Login
      Contents x
      Authenticate content
        • Print
        • PDF
        Contents

        Authenticate content

          • Print
          • PDF
          Article Summary

          Available in Classic and VPC

          Content authentication describes how to apply Secure Token to play source by editing the script code and how to set MultiDRM.

          Secure Token

          You can apply Secure Token to playback source and support OneTimeUrl as the token property. Additionally, you can replace Secure Token seamlessly during video playback as the player.tokenChange property.

          Note

          For more information on Secure Token, see CDN+ user guide.

          Examples are as follows:

          // Video (MP4)
new ncplayer('video1', {
  autostart: true,
  playlist: [
    {
      file: 'https://CDNdomain/example_video_01.mp4',
    },
  ],
  token: 'token=st=1675320871~exp=1675320901~acl=....', // Secure Token
});

// Token replacement
player.tokenChange('token=st=1675320871~exp=1675320901~acl=....') // Replace with a new token during playback

          MultiDRM

          You can configure MultiDRM as the playlist.drm property. Examples are as follows:

          let player;

document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('video1',{
        playlist: [
            {
                drm:{
                    'com.apple.fps':{
                        certificateUrl: '{Certificate URL}',
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'Content-type': 'application/x-www-form-urlencoded',
                            'pallycon-customdata-v2':'{Token for FairPlay}'
                        },
                        src : '{hls url}'
                    },
                    'com.widevine.alpha':{
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'pallycon-customdata-v2':'{Token for Widevine}'
                        },
                        src : '{dash url}'
                    },
                    'com.microsoft.playready':{
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'pallycon-customdata-v2':'{Token for PlayReady}'
                        },
                        src : '{dash url}'
                    },
                },
                poster: 'https://nnbkegvqsbcu5297614.cdn.ntruss.com/profile/202207/ae73f3a32b49205fafdc3303c7f0c0b8.png',
                description: {
                    title: "NAVER Cloud",
                    create_at: "2022-12-31",
                    profile_name: "Naver Cloud Platform",
                    profile_image: "https://nnbkegvqsbcu5297614.cdn.ntruss.com/profile/202207/ae73f3a32b49205fafdc3303c7f0c0b8.png
                },
            }
        ],
        controlBtn: {
            play: true,
            fullscreen: true,
            volume: true,
            times: true,
            pictureInPicture: true,
            setting: true,
            subtitle: true
        },
        autostart: false
    });
});
          Note

          • To use MultiDRM, you should configure two channels in the VOD Station service to support both HLS and DASH.

          • MultiDRM works only in the HTTPS environment where the SSL/TSL is applied.

          • MultiDRM supports the Widevine, PlayReady, and FairPlay (FPS).

          • Video Player Enhancement service officially supports Pallycon MultiDRM.

          • To use the DRM features, you need a contract with an external DRM provider beforehand.

            • DRM type

              • Widevine: DRM technical standard provided by Google. It is encrypted with AES-128 method according to the Common Encryption standard.
              • PlayReady: DRM technical standard provided by Microsoft. It is encrypted with AES-128 method according to the Common Encryption standard.
              • FairPlay: DRM technical standard provided by Apple. It encrypts each HLS segment with Sample-AES method.

            • Support status

              BrowserWidevinePlayReadyFairPlay
              Internet Explorer (11+ on Windows 8.1+)XO
              (MPEG-DASH)
              		X
              Microsoft Edge (Windows 10+)XO
              (MPEG-DASH)
              		X
              Chrome (35+ on Windows 7.0+, 57+ on Android 4.4+)O
              (MPEG-DASH)
              		XX
              Firefox (47+ on Windows 7.0+)O
              MPEG=DASH
              		XX
              Safari (8+ on Mac OS 10.10+, 11.2+ on iOS 11.2+)XXO
              (HLS)

          • The Video Player Enhancement service automatically selects a right playback source (HLS or DASH) based on DRM supported by current browser.

          One Click Multi DRM

          You can apply DRM connected with the Video Player Enhancement and One Click Multi DRM services.
          You should view the Endpoint and Request headers to request FPS Certificate and license issue.

          Note
          • Connection with the One Click Multi DRM service is available from the Video Player Enhancement version 1.1.1 or later.
          • For Apple FairPlay, you must create the FPS Certificate and the license signature (X-NCP-APIGW-SIGNATURE-V2) respectively. For more information about signature creation, see Signature creation guide.

          FPS Certificate Requests (For Apple FairPlay)

          Request and Endpoint headers to request FPS Certificate are as follows:

          • Endpoint

            GET https://multi-drm.apigw.ntruss.com/api/v1/license/fairplay

          • Request header

            ItemRequired statusDescription
            X-NCP-REGION_CODEOService Region code in use
            • Korea: KR
            • Singapore: SGN
            • America: USWN
            • Japan: JPN
            • Hong Kong: HK
            • German: DEN
            X-NCP-IAM-ACCESS-KEYOAccess key ID issued by the portal or Sub Account
            X-NCP-APIGW-TIMESTAMPOElapsed time represents Millisecond from January 1, 1970 00:00:00 Universal Time Coordinated (UTC) and is considered invalid When the time difference with the API Gateway server is more than 5 minutes
            X-NCP-APIGW-SIGNATURE-V2OAs the signature encrypted with Access Key ID value and Secret Key, HMAC encoding algorithm uses HmacSHA256

          License issuance request (For FairPlay, Widevine, PlayReady)

          Request and Endpoint headers to request license issuance are as follows:

          • Endpoint

            POST https://multi-drm.apigw.ntruss.com/api/v1/license

          • Request header

            ItemRequired statusDescription
            X-DRM-TOKENOAn encrypted token value including the necessary data for issuing the One Click Multi DRM license.
            X-NCP-REGION_CODEOService Region code in use
            • Korea: KR
            • Singapore: SGN
            • America: USWN
            • Japan: JPN
            • Hong Kong: HK
            • German: DEN
            X-NCP-IAM-ACCESS-KEYOAccess key ID issued by the portal or Sub Account
            X-NCP-APIGW-TIMESTAMPOElapsed time represents Millisecond from January 1, 1970 00:00:00 Universal Time Coordinated (UTC) and is considered invalid When the time difference with the API Gateway server is more than 5 minutes
            X-NCP-APIGW-SIGNATURE-V2OAs the signature encrypted with Access Key ID value and Secret Key, HMAC encoding algorithm uses HmacSHA256

          Example

          The examples for Apple FairPlay and Widevine/PlayReady to apply One Click Multi DRM are as follows:

          • Apple FairPlay
            document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('myElement',{
        playlist: [
            {
                drm:{
                    'com.apple.fps':{
                        certificateUri: '{FPS Certificate Endpoint}',
                        certificateRequestHeader:{
                            'X-NCP-REGION_CODE': 'KR',
                            'X-NCP-IAM-ACCESS-KEY': accessKey,
                            'X-NCP-APIGW-TIMESTAMP': timestamp,
                            'X-NCP-APIGW-SIGNATURE-V2': signature,		 
                        },
                        licenseUri : '{License Endpoint}',
                        licenseRequestHeader:{
                            'X-DRM-TOKEN': '{One Click Multi DRM FPS TOKEN}',
                            'X-NCP-REGION_CODE': 'KR',
                            'X-NCP-IAM-ACCESS-KEY': accessKey,
                            'X-NCP-APIGW-TIMESTAMP': timestamp2,
                            'X-NCP-APIGW-SIGNATURE-V2': signature2,		 
                        },
                        src : 'http://example.com/index.m3u8'
                    }
                },
                poster: 'http://example.com/myVideoThumb.png',
            }
        ],
        autostart: true
    });
});
          • Widevine/PlayReady
            document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('myElement',{
        playlist: [
            {
                drm:{
                    'com.widevine.alpha':{
                        licenseUri : '{License Endpoint}',
                        licenseRequestHeader:{
                            'X-DRM-TOKEN': '{One Click Multi DRM WIDEVINE TOKEN}',
                            'X-NCP-REGION_CODE': 'KR',
                            'X-NCP-IAM-ACCESS-KEY': accessKey,
                            'X-NCP-APIGW-TIMESTAMP': timestamp2,
                            'X-NCP-APIGW-SIGNATURE-V2': signature2,		 
                        },
                        src : 'http://example.com/index.mpd'
                    },
                    'com.microsoft.playready':{
                        licenseUri : '{License Endpoint}',
                        licenseRequestHeader:{
                            'X-DRM-TOKEN': '{One Click Multi DRM PLAYREADY TOKEN}',
                            'X-NCP-REGION_CODE': 'KR',
                            'X-NCP-IAM-ACCESS-KEY': accessKey,
                            'X-NCP-APIGW-TIMESTAMP': timestamp2,
                            'X-NCP-APIGW-SIGNATURE-V2': signature2,		 
                        },
                        src : 'http://example.com/index.mpd'
                    },
                poster: 'http://example.com/myVideoThumb.png',
                }
            }
        ],
        autostart: true
    });
});

          DRM test

          You can run a DRM test after writing script code.

          Note

          To run a DRM test, separate execution script(ncplayerDRM()) should be used, not execution script for default player(ncplayer()).

          // Use script code for DRM.
// When the DOM are completely loaded and executed, DRM runs without errors.
document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('video1',{});
})

          Widevine/PlayReady

          The script to test Widevine or PlayReady DRM is as follows:

          Note
          • The following information is needed to test Widevine or PlayReady DRM:
            • DASH playback source URL
            • Token value for DRM
          • You can test Widevine on the Chrome browser, and PlayReady on the Edge browser on Windows OS.
          document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('video1',{
        playlist: [
            {
                drm:{
                    'com.widevine.alpha':{
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'pallycon-customdata-v2':'{Token}'
                        },
                        src : '{dash url}'
                    },
                    'com.microsoft.playready':{
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'pallycon-customdata-v2':'{Token}'
                        },
                        src : '{dash url}'
                    },
                },
                poster: 'https://nnbkegvqsbcu5297614.cdn.ntruss.com/profile/202207/ae73f3a32b49205fafdc3303c7f0c0b8.png',
            }
        ],
    });
});

          FairPlay(FPS)

          The script to test FairPlay DRM is as follows:

          Note
          • FairPlay DRM test requires the following information:
            • HLS playback source URL
            • Certificate URL
            • Token value for DRM
          • You can test on the Safari browser on Mac OS.
          document.addEventListener('DOMContentLoaded',  async ()=> {
    await ncplayerDRM('video1',{
        playlist: [
            {
                drm:{
                    'com.apple.fps':{
                        certificateUrl: '{Certificate URL}',
                        licenseUri : 'https://license-global.pallycon.com/ri/licenseManager.do',
                        licenseRequestHeader:{
                            'Content-type': 'application/x-www-form-urlencoded',
                            'pallycon-customdata-v2':'{Token}'
                        },
                        src : '{hls url}'
                    },
                },
                poster: 'https://nnbkegvqsbcu5297614.cdn.ntruss.com/profile/202207/ae73f3a32b49205fafdc3303c7f0c0b8.png',
            }
        ],
    });
});
          Was this article helpful?
          What's Next
          Change password!
          Changing your password will log you out immediately. Use the new password to log back in.
          Change profile
          Success!
          First name must have atleast 2 characters. Numbers and special characters are not allowed.
          Last name must have atleast 1 characters. Numbers and special characters are not allowed.
          Enter a valid email
          Enter a valid password
          Your profile has been successfully updated.
          Logout