如何使用Azure媒体服务设置DRM保护以防止屏幕捕获 [英] How to setup DRM Protection with Azure Media Services to prevent screen capture
问题描述
:)
我的目标是托管具有Widevine和PlayReady DRM保护的视频，以防止像Netflix这样的屏幕捕获.只有授权用户才能获得观看视频的许可.
我正在努力入门.
我尝试过的事情:
- 播放"PlayReady(动态/SWT)"；
有人可以帮我入门吗?
解决方案(很难)在可用性和保护之间进行权衡.
使用DRM，有硬件级别和软件级别的选项.
通常，软件DRM更容易受到屏幕捕获的影响.但它的使用范围更广.基于硬件的DRM具有内置的保护措施.但是，是的，它的使用范围不太广.
对于Widevine，仅在支持L1(安全级别1)的设备中获得硬件DRM.因此，通常是Google(Widevine的所有者)控制或批准的设备.高端Android智能手机通常可以使用.但这取决于手机的品牌/型号.然后，您将拥有智能电视和Chromebook.您可以限制这些设备中的屏幕捕获.
但是仅支持Widevine L3的设备无法防止屏幕捕获.但是，不支持L3(以防止屏幕捕获)意味着您不支持大部分浏览器(例如台式机Chrome和Firefox).因此，限制对您内容的访问.由于Chrome和Firefox的结合占据了浏览器市场的绝大部分.
您提到Netflix，实际上他们的解决方案是一个折衷方案.他们确实支持L3设备，因此其内容 容易受到屏幕捕获的影响.这就是为什么他们将这些设备的分辨率限制为最大720p.要以全高清/超高清格式观看Netflix，您需要一台带有硬件DRM的设备.因此，要复制他们的工作，您将需要使用多轨道打包视频，并且每个轨道使用不同的密钥.因此，UHD轨道可以应用与SD轨道不同的安全级别.
由于Netflix有数十亿美元可以解决任何问题，因此您可以确定他们的所作所为是最佳的解决方案.
Playready可以阻止Edge(Windows 10)中的屏幕录制.Microsoft在那里控制DRM和浏览器.但是 Edge不如Chrome/Firefox流行.如果您仅定位Edge，则需要再次权衡.
然后另一个主要的DRM是Fairplay.那是Apple DRM，由于Apple控制着整个生态系统，因此默认情况下会获得硬件支持.Mac，iPhone，iPad.但是您没有提及，所以我认为这不是目标市场.
这当然不简单！
:)
My goal is to host videos with Widevine and PlayReady DRM protection to prevent screen capture like Netflix. Only authorized users should be able to receive licenses to watch the videos.
I'm struggling to get started.
What I've tried:
- play the "PlayReady (dynamic/SWT)" sample on https://ampdemo.azureedge.net/ but the video is removed or something
- read Microsoft docs, but there is no simple step-by-step guide on how to create a DRM protected video on Azure portal and try it out in the Azure Media Player
- I tried creating a content key policy with DRM encryption and no tokens, this I could play in the Azure Media Player on the demo site, but it was possible to perform a screen capture
I'd say I understand the big picture as shown in this diagram from Microsoft docs:
Can someone please help me to get started?
解决方案There is (sadly) a trade-off between availability and protection.
With DRM there are hardware-level and software-level options.
Generally software DRM is much more vulnerable to screen capturing. But it's more widely available. Hardware-based DRM has protections built in against it. But, yes, it's less widely available.
For Widevine, you only get hardware DRM in devices that support L1 (security level 1). So that is generally devices that Google (owner of Widevine) controls or approves. High-end Android smartphones generally do. But it depends on the make/model of phone. Then you have smart TVs and Chromebooks. You can limit screen capture in those devices.
But devices that only support Widevine L3 don't protect against screen capturing. However not supporting L3 (to protect against screen capturing) means you don't support a large section of browsers (like desktop Chrome and Firefox). And so limiting access to your content. Since Chrome and Firefox combined have the majority of the browser market.
You mention Netflix and actually their solution is a trade-off. They do support L3 devices and so their content is vulnerable to screen-capturing. Which is why they limit the resolution to max 720p on those devices. To watch Netflix in full HD/UHD you need a device with hardware DRM. So to replicate what they do, you would need to package your videos using multi-track and so different keys per track. So different security levels can be applied for the UHD track than for the SD one.
Since Netflix has billions of dollars to throw at any problem, you can be pretty sure what they do is the best solution available.
Playready can block screen recording in Edge (Windows 10). Microsoft controls both the DRM and browser there. But Edge less popular than Chrome/Firefox. The trade-off again if you target Edge-only.
Then the other main DRM is Fairplay. That's an Apple DRM and since Apple controls the whole ecosystem, you get hardware-support by default. Macs, iPhones, iPads. But you don't mention that so I assume that's not a target market.
It's certainly not simple!
这篇关于如何使用Azure媒体服务设置DRM保护以防止屏幕捕获的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
