<?xml version="1.0" encoding="utf-8"?>

<!-- Copyright (c) 2007-2010 Nokia Corporation and/or its subsidiary(-ies) All rights reserved. -->

<!-- This component and the accompanying materials are made available under the terms of the License 

"Eclipse Public License v1.0" which accompanies this distribution, 

and is available at the URL "http://www.eclipse.org/legal/epl-v10.html". -->

<!-- Initial Contributors:

    Nokia Corporation - initial contribution.

Contributors: 

-->

<!DOCTYPE concept

  PUBLIC "-//OASIS//DTD DITA Concept//EN" "concept.dtd">

<concept id="GUID-249E8EE2-5334-4CA2-93AB-4010E6404D11" xml:lang="en"><title>OMA

DRM v2.0</title><shortdesc>The OMA Digital Rights Management (DRM) v2.0 specification provides

stronger content protection and improved functionality for rich media content,

such as music and video. The specification enables an end-to-end DRM system

that takes into account the need for secure distribution, authentication of

devices, revocation and other aspects. The Symbian platform supports the mandatory

features of the OMA DRM v2.0 specification.</shortdesc><prolog><metadata><keywords/></metadata></prolog><conbody>

<p>The improved security, compared with OMA DRM v1.0, is achieved by using:</p>

<ul>

<li><p>Bilateral authentication between the rights issuers and devices</p></li>

<li><p>Public key infrastructure (PKI) certificates and online revocation

checks</p></li>

<li><p>Protection of the confidentiality and integrity of the rights objects</p></li>

</ul>

<p>Improved functionality and usability are achieved, for example, by providing

enhanced preview functions and mechanisms for sharing content within a registered

community of devices, called a domain. </p>

<p>The OMA DRM v2.0 specification as such is not mobile-specific, which means

that there can be OMA DRM v2.0 non-mobile devices, such as PC software, thus

enabling better interaction and content transferability between devices.</p>

<p>In the Symbian platform, OMA DRM v2.0 is enabled for music

and video files via HTTP or OMA download. For more information on the OMA

DRM v2.0 features that are supported in the Symbian platform, see <xref href="GUID-EAF3FCBE-A68C-4881-A461-774D481DD315.dita">Supported

OMA DRM v2.0 features</xref>.

For more information on supported OMA DRM v2.1 features, see <xref href="GUID-09A4172E-DB54-4ADF-A718-8100154A6031.dita">OMA

DRM v2.1</xref>.</p>

<section id="GUID-4D792C94-43D5-44CD-BE3E-677819F4436F"><title>Silent rights

object acquisition</title><p>Silent rights object acquisition means that no

DRM-specific notifications are shown during the acquisition if the feature

is enabled in the media file. The OMA DRM specification defines two types

of silent rights URL:</p><ul>

<li><p>On-demand</p><p>Rights object is acquired when the user tries to open

the file.</p></li>

<li><p>In-advanced</p><p>Rights object is acquired at the earliest possible

time.</p></li>

</ul><p>The Symbian platform supports only on-demand silent rights acquisition.

The in-advanced type is treated similarly as on-demand. </p></section>

<section id="GUID-D3DD4B99-351F-43FF-B911-5DF87FEF09AA"><title>Transaction

tracking</title><p>Transaction tracking allows the <xref href="GUID-788FCBFA-B4FB-4001-B838-4B59995E2E33.dita">rights

issuer</xref> to track the content flow from one user to another via superdistribution.

The rights issuer includes a <codeph>TransactionID</codeph> in the rights

object, which allows the rights issuer to build a reward mechanism, for example.</p></section>

<section id="GUID-CBBDB66E-7D4E-4931-A886-524D17529AAD"><title>PKI requirements</title><p>In

the PKI, secret data is encrypted with the recipient's public key. Only the

recipient can open the content with the private key. This private key system

is sometimes known as symmetric cryptography and the public key system as

asymmetric cryptography. PKI makes sure that both the mobile device and server

are authenticated. The key in the mobile device identifies the mobile device

and the key in the server identifies the server. The device key is stored

by using data caging. If the key is lost, the downloading rights are revoked,

but usage rights still apply.</p><p>In addition to the software implementation

in the Symbian platform, each device must have the keys and certificates listed

below:</p><ul>

<li><p>Device private key</p></li>

<li><p>Public certificates</p></li>

<li><p>Device certification authority (CA) certificate</p></li>

<li><p>CA root certificate</p></li>

</ul><note><p>The Symbian platform does not provide PKI keys, certificates,

or server infrastructure. <xref href="http://www.cm-la.com" scope="external">Content

Management License Administrator</xref> is a known PKI provider for OMA DRM

v2.0. The DRM implementation in the Symbian platform is prepared for CMLA,

but it is not certified, because only devices can be certified by CMLA.</p></note></section>