Token Scout DRM
Token Scout DRM is a solution that aims at protecting the commercial rights of authors, editors and publishers of contents in digital format. Thanks to the TPM and CryptoArchitectureTM technologies, Token Scout DRM provides security against unauthorized access, copy, modification, and distribution, as well as integrity against reverse engineering, tampering and other threats.
Token Scout DRM is useful to protect:
- books
- reports
- newspapers
- music
- videos
Token Scout DRM is supplied as a USB device with flash memory, with capacity ranging between 512 MB and 32 GB. Contents inside the flash memory are sealed with CryptoArchitectureTM encryption.
Digital rights management
Owners of commercial rights for digitally distributed contents often face threats that artificially augment the risks associated with the business. But they are not the only ones affected by illegal activities. Piracy harms end consumers because they have to support the huge economic losses of massive illegal distribution.
Common threats to digital contents include:
- Massive online distribution over P2P channels
- End-user replication for other purposes than legal backup
- Plagiarism of copyrighted contents
- Unauthorized modification of contents and their format
Those threats equally affect documents and streaming media like music or video. Digital Rights Management technologies from different vendors try to mitigate the effects of piracy via hardware and/or software solutions. The idea behind DRM is that specialized companies with highly skilled engineers and a great knowledge of security threats might be able to take care of the integrity of contents, releasing authors, editors and publishers from the burden of implementing their own security solutions.
Token Scout DRM uses the most secure hardware TPM technology to protect contents against unauthorized access, copy, distribution, modification or reverse engineering. The unique CryptoArchitectureTM technology provides secure means to customize the TPM, ensuring that best-practices are adopted, and providing the tools and extensions for straight-forward development of a unique DRM for every customer. This is a highly appreciated feature of Token Scout DRM, since most authors, editors and publishers believe that it narrows the potential benefit that hackers see while circumventing security measures.
INtegrity
Token Scout DRM prevents malicious behaviour at endpoints by means of superior integrity technology. Every end customer is assigned a unique Token Scout TPM, a USB device with CryptoArchitectureTM technology. This highly secure device provides physically unclonable authentication, sealed storage, and supervision of the integrity of all processes involved in the usage of contents at the endpoint.
dRM tools
DRM of massively distributed contents involves some specific challenges:
- highly automated storage of contents in digital mediums, as a necessary step prior to distribution,
- assignment of credentials to contents, coupling them to the digital medium where they are stored or used,
- distribution of contents via secure and efficient channels,
- recovery and replacement of credentials, to correct situations that might arise from the way end consumers use contents,
- replication of contents, to satisfy the law in some countries where the end consumer is granted the right to backup contents.
Token Scout DRM provides the software tools that allow contents owners to effectively manage how their contents are deployed in the market.
SEALED STORAGE
Documents and audio-visual contents might be stored as files inside the USB TPM device. Once inside, contents are sealed, and can only be decrypted with specialized software that must be executed in the computer of the end customer.
Token Scout TPMs can be conveniently upgraded on purchase to include flash memory of different capacities, from 512 MB to 32 GB. Contents in flash memory will be encrypted and decrypted on-the-fly, with the encryption key and all security critical algorithms residing on the highly secure CryptoArchitectureTM logic.
Whenever the end customer tries to open a sealed file with an application (i.e. a word processor) the security policy settings are checked. If the customer and the application are authorized to access the file, and no integrity threats are detected, the file will be decrypted on-the-fly and on-demand. The application will see the file in memory as if it was never sealed, even though the actual contents on disk will always be encrypted.
requirements
The following operating systems are supported by DRM tools:
- Windows NT (2000, XP, Vista and Windows 7).
End consumers must execute a software agent that, together with the TPM, ensures the integrity of the endpoint. The following operating systems are supported for the integrity software:
- Windows NT (2000, XP, Vista and Windows 7).
