Content Protection for the New Generation of Mobile Devices

The modern mobile device includes a high definition (HD) displays ranging in size between 4" to 10", offering a compelling HD viewing experience. As an open operating system, Android has known security vulnerabilities, which pose a major problem for Hollywood studios. HD video for mobile devices will not get studio approval without hardware-assisted DRM, output control, link protection and secure content path. These security requirements serve to address the inherent vulnerabilities of open operating systems, thwart scalable attacks and enable cross-device content sharing.

Open operating systems – Widespread device rooting on Android devices, clearly indicates that existing software based security mechanism are not adequate and need to be reinforced. The goal of a robust content protection solution is to ensure that even a rooted device with hostile code is not able to gain unauthorized access to protected video.

Preventing scalable attacks – To eliminate attacks based on the distribution of the exploit code, DRM alone is not enough. Decrypted, compressed content must be protected when transferred to the video engine using a Secure Content Path.Moreover solutions must include integrated Output Control and Link Protection, allowing the device to achieve a level of protection comparable to that of a set-top box.

Inter-device content sharing – The mobile device's ability to act as media-hub and the strong consumer interest in viewing content across multiple devices creates multiple security risks. Content sharing between devices requires robust and high performance Link Protection in order to shield the content in-motion between devices. The most notable use cases for inter-device content sharing are provided via WiFi Display and DLNA. WiFi Display uses HDCP scheme for security and DLNA relies of the on DTCP-IP.

High Level Architecture

Comprehensive Content Protection for Android Devices

Discretix' all-inclusive content protection offering, addresses the security vulnerabilities inherent in Android devices. As a hardware-assisted solution, the solution utilizes key elements of the underlying security infrastructure by integrating the following components:

• DRM: Multi-Scheme DRM with Microsoft PlayReady, CPRM and OMA DRM support
• Link Protection: Preventing the copying of content in-motion with HDCP and DTCP-IP
• Trusted Execution Environment (TEE): Utilizing ARM TrustZone based TEE and Secure OS for protection of the sensitive DRM code
• Secure Content Path: From the DRM Client to the codec which cannot be accessed by the Main OS
• Output Control: Enforcing output constraints
• Secure Storage: All sensitive keys are maintained secured in hardware
• Hardware-based Security Components: Secure Clock, Content decryption, Certificate handling

Standard Interfaces

The Discretix hardware-assisted DRM utilizes the Android Ice Cream Sandwich DRM Framework. The DRM client is implemented as a framework plug-in, reducing the migration costs related to future versions of Android.

Multi-platform support

The Discretix hardware-assisted DRM is available for platforms from all the major IC vendors

• Qualcomm
• NVIDIA
• Texas Instruments
• ST-Ericsson
• Intel

Protecting Premium Content on Millions of Devices

Leveraging more than ten years of experience in mobile device security, Discretix' hardware-assisted DRM solutions delivers significant benefits to service providers and device manufacturers including; short time-to-market, extensive platforms support, significant R&D savings and comprehensive security. Moreover, the client's increased security level, enhanced robustness and optimized CPU utilization ensure the secure and seamless delivery of premium HD video to the end-user. Discretix' content protection solutions are field-proven across a broad range of connected devices. The solutions are in mass production across multiple programs at vendors including HTC, Acer, Sharp, Panasonic, Fujitsu and others.