DIRECTV Set Top Box and Content Protection Description DIRECTV Set Top Boxes There are tens of millions of active DIRECTV set-top boxes (STBs). All DIRECTV STBs receive 100% digital input signals. The DIRECTV STB categories are: - High Definition Whole Home DVR - High Definition Client - High Definition Basic - High Definition DVR - Standard Definition Basic - Standard Definition DVR Typically a DIRECTV STB receives its digital input signal directly from a DIRECTV satellite dish. In some architectures and for certain programming, however, digital input signals may be received via other means: such as over-the-air terrestrial broadcasts, an MDU headend, another DIRECTV STB (e.g. a Whole Home DVR server), or broadband delivery via the Internet. The Standard Definition STBs process MPEG2 video and MPEG1 layer 2 audio and support a proprietary DIRECTV Advanced Program Guide as well as proprietary DIRECTV Conditional Access security (provided by Cisco/NDS VideoGuard). These STBs support interactive applications as well. The High Definition STBs additionally process high definition MPEG2 and MPEG4 AVC video/audio formats, as well as AC-3 audio. HD STBs support up to 1080p output resolution, and furthermore support 3D content using a frame compatible side by side transmission format (encoded to 1080p23.98, 720p59.94 or 1080i29.97). DIRECTV s HD STBs also have home network connections (MoCA and/or Ethernet). The DVR STBs ( DIRECTV Plus DVRs ) additionally provide for time-shifting of programming as well as pause and a number of rewind & fast-forward speeds. The storage capacity of DVR STBs include a certain percentage of storage reserved for network use, used for example for promotional video or pre-loaded VOD (aka Satellite Push VOD ) content. HD DVR STBs can stream recorded programs to another HD STB on the home network. HD Whole Home DVR ( DIRECTV Genie ) STBs furthermore leverage home networking technology to allow the concentration of resources (e.g. satellite tuners, hard drive) into a single server capable of streaming DIRECTV s service to clients throughout the home. Using the RVU industry standard (www.rvualliance.org), an HD Whole Home DVR STB interfaces with RVU certified clients including the DIRECTV Genie Mini client and many 1 DIRECTV PROPRIETARY May 2014
connected television ( Smart TV ) models. Genie Mini clients are available with either MoCA home networking or a high reliability RVU Alliance WiFi reception capability integrated: in the latter case, DIRECTV installers will also deploy a Wireless Video Bridge ( DIRECTV WVB ) to perform the WiFi transmission. All DIRECTV STBs support Impulse Pay-Per-View (IPPV), in which a PPV program may be ordered directly via the remote control. Un-rented programs can be stored on the DVR, allowing the IPPV rental to occur at time of playback. Reportback of rentals and other viewer data occurs through a broadband connection and, for older STBs, a phone connection. PPV programs may also be ordered through contacting DIRECTV for authorization over satellite for all STBs in the home as well as to enable streaming or download to mobile devices. DIRECTV Set Top Box Content Protection Measures All DIRECTV broadcasts are encrypted with either 64 bit DES (standard definition broadcasts) or 128 bit AES (high definition broadcasts), with key updates typically every sixty seconds. Keys are delivered in encrypted form to a secure hardware element, typically a renewable Smart Card, installed in each STB. Programs may be blacked out based on geographic region and other characteristics. All DIRECTV broadband delivered content is encrypted with 128 bit AES using a key delivery mechanism secured by DIRECTV Conditional Access. The content remains encrypted throughout the delivery process and is not decrypted until it is being viewed using an authorized DIRECTV STB. Requests for content files are authenticated prior to transfer of content. Standard definition analog outputs include RF, RCA and S-Video type connectors. For all STB categories, CGMS signaling delivered in accordance with CEA/EIA-608/708 (line 21 fields 1 and 2) is passed through the DIRECTV network and the standard definition analog STB outputs. High Definition STBs have HDMI digital outputs, all capable of HDCP protection. The oldest High definition STBs have DVI digital outputs which are also capable of HDCP protection. HD STBs will output content in 1080p or 3D (frame compatible side-by-side) only after ascertaining via a HDMI query that the display is compatible. High Definition STBs HD analog outputs are used when an HDMI input on a customer s television is unavailable or does not support HDCP. Other STB digital outputs found on certain STB models include MoCA, Ethernet and USB. These IP outputs are capable of being protected as well, with any of the following: DTCP-IP, Cisco/NDS VG Connect DRM, and DIRECTV Conditional Access. The RVU Alliance interface standard requires DTCP-IP support. DIRECTV s DVR recordings retain at a minimum the broadcast encryption. Such content, whether stored internally or externally (e.g. via esata attached storage), may only be played back while a DVR STB has the requisite authorizations. For example, 2 DIRECTV PROPRIETARY May 2014
externally stored content can only be played back via the original STB or an STB authorized to operate in the same account. DVR STBs are furthermore capable of content expiration control once a program s availability window ends, as well as once a rented program s viewing window ends. Some High Definition STB models are capable of inserting a forensic watermark (includes a unique STB identifier and time stamp), used for very high value content and delivered via all enabled outputs. There is no support in DIRECTV STBs for the protection of watermarks inserted by the programmer. Additional Devices and corresponding Content Protection Measures DIRECTV programming is also available for streaming and download to customers devices, including PCs/laptops, tablets, mobile phones and game consoles, using DIRECTV applications and websites under DRM control. The programming source may be the DIRECTV Headend or an authorized DIRECTV STB combined with a DIRECTV transcoder ( Genie GO ). Device connectivity via a home network (for use inside the home) and/or a broadband Internet service (for use both inside and outside the home) is provided for by the customer. GenieGO (formerly known as Nomad) is a hardware device that enables DIRECTV authenticated customers to watch programming on PCs and mobile devices. GenieGO must be connected to the same home network as the customer s HD DVR. GenieGO allows a customer to transfer DVR content to a mobile device and allows streaming of DVR content to a mobile device in and out of the home. The GenieGO standalone hardware device capability may be integrated into future DIRECTV HD Whole Home DVRs. To use GenieGO, a customer must install an approved DIRECTV application on their PC or mobile device. Once a device is authenticated, the customer is allowed to: - Select recordings to be transferred from the DVR to the PC or mobile device, which are transcoded/encrypted and transferred to the target device - Stream content from the DVR to a PC or mobile device in home and out of the home. DIRECTV uses Cisco/NDS VG Connect DRM for most applications including GenieGO. Additional industry standard DRMs such as Adobe, PlayReady, Widevine and others may be used in certain targeted devices and applications (e.g. NFL Sunday Ticket on Xbox). Content rights for viewing only in the home are enforced via DRM test of proximity with an authorized STB. Streaming and downloaded content retains expiration and viewing/availability windows under DRM control, including automatic deletion. Limits on the maximum number of client licenses per customer are enforced via DRM. Only authorized customers in applicable DIRECTV service territories are able to stream or download content onto their authenticated devices. Industry standard geofiltering methods, provided through agreements with DIRECTV CDNs (e.g. Akamai, Level3, Limelight), are used to deny requests originating outside of DIRECTV service territories or to enforce game blackout restrictions. 3 DIRECTV PROPRIETARY May 2014
Authenticated Access To Program Provider Services The DIRECTV Authentication Service supports DIRECTV customer access to separately provisioned program provider services such as HBO GO. DIRECTV authentication services securely delivers an authorization message to the program provider service only when the DIRECTV customer account includes the requisite subscriptions making it eligible to access such service. DIRECTV Headends The DIRECTV headends are physically secured. Diagrams Diagrams showing the DIRECTV headend architecture, Genie / GenieGO / WVB home network, and DIRECTV s Authentication Service follow: 4 DIRECTV PROPRIETARY May 2014
Linear Streams 5 DIRECTV PROPRIETARY May 2014
DIRECTV In-Home Architecture 6 DIRECTV PROPRIETARY May 2014
DIRECTV Authentication Service enables video services such as HBO GO to authenticate eligible customers Viewing Device Internet DIRECTV Authentication Service Program Provider Service 7 DIRECTV PROPRIETARY May 2014