VCAS™ for Hospitality IPTV Optimized Configurations for Hospitality Applications
Total Page:16
File Type:pdf, Size:1020Kb
VCAS™ for Hospitality IPTV Optimized Configurations for Hospitality Applications Verimatrix, Inc. 6825 Flanders Drive San Diego, CA 92121, USA Telephone: +1-858-677-7800 Fax: +1-858-677-7804 www.verimatrix.com Copyright © 2008-2010 Verimatrix, Inc. All rights reserved. Specifications and product availability are subject to change without notice. Table of Contents 1 Introduction .................................................................................................................................3 1.1 Verimatrix Video Content Authority System (VCAS™) .......................................................3 1.2 IPTV in Hospitality Deployments.........................................................................................3 2 VCAS for IPTV – Solution Overview ...........................................................................................4 2.1 Software-based Security for Hospitality IPTV .....................................................................4 2.2 System Architecture and Key Components.........................................................................5 2.3 Product Features.................................................................................................................6 2.4 Third-party Components and Resources ............................................................................6 3 VCAS for Hospitality IPTV - Configurations and Examples ........................................................7 3.1 Optimized VCAS for Hospitality IPTV Appliance.................................................................7 3.2 VOD Service Support..........................................................................................................8 3.3 Wholesale IP Broadcast Support ........................................................................................9 3.4 DTH Broadcast Support ....................................................................................................10 3.5 Adding Local Broadcast and VOD Encryption...................................................................11 3.6 Expanding Capacity and Redundancy ..............................................................................11 4 Client Device Technologies.......................................................................................................12 4.1 ViewRight® STB ...............................................................................................................12 4.2 ViewRight® PC Player ......................................................................................................12 4.3 VideoMark™......................................................................................................................13 5 Verimatrix – Securing Content, Enhancing Entertainment........................................................14 June 2010 Copyright © 2008-2010 Verimatrix, Inc. 2 1 Introduction 1.1 Verimatrix Video Content Authority System (VCAS™) Verimatrix specializes in securing and enhancing revenue on multi-device digital TV services around the globe. The award-winning and independently audited Verimatrix Video Content Authority System (VCAS™) and ViewRight® solutions offer an innovative approach for cable, satellite, terrestrial and IPTV operators to cost-effectively extend their networks and enable new business models. As the clear leader in software-based security solutions progressive service providers, Verimatrix has pioneered the 3-Dimensional Security approach that offers flexible layers of protection techniques to address evolving business needs and revenue threats. The Verimatrix 3- Dimensional strategy addresses key technology issues facing operators with a combination of: Network dimension – Best of breed encryption and key management for the widest range of delivery networks, including broadcast satellite, cable and terrestrial, IPTV and hybrid, video-on-demand (VOD), mobile, Internet TV and over-the-top (OTT). Device dimension – Beyond the living room to computers and on-the-go applications. The technology approach includes a hardened, downloadable Verimatrix ViewRight™ security core for STBs, PCs and Macs in IPTV and hybrid applications, as well as mobile/CE devices including iPhone/iPad and Android using adaptive rate streaming. Threat dimension – Since not all threats to digital TV security look alike, VCAS offers a layered set of tools and techniques to enable a flexible system protection profile. Features such as hardening, fingerprinting, watermarking and clone detection help operators address revenue loss from theft of service and rapid renewability provides a fast countermeasure capability. VCAS fully exploits the power and elegance of modern two-way IP infrastructure to provide a superior level of content and revenue security. Cryptographic and secure electronic transaction technologies proven in e-commerce, together with increasingly sophisticated features of client device chipsets, enable VCAS to offer a more renewable and flexible security implementation than legacy architectures. Maintaining close relationships with major studios, broadcasters, industry organizations and its unmatched partner ecosystem enables Verimatrix to provide a unique perspective on complex business issues beyond content security as operators seek to deliver compelling new services. 1.2 IPTV in Hospitality Deployments IP video distribution in hospitality environments has become the most advanced and cost effective technology, with many advantages, including: Flexibility in wiring infrastructure (CAT5/6, cable or telephone transmission) Fully digital quality distribution and display, including HD support Common components with in-room broadband access True interactive program guide and guest service utility displays State-of-the-art content security enables licensing of on-demand content incl. HD Broad choice of middleware, video-on-demand (VOD) and in-room client technologies. June 2010 Copyright © 2008-2010 Verimatrix, Inc. 3 2 VCAS for IPTV – Solution Overview 2.1 Software-based Security for Hospitality IPTV The heart of the hospitality content and revenue security solution is the VCAS for IPTV solution. Verimatrix has also cultivated a very broad partner ecosystem providing all required complementary components, installation and operational services for such applications. VCAS for IPTV is already operational in numerous hospitality deployments around the world. In the software-based VCAS for IPTV solution, Verimatrix eliminates the vulnerabilities related to smart card based architectures through the leverage of mature, proven two-way Internet security protocols, a Public Key Infrastructure (PKI) public/private key pair system and X.509 digital certificates. A downloadable security system for IPTV clients is not only more secure; it also enables less expensive receiver hardware. The renewable security software can be updated as required to combat any attempts at piracy. Verimatrix offers a layered security solution for hospitality pay-TV operators using a combination of: Strong encryption, using robust encryption algorithms such as AES, together with key management tried and trusted in the school of Internet commerce applications. User specific forensic watermarking of decompressed video streams with a unique, robust identifier that is traceable to the place and time of viewing. Technologies that can detect and alert the operator to suspicion of cloning in the client population, in order to prevent theft of service. This unique, multi-layered security is enabled for a wide variety of client types through a robust ViewRight client library implementation. An optimized VCAS for IPTV configuration is available for hospitality deployments, further described in this document. June 2010 Copyright © 2008-2010 Verimatrix, Inc. 4 2.2 System Architecture and Key Components Figure 1: VCAS for IPTV – End-to-End Architecture Content Security Manager (CSM™) – Contains the VCAS security components to support authentication, key distribution and user control. Real-Time Encryption System (RTES™) – Performs 128-bit AES or RC4 encryption of multicast streams of encapsulated video content. RTES offers intelligent MPEG-aware stream encryption, selectable from 1-100%. MultiCAS™/IP – An alternative to RTES, MultiCAS™/IP generates ECMs in conjunction with third-party, high-performance IP streamers supporting DVB Simulcrypt. Video Pre-Processor (VPP) – Performs offline 128-bit AES or RC4 encryption of on- demand content files before storage on dedicated VOD servers. The MPEG-aware encryption process preserves key header fields used by VOD servers for “trick play” support. ViewRight® STB – A robust package of portable embedded code that implements VCAS security functions within each IP-STB without the need for smart cards. It offers best-of- breed, software-based content security for two-way networks in a hardened implementation, incorporating signing, multi-level integrity checking, key obfuscation and rapid renewability. ViewRight® PC Player – A self-contained and highly secure player that turns any broadband-connected PC into a full-function IPTV client including video recording. VideoMark™ – Patented technology for user-specific forensic tracking, it inserts an invisible yet very robust watermark in the video stream prior to content output from the STB. This identifier can be used to trace misappropriated content back to the last authorized recipient. Third-party components (in blue) – Selection of receivers, middleware and VOD