The Complete Guide to Apple Fairplay
Apple’s DRM platform FairPlay is a DRM scheme originally developed by Veridisc, and more widely adopted by Apple, Inc. It is designed to encrypt content packaged using HTTP Live Streaming and is intended for use with all iOS devices as well as Apple TV. On the desktop, Apple’s DRM converter FairPlay is also built into QuickTime. Apple originally used FairPlay to protect content distributed through the iTunes Music Store. While Apple no longer encrypts iTunes Music downloads, FairPlay DRM is still used in the new Apple Music service for content stored locally.
Key Benefits
- Enterprise protection of your HLS audio and video
- Uses and established key system already adopted throughout the industry
- Native to iOS, Apple TV, and OS X
- Efficient power consumption on mobile devices
- Full integration with Apple AirPlay
- Licensed with no cost through the Apple Developer Program
What is FairPlay Streaming?
- A delivery mechanism for secure keys that are protected on both the network and client
- Delivery of keys is server agnostic and can work with existing key infrastructure, streamlining implementation
- Will only work with protected HDMI for external outputs
- FairPlay Streaming does not provide DRM rights, enforce policies, authenticate users, or authorize devices
Usage Guidelines
- A FairPlay Key Security Module (KSM) into your existing Key Server infrastructure
- Code should be integrated with your application to relay key requests and responses
- Every time an HLS asset is encrypted you should:
- Generate and store a Content Key (CK) in your Key database
- Encrypt the Asset using AES
- Make sure the HLS playlist references your Content Key
Sample FairPlay DRM Streaming Workflow
1. The app requests to play asset from Apple’s AVfoundation media framework
2. AVfoundation media framework then downloads the m3u8 playlist which contains your content key
3. The media framework will then request the key from the media framework delegate built into the app
4. The app delegate then responds to the media framework to make a request from the FairPlay Streaming Server
5. The delegate then sends the FairPlay Server Playback Content to your Key Server
6. The key server then interprets the Server Playback Content using the Key Security Module and searches for the Content Key
7. When the search is completed the Key Security Module applies the content key
8. The media framework delegate then provides the key response to the media framework
9. The content is now decrypted and the app and device can execute playback
While FairPlay Streaming is Key Server agnostic it must be capable of the following:
- Decrypt and validate the Secure Playback Content
- Search for the content key
- Produce the Content Key Context
- Understand and utilize Key Server Module information
FairPlay Streaming and Apple AirPlay
To stream FairPlay DRM encrypted content to AppleTV, there are no special requirements, it happens automatically. Everything is managed by FairPlay Streaming and passed through by Apple TV. The source devices relays encryption data between the devices and Apple TV. This methods maintains all the security benefits of FairPlay Streaming.
FairPlay Streaming in Safari OS X
FairPlay Streaming takes advantage of Encrypted Media Extensions which are emerging HTML5 encryption standards. Because of this, the code written for key delivery must be written using JavaScript. The same KSM can be used for both iOS and OS X, and content from the browser can be delivered to other devices via AirPlay.