Co-funded by the European Union under FP7-ICT-2009-6 Introduction to Digital Rights and their representation, Introduction to DRM concepts, classification and risk analysis Stefan Hein, [email protected] German National Library (DNB) APARSEN Webinar: Long Term Preservation and Digital Rights Management 10 March 2014 Co-ordinated by aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Objectives Digital Rights and Access Management (DRM) What does it mean and what is the challenge in the context of long-term preservation? Digital Rights • in particular the challenge of their • preservation and protection over the long-term Q: - What are Digital Rights? How they can preserved? Why it is a challenge? Digital Management of Digital Rights • digital rights associated with digital • • content the protection and management of digital rights is also viewed as taking place digitally Q: - Which DRM techniques and tools are used? Why DRM carries risk for the long-term preservation? Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Approach • Develop a common understanding of Digital Rights and Digital Rights Management (DRM) "Digital Rights Management (DRM) involves the description, layering, analysis, valuation, trading and monitoring of the rights over an enterprise's tangible and intangible assets. DRM covers the digital management of rights - be they rights in a physical manifestation of a work (eg a book), or be they rights in a digital manifestation of a work (eg an ebook). “ from: Iannella, R. (2002). Open Digital Rights Language (ODRL) Version 1.1. Retrieved 11 25, 2013, from W3C: http://www.w3.org/TR/odrl/ • Review of existing standards, documents, projects and initiatives • Analysis results of DRM surveys (like The Dutch DRM survey and the APARSEN DRM survey) and consider concrete user scenarios • Provide a common view of the current State-of-the-Art in DRM techniques and tools (desktop research) • Classification and Evaluation of DRM techniques against their impact and risk on the long-term preservation (desktop research) Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Digital Rights • Digital rights refers to the ‘rights’ associated with accessing, using, creating and publishing digital content. The rights can relate to usage permissions as well as access preferences or limitations imposed upon digital content. • To preserve digital rights information a form of their digital representation is needed => Rights Expression Languages (RELs): • Examples of RELs: – – – – – Open Digital Rights Language (ODRL), METSRights, XrML, CopyrightMD PREMIS from: http://www.loc.gov/standards/rights/METSRights.xsd Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Digital Preservation and metadata • • One key implementation challenge: preservation metadata Important: long-term preservation of (preservation) metadata • • • • • • Provenance: Who has had custody/ownership of the digital object? Authenticity: Is the digital object what it purports to be? Preservation Activity: What has been done to preserve it? Technical Environment: What is needed to render and use it? Rights Management: Who and what is allowed to access and use it? Makes digital objects selfdocumenting across time Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 PREMIS data model and Rights Statements • • Example: • Marcel Ras grants KB digital repository permission to make three copies of ncdd_workplan.pdf for preservation purposes. An agreement with a rights holder that grants permission for the repository to undertake an action(s) associated with an Object(s) in the repository. Not a full rights expression language; focuses exclusively on permissions that take the form: – Agent X grants Permission Y to the repository in regard to Object Z. Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Digital Rights Management • What is Digital Rights Management (DRM)? Prevention unauthorized access unintentional use Access Use legal infringements intentional use Control Monitoring Tracking Invoice Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Identified most common DRM variants • Classification 1. DATA CARRIER COPY PROTECTION 2. LIGHTWEIGHT DRM (LWDRM) 3. ENCRYPTION-BASED PASSWORD PROTECTION 4. DRM SYSTEMS Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Identified most common DRM variants • Classification 1. DATA CARRIER COPY PROTECTION 2. LIGHTWEIGHT DRM (LWDRM) 3. ENCRYPTION-BASED PASSWORD PROTECTION 4. DRM SYSTEMS Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Evaluation • Evaluation scale Value Characterization no risk No risk for future LTP measures medium Possible to use at present (at time of publication) in up-to-date hard and software environment, current LTP measures restricted, no external dependencies, medium risk for future LTP measures high Use and LTP measures already (currently) restricted, high risk for implementation of LTP measures in the future as result of external dependencies Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Evaluation DRM category Risk 1. Data carrier copy protection medium 2. Lightweight DRM no risk 3. Encryption-based password protection medium 4. DRM systems high Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Challenges • Preservation of digital rights over the long-term • Update digital rights information in cases of changing legislative base RECOMMENDATIONS FOR THE PROTECTION OF DIGITAL RIGHTS • DRM could be medium- or high-risky for the long-term preservation, because: DRM – restricts access (downloading, streaming) – controls use (viewing, playing, copying, dissemenation, resell) • => DRM could hinder preventive and subsequent LTP measures RECOMMENDATIONS FOR THE HANDLING OF DRM PROTECTED OBJECTS Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN Co-funded by the European Union under FP7-ICT-2009-6 Many thanks • Report on DRM preservation: http://www.alliancepermanentaccess.org/wp-content/plugins/downloadmonitor/download.php?id=D31.1+Report+on+DRM+preservation Introduction to Digital Rights and DRM Stefan Hein, [email protected] APARSEN Webinar: Long Term Preservation and Digital Rights Management, 10 March 2014 aparsen.eu #APARSEN aparsen.eu Network of Excellence #APARSEN