CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH CEDIA EXPO A LITTLE HOUSEKEEPING • Please; Cell phones off • Course evaluations at end • Course code ESD0026-1 INTRODUCTION AMOL BHAGWAT • Lives in Colorado, USA • Vice President of DLNA and Principal Architect at CableLabs • Led Tru2way Home Networking project • Involved in UPnP, W3C, IETF • Leads DLNA’s VidiPath initiative AGENDA WHAT WE WILL LEARN • • • • • • • What is VidiPath? Benefits Features Deployment Scenarios Test Tools Conclusion Q&A LEARNING OBJECTIVES WHAT IS VIDIPATH? The full subscription TV experience on consumer electronics BENEFITS Consumers FEATURES HTML5 Diagnostics Industry Power Save CE Companies Adaptive Delivery DTCP-IP Your Company Authentication DEPLOYMENT SCENARIOS In Home + Cloud In Home TEST TOOLS Conformance Media Capability Link Protection C O N N EC T IN G T H E F U T U R E O F SU BSC R IPT ION T V C O N T EN T T H R O U GH What is ? :DELIVERING SUBSCRIPTION TV TO ALL DEVICES Service Providers SUBSCRIPTION TV TODAY Service Providers Conditional Access Service Provider Devices One STB per TV Retail Devices with Subscription TV Retail Devices without Subscription TV SUBSCRIPTION TV WITH Service Providers Service Provider Gateway The full subscription TV experience on consumer electronics CONTRIBUTORS Development led by service providers in conjunction with CE manufacturers and technology suppliers. THE FCC AND The FCC output requirements will come into effect on June 1, 2015. The requirements are designed to enable connectivity with the multitude of IP devices in consumers’ homes and comply with an open industry standard. The FCC has determined that… – DLNA produces open industry standards – VidiPath meets the output requirements that come into effect on June 1, 2015. Reference: Implementation of Section 304 of the Telecommunications Act of 1996; Commercial Availability of Navigation Devices, CS Docket No. 97-80; Audiovisual Output Requirement of Section 76.640(b)(4)(iii). https://apps.fcc.gov/edocs_public/attachmatch/DA-12-1910A1.pdf 11 TIMELINE 2014 March NOW VidiPath Guidelines public release Building and testing products September Certification Program launch December Certified Products expected in the Market CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH Benefits Allows consumers to access the full range of service provider content on multiple devices in the home. VidiPath devices have low power capabilities built in, reducing consumer’s energy consumption. Eliminates the hassle of additional boxes, cords, remotes and other service provider specific devices. VidiPath clients will work with the billions of DLNA Certified devices on the market today. Enables a consistent service provider user interface across devices. The VidiPath logo helps consumers purchase devices that access service provider content Consumer Benefits Preserves content provider rights through protected streaming using DTCP-IP and Authentication. A Common product logo gives service providers a way to communicate which devices can access full subscription TV content. Reduces service provider capital expenditure by enabling the move to headless gateways and reducing the number of set top boxes in the home. Remote diagnostics allows service providers to optimize user experience. Enables a consistent service provider user interface across devices. Allows SPs to build a single UI which eliminates the need to manage multiple unique applications for devices (i.e., TV, tablet, phone, PC, etc.). Service Provider Benefits Gives CE devices access to the full range of subscriber HD programs, movies, DVR content, channel guides, and other premium features. VidiPath logo provides CE manufacturers a way to differentiate their products. Having a common profile minimizes the need to support individual service provider applications. CE Manufacturer Benefits Utilize DLNA’s formal test suite and certification program to ensure interoperability amongst devices. Leverages existing DLNA implementations with minimal enhancements. CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH Features VidiPath Server VidiPath Client DMS DMP/DMR HTTP adaptive server HTTP Adaptive Delivery HTTP adaptive Client 3D Media Content 3D Media Delivery 3D Rendering Client HTML 5 RUI (+RUIHSRC+) HTTP Adaptive Server RUIH Protocols HTML 5 RUI (+RUIHPL+) HTTP Adaptive Delivery HTTP Adaptive Client 3D Media Content 3D Media Delivery 3D Rendering Client Authentication Server Authentication Protocols Authentication Client Low Power Endpoint (+LPE+) Low Power Signalling Low Power Controller (+LPC+) Diagnostics Controller (+DIAGC+) Diagnostics Protocols Diagnostics Endpoint (+DIAGE+) Diagnostics Endpoint (+DIAGE+) Optional REMOTE USER INTERFACE: SERVICE PROVIDER USER INTERFACE ON CE DEVICES Service Providers LUI RUI HTML5 RUI: RENDERS SERVICE PROVIDER USER INTERFACE ON DEVICES • • • • • • • Enables service providers to render their UIs (e.g. program guide) onto VidiPath Clients. HTML5 RUI profile for DLNA Clients conformant to commercial browsers implementations. HTML5 provides a consistent user experience. HTML5 allows for a single unified user interface adapted to screen resolution. Discovery is based on UPnP Remote User Interface specification. Pixel-accurate relies on CANVAS, a HTML5 tag for dynamic, scriptable rendering of 2D shapes and bitmap images. Supports the same mandatory trick modes and media format profiles as DLNA Device Classes DMS/DMP/DMR. DTCP-IP: PROTECTING STREAMING CONTENT Service Providers DTCP-IP: Protecting Streaming Content • • • • • • Under this reliable technology content can be shared securely between products in a consumer’s home and not accessible by third parties outside the consumer’s home network. DTCP-IP is automatically negotiated between DLNA Certified Protected Streaming products and has been designed to protect content as it moves across the local home network. Legal protection provided by chain of licensing where DTCP-IP license mandates robustness (tamper resistant enclosures, no clear text on user-accessible buses, buried traces, secure key storage, tamper resistant software for host/client software). Licensing that perpetuates protection on all home network devices and links together a chain of protection technologies that permits a variety of marketplace technologies that support current and future content delivery business models. Utilizes well known/standard cryptographic algorithms which provides the following functionality: – Authenticated Key Exchange (AKE) – Mutual authentication using public key crypto – Advanced Encryption Standard (AES) – Copy Control Information (CCI) integrated – Revocation (SRM) – Strong license provisions Motion picture studio support with three studios as “content participants” and others relying on DTLA’s “IP Statement” to require use of DTCP-IP through their content licenses. DIAGNOSTICS: VERIFYING CONNECTIVITY Service Providers Is the Connection OK? Status 23 DIAGNOSTICS: VERIFYING CONNECTIVITY • Layer-2 testing with IEEE 1905 nVoy (Optional): • Link Metrics • Works even if IP addressing broken • Network interface statistics • Network topology discovery • Layer-3 testing with UPnP Device Management: • Detailed high level management information • Provide basic tools to help resolve connection issues: • • • Ping Trace Route NS Lookup DIAGNOSTICS: ARCHITECTURE Defined in DLNA Guidelines TR-069 - Broadband Forum CPE WAN Management Protocol ACS – Auto-Configuration Server External to DLNA +DIAGC+ Diagnostics Application Service Provider TR-069 ACS UPnP Control Point 1905 +DIAGE+ Web Browser UPnP Transport and application layer diagnostics 1905 UPnP basic and configuration management service 1905 Link layer diagnostics Gateway Client(s) NETWORKED DEVICES POWER SAVE: CONSERVING ENERGY Service Providers Entering power save mode I need your services NETWORKED DEVICES POWER SAVE: CONSERVING ENERGY • For tighter power regulations and voluntary initiatives. • Provides mechanism for DLNA devices to convey energy management capabilities and mode for each of its network interfaces. • Technology-based on UPnP Energy Management service. • Clients are enabled to provide wakeup or reservation mechanism to manage devices (Optional): • To wake up end point devices on demand. • To request an end point device to be on for a given period of time. • Allows devices to proxy knowledge of energy management capabilities and mode for other devices. NETWORKED DEVICES POWER SAVE: ARCHITECTURE Specified by DLNA Entering Power Save Mode Not Specified by DLNA Physical Device DLNA Device Class +LPC+ UPnP Energy Management Control Point WakeOnPattern Signaler IP and underlying physical network interface(s) and other physical resources IP interface PHY UI to give user info OS or other intermediate execution platform (e.g., JVM) Service Providers Physical Device DLNA Device Class +LPE+ UPnP Energy Management Service 28 DLNA HTTP ADAPTIVE DELIVERY: MPEG-DASH Service Providers These quality levels (e.g. resolutions and bitrates) are available Currently requesting this quality level (segments) Adapts to network conditions inside and outside the home 29 DLNA HTTP ADAPTIVE DELIVERY: MPEG-DASH • • • • • • • Extensibility of DLNA HTTP streaming to deliver adaptive and dynamic multimedia content by dynamically requesting different “representations” of the same content item from a server. Client adapts to varying access and streaming channel conditions to dynamically select suitable representation for the best viewing experience. Based on MPEG DASH ISO Live, ISO On Demand, and MPEG2-TS Simple profiles. Other Organizations adopting MPEG DASH: 3GPP, OIPF, HbbTV, DECE, DTG, W3C. Added MPEG-DASH Media Format Profiles: – In addition to MPEG2, H.264, etc. – ISO base file format and MPEG2 TS – Common set of codecs: AVC, AAC Dynamic Adaptive Content is identified by new DLNA Media Profile – DASH_MPD, describing MPEG DASH Media Presentation Document (MPD). Transparent support for DLNA Link Protection (DTCP-IP). DLNA HTTP ADAPTIVE DELIVERY: ARCHITECTURE DMP or M-DMP Service Providers MSCP UPnP CP Media Transport Client HTTP-AD Option DMS or M-DMS UPnP Device MSD Media Transport Server HTTP-AD Option MPD Delivery Function DASH Client IP Connectivity DASH Segment Delivery function IP Connectivity AUTHENTICATION: VERIFYING Service Providers CERTIFICATION Are you really a VidiPath client? Are you really a VidiPath server? Both client and server (in-home or cloud) implement HTTPS (HTTP over TLS 1.2) to exchange X.509 and DTCP VidiPath certificates using Supplemental Data AUTHENTICATION: • • CERTIFICATE EXCHANGE VidiPath Clients shall use DTCP VidiPath Certificate: – Same certificate is used for DTCP Link Protection and VidiPath Authentication. – This certificate has the VidiPath bit set, which indicates that the Client is VidiPath certified. VidiPath Servers shall use one of the following: – Option 1: In-home Authentication Server with DTCP VidiPath Certificate (DLNA Guidelines Part 5 - Device Profiles, Annex A.3): • Same certificate is used for DTCP Link Protection and VidiPath Authentication. • Also, a self-signed (non-trusted) X.509 Certificate is used to setup the TLS connection with a VidiPath client for exchange of DTCP VidiPath Certificate. – Option 2: Cloud Authentication Server with VidiPath X.509 Certificate (DLNA Guideline Part 5 – Device Profiles Annex A.4): • Authentication Server uses trusted VidiPath X.509 cert provided by DTLA, which is used for both encrypted tunnel establishment between client and server and for server authentication (since it is trusted). AUTHENTICATION: DTCP METHOD IN-HOME AUTHENTICATION SERVER Client provides DTCP VidiPath Certificate in TLS Supplemental Data signed with Client’s DTCP Private Key Service Providers HTTPS (HTTP over TLS 1.2) In-home Server provides A self-signed server X.509 Certificate With DTCP VidiPath Certificate in TLS Supplemental Data signed with Server’s DTCP Private Key DLNA Guidelines Part 5 – Device Profiles, Annex A.3, B.3, B.4 AUTHENTICATION: X.509 METHOD CLOUD AUTHENTICATION SERVER Client provides DTCP VidiPath Certificate in TLS Supplemental Data signed with Client’s DTCP Private Key Service Providers HTTPS (HTTP over TLS 1.2) Cloud Server provides Trusted X.509 VidiPath Certificate DLNA Guidelines Part 5 – Device Profiles, Annex A.4, B.1, B.2 AUTHENTICATION: ARCHITECTURE Specified by DLNA Specified by Credential Authority Service Providers Server Authentication Device Option Authentication Server Server Credential Storage Client Authentication Device Option Authentication Client Client Credential Storage Gateway Credential Authority Client(s) Credential Installation 36 AUTHENTICATION: DLNA CERTIFICATION REQUIREMENTS • A VidiPath device submitted for DLNA VidiPath certification shall include Production DTCP VidiPath Certificate/Key with the “VidiPath Certified” bit set: – The same Certificate/Key is used for DLNA Link Protection capability & VidiPath Authentication • DLNA Member company requests VidiPath Production Certificate/Key from DTLA prior to Certification testing: – Required in order to submit device for DLNA VidiPath certification testing at an Independent Certification Vendor (ICV) – DTLA Adopter’s Agreement includes protections against using VidiPath production keys in non-VidiPath Certified devices in the marketplace. CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH Deployment Scenarios HYBRID IN-HOME + CLOUD SCENARIO Cloud HTML5 RUI/Server 2. HTML5 RUI Guide 1. Device and Service Discovery Home Network VidiPath STB/ Gateway 3. Linear, On-Demand, DVR Content DLNA VidiPath TV IN-HOME ONLY SCENARIO 2. HTML5 RUI Guide 1. Device and Service Discovery Home Network DLNA VidiPath TV VidiPath STB/Gateway w/ RUI Server 3. Linear, On-Demand, DVR Content CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH Test Tools CONFORMANCE TEST TOOL • The CTT is an easy-to-use tool that tests each DLNA Guideline supported by the product in development. • With the help of this tool, the test operator can check if the device complies with the DLNA Guidelines based on the feature set supported by the product. • Implements media alignment and scaled files to realistically simulate actual devices. 42 MEDIA CAPABILITY VERIFICATION TOOL • The MCVT is used to verify if the device correctly implements the operations performed during media playback. – For example, if the device can perform operations such as play, stop, pause, seek and scan, this tool will verify if the device correctly performs the operations using DLNA methods such as connection stalling, byte-based seek, time-based seek, and play speed as supported. • The MCVT allows device vendors the ability to verify that each media format profile will perform all operations successfully for all possible methods that the device supports. • Implements media alignment and scaled files to realistically simulate actual devices. 43 LINK PROTECTION TEST TOOL • The LPTT tests the Link Protection Guidelines (DLNA DTCP-IP Guidelines) for compliance. • The LPTT is based on CTT, but the CTT covers Architecture and Protocols and the LPTT covers the Link Protection Guidelines. • Note: LPTT is provided only to Members who have a current DTLA license and hold Adopter Status. • LPTT also has tests similar to MCVT for testing the operations and methods implementation of a device during media playback, for DTCP-IP media format profiles. 44 CONCLUSION What did we learn? TODAY YOU LEARNED… WHAT IS VIDIPATH? The full subscription TV experience on consumer electronics BENEFITS Consumers FEATURES HTML5 Diagnostics Industry CE Companies Power Save Adaptive Delivery DTCP-IP Authentication Your Company DEPLOYMENT SCENARIOS In Home + Cloud In Home TEST TOOLS Conformance Media Capability Link Protection JOIN DLNA • CE VidiPath Clients must be DLNA Certified to interface with and receive service provider content. Membership is required for certification. • Use the new brand name for VidiPath on products and messaging materials to market the benefits of VidiPath to consumers and the industry • VidiPath meets the FCC output requirements that come into effect on June 1, 2015. • VidiPath certification enables your company to join the VidiPath ecosystem. 47 TIMELINE 2014 March NOW September VidiPath Guidelines public release Building and testing products Certification Program launch December Certified Products expected in the Market HOW TO GET STARTED • Prepare to certify your device by downloading the guidelines: http://www.dlna.org/dlna-for-industry/guidelines • Join DLNA and gain access to: – Latest guidelines – VidiPath Test Tools – 2015 Plugfests (dates to be released) – Certification Program • Email: admin@dlna.org to join DLNA. 49 QUESTIONS AND ANSWERS COURSE EVALUATION TELL US WHAT YOU THINK • Don’t forget the course evaluation: o o Tell us what you liked and what we can improve We want to hear from you • Ask your instructor if you do not have an evaluation form. • Turn in evaluations to the room monitor when you leave the classroom. CONNECTING THE FUTURE OF SUBSCRIPTION TV CONTENT THROUGH THANK YOU!