Overview
IEC 62766-7:2017 defines consumer terminal functions for secure access to IPTV and open‑internet multimedia services, focusing on authentication, content protection and service protection. The standard specifies terminal- and gateway-centric mechanisms for protecting content and services, and details user identification, authentication, authorisation and service access protection required for modern IPTV/OTT deployments.
Key topics and technical requirements
- Content and service protection
- Terminal-centric and gateway‑centric protection models, covering interfaces between Consumer Service Protection Gateways (CSPG/CSP-T) and client devices.
- Requirements for encrypted content delivery, licence acquisition and licence evaluation flows.
- Digital Rights Management (DRM) support
- Integration with DRM technologies (e.g., Marlin referenced in the document) and handling of DRM control information and DRM messages.
- Protected file formats, content encryption sequences and MPEG-2 transport stream protection considerations.
- Conditional access and transport protection
- Interfaces and examples for CI+ and DTCP‑IP based gateway deployments, including session setup and teardown examples.
- User identification, authentication and authorisation
- Authentication mechanisms such as HTTP basic/digest, network‑based and web‑based authentication, GBA and IMS/AKA flows for device/user registration.
- Session management and single sign‑on methods (cookies, URL parameters, SAML Web‑SSO).
- Service access protection architectures
- Co‑located vs standalone Service Access Agents (SAA), redirection flows and common interface requirements.
- Operational features
- Forced play‑out using media zones, parental control examples, VoD and live streaming workflows; informative XML schemas and message examples in annexes.
Practical applications and who uses this standard
IEC 62766-7:2017 is practical for organizations implementing secure IPTV and hybrid OTT services:
- Broadcasters and IPTV operators implementing content protection, subscriber authentication and pay‑per‑view/VoD security.
- Consumer device manufacturers (set‑top boxes, smart TVs, STB software vendors) ensuring interoperability with DRM, CI+ and DTCP‑IP gateways.
- Middleware and DRM vendors designing licence acquisition, content encryption/decryption and DRM data exchange.
- System integrators and network operators deploying service access protection, single sign‑on and IMS/GBA authentication flows.
Related standards
- Other parts of the IEC 62766 series (consumer terminal functions for IPTV/open internet multimedia).
- Industry protocols and technologies referenced for interoperability: CI+, DTCP‑IP, Marlin, SAML, IMS/AKA, HTTP authentication.
Keywords: IEC 62766-7:2017, IPTV security, content protection, DRM, authentication, service protection, CI+, DTCP‑IP, Marlin, service access protection.