Solution

Overview

Irdeto Control
Multi-DRM Cloud Services

Maximize your OTT video revenue potential Differentiation is critical to survive in such a
with the most powerful multi-DRM solution competitive landscape. Media brands must
find their target market’s “sweet spot” by
Consumers’ appetite for video streaming services combining the most desired Content, with
keeps growing and is not expected to slow down. suitable Convenience at the right Cost levels for
All research firms forecast high growth for online subscribers – There is no “one-fix-all”, you need
video compared to traditional video distribution. to offer flexibility and personalized alternatives.
Most new and future video subscriptions are and Choosing the right multi-DRM solution is one of
will be for OTT services. the most critical aspects to secure the success of
There is a clear migration of all media brands your OTT streaming platform.
towards offering content direct-to-consumer (D2C) Irdeto Control is the most reliable, scalable, and
and OTT distribution is the “weapon of choice”. secure multi-DRM solution proven in the market.
Competition in the OTT video arena is fiercer than It offers you simple integration, management, and
ever: Streaming apps, pay-TV operators, studios, global support “round-the-clock”, providing you
and sports rights holders are all battling for the differentiation you need to stand out, offer
consumers’ eyeballs. your viewers an unmatched user experience and
grow your business by attracting more subscribers.

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 1

TOP 5 CRITERIA WHEN CHOOSING A MULTI-DRM SOLUTION
Based on years of experience supporting media companies and deploying successful OTT video services
globally, Irdeto has captured the top 5 criteria to consider when choosing a multi-DRM solution, helping
you maximizing the performance and revenue potential of your OTT service.

bility
la
ca
S

Se
cu
rity
Business
Enablement
R e li
ab
ili t

ic i
ty
y

pl
Si m

Business Enablement Scalability

This is the most important role of the solution; it It is crucial for any OTT service to perform at its
must empower you to grow your business. The best when all eyes are watching, especially during
ideal multi-DRM solution must support all business high profile events. That is why ensuring the right
models (SVOD, TVOD, AVOD, FAST, etc.) and license delivery throughput and latency is vital to
enable pay-TV operators and media streaming meet your viewers’ expectations by providing a
services to quickly introduce new and attractive premium user experience. Irdeto Control multi-
monetization models, meet subscribers’ needs DRM cloud service offers you a license delivery
and differentiate from competitors. This includes throughput greater than 100K RPS and a license
capabilities such as DRM-based Concurrent Stream delivery latency below 50ms, to guarantee the
Management (CSM) and Geo-enforcement. Irdeto ideal platform scalability required during high
Control multi-DRM cloud service supports all profile events and provide your service with fast
models, enabling you to grow your OTT services’ response times even during high peaks.
ARPU and attract new subscribers by addressing
new customer segments.

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 2

Security Reliability

To meet security requirements and access content High profile events are the ultimate test for any
from premium studios and sports rights holders, OTT service; therefore, it is so important for the
your OTT platform must guarantee secure multi-DRM solution to empower your OTT service
distribution on all devices. In many cases, DRM- with the required reliability and availability to
based-only security is not enough, and that is perform at its best. If an OTT service goes down
why the multi-DRM solution must be seamlessly for just a few seconds during an important event,
integrated and supported by additional layers the impact on your business can be catastrophic.
of security, including watermarking technologies Irdeto Control multi-DRM cloud service offers you
and piracy detection mechanisms. Irdeto Control an industry-leading SLA of 99.999%, plus a series
multi-DRM cloud service is trusted by all the major of additional services including 24x7 operational
studios and can be pre-integrated and enhanced supervision by a dedicated Service Operation
with Irdeto watermarking solution TraceMarkTM Center (SOC), 24x7 dedicated customer support
and Irdeto cybersecurity services. and a Hosted Widevine Service to guarantee
broadcast-like reliability and availability of your
streaming service.

Simplicity

Given the nature of the media and entertainment

industry, it is vital for any OTT service to deploy
as quickly and as efficiently as possible. That is
why the ideal multi-DRM solution must be easy
to integrate and manage. It should be flexible to
adjust to each operator’s unique needs and it must
be able to continuously evolve to meet technology
developments and viewers’ needs. Irdeto Control
multi-DRM cloud service requires minimum
integration and offer the lowest TCO (total cost of
ownership) and TTM (time to market) for operators
deploying a new OTT service. It supports all
packagers, player, devices, and DRM technologies
to adjust to any environment.

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 3

 WHEN ALL EYES ARE WATCHING
Guaranteed reliability and availability when you need it most

IRDETO CONTROL
The most powerful multi-DRM solution

75B 7.5B 30M 50 ms 100K

DRM licenses DRM licenses DRM licenses in Latency RPS throughput
in a year in a month a single high or less or more
profile event

Trusted industry award-winning solution

Best Digital Rights Best Content AWS Trusted

Management Solution Protection Certified Partner

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 4

 MULTI-DRM CLOUD SERVICE
The diagram below illustrates how Irdeto Control multi-DRM cloud service works in a typical
OTT ecosystem.

Content CDN/Origin
Studios/Sports
Live/VOD
DRM Content DRM Content

DRM Content

Irdeto Control
Packagers User
(Encoding/Transcoding)
Multi-DRM Cloud Service Devices
CPIX 2.3/
SPEKE 2.0
Key Maker

License
Service
Rights
Management
Content rules & play restrictions Playback
(CSM, geo-blocking, etc.) License

Note: Irdeto’s integration with Packagers is not limited to the list on the diagram. Contact us for more information.

1. A speedy content packaging pipeline is easily set up thanks to Irdeto Control Key Maker’s pre-integration test with major encoders/packagers.
2. Business policies, including content rules and play restrictions, are configured via the Rights Management system, which provides both API and
HTML5 web user interface.
3. Irdeto Control License Service issues playback licenses upon the requests from the user device if it is decided that the user is entitled to the
requested content.

Business Benefits Irdeto Control Features

• Boost legitimate revenues with versatile rights • DRM security: Microsoft PlayReady, Google
and effective credential sharing management. Widevine Modular, Apple FairPlay Streaming
• High availability and scalability with industry- • Content encryption: CPIX 2.3-compliant
leading SLAs (up to 99.999%) and auto-scaling interface, AWS SPEKE 2.0, track types,
to handle traffic outbursts. key rotation
• Deliver high service quality and embrace • Streaming formats: HLS, MPEG-DASH,
global OTT service expansion no matter when Smooth Streaming, CMAF
and where. • Delivery methods: Live streaming, VOD,
• Fast time to market for new services, client Download & Go (including offline rental),
devices, and DRM features. Catch-up TV
• Fully managed “pay-as-you-grow” • Consumer authorization: Session Token, Geo-
cloud service. blocking, Concurrent Stream Management
• 24x7 monitoring and dedicated • Infrastructure (AWS SaaS deployment):
customer support. Geodiversity (multi-region),
Kubernetes autoscaling

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 5

 CONCURRENT STREAM MANAGEMENT
Irdeto Control concurrent stream management empowers you to
grow your ARPU by enforcing concurrent stream limits accurately
and effectively. Create unique offerings tailored to your
subscribers’ needs, untap new viewers’ segments with attractive
models, and prevent revenue loss by discouraging session
and credential sharing. Differentiate from competitors by
introducing innovative offerings that enable to control and
manage concurrent streams based on subscribers’ accounts,
device category, premium content, and more.

Irdeto Control concurrent stream management leverages

the concept of license renewal known as DRM-based
“heartbeats”, which is proven to be more secure and
accurate, to replace the traditional player-based method,
which is not as secure and requires custom development
for each device/player. Irdeto’s unique approach is app
agnostic and does not require custom code to be developed
or maintained at the application or platform level. It prevents
any attempt to circumvent the systems’ heartbeats, enabling
operators to accurately enforce content and service usage rules
in real-time.

Subscriber Account Device Category Premium Content

User 1
User 1 Password 1
User 1
Stream 1 Browser 1
Password 1 Password 1
Stream 1 Premium
User 1
Content 1
Password 1
Stream 2 Smart TV 1
User 1 User 1
Password 1 User 1 Password 1
Stream 2 Password 1 Premium
Stream 3 Mobile 1 Content 1

User 1 User 1 User 1

Password 1 Password 1 Password 1
Stream 3 Stream 4 Smart TV 2 Content 2

Limit the number of streams accessed Limit the number of streams by Limit the number of instances a
with a single set of credentials type of devices user can access specific content

These are some of the capabilities that Irdeto Control allows you to rapidly deploy. You can create any
kind of possible combinations to develop attractive and customized packages for your subscribers.
Empowering you to grow your business and quickly adjust to new market trends and viewers’ demands.

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 6

 IRDETO HOSTED WIDEVINE SERVICE
Irdeto’s impeccable security excellence and proven capabilities to host and manage critical security
services entitles us to co-host Widevine’s license service SDK as part of Irdeto Control (Hosted Widevine
Service) and to enable service providers with greater reliability and availability for their OTT services
at all times. Irdeto Hosted Widevine Service further extends our industry-leading availability and SLAs
(99.999%) offering your OTT video service with improved user experience (low latency), managed change
control, and dedicated monitoring capabilities to guarantee the required scalability and resiliency for high
profile events.

Multi-DRM Solution Irdeto Control

Widevine Cloud License Proxy * Hosted Widevine Service

Client Devices Widevine Cloud Client Devices

License Services

Multi-DRM Widevine License

Server SDK

*Also supported by Irdeto Control

As illustrated in the image above, with Irdeto Control Hosted Widevine Service the license requests
never leave Irdeto Control’s reach and scope and don’t depend on Widevine Cloud License Service
for final license fulfillment, offering you a series of business benefits:

Simplicity: Easy and seamless migration (no changes needed in the client devices nor operators’
infrastructure). Quick time to market and lower total cost of ownership with added value.

Security: It is as secure as Widevine Cloud License Service (WCLS). Offers frequent and
efficient security updates from Google e.g., DCSL.

Strong Change Management: Ensures seamless and transparent updates e.g.,

configuration updates, new releases, new rules, etc. Any new Widevine SDK
release is qualified, validated and tested before moving to production.

Latency: No more remote calls to fulfill Widevine Licenses. Latency is not

impacted by variations in distance between customer and WCLS locations.

Privacy: Follows regulations and local agreements with customers about

data privacy e.g., GDPR. Data doesn’t go out of Irdeto Control cloud.

Accessibility: Not impacted if WCLS is down (completely or partially).

Not impacted by network connectivity issues (entry or exiting the network).

Availability: Guaranteed availability when requested by service provider.

The service is part of Irdeto Control’s SLA (up to 99.999%).

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 7

 GEO RESTRICTION SERVICES
Irdeto Control offers you geo-restriction services enabling great flexibility to enforce IP geo-restrictions
from a subscriber level, content level, or both. Based on subscribers’ location, operators can deploy
targeted strategies by country, region, or city. Irdeto Control geo-restriction capabilities also include
innovative tools to detect and block VPN and proxy services, impeding any attempt to circumvent the
geo-restrictions.

IP Geo Location Geographical Messaging for VPN/Proxy

restrictions upselling opportunities Database
Country

Region

City Content Subscriber

Level Level

Both

Irdeto Control geo-restriction services enable you to impose access control in accordance with your
subscriber’s geographic information (IP based).

Granular restrictions based on geo location: Granular restrictions based on different levels:
• Country (e.g., The Netherlands) • Subscriber level
• Region (e.g., North Holland) • Content level
• City (e.g., Amsterdam) • Both subscriber & content level

Irdeto Control supports dynamic IP whitelisting and

blacklisting per availability policy, enabling you to support
a variety of innovative use cases:

• Unblocking a user IP belonging to a region

geographically blocked.
• Blocking a user IP suspected to be the cause of piracy
based on observed unusual behavior.
• A user IP identified as VPN/Proxy requires to be
enabled due to operational, commercial,
or legal reasons.

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 8

 IRDETO CONTROL CLOUD SERVICES
Irdeto Control is a proven and trusted multi-DRM solution at the center of OTT content delivery activities.
It addresses service provider’s key concerns such as service reliability, scalability, simplicity, and security.
Naturally, it supports the leading DRMs (Microsoft PlayReady, Google Widevine, Apple FairPlay Streaming)
as well as a variety of monetization models (e.g., subscription, transaction to own, transaction to rent,
freemium, ad-funded) enabling you to maximize your OTT revenue potential. Over 30 of the leading
OTT video providers and media brands worldwide put their trust in Irdeto to issue billions of licenses per
month, enabling them to provide the best user experience for millions of subscribers.

Geo Restriction Services Anti-Fraud Management Services Managed Services

• Geo Enforcement (city, country, region) • Anomaly detection with AI/ML • 24/7 SOC monitoring
• IP Blacklisting • Device blocking based on DRM ID • SLA up to 99.999%
• IP Whitelisting • Device blocking based on • Second & third line support
• VPN/Proxy detection device type • Hosted Widevine service

Concurrent Stream Management Operational Portal High Profile Events

• Premium content based • Smart dashboards • Throughput > 100K RPS

• Device category based • Reporting • Multi-layered infrastructure
• Subscriber account based • Audit logs • Multiple communication channels
• Service wide • Business intelligence • Dedicated support line

• Key maker (Packager integration)

Multi-DRM
• Rights management
Cloud Service • License service

Contact us to learn more about Irdeto Control solution

Irdeto is the world leader in digital platform cybersecurity, empowering businesses to innovate for a secure,
connected future. Building on over 50 years of expertise in security, Irdeto’s services and solutions protect revenue,
enable growth and fight cybercrime in video entertainment, video games, and connected industries including
transport, health and infrastructure. With teams around the world, Irdeto’s greatest asset is its people and diversity
is celebrated through an inclusive workplace, where everyone has an equal opportunity to drive innovation and
support Irdeto’s success. Irdeto is the preferred security partner to empower a secure world where people can
connect with confidence.

Last modification: 8-11-2023 / 12:05 pm GMT+01:00

www.irdeto.com © 2023 Irdeto. All Rights Reserved. 9