The Cinema Vault
Encrypt once, license per viewer. Every player can fetch the encrypted film; only the licence decides who can watch, and the licence asks who has paid.
Encrypt once, license per viewer. Every player can fetch the encrypted film; only the licence decides who can watch, and the licence asks who has paid.
Exhibit 05 · Circo
A protected film waits in the vault. Choose the offer, the viewer and the device.
The player asks for the post and gets the DASH description of the stream, the format Chrome or Android plays with Android and Chrome DRM.
Segments arrive from the CDN, encrypted once with Common Encryption. Anyone can fetch them; nobody can watch them without a key.
To decrypt, the player asks the DRM provider for a Android and Chrome DRM licence.
Before issuing anything, the provider calls back to the platform: is this viewer allowed to watch this post?
The rights service checks the business rule (the post needs a subscription to the creator) and answers play = true.
The provider issues a licence with the content key. The player decrypts and the film plays.
The vault at the back holds the film as encrypted segments. They are encrypted once and served to anyone who asks, because without a key they are noise. Across the dashed line sits the DRM provider. The content keys live there and nowhere else.
When the player wants to decrypt, it asks the provider for a licence. The provider does not decide on its own. It calls back to the rights desk, which applies the business rule for this post: free, subscribers only, or pay-per-view. The answer is play = true or play = false, and only a true answer releases a key.
The model shows authorised playback only: who gets a licence and why. It says nothing about attacking keys.