Digital Rights Management for Mobiles Jani Suomalainen Research Seminar on Telecommunications Business II Telecommunications Software and Multimedia Laboratory Helsinki University of Technology April 20th 2004

Jani Suomalainen / Digital Rights Management for Mobiles / Introduction The openness of multimedia capable mobile terminals for content (e.g. ringtones, music and video tracks, programs, games) has brought the piracy problem also to mobile content industry Digital Rights Management (DRM) is provisioning and storing content in such a manner that use and copying is authorized and controlled This presentation will provide a survey on: –DRM content provisioning strategies, –protection means, –actors affecting in the DRM economy from mobile terminals point of view

Jani Suomalainen / Digital Rights Management for Mobiles / Content Provisioning OMA DRM content delivery models try to fulfil all users’ requirements (trying not to make the use of DRM content more difficult than ‘free’ content): –basic download –streaming –sharing content between peers (super distribution) –using content with multiple devices (domain model) Wireless interface or hardware modules as delivery medium (wireless is the strategy used in OMA DRM)

Jani Suomalainen / Digital Rights Management for Mobiles / Content and Rights Identifying copy righted content from ‘free’ content is one of the fundamental problems of DRM OMA’s strategy is a separate delivery of rights and content - enabling diverse content delivery methods (see figure) Content issuer Rights issuer Mobile Terminal Other Mobiles Network Storage Removable Media Content object Right object Right object Content object Content object Right object Alternatively rights could be embedded to content (e.g. Watermarks)

Jani Suomalainen / Digital Rights Management for Mobiles / DRM Protection Threat examples Protective barrier Provisioning path of DRM data Means against distribution of pirated content: - fingerprints to track leakage - scanning and attacking distributors - P2P poisoning, DoS attacks Trusted Computing - HW based mandatory access control (Trusted Computing Group) - Assuring terminal trustworthiness (remote attestation) Access to content can be based on possession of - trusted hardware - encryption keys (CMLA for trusted OMA key distribution) Knowledge of ‘what is right’, threat of punishment and correct pricing will prevent normal users from acquiring ‘free’ content through awkward ways Reverse- engin. / transform. Copies from transport medium Copies from terminal Darknets (pirated content) Copying using analog means Mobile terminal Content producer Mobile user Proactive means - legislation -ethics -pricing Secure delivery - trusted hardware - encryption Terminal security - mandatory access control Reactive coun- ter attacks - legislation - hindering P2P

Jani Suomalainen / Digital Rights Management for Mobiles / Actors in the DRM Field Darknet Users Regulators Industry alliances Content producers Manufacturers Want content Want terminals without content usage restrictions Anti-piracy legislation Encourage competition Encourage competition Provides devices Want content availability Want DRM capable devices Provides content Provides guarantees of compatibility and trustworthiness Provides guarantees of compatibility and content availability

Jani Suomalainen / Digital Rights Management for Mobiles / Conclusions Technical and social means cannot weed piracy completely –Openness of mobile terminals is out of the ‘bottle’, terminals will be able to play free content –DRM content can be made to look like free content and will be available from somewhere DRM protection can only provide extra time and make piracy awkward Trends seem to direct us towards flexibility (user- friendliness) as well as industry wide trust model and compatibility

Jani Suomalainen / Digital Rights Management for Mobiles / Thank You! Comments, questions?