1

Chillout - the Open Source DRM Software

Filippo Chiariglione

IPDM0619th October 2006, Shanghai

2

Table of Contents

1. Why DRM needs to be Open Standard and Implemented in Open Source

2. Setting-up Media Value Chains 3. Chillout Overview4. The Chillout Core Library5. The Chillout Auxiliary Library6. Chillout Applications 7. Conclusions

3

Part 1

Why DRM needs to be Open Standard and

Implemented in Open Source

4

DRM System: a definition

• A system of Information Technology components and services which strives to distribute and control content and its rights.

• This operates in an environment driven by law, policies and business models.

5

Far from the expectations...

• Today's market of digital media is still far from the take up that many had expected a few years ago.

• Reason: no viable choice for Content Providers

NO DRMno direct revenues

PROPRIETARY DRMcontent providers

users

6

Solution to the Digital Stalemate

• Open Standard: In April 2006 the Digital Media Project (DMP) has released the Interoperable DRM Platform (IDP) Specification, providing solutions at any point in the Media Value Chains

• Open Source Implementation: Chillout implements a reference implementation of IDP– available under the Mozilla Public License V.

1.1 (MPL 1.1) which separates the licence of the code from the licence of patents that may be needed for practicing the code

7

Vision/1

• Many media companies have considered DRM as the technology of choice when implementing digital media value chains

• DMP’s open DRM specification makes one step toward addressing users’ concerns

• Open Specification can:– trigger the creation of horizontal markets– lower the cost of the DRM technology – provide easier access to value chains than in

the case of proprietary DRM.

8

Vision/2

• Open Source DRM: – from “a specialist’s job” to...– a tool in the hands of the society for exchanging

information and trading digital assets.

• Successful Open Source DRM can be achieved by:– vast community of users and developers that makes a

DRM solution that is • openly accessible • satisfies disparate user requirements• robust and capable to evolve.

– the code shall be inspected by anyone – respond to user demands improving media life – enable a fair exploitation of digital media

9

Part 2

Setting-up Media Value Chains

10

Digital Media Value Chains

• A digital media value chain is a network of business players (called users) who perform functions on the media flowing through it.

• Users need devices to perform the functions on the digital media.

• In abstract terms a device exchanges data with other devices using specially defined protocols.

• The larger part of the IDP specification concerns:– the way data are digitally represented– the protocols carrying such data.

11

An example of Value Chain

ContentCreationDevice

End-UserDevice(SAV)

End-UserDevice(SAV)

PAVeXternalDevice

ContentIdentific.Device

ContentProviderDevice

LicenseProviderDevice

DomainMgmtDevice

DRM ToolProviderDevice

DeviceIdentific.Device

LicenseIdentific.Device

DRM ToolIdentific.Device

DomainIdentific.Device

End-UserDevice(PAV)

12

Part 3

Chillout Overview

13

Language requirements

• Chillout is written in the Java programming language. – Java is an outstanding language– it possesses excellent cross-platform capabilities – it is supported by many international companies

operating in various fields.– plenty of Open Source software Development Tools

available

• any other programming language could be chosen instead of Java

• cross-language implementations are starting

14

Software architecture/1

• Because of the nature of Digital Media technologies and business models, only a toolkit approach for DRM can succeed

• users may – chose a subset of the IDP tools– configure them (as specified in the

specification) for their specific needs– ...use them straight away

15

Software architecture/2

Java platform

Applications

Core libraryAuxiliary

library

16

• Java Platform Layer: – the Java running environment on which Chillout software

depends on. It comprises of the Java Development Kit (JDK), Apache Tomcat servlet container the Apache Axis SOAP implementation, the Java Media Framework, etc.

• Core library: – library of classes implementing the Primitive functions defined

in the Technical Spec ification. This software is normative as much as the IDP-2 specification [3], in the sense that the two are meant to be technically aligned.

• Auxiliary library: – library of classes encapsulating the functionalities that every

device must have when operating in a real environment. These modules may be replaced by those a developer needs.

• Applications: – sample applications including a number of Devices, such as a

SAV, a Content Creation Device (CCD), a License Provider Device (LPD), a Content Provider Device (CPD), etc.

Software architecture/3

17

Part 4

The Chillout Core Library

18

Overview of the Core Library

• The Chillout Core Library is made of the following classes:– the Represent classes– the Package classes– the Protocol classes

19

The Represent Classes

• The Chillout Core library provides a set of classes to easily generate any XML structure defined in IDP, and conversely to extract any information contained within.

• This is achieved by employing an Open Source software tool called Java Architecture for XML Binding (JAXB):– offline: to generate the classes to handle XML– at runtime: to

• Un-marshal XML structures to Java objects (the instances of the classes generated from the schemas).

• Marshal Java objects into XML structures.• Verify if the incoming xml document is valid or not

according to the schemas

20

The Package classes

• The Core library provides a set of functions to – bundle media resources with the DCI and other

information in a file named DCF– extract this information from a DCF.

• The DMP Content Format is based on the MPEG-21 File Format.

• The Package classes allow any Java application to access the information contained in a DCF or to create a DCF based on data in input.

21

The Protocols classes

• Devices in a media Value Chain require a standard protocol to communicate.

• The description of the various protocols is done in WSDL.

• The Core library provides a set of functionalities to generate and parse the XML messages exchanged between devices while performing a Protocol

• The Open Source Axis tool is used to send and receive such messages over the SOAP protocol

22

Part 5

The Chillout Auxiliary Library

23

What is the Auxiliary Library

• It comprises of those classes encapsulating the functionalities of a number of modules required for devices to operate according to the IDP specification.

• Commercial applications may well decide to implement those key DRM components in a proprietary way, even in hardware.

• Chillout at this stage only provides a reference implementation of them.

24

Auxiliary Library Components

• The Security Manager:– a module incorporating all those functionalities such as

securely storing digital certificates and licences, performing operations involving Digital Signatures, etc...

• The DRM Processor: – a SAV module in charge of instantiating and managing

the DRM Tools protecting a media resource

• DRM Tools:– modules performing DRM functions such as decryption,

key management, etc.

25

Part 6

Chillout Applications

26

Applications overview

• Chillout provides a set of devices that are easy to configure and run.

• This helps promoting adoption of Chillout and the DMP specification by enabling those users – not experienced in the DRM field– not enough skilled in programming – working for small companies

to experiment with a technology that so far could only be used by those experts in the field.

• The Applications category contains source and executable Java code built on top of the Core classes, and integrated with Auxiliary classes.

27

Chillout @ IBC 2006

28

Part 7

Conclusions

29

Conclusions/1

• The vision behind the DMP Chillout project is to create an open and fair security infrastructure that can be employed for a variety of uses.

• This is based on an Open Source Software implementation of the IDP specification, managed by an active open source community dedicated to foster adoption of interoperable DRM.

30

Conclusions/2

• Adhering to the open source spirit, the Chillout community (http://chillout.dmpf.org/) welcomes everyone who wants to be part of the exciting project to set up a fair digital media world.

Thank you for your attention!

...see you on chillout@dmpf.org