OMA Secure Content Delivery for the Mobile World ODRL Workshop, Vienna Dr. Willms Buhse Vice Chair, OMA Download and DRM group

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. Agenda  OMA Digital Rights Management background  OMA DRM v1 for light media  New DRM v2 for premium content  Benefits for content providers  Benefits for end consumers  Applying OMA DRM to protect content  Summary  Questions

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. Why OMA started working on DRM  A response to strong market demand  Content sales to mobile devices becoming lucrative  Phones coming to market able to support light media  Content and service providers wanted to protect their investments  Levels of protection needed to commensurate with different content value  Need for a mass market solution :  Timely and inexpensive to deploy  For mass market mobile devices (not just high-end)  Did not require costly infrastructure to be rolled out

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. OMA DRM – Stakeholders  OMA DRM is developed by the entire mobile value chain for the mobile industry  Content Providers  Information Technology Companies  Mobile Operators  Wireless Vendors  About 50 Companies participating in monthly meetings and weekly conference calls  Consolidated from DRM standardization at 3GPP, WAPForum etc.  Liasons created with industry organizations such as MPEG, RIAA, 3GPP, etc.

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. OMA DRM1.0 for Light Media Content  OMA DRM 1.0 was created to meet these market requirements  Targeted protection for light media content  Three levels of functionality  Forward Lock prevents content from leaving device  Combined Delivery adds rights definition  Separate Delivery provides content encryption and supports legitimate viral distribution (SuperDistribution)  Specifications rapidly developed to reduce time-to-market  Delivered specifications for implementation in Nov, 2002  OMA “Test Fest” in Seattle in Nov 2003 to test DRM v1 interoperability  Over 50 hand sets available in the market today  Several vendors have announced servers supporting OMA DRM 1.0  Operators are integrating OMA DRM into their infrastructure

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. OMA DRM 2.0 for Premium Content  DRM solution is evolving with the mobile industry  High bandwidth cellular networks becoming widely available  Mobile devices with removable media and larger color screens support downloading and streaming rich media  Content and service providers eager to release rich audio/video content and applications  Greater security and trust management required to protect high value content  Need to ensure target device can be trusted to keep content and trade secrets safe  Need greater security to prevent content from leaking out during distribution

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. OMA DRM 2.0 Benefits for Content Providers  Enhanced security  Individually encrypted rights object using device’s public key to provide cryptographic binding (to SIM/WIM)  Integrity protection for content and rights objects  Explicit trust mechanisms  Mutual authentication between device and rights issuer  Device Revocation: Rights issuer can identify device revocation status  Secure multicast and unicast streaming  Working with 3GPP and 3GPP2 on packetised file format for protected streaming and progressive download  Wide variety of business models  Metered time and usage constraints  Subscription rights for content bundles  Gifting  Support for Peer-to-Peer and Messaging  SuperDistribution: Viral marketing and reward mechanism

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. OMA DRM 2.0 Benefits for End Consumers  Advanced content management  Storage and backup: move content and rights to remote or removable storage and later restore to device  Multiple devices: Move content and rights objects easily between several devices owned by a user (2nd phone)  Sharing between multiple user within domain  Domain concept for sharing between devices in the same domain (e.g. family)  Unconnected devices  Copy to SD card for a mobile music player  Complementary Preview  Constraints for superdistributed content before purchase  Export to other copy protection schemes  transfer music to DRM-enabled Settop box or computing device

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. Applying DRM to Protect Content  Steps for distributing DRM protected content  Encrypt the content and package in DRM Content Format  Assign permissions and constraints during consumer purchase transaction  Consumer receives content and “rights” and begins using the application  DRM enables viral distribution of content  Consumers can send the protected content to all their friends that have OMA DRM enabled mobile devices  Their friends, in turn, purchase the permission to consume the content  Content and service providers make money through “word of mouth” advertising

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. Example of OMA DRM Deployment Content Issuer Rights Issuer 1. Browse to website and download protected content 4. Deliver protected rights object 3. Purchase “rights” and establish trust 2. Transfer content Encryption key 5. Super-distribute content to a friend 6. Establish trust; purchase and deliver rights object Share content within your domain George’s devices Sarah’s phone

Copyright © 2004 Open Mobile Alliance Ltd. All Rights Reserved. Future Directions for OMA DRM  OMA DRM will continue to evolve  New ideas and experiences will drive OMA DRM in new directions  OMA proactively seeking input from content industry and developer fora  Ensures OMA DRM satisfies their business models  Please join the OMA DRM sub-working group and help define the future of DRM  Browser and Content Group, Download+DRM  OMA-DOWNLOAD is the reflector

Questions ?