Skip to content
Packet Ship

Secure key vault

OverView:DRM

OverView:DRM is a secure key vault for encryption keys, used to secure both live and on-demand streams.

Key features

  • Access to keys by clients governed through authorisation rules provided by middleware through SOAP integration API
  • Keys are stored in an encrypted database
  • Key distribution secured through SSL security, X.509 certification with IP address-based & device-based ACLs
  • GRPL provides visual language & XML-based format to define complex rights ‘proofs’
  • Navigates flexible entity-relationship graph when deciding whether to deliver key to secure HLS client
  • Entity-relationship graph created and managed by integration with middleware and business systems
  • Can include all standard DRM concepts like Devices, Users, Domains, Licences, Packages, Assets and any other object required by business model
  • Flexible server-based DRM model reduces client complexity and cost
  • Makes it easier to manage and opens up DRM market to an “Open Systems” model
  • An ecosystem of vendors will promote competition and innovation
HLS encryption flow diagram: the HLS chunker and HLS origin server deposit keys with the key server over HTTPS; the set-top box fetches playlists and AES-encrypted chunks over HTTP and keys over HTTPS

In detail

  • GRPL example proof: a graph linking device, user, domain, package, licence, asset and location to decide whether a key can be delivered
    GRPL example proof

Works with the rest of OverView OTT Solution

Interested in OverView:DRM?

Tell us a little about your project, or just ask a question. We would be glad to hear from you.