Verimatrix
Your trusted partner for protecting content and revenue

Let's face it. Stealing digital content has become commonplace. It is estimated that fifty percent of satellite service is stolen, one third of cable service is stolen and over one third of Internet bit traffic is stolen video content. In order to expand content distribution on the Internet, digital content must be protected.

Verimatrix is dedicated to the protection of our client's digital creations and securing operator's revenue streams. The Verimatrix Content Authority System (VCAS) is a software-based solution that increases content security over Internet Protocol (IP) systems. There are no smart cards, it's easy to deploy and we can trace piracy to its source.
your ability to respond quickly to unexpected changes. Avalanche supports a wide range of leading and legacy devices, laptops and operating systems.

Overview
Verimatrix Content Authority System

Greater Security

The Verimatrix Content Authority System (VCAS) answers the needs for greater security imposed on video over Internet Protocol (IP) systems. Traditional cable TV allows for only one-way communication, while IP infrastructures provide two-way capabilities, negating the need for smart cards. A recently performed third party security audit reported: "Verimatrix has gone to great lengths to incorporate security into their VCAS product. Most products are designed first with functionality in mind, and security as an afterthought. Verimatrix has designed their system with equal importance on security and functionality, which is reflected in their product."

Security System for Video on Demand

The Verimatrix VCAS utilizes the principles of Public Key Infrastructure (PKI), which uses X.509 digital certificates to identify each component in the system, as well as to securely encrypt data using public/private keys.
Registration. Client registration and authentication are performed using PKI and X.509 digital certificates. The set top box client is security hardened to protect keys used within the set top box.

Encryption. VOD content is encrypted and optionally watermarked by the Verimatrix Preprocessor. An independent third party security audit reported that the "cryptographic architecture has been well thought through" and "the cryptographic paradigms are impressively sound."

Validation. When the encrypted VOD movie is sent to a set top box, the secure set top box client requests movie or broadcast keys from the VCAS server. Before decryption keys are issued, extensive authentication procedures are performed using a combination of the X.509 digital certificates and digital signatures.

Show time. The signature is sent to the VCAS, which verifies the signature, retrieves the movie decryption key from the database. The encryption key is then returned via a secure connection to the set top box and the movie begins to play.

Security System for Multicasting/Broadcast

Encryption. Broadcast content is first passed to the Verimatrix Real Time Encryption Server (RTES) using either a unicast or mulitcast address. RTES encrypts it and transports it to either a unicast or mulitcast destination port.

Validation. When the set top box is powered on, it contacts the VCAS to request the current broadcast decryption key block. Before the decryption key is issued, the client device must create a digital signature using its X.509 certificate to authenticate itself.

Decryption key. The VCAS server validates the signature, retrieves the key block from the database and encrypts the key block before sending it to the client. An interface is provided to the middleware in order to confirm entitlement.

On air. The packet is examined to see if a selected broadcast channel was encrypted. If it was, the appropriate decryption key is used to decrypt the packet before passing it back to the video player application.


 

For more information with AC Corporation, contact the email address or phone numbers listed below.

AC Corporation Corporate Profile