Enabling Protected and Premium Broadcast Content in Windows Jay Kapur & Jan Hofmeyr Windows TV Group Microsoft Corporation

Session Outline Premium content support overview Support in Windows today Challenges for the PC Protected Broadcast Driver Architecture (PBDA) PBDA overview PBDA hardware requirements PBDA supported models Different implementations Receiver Topology Single Tuner/Dual format (hybrid tuner) support Call to action and resources

Premium TV Content for PCs: Today Content flow to Windows PCs Basic analog capture Terrestrial, Cable and Satellite (limited) Challenge Short/Medium term solution due to push for digital Premium analog Analog output of Set Top Box (STB) Challenges: Prone to errors due to “open loop” control of STB using IR No support for PPV and VOD TV quality (no support for HD or multi-channel audio) End-user confusion connecting STB DVR to MCE (with DVR) This is not good enough! We need a solution that offers digital capture support in Windows!

End-to-end content protection and rights management is becoming a requirement: US ATSC Broadcast Flag Japan ARIB ISDB-T digital broadcast CA delivered premium content Multiple formats supported by a single tuner Tuner can receive and demodulate analog or digital formats, but device can only stream one source at a time No common API and crypto solution to simplify hardware development and software integration New Challenges for TV on the PC

Windows Media DRM Overview WMDRM-PD WMDRM-ND Streaming Devices Portable Devices WMDRM-TD TV Receivers WMDRM-DST Physical Media WMDRM Internet Delivered TV TD: Tuner Devices PD: Portable Devices ND: Network Devices

What is PBDA? Protected Broadcast Driver Architecture A modification to the existing BDA stack to support transmission of protected capture streams from the TV tuner HW to the OS Standardizes the crypto APIs between tuner hardware devices and Windows Three profiles: Unscreened content Suitable for content received without CA, but requiring local protection Screened content (simple encryption) Suitable for content received without CA and for devices capable of hardware screening for protection flags Screened content (advance encryption) Suitable for content received with CA

End-to-End Content Protection Digital Receiver Windows PC WMDRM License WMDRM CN MCE None CF CO WMDRM License DVR CN MCE None CF CO DVR TS (WMDRM) CA -1 CCI States None Copy Freely Copy Once Copy Never COPP/OPM - CGMS-A - MV - HDCP Render WMDRM -1

Broadcast Content Protection Solutions Analog Content Broadcast Flag Content CA Protected Content Encryption SWHW Content License Generation SW HW Encryption Profile Simple Simple or Advance BDA BDA:Broadcast Driver Architecture PBDA:Protected Broadcast Driver Architecture CA:Conditional Access PBDA Unscreened PBDA Screened

PBDA Hardware Requirements Common technologies used for all profiles: RSA 1024 bits SHA1 160 bits AES 128 bit OMAC1 Random number generator XML certificate parsing Hybrid digital/analog tuners must support the following analog video processing: Hardware MPEG-2 audio and video compression VBI slicing and mux of CC & XDS into MPEG-2 TS NTSC: Line 20, 21 PAL: Teletext, Line 23

Hybrid Digital/Analog Tuner Support PBDA adds hybrid tuning capabilities to Windows Broadcast Driver Architecture ATSC + NTSC DVB-T + PAL Single capture graph used for hybrid tuner device MPEG-2 Transport Stream is sourced from hardware for both analog and digital Seamless switching between analog and digital sources Does not require reconfiguration of software stack on channel changes Hardware must support MPEG-2 compression and VBI slicing to enable hybrid tuning Appropriate VBI data is muxed into transport stream Enables PBDA to apply protection to analog content (CGMS-A)

PBDA – Unscreened Content Goal: Enable lowest possible hardware cost Target devices: ATSC receivers (Broadcast Flag) Hybrid ATSC / NTSC tuners WMDRM implementation: Receiver HW: Encryption of all TS payloads PC Capture process: Screening for CGMS-A and Broadcast Flag WMDRM License are generated based on screening Selectively decrypt TS packet to enable demux and DVR functionality

PBDA (Unscreened) Receiver Overview Tuner NTSC Decoder Encoder Demod: 8VSB TS Filter Broadcast Flag Macrovision XDS Parser Encryptor Audio Video RF Audio Video VBI MPTS SPTS AESTAG WMDRM CGMS-A APS B’Flag SPTS PBDA Filter Demux TIF Receiver

PBDA: Screened Content Goal: Increased robustness Target devices: Premium TV receivers that receive protected (CA) content WMDRM implementation: Receiver HW: Screening for Copy Control Information (CCI) WMDRM License are generated based on CCI screening Encryption of all TS payloads PC Capture process: Selectively decrypt TS packet to enable demux and DVR functionality for protected content

PBDA: Screened Content (Advance Mode) WMDRM implementation TS processing capabilities Only encrypt selective TS packets TS Header TAG packet TS Header PES Header TS Header PES Header (cont.) TS Header PES Payload scr = no scr = yes

PBDA (Screened) Receiver Overview Tuner NTSC Decoder Encoder Demod: 8VSB TS Filter Broadcast Flag Macrovision XDS Parser WMDRM Encryptor CA Audio Video RF Audio Video VBI MPTS SPTS CA -1 AESTAG DRI Transport Command & Control Eventing CGMS-A APS B’Flag CCI Demod: QPSK Tuner Sat. MPTS TS Filter SPTS

Call To Action Ensure HW supports: Algorithms for PBDA VBI slicing VBI muxing into MPEG-2 TS (analog capture) AVStream Class BDA driver 64-bit support Recommended: MPEG-2 filtering for hardware screening TS Processing to enable advance encryption Review PBDA Whitepaper on WinHEC CD

Community Resources Windows Hardware & Driver Central (WHDC) Technical Communities Non-Microsoft Community Sites Microsoft Public Newsgroups Technical Chats and Webcasts Microsoft Blogs

Additional Resources Web Resources: Whitepapers: Secure Broadcast Driver Architecture whitepaper available on WinHEC CD Related Sessions Longhorn Output Protection

© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.