And Can Revoke in Milliseconds.
Multi-DRM licensing, forensic watermarking, per-scene protection levels, and mid-stream revocation -- all managed through a single API at the relay layer.
Single license request, automatic DRM selection based on device capabilities. No client-side logic needed.
Google's DRM for the broadest device coverage. Hardware-backed L1 for premium content, software L3 for standard.
Apple's DRM with hardware-level security across the entire ecosystem. Required for Safari and all Apple devices.
Microsoft's DRM for Windows, Xbox, and enterprise deployments. SL3000 hardware security for premium 4K content.
Every stream is wrapped in four independent layers. Defeat one and three still stand.
Content encrypted at segment level. Keys rotated per-event or per-interval.
Device-specific license with output protection, HDCP enforcement, and expiry.
Invisible per-session watermark. Leaked content traced to exact viewer.
License revoked in <100ms. Stream terminates without client cooperation.
No propagation delay between payment and protection. Purchase event triggers DRM license provisioning atomically.
No propagation delay. No webhook race conditions. No "please wait" screens. The relay has the license before the player asks for it.
Pre-game filler doesn't need hardware DRM. The main event does. V100 adjusts protection levels automatically per scene.
Studio interviews, pre-show analysis. Standard protection sufficient. Broader device compatibility.
The fight, the game, the concert. Maximum protection. Hardware-backed decryption required. HDCP enforced. Screen capture blocked on compliant devices.
Post-show analysis, replays. Relaxed protection. May allow clips for social sharing.
{
"scenes": [
{ "label": "pre-game", "start": "00:00:00", "end": "01:00:00", "drm_level": "L3", "hdcp": false },
{ "label": "main-event", "start": "01:00:00", "end": "04:00:00", "drm_level": "L1", "hdcp": "2.2" },
{ "label": "post-game", "start": "04:00:00", "end": "05:00:00", "drm_level": "L3", "hdcp": false }
]
}
Invisible, unique watermark embedded per session. Leaked content is traced to the exact viewer, device, and timestamp.
Watermark survives re-encoding, cropping, and screen recording. Robust against cam-rip, transcoding, and resolution changes.
In under 100 milliseconds. No waiting for the current segment to finish. No relying on client-side honor system.
Content keys rotate on a configurable interval. Compromised keys expire automatically. Zero viewer disruption.
New content encryption key generated at each rotation interval (default: 10 minutes)
Relay pre-distributes next key to authorized sessions before rotation boundary
Previous key expires. Any session that missed renewal must re-authenticate
Revoked sessions never receive the next key -- automatic enforcement
{
"stream_id": "live-boxing-championship",
"key_rotation": {
"enabled": true,
"interval_minutes": 10,
"pre_delivery_seconds": 30,
"on_compromise": "immediate_rotate",
"algorithm": "AES-128-CTR",
"key_derivation": "HKDF-SHA256"
}
}
Full lifecycle management: license provisioning, watermarking, revocation, and key rotation.
/api/v1/drm/license
Issue a DRM license. Auto-selects Widevine/FairPlay/PlayReady based on device. Returns encrypted license blob.
/api/v1/drm/revoke
Revoke a DRM license mid-stream. Immediate relay-level enforcement. Accepts session_id or account_id.
/api/v1/drm/protection-policy
Set per-scene protection levels. Define DRM tier (L1/L3), HDCP requirements, and output restrictions per time window.
/api/v1/drm/watermark/analyze
Upload a suspected pirated sample for forensic watermark extraction. Returns viewer identity, device, and timestamp.
/api/v1/drm/key-rotation
Configure key rotation policy for a stream. Interval, pre-delivery window, and compromise-response behavior.
/api/v1/drm/license/{session_id}/status
Check license status for a session. Returns DRM type, protection level, expiry, watermark ID, and key rotation state.
/api/v1/drm/key-rotation/emergency
Trigger immediate key rotation for a stream. All active sessions receive new key. Non-renewed sessions are terminated.
DRM license issuance measured at the relay layer. 1,170 nanoseconds per license including watermark payload injection. No external license server round-trip.
Multi-DRM, forensic watermarking, mid-stream revocation, and per-scene protection -- one API.