I have some question about the OPENipmp software, in particular on the OMA DRM.
1) following the sample command line of OMA encryption in the DRM plugin documentation, it seems that the produced licence has only the start and end time parameters. Is it possible to set other parameters, such as the "play count based" (the number of play times)?
2) Do you think it is possible to connect an external generic OMA2 compliant client (such as a mobile phone or PDA) to the OpenIpmp DRM server instead of using the modified mp4player?
Thanks in advance,
Enrico
------------------------------------------------
Enrico Arsura
Consultant
CEFRIEL • Politecnico di Milano
Via Fucini, 2 • 20133 Milano (Italy)
phone: +39 0223954277 • fax: +39 0223954477
e-mail: arsura@cefriel.it
------------------------------------------------
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
(1) at this time, we only support play timeout (i.e. start and end times). Primarily this is because timeout was the only entitlement supported in the base openIPMP codebase originally targeted for desktop PCs. Supporting a playcount is more difficult on desktop PCs due to increased client storage and security issues related to the playcount. With OMA it would be slightly easier (from a security perspective), since the playcount can be stored on the server, updated by the client engine over-the-air.
(2) We are currently testing this with an OMA2-compliant Nokia N91 smartphone. It should be straightforward, but somewhat difficult due to vendor proprietary certificate management extensions. Unfortunately, standardization of the handset "DRM Agent" code will be difficult since that is the primary target for hackers looking for the content keys. There will be much differentiation here I think, as vendors attempt to tie up handset, network, and mobile operators within a proprietary model. Our goal is to provide a wedge here, in a sense, so that Nokia, Motorola cannot force customers to pay for their entire solution stack. (I hope that makes sense).
L
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Dear experts,
I have some question about the OPENipmp software, in particular on the OMA DRM.
1) following the sample command line of OMA encryption in the DRM plugin documentation, it seems that the produced licence has only the start and end time parameters. Is it possible to set other parameters, such as the "play count based" (the number of play times)?
2) Do you think it is possible to connect an external generic OMA2 compliant client (such as a mobile phone or PDA) to the OpenIpmp DRM server instead of using the modified mp4player?
Thanks in advance,
Enrico
------------------------------------------------
Enrico Arsura
Consultant
CEFRIEL • Politecnico di Milano
Via Fucini, 2 • 20133 Milano (Italy)
phone: +39 0223954277 • fax: +39 0223954477
e-mail: arsura@cefriel.it
------------------------------------------------
Answers to your questions:
(1) at this time, we only support play timeout (i.e. start and end times). Primarily this is because timeout was the only entitlement supported in the base openIPMP codebase originally targeted for desktop PCs. Supporting a playcount is more difficult on desktop PCs due to increased client storage and security issues related to the playcount. With OMA it would be slightly easier (from a security perspective), since the playcount can be stored on the server, updated by the client engine over-the-air.
(2) We are currently testing this with an OMA2-compliant Nokia N91 smartphone. It should be straightforward, but somewhat difficult due to vendor proprietary certificate management extensions. Unfortunately, standardization of the handset "DRM Agent" code will be difficult since that is the primary target for hackers looking for the content keys. There will be much differentiation here I think, as vendors attempt to tie up handset, network, and mobile operators within a proprietary model. Our goal is to provide a wedge here, in a sense, so that Nokia, Motorola cannot force customers to pay for their entire solution stack. (I hope that makes sense).
L