IEC 62766-7:2017

Overview

IEC 62766-7:2017 defines consumer terminal functions for secure access to IPTV and open‑internet multimedia services, focusing on authentication, content protection and service protection. The standard specifies terminal- and gateway-centric mechanisms for protecting content and services, and details user identification, authentication, authorisation and service access protection required for modern IPTV/OTT deployments.

Key topics and technical requirements

• Content and service protection
  • Terminal-centric and gateway‑centric protection models, covering interfaces between Consumer Service Protection Gateways (CSPG/CSP-T) and client devices.
  • Requirements for encrypted content delivery, licence acquisition and licence evaluation flows.
• Digital Rights Management (DRM) support
  • Integration with DRM technologies (e.g., Marlin referenced in the document) and handling of DRM control information and DRM messages.
  • Protected file formats, content encryption sequences and MPEG-2 transport stream protection considerations.
• Conditional access and transport protection
  • Interfaces and examples for CI+ and DTCP‑IP based gateway deployments, including session setup and teardown examples.
• User identification, authentication and authorisation
  • Authentication mechanisms such as HTTP basic/digest, network‑based and web‑based authentication, GBA and IMS/AKA flows for device/user registration.
  • Session management and single sign‑on methods (cookies, URL parameters, SAML Web‑SSO).
• Service access protection architectures
  • Co‑located vs standalone Service Access Agents (SAA), redirection flows and common interface requirements.
• Operational features
  • Forced play‑out using media zones, parental control examples, VoD and live streaming workflows; informative XML schemas and message examples in annexes.

Practical applications and who uses this standard

IEC 62766-7:2017 is practical for organizations implementing secure IPTV and hybrid OTT services:

• Broadcasters and IPTV operators implementing content protection, subscriber authentication and pay‑per‑view/VoD security.
• Consumer device manufacturers (set‑top boxes, smart TVs, STB software vendors) ensuring interoperability with DRM, CI+ and DTCP‑IP gateways.
• Middleware and DRM vendors designing licence acquisition, content encryption/decryption and DRM data exchange.
• System integrators and network operators deploying service access protection, single sign‑on and IMS/GBA authentication flows.

Related standards

• Other parts of the IEC 62766 series (consumer terminal functions for IPTV/open internet multimedia).
• Industry protocols and technologies referenced for interoperability: CI+, DTCP‑IP, Marlin, SAML, IMS/AKA, HTTP authentication.

Keywords: IEC 62766-7:2017, IPTV security, content protection, DRM, authentication, service protection, CI+, DTCP‑IP, Marlin, service access protection.