SlideShare a Scribd company logo
1 of 76
Download to read offline
To DRM or not
     to DRM?                  ESCE/IPS, 6 de Dezembro, 2011

                         ISCTE-IUL/ISTA/ADETTI-IUL             Carlos Serrão
   Instituto Superior de Ciências do Trabalho e da Empresa     carlos.serrao@iscte.pt
                                 Lisbon University Institute   carlos.j.serrao@gmail.com
          ISCTE-IUL School of Technology and Architecture
                                                ADETTI-IUL     http://www.carlosserrao.net
                                                               http://blog.carlosserrao.net
                                                               http://www.linkedin.com/in/carlosserrao
About me...
2




    To DRM or not to DRM?   6.Dez.2011
Content
3

    ¨   In media production and publishing, content is
         information and experiences that may provide
         value for an end-user/audience in specific
         contexts.
    ¨   Content may be delivered via any medium such
         as the internet, television, and audio CDs, as well
         as live events such as conferences and stage
         performances.
    ¨   The word is used to identify and quantify various
         formats and genres of information as
         manageable value-adding components of media.
    To DRM or not to DRM?                              6.Dez.2011
Intellectual Property
4

    ¨   Intellectual property (IP) is a term referring to a number of distinct
         types of creations of the mind for which a set of exclusive rights are
         recognized—and the corresponding fields of law
    ¨   Under intellectual property law, owners are granted certain exclusive
         rights to a variety of intangible assets, such as musical, literary, and
         artistic works; discoveries and inventions; and words, phrases, symbols,
         and designs.
    ¨   Types of intellectual property rights:
         ¤   copyrights
         ¤   trademarks
         ¤   patents
         ¤   industrial design rights
         ¤   trade secrets
         ¤   ...

    To DRM or not to DRM?                                                   6.Dez.2011
Copyright is a legal concept, enacted by
most governments, giving the creator
of an original work exclusive rights to
it, usually for a limited time.

Generally, it is "the right to copy", but
also gives the copyright holder the right
to be credited for the work, to
determine who may adapt the work to
other forms, who may perform the
work, who may financially benefit from
it, and other, related rights.
Digital Content
6

    ¨   Advantages and Opportunities
         ¤ better          content
         ¤ new      and better delivery channels
         ¤ new      customers
         ¤ faster          delivery
         ¤ ...

    ¨   Disadvantages and Challenges
         ¤ piracy          and uncontrolled distribution
         ¤ ...

    To DRM or not to DRM?                                   6.Dez.2011
Impact #1 - Digital Formats
Impact #2 - Bandwidth
Impact #3 - P2P
Impact #4 - Compression
Piracy...
... the right way to fight it?
http://youtu.be/l5SmrHNWhak
Content
13

     ¨   Answer from content industry
          ¤ Digital

          ¤ Rights

          ¤ Management

     ¨   and
          ¤ Copy

          ¤ Protection/Prevention




     To DRM or not to DRM?               6.Dez.2011
DRM interoperability
14

     ¨   DRM involves the:
          ¤ description

          ¤ layering

          ¤ analysis

          ¤ valuation

          ¤ trading

          ¤ and     monitoring of rights
     ¨   over an individual or organization's assets, in
          digital format.
     To DRM or not to DRM?                             6.Dez.2011
CD
eXtended Copy Protection (XCP)

Copy-Protection on CDs
Sony BMG CD copy protection rootkit
scandal



MediaMax CD-3

Copy-Protection on CDs




              A	
  rootkit	
  is	
  so;ware	
  that	
  enables	
  con0nued	
  privileged	
  access	
  to	
  a	
  computer	
  
              while	
  ac0vely	
  hiding	
  its	
  presence	
  from	
  administrators	
  by	
  subver0ng	
  standard	
  
                                    opera0ng	
  system	
  func0onality	
  or	
  other	
  applica0ons.
Mark Russinovich
(Sysinternals, actual Microsoft)
#FAIL
Mark Russinovich
(Sysinternals, actual Microsoft)
DVD
CSS content-scrambling system
1996-1999



          1. CSS prevents byte-for-byte copies of an MPEG (digital video)
             stream from being playable since such copies do not include
             the keys that are hidden on the lead-in area of the restricted
             DVD.

          2. CSS provides a reason for manufacturers to make their
             devices compliant with an industry-controlled standard, since
             CSS scrambled discs cannot in principle be played on
             noncompliant devices.
Jon Lech Johansen (a.k.a. DVD Jon)

                                     DeCSS
                                     QTFairUse
                                     DeDRM
                                     PyMusique, SharpMusic (iTunes alternatives)
                                     DoubleTwist
AACS
Advanced Access Content System


HD-DVD, BlueRay



  Since appearing in devices in
  2006, several AACS
  decryption keys have been
  extracted from weakly
  protected software players
  and published on the
  Internet, allowing
  decryption by other
  unlicensed software.
Digital files cannot be made
uncopyable, any more than
water can be made not wet.
             Bruce Schneier
             in Crypto Gram, 15 May 2001
             http://www.schneier.com/crypto-gram-0105.html#3
It was originally founded as a pioneering peer-
to-peer file sharing Internet service that
emphasized sharing audio files, typically
music, encoded in MP3 format.                     John Fanning   Shawn Fanning



In its second incarnation Napster became an
online music store until it merged with
Rhapsody on 1 December 2011.
Games
SecuROM
SafeDisc
Digital Millennium Copyright Act (DMCA)


United States copyright law that implements two 1996
treaties of the World Intellectual Property Organization
(WIPO)

Criminalizes production and dissemination of technology,
devices, or services intended to circumvent measures
that control access to copyrighted works


Criminalizes the act of circumventing an access control,
whether or not there is actual infringement of copyright
itself
http://youtu.be/ryXDhXqR-SE
Digital Content Value-Chain
26




     To DRM or not to DRM?         6.Dez.2011
Digital Content Value-Chain
26




     Creator           Publisher       Aggregator         Distributor          Retailer     Consumer




      Content Creation, Capture
           Content Rights
           Establishment
      Content Rights Validation
                                   Content Packaging
                                   Content Repository
                                                          Content Trading
                                                        Content Distribution

                                                                          Content Trading
                                                                        Content Distribution
                                                                         Content Payment Content Trading
                                                                                              Permission
                                                                                             Management

       To DRM or not to DRM?                                                                    6.Dez.2011
Digital Rights Management
27




     To DRM or not to DRM?       6.Dez.2011
Digital Rights Management
27




         Creator         Publisher   Aggregator   Distributor   Retailer   Consumer




     To DRM or not to DRM?                                                        6.Dez.2011
Digital Rights Management
27
                                                                      iTunes FairPlay

         Creator         Publisher   Aggregator   Distributor   Retailer   Consumer




            Content authors
            Publishers




     To DRM or not to DRM?                                                        6.Dez.2011
Digital Rights Management
27
                                                                             iTunes FairPlay

         Creator         Publisher          Aggregator   Distributor   Retailer   Consumer




                              Apple, Inc.
            Content authors
            Publishers




     To DRM or not to DRM?                                                               6.Dez.2011
Digital Rights Management
27
                                                                                  iTunes FairPlay

         Creator         Publisher          Aggregator        Distributor   Retailer   Consumer




                              Apple, Inc.
            Content authors
            Publishers




                                              Apple content
                                              servers



     To DRM or not to DRM?                                                                    6.Dez.2011
Digital Rights Management
27
                                                                                        iTunes FairPlay

         Creator         Publisher          Aggregator        Distributor        Retailer    Consumer




                              Apple, Inc.
            Content authors
            Publishers




                                                                        Apple iTunes
                                              Apple content             content store
                                              servers



     To DRM or not to DRM?                                                                          6.Dez.2011
Digital Rights Management
27
                                                                                        iTunes FairPlay

         Creator         Publisher          Aggregator        Distributor        Retailer    Consumer




                              Apple, Inc.
            Content authors
            Publishers




                                                                        Apple iTunes
                                              Apple content             content store
                                              servers                                       Apple iPod, iPhone,
                                                                                            Apple TV, ...


     To DRM or not to DRM?                                                                             6.Dez.2011
Digital Rights Management
28




     To DRM or not to DRM?       6.Dez.2011
Digital Rights Management
28




         Creator         Publisher   Aggregator   Distributor   Retailer   Consumer




     To DRM or not to DRM?                                                        6.Dez.2011
Digital Rights Management
28
                                                                Windows Media DRM

         Creator         Publisher   Aggregator   Distributor     Retailer   Consumer




            Content authors
            Publishers




     To DRM or not to DRM?                                                          6.Dez.2011
Digital Rights Management
28
                                                                      Windows Media DRM

         Creator         Publisher         Aggregator   Distributor     Retailer   Consumer




            Content authors
            Publishers      Content is encoded,
                            protected and stored




     To DRM or not to DRM?                                                                6.Dez.2011
Digital Rights Management
28
                                                                         Windows Media DRM

         Creator         Publisher         Aggregator      Distributor         Retailer   Consumer




            Content authors
            Publishers      Content is encoded,
                            protected and stored



                                                    Protected content is
                                                    made available to stores




     To DRM or not to DRM?                                                                       6.Dez.2011
Digital Rights Management
28
                                                                          Windows Media DRM

         Creator         Publisher         Aggregator       Distributor         Retailer   Consumer




            Content authors                                                                  Content acquired
            Publishers      Content is encoded,                                              and dowloaded +
                            protected and stored                                             license



                                                     Protected content is
                                                     made available to stores
                                        License
                                        production


     To DRM or not to DRM?                                                                         6.Dez.2011
Digital Rights Management
28
                                                                          Windows Media DRM

         Creator         Publisher         Aggregator       Distributor         Retailer   Consumer




            Content authors                                                                  Content acquired
            Publishers      Content is encoded,                                              and dowloaded +
                            protected and stored                                             license



                                                     Protected content is
                                                     made available to stores
                                        License
                                        production


     To DRM or not to DRM?                                                                         6.Dez.2011
g
             tin
            pu
           m
       Co
       d
  te
  us
Tr




                     http://youtu.be/UnXU7z2_6Jg
remixed
  r/w
culture
remixed
  r/w
culture
http://www.ted.com/talks/larry_lessig_says_the_law_is_strangling_creativity.html
Digital Content Value-Chain
33




     To DRM or not to DRM?         6.Dez.2011
Digital Content Value-Chain
33




                                      Consumer Distributor is Aggregator is Consumer
     Creator           Publisher   Aggregator is Creator       ConsumerConsumer is
                                                                 Retailer
                                            Consumer is Publisher
                                                 Consumer
                                                                Distributor Retailer




     ¨ Consumers are “active” not “passive”

     ¨ Consumers take other roles on DCVC

     ¨ Changes the established rights management
        logic

       To DRM or not to DRM?                                                 6.Dez.2011
interoperability
Digital Rights Management
35

     ¨   DRM 1.0 failure
          ¤ Vulnerable         DRM systems
          ¤ Limitations         to user experience
          ¤ Limited         availability
          ¤ Offer      limited protection
          ¤ Imposition         to end-users
          ¤ Lack      of interoperability


     ¨   DRM 2.0 must solve these issues
     To DRM or not to DRM?                            6.Dez.2011
Digital Rights Management
36


        DRM 1.0              DRM 1.5             DRM 2.0
         Apple                  OpenIPM         DMP
        Fairplay                   P           Chillout
                                             Coral
           Windows Media     OMA DRM
               DRM                        DReaM
                                              Marlin
                                                     MPEG-2
                                                       1
                                                 AXMedis
                                               MIPAM
                                                 S



     To DRM or not to DRM?                                    6.Dez.2011
Digital Rights Management
37

     ¨ DRM Layers




     To DRM or not to DRM?       6.Dez.2011
Digital Rights Management
37

     ¨ DRM Layers



                             Rights Management

                             Rights Enforcement

                              Copy Protection



     To DRM or not to DRM?                        6.Dez.2011
Digital Rights Management
38

     ¨ DRM Layers – non-interoperable




     To DRM or not to DRM?               6.Dez.2011
Digital Rights Management
38

       ¨ DRM Layers – non-interoperable




                Rights Management     X   Rights Management




                                                                   DRM B
     DRM A




                Rights Enforcement    X   Rights Enforcement
                    Copy Protection   X    Copy Protection




       To DRM or not to DRM?                                   6.Dez.2011
Digital Rights Management
39

     ¨ DRM Layers - interoperable




     To DRM or not to DRM?           6.Dez.2011
Digital Rights Management
39

     ¨ DRM Layers - interoperable




                                DRM



                                      DRM
          Rights Management                 Rights Management




                                 A
                                       B
                                      DRM
                                DRM
          Rights Enforcement                Rights Enforcement



                                       A
                                 B


                                      DRM
                                DRM
              Copy Protection                Copy Protection
                                       B
                                 A




     To DRM or not to DRM?                                     6.Dez.2011
Digital Rights Management
40

     ¨   Interoperability strategies (International
          Standards):
          ¤ Full    format interoperability
          ¤ Connected       interoperability
          ¤ Configuration      driven interoperability




     To DRM or not to DRM?                                6.Dez.2011
Digital Rights Management
41


        DRM 1.0                    DRM 1.5             DRM 2.0
         Apple                        OpenIPM         DMP
        Fairplay                         P           Chillout
                                                   Coral
           Windows Media           OMA DRM
               DRM                              DReaM
                                                    Marlin
                                                           MPEG-2
                                                             1
                                                       AXMedis
                             Interoperability        MIPAM
                                                       S



     To DRM or not to DRM?                                          6.Dez.2011
OpenSDRM
42




     To DRM or not to DRM?   6.Dez.2011
OpenSDRM
42




     To DRM or not to DRM?   6.Dez.2011
OpenSDRM
42




     To DRM or not to DRM?   6.Dez.2011
OpenSDRM
42




     To DRM or not to DRM?   6.Dez.2011
OpenSDRM
42




     To DRM or not to DRM?   6.Dez.2011
Creative Commons licenses
are several copyright
licenses that allow the
distribution of copyrighted
works.

The licenses differ by
several combinations that
condition the terms of
distribution.
Attribution (by)
Licensees may copy, distribute, display and perform the work and
make derivative works based on it only if they give the author or
licensor the credits in the manner specified by these.

Noncommercial (nc)
Licensees may copy, distribute, display, and perform the work and
make derivative works based on it only for noncommercial
purposes.


No Derivative Works (nd)
Licensees may copy, distribute, display and perform only verbatim
copies of the work, not derivative works based on it.



Share-alike (sa)
Licensees may distribute derivative works only under a license
identical to the license that governs the original work.
45   Research challenges?!?
Still some interesting technical
challenges

- Formats
- Interoperability
- Security
Better control to private information

- Social Networks
- Private information sharing
Applicability to vertical sectors

- Health
- Business information
- Education and Research
Super-copy

Super-distribution

Monetization
50   Q & A?
To DRM or not
     to DRM?                  ESCE/IPS, 6 de Dezembro, 2011

                         ISCTE-IUL/ISTA/ADETTI-IUL             Carlos Serrão
   Instituto Superior de Ciências do Trabalho e da Empresa     carlos.serrao@iscte.pt
                                 Lisbon University Institute   carlos.j.serrao@gmail.com
          ISCTE-IUL School of Technology and Architecture
                                                ADETTI-IUL     http://www.carlosserrao.net
                                                               http://blog.carlosserrao.net
                                                               http://www.linkedin.com/in/carlosserrao

More Related Content

What's hot (7)

Verimatrix Digital Living
Verimatrix Digital LivingVerimatrix Digital Living
Verimatrix Digital Living
 
Presentazione
PresentazionePresentazione
Presentazione
 
Huiyun zhang
Huiyun zhangHuiyun zhang
Huiyun zhang
 
Drm metadata presentation fina lwith-notes
Drm metadata presentation fina lwith-notesDrm metadata presentation fina lwith-notes
Drm metadata presentation fina lwith-notes
 
Authorship Drm Seminar
Authorship Drm SeminarAuthorship Drm Seminar
Authorship Drm Seminar
 
The landscape of content protection technology
The landscape of content protection technologyThe landscape of content protection technology
The landscape of content protection technology
 
Ipr
IprIpr
Ipr
 

Viewers also liked

Weber DRM What Should The Model Be MIT 11 26 07
Weber DRM What Should The Model Be MIT 11 26 07Weber DRM What Should The Model Be MIT 11 26 07
Weber DRM What Should The Model Be MIT 11 26 07bobweber
 
DRM Interoperability
DRM InteroperabilityDRM Interoperability
DRM InteroperabilityHiram Juarbe
 
Developing a digital copyright strategy
Developing a digital copyright strategyDeveloping a digital copyright strategy
Developing a digital copyright strategyHeather Ford
 
Drm Evolution 2005 10 19
Drm Evolution 2005 10 19Drm Evolution 2005 10 19
Drm Evolution 2005 10 19Amit Maitra
 
Enterprise Digital Rights Management (Persistent Security)
Enterprise Digital Rights Management (Persistent Security)Enterprise Digital Rights Management (Persistent Security)
Enterprise Digital Rights Management (Persistent Security)pabatan
 
Digital Content Frustration
Digital Content FrustrationDigital Content Frustration
Digital Content FrustrationSarah Houghton
 
Digital Rights Management for Animation & Gaming
Digital Rights Management for Animation & GamingDigital Rights Management for Animation & Gaming
Digital Rights Management for Animation & GamingRamesh Kumar
 
Drm landscape and online streaming
Drm landscape and online streamingDrm landscape and online streaming
Drm landscape and online streamingJas Chhabra
 
An OWL Copyright Ontology for Semantic Digital Rights Management
An OWL Copyright Ontology for Semantic Digital Rights ManagementAn OWL Copyright Ontology for Semantic Digital Rights Management
An OWL Copyright Ontology for Semantic Digital Rights ManagementRoberto García
 
Drm digital rights managment-june2014-tarek gaber
Drm digital rights managment-june2014-tarek gaberDrm digital rights managment-june2014-tarek gaber
Drm digital rights managment-june2014-tarek gaberTarek Gaber
 
De-mystifying DRM
De-mystifying DRMDe-mystifying DRM
De-mystifying DRMcastLabs
 

Viewers also liked (12)

Weber DRM What Should The Model Be MIT 11 26 07
Weber DRM What Should The Model Be MIT 11 26 07Weber DRM What Should The Model Be MIT 11 26 07
Weber DRM What Should The Model Be MIT 11 26 07
 
DRM Interoperability
DRM InteroperabilityDRM Interoperability
DRM Interoperability
 
Developing a digital copyright strategy
Developing a digital copyright strategyDeveloping a digital copyright strategy
Developing a digital copyright strategy
 
Drm Evolution 2005 10 19
Drm Evolution 2005 10 19Drm Evolution 2005 10 19
Drm Evolution 2005 10 19
 
Enterprise Digital Rights Management (Persistent Security)
Enterprise Digital Rights Management (Persistent Security)Enterprise Digital Rights Management (Persistent Security)
Enterprise Digital Rights Management (Persistent Security)
 
Scenario Mapping
Scenario MappingScenario Mapping
Scenario Mapping
 
Digital Content Frustration
Digital Content FrustrationDigital Content Frustration
Digital Content Frustration
 
Digital Rights Management for Animation & Gaming
Digital Rights Management for Animation & GamingDigital Rights Management for Animation & Gaming
Digital Rights Management for Animation & Gaming
 
Drm landscape and online streaming
Drm landscape and online streamingDrm landscape and online streaming
Drm landscape and online streaming
 
An OWL Copyright Ontology for Semantic Digital Rights Management
An OWL Copyright Ontology for Semantic Digital Rights ManagementAn OWL Copyright Ontology for Semantic Digital Rights Management
An OWL Copyright Ontology for Semantic Digital Rights Management
 
Drm digital rights managment-june2014-tarek gaber
Drm digital rights managment-june2014-tarek gaberDrm digital rights managment-june2014-tarek gaber
Drm digital rights managment-june2014-tarek gaber
 
De-mystifying DRM
De-mystifying DRMDe-mystifying DRM
De-mystifying DRM
 

Similar to To DRM or not to DRM?

2009 IP Club Lecture
2009 IP Club Lecture2009 IP Club Lecture
2009 IP Club LectureGreg Lastowka
 
MxMedia investor pitch deck
MxMedia investor pitch deckMxMedia investor pitch deck
MxMedia investor pitch deckmxmedia
 
Controlling the value in software companies
Controlling the value in software companiesControlling the value in software companies
Controlling the value in software companiesJohan Örneblad
 
Semantic Copyright Expression Options
Semantic Copyright Expression OptionsSemantic Copyright Expression Options
Semantic Copyright Expression OptionsRoland Alton
 
Chapter 9 ibm
Chapter 9 ibmChapter 9 ibm
Chapter 9 ibmAlDeny1
 
Remix Culture by Lawrence Lessig - Infographic
Remix Culture by Lawrence Lessig - InfographicRemix Culture by Lawrence Lessig - Infographic
Remix Culture by Lawrence Lessig - InfographicAnna Ortega Martínez
 
The Digital Music Distribution Revolution
The Digital Music Distribution RevolutionThe Digital Music Distribution Revolution
The Digital Music Distribution Revolutionrianokvika
 
Business Rights Management: A Primer
Business Rights Management: A PrimerBusiness Rights Management: A Primer
Business Rights Management: A Primermbrooks01
 
digital rights management for multimedia files
digital rights management for multimedia filesdigital rights management for multimedia files
digital rights management for multimedia filesApurva Vyas
 
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...power to the pixel
 

Similar to To DRM or not to DRM? (20)

Rights Technologies for E-Publishing
Rights Technologies for E-PublishingRights Technologies for E-Publishing
Rights Technologies for E-Publishing
 
2009 IP Club Lecture
2009 IP Club Lecture2009 IP Club Lecture
2009 IP Club Lecture
 
MxMedia investor pitch deck
MxMedia investor pitch deckMxMedia investor pitch deck
MxMedia investor pitch deck
 
Digital Libraries
Digital LibrariesDigital Libraries
Digital Libraries
 
Controlling the value in software companies
Controlling the value in software companiesControlling the value in software companies
Controlling the value in software companies
 
Semantic Copyright Expression Options
Semantic Copyright Expression OptionsSemantic Copyright Expression Options
Semantic Copyright Expression Options
 
Copyright powerpoint
Copyright powerpointCopyright powerpoint
Copyright powerpoint
 
Copyright powerpoint
Copyright powerpointCopyright powerpoint
Copyright powerpoint
 
Chapter 9 ibm
Chapter 9 ibmChapter 9 ibm
Chapter 9 ibm
 
Remix Culture by Lawrence Lessig - Infographic
Remix Culture by Lawrence Lessig - InfographicRemix Culture by Lawrence Lessig - Infographic
Remix Culture by Lawrence Lessig - Infographic
 
Chapter 9 ibm
Chapter 9 ibmChapter 9 ibm
Chapter 9 ibm
 
The Digital Music Distribution Revolution
The Digital Music Distribution RevolutionThe Digital Music Distribution Revolution
The Digital Music Distribution Revolution
 
Henry Stewert DAM LA 2010 - Rights Management
Henry Stewert DAM LA 2010 - Rights ManagementHenry Stewert DAM LA 2010 - Rights Management
Henry Stewert DAM LA 2010 - Rights Management
 
Chapter 9 ibm
Chapter 9 ibmChapter 9 ibm
Chapter 9 ibm
 
Business Rights Management: A Primer
Business Rights Management: A PrimerBusiness Rights Management: A Primer
Business Rights Management: A Primer
 
Drm
DrmDrm
Drm
 
digital rights management for multimedia files
digital rights management for multimedia filesdigital rights management for multimedia files
digital rights management for multimedia files
 
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...
THE PIXEL LAB 2010: Gregor Pryor of Reed Smith - Digital Rights Issues for Cr...
 
Open Source & Open Development
Open Source & Open Development Open Source & Open Development
Open Source & Open Development
 
IBM
IBMIBM
IBM
 

More from Carlos Serrao

Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"
Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"
Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"Carlos Serrao
 
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...Carlos Serrao
 
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]Carlos Serrao
 
A OWASP e a Segurança Aplicacional para a Web
A OWASP e a Segurança Aplicacional para a WebA OWASP e a Segurança Aplicacional para a Web
A OWASP e a Segurança Aplicacional para a WebCarlos Serrao
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisCarlos Serrao
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisCarlos Serrao
 
OWASP e o desenvolvimento seguro de aplicações para a Web
OWASP e o desenvolvimento seguro de aplicações para a WebOWASP e o desenvolvimento seguro de aplicações para a Web
OWASP e o desenvolvimento seguro de aplicações para a WebCarlos Serrao
 
Principios básicos de segurança on-line
Principios básicos de segurança on-linePrincipios básicos de segurança on-line
Principios básicos de segurança on-lineCarlos Serrao
 
OWASP presentation on FISTA2011
OWASP presentation on FISTA2011OWASP presentation on FISTA2011
OWASP presentation on FISTA2011Carlos Serrao
 
Análise de Vulnerabilidades em Aplicações na Web Nacional
Análise de Vulnerabilidades em Aplicações na Web NacionalAnálise de Vulnerabilidades em Aplicações na Web Nacional
Análise de Vulnerabilidades em Aplicações na Web NacionalCarlos Serrao
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisCarlos Serrao
 
OWASP, PT.OWASP, IBWAS'10 & Cia.
OWASP, PT.OWASP, IBWAS'10 & Cia.OWASP, PT.OWASP, IBWAS'10 & Cia.
OWASP, PT.OWASP, IBWAS'10 & Cia.Carlos Serrao
 
Owasp@iscte iul ferramentas-analise_vulnerabilidades
Owasp@iscte iul ferramentas-analise_vulnerabilidadesOwasp@iscte iul ferramentas-analise_vulnerabilidades
Owasp@iscte iul ferramentas-analise_vulnerabilidadesCarlos Serrao
 
OWASP@ ISCTE-IUL, Segurança em PHP
OWASP@ ISCTE-IUL, Segurança em PHPOWASP@ ISCTE-IUL, Segurança em PHP
OWASP@ ISCTE-IUL, Segurança em PHPCarlos Serrao
 
OWASP @ ISCTE-IUL, OWASP Top 10 2010
OWASP @ ISCTE-IUL, OWASP Top 10 2010OWASP @ ISCTE-IUL, OWASP Top 10 2010
OWASP @ ISCTE-IUL, OWASP Top 10 2010Carlos Serrao
 
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)Carlos Serrao
 
OWASP @ ISCTE-IUL, Criptografia em PHP
OWASP @ ISCTE-IUL, Criptografia em PHPOWASP @ ISCTE-IUL, Criptografia em PHP
OWASP @ ISCTE-IUL, Criptografia em PHPCarlos Serrao
 
OWASP @ ISCTE-IUL, OWASP e OWASP Portugal
OWASP @ ISCTE-IUL, OWASP e OWASP PortugalOWASP @ ISCTE-IUL, OWASP e OWASP Portugal
OWASP @ ISCTE-IUL, OWASP e OWASP PortugalCarlos Serrao
 

More from Carlos Serrao (20)

Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"
Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"
Prevenir o "ransomware" - Guia da OWASP para prevenção do "ransomware"
 
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...
OWASP Mobile Top 10 - Principais Riscos no Desenvolvimento Seguro de Aplicaçõ...
 
OWASP Mobile Top 10
OWASP Mobile Top 10OWASP Mobile Top 10
OWASP Mobile Top 10
 
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]
Vamos tirar uma selfie? [... como a privacidade morreu e ninguém nos avisou]
 
A OWASP e a Segurança Aplicacional para a Web
A OWASP e a Segurança Aplicacional para a WebA OWASP e a Segurança Aplicacional para a Web
A OWASP e a Segurança Aplicacional para a Web
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes Sociais
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes Sociais
 
OWASP e o desenvolvimento seguro de aplicações para a Web
OWASP e o desenvolvimento seguro de aplicações para a WebOWASP e o desenvolvimento seguro de aplicações para a Web
OWASP e o desenvolvimento seguro de aplicações para a Web
 
Principios básicos de segurança on-line
Principios básicos de segurança on-linePrincipios básicos de segurança on-line
Principios básicos de segurança on-line
 
OWASP presentation on FISTA2011
OWASP presentation on FISTA2011OWASP presentation on FISTA2011
OWASP presentation on FISTA2011
 
Análise de Vulnerabilidades em Aplicações na Web Nacional
Análise de Vulnerabilidades em Aplicações na Web NacionalAnálise de Vulnerabilidades em Aplicações na Web Nacional
Análise de Vulnerabilidades em Aplicações na Web Nacional
 
Segurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes SociaisSegurança e Privacidade em Redes Sociais
Segurança e Privacidade em Redes Sociais
 
OWASP, PT.OWASP, IBWAS'10 & Cia.
OWASP, PT.OWASP, IBWAS'10 & Cia.OWASP, PT.OWASP, IBWAS'10 & Cia.
OWASP, PT.OWASP, IBWAS'10 & Cia.
 
Is the Web at Risk?
Is the Web at Risk?Is the Web at Risk?
Is the Web at Risk?
 
Owasp@iscte iul ferramentas-analise_vulnerabilidades
Owasp@iscte iul ferramentas-analise_vulnerabilidadesOwasp@iscte iul ferramentas-analise_vulnerabilidades
Owasp@iscte iul ferramentas-analise_vulnerabilidades
 
OWASP@ ISCTE-IUL, Segurança em PHP
OWASP@ ISCTE-IUL, Segurança em PHPOWASP@ ISCTE-IUL, Segurança em PHP
OWASP@ ISCTE-IUL, Segurança em PHP
 
OWASP @ ISCTE-IUL, OWASP Top 10 2010
OWASP @ ISCTE-IUL, OWASP Top 10 2010OWASP @ ISCTE-IUL, OWASP Top 10 2010
OWASP @ ISCTE-IUL, OWASP Top 10 2010
 
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)
OWASP @ ISCTE-IUL - OWASP Top 10 (v2010)
 
OWASP @ ISCTE-IUL, Criptografia em PHP
OWASP @ ISCTE-IUL, Criptografia em PHPOWASP @ ISCTE-IUL, Criptografia em PHP
OWASP @ ISCTE-IUL, Criptografia em PHP
 
OWASP @ ISCTE-IUL, OWASP e OWASP Portugal
OWASP @ ISCTE-IUL, OWASP e OWASP PortugalOWASP @ ISCTE-IUL, OWASP e OWASP Portugal
OWASP @ ISCTE-IUL, OWASP e OWASP Portugal
 

Recently uploaded

A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024Results
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?Igalia
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)Gabriella Davis
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreternaman860154
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Igalia
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Scriptwesley chun
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEarley Information Science
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationMichael W. Hawkins
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUK Journal
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfsudhanshuwaghmare1
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Enterprise Knowledge
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024The Digital Insurer
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Servicegiselly40
 

Recently uploaded (20)

A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024A Call to Action for Generative AI in 2024
A Call to Action for Generative AI in 2024
 
A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?A Year of the Servo Reboot: Where Are We Now?
A Year of the Servo Reboot: Where Are We Now?
 
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...Workshop - Best of Both Worlds_ Combine  KG and Vector search for  enhanced R...
Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...
 
A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)A Domino Admins Adventures (Engage 2024)
A Domino Admins Adventures (Engage 2024)
 
Presentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreterPresentation on how to chat with PDF using ChatGPT code interpreter
Presentation on how to chat with PDF using ChatGPT code interpreter
 
08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men08448380779 Call Girls In Civil Lines Women Seeking Men
08448380779 Call Girls In Civil Lines Women Seeking Men
 
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
Raspberry Pi 5: Challenges and Solutions in Bringing up an OpenGL/Vulkan Driv...
 
Automating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps ScriptAutomating Google Workspace (GWS) & more with Apps Script
Automating Google Workspace (GWS) & more with Apps Script
 
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptxEIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx
 
GenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day PresentationGenCyber Cyber Security Day Presentation
GenCyber Cyber Security Day Presentation
 
Breaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path MountBreaking the Kubernetes Kill Chain: Host Path Mount
Breaking the Kubernetes Kill Chain: Host Path Mount
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Boost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdfBoost Fertility New Invention Ups Success Rates.pdf
Boost Fertility New Invention Ups Success Rates.pdf
 
Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)Powerful Google developer tools for immediate impact! (2023-24 C)
Powerful Google developer tools for immediate impact! (2023-24 C)
 
Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...Driving Behavioral Change for Information Management through Data-Driven Gree...
Driving Behavioral Change for Information Management through Data-Driven Gree...
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Handwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed textsHandwritten Text Recognition for manuscripts and early printed texts
Handwritten Text Recognition for manuscripts and early printed texts
 
CNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of ServiceCNv6 Instructor Chapter 6 Quality of Service
CNv6 Instructor Chapter 6 Quality of Service
 

To DRM or not to DRM?

  • 1. To DRM or not to DRM? ESCE/IPS, 6 de Dezembro, 2011 ISCTE-IUL/ISTA/ADETTI-IUL Carlos Serrão Instituto Superior de Ciências do Trabalho e da Empresa carlos.serrao@iscte.pt Lisbon University Institute carlos.j.serrao@gmail.com ISCTE-IUL School of Technology and Architecture ADETTI-IUL http://www.carlosserrao.net http://blog.carlosserrao.net http://www.linkedin.com/in/carlosserrao
  • 2. About me... 2 To DRM or not to DRM? 6.Dez.2011
  • 3. Content 3 ¨ In media production and publishing, content is information and experiences that may provide value for an end-user/audience in specific contexts. ¨ Content may be delivered via any medium such as the internet, television, and audio CDs, as well as live events such as conferences and stage performances. ¨ The word is used to identify and quantify various formats and genres of information as manageable value-adding components of media. To DRM or not to DRM? 6.Dez.2011
  • 4. Intellectual Property 4 ¨ Intellectual property (IP) is a term referring to a number of distinct types of creations of the mind for which a set of exclusive rights are recognized—and the corresponding fields of law ¨ Under intellectual property law, owners are granted certain exclusive rights to a variety of intangible assets, such as musical, literary, and artistic works; discoveries and inventions; and words, phrases, symbols, and designs. ¨ Types of intellectual property rights: ¤ copyrights ¤ trademarks ¤ patents ¤ industrial design rights ¤ trade secrets ¤ ... To DRM or not to DRM? 6.Dez.2011
  • 5. Copyright is a legal concept, enacted by most governments, giving the creator of an original work exclusive rights to it, usually for a limited time. Generally, it is "the right to copy", but also gives the copyright holder the right to be credited for the work, to determine who may adapt the work to other forms, who may perform the work, who may financially benefit from it, and other, related rights.
  • 6. Digital Content 6 ¨ Advantages and Opportunities ¤ better content ¤ new and better delivery channels ¤ new customers ¤ faster delivery ¤ ... ¨ Disadvantages and Challenges ¤ piracy and uncontrolled distribution ¤ ... To DRM or not to DRM? 6.Dez.2011
  • 7. Impact #1 - Digital Formats
  • 8. Impact #2 - Bandwidth
  • 10. Impact #4 - Compression
  • 11. Piracy... ... the right way to fight it?
  • 13. Content 13 ¨ Answer from content industry ¤ Digital ¤ Rights ¤ Management ¨ and ¤ Copy ¤ Protection/Prevention To DRM or not to DRM? 6.Dez.2011
  • 14. DRM interoperability 14 ¨ DRM involves the: ¤ description ¤ layering ¤ analysis ¤ valuation ¤ trading ¤ and monitoring of rights ¨ over an individual or organization's assets, in digital format. To DRM or not to DRM? 6.Dez.2011
  • 15. CD eXtended Copy Protection (XCP) Copy-Protection on CDs Sony BMG CD copy protection rootkit scandal MediaMax CD-3 Copy-Protection on CDs A  rootkit  is  so;ware  that  enables  con0nued  privileged  access  to  a  computer   while  ac0vely  hiding  its  presence  from  administrators  by  subver0ng  standard   opera0ng  system  func0onality  or  other  applica0ons.
  • 18. DVD CSS content-scrambling system 1996-1999 1. CSS prevents byte-for-byte copies of an MPEG (digital video) stream from being playable since such copies do not include the keys that are hidden on the lead-in area of the restricted DVD. 2. CSS provides a reason for manufacturers to make their devices compliant with an industry-controlled standard, since CSS scrambled discs cannot in principle be played on noncompliant devices.
  • 19. Jon Lech Johansen (a.k.a. DVD Jon) DeCSS QTFairUse DeDRM PyMusique, SharpMusic (iTunes alternatives) DoubleTwist
  • 20. AACS Advanced Access Content System HD-DVD, BlueRay Since appearing in devices in 2006, several AACS decryption keys have been extracted from weakly protected software players and published on the Internet, allowing decryption by other unlicensed software.
  • 21. Digital files cannot be made uncopyable, any more than water can be made not wet. Bruce Schneier in Crypto Gram, 15 May 2001 http://www.schneier.com/crypto-gram-0105.html#3
  • 22. It was originally founded as a pioneering peer- to-peer file sharing Internet service that emphasized sharing audio files, typically music, encoded in MP3 format. John Fanning Shawn Fanning In its second incarnation Napster became an online music store until it merged with Rhapsody on 1 December 2011.
  • 23.
  • 24.
  • 26. Digital Millennium Copyright Act (DMCA) United States copyright law that implements two 1996 treaties of the World Intellectual Property Organization (WIPO) Criminalizes production and dissemination of technology, devices, or services intended to circumvent measures that control access to copyrighted works Criminalizes the act of circumventing an access control, whether or not there is actual infringement of copyright itself
  • 28. Digital Content Value-Chain 26 To DRM or not to DRM? 6.Dez.2011
  • 29. Digital Content Value-Chain 26 Creator Publisher Aggregator Distributor Retailer Consumer Content Creation, Capture Content Rights Establishment Content Rights Validation Content Packaging Content Repository Content Trading Content Distribution Content Trading Content Distribution Content Payment Content Trading Permission Management To DRM or not to DRM? 6.Dez.2011
  • 30. Digital Rights Management 27 To DRM or not to DRM? 6.Dez.2011
  • 31. Digital Rights Management 27 Creator Publisher Aggregator Distributor Retailer Consumer To DRM or not to DRM? 6.Dez.2011
  • 32. Digital Rights Management 27 iTunes FairPlay Creator Publisher Aggregator Distributor Retailer Consumer Content authors Publishers To DRM or not to DRM? 6.Dez.2011
  • 33. Digital Rights Management 27 iTunes FairPlay Creator Publisher Aggregator Distributor Retailer Consumer Apple, Inc. Content authors Publishers To DRM or not to DRM? 6.Dez.2011
  • 34. Digital Rights Management 27 iTunes FairPlay Creator Publisher Aggregator Distributor Retailer Consumer Apple, Inc. Content authors Publishers Apple content servers To DRM or not to DRM? 6.Dez.2011
  • 35. Digital Rights Management 27 iTunes FairPlay Creator Publisher Aggregator Distributor Retailer Consumer Apple, Inc. Content authors Publishers Apple iTunes Apple content content store servers To DRM or not to DRM? 6.Dez.2011
  • 36. Digital Rights Management 27 iTunes FairPlay Creator Publisher Aggregator Distributor Retailer Consumer Apple, Inc. Content authors Publishers Apple iTunes Apple content content store servers Apple iPod, iPhone, Apple TV, ... To DRM or not to DRM? 6.Dez.2011
  • 37. Digital Rights Management 28 To DRM or not to DRM? 6.Dez.2011
  • 38. Digital Rights Management 28 Creator Publisher Aggregator Distributor Retailer Consumer To DRM or not to DRM? 6.Dez.2011
  • 39. Digital Rights Management 28 Windows Media DRM Creator Publisher Aggregator Distributor Retailer Consumer Content authors Publishers To DRM or not to DRM? 6.Dez.2011
  • 40. Digital Rights Management 28 Windows Media DRM Creator Publisher Aggregator Distributor Retailer Consumer Content authors Publishers Content is encoded, protected and stored To DRM or not to DRM? 6.Dez.2011
  • 41. Digital Rights Management 28 Windows Media DRM Creator Publisher Aggregator Distributor Retailer Consumer Content authors Publishers Content is encoded, protected and stored Protected content is made available to stores To DRM or not to DRM? 6.Dez.2011
  • 42. Digital Rights Management 28 Windows Media DRM Creator Publisher Aggregator Distributor Retailer Consumer Content authors Content acquired Publishers Content is encoded, and dowloaded + protected and stored license Protected content is made available to stores License production To DRM or not to DRM? 6.Dez.2011
  • 43. Digital Rights Management 28 Windows Media DRM Creator Publisher Aggregator Distributor Retailer Consumer Content authors Content acquired Publishers Content is encoded, and dowloaded + protected and stored license Protected content is made available to stores License production To DRM or not to DRM? 6.Dez.2011
  • 44. g tin pu m Co d te us Tr http://youtu.be/UnXU7z2_6Jg
  • 45.
  • 49. Digital Content Value-Chain 33 To DRM or not to DRM? 6.Dez.2011
  • 50. Digital Content Value-Chain 33 Consumer Distributor is Aggregator is Consumer Creator Publisher Aggregator is Creator ConsumerConsumer is Retailer Consumer is Publisher Consumer Distributor Retailer ¨ Consumers are “active” not “passive” ¨ Consumers take other roles on DCVC ¨ Changes the established rights management logic To DRM or not to DRM? 6.Dez.2011
  • 51.
  • 53. Digital Rights Management 35 ¨ DRM 1.0 failure ¤ Vulnerable DRM systems ¤ Limitations to user experience ¤ Limited availability ¤ Offer limited protection ¤ Imposition to end-users ¤ Lack of interoperability ¨ DRM 2.0 must solve these issues To DRM or not to DRM? 6.Dez.2011
  • 54. Digital Rights Management 36 DRM 1.0 DRM 1.5 DRM 2.0 Apple OpenIPM DMP Fairplay P Chillout Coral Windows Media OMA DRM DRM DReaM Marlin MPEG-2 1 AXMedis MIPAM S To DRM or not to DRM? 6.Dez.2011
  • 55. Digital Rights Management 37 ¨ DRM Layers To DRM or not to DRM? 6.Dez.2011
  • 56. Digital Rights Management 37 ¨ DRM Layers Rights Management Rights Enforcement Copy Protection To DRM or not to DRM? 6.Dez.2011
  • 57. Digital Rights Management 38 ¨ DRM Layers – non-interoperable To DRM or not to DRM? 6.Dez.2011
  • 58. Digital Rights Management 38 ¨ DRM Layers – non-interoperable Rights Management X Rights Management DRM B DRM A Rights Enforcement X Rights Enforcement Copy Protection X Copy Protection To DRM or not to DRM? 6.Dez.2011
  • 59. Digital Rights Management 39 ¨ DRM Layers - interoperable To DRM or not to DRM? 6.Dez.2011
  • 60. Digital Rights Management 39 ¨ DRM Layers - interoperable DRM DRM Rights Management Rights Management A B DRM DRM Rights Enforcement Rights Enforcement A B DRM DRM Copy Protection Copy Protection B A To DRM or not to DRM? 6.Dez.2011
  • 61. Digital Rights Management 40 ¨ Interoperability strategies (International Standards): ¤ Full format interoperability ¤ Connected interoperability ¤ Configuration driven interoperability To DRM or not to DRM? 6.Dez.2011
  • 62. Digital Rights Management 41 DRM 1.0 DRM 1.5 DRM 2.0 Apple OpenIPM DMP Fairplay P Chillout Coral Windows Media OMA DRM DRM DReaM Marlin MPEG-2 1 AXMedis Interoperability MIPAM S To DRM or not to DRM? 6.Dez.2011
  • 63. OpenSDRM 42 To DRM or not to DRM? 6.Dez.2011
  • 64. OpenSDRM 42 To DRM or not to DRM? 6.Dez.2011
  • 65. OpenSDRM 42 To DRM or not to DRM? 6.Dez.2011
  • 66. OpenSDRM 42 To DRM or not to DRM? 6.Dez.2011
  • 67. OpenSDRM 42 To DRM or not to DRM? 6.Dez.2011
  • 68. Creative Commons licenses are several copyright licenses that allow the distribution of copyrighted works. The licenses differ by several combinations that condition the terms of distribution.
  • 69. Attribution (by) Licensees may copy, distribute, display and perform the work and make derivative works based on it only if they give the author or licensor the credits in the manner specified by these. Noncommercial (nc) Licensees may copy, distribute, display, and perform the work and make derivative works based on it only for noncommercial purposes. No Derivative Works (nd) Licensees may copy, distribute, display and perform only verbatim copies of the work, not derivative works based on it. Share-alike (sa) Licensees may distribute derivative works only under a license identical to the license that governs the original work.
  • 70. 45 Research challenges?!?
  • 71. Still some interesting technical challenges - Formats - Interoperability - Security
  • 72. Better control to private information - Social Networks - Private information sharing
  • 73. Applicability to vertical sectors - Health - Business information - Education and Research
  • 75. 50 Q & A?
  • 76. To DRM or not to DRM? ESCE/IPS, 6 de Dezembro, 2011 ISCTE-IUL/ISTA/ADETTI-IUL Carlos Serrão Instituto Superior de Ciências do Trabalho e da Empresa carlos.serrao@iscte.pt Lisbon University Institute carlos.j.serrao@gmail.com ISCTE-IUL School of Technology and Architecture ADETTI-IUL http://www.carlosserrao.net http://blog.carlosserrao.net http://www.linkedin.com/in/carlosserrao