1. 4K

2. Contents Context Online required? UltraViolet connection

3. Context Devices coming out in 2013 Can we limit this to hardware devices only? No software 4K clients sitting on other devices? Suggest – yes Content delivery – Disc or online or both – 4K broadcast may use same file format but protection can be broadcast-specific File format should not be linked to the physical medium, as BD is

4. Online required? (1) Speed of device revocation and update in BD is an issue Can we require that 4K players must be able to go online to authenticate themselves? – 4K players/screens are not portable devices! – 4K users will have internet at home – So only need to think about cases where the internet connection is down 4K device could have its own connectivity in the form of an integrated M2M GSM/3G device

5. Online required? (2) Online connection for every play should NOT be required – Local internet may be down But first registration of a device should need connectivity, and first playing of a particular title For some content, can we require that some of the content comes in online, and is protected with a session-unique key, derived from an online authentication of the device?

6. UltraViolet/HD connection An UltraViolet version of the title could always be bundled with the title And/or, for delivery on disc, an HD AACS version always on disc Then the user will always have an HD version at least, even if 4K security prevent 4K viewing And we then encourage people to buy 4K even if they don’t have a 4K player yet For online delivery of content, we could require that an UltraViolet DRM be used – Client must support one of them and server must support all (maybe just specify a subset of the UV approved DRMs)

7. Blu-ray similarities and differences Want to have traitor-tracing and other features from AACS AACS binds the file to the disc via areas on the disc that can only be read by authorised players – Do we want to have that?

8. Other stuff Time to have some updated robustness rules Let’s start from scratch

9. Worth looking at state of the art on integrated M2M Do not want to invent a new DRM, need to find an existing one that meets our CT: the core of this is a service, that is active and montorring Do we have a single vendor for the security solution or open system with C&R Rules? Compliance is a mixture of:

10. Device compliance Self-certification has failed and should not be relied upon here – We have a number of 3 rd party houses that must be used – Licensees must also commit to active monitoring, and we must incentivise them to do this well Use NDS device-dependent encryption for watermarking of device?