1. Shibboleth and Napster

2. Napster - History One stop shop for pirated (and free) MP3s. –Unlimited use download Sued by Recording Industry Association of America (RIAA) Shutdown July 11, 2001

3. Digital Rights Management (DRM) Music Generalized copy protection Can limit where a DRM music file can be played –Specific personal computer –Specific music playing software –Portable music player –“Expiration date”

4. Selling DRM Music iTunes Music Store –Apple Computer Rhapsody –RealNetworks MusicNet –EMI Music, Bertelsmann's AG, AOL Time Warner, Sony Music Entertainment Distributed by MusicNet@AOL, Virgin Digital, Ctrax PressPlay –Sony Music Entertainment, Universal Music Group

5. Roxio + PressPlay = Napster Roxio –Software company best known for CD- burning software –Buys Pressplay –Buys the Napster name –Enhances Pressplay and relaunches it as Napster

6. Napster - Current Basic Subscription –$9.95/month Unlimited Streaming Unlimited “Tethered Downloads” Purchase Tracks

7. Napster - Player Windows Media Player 9 Internet Explorer components

8. Streaming DRM music file is downloaded to PC –Not actually streamed –Not visible in player after download –Stored in IE “Temporary Internet Files” directory Not all tracks are available for streaming Can not burn to CD Can not transfer to portable music player

9. Tethered Download DRM music file downloaded to PC Becomes visible in player’s “music library” Can play on up to 3 different PCs. Not all tracks are available for tethered download. Music files will not play after your Napster subscription expires Can not burn to CD Can not transfer to portable music player

10. Purchase Tracks 99 cents each DRM music file downloaded to PC Can play on up to 5 PCs Can burn to CD Can transfer to portable music player

11. Cornell - Napster Cornell has purchased 1 year subscriptions for students at reduced rate Students register via special Napster web page

12. Napster Registration Student creates ID and password for Napster use

13. Shibboleth - Napster Only Cornell students are eligible Shibboleth tells Napster who is a Cornell student.

14. Shibboleth Run by CIT Run by Napster

15. student@cornell.edu t913jtp11@cornell.edu urn:ietf:rfc:1510 Digitally signed by CIT ss77 zx6R-636rs250 Can I have attributes for zx6R-636rs250

16. Origin Version 1.2 Solaris 9 Apache 1.3.29 –CUWebAuth 1.0.15 –mod_ssl 2.8.16 Jakarta Tomcat 4.1.27-LE-jdk14 –Shibboleth.war JK 1.2

17. Target Version 1.1 Apache 1.3.29 –mod_shire.so –mod_shibrm.so –mod_ssl 2.8.16 shar

18. Building the Target Openssl 0.9.7d Log4cpp 0.3.4b cURL 7.10.5 Xerces 2.5.0 Xml-security-c 0.2.0 OpenSAML 0.9.1

19. Shibboleth - Technology PKI Everything over HTTP –RFC 3093? HTTP over SSL

20. student@cornell.edu t913jtp11@cornell.edu urn:ietf:rfc:1510 Digitally signed by CIT ss77 zx6R-636rs250 Can I have attributes for zx6R-636rs250