© 2008 Microsoft Corporation. All rights reserved.
COMPLIANCE RULES FOR WMDRM EXPORT
USING THE WMF 11 SDK
1. DEFINITIONS
The following terms have the meanings set forth below. Other initially capitalized terms
not defined in these compliance rules have the meanings ascribed to them in the
robustness rules or the License Agreement.
1.1
“API” means Application Programming Interface.
1.2
“Certificate” means a unique WMDRM object used to assess trust.
1.3
“Compressed WMDRM Export Content” means WMDRM Content that
(i) has been decrypted using the Software and the WMDRM Export
Application Certificate and (ii) remains compressed.
1.4
“Consistent with the Microsoft Implementation” means the Licensed
Product (i) provides equivalent functionality to the Microsoft
Implementation, (ii) equals or exceeds the robustness of the Microsoft
Implementation, and (iii) maintains compatibility and interoperability with
the Microsoft Implementation.
1.5
“Content” means digital audio (including, but not limited to, timelinesynchronized audio, music, voice, or sounds), and /or digital video.
1.6
“Content Key” means a symmetric key used to encrypt and decrypt
WMDRM Content.
1.7
“Content Provider Authorized Export” means a WMDRM Permitted
Export system specified in WMDRM Policy.
1.8
“Export Boundary” means the amount of Compressed WMDRM Export
Content present in the application process at any given time.
1.9
“Export” means to execute the translation mechanism that transcrypts
WMDRM Content into a Content Provider Authorized Export.
1.10
“Individualization” means the process of downloading and installing
WMDRM component(s) from a Microsoft service for the purpose of
improving the protection provided by WMDRM.
1.11
“Intended Action” means WMDRM Policy specified in a Rights
Mappings required to Export WMDRM Content.
Compliance Rules for WMDRM Export
-1-
31 January 2008
© 2008 Microsoft Corporation. All rights reserved.
1.12
“Key ID” means the value associated with WMDRM Content which is
used to locate associated WMDRM Licenses.
1.13
“License Agreement” means the agreement(s) under which Microsoft
licenses entities to develop and distribute products that use the WMDRM
components contained in the WMF SDK redistributable components to
perform Export of WMDRM Content.
1.14
“Licensed Product” means a software application (or other software
component, which may be a separately identifiable subset of a software
application or operating system) that (i) implements the WMF SDK
subject to a License Agreement and (ii) is capable of Exporting WMDRM
Content.
1.15
“Microsoft Implementation” means the implementation of WMDRM
functionality provided as source code, binaries, technical documentation,
tools and/or sample files as provided to Company under the License
Agreement.
1.16
“Payload Key” means a symmetric key used to decrypt individual
payloads of WMDRM Content.
1.17
“Rights Mapping” means the rules and restrictions as specified in
Appendix A attached hereto which must be enforced by the Content
Provider Authorized Export for WMDRM Content once Exported.
1.18
“Salt Value” means the 64 bit value generated by the Licensed Product to
create a Payload Key.
1.19
“Uncompressed WMDRM Export Content” means WMDRM Content that
has been decrypted and decoded using the Windows Media Format Reader
Object portion of the Software.
1.20
“WMDRM” means Windows Media Digital Rights Management
technology.
1.21
“WMDRM Content” means Content that has been encrypted using
WMDRM.
1.22
“WMDRM
1.23
“WMDRM Permitted Export” means a permitted content protection
system, identified in Appendix A attached hereto and represented by a
corresponding GUID, and the associated Rights Mapping.
License” means a data structure that contains, but is not
limited to, an encrypted Content Key or an encrypted key used to decrypt
a Content Key associated with specific WMDRM Content, and WMDRM
Policy associated with specific WMDRM Content.
Compliance Rules for WMDRM Export
-2-
31 January 2008
© 2008 Microsoft Corporation. All rights reserved.
1.24
“WMDRM Policy” means the description of the actions permitted and/or
required with respect to WMDRM Content and restrictions on those
actions as described in the WMDRM License associated with the
WMDRM Content.
1.25
“WMF SDK” means Windows Media Format 11 Software Development
Kit.
2. SCOPE
These compliance rules apply to Licensed Products that make use of the WMDRM
functionality included in the WMF SDK. These compliance rules set forth the
requirements pursuant to which Licensed Products utilizing the WMF SDK may Export
WMDRM Content.
3. REQUIREMENTS FOR COMPLYING WITH WMDRM POLICY
3.1
Functionality. When a Licensed Product implements any WMF SDK
functionality to Export WMDRM Content, it must do so in a manner
Consistent with the Microsoft Implementation. This requirement is in
addition to all of the specific compliance rules set forth in this document.
In the event of a conflict between how the Microsoft Implementation
implements a given WMDRM functionality and how a specific
compliance rule in this document describes how such functionality must
be implemented, the compliance rule takes precedence.
3.2
Architecture. All WMDRM functionality implemented in a Licensed
Product to Export WMDRM Content must be executed in its entirety on a
single PC within a single binary module (e.g. exe, dll).
3.3
No Circumvention. Licensed Products must not, directly (including
without limitation through the use of Export or any feature or functionality
thereof) or indirectly (including without limitation through any device or
application offered, sold, or marketed for use with the Licensed Product),
(a) provide access to and/or display WMDRM Content in any manner
inconsistent with these compliance rules or (b) otherwise circumvent the
rights and restrictions associated with WMDRM Content.
3.4
Unspecified policy. WMDRM Policy may specify additional rights,
restrictions or parameters that are not covered in these compliance rules.
Nevertheless Licensed Products must only take action based on rights and
must enforce only restrictions covered in this document. To the extent
that WMDRM Policy (or a particular WMDRM License) describes
additional rights, restrictions or parameters that are not described in these
compliance rules, Licensed Products must ignore such additional rights,
restrictions or parameters.
Compliance Rules for WMDRM Export
-3-
31 January 2008
© 2008 Microsoft Corporation. All rights reserved.
3.5
3.6
WMDRM Export Certificates
3.5.1
Certificate Implementations. Company shall link the Certificates
into Licensed Products where applicable, and only as permitted in
the compliance rules and robustness rules, for the purpose of Export.
Company shall use the Certificates Consistent with the Microsoft
Implementation and solely to enable Licensed Products to
interoperate with the WMFSDK to Export WMDRM Content.
3.5.2
Revocation. If a Licensed Product receives the
NS_E_DRM_APPCERT_REVOKED or
NS_E_DRM_LICENSE_APP_NOTALLOWED or
NS_E_DRM_CERTIFICATE_REVOKED or
NS_E_DRM_INVALID_CERTIFICATE error from WMDRM,
Licensed Product must either (A) invoke an internal upgrade
mechanism to restore the compliance of the Licensed Product, or (B)
direct the user to a Company web site page that provides a
mechanism for the user to restore the compliance of the Licensed
Product.
Individualization.
3.6.1
Licensed Products must enable Individualization whenever the
Licensed Product receives either
WMT_NEEDS_INDIVIDUALIZATION or
NS_E_DRM_NEEDS_INDIVIDUALIZATION from any WMF
SDK API.
3.6.2
Company must provide a mechanism to obtain the end user’s explicit
informed consent prior to the Licensed Product’s performing any
Individualization.
3.6.3
Licensed Product may only Export Compressed WMDRM Export
Content if, the Licensed Product ensures the individualized version
of WMDRM is 2.8.0.1 or higher. If the individualized version is less
than 2.8.0.1, Licensed Products must successfully Individualize to
2.8.0.1 or higher before performing Export.
4. RULES FOR EXPORTING WMDRM CONTENT
Licensed Products must only Export to Content Provider Authorized Exports.
When Exporting, Licensed Products must comply with the following rules.
4.1
Evaluate the Intended Action.
Compliance Rules for WMDRM Export
-4-
31 January 2008
© 2008 Microsoft Corporation. All rights reserved.
4.1.1
Licensed Product may only Export Compressed WMDRM Export
Content to a Content Provider Authorized Export if the Licensed
Product successfully: A) enumerates the WMDRM License by
specifying the valid Key ID and the properly formatted Intended
Action and B) binds to the enumerated WMDRM License by calling
the CreateSecureDecryptor API.
4.1.2
Licensed Product may only Export Uncompressed WMDRM Export
Content to a Content Provider Authorized Export if the Licensed
Product successfully verifies the Intended Action is specified in a
WMDRM License associated with the WMDRM Content. The
Licensed Products shall verify the Intended Action of “Play” by
specifying g_wszWMDRM_ActionAllowed_Playback when calling
IWMDRMReader::SetDRMProperty() or specifying
WMT_RIGHT_PLAYBACK when calling WMCreateReader().
The Licensed Products shall verify the Intended Action of “Copy”
by specifying g_wszWMDRM_ActionAllowed_Copy when calling
IWMDRMReader::SetDRMProperty() or specifying
WMT_RIGHT_COPY when calling WMCreateReader().
4.2
Verifying the Content Provider Authorized Export. Licensed Product
may only Export WMDRM Content to a Content Provider Authorized
Export if the Licensed Product validates that the GUID for the Content
Provider Authorized Export has been specified in WMDRM Policy
associated with the WMDRM Content.
4.3
Additional Rules to Export Compressed WMDRM Export Content
4.4
4.3.1
Payload Decryption. Licensed Product must not allow the Export
Boundary to exceed 128 bytes at any given time.
4.3.2
Salt Value. Licensed Product must increment the Salt Value upon
each Payload Key generation.
Rights Mapping. Licensed Product may only Export WMDRM Content
to a Content Provider Authorized Export consistent with the associated
Rights Mapping as set forth in Appendix A.
Compliance Rules for WMDRM Export
-5-
31 January 2008