Solution Overview
Last modification: 24-02-2017 / 02:22 PM GMT+01:00
IRDETO HOME NETWORKING SECURITY
Extend your TV services securely and seamlessly across all managed and unmanaged devices in the
home
In households all over the world, TV viewing on multiple screens is now a reality. Pay TV operators face growing demand to make content from their subscription packages available on a variety of devices around the home. Once, this required the installation of additional, fully-featured STBs connected to secondary TV screens – a “multiroom” deployment. Today, consumers expect even greater flexibility, to access content on their own video-capable devices including smartphones, tablets, PCs, game consoles and smart TVs.
EXPANDING REACH, NOT RISK
The challenge for operators is to reach the maximum number of devices with a consistent user experience but without compromising content security. The implementation of Multimedia Home Gateways (MHG) enables this type of whole-home viewing experience without the need for multiple set-top boxes. Content can easily be redistributed by the MHG to both managed and unmanaged devices. However, a new level of protection is necessary, both to acquire the content licenses for networked viewing and to ensure applications are not vulnerable to hacking or piracy that threaten revenues and reputation. Operators must also prevent unauthorized access from beyond the subscriber’s property.
The scale of this task is intensified by the constant shifts and developments within the consumer device and browser market. Operators are dealing with a rapidly moving and expanding target in terms of both security requirements and operational complexity. At the same time, consumer expectations are also growing. The rise of OTT has given viewers a taste for advanced features such as offline viewing of downloaded content (“Download & Go”) and the ability to pause their viewing on one device and pick up from the same point on another. All this creates new security and operational challenges such as triggering auto-expiration for
downloaded content or enforcing studio-mandated limits on the maximum number of devices and concurrent streams per user.
Boost subscriber loyalty with a secure multiscreen offering
The ability to watch content on multiple screens around the home is one of the most highly-prized value-add services among pay TV subscribers. Irdeto Home Networking Security allows operators to generate and build consumer satisfaction and loyalty by seamlessly distributing content to a wide range of the most popular consumer devices including tablets, smartphones and PCs. At the same time, it ensures the content is fully protected no matter which device it is viewed on in the home. Support for both live and VOD content, as well as attractive business models such as Download & Go, helps operators to maintain a competitive position in their market.
Reduce costs for multiroom deployments
Deploying Irdeto Home Networking Security helps operators to reach many screens in the same home without investing in multiple fully-featured STBs. A single MHG acts as the hub for the home. Additional viewing taking place either on unmanaged screens provided by the consumer themselves, or on lightweight operator-provided Customer Premises Equipment (CPE) with a much lower unit cost than a STB. There is further
KEY BENEFITS
scope for cost control when Irdeto’s IMS is selected with the Home Networking Security solution. IMS provides centralized management of usage rights and business models across both managed and unmanaged devices, reducing the complexity and cost of multiscreen
operations.
Maximize value from content deals
Many content licensing deals include in-home distribution rights as standard, meaning operators without a home networking capability are paying for something they can’t use. They may even be paying for Download & Go rights as well. Irdeto Home Networking Security allows operators to rapidly exploit these
multiscreen rights, maximizing their content investments to delight their subscribers.
TRUSTED PROTECTION FOR EVERY SCREEN
Irdeto Home Networking security, a solution in the Irdeto 360 Security portfolio, extends the trusted protection of the Irdeto Conditional Access System (CAS) to enable secure distribution of content from the subscriber’s pay TV package to devices around the home. Working in conjunction with a powerful MHG, the solution allows operators to support streaming of live, VOD and PVR content to both managed and unmanaged devices in the subscriber’s home. Operators can select from multiple deployment options to create the solution that best fits their current and future needs, as well as their deployment timetable. The solution includes the option to centralize management of rights, rules and business policies across all screens using the Irdeto Integrated Management System (IMS).
Irdeto’s Home Networking Security protects content distributed throughout the home in order to offer
additional ways for subscribers to access and view their favorite shows. Crucially for cost-focused operators, it achieves this goal without substantial capital investment or significant increase in operational resources. Its recognized efficacy allows operators to leverage their existing content distribution rights to provide their subscribers with new flexible viewing options. The assurance brought by Irdeto’s studio grade, renewable Conditional Access System (CAS) can be seamlessly extended onto multiple devices within the home, whether the operator is using software-based Irdeto Cloaked CA or the smart card implementation. Fundamental to this solution is the deployment of a Multimedia Home Gateway (MHG), which supports both operator-managed CPEs and a broad range of end-user devices. The MHG acts as a central “hub” to securely distribute content to operator-controlled STBs and PVRs and crucially, to the unmanaged, often portable devices that are increasingly found in subscriber homes. The MHG can be of the “headless” variety, in order to use networking technologies such as Wi-Fi or MoCA. This allows the gateway to be placed in any location within the home to optimize reception and content redistribution. A mechanism for proximity control is also integrated to ensure content is protected from unauthorized viewing outside the home environment.
Extending TV Services
“Connected devices do not replace set-top boxes;
they minimize the number that you need. There is
a single piece of Customer Premises Equipment
(CPE) that you put into the home and that will
form part of a larger strategy alongside OTT
apps to provide a unified and consistent pay TV
experience inside and outside the home.”
Daniel Simmons, Principle Analyst TV Technology, Analysis Group, IHS Markit
“There is no question that one way or another,
consumers are going to want access to their DVR
content on multiscreen devices.…as soon as one
operator does it in a market, others will have to
follow, given how compelling the concept is.”
John Moulding, Editor-in-Chief, Industry News & Analysis Service, Videonet
VARIED SERVICE MODELS
Irdeto’s Home Networking Security supports multiple different service models. Both live and recorded content can be streamed seamlessly from the MHG to any other device or STB in the home. Transactional and Push-VOD are also enabled, the latter proving particularly attractive for satellite operations as it does not require a return path.
Download & Go options
Irdeto Home Networking Security also supports “Sync & Go” or Download & Go options that allow subscribers to enjoy their favorite shows on their tablet or mobile device while outside the home, for example during their daily commute.
ACCESSING MANAGED DEVICES
Leveraging a powerful gateway to distribute content to secondary TVs around the home presents a clear cost advantage for operators. They can avoid the expensive multiplication of STBs in one household, providing simpler and cheaper thin client CPEs instead for the secondary rooms. The live or VOD content is streamed directly to the secondary CPEs along with CA keys obtained from the Irdeto Key Management System (KMS) in the operator’s headend.
DISTRIBUTION TO UNMANAGED DEVICES
There are two options for extending subscription content to unmanaged consumer devices with Irdeto Home Networking Security, and the choice of which to use will depend on the operator’s precise requirements both now and in the future. In both scenarios, Irdeto’s ActiveCloak technology is used to protect iOS and Android applications on the unmanaged devices from external attack.
Option 1 - Link protection
In this elegantly simple deployment model, Irdeto’s proprietary Secure Key Exchange (SKE) technology is used to repackage broadcast content inside the MHG for secure streaming to Android and iOS devices within the home. This solution can be deployed rapidly, requiring only the activation of additional capabilities within the operator’s existing KMS. It allows operators to quickly reach a large proportion of the smartphone and tablet market with a streaming solution. By avoiding commercial DRM licenses, this is a cost-effective yet highly secure solution, which will not require significant upgrade of headend equipment or components.
Option 2 - DRM bridging
In this deployment model, broadcast content is repackaged with PlayReady DRM within the MHG to secure it for streaming to a broader range of consumer devices including PCs, smart TVs and game consoles. DRM licenses are delivered direct to the consumer equipment by the Irdeto Integrated Management System (IMS) in the operator’s headend, subject to rights and device or content usage rules set by the operator. The IMS reduces operational complexity by providing centralized management of these rights and rules across all screens, both managed and unmanaged. This option suits operators who wish to support devices beyond the Android and iOS operating systems.
Although it requires the use of more expensive
commercial DRM licenses, combining PlayReady and the IMS provides the additional protection required to secure premium content such as 4K Ultra HD.
Additionally, it supports advanced business models such as Download & Go, offering consumers the flexibility to store VOD and PVR content from their pay TV package on certain portable devices at home and watch it offline later.
Broadcast Operator
Multimedia Home Gateway
Irdeto Secure Client
(Smart Card or Cloaked CA)
Irdeto CA
(Smart Card or Cloaked CA)
Irdeto link protection or DRM bridging
HDMI Secure chipset Secured video app
APP APP 10110 10110 10110 APP
Figure 1: Secure distribution to both managed and unmanaged devices in the home
Irdeto KMS
Broadcast content
Irdeto SKE ActiveCloak
Irdeto Integrated Management System
Broadcast content PlayReady licenses Media Home Gateway with Irdeto CA client, DRM packager PlayReady hardened by ActiveCloak PlayReady Media Home Gateway with Irdeto CA client, SKE packager
With link protection
Simple to implement, no DRM headend Economical with Irdeto SKE vs. licensed
DRMs
With PlayReady DRM bridge
Full device policy and business rules More device support (PlayReady-enabled)
Irdeto KMS
Broadcast content
Irdeto SKE ActiveCloak
Irdeto Integrated Management System
Broadcast content PlayReady licenses Media Home Gateway with Irdeto CA client, DRM packager PlayReady hardened by ActiveCloak PlayReady Media Home Gateway with Irdeto CA client, SKE packager
With link protection
Simple to implement, no DRM headend Economical with Irdeto SKE vs. licensed
DRMs
With PlayReady DRM bridge
Full device policy and business rules More device support (PlayReady-enabled)
Figure 2: A comparison of the options for distribution to unmanaged devices in the home
EASILY INTEGRATED
All implementation options for Irdeto Home Networking Security - whether for managed or unmanaged
devices - are fully integrated with the Irdeto CAS (whether smart card-based or Irdeto Cloaked CA) and, where relevant, with Irdeto Rights. On the headend side, these components are seamlessly combined through Irdeto’s IMS, allowing the operator to centrally manage all viewing rules and service models that are made available to their subscribers. This includes configuration of rules governing downloads and on-device content storage rights. The IMS single management interface greatly simplifies the operation of a home networking solution combining Irdeto CA and Rights.
For more information about Irdeto solutions and services, please visit irdeto.com or click on the solution overview of interest: Irdeto Rights, Irdeto Conditional Access and/or Irdeto Integrated Management System.
SUMMARY
Today’s consumers want the flexibility to view content from their pay TV package on a variety of devices around the home. This creates significant content security challenges for operators, but finding a secure and cost-effective solution to these challenges is essential to maintaining market share as rivals begin to offer similar services.
Irdeto Home Networking Security extends the trusted protection of the Irdeto Conditional Access system to the widest possible range of devices within the home. It allows operators to securely distribute both live and on-demand content from a powerful home gateway device to low-cost managed STBs as well as consumer-supplied devices including mobiles, tablets and laptops. With flexible deployment options to support the specific needs of different operators, Irdeto Home Networking Security supports multiple popular business models and advanced features such as Download & Go, proximity control and protection of 4K Ultra HD content.
“As the value of premium video becomes more important to both consumers and service providers who
want to display this content on multiple “smart devices” in current and future digital homes, so too the
CAS/DRM technology must become more robust as content is handed off from one device to another.
Irdeto’s ActiveCloak is a solution addressing these heightened security issues that have and will prevail as
multidisplay of premium video becomes the norm in our digital homes.”
Gary Schultz, President & Founder, Multimedia Research Group
Irdeto 360 Security is an end-to-end, pre-integrated solution that meets even the most stringent security requirements, enabling operators and content owners to offer premium media services, such as 4K UHD VOD, live sports and early release window movies. It provides unparalleled breadth and depth to meet changing security needs, from content protection, to piracy control and cybercrime prevention, to key management by a
trusted authority. Its proven success comes from the combined power of innovative technology, a diverse team of experts and a global network to deliver best security practices.