Overview
Content protection is a core requirement of our licensing agreements with studios, broadcasters, music labels, and independent creators. We implement a multi-layered approach combining encryption, watermarking, access controls, and monitoring to prevent unauthorized copying, redistribution, and piracy.
Digital Rights Management (DRM)
All video content on Borok TV is delivered via encrypted HTTP Live Streaming (HLS) with AES-128 encryption. Our DRM implementation includes:
- Encrypted HLS (AES-128): Each video rendition (144p through 4K) is encrypted with a unique AES-128 key. Keys are rotated per content item and delivered via secure key servers.
- Key Delivery:Decryption keys are served over HTTPS with short-lived tokens bound to the viewer's session. Keys are not stored on the client device.
- Hardware DRM Support: On supported devices (Android TV, mobile apps), we leverage platform DRM (Widevine L1/L3, PlayReady) for hardware-backed key protection and secure video path.
- License Policies: DRM licenses enforce rental windows (e.g., 48-hour viewing period), concurrent stream limits, output protection (HDCP), and screen capture prevention.
Forensic Watermarking
Every video transcoded on Borok TV receives a forensic watermark embedded in the video stream. This watermark is:
- Invisible to viewers: Imperceptible during normal playback
- Unique per session: Contains encrypted session identifiers (viewer ID, timestamp, device fingerprint)
- Robust: Survives re-encoding, cropping, scaling, and common piracy transformations
- Traceable: If pirated content appears online, the watermark can be extracted to identify the source account and session
Watermarking is applied globally via the admin settings and is mandatory for all new transcodes. Existing content can be retroactively watermarked using the backfill tool in the admin panel.
Encrypted Offline Downloads
Borok TV supports offline viewing with strong content protection:
- Client-Side Encryption: Downloaded media is encrypted in the browser using AES-GCM (Web Crypto API) with a unique per-download key. The plaintext never touches disk unencrypted.
- Device Binding: Downloads are tied to the originating browser/profile. They cannot be transferred to other devices or browsers.
- License Enforcement:Downloads respect the content's license window and the user's subscription status. Expired licenses or cancelled subscriptions render downloads unplayable.
- Quality Control: Download quality can be capped (SD/HD/4K) per content item or subscription tier. Maximum resolution is configurable in the admin panel.
- Download Restrictions:Rights holders can disable downloads per title via the "Download Allowed" toggle in the content management admin. Default is disabled for licensed content.
Access Controls & Geographic Restrictions
Playback is governed by multiple access control layers:
- Geo-Blocking: IP-based geographic enforcement at playback start. Uses commercial geo-IP databases updated monthly. VPN/proxy detection via IP reputation and behavioral analysis.
- License Window Enforcement: Content is automatically hidden/unpublished outside its licensed start/end dates. No manual intervention required.
- Subscription & Rental Validation: Real-time entitlement checks before playback. Rental expiry (e.g., 48 hours from first play) enforced server-side.
- Concurrent Stream Limits: Per-plan device limits enforced via session leases. Exceeding limits blocks new playback until an existing session ends.
- Age & Content Rating Gates: Parental controls and age verification for mature content.
Screen Capture & Recording Prevention
- Web (Desktop): Encrypted Media Extensions (EME) with HDCP enforcement on supported browsers. Canvas/video element capture blocked via CSS and JS protections.
- Mobile Apps (Android/iOS): FLAG_SECURE window flag prevents screenshots and screen recording. DRM secure video path used where available.
- Android TV: Widevine L1 with hardware-backed secure video path. HDCP 2.2 required for 4K content.
Anti-Piracy Monitoring & Enforcement
Borok TV actively monitors for piracy and unauthorized distribution:
- Watermark Forensics: Automated scanning of known piracy sites and social platforms for watermarked content. Extracted watermarks traced to source accounts.
- DMCA Takedown: Streamlined process for rights holders to report infringement. Dedicated team processes valid notices within 5 business days. See ourDMCA Takedown page.
- Account Sanctions: Verified piracy results in account suspension, device blocking, and legal referral where appropriate.
- Industry Cooperation: Participation in anti-piracy coalitions and information sharing with content protection partners.
Content Protection for Creators
Creator Studio uploads receive the same protection pipeline:
- Automatic transcoding to encrypted HLS with DRM
- Forensic watermarking applied to all renditions
- Download controls set by creator (default: disabled)
- Geo-restrictions configurable per upload
- Revenue protection via encrypted playback and session tracking
Compliance & Standards
Our content protection measures align with industry standards and partner requirements:
- MovieLabs Enhanced Content Protection (ECP) guidelines
- Studio DRM requirements (Widevine, PlayReady, FairPlay)
- Music industry standards (IFPI, RIAA anti-piracy best practices)
- Indian regulatory framework (IT Act, Copyright Act, intermediary guidelines)
Limitations & Transparency
No content protection system is 100% impenetrable. Determined attackers with sufficient resources may circumvent technical measures. Borok TV's approach is to:
- Raise the bar sufficiently to deter casual piracy
- Enable forensic tracing for enforcement action
- Respond rapidly to identified breaches
- Continuously update protections as new threats emerge
We do not employ rootkits, kernel drivers, or invasive monitoring on user devices. All protections operate within standard browser/app sandbox environments.
This page describes Borok TV's content protection measures as of the date above. Technologies and implementations may evolve. This information is for transparency and does not create any contractual obligations or warranties.
