secure sis file contents

[BlueLava]

Hi,

Here's something I don't understand.

I package several items within a sis file, including my application and content in the form of sound files. If I protect the sound files as forward lock (.dm) files and then create the sis file, when forwarded to the phone and installed, the files remain .dm files. They're never unpackaged and the rights are not checked.

If I secure the sis file and not the contents, when the sis file is installed and the contents placed in folders, the individual files are not secure.

So, how do I secure the individual contents of sis files?

Thanks for any help offered.

[antonypr]

Why don't you use "separate delivery" for your content?

Antony

[BlueLava]

Unfortunately that's not what separate delivery is for. The FAQ states:


"Separate delivery is similar to combined delivery but with added security. Content is delivered as encrypted files separately from usage rights, which are delivered via a different channel. Separate delivery also enables the superdistribution business model, in which DRM-protected content can be sent from mobile device to mobile device, for example sending the content as part of an MMS to a friend; the content receiver can then "acquire a license" to get a preview or buy the content. This makes viral marketing a potentially powerful concept."


Separate delivery just separates the encrypted file from the rights, rather than packaging them together. And this only works with certain phones. I need to support older phones as well.

A sis file installs several files, applications and other items. My question is how to secure the contents of a sis file.

Thanks for the try, though.

[antonypr]

In that case, I don't know the solution for your problem. Usually forward lock content is downloaded from a server, then it is encrypted when downloaded to the phone. Not sure how to encrypt this in a .sis file....

Antony

[BlueLava]

It would be a huge engineering mistake if it's not possible to secure the contents of sis files.

[antonypr]

That's why we have "separate delivery" to support that.
But as you said you don't want to go this way because you want to support older phones.

Antony

[antonypr]

Just one additional comment to your use case. As far as I know, forward lock (.dm) is intended for downloaded content only. If you want to pack the content in a .sis file, then you already go outside the boundary of forward lock mechanism. Your use case can be considered as "super distribution" method -> thus you need separate delivery.

I have the following explanation from OMA DRM 1.0 specification:
"Due to the inherent openness of certain client / server architectures, it is difficult (if not impossible) to implement Forward-Lock and Combined Delivery via email distribution and enforce the intent of the OMA DRM V1 standard on devices. Email is not considered an OMA DRM Message transport mechanism."

Antony

[BlueLava]

Hmm. Well I'm using HTTP download and not email. I don't want users to forward the sis file or the contents, which contain copyright material not owned by myself.

[phoneynk]

Have u checked combined delivery and separate delivery on sis(Symbian Installer)
Please let me know

If yes, is it only for installation file or actual application

[Jemch]

Again me, still without answer. How can I apply the Copyright permission like original ringtones that doesn't let to be extracted via dku-5 cable, nokia pc suite (files explorer), this sample:
Name: Acceleration.mid
Size: 17.1KB
Created: 1 Oct 2004 10:05
Duration: unavailable
Format: MIDI
Copyright: Protected. This is what I want!!!

[phoneynk]

Again me, still without answer. How can I apply the Copyright permission like original ringtones that doesn't let to be extracted via dku-5 cable, nokia pc suite (files explorer), this sample:
Name: Acceleration.mid
Size: 17.1KB
Created: 1 Oct 2004 10:05
Duration: unavailable
Format: MIDI
Copyright: Protected. This is what I want!!!

u can use NMIT Nokia Mobile Internet Toolkit

[BlueLava]

Sorry, I seem to have lost track of this thread.

I have checked combined delivery and separate delivery. My problem has not been resolved. I can secure a sis file with drm, but as soon as the contents are installed on the phone, they are insecure.

[Jemch]

I can't use NMIT to do that!!!