Overview
ISO/IEC 23078-1:2024 is an international standard that provides a comprehensive overview of copyright protection technologies currently utilized in the digital publishing industry. As digital publications proliferate, protecting intellectual property while ensuring user convenience and accessibility has become paramount. This standard details three types of copyright protection technologies employed by publishers to safeguard content and enforce usage rights:
- DRM-free protection: Utilizes watermarking and content fingerprinting without encrypting the content, prioritizing user convenience.
- User key-based DRM protection: Employs encryption with keys tied to individual users, allowing moderate usage constraints.
- Device key-based DRM protection: Employs encryption tied to specific devices, restricting content transfer between devices to maintain stricter control.
This document serves as a key resource for publishers, distributors, technology providers, and users, offering definitions, technical insight, and guidance on digital rights management (DRM) solutions and related copyright protection mechanisms.
Key Topics
DRM-Free Protection
- Fingerprinting: Identifies digital publications by extracting unique, inherent content properties-often called a "content DNA." This method leaves the original content intact and helps track unauthorized sharing or distribution on platforms by matching content to a fingerprint database.
- Watermarking: Embeds visible or invisible markers in digital publications that link the content to the licensee. Visible watermarks act as deterrents by displaying personal or license information, while invisible watermarks use techniques such as spacing alterations and image steganography to embed information discreetly. Watermarking is widely used in retail sales and review copy distribution but lacks strong technical limitations on content sharing or loan expiry enforcement.
DRM Protection
- Encryption-Based Protection: DRM solutions typically rely on encrypting digital content to ensure only authorized users can access it. The decrypted content key is embedded in a license that specifies usage rules such as expiration dates, printing limits, and copying restrictions.
- User Key-Based DRM: Keys are assigned to individual users, facilitating usage scenarios where users are allowed some freedom to transfer content within their authorized scope.
- Device Key-Based DRM: Keys are linked to specific devices, thereby severely limiting the ability to transfer publications from one device to another. This method suits publishers who require more stringent copyright enforcement.
Challenges and Considerations
- Maintaining balance between copyright protection and user convenience including portability, accessibility, and long-term preservation.
- Avoiding vendor lock-in and ensuring interoperability among reading systems.
- Addressing accessibility needs for users with disabilities.
- Protecting user privacy in line with regulations such as the European General Data Protection Regulation (GDPR).
- Adapting protection measures for different market requirements and use cases, such as retail sales, library lending, and pre-release content distribution.
Applications
ISO/IEC 23078-1 is highly valuable for multiple stakeholders in the digital publishing ecosystem:
- Publishers and distributors can select appropriate DRM solutions based on protection requirements, business models, and user convenience considerations.
- Library systems and academic institutions benefit from standards-compliant DRM for controlled lending and digital access management.
- Retail platforms use fingerprinting or watermarking to discourage unauthorized sharing while preserving user experience.
- Software developers and device manufacturers gain guidance to implement interoperable and accessible digital rights protection mechanisms.
- Content creators and authors can understand the technologies that protect their copyrights while respecting end-user rights.
By following these standard guidelines, industry players can promote sustainable digital content distribution that respects intellectual property rights without sacrificing usability and accessibility.
Related Standards
- ISO/IEC 23078 series: Other parts of this series provide detailed technical specifications and implementation guidelines for DRM technologies in digital publishing.
- EPUB Open Standard: Defines interoperable formats for digital publications widely used in conjunction with DRM solutions.
- ISO Online Browsing Platform and IEC Electropedia: Terminology databases ensuring consistent use of technical terms related to digital rights management.
- GDPR and data protection regulations: Relevant to privacy aspects in watermarking and DRM implementations where personal data is processed or embedded.
By adhering to ISO/IEC 23078-1:2024, stakeholders in the digital publishing industry can apply vendor-neutral, effective copyright protection techniques tailored to diverse use cases, balancing rights enforcement with end-user accessibility and convenience. This promotes a fair, secure, and user-friendly digital content ecosystem.
Open preview (PDF)Information technology — Specification of digital rights management (DRM) technology for digital publications — Part 1: Overview of copyright protection technologies in use in the publishing industry
