Security

Content Security in Wowza Streaming Engine

Security on the web has never been more critical, and the need to protect streaming audio and video content is no exception. Whether you want to protect your assets and resources from unwanted intrusion or to prevent piracy, Wowza Streaming EngineTM provides a variety of simultaneous security options to protect your streams, networks, and audio and video assets.

Wowza Streaming Engine offers security features for every part of the workflow, from encrypting incoming and outgoing streams to offering studio-approved digital rights management (DRM) for delivery of premium content.

All-Around Content Protection

For streams that originate from RTMP- or RTSP-based encoders, you can enable and require password authentication. You can also place restrictions on RTMP- and RTSP-based publishing, only allowing publishing from specific IP addresses. This prevents unauthorized computers from streaming through your Wowza Streaming Engine instance. You can even disable RTMP and RTSP publishing altogether, if desired.

To secure transcoded streams going from Wowza Streaming Engine to computers and devices for playback, you can restrict playback to specific IP addresses and use SecureToken content protection. SecureToken is a challenge-and-response security system for playback on all viewing formats that protects against spoofing threats. It protects each connection with a random, single-use key and password, or “shared secret.”

Taking all-around security one step further, you can enable RTMPS encryption for RTMP playback. RTMPS, a recognized industry standard, is more secure than RTMPE and uses a secure socket layer (SSL) for network connections. Data passed over the secure connection is encrypted to avoid hacking by unauthorized third parties.

RTMPS can be applied to live and on-demand video streams using the free Wowza StreamLock AddOn. StreamLock generates a 256-bit SSL certificate and provides the best security when used with RTMP, but can also be used for secure HTTP (HTTPS) streaming.

On-the-Fly DRM for Any Screen

For premium content, studio-approved DRM offers yet another level of protection. Wowza DRM AddOn provides integration with various DRM platforms, delivering on-the-fly Microsoft® PlayReady® encryption of live and video-on-demand content to any screen. Wowza DRM enables three third-party DRM Key Management Service providers to deliver license keys to Wowza Streaming Engine during encryption and to the viewer’s device during playback:

BuyDRM™ KeyOS™ provides Microsoft PlayReady protection for MPEG-DASH (using Common Encryption), Apple HLS, and Microsoft Smooth Streaming playback with BuyDRM players and Smooth Streaming clients on Macs and PCs, iOS and Android devices, Windows phones, game consoles, set-top boxes, and smart TVs.

EZDRM provides Microsoft PlayReady protection for Smooth Streaming clients on Macs and PCs, Windows phones, game consoles, set-top boxes, smart TVs, and with Discretix SecurePlayer media players on iOS and Android devices.

Verimatrix provides both Verimatrix® VCAS™ and Microsoft PlayReady protection for Apple HLS and Smooth Streaming playback with Verimatrix ViewRight® Web and Smooth Streaming clients on Macs and PCs, iOS and Android devices, Windows phones, game consoles, set-top boxes, and smart TVs.

All of Wowza Streaming Engine’s multiple levels of content security can be configured in the Wowza Streaming Engine Manager, saving you from a separate download and allowing for easier and faster implementation of content security options.

Wowza DRM AddOn Platform Integration

  Buy DRM EZDRM Verimatrix
Key Management Services Yes Yes Yes
Encryption Services Microsoft PlayReady Microsoft PlayReady Microsoft PlayReady,
Verimatrix VCAS
Live Clients BuyDRM Players and Smooth Streaming clients on PCs, Macs, Windows phones, game consoles, set-top boxes, and smart TVs Smooth Streaming clients on PCs, Macs, Windows phones, game consoles, set-top boxes, and smart TVs ViewRight Web clients and Smooth Streaming clients on PCs, Macs, Windows phones, game consoles, set-top boxes, and smart TVs
On-Demand Clients Same as Live Clients Discretix SecurePlayer and Smooth Streaming clients on PCs, Macs, iOS devices, Android devices, Windows phones, game consoles, set-top boxes, and smart TVs Same as Live Clients

 

Wowza DRM is also compatible with Widevine and Marlin DRM platforms for MPEG-DASH content using Common Encryption (CENC). Leverage the Wowza DRM API to develop a module that handles the key exchange for real-time encryption between Wowza Streaming Engine and a specific Widevine or Marlin DRM provider.