My friend has been working on few lectures and study material from past few years and now he want to sell his content. He is worried about his content being stolen or being used without purchase. Most of his customers are regional person to whom he will give the content manually. He as following requirement -

  1. User won't be able to copy paste content (Video lectures and documents) to their PC.
  2. Only 1 person can use it on one PC.
  3. Content should self expire in 1 year.

Is there any way I can suggest him? I don't want his hard work go in vain. I can understand that this requirement is quite difficult to achieve but I would appreciate any suggestion which can assist him.

  • 4
    Your question is similar to this one superuser.com/questions/869838/drm-a-custom-video but with additional requirements. IMO, not doable. – GabrielaGarcia Nov 2 '18 at 11:27
  • 2
    The best option would be to create a website with video streaming that can't be downloaded and restricted access (username/password). Even that can be easily bypassed by advanced users but should be enough as a deterrent for regular folks. – GabrielaGarcia Nov 2 '18 at 11:33
  • 1
    The way to go is to make it an online course, or something of the sort – rahuldottech Nov 2 '18 at 11:34
  • It is impossible. Unless you go for some kind of DRM copy protection, which means that you have a viewer with some kind of verification, it is going to be impossible to prevent. This is the same problem game developers face, and even their games copy protection get cracked eventually. Not doable. Even if you use an online source, it can still be downloaded and spread that way if one really wants. – LPChip Nov 2 '18 at 12:12

Since you can't prevent users from copying files from a USB drive the best you can do is make them useless to them.

To that end:

  1. Each file is encrypted with a different key and different per USB stick.
  2. Obviously 2048 bit encryption and etc
  3. Software provided that phones home to a server to check whether the user is still eligible for access to the content. Username and password required of course.

You will have to have a custom viewer that has access to said decryption keys which you will have to use and immediately destroy. Fetching new copies from the server each time a file is required. When the keys is in RAM the RAM its in has 2 levels of encryption so even if the RAM is dumped its meaningless. Obviously change the random decryption keys of the RAM every 5 minutes for added difficulty.

This is a lot of work to implement.

Even then a persistent hacker might be able to man-in-the-middle and get decryption keys. If a breach is detected you can void the decryption keys. A hacker could use screen recording software, or etc to re-record the material and OCR on the text.

However, you have dramatically raised the difficult for both you and the hacker.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.