Building Secure Video Playback With DRM and Server-Side Authorization

When people think of DRM, they often picture complex cryptography involving keys and ciphers to prevent video copying. While that aspect is true, there's another crucial element that many overlook: determining whether a viewer is authorized to watch a video. This is not a cryptography issue, but rather a commerce matter. If you design your protection system as if it's solely about ciphers, you'll end up with encrypted content that lacks a coherent way to indicate who has paid for it.

The ideal approach is to encrypt the content only once and then decide access permissions for each viewer every time they attempt to play the video. The encrypted segments remain identical for everyone, as without a key, they appear as random data. There's no separate copy for subscribers and no free video available on disk. The copy is encrypted and remains safe to serve to anyone, because the decision of whether or not to allow playback happens later and outside the encrypted file.

When a player requests to decrypt and display the video frames, it must request a license. This license request marks the critical moment where cryptography transitions to commerce. The DRM provider doesn't independently decide the outcome; instead, it calls back to the platform to inquire if the viewer should be granted access. This callback serves as the decisive link between the encrypted segments and the commercial rights.

The rights service, responsible for handling commercial questions, receives the request and responds with a simple boolean value: play or do not play. This decision is made outside the player's control, ensuring that the access rule remains secure and cannot be bypassed by a determined client. The access decision can be based on various factors, such as subscriptions, one-time purchases, gifts, roles, trials, or promotions, all of which are inputs to a single callback function that returns either a yes or a no.

The encryption scheme remains consistent across all devices, while the packaging adapts to each device's unique streaming and DRM requirements. This approach ensures that a single set of content keys is used, living with a specialist provider and never on your own systems. Multiple descriptions of the same segments are created to accommodate different devices, allowing each to correctly request access to the protected content.

The key to this system lies in the decision point: the license callback. This is where all the commercial logic resides. By integrating payment with playback, the entire process becomes a seamless chain: payment leads to entitlement, which is then verified through the rights service before granting access to the encrypted content. This structure ensures that the payment and access information flow together, ultimately turning money into decryptable frames for the viewer.