Software DRM Client SDK

Irdeto ActiveCloak for Media stops key extraction in its tracks

Client DRM vulnerabilities

In the last 2 years, software DRM clients have been exploited to extract content encryption keys. Pirates then use the stolen keys to deliver illegal services leading to missed revenue opportunities and increased CDN costs.

DRM patches are not enough

They would be if they could be enforced but they are not. DRM providers issue regular patches and updates to address vulnerabilities. But these patches are not made available to older devices because OEMs stop issuing them after devices are a few years old. Or non-tech savvy users do not update their operating system and/or applications automatically (or manually on a regular basis).

Streaming service providers need to take matters into their own hands

Streaming service providers need their service apps to be more robust and be integrated with renewability for a wide range of vulnerable devices.

Irdeto ActiveCloak for Media (ACM) is an Android-based software development kit specifically designed to protect devices that are vulnerable to content key extraction. Security mechanisms are reconfigured and automatically renewed to prevent loss of platform integrity over time. It minimizes the risk that content keys will be extracted, revenue will be lost, or the service provider’s reputation will be damaged.

Learn more

Benefits

World class security

Cloakware software and Irdeto Whitebox cryptography used to harden software DRM.

Ease of integration

Works with any DRM server vendor. API with any external video player.

Increased agility

Renewable security to deploy fast and efficient response to piracy attacks.

Client security best practices

Anti-tampering, runtime and static detection, secure store, node locking, fingerprinting included.

See below

Rooted device detection

Detect and lock-out rooted devices (optional).

Multi-layered defense techniques

Java Access Control

Adds Java application access control, to enforce security around who can access specific assets, functionality or data.

Anti-Debug

Prevents hackers from using a debugger to analyze what the app is doing.

Integrity Verification

Digitally signs the app modules and stores the signature at build time, and then at runtime, detects any tampering as a deviation from the stored signature.