SecureCast™ the latest platform extension to the Award-Winning Encryptonite ONE™ System supports standardized DVB Simulcrypt, providing unified content security for one-way networks and Hybrid Pay TV Services
Hybrid video services, which combine interactive IPTV with traditional broadcast television services, are a rapidly growing sector of the pay TV landscape. According to a new study from ABI Research, adoption of hybrid video services will result in annual shipments of more than 50 million hybrid STBs by 2011, with Western Europe accounting for the largest share. In hybrid deployments, video-on-demand services and select content are delivered via an IP connection to a set-top box while linear broadcast television is delivered via a digital terrestrial, satellite or cable link to the same box. This combination of IPTV and a broadcast service into a single platform gives operators a near-term solution to compete against new fully interactive digital TV services. By upgrading existing operations to a hybrid service, operators are able to retain and attract subscribers while increasing ARPU through video-on-demand rentals, expanded channel offerings, and the provision of advanced interactive services such as network PVR, e-commerce and targeted advertising.
In transitioning to a hybrid video service, operators must give careful consideration to the content security system they deploy in order to minimize the operational costs of securing content over dual networks and maximize their ability to expand and adapt their services going forward.
DVB Services and CA Smart Card Systems
The European market has led the way in the deployment of hybrid video services. Many traditional broadcasters have recognized the growing consumer demand for expanded content choices and on-demand programming access and have added a complimentary IPTV offering to remain competitive. At the same time, telecom IPTV operators are adding DTT tuners to their set-top boxes or partnering with cable and satellite operators to provide basic broadcast television while using their own broadband pipes for the delivery of on-demand films, TV series, niche content and other interactive services. In either case, these deployments involve the combination of IPTV with an existing Digital Video Broadcasting (DVB) operation.
DVB is the suite of internationally accepted open standards for digital television distribution via over-the-air terrestrial television (DVB-T), satellite (DVB-S) or cable (DVB-C). For the most part, these are one-way broadcast distribution systems without any return path to the originating headend. DVB defines a Common Scrambling Algorithm (DVB-CSA) to secure program streams to which Conditional Access (CA) system suppliers develop complete access control systems. With DVB-CSA (or Simulcrypt), multiple CA systems can operate in parallel to control viewer access to the same scrambled DVB program streams providing pay TV service providers flexibility in choosing CA vendors.
The CA systems used in the DVB pay TV market have historically been based on a removable smart card inserted in the set-top box. These vintage broadcast systems with resource-challenged set-top boxes utilize smart cards to assign a unique identity for each box and enable individual boxes to descramble specific broadcast channels. However, these outdated smart cards CA-based systems are susceptible to easy cloning techniques, resulting in lost revenues for the operators and expensive smart card replacement to the entire user base. Also, smart card technology limits operators from offering dynamic security required for new revenue-generating interactive services that include hybrid video, time-shifted TV, on-screen voting and gaming, interactive ads with purchase functionality and social networking services.
Variation in Hybrid Deployments
The combining of disparate broadcast and IPTV services has resulted in a great deal of variation in what can be described as a “hybrid video service”. These differences initially stem from whether an IPTV service is added to an existing cable or satellite operation or a broadcast service is added to an IPTV offering. Further variations are due to differences in existing network topologies and infrastructure, local regulatory barriers (for example, where broadband service providers in some countries are restricted from delivering broadcast television programming and vice versa), and the specific business objectives of the operator.
The switch-off of over-the-air analog broadcasting in markets around the world provides a transition point where savvy operators can build compelling hybrid video offerings. A number of telecom operators, in particular, are taking advantage of the recent availability of free-to-air Digital Terrestrial Television and deploying set-top boxes that display both DVB-T channels and their broadband IPTV. This approach is used where local regulations or rights restrictions preclude delivery of some broadcast content over IP networks leaving the telco only able to deliver VOD and niche content over their own network. At the same time, leveraging an existing DTT service helps telecom operators avoid the costly upgrades required to deliver a multi-channel broadcast lineup over their own network, particularly in high definition. BT Vision in the U.K. is an example of this type of hybrid service where their “V-Box” incorporates a tuner for receiving the Freeview DTT broadcast service and an Ethernet port to receive on-demand films, TV episodes, news/sports reports, and other programming delivered over the BT broadband network.
Satellite operators enjoy the benefit of broad geographical signal coverage and high transmission capacity to deliver large volumes of broadcast content and HD channels, but they lack the two-way interactivity of telco IPTV and cable networks. To compete against these service providers, satellite operators must acquire a broadband capability of their own or partner with a broadband operator to deliver on-demand and interactive services. In France, Canal+ became Europe’s first satellite operator to add an IPTV offering to their DTH satellite service. Subscribers with the new “Le Cube” set-top box can receive up to over 200 channels of broadcast TV delivered as conventional DVB-S as well as access the Canal+ online video catalog of on-demand films, recent US television series, and other specialized programming. The Ethernet connection to the set-top box also allows Canal+ to offer “start-over TV” and a recommendation service for similar programs based on user’s viewing choices.
With respect to cable operators, new technologies and set-top boxes are now available that allow cable operators to deliver IPTV across their existing hybrid fiber/coax (HFC) cable plant without costly network upgrades. TV Cabo Angola and Danish MSO Telia Stofa are operators that have deployed CMTS( cable modem termination system ) -bypass technology to deliver VOD, additional channels and network PVR over their existing network and use hybrid STBs with an Ethernet port connected to an external DOCSIS modem to receive the interactive IPTV.
The various distribution technologies and service models used in the hybrid video sector create a number of challenges for content security. Fortunately, a new breed of software-based content security systems are available that improve overall content security across the range of hybrid video networks while enabling content playback on multiple devices with enhanced operator control.
The Encryptonite ONE™ System – Flexibility and Robust Security for Hybrid Video Services
In the migration to hybrid video services, most cable and satellite operators have a legacy smart card-based CA system in place to secure their existing DVB service. Adding an IPTV offering presents operators with a choice of 1) extending their smart card CA systems to secure the new IPTV service or 2) add a second security system to protect the IPTV component or 3) transition to a new security system that can protect both their legacy video service and their new interactive video offering. Key considerations for operators include the need to control deployment and operating costs, minimize disruptions to existing service, and allow the flexibility to meet consumer demands for viewing video services not only on TVs but also on PCs, portable devices and mobile phones. Operators also need a content security system that is highly resistant to theft of service and can be readily updated in the event of a security breach. Lastly, the chosen security system must be flexible to adapt to new technologies and evolving viewer preferences.
SecureMedia’s Encryptonite ONE™ System is an all-software content security system that provides unified protection for hybrid video services combining cable, satellite or terrestrial DVB services with an interactive IPTV service. The Encryptonite ONE System combines the functionality of both CA for traditional broadcast services and DRM (digital rights management) to manage content downloaded and stored in the subscriber premises. With a lightweight client and modular system architecture, the Encryptonite ONE System is the only CA/DRM solution designed from the ground up for today’s world of blended video services and converged media consumption. Utilizing SecureCast™, a platform extension to the Encryptonite ONE™ System that provides Simulcrypt (AES or DVB-CSA as supported by compliant scramblers) support, allows operators to support a base of existing one-way broadcast subscribers while offering a platform to drive new revenues from on-demand content access, multi device viewing, interactive playback control, and advanced advertising delivery.
SecureMedia differentiates itself in the software CA/DRM marketplace by delivering an unparalleled combination of security, scalability, efficiency, and flexibility. Key features and benefits of the Encryptonite ONE System include:
• Robust Security – Patented Indexed Encryption™ encrypts IPTV content on a packet-by-packet basis for the highest security. Client devices are continuously authenticated to prevent content decryption on non-registered or “cloned” devices.
• Simulcrypt Support – SecureCast™, the latest platform extension to the Encryptonite ONE™ System provides Simulcrypt (DVB-CSA or AES as supported by compliant scramblers) support and allows operators to complement or replace existing DVB CA systems with Encryptonite ONE System. SecureCast™ provides security for one-way networks where no direct return path is available using current generation SOC set-top box platforms.
• Unified System – Single headend installation protects both DVB services and IPTV services. Encryptonite ONE allows service providers to securely deliver broadcast and on-demand content over multiple wired and wireless networks to hybrid set-top boxes and other devices.
• 3 Screen Support – Lightweight, processor-efficient decryption client can be deployed on set-top boxes, PCs/Macs, portable devices and mobile phones. By contrast, smart card CA systems require the use of external card readers or USB dongles in PC applications and integration with SIM cards in mobile phone applications making them cumbersome or impossible to use in multi-device operations.
• Multi Delivery Options – Protects DVB broadcast, streaming IPTV broadcast, streaming VOD, and content download with secure storage and device transfer.
• Low Cost of Ownership – All software, open platform solution lowers deployment CAPEX – no proprietary headend hardware or client smart cards. Single unified security solution for hybrid video services minimizes OPEX.
• Low Overhead Operation – Patented key delivery technology sends “base decryption keys” to client devices as opposed to continuous key streams to view a particular broadcast channel or VOD file. Preserves valuable network bandwidth and improves the user experience in challenging network environments such as content delivery over the open Internet.
• Downloadable Client – Decryption client can be downloaded to set-top boxes, PCs/Macs, portable devices and mobile phones. Depending on the capabilities of legacy DVB boxes, the Encryptonite Decoder Client may also be downloaded over the network to existing boxes in subscriber homes to replace the DVB CAS smart card client.
• Upgradeable and Renewable – Modular design allows for changing of encryption algorithms, key structures and system components. Client can be upgraded over the network without any user interaction. By contrast, smart card CA systems require the physical switch-out of all cards in deployed set-top boxes in the case of a security breach.
• Highly Scalable – Can be deployed as a single server for small telco/cable operations or scaled as a multi-server operation over decentralized topology for millions of subscribers.
• Award Winning – Received the prestigious 2008 IPTV World Series Award for “Best IPTV Content Protection/Rights Management Solution.” Also, received the inaugural 2008 TelcoTV Vision Award for “Best CA/DRM Solution”.
SecureMedia’s Encryptonite ONE System is the answer for operators looking to grow their business and remain competitive through the deployment of hybrid video services. One-way broadcast systems can be complemented by two-way IPTV with a single security solution protecting operator revenues and programming copyrights. Encryptonite provides operators the highest levels of content security, the lowest total cost of ownership, and the greatest flexibility to adapt to new technologies and service models.
