
End-Users
Service (RGS) License template
Service (MDS) Payment System
production and
content key
Request and download
storage
Content
content protection tools
Rendering
Applications Content protection
tools
Protection
Tools
Wallet
Service (PTS)
DRM-IMw License
Service (LIS)
Licenses
Protection Tools System
End-User
System License Management System
Creates and distributes
digital credentials
Authentication Configuration
Service (AUS) Service (CFS)
Authentication and Accounting
System
5

6. OpenSDRM
• Components
Service A Service B
Application Application level security Application
SOAP SOAP
HTTP(s) HTTP(s)
SSL/TLS Channel level security SSL/TLS
TCP/IP TCP/IP
6

7. OpenSDRM
• Wallet Rights Management interoperable Middle-
ware
Content Content Content Content Content
Rendering Rendering Rendering Rendering Rendering
Application Application Application Application Application
A B C ... Z
Wallet Rights Management interoperability
Middle-ware
DRM platform
7

8. OpenSDRM
Content
Governed and Rendering Content
Protected content Application
Content
Governed and Rendering Content
Protected content Application
Content
Governed and Rendering Content
Protected content Application
Wallet Rights Management interoperability Middle-
ware
Content from
different providers
Provider
and DRM systems DRM
system
Provider
DRM
system
Provider
DRM
system
8

9. OpenSDRM
CRA
1
Protection Tools Manager Application
Authorisation
3 5 Application
2
Registration
8 9
MPEG-21
Rights
REL
DRM Secure
Expression
Comm.
Interpreter 6
ODRL 4
10
Application
Authenticator
11
7
Secure Storage
Module
12
DRM
9

10. OpenSDRM
Content Content Content Content Content
Rendering Rendering Rendering Rendering Rendering
Application Application Application Application Application
A B C ... Z
Common Operation
Language command
Protection Secure Application Application
Tools Storage Authorisation Registration
Manager Module Module Module
Application
Authenticator
MPEG-21 Rights DRM Secure Module
REL Expression Comm.
Interpreter Module
ODRL Wallet Rights Management
interoperability Middle-ware
Protocols and formats
DRM-dependent
DRM platform DRM platform DRM platform
10

11. OpenSDRM
• OpenSDRM usage cases:
• Until now, mostly used on R&D projects
• Content business scenarios
• Digital Music, MOSES FP5-IST project, Music-4You.com
• JPEG2000 digital images, HICOD2000 ESA RTD project
• Video-Surveillance, WCAM FP6-IST project
• Home Networking Digital Music, MediaNet FP6-IST project
11

12. OpenSDRM
• OpenSDRM is available at:
• This “info” sites are still under development:
• http://www.opensdrm.com
• http://www.opensdrm.org
• The source-code can be fetched (SVN) from:
• http://sourceforge.net/projects/opensdrm/
• Contributions are quite welcome!
12